6f20e786e960f995356a7be0d236af24c1ee6ad78ca6113f74c82ac1f6433911

Sharing

Copy URL

Twitter E-mail

General

Target

6f20e786e960f995356a7be0d236af24c1ee6ad78ca6113f74c82ac1f6433911
Size

580KB
MD5

d4e3d56ae946fce597476bb7a5fc7d75
SHA1

4da49bccb0e8c55b242b3a66d1b65cae21611e22
SHA256

6f20e786e960f995356a7be0d236af24c1ee6ad78ca6113f74c82ac1f6433911
SHA512

7a84e7a9a72e749de4e68ad8b60ceedda488a25b6205006bc7f04e8e8134a6036367056e75208b6ad78a4f2604e5785a11cae5b1674a0a35a387f0853e5a454b
SSDEEP

6144:x51rMsO2x9GxGtelvGSSlcv88BFhv98HgBnNGAxylvDTI3lv32m+2Hbc+E7sB98E:f53x4GTZcv88BHvtqJyBGk

Score

N/A

Malware Config

Signatures

Files

6f20e786e960f995356a7be0d236af24c1ee6ad78ca6113f74c82ac1f6433911
.dll windows x86

75e35252931988632af205b5b0d8a8d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imagelibrary

?GetBitDepth@CImageLeadTools@@QAEHPAG@Z
?SaveFile@CImageLibrary@@QAEJPAGPAVCImageLeadTools@@GF@Z
?Rotate@CImageLibrary@@QAEJPAVCImageLeadTools@@MG@Z
??1CImageLeadTools@@QAE@XZ
?Sharpen@CImageLibrary@@QAEJPAVCImageLeadTools@@G@Z
?Flip@CImageLibrary@@QAEJPAVCImageLeadTools@@F@Z
?Smooth@CImageLibrary@@QAEJPAVCImageLeadTools@@G@Z
?GetDIBData@CImageLeadTools@@QAEHPAPAUtDIB@@@Z
?ChangeIntensity@CImageLibrary@@QAEJPAVCImageLeadTools@@F@Z
?ReleaseDIBData@CImageLeadTools@@QAEHXZ
?ImageCreateDDB@CImageLibrary@@QAEJPAVCImageLeadTools@@PAPAUHBITMAP__@@PAPAUHPALETTE__@@@Z
?GetBytesPerRow@CImageLeadTools@@QAEHPAJ@Z
?ImageImportDDB@CImageLibrary@@QAEJPAUHBITMAP__@@PAUHPALETTE__@@PAVCImageLeadTools@@@Z
??0CImageLeadTools@@QAE@XZ
?LoadFile@CImageLibrary@@QAEJPAGPAVCImageLeadTools@@F@Z
?ChangeColorDepth@CImageLibrary@@QAEJPAVCImageLeadTools@@0GKPAKG@Z

