Behavioral task
behavioral1
Sample
3300de3d807ac13113e9e8890d526d6cd1eed9fc0a7574f74a763d175fa6a51d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3300de3d807ac13113e9e8890d526d6cd1eed9fc0a7574f74a763d175fa6a51d.exe
Resource
win10v2004-20220812-en
General
-
Target
3300de3d807ac13113e9e8890d526d6cd1eed9fc0a7574f74a763d175fa6a51d
-
Size
2.1MB
-
MD5
0e5a6f38ac2eebe3661dae2ee373a733
-
SHA1
113bab10970c2989a26ea5e9f1dc9de63d0f60d2
-
SHA256
3300de3d807ac13113e9e8890d526d6cd1eed9fc0a7574f74a763d175fa6a51d
-
SHA512
7459cb553354fe8be8a609f24491fd8e8157865a7650f555fea0b3e2ebcc0325d145142c9b335e43ef81b5b179fde127b926ede3c996683c561bca1deb2fa821
-
SSDEEP
24576:AZyoy8qogavPz8yzeTW/ZLRfIGv9pQV5h5u94x8vwPXE9Su7wlt32y06Qcxy2NPh:ATgAHcZSpQ5h84wwZu7k/vGbiB
Malware Config
Signatures
-
resource yara_rule sample upx
Files
-
3300de3d807ac13113e9e8890d526d6cd1eed9fc0a7574f74a763d175fa6a51d.exe windows x86
a51d84f1a8562c24281ab965b9d9956e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shfolder
SHGetFolderPathA
acdappinfo
?SetUserProfileID@CAppInfoBase3_0@@UAE?AW4typAIResult@@PBD@Z
?GetLastErrorDesc@CAppInfoBase3_0@@UAEXAAV?$CStdStr@D@@@Z
?GetLastErrorCode@CAppInfoBase3_0@@UAEJXZ
?GetRegKeyAppGUID@CAppInfoBase3_0@@IAEPAVRegistryKey@@XZ
?GetUserProfileID@CAppInfoBase3_0@@UAE?AW4typAIResult@@PAV?$CStdStr@D@@@Z
?GetAppProfileID@CAppInfoBase3_0@@UAE?AW4typAIResult@@PAV?$CStdStr@D@@@Z
??1CAppInfoBase3_0@@UAE@XZ
??0CAppInfoBase3_0@@QAE@PAVRegistryKey@@@Z
acdintouch
?GetProductInfoXML@CInTouchBase3_0@@UAE?AW4typITResult@@AAV?$CStdStr@D@@@Z
??1CInTouchBase3_0@@UAE@XZ
?SetErrorString@CInTouch3_0@@MAEXW4typITResult@@PBD@Z
?HandleInTouchErrorSimple@CInTouchBase3_0@@UAEHPBD@Z
?SetError@CInTouch3_0@@MAEXW4typITResult@@J@Z
?ClearLastError@CInTouch3_0@@MAEXXZ
?SetBypassInTouchDialog@CInTouchBase3_0@@UAEXH@Z
?GetBypassInTouchDialog@CInTouchBase3_0@@UAEHXZ
?AskToConnect@CInTouch@@UAEHXZ
?ShowPopupBrowser@CInTouch@@UAEXPBDPAUtagRECT@@@Z
?HandleInTouchError@CInTouchBase@@UAEHW4typITResult@@JPBD@Z
?GetStatsXML@CInTouchBase@@UAE?AW4typITResult@@AAV?$CStdStr@D@@@Z
?ParseBannerAdXML@CInTouchBase@@UAE?AW4typITResult@@ABV?$CStdStr@D@@@Z
?ParseStaticPageXML@CInTouchBase@@UAE?AW4typITResult@@ABV?$CStdStr@D@@@Z
??0CInTouchBase3_0@@QAE@PAVIAppInfo3_0@@PBD1@Z
?StandardConnection@CInTouchBase3_0@@QAEHPAUHWND__@@W4etypStatuses@@JAAV?$CStdStr@D@@PAHPAI3HH@Z
mfc42
ord1175
ord1133
ord2512
ord6215
ord4226
ord1948
ord5303
ord1106
ord5715
ord348
ord565
ord663
ord2558
ord2092
ord5484
ord4699
ord817
ord521
ord6307
ord3616
ord5651
ord353
ord1842
ord3698
ord4220
ord2584
ord3654
ord2723
ord2390
ord3059
ord5100
ord5103
ord4467
ord4303
ord3350
ord3127
ord975
ord5472
ord3403
ord5012
ord2878
ord4151
ord4077
ord5237
ord2649
ord1665
ord801
ord765
ord796
ord674
ord541
ord529
ord366
ord620
ord2841
ord2438
ord6209
ord4146
ord2108
ord3294
ord2800
ord2494
ord3495
ord5680
ord3521
ord2627
ord6000
ord2117
ord2863
ord4242
ord5252
ord4145
ord1644
