AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230221-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
tmp
-
Size
8.2MB
-
MD5
a0be8d23a3c4291333c431827667cf59
-
SHA1
e90f3e7b6ab2fbd5f49983f81e2861fbad2ae2a2
-
SHA256
2016b234bad929fe482553d14bf1c9d156b95f2ebe2ea91a5b6468be97cddd45
-
SHA512
587a7e6082ba55d2300fdb5ae465524c9e26f38dc88cc20f152a2c9b3fc56eed1ec236af3dc8b9e49873f2e0009bd2ef20ead8891cd4e96f228c1ad7c1adc35b
-
SSDEEP
98304:4HfHHHdHCH+0HVwPfb/G7s/FPf7uOn3wkaaUO2n1SYUK6sV1kzmSRChfQbHQMifY:4/n9ip1Cb+07r39JW1uzmJgi3
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource tmp
Files
-
tmp.exe windows x86
a7286bd52ff0a4b2c75dd7467d73e2f8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
GetModuleHandleA
GetSystemDirectoryA
GetVersionExA
FreeLibrary
GlobalUnlock
GlobalLock
lstrlenW
WideCharToMultiByte
CompareStringA
GetLocaleInfoA
ReleaseSemaphore
WaitForSingleObject
SetThreadPriority
WriteFile
SetFilePointer
ReadFile
OutputDebugStringA
LoadLibraryA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetSystemInfo
GetFileSize
GlobalAlloc
GetModuleFileNameA
GetTempFileNameA
GetTempPathA
RemoveDirectoryA
DeleteFileA
CreateDirectoryA
AllocConsole
GetTempPathW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitOnceExecuteOnce
SleepConditionVariableCS
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetTickCount64
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CreateSemaphoreA
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetFileInformationByHandleEx
CreateSymbolicLinkW
GetStringTypeW
CompareStringEx
GetCPInfo
InterlockedIncrement
HeapValidate
InterlockedDecrement
LockResource
LoadResource
SizeofResource
FindResourceA
FindResourceW
PeekNamedPipe
WaitNamedPipeW
GetModuleFileNameW
SleepEx
GetTickCount
MoveFileExA
GetEnvironmentVariableA
GetStdHandle
GetFileType
WaitForMultipleObjects
SetLastError
InitializeCriticalSection
CreateFileW
SetFilePointerEx
FormatMessageA
RtlCaptureStackBackTrace
GetExitCodeThread
GetNativeSystemInfo
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
InitializeCriticalSectionEx
LocalFree
FormatMessageW
VerSetConditionMask
VerifyVersionInfoA
GetFileSizeEx
GetCurrentThread
GetThreadTimes
GetFileInformationByHandle
GetFileAttributesA
GetConsoleOutputCP
GetConsoleCP
OutputDebugStringW
IsDBCSLeadByte
GetFullPathNameA
SetEndOfFile
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
CreateEventA
LoadLibraryExA
SetErrorMode
CreateDirectoryW
FindFirstFileW
MoveFileA
GetFullPathNameW
FindNextFileW
RemoveDirectoryW
SetFileTime
SetEnvironmentVariableW
CreatePipe
GetFileAttributesW
DuplicateHandle
OpenProcess
GetVersion
SetCurrentDirectoryA
SetFileAttributesW
GetFileAttributesExW
DeleteFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableA
SystemTimeToFileTime
CreateProcessA
GetSystemTime
MoveFileW
GetProcessTimes
GenerateConsoleCtrlEvent
GetExitCodeProcess
GetACP
SetConsoleCtrlHandler
ExpandEnvironmentStringsW
GetLocaleInfoEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceFrequency
InitializeConditionVariable
FlushViewOfFile
TryEnterCriticalSection
FreeLibraryAndExitThread
LoadLibraryExW
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetPrivateProfileStringA
lstrlenA
GetCurrentDirectoryA
GetFileAttributesExA
FindNextFileA
FindFirstFileA
SwitchToThread
FindClose
MultiByteToWideChar
SetFileAttributesA
Sleep
Module32Next
Module32First
CreateToolhelp32Snapshot
ReadProcessMemory
GetCurrentProcessId
GetCurrentProcess
GetLastError
GetProcessHeap
HeapFree
HeapAlloc
DeviceIoControl
CloseHandle
CreateThreadpoolTimer
CreateFileA