framework

??0RPolyPolygon@@QAE@XZ
?PostRotateAboutPoint@R2dTransform@@QAEXMMM@Z
?Write@RStorage@@UAEXKPBE@Z
?Start@RChunkStorage@@QAE?AVRChunkSearcher@1@KE@Z
?GetPointCollection@RPolyPolygon@@QAEPAV?$RPoint@J@@XZ
?GetPointIndexCollection@RPolyPolygon@@QAEPAHXZ
??1PretzelError@@UAE@XZ
??0PretzelError@@QAE@W4EPretzelImportErrorSeverity@@G_N@Z
?Initialize@RBitmapImage@@UAEXG@Z
?GetHeightInPixels@RBitmapImage@@UBEKXZ
?GetWidthInPixels@RBitmapImage@@UBEKXZ
?RenderWithMask@RBitmapImage@@UAEXAAVRDrawingSurface@@AAVRBitmapImageBase@@ABV?$RRect@J@@@Z
?RenderWithMask@RBitmapImage@@UAEXAAVRDrawingSurface@@AAVRBitmapImageBase@@ABV?$RRect@J@@2@Z
?Render@RBitmapImage@@UAEXAAVRDrawingSurface@@ABV?$RRect@J@@1@Z
?Initialize@RBitmapImage@@UAEXAAVRDrawingSurface@@KK@Z
?UnlockImage@RBitmapImage@@UAEXXZ
?LockImage@RBitmapImage@@UAEXXZ
?GetSizeInLogicalUnits@RBitmapImage@@UBE?AV?$RSize@M@@XZ
?GetSystemHandle@RBitmapImage@@UBEKXZ
?GetAspectRatio@RBitmapImageBase@@UBEMXZ
??4RBitmapImage@@UAEXABVRImage@@@Z
?Paste@RBitmapImage@@UAEXABVRDataTransferSource@@I@Z
?Copy@RBitmapImage@@UBEXAAVRDataTransferTarget@@I@Z
?Write@RBitmapImage@@UBEXAAVRArchive@@@Z
?Read@RBitmapImage@@UAEXAAVRArchive@@@Z
?Render@RBitmapImage@@UAEXAAVRDrawingSurface@@ABV?$RRect@J@@@Z
?Initialize@RBitmapImage@@UAEXK@Z
??0RBitmapImage@@QAE@E@Z
??1RBitmapImage@@UAE@XZ
?GetSystemDPI@@YAJXZ
??0RSolidColor@@QAE@W4EColors@@@Z
??0RMBCString@@QAE@PBD@Z
??1RMBCString@@QAE@XZ
??1RComponentAttributes@@UAE@XZ
??1RPath@@UAE@XZ
??1RObject@@UAE@XZ
?CreateNewComponent@RComponentManager@@QAEPAVRComponentDocument@@ABVRMBCString@@PAVRDocument@@PAVRView@@ABVRComponentAttributes@@ABV?$RVectorRect@M@@E@Z
?m_gsApplicationGlobals@RApplication@@2PAVRApplicationGlobals@@A
??0RComponentAttributes@@QAE@XZ
?PreTranslate@R2dTransform@@QAEXMM@Z
??_7RPath@@6B@
??0R2dTransform@@QAE@XZ
??_7RObject@@6B@
?Define@RPath@@QAEEPAW4EPathOperator@@PBV?$RPoint@J@@@Z
??1RColor@@QAE@XZ
??0RColor@@QAE@ABV0@@Z
?GetSolidColor@RColor@@QBE?BVRSolidColor@@M@Z
?SetParentDocument@RComponentDocument@@QAEXPAVRDocument@@@Z
??1PretzelDefaultError@@UAE@XZ
?DontReport@PretzelDefaultError@@UAEXXZ
??0PretzelDefaultError@@QAE@ABVPretzelError@@PAVPretzelErrorCollection@@@Z
?_pIImageLibrary@@3PAVCImageLibrary@@A
??4RColor@@QAEABV0@ABV0@@Z
?GetComponentType@RComponentDocument@@QBEABVRMBCString@@XZ
??1RComponentCollection@@UAE@XZ
??0RComponentCollection@@QAE@ABV0@PAVRDocument@@AAEW4EWriteReason@@@Z
??0RComponentCollection@@QAE@XZ
??0RMBCString@@QAE@ABV0@@Z
?SetURL@RURL@@AAEXXZ
??4RMBCString@@QAEABV0@ABV0@@Z
?PreRotateAboutOrigin@R2dTransform@@QAEXM@Z
?MakeIdentity@R2dTransform@@QAEXXZ
?Decompose@R2dTransform@@QBEEAAM00@Z
??0R2dTransform@@QAE@ABV0@@Z
?GetBoundingRect@RComponentView@@QBEABV?$RVectorRect@M@@XZ
??1RChunkStorage@@UAE@XZ
??0RChunkStorage@@QAE@KPAE@Z
?CreateNewComponent@RComponentManager@@QAEPAVRComponentDocument@@ABVRMBCString@@PAVRDocument@@ABVRComponentAttributes@@E@Z
??5@YAAAVRArchive@@AAV0@AAVRMBCString@@@Z
??0RMBCString@@QAE@XZ
?SetSelectedChunk@RChunkStorage@@QAEXPAV1@@Z
?GetSelectedChunk@RChunkStorage@@QBEPAV1@XZ
??1RBufferStream@@UAE@XZ
??1RStorage@@UAE@XZ
?GetCurrentChunkBuffer@RChunkStorage@@QBEPAEAAK@Z
??0RChunkStorage@@QAE@PAVRStorage@@E@Z
??0RStorage@@QAE@PAVRStream@@@Z
??0RBufferStream@@QAE@K@Z
?IsFlippedVertical@RComponentView@@QBEEXZ
?IsFlippedHorizontal@RComponentView@@QBEEXZ
?GetTint@RComponentDocument@@QBEFXZ
?SelectParentChunk@RChunkStorage@@QAEXXZ
??6@YAAAVRArchive@@AAV0@ABVRMBCString@@@Z
??8RMBCString@@QBEEABV0@@Z
?ReleaseGlobalBuffer@@YAXPAE@Z
?EndPolygon@RPolyPolygon@@QAEXXZ
?AddPoint@RPolyPolygon@@QAEXABV?$RPoint@J@@@Z
?NewPolygon@RPolyPolygon@@QAEXXZ
?CalcPath@RPath@@QAEXABVR2dTransform@@AAPAV?$RPoint@J@@AAV?$RArray@H@@@Z
??1RPolyPolygon@@QAE@XZ
?SetTint@RComponentDocument@@QAEXFE@Z
?ReportException@@YAHK@Z
?SeekAbsolute@RStorage@@UAEXK@Z
?ThrowFileExceptionIfError@@YAXXZ
??_7RComponentAttributes@@6B@
??0RURL@@QAE@XZ
??_7RURL@@6B@
??5@YAAAVCArchive@@AAV0@AAVRURL@@@Z
??6@YAAAVCArchive@@AAV0@ABVRURL@@@Z
?Read@RColor@@AAEXAAVRArchive@@@Z
?Write@RColor@@ABEXAAVRArchive@@@Z
??0RArchive@@QAE@XZ
?GetPointIndexCount@RPolyPolygon@@QBEKXZ
?ThrowException@@YAXK@Z