ord2879
ord4457
ord5030
ord6270
ord4413
ord2817
ord4875
ord1146
ord5053
ord5282
ord1938
ord6458
ord2455
ord6069
ord2614
ord3920
ord3520
ord5732
ord5749
ord2725
ord4698
ord939
ord926
ord647
ord2997
ord4157
ord333
ord924
ord4337
ord1176
ord793
ord4427
ord683
ord4436
ord4499
ord6874
ord2919
ord6143
ord2107
ord5450
ord5440
ord6383
ord6394
ord3719
ord2370
ord6334
ord3610
ord656
ord3873
ord2575
ord2297
ord2363
ord3619
ord1908
ord4715
ord1690
ord2528
ord5787
ord4439
ord2054
ord4431
ord497
ord771
ord4259
ord4287
ord4804
ord1907
ord5161
ord5162
ord5160
ord4905
ord4742
ord4976
ord4948
ord4358
ord4377
ord4910
ord4837
ord4441
ord489
ord4258
ord1779
ord4055
ord4854
ord3301
ord5953
ord3098
ord1008
ord2301
ord6402
ord3499
ord2515
ord355
ord4277
ord5683
ord3317
ord4278
ord755
ord6172
ord2567
ord470
ord6154
ord3583
ord298
ord4230
ord2116
ord5710
ord4129
ord6662
ord4076
ord1194
ord3084
ord2645
ord3813
ord2298
ord6401
ord922
ord3716
ord6502
ord790
ord2862
ord6903
ord6784
ord2546
ord291
ord2827
ord2086
ord6453
ord326
ord692
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord4124
ord473
ord6648
ord2764
ord6412
ord3742
ord4538
ord4268
ord554
ord807
ord6625
ord2012
ord3289
ord5885
ord2920
ord6603
ord5883
ord4497
ord5884
ord1715
ord1710
ord6164
ord6109
ord6335
ord686
ord2453
ord2096
ord384
ord6146
ord773
ord702
ord501
ord400
ord5596
ord2408
ord915
ord4191
ord5789
ord2763
ord998
ord2762
ord812
ord5862
ord559
ord5621
ord940
ord5678
ord5736
ord1803
ord1864
ord1083
ord4123
ord2574
ord3572
ord809
ord556
ord1793
ord6358
ord1088
ord2122
ord6283
ord1768
ord3876
ord613
ord289
ord1642
ord4202
ord3643
ord394
ord696
ord909
ord5628
ord4185
ord3631
ord2358
ord4224
ord3226
ord1199
ord4476
ord6199
ord2302
ord795
ord567
ord3721
ord4424
ord3402
ord5290
ord1776
ord6055
ord4710
ord6241
ord2362
ord2294
ord324
ord4853
ord4376
ord4317
ord472
ord6119
ord1641
ord5788
ord4297
ord4133
ord3693
ord4234
ord2405
ord2915
ord5572
ord323
ord1640
ord2753
ord4694
ord3089
ord5951
ord2642
ord2864
ord6117
ord4083
ord3092
ord3874
ord3095
ord5802
ord2414
ord641
ord3626
ord3663
ord1158
ord4160
ord1140
ord3597
ord4425
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord5265
ord537
ord6403
ord1168
ord860
ord941
ord2818
ord3522
ord858
ord535
ord800
ord540
ord823
ord1205
ord2621
ord561
ord4159
ord6442
ord5714
ord3738
ord4622
ord4079
ord5289
ord5307
ord3346
ord5302
ord5300
ord1089
ord2396
ord5199
ord2554
ord3922
ord5731
ord815
ord4486
ord4274
ord6880
ord4673
ord562
ord2569
ord2714
ord2754
ord1716
ord6652
ord816
ord1711
ord6605
ord6197
ord5064
ord3797
ord4284
ord4235
ord4366
ord3295
ord5768
ord642
ord327
ord2859
ord4299
ord3706
ord6128
ord5781
ord6129
ord1949
ord1233
ord818
ord3582
ord1200
ord616
ord4218
ord4398
ord2578
ord5981
ord2023
ord2411
ord2379
ord293
ord2513
ord5791
ord2380
ord2860
ord2450
ord5794
ord283
ord4275
ord640
ord3571
ord609
ord5785
ord2452
ord4475
ord3574
ord4396
ord2087
ord5875
ord3692
ord3573
ord2626
ord6111
ord5248