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
LoadLibraryW
SignalObjectAndWait
CreateThread
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
UnregisterWaitEx
GetVersionExW
SetFileInformationByHandle
VirtualAlloc
VirtualProtect
VirtualFree
SetProcessAffinityMask
CreateTimerQueue
WaitForMultipleObjectsEx
user32
GetCapture
GetClipboardData
SetClipboardData
PostQuitMessage
FlashWindowEx
SetCapture
CloseClipboard
OpenClipboard
ReleaseCapture
SetWindowPos
ChangeDisplaySettingsA
GetAsyncKeyState
GetKeyboardLayout
GetKeyboardLayoutNameA
ReleaseDC
EmptyClipboard
CharNextW
CharNextExA
CharPrevExA
MonitorFromPoint
GetSystemMetrics
GetMonitorInfoA
CharPrevA
LoadStringA
GetDC
PeekMessageA
DispatchMessageA
TranslateMessage
ShowWindow
GetMessageA
ClientToScreen
LoadCursorA
SetWindowLongA
SetCursorPos
LoadImageA
MessageBoxA
DestroyCursor
DefWindowProcA
RegisterClassA
SetCursor
ShowCursor
GetWindowLongA
CreateWindowExA
GetKeyState
SystemParametersInfoA
IsWindow
DestroyWindow
MoveWindow
LoadIconA
GetMenu
InvalidateRect
GetClientRect
GetWindowRect
AdjustWindowRectEx
SetRect
FindWindowA
ScreenToClient
GetCursorPos
SetWindowTextA
advapi32
RegDeleteKeyA
RegCreateKeyA
RegSetValueA
RegCreateKeyExA
RegFlushKey
RegQueryValueA
RegSetValueExA
RegLoadKeyA
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueA
RegConnectRegistryA
RegSaveKeyA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegSetValueExW
RegCreateKeyExW
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptEncrypt
shell32
SHGetSpecialFolderPathA
ShellExecuteA
ShellExecuteW
ole32
CoGetApartmentType
CoGetObjectContext
CoUninitialize
CoCreateInstance
CoInitializeEx
winmm
timeEndPeriod
timeBeginPeriod
timeGetTime
timeGetDevCaps
d3d8
Direct3DCreate8
iphlpapi
GetPerAdapterInfo
GetAdaptersInfo
imm32
ImmNotifyIME
ImmGetOpenStatus
ImmGetIMEFileNameA
ImmIsIME
ImmGetContext
ImmReleaseContext
ImmAssociateContext
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmGetCandidateListW
ImmGetConversionStatus
ImmSetConversionStatus
devil
ilConvertImage
ilCopyPixels
ilBindImage
ilDeleteImages
ilEnable
ilGenImages
ilGetInteger
ilLoad
ilOriginFunc
ilShutDown
ilSave
ilSetPixels
ilTexImage
ilInit
ws2_32
ioctlsocket
recv
select
send
closesocket
bind
__WSAFDIsSet
getpeername
getsockname
getsockopt
socket
gethostname
setsockopt
gethostbyname
WSASetLastError
ntohs
WSAIoctl
accept
listen
ntohl
getaddrinfo
freeaddrinfo
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
inet_addr
WSAEventSelect
recvfrom
sendto
htons
htonl
WSACleanup
WSAGetLastError
WSAStartup
connect
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
mss32
_AIL_set_sample_volume_pan@12
_AIL_end_sample@4
_AIL_resume_sample@4
_AIL_stop_sample@4
_AIL_start_sample@4
_AIL_set_sample_file@12
_AIL_init_sample@4
_AIL_release_sample_handle@4
_AIL_allocate_sample_handle@4
_AIL_last_error@0
_AIL_stream_status@4
_AIL_set_stream_loop_count@8
_AIL_stream_volume_levels@12
_AIL_set_stream_volume_levels@12
_AIL_pause_stream@8
_AIL_start_stream@4
_AIL_close_stream@4
_AIL_set_redist_directory@4
_AIL_shutdown@0
_AIL_startup@0
_AIL_set_3D_orientation@28
_AIL_set_3D_velocity@20
_AIL_set_3D_position@16
_AIL_close_3D_listener@4
_AIL_open_3D_listener@4
_AIL_close_3D_provider@4
_AIL_open_3D_provider@4
_AIL_enumerate_3D_providers@12
_AIL_close_digital_driver@4
_AIL_open_stream@12
_AIL_open_digital_driver@16
_AIL_file_type@8
_AIL_decompress_ADPCM@12
_AIL_decompress_ASI@24
_AIL_WAV_info@8
_AIL_set_file_callbacks@16
_AIL_sample_status@4
_AIL_sample_volume_pan@12
_AIL_allocate_3D_sample_handle@4
_AIL_release_3D_sample_handle@4
_AIL_start_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_set_3D_sample_file@8
_AIL_set_3D_sample_volume@8
_AIL_set_sample_loop_count@8
_AIL_set_3D_sample_loop_count@8
_AIL_file_read@8
_AIL_3D_sample_status@4
_AIL_mem_free_lock@4
_AIL_3D_sample_volume@4
_AIL_update_3D_position@8
_AIL_end_3D_sample@4
_AIL_auto_update_3D_position@8
speedtreert
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
??2CSpeedTreeRT@@SAPAXI@Z
??1CSpeedTreeRT@@QAE@XZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
??0CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetTime@CSpeedTreeRT@@SAXM@Z
??3CSpeedTreeRT@@SAXPAX@Z
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?DeleteTransientData@CSpeedTreeRT@@QAEXXZ
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
dinput8
DirectInput8Create
granny2
_GrannySetControlEaseOutCurve@28
_GrannySetControlEaseOut@8
_GrannySetControlEaseInCurve@28
_GrannySetControlEaseIn@8
_GrannyGetControlLocalDuration@4
_GrannySetControlSpeed@8
_GrannyGetControlSpeed@4
_GrannySetControlLoopCount@8
_GrannyGetControlLoopCount@4
_GrannyFreeControlIfComplete@4
_GrannyControlIsComplete@4
_GrannyCompleteControlAt@8
_GrannyFreeControlOnceUnused@4
_GrannyFreeControl@4
_GrannyFindTrackGroupForModel@12
_GrannyGetSourceModel@4
_GrannyGetMeshIndexCount@4
_GrannyMeshIsRigid@4
_GrannyGetMeshVertexCount@4
_GrannyGetTotalTypeSize@4
_GrannyGetWorldPoseComposite4x4@8
_GrannyGetWorldPose4x4@8
_GrannyGetControlRawLocalClock@4
_GrannyNewWorldPose@4
_GrannyFindBoneByName@12
_GrannyGetMeshBindingToBoneIndices@4
_GrannyFreeMeshBinding@4
_GrannyNewMeshBinding@12
_GrannyFreeModelInstance@4
_GrannyInstantiateModel@4
_GrannyGetWorldPoseComposite4x4Array@4
_GrannyFreeLocalPose@4
_GrannyNewLocalPose@4
_GrannyUpdateModelMatrix@20
_GrannySampleModelAnimationsAccelerated@20
_GrannyFreeCompletedModelControls@4
_GrannySetModelClock@8
_GrannyGetSourceSkeleton@4
_GrannySetControlRawLocalClock@8
_GrannyGetFileInfo@4
_GrannyFreeFile@4
_GrannyFreeFileSection@8
_GrannyReadEntireFileFromMemory@8
_GrannyConvertSingleObject@20
_GrannyFindMatchingMember@16
_GrannyGetMaterialTextureByType@8
_GrannyBeginControlledAnimation@8
_GrannyGetMeshTriangleGroupCount@4
_GrannyEndControlledAnimation@4
_GrannySetTrackGroupTarget@12
_GrannyPlayControlledAnimation@12
_GrannyFreeWorldPose@4
GrannyPNT332VertexType
_GrannyDeformVertices@24
_GrannySetTrackGroupLOD@16
_GrannyFreeMeshDeformer@4
_GrannyNewMeshDeformer@16
_GrannyCopyMeshIndices@12
_GrannyGetMeshVertices@4
_GrannyCopyMeshVertices@12
_GrannyGetMeshVertexType@4
_GrannyGetMeshTriangleGroups@4
vcruntime140
__AdjustPointer
__RTDynamicCast
__std_type_info_destroy_list
_except_handler4_common
__current_exception_context
__current_exception
__std_type_info_compare
__std_exception_copy
__std_exception_destroy
strrchr
__CxxFrameHandler3
memcpy
strstr
memmove
_purecall
__std_terminate
memset
strchr
memchr
wcsrchr
_setjmp3
longjmp
__CxxFrameHandler
memcmp
__uncaught_exceptions
__uncaught_exception
_CxxThrowException
__std_type_info_name
api-ms-win-crt-runtime-l1-1-0
_seh_filter_exe
_set_app_type
_get_narrow_winmain_command_line
_initterm
_initterm_e
exit
_crt_at_quick_exit
_c_exit
_register_thread_local_exe_atexit_callback
_controlfp_s
_initialize_narrow_environment
_cexit
_configure_narrow_argv
_seh_filter_dll
_errno
_crt_atexit
_invalid_parameter_noinfo
terminate
_exit
_beginthreadex
_register_onexit_function
system
_endthreadex
abort
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_controlfp
perror
signal
strerror
_resetstkoflw
__control87_2
__fpe_flt_rounds
_set_new_handler
_getpid
__sys_nerr
__sys_errlist
_execute_onexit_table
api-ms-win-crt-string-l1-1-0
tolower
isalnum
isalpha
isdigit
isspace
strlen
strncmp
strcmp
iswdigit
strcat_s
towlower
strncpy_s
isupper
islower
strcspn
__strncnt
strncpy
_strupr
wcsnlen
_strdup
toupper
strpbrk
strspn
isxdigit
_wcsicmp
strncat
_strnicmp
_stricmp
wcsncmp
strcoll
wcscoll
strxfrm
wcsncpy_s
_wcsdup
isprint
api-ms-win-crt-math-l1-1-0
_CIsqrt
_CIexp
_libm_sse2_log10_precise
_libm_sse2_tan_precise
cosh
tanh
exp
tan
acos
asin
sinh
cos
_CIcosh
_CIsinh
_CIatan2
_libm_sse2_log_precise
sin
atan
__setusermatherr
_except1
_fdopen
_libm_sse2_pow_precise
ceil
hypot
round
_libm_sse2_asin_precise
_copysign
modf
_isnan
fabs
sqrt
_libm_sse2_exp_precise
_ftol
_finite
_libm_sse2_sin_precise
_libm_sse2_cos_precise
_libm_sse2_acos_precise
_CIfmod
frexp
ldexp
floor
_libm_sse2_sqrt_precise
_CIpow
_CIacos
_CItanh
api-ms-win-crt-stdio-l1-1-0
_read
ferror
fputs
clearerr
_lseeki64
_get_osfhandle
fsetpos
rewind
feof
__stdio_common_vswprintf
fflush
fwrite
putc
_wfopen
fopen_s
_wopen
__stdio_common_vsnprintf_s
__stdio_common_vsprintf_s
_get_stream_buffer_pointers
fgetc
__stdio_common_vfprintf
_commit
_fsopen
_wfsopen
fputc
tmpnam
_fseeki64
getc
_write
setvbuf
ungetc
tmpfile
_tempnam
__acrt_iob_func
_open_osfhandle
fopen
__stdio_common_vsscanf
_kbhit
_setmode
_getcwd
_locking
fclose
freopen
fgets
__p__commode
__stdio_common_vsprintf
ftell
_set_fmode
_close
_open
_isatty
_lseek
_dup2
_dup
__stdio_common_vfwprintf
__stdio_common_vswprintf_s
fseek
_fileno
fgetpos
fread
api-ms-win-crt-heap-l1-1-0
_set_new_mode
_heapmin
_aligned_malloc
free
malloc
calloc
realloc
_callnewh
_aligned_free
api-ms-win-crt-filesystem-l1-1-0
rename
_unlink
_fstat64
_fstat64i32
_mkdir
_stat64i32
_stat64
_chmod
_access
_unlock_file
_lock_file
_umask
remove
api-ms-win-crt-convert-l1-1-0
_atoi64
atoi
strtoll
strtoul
atof
strtol
_ecvt
strtod
wcstombs
wcstombs_s
strtof
mbstowcs_s
atol
api-ms-win-crt-time-l1-1-0
_time64
_Gettnames
_Strftime
_localtime64
_tzset
__daylight
_Getdays
_Getmonths
_W_Getdays
__tzname
_mktime64
__timezone
_ftime64
clock
strftime
_gmtime64
_Wcsftime
_W_Gettnames
_W_Getmonths
_time32
api-ms-win-crt-utility-l1-1-0
rand
srand
qsort
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
___lc_codepage_func
___lc_locale_name_func
__pctype_func
___lc_collate_cp_func
setlocale
_unlock_locales
_lock_locales
localeconv
___mb_cur_max_func
api-ms-win-crt-environment-l1-1-0
__p__environ
_putenv
getenv
api-ms-win-crt-process-l1-1-0
_cwait
_execve
_execv
_spawnve
_spawnv
api-ms-win-crt-conio-l1-1-0
_getche
_putch
_getch
_ungetch
api-ms-win-crt-multibyte-l1-1-0
_mbstrlen
gdi32
EnumFontFamiliesExA
GetPixel
GetDeviceCaps
TextOutA
CreateDIBSection
SetDIBitsToDevice
SetBkMode
DeleteDC
CreateCompatibleDC
TextOutW
SetTextColor
GetTextExtentPoint32A
SetBkColor
SelectObject
GetTextExtentPoint32W
GetCharABCWidthsFloatW
DeleteObject
CreateFontIndirectA
GetStockObject
oleaut32
SysFreeString
VariantClear
crypt32
CertEnumCertificatesInStore
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertFindExtension
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertFreeCertificateContext
CertOpenStore
CertCloseStore
CertFindCertificateInStore
wldap32
ord217
ord143
ord45
ord211
ord46
ord50
ord60
ord41
ord22
ord26
ord27
ord301
ord200
ord30
ord79
ord35
ord33
ord32
normaliz
IdnToAscii
IdnToUnicode
Exports
Exports
Sections
.text Size: 5.3MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 466KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 234KB - Virtual size: 233KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