pretzelimport

??1PretzelTranslationProgress@@UAE@XZ
??1PretzelRComponentDocumentConverter@@UAE@XZ
?ApplyComponentAttributes@PretzelComponentConverter@@MAEXPAVCPmwDoc@@AAVPretzelTranslationContext@@PAVRectPageObject@@@Z
??0PretzelComponentConverter@@QAE@XZ
??1PretzelComponentConverter@@UAE@XZ
?SetObjectHyperlink@PretzelRComponentDocumentConverter@@MAEXPAVCPmwDoc@@PAVPMGPageObject@@AAVPretzelTranslationContext@@@Z
?ScaleBackgroundTiles@PretzelRComponentDocumentConverter@@MAEXPAVRComponentView@@@Z
?ApplyComponentAttributes@PretzelRComponentDocumentConverter@@MAEXPAVCPmwDoc@@AAVPretzelTranslationContext@@PAVRectPageObject@@@Z
?GetBoxAndRotation@PretzelRComponentDocumentConverter@@MAEXPAVCPmwDoc@@AAUPBOX@@AANAAE@Z
?Convert@PretzelComponentConverter@@UAEPAVPMGPageObject@@PAVCPmwDoc@@FFAAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@@Z
??0PretzelRComponentDocumentConverter@@QAE@XZ
??1PretzelTranslationContext@@UAE@XZ
??0PretzelTranslationContext@@QAE@ABVCString@@PAVPretzelImporterInterface@@@Z
?CreateDestinationDoc@PretzelTranslator@@UBEPAVCPmwDoc@@AAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@@Z
?Translate@PretzelTranslator@@UBEPAVCPmwDoc@@AAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@@Z
??0PretzelTranslator@@QAE@XZ
??1PretzelTranslator@@UAE@XZ
?SetDocument@PretzelRComponentDocumentConverter@@QAEXPAVRComponentDocument@@@Z
?CreateDestinationDoc@PretzelDocTranslator@@UBEPAVCPmwDoc@@AAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@@Z
?Translate@PretzelDocTranslator@@UBEPAVCPmwDoc@@AAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@@Z
??0PretzelDocTranslator@@QAE@XZ
??1PretzelDocTranslator@@UAE@XZ
??0PretzelTranslationProgress@@QAE@XZ

pretzelimportwsd

?GetLayoutObjectIDs@CBLayoutContainer_WSD_@@UAEHPAV?$CArray@HH@@@Z
?GetRuntimeClass@CBException_WSD_@@UBEPAUCRuntimeClass@@XZ
??0CBException_WSD_@@QAE@XZ
?classCBLayoutRect_WSD_@CBLayoutRect_WSD_@@2UCRuntimeClass@@B
?classCBException_WSD_@CBException_WSD_@@2UCRuntimeClass@@B
?Serialize@CBObject_WSD_@@UAEXAAVCArchive@@@Z
??1CBException_WSD_@@UAE@XZ
??0CBObject_WSD_@@QAE@XZ
??1CBObject_WSD_@@UAE@XZ
?GetRuntimeClass@CBObject_WSD_@@UBEPAUCRuntimeClass@@XZ
?GetObjectAtPoint@CBLayoutContainer_WSD_@@UAEPAVCBLayoutObject_WSD_@@VCPoint@@@Z
?GetIDOfObjectAtPoint@CBLayoutContainer_WSD_@@UAEHVCPoint@@@Z
?GetObjectPointer@CBLayoutContainer_WSD_@@UAEPAVCBLayoutObject_WSD_@@H@Z
?AddLayoutObject@CBLayoutContainer_WSD_@@UAEXPAVCBLayoutObject_WSD_@@@Z
?Serialize@CBLayoutContainer_WSD_@@UAEXAAVCArchive@@@Z
?RemoveLayoutObject@CBLayoutContainer_WSD_@@UAEPAVCBLayoutObject_WSD_@@H@Z
?classCBLayoutContainer_WSD_@CBLayoutContainer_WSD_@@2UCRuntimeClass@@A
?classCBObject_WSD_@CBObject_WSD_@@2UCRuntimeClass@@A
?GetRuntimeClass@CBLayoutContainer_WSD_@@UBEPAUCRuntimeClass@@XZ
??_7CBTypedPtrList_WSD_@@6B@
??1CBLayoutContainer_WSD_@@UAE@XZ

mfc42

ord1781
ord1832
ord350
ord3663
ord1871
ord2801
ord1081
ord6400
ord3664
ord415
ord715
ord5620
ord5605
ord996
ord5823
ord1259
ord5440
ord6383
ord640
ord2450
ord1640
ord323
ord5450
ord6394
ord860
ord2841
ord858
ord882
ord2107
ord1876
ord2014
ord6395
ord5455
ord3298
ord5651
ord3126
ord2793
ord2955
ord2858
ord5652
ord5019
ord5106
ord4921
ord5003
ord4730
ord4669
ord4490
ord4345
ord4338
ord1729
ord4647
ord5022
ord4492
ord4512
ord4962
ord971
ord2058
ord4645
ord2548
ord5508
ord5956
ord4037
ord3268
ord4424
ord420
ord720
ord6329
ord4382
ord4388
ord2371
ord4493
ord5824
ord1265
ord1199
ord5446
ord4483
ord354
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord6021
ord6172
ord5873
ord5789
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord1270
ord1945
ord283
ord3626
ord2414
ord4133
ord4297
ord5788
ord472
ord6194
ord3619
ord1641
ord5832
ord6402
ord3521
ord2557
ord2754
ord3706
ord1200
ord939
ord4160
ord4129
ord1175
ord2884
ord4317
ord3693
ord3976
ord3692
ord1842
ord4242
ord2723
ord2390
ord3059
ord5100
ord5103
ord4467
ord4303
ord3350
ord5012
ord975
ord5472
ord3403
ord2879
ord2878
ord4151
ord6055
ord4077
ord1776
ord4407
ord5237
ord2385
ord5163
ord6374
ord4353
ord2649
ord1665
ord3798
ord4837
ord2648
ord2055
ord6376
ord3749
ord5065
ord4465
ord5252
ord2446
ord2124
ord5277
ord4627
ord4427
ord674
ord366
ord2627
ord4457
ord4724
ord2863
ord2864
ord567
ord1153
ord4436
ord4499
ord3870
ord5282
ord4554
ord5122
ord4563
ord5092
ord5127
ord5128
ord1896
ord3464
ord2486
ord5751
ord4155
ord2990
ord3415
ord5024
ord3514
ord6344
ord5627
ord1003
ord3449
ord3787
ord3250
ord4697
ord3058
ord3065
ord6336
ord2510
ord2542
ord5244
ord1746
ord5577
ord3172
ord4421
ord4387
ord3454
ord3198
ord6081
ord6175
ord4623
ord4430
ord801
ord734
ord541
ord437
ord4824
ord668
ord4616
ord6282
ord1980
ord2781
ord2770
ord356
ord4954
ord6143
ord1099
ord5653
ord4859
ord6883
ord941
ord2818
ord2652
ord5186
ord1669
ord3571
ord5781
ord5785
ord5791
ord4614
ord4874
ord2379
ord4273
ord4441
ord4613
ord4589
ord4899
ord4341
ord4349
ord4531
ord4545
ord4543
ord4526
ord4529
ord4524
ord4964
ord4961
ord4078
ord5240
ord5290
ord3748
ord1726
ord4432
ord736
ord813
ord439
ord560
ord5260
ord1233
ord5495
ord4464
ord4890
ord5782
ord4200
ord3754
ord3797
ord4723
ord5768
ord6128
ord3752
ord5148
ord4694
ord2535
ord738
ord2394
ord3769
ord2175
ord2521
ord441
ord1992
ord5981
ord3256
ord3909
ord2859
ord3127
ord3616
ord6010
ord3322
ord2448
ord2044
ord5834
ord819
ord568
ord6170
ord6174
ord6171
ord5875
ord2380
ord5224
ord5787
ord282
ord6385
ord4202
ord4277
ord2764
ord3259
ord3147
ord2982
ord4161
ord3194
ord3445
ord989
ord5617
ord3107
ord2184
ord2185
ord3948
ord5730
ord2003
ord5198
ord5940
ord4695
ord1182
ord1168
ord540
ord535
ord800
ord825
ord823
ord5206
ord4083
ord458
ord268
ord1993
ord750
ord1567
ord879
ord2740
ord2915
ord5583
ord2614
ord353
ord5572
ord1601
ord537
ord1979
ord665
ord5683
ord5460
ord6571
ord3318
ord5710
ord519
ord1253
ord2461
ord786
ord342
ord4214
ord788
ord3715
ord520
ord986
ord4080
ord6451
ord4622
ord3831
ord3079
ord3825
ord2976
ord3830
ord3353
ord3262
ord3081
ord2985
ord1883
ord3136
ord4238
ord6390
ord2255
ord1727

msvcrt

??1type_info@@UAE@XZ
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
_initterm
_adjust_fdiv
strncpy
_msize
_ftol
_CIasin
_itoa
time
free
_stricmp
_strnicmp
__CxxFrameHandler
_CxxThrowException
_purecall
__RTDynamicCast
memmove
_stat
sprintf
_mbscmp
realloc
malloc
_splitpath
strrchr
fclose
fopen
wcscpy
wcslen
wcscmp

kernel32

OutputDebugStringA
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
DeleteFileA
CloseHandle
lstrlenA
GetFileAttributesA
GetTickCount
GetTempPathA
GlobalUnlock
GlobalFree
GetTempFileNameA

user32

UnionRect
GrayStringA
GetDesktopWindow
SetClassLongA
SendMessageA
GetClientRect
RegisterClassA
GetMenu
UnregisterClassA
GetUpdateRect
GetCursorPos
UpdateWindow
InvalidateRect
GetWindowRect
PostMessageA
ScreenToClient
MessageBeep
LoadCursorA
ShowScrollBar
GetFocus
GetSystemMetrics
GetSubMenu
EqualRect
wvsprintfA
wsprintfA
EnableWindow
PtInRect
SetRectEmpty
GetSysColor
GetDC
IntersectRect
ReleaseDC
IsRectEmpty
DrawTextA
TabbedTextOutA
FillRect
OffsetRect
InflateRect
RegisterClipboardFormatA
SetRect

gdi32

LPtoDP
CreatePen
CreateDIBSection
SelectObject
CombineRgn
SetRectRgn
CreateRectRgnIndirect
ExtTextOutA
TextOutA
FillRgn
PtVisible
GetObjectA
RectVisible
GetTextFaceA
GetViewportOrgEx
CreateFontIndirectA
GetMapMode
GetWindowExtEx
GetWindowOrgEx
GetMetaFileBitsEx
Rectangle
CopyMetaFileA
DeleteMetaFile
Escape
GetViewportExtEx
CreatePolyPolygonRgn
CreatePolygonRgn
GetBkColor
GetTextColor
RectInRegion
GetClipRgn
SelectClipRgn
CreateBitmap
BitBlt
CreateRectRgn
CreateCompatibleDC
RealizePalette
DeleteObject
DeleteDC
DPtoLP
GetDeviceCaps

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA

ole32

StgOpenStorage

msvcirt

??_Dfstream@@QAEXXZ
?close@fstream@@QAEXXZ
?write@ostream@@QAEAAV1@PBDH@Z
?read@istream@@QAEAAV1@PADH@Z
?tellp@ostream@@QAEJXZ
?seekp@ostream@@QAEAAV1@JW4seek_dir@ios@@@Z
??1ios@@UAE@XZ
??1fstream@@UAE@XZ
??0fstream@@QAE@PBDHH@Z
?openprot@filebuf@@2HB

Exports

Exports

??0PretzelImporterInterface@@QAE@ABV0@@Z
??0PretzelImporterInterface@@QAE@XZ
??0PretzelPWComponentObjectConverter@@QAE@XZ
??0PretzelPWComponentTranslator@@QAE@XZ
??0PretzelPWDocTranslator@@QAE@XZ
??0PretzelPWNewsletterDocTranslator@@QAE@XZ
??0PretzelPWRenComponentObjectTranslator@@QAE@XZ
??0PretzelPWTextObjectConverter@@QAE@XZ
??1PretzelPWComponentObjectConverter@@UAE@XZ
??1PretzelPWComponentTranslator@@UAE@XZ
??1PretzelPWDocTranslator@@UAE@XZ
??1PretzelPWNewsletterDocTranslator@@UAE@XZ
??1PretzelPWRenComponentObjectTranslator@@UAE@XZ
??1PretzelPWTextObjectConverter@@UAE@XZ
??4PretzelImporterInterface@@QAEAAV0@ABV0@@Z
??_7PretzelImporterInterface@@6B@
??_7PretzelPWComponentObjectConverter@@6B@
??_7PretzelPWComponentTranslator@@6B@
??_7PretzelPWDocTranslator@@6B@
??_7PretzelPWNewsletterDocTranslator@@6B@
??_7PretzelPWRenComponentObjectTranslator@@6B@
??_7PretzelPWTextObjectConverter@@6B@
?ApplyComponentAttributes@PretzelPWTextObjectConverter@@MAEXPAVCPmwDoc@@AAVPretzelTranslationContext@@PAVRectPageObject@@@Z
?Convert@PretzelPWComponentObjectConverter@@UAEPAVPMGPageObject@@PAVCPmwDoc@@FFAAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@@Z
?ConvertEmptyTextBox@PretzelPWTextObjectConverter@@UAEPAVPMGPageObject@@PAVCPmwDoc@@FFAAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@@Z
?CreateComponentObject@PretzelPWComponentObjectConverter@@MAEPAVPMGPageObject@@PAVCPmwDoc@@AAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@@Z
?CreateComponentObject@PretzelPWRenComponentObjectTranslator@@MAEPAVPMGPageObject@@PAVCPmwDoc@@AAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@@Z
?CreateComponentObject@PretzelPWTextObjectConverter@@MAEPAVPMGPageObject@@PAVCPmwDoc@@AAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@@Z
?CreateConverter@PretzelPWComponentObjectConverter@@SAPAVPretzelComponentConverter@@XZ
?CreateConverter@PretzelPWRenComponentObjectTranslator@@SAPAVPretzelComponentConverter@@XZ
?CreateConverter@PretzelPWTextObjectConverter@@SAPAVPretzelComponentConverter@@XZ
?CreateDestinationDoc@PretzelPWDocTranslator@@UBEPAVCPmwDoc@@PBVCBPubDoc@@AAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@@Z
?CreatePretzelDoc@PretzelPWDocTranslator@@UBEPAVCPmwDoc@@PBVCBPubDoc@@AAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@@Z
?CreateTextBox@PretzelPWTextObjectConverter@@MAEPAVPMGPageObject@@PAVCPmwDoc@@AAVPretzelTranslationContext@@PADK@Z
?GetBoxAndRotation@PretzelPWComponentObjectConverter@@MAEXPAVCPmwDoc@@AAUPBOX@@AANAAE@Z
?GetComponentTranslator@PretzelPWComponentTranslator@@QBEPAVPretzelComponentConverter@@PAVCBLayoutObject@@@Z
?GetObjRecordNumber@PretzelPWTextObjectConverter@@QAEHXZ
?GetPWDocumentPreview@@YAPAVRImage@@ABVCString@@@Z
?GetTextConverter@PretzelPWComponentTranslator@@AAEPAVPretzelComponentConverter@@PBVCBPubDoc@@PAVCBTextSlab@@PAVCBStory@@@Z
?GetTextSlabsFromStory@PretzelPWComponentTranslator@@AAEXPBVCBPubDoc@@PAVCPmwDoc@@AAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@PAVCBStory@@@Z
?ImportFromPressWriter@@YAPAVCPmwDoc@@ABVCString@@AAVPretzelErrorCollection@@PAVPretzelImporterInterface@@@Z
?OpenPWFile@@YAPAVCBPubDoc@@ABVCString@@AAVPretzelErrorCollection@@@Z
?ScaleDocToPaper@PretzelPWDocTranslator@@UBEXPAVCBPubDoc@@PAVCPmwDoc@@AAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@@Z
?SetBackColor@PretzelPWComponentObjectConverter@@QAEXPBVRColor@@@Z
?SetBackColor@PretzelPWRenComponentObjectTranslator@@QAEXPBVRColor@@@Z
?SetContentColor@PretzelPWComponentObjectConverter@@QAEXPBVRColor@@@Z
?SetDocInfo@PretzelPWDocTranslator@@UBEXPBVCBPubDoc@@AAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@@Z
?SetDocInfo@PretzelPWNewsletterDocTranslator@@UBEXPBVCBPubDoc@@AAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@@Z
?SetFrameColor@PretzelPWRenComponentObjectTranslator@@QAEXPBVRColor@@@Z
?SetFrameType@PretzelPWRenComponentObjectTranslator@@QAEXW4EFrameType@@@Z
?SetObject@PretzelPWComponentObjectConverter@@QAEXPAVCBLayoutObject@@@Z
?SetPaperInfo@PretzelPWDocTranslator@@UBEXPBVCBPubDoc@@AAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@@Z
?SetSpecManager@PretzelPWTextObjectConverter@@QAEXPAVCBSpecManager@@@Z
?SetStory@PretzelPWTextObjectConverter@@QAEXPAVCBStory@@@Z
?Translate@PretzelPWComponentTranslator@@UAEXPBVCBPubDoc@@PAVCPmwDoc@@AAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@@Z
?Translate@PretzelPWDocTranslator@@UBEPAVCPmwDoc@@PAVCBPubDoc@@AAVPretzelTranslationContext@@AAVPretzelTranslationProgress@@AAVPretzelErrorCollection@@@Z

Sections

.text
Size: 344KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

75e35252931988632af205b5b0d8a8d8

Headers

File Characteristics

Imports

imagelibrary

framework

pretzelimport

pretzelimportwsd

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

ole32

msvcirt

Exports

Exports

Sections

.text Size: 344KB - Virtual size: 342KB

.rdata Size: 80KB - Virtual size: 76KB

.data Size: 100KB - Virtual size: 104KB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 48KB - Virtual size: 46KB

.text
Size: 344KB - Virtual size: 342KB

.rdata
Size: 80KB - Virtual size: 76KB

.data
Size: 100KB - Virtual size: 104KB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 48KB - Virtual size: 46KB