ord3598
ord2444
ord5234
ord5279
ord6369
ord1709
ord6053
ord1712
ord4121
ord5082
ord2389
ord4364
ord5471
ord4056
ord5148
ord2530
ord6740
ord5287
ord3798
ord825
ord1576
ord5280
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord2514
ord4998
msvcrt
__p__commode
__set_app_type
__p__fmode
_controlfp
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
??1type_info@@UAE@XZ
calloc
memchr
_mbslwr
_endthreadex
modf
ceil
_mbsnbicmp
_mbsnbcmp
strlen
_mbsnbset
_mbsnbcpy
ftell
__p__pgmptr
_fstat
ctime
fseek
_splitpath
_endthread
_beginthreadex
tolower
strncmp
wcstombs
_CxxThrowException
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
_strcmpi
_gcvt
fopen
fgets
fclose
vsprintf
_mbsbtype
toupper
time
strncat
bsearch
_mbsstr
_memicmp
realloc
strrchr
strtok
sscanf
_CIpow
atof
floor
_mbscmp
_mbsicmp
_mbctype
_CIfmod
_purecall
isdigit
_strrev
_atoi64
_vsnprintf
atoi
memmove
_strdup
_access
strstr
strchr
_mbschr
_mbsrchr
__RTDynamicCast
srand
rand
atol
strncpy
qsort
_ftol
sprintf
free
malloc
__CxxFrameHandler
_mbsinc
wcslen
_stricmp
_itoa
_setmbcp
kernel32
GetUserDefaultLangID
MoveFileA
GetACP
CreateFileMappingA
MapViewOfFile
CreateEventA
GetProfileStringA
GetExitCodeProcess
UnmapViewOfFile
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
WaitForSingleObject
LoadLibraryExA
SetThreadPriority
ResumeThread
ResetEvent
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
GetTempPathA
GetPrivateProfileSectionA
GetSystemInfo
GetSystemDirectoryA
IsBadWritePtr
WritePrivateProfileSectionA
_lwrite
_lclose
_lcreat
SetFileAttributesA
GetDriveTypeA
SetEndOfFile
GetDiskFreeSpaceA
OutputDebugStringA
GetFileAttributesA
FormatMessageA
FileTimeToLocalFileTime
LocalFree
GetTimeFormatA
GlobalReAlloc
GetDateFormatA
GetNumberFormatA
GetPrivateProfileStringA
GetLocaleInfoA
GetWindowsDirectoryA
GetShortPathNameA
WritePrivateProfileStringA
CreateDirectoryA
SetFilePointer
lstrcmpA
GetFileSize
ReadFile
WriteFile
DeleteFileA
GetTempFileNameA
FileTimeToSystemTime
GlobalUnlock
GetVolumeInformationA
GlobalSize
SystemTimeToFileTime
SetEvent
GetSystemTime
CreateMutexA
GetLastError
GetModuleFileNameA
GetModuleHandleA
MulDiv
GetVersionExA
Sleep
GetCurrentDirectoryA
GetFullPathNameA
SetCurrentDirectoryA
lstrlenA
lstrcatA
lstrcmpiA
GetTickCount
lstrcpyA
FindNextFileA
FindClose
FindFirstFileA
HeapSize
HeapFree
HeapReAlloc
GlobalMemoryStatus
FindResourceA
HeapAlloc
SizeofResource
LockResource
LoadResource
lstrcpynA
GlobalFree
GetProcAddress
GlobalAlloc
GlobalLock
HeapDestroy
CreateFileA
GetFileTime
HeapCreate
GetCurrentThreadId
FreeLibrary
CloseHandle
LoadLibraryA
EnumResourceNamesA
GetStartupInfoA
lstrlenW
user32
IsDialogMessageA
MessageBeep
InvalidateRgn
DrawFrameControl
SetDlgItemInt
OemToCharA
ScrollWindowEx
CharToOemA
WaitMessage
IsWindow
GetDesktopWindow
CharNextA
SetWindowPlacement
DestroyCursor
DefWindowProcA
GetClassInfoA
ClipCursor
CopyIcon
SetWindowPos
MoveWindow
SetWindowTextA
ShowWindow
SendDlgItemMessageA
WinHelpA
SetFocus
RegisterClassA
DialogBoxParamA
GetWindowTextLengthA
GetWindowTextA
DestroyMenu
ChildWindowFromPointEx
EndDialog
SetMenuItemInfoA
CallNextHookEx
GetKeyNameTextA
CreateDialogParamA
MapVirtualKeyA
GetWindowDC
IsChild
LoadImageA
TrackPopupMenu
UnhookWindowsHookEx
SetWindowsHookExA
LoadAcceleratorsA
EnableMenuItem
GetNextDlgTabItem
CallWindowProcA
GetDlgItemTextA
CheckRadioButton
IsDlgButtonChecked
SetWindowLongA
GetDlgItem
MessageBoxA
WindowFromPoint
ChildWindowFromPoint
GetSysColorBrush
DrawIcon
DrawTextA
DestroyIcon
RedrawWindow
CheckMenuItem
UnionRect
GetMenuStringA
InsertMenuItemA
CreatePopupMenu
GetKeyState
IsWindowVisible
GetActiveWindow
GetIconInfo
GetMenuItemInfoA
DrawStateA
DrawEdge
CopyAcceleratorTableA
CharUpperA
SetDlgItemTextA
LoadBitmapA
GetDlgItemInt
CreateMenu
AppendMenuA
InsertMenuA
ClientToScreen
GetFocus
IsClipboardFormatAvailable
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
RegisterClipboardFormatA
ModifyMenuA
LoadMenuA
SetMenu
PostQuitMessage
CreateWindowExA
CharLowerA
TranslateAcceleratorA
InvertRect
CheckDlgButton
GetClipboardData
ReleaseCapture
GetClientRect
GetDC
EnumChildWindows
DrawFocusRect
IsRectEmpty
EnumThreadWindows
ScreenToClient
InvalidateRect
SetRectEmpty
TranslateMessage
PeekMessageA
GetParent
DispatchMessageA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
DeleteMenu
RemoveMenu
LoadStringA
SetForegroundWindow
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
MapWindowPoints
LoadIconA
GetWindowRect
GetCursor
SetCursor
KillTimer
GetSystemMetrics
SetCapture
GetUpdateRect
BeginPaint
FillRect
EndPaint
GetWindowLongA
LoadCursorA
SetTimer
DdeAccessData
DdeCmpStringHandles
SendMessageA
UpdateWindow
ReleaseDC
GetCursorPos
SetCursorPos
GetCapture
EnableWindow
DestroyWindow
DdeConnect
DdeGetLastError
wsprintfA
DdeClientTransaction
DdeFreeDataHandle
DdeDisconnect
SetRect
PtInRect
DdeUnaccessData
DdeFreeStringHandle
DdeUninitialize
DdeInitializeA
DdeCreateStringHandleA
DdeNameService
GetSysColor
IntersectRect
EqualRect
PostMessageA
OffsetRect
CopyRect
InflateRect
gdi32
SetDIBColorTable
SetBrushOrgEx
GetCurrentObject
DeleteEnhMetaFile
SetMapMode
SetWindowExtEx
SetViewportExtEx
StretchBlt
CreateDCA
GetClipRgn
PlayEnhMetaFile
EndDoc
SetAbortProc
StartDocA
StartPage
SaveDC
RestoreDC
EndPage
CreatePalette
GetDIBColorTable
CreateBitmap
EnumFontsA
GetBkColor
ExtFloodFill
GetTextMetricsA
PatBlt
GetBkMode
GetTextColor
SetTextColor
SetBkMode
EnumFontFamiliesA
RoundRect
CreatePolygonRgn
FillRgn
CreateFontIndirectA
GetDeviceCaps
MoveToEx
LineTo
Polygon
GetTextExtentPoint32A
GetClipBox
GetDCOrgEx
CreateFontA
GetCharWidthA
GetDIBits
SetPixel
CreatePen
SetBkColor
Arc
CreateRectRgn
CombineRgn
SelectClipRgn
SelectPalette
SetStretchBltMode
StretchDIBits
Polyline
CreateBrushIndirect
CreateDIBSection
RealizePalette
GetSystemPaletteEntries
SetDIBitsToDevice
Rectangle
GetNearestPaletteIndex
GetPaletteEntries
GetStockObject
Ellipse
CreateSolidBrush
DeleteDC
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC
GetObjectA
SetDIBits
CreateCompatibleBitmap
SetPixelV
ExtCreatePen
PolyBezier
comdlg32
GetSaveFileNameA
ChooseColorA
GetFileTitleA
CommDlgExtendedError
GetOpenFileNameA
ChooseFontA
winspool.drv
OpenPrinterA
ord201
DocumentPropertiesA
EnumPrintersA
ClosePrinter
advapi32
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegCloseKey
RegEnumKeyA
RegSetValueA
RegQueryValueA
RegOpenKeyA
RegCreateKeyA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
shell32
SHGetDesktopFolder
SHGetMalloc
ShellExecuteExA
ExtractIconA
ExtractIconExA
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
DragQueryFileA
DragFinish
SHFileOperationA
SHGetFileInfoA
SHGetSpecialFolderLocation
comctl32
PropertySheetA
ImageList_GetImageInfo
ImageList_LoadImageA
ImageList_Draw
ImageList_GetIcon
ImageList_GetImageCount
ImageList_GetIconSize
ImageList_AddMasked
ImageList_Add
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon
ord17
_TrackMouseEvent
InitCommonControlsEx
ole32
StringFromGUID2
CoCreateInstance
OleInitialize
CLSIDFromProgID
OleUninitialize
CoUninitialize
CoInitialize
CoTaskMemFree
StringFromCLSID
oleaut32
SysFreeString
SysStringLen
SysAllocString
VariantInit
GetErrorInfo
SysAllocStringByteLen
SysStringByteLen
VariantClear
SetErrorInfo
VariantChangeType
CreateErrorInfo
SysAllocStringLen
msvcp60
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??1ctype_base@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
?do_tolower@?$ctype@D@std@@MBEPBDPADPBD@Z
?do_tolower@?$ctype@D@std@@MBEDD@Z
?do_toupper@?$ctype@D@std@@MBEPBDPADPBD@Z
?do_toupper@?$ctype@D@std@@MBEDD@Z
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?close@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_8?$basic_ifstream@DU?$char_traits@D@std@@@std@@7B@
??0ios_base@std@@IAE@XZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??_7?$basic_ifstream@DU?$char_traits@D@std@@@std@@6B@
?__Fiopen@std@@YAPAU_iobuf@@PBDH@Z
?_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@12@@Z
?_Initcvt@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??1locale@std@@QAE@XZ
?clear@ios_base@std@@QAEXH_N@Z
??1ios_base@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Xran@std@@YAXXZ
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??_7bad_cast@std@@6B@
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Term@?$ctype@D@std@@KAXXZ
?_Cltab@?$ctype@D@std@@0PBFB
_Getctype
??0_Locinfo@std@@QAE@PBD@Z
??_7?$ctype@D@std@@6B@
??_7ctype_base@std@@6B@
??_7facet@locale@std@@6B@
?_Iscloc@locale@std@@QBE_NXZ
?_Getfacet@locale@std@@QBEPBVfacet@12@I_N@Z
??1_Lockit@std@@QAE@XZ
?_Id_cnt@id@locale@std@@0HA
?id@?$ctype@D@std@@2V0locale@2@A
??0_Lockit@std@@QAE@XZ
??1?$ctype@D@std@@UAE@XZ
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 380KB - Virtual size: 379KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.UPX Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE