??4_Init_locks@std@@QAEAAV01@ABV01@@Z
Static task
static1
Behavioral task
behavioral1
Sample
43c028f05fe32fae527f52f8c535fc01b9b32b7312b9a0b197938b8054d07e5f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
43c028f05fe32fae527f52f8c535fc01b9b32b7312b9a0b197938b8054d07e5f.exe
Resource
win10v2004-20220812-en
General
-
Target
43c028f05fe32fae527f52f8c535fc01b9b32b7312b9a0b197938b8054d07e5f
-
Size
767KB
-
MD5
46853e500daefdc555e6417ddc2c05d0
-
SHA1
be2dc3f60847c40fb2ce77855a2df3d7593652be
-
SHA256
43c028f05fe32fae527f52f8c535fc01b9b32b7312b9a0b197938b8054d07e5f
-
SHA512
78ddadca640c0990cb9edb9ddb22188c6dbe833da08db72b70852743a4c46407301da4f88acd7fd03958e57f635c80af6d40712a7fc5b594eb2aaceb64abd920
-
SSDEEP
12288:K92luYv+bezHvkyddpuWf9cGccpccUccL7cc2ccOcc9cc4VcbcoHcIyoPdlOgBx:KWBzHvXh5f9cGccpccUccL7cc2ccOccN
Malware Config
Signatures
Files
-
43c028f05fe32fae527f52f8c535fc01b9b32b7312b9a0b197938b8054d07e5f.exe windows x86
1f5d71d95fe2ec9d067c9d09c803d8d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
basedll
?ToDocument@TiXmlNode@Xml@Base@@UBEPBVTiXmlDocument@23@XZ
?SetAttribute@TiXmlElement@Xml@Base@@QAEXPBDH@Z
?FirstChildElement@TiXmlNode@Xml@Base@@QAEPAVTiXmlElement@23@PBD@Z
?GetCurrentProcessPath@FileMisc@Base@@YAHPA_WK@Z
?Attribute@TiXmlElement@Xml@Base@@QBEPBDPBD@Z
?NextSiblingElement@TiXmlNode@Xml@Base@@QAEPAVTiXmlElement@23@PBD@Z
?Attribute@TiXmlElement@Xml@Base@@QBEPBDPBDPAH@Z
??1TiXmlElement@Xml@Base@@UAE@XZ
??0TiXmlElement@Xml@Base@@QAE@PBD@Z
?Accept@TiXmlDocument@Xml@Base@@UBE_NPAVTiXmlVisitor@23@@Z
??1TiXmlPrinter@Xml@Base@@UAE@XZ
??0TiXmlPrinter@Xml@Base@@QAE@XZ
?ZlibRC4DeFileToBuf@Crypt@Base@@YGHPB_WPAPAEKPAEHPAK@Z
?ZlibRC4EnBufToFile@Crypt@Base@@YGHPAEKPB_W0H@Z
?GetSpecialPath@FileMisc@Base@@YAHPA_WH@Z
?Send@CIPCClient@IPC@Base@@QAEXHPBDI@Z
??0CIPCClient@IPC@Base@@QAE@XZ
?DeleteFileEx@FileMisc@Base@@YAHPB_W@Z
?as_int@JSONNode@@QBEJXZ
?OutputDebugInfoEx@Log@Base@@YAXHPBD0IH0ZZ
?as_string@JSONNode@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?SetAttribute@TiXmlElement@Xml@Base@@QAEXPBD0@Z
?name@JSONNode@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?Close@CIPCClient@IPC@Base@@QAEXXZ
?AsynConnect@CIPCClient@IPC@Base@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1JSONNode@@QAE@XZ
?IsFileExist@FileMisc@Base@@YAHPB_W@Z
?parse@Libjson@Base@@YA?AVJSONNode@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?end@JSONNode@@QAE?AUiterator@1@XZ
?begin@JSONNode@@QAE?AUiterator@1@XZ
?getint@Sqlite3Reader@Database@Base@@QAEHH@Z
?read@Sqlite3Reader@Database@Base@@QAE_NXZ
??1Sqlite3Reader@Database@Base@@QAE@XZ
?executenonquery@Sqlite3Command@Database@Base@@QAEXXZ
?executereader@Sqlite3Command@Database@Base@@QAE?AVSqlite3Reader@23@XZ
?bind@Sqlite3Command@Database@Base@@QAEXHH@Z
?bind@Sqlite3Command@Database@Base@@QAEXH_J@Z
?bind@Sqlite3Command@Database@Base@@QAEXHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??1Sqlite3Command@Database@Base@@QAE@XZ
??0Sqlite3Command@Database@Base@@QAE@AAVSqlite3Connection@12@PBD@Z
?executenonquery@Sqlite3Connection@Database@Base@@QAEXPBD@Z
?close@Sqlite3Connection@Database@Base@@QAEXXZ
??1Sqlite3Connection@Database@Base@@QAE@XZ
??0Sqlite3Connection@Database@Base@@QAE@PB_W@Z
?getstring16@Sqlite3Reader@Database@Base@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?getint64@Sqlite3Reader@Database@Base@@QAE_JH@Z
?GetGuidW@GUID@Base@@YGHPA_WH@Z
?ToComment@TiXmlNode@Xml@Base@@UBEPBVTiXmlComment@23@XZ
?Clone@TiXmlElement@Xml@Base@@UBEPAVTiXmlNode@23@XZ
?ToUnknown@TiXmlNode@Xml@Base@@UBEPBVTiXmlUnknown@23@XZ
?Print@TiXmlElement@Xml@Base@@UBEXPAU_iobuf@@H@Z
?ToText@TiXmlNode@Xml@Base@@UBEPBVTiXmlText@23@XZ
?Parse@TiXmlElement@Xml@Base@@UAEPBDPBDPAVTiXmlParsingData@23@W4TiXmlEncoding@23@@Z
?ToDeclaration@TiXmlNode@Xml@Base@@UBEPBVTiXmlDeclaration@23@XZ
?Accept@TiXmlElement@Xml@Base@@UBE_NPAVTiXmlVisitor@23@@Z
?ToDocument@TiXmlNode@Xml@Base@@UAEPAVTiXmlDocument@23@XZ
?ToComment@TiXmlNode@Xml@Base@@UAEPAVTiXmlComment@23@XZ
?ToUnknown@TiXmlNode@Xml@Base@@UAEPAVTiXmlUnknown@23@XZ
?ToText@TiXmlNode@Xml@Base@@UAEPAVTiXmlText@23@XZ
??0TiXmlDocument@Xml@Base@@QAE@XZ
?ToDeclaration@TiXmlNode@Xml@Base@@UAEPAVTiXmlDeclaration@23@XZ
?LoadFile@TiXmlDocument@Xml@Base@@QAE_NPB_WW4TiXmlEncoding@23@@Z
?SaveFile@TiXmlDocument@Xml@Base@@QBE_NPB_W@Z
?ToElement@TiXmlElement@Xml@Base@@UBEPBV123@XZ
?ToElement@TiXmlElement@Xml@Base@@UAEPAV123@XZ
?LinkEndChild@TiXmlNode@Xml@Base@@QAEPAV123@PAV123@@Z
??1TiXmlDocument@Xml@Base@@UAE@XZ
?GetFileSizeEx@FileMisc@Base@@YAKPB_W@Z
?GetFileMD5@MD5@Base@@YGHPB_WPA_W@Z
?GetBufferMd5@MD5@Base@@YGHPBEHPA_W@Z
??1CIPCClient@IPC@Base@@QAE@XZ
?SafeLoadLibrary@Library@Base@@YAPAUHINSTANCE__@@PB_WH@Z
?SetNotify@CIPCClient@IPC@Base@@QAEHPAVCIPCClientMsgNotify@23@@Z
?OutputDebugInfoEx@Log@Base@@YAXHPBD0IHPB_WZZ
utilsdll
?SetSupplyID@Misc@Utils@@YAHH@Z
?GetSoftID@Misc@Utils@@YAIXZ
?GetInstallVer@Misc@Utils@@YAHPADK@Z
?GetModuleDirectory@Misc@Utils@@YAPA_WPA_WH@Z
?GetSupplyID@Misc@Utils@@YAHAAH@Z
?GetCrashCatcher@CrashCatcher@Utils@@YAPAVICrashCatcher@12@XZ
reportdll
GetReportMgr
kernel32
InterlockedExchangeAdd
PostQueuedCompletionStatus
FreeLibrary
LoadLibraryW
DeleteCriticalSection
Sleep
InitializeCriticalSection
WaitForSingleObject
Process32NextW
lstrcmpiW
CreateToolhelp32Snapshot
Process32FirstW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetDriveTypeW
DeviceIoControl
CreateFileW
GetModuleHandleW
GetProcessHeap
InterlockedCompareExchange
HeapAlloc
TlsSetValue
SetLastError
InitializeCriticalSectionAndSpinCount
CreateIoCompletionPort
GetQueuedCompletionStatus
HeapFree
SetWaitableTimer
TerminateThread
GetSystemTimeAsFileTime
WaitForMultipleObjects
TlsGetValue
QueueUserAPC
CreateWaitableTimerW
SleepEx
GetTempPathW
CreateMutexW
MoveFileExA
GetCurrentProcessId
ResetEvent
WideCharToMultiByte
MultiByteToWideChar
GetFileAttributesW
MoveFileW
lstrcpynW
CreateDirectoryW
GetCurrentProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
GetVersionExA
RaiseException
HeapSize
HeapReAlloc
HeapDestroy
TlsAlloc
TlsFree
CreateEventA
LeaveCriticalSection
GetThreadLocale
InterlockedExchange
EnterCriticalSection
GetLastError
CloseHandle
InterlockedDecrement
SetEvent
GetProcAddress
CreateEventW
InterlockedIncrement
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
ReleaseSemaphore
OpenEventA
ResumeThread
SystemTimeToFileTime
CreateWaitableTimerA
LocalFree
FormatMessageA
IsBadReadPtr
lstrlenW
WriteFile
GetLocalTime
GetACP
GetLocaleInfoA
GetModuleFileNameW
user32
UnregisterClassA
GetForegroundWindow
AttachThreadInput
FindWindowW
GetWindowThreadProcessId
IsWindow
BringWindowToTop
GetParent
CreatePopupMenu
TrackPopupMenu
GetMonitorInfoW
AppendMenuW
DestroyMenu
PostMessageW
SendMessageW
FindWindowExW
EnableWindow
GetCursorPos
LoadIconW
SetForegroundWindow
ShowWindow
PostQuitMessage
MonitorFromPoint
advapi32
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
GetExplicitEntriesFromAclW
GetNamedSecurityInfoW
ChangeServiceConfigW
ChangeServiceConfig2W
OpenSCManagerW
CreateServiceW
OpenServiceW
StartServiceW
CloseServiceHandle
QueryServiceStatus
QueryServiceStatusEx
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
Shell_NotifyIconW
ShellExecuteExW
ole32
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
CoLoadLibrary
CoGetInterfaceAndReleaseStream
CoInitializeEx
CoMarshalInterThreadInterfaceInStream
IIDFromString
CoFreeLibrary
oleaut32
SysFreeString
SysAllocStringByteLen
shlwapi
PathIsDirectoryW
PathFileExistsW
msvcp80
?allocate@?$allocator@D@std@@QAEPADI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V32@@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIPB_W@Z
?rbegin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$reverse_iterator@V?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@XZ
?at@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEAB_WI@Z
?push_back@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEX_W@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIABV12@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?uncaught_exception@std@@YA_NXZ
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
msvcr80
_invoke_watson
_controlfp_s
_itoa
_stricmp
_fileno
strerror
_wsplitpath_s
wcsncat_s
_snwprintf
_waccess
?_type_info_dtor_internal_method@type_info@@QAEXXZ
??3@YAXPAX@Z
atoi
_invalid_parameter_noinfo
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??2@YAPAXI@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
_purecall
??0exception@std@@QAE@ABQBDH@Z
wcsrchr
_beginthread
??_V@YAXPAX@Z
memcpy_s
memmove_s
iswspace
fread
fclose
_wfopen_s
??8type_info@@QBE_NABV0@@Z
towlower
_wtoi
vswprintf_s
wcscpy_s
_waccess_s
_vscwprintf
_itow_s
wcsstr
_wcsicmp
__RTDynamicCast
wcschr
malloc
free
_time64
_beginthreadex
srand
_gmtime64
sprintf_s
_wfopen
_localtime64
_localtime64_s
fwrite
wcsftime
ftell
fseek
rand
sprintf
fopen
_filelength
swscanf
swprintf_s
_wsplitpath
strncpy_s
wcsncpy_s
_vscwprintf_p
_vswprintf_p
_vsprintf_p
_vscprintf_p
tolower
__CxxFrameHandler3
memcpy
_snprintf
fflush
fprintf
__iob_func
_CxxThrowException
memset
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_crt_debugger_hook
ws2_32
recv
WSACloseEvent
WSACreateEvent
send
WSAStartup
WSACleanup
WSAGetLastError
socket
htons
gethostbyname
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
inet_addr
connect
ntohl
WSAEventSelect
closesocket
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
wininet
HttpOpenRequestW
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetCrackUrlW
HttpQueryInfoW
HttpSendRequestW
InternetReadFile
sensapi
IsNetworkAlive
Exports
Exports
Sections
.text Size: 484KB - Virtual size: 482KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 156KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE