wkhtmltopdf[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

wkhtmltopdf.exe
Size

39.6MB
MD5

68020601296529ccf4ea274052e446fa
SHA1

99961615604253f6d3331d4853a3497d3372c7de
SHA256

64d17682320bffd45b2208ed13b136d59139e82573745f14556cf25e95cbd808
SHA512

bf5381a85685efdb9efaf09004b9b2aec5676731ecde8bbbc9634fb58f6cb59f296d058eff02482a0fc59123540a11266c9ea27be823f07e436e19d56937e959
SSDEEP

393216:YPHeFRQAAS1svGdarxl6FnaC+dLc0BMXJsv6tWKFdu9C0wua2JD:YPHqR/A6radl6FnaC+1c9q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
wkhtmltopdf.exe

Files

wkhtmltopdf.exe
.exe windows x64

16d538a410fc9155106e4f4b4f897649

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CopySid
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
DeregisterEventSource
FreeSid
GetLengthSid
GetTokenInformation
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegFlushKey
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegisterEventSourceW
ReportEventW

comdlg32

GetOpenFileNameW
GetSaveFileNameW

gdi32

AbortDoc
BeginPath
BitBlt
CloseFigure
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateEllipticRgn
CreateFontIndirectW
CreatePalette
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
EndDoc
EndPage
EndPath
EnumFontFamiliesExW
ExtCreatePen
ExtTextOutW
FillPath
GdiFlush
GetBkMode
GetCharABCWidthsFloatW
GetCharABCWidthsW
GetCurrentObject
GetDIBits
GetDeviceCaps
GetFontData
GetGlyphOutlineW
GetNearestPaletteIndex
GetObjectW
GetOutlineTextMetricsW
GetPaletteEntries
GetRegionData
GetRgnBox
GetStockObject
GetTextExtentPoint32W
GetTextFaceW
GetTextMetricsW
GetWorldTransform
LineTo
MoveToEx
OffsetRgn
PolyBezierTo
PtInRegion
RealizePalette
ResetDCW
RestoreDC
SaveDC
SelectClipPath
SelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetGraphicsMode
SetPolyFillMode
SetTextAlign
SetTextColor
SetWorldTransform
StartDocW
StartPage
StretchBlt
StrokePath

imm32

ImmAssociateContext
ImmGetCompositionStringW
ImmGetContext
ImmGetDefaultIMEWnd
ImmNotifyIME
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionFontW
ImmSetCompositionWindow

kernel32

AddVectoredExceptionHandler
AreFileApisANSI
CloseHandle
CompareStringW
ConvertFiberToThread
ConvertThreadToFiber
CopyFileW
CreateDirectoryW
CreateEventA
CreateEventW
CreateFiber
CreateFileA
CreateFileMappingW
CreateFileW
CreateProcessW
CreateSemaphoreA
CreateSemaphoreW
CreateThread
DeleteCriticalSection
DeleteFiber
DeleteFileA
DeleteFileW
DeviceIoControl
DuplicateHandle
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileExW
FindFirstFileW
FindNextChangeNotification
FindNextFileW
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeLibrary
GetCommandLineW
GetConsoleMode
GetCurrencyFormatW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDriveTypeW
GetEnvironmentVariableW
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileType
GetFullPathNameA
GetFullPathNameW
GetHandleInformation
GetLastError
GetLocalTime
GetLocaleInfoW
GetLogicalDrives
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetProfileStringW
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetThreadContext
GetThreadPriority
GetThreadTimes
GetTickCount
GetTimeFormatW
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultUILanguage
GetVersion
GetVersionExW
GetVolumeInformationW
GlobalAlloc
GlobalFree
GlobalLock
GlobalSize
GlobalUnlock
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLanguageGroup
IsValidLocale
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LocalFree
LockFile
LockFileEx
MapViewOfFile
MoveFileW
MultiByteToWideChar
OpenProcess
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleA
ReadConsoleW
ReadFile
ReadProcessMemory
ReleaseSemaphore
RemoveDirectoryW
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetConsoleMode
SetCurrentDirectoryW
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SetFilePointerEx
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
SwitchToFiber
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnlockFile
UnlockFileEx
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteFile
__C_specific_handler
lstrcmpW

msvcrt

___lc_codepage_func
___mb_cur_max_func
__doserrno
__getmainargs
__initenv
__iob_func
__lconv_init
__pioinfo
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthreadex
_cexit
_clearfp
_close
_control87
_endthreadex
_errno
_exit
_filelengthi64
_fileno
_flushall
_fmode
_fstat64
_ftime
_get_osfhandle
_getdrive
_gmtime64
_initterm
_localtime64
_lock
_lseek
_lseeki64
_mktime64
_msize
_onexit
_open_osfhandle
_read
_setjmp
_setmode
_snwprintf
_stat64
_strdup
_vsnwprintf
_stricmp
_strnicmp
_time64
_tzset
_ultoa
_unlock
_vsnprintf
_waccess
_wchmod
_wfopen
_wgetdcwd
_wgetenv
_write
abort
acos
asin
atan
atof
atoi
calloc
exit
fclose
feof
ferror
fflush
fgetpos
fgets
fopen
fprintf
fputc
fputs
fread
free
frexp
fseek
fsetpos
ftell
fwprintf
fwrite
getc
getenv
getwc
isalpha
islower
isspace
isupper
iswctype
isxdigit
localeconv
log10
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
printf
putc
puts
putwc
qsort
raise
rand
realloc
remove
setlocale
setvbuf
signal
sprintf
srand
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strrchr
strspn
strstr
strtol
strtoul
strxfrm
tan
tolower
toupper
towlower
towupper
ungetc
ungetwc
vfprintf
wcscoll
wcscpy
wcsftime
wcslen
wcsrchr
wcsstr
wcsxfrm
_tzname
_nextafter
_write
_strdup
_read
_putenv
_fileno
_fdopen
_close

ole32

CoCreateGuid
CoCreateInstance
CoGetMalloc
CoInitialize
CoLockObjectExternal
CoTaskMemFree
CoUninitialize
DoDragDrop
OleFlushClipboard
OleGetClipboard
OleInitialize
OleIsCurrentClipboard
OleSetClipboard
OleUninitialize
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
StringFromGUID2

shell32

SHGetFileInfoW
ShellExecuteW
Shell_NotifyIconW

shlwapi

PathCombineW
PathRemoveFileSpecW
SHGetValueW

user32

AdjustWindowRectEx
BeginPaint
CallNextHookEx
CallWindowProcW
ChangeClipboardChain
CharNextExA
ClientToScreen
ClipCursor
CreateCaret
CreateCursor
CreateIconIndirect
CreateWindowExW
DefWindowProcA
DefWindowProcW
DestroyCaret
DestroyCursor
DestroyIcon
DestroyWindow
DispatchMessageW
DrawIconEx
EnableMenuItem
EndPaint
FindWindowExW
FindWindowW
FlashWindowEx
GetActiveWindow
GetAsyncKeyState
GetCaretBlinkTime
GetClassInfoW
GetClientRect
GetClipboardFormatNameW
GetCursorPos
GetDC
GetDesktopWindow
GetDoubleClickTime
GetFocus
GetIconInfo
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardState
GetLastInputInfo
GetMenu
GetMessageW
GetParent
GetProcessWindowStation
GetPropW
GetQueueStatus
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetUpdateRect
GetUserObjectInformationW
GetWindowLongPtrW
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowRgn
GetWindowThreadProcessId
HideCaret
InvalidateRect
InvalidateRgn
IsChild
IsIconic
IsWindowVisible
IsZoomed
KillTimer
LoadCursorW
LoadIconW
LoadImageW
MapVirtualKeyW
MapWindowPoints
MessageBeep
MessageBoxW
MoveWindow
MsgWaitForMultipleObjectsEx
PeekMessageW
PostMessageW
RegisterClassExW
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
ScreenToClient
ScrollWindowEx
SendMessageW
SetCapture
SetCaretBlinkTime
SetCaretPos
SetClipboardViewer
SetCursor
SetCursorPos
SetDoubleClickTime
SetFocus
SetForegroundWindow
SetMenuItemInfoW
SetParent
SetPropW
SetTimer
SetWindowLongPtrA
SetWindowLongPtrW
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoW
ToAscii
ToUnicode
TrackPopupMenuEx
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UpdateWindow
ValidateRgn
WindowFromPoint

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

winmm

timeBeginPeriod
timeEndPeriod

winspool.drv

ClosePrinter
DeviceCapabilitiesW
EnumFormsW
EnumPrintersW
GetPrinterW
OpenPrinterW

ws2_32

WSAAccept
WSAAsyncSelect
WSACleanup
WSAConnect
WSAGetLastError
WSAHtonl
WSAHtons
WSAIoctl
WSANtohl
WSANtohs
WSARecv
WSARecvFrom
WSASend
WSASendTo
WSASetLastError
WSASocketW
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyaddr
gethostbyname
gethostname
getnameinfo
getpeername
getsockname
getsockopt
htonl
inet_addr
ioctlsocket
listen
ntohl
ntohs
recv
select
send
setsockopt
socket

Exports

Exports

_Z11handleErrorbi
_ZN11wkhtmltopdf12PdfConverter11addResourceERKNS_8settings9PdfObjectEPK7QString
_ZN11wkhtmltopdf12PdfConverter11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11wkhtmltopdf12PdfConverter11qt_metacastEPKc
_ZN11wkhtmltopdf12PdfConverter14producingFormsEb
_ZN11wkhtmltopdf12PdfConverter16staticMetaObjectE
_ZN11wkhtmltopdf12PdfConverter18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN11wkhtmltopdf12PdfConverter25staticMetaObjectExtraDataE
_ZN11wkhtmltopdf12PdfConverter27millimeterToPointMultiplierE
_ZN11wkhtmltopdf12PdfConverter4privEv
_ZN11wkhtmltopdf12PdfConverter6outputEv
_ZN11wkhtmltopdf12PdfConverterC1ERNS_8settings9PdfGlobalE
_ZN11wkhtmltopdf12PdfConverterC2ERNS_8settings9PdfGlobalE
_ZN11wkhtmltopdf12PdfConverterD0Ev
_ZN11wkhtmltopdf12PdfConverterD1Ev
_ZN11wkhtmltopdf12PdfConverterD2Ev
_ZN11wkhtmltopdf14ImageConverter11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11wkhtmltopdf14ImageConverter11qt_metacastEPKc
_ZN11wkhtmltopdf14ImageConverter16staticMetaObjectE
_ZN11wkhtmltopdf14ImageConverter18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN11wkhtmltopdf14ImageConverter25staticMetaObjectExtraDataE
_ZN11wkhtmltopdf14ImageConverter4privEv
_ZN11wkhtmltopdf14ImageConverter6outputEv
_ZN11wkhtmltopdf14ImageConverterC1ERNS_8settings11ImageGlobalEPK7QString
_ZN11wkhtmltopdf14ImageConverterC2ERNS_8settings11ImageGlobalEPK7QString
_ZN11wkhtmltopdf14ImageConverterD0Ev
_ZN11wkhtmltopdf14ImageConverterD1Ev
_ZN11wkhtmltopdf14ImageConverterD2Ev
_ZN11wkhtmltopdf24dumpDefaultTOCStyleSheetER11QTextStreamRNS_8settings14TableOfContentE
_ZN11wkhtmltopdf8settings10LoadGlobalC1Ev
_ZN11wkhtmltopdf8settings10LoadGlobalC2Ev
_ZN11wkhtmltopdf8settings10proxyToStrERKNS0_5ProxyE
_ZN11wkhtmltopdf8settings10strToProxyEPKcPb
_ZN11wkhtmltopdf8settings11ImageGlobal3getEPKc
_ZN11wkhtmltopdf8settings11ImageGlobal3setEPKcRK7QString
_ZN11wkhtmltopdf8settings11ImageGlobalC1Ev
_ZN11wkhtmltopdf8settings11ImageGlobalC2Ev
_ZN11wkhtmltopdf8settings12CropSettingsC1Ev
_ZN11wkhtmltopdf8settings12CropSettingsC2Ev
_ZN11wkhtmltopdf8settings12HeaderFooterC1Ev
_ZN11wkhtmltopdf8settings12HeaderFooterC2Ev
_ZN11wkhtmltopdf8settings13logLevelToStrERKNS0_8LogLevelEPb
_ZN11wkhtmltopdf8settings13pageSizeToStrEN8QPrinter8PageSizeE
_ZN11wkhtmltopdf8settings13strToLogLevelEPKcPb
_ZN11wkhtmltopdf8settings13strToPageSizeEPKcPb
_ZN11wkhtmltopdf8settings13strToUnitRealEPKcPb
_ZN11wkhtmltopdf8settings13unitRealToStrERK5QPairIdN8QPrinter4UnitEEPb
_ZN11wkhtmltopdf8settings14TableOfContentC1Ev
_ZN11wkhtmltopdf8settings14TableOfContentC2Ev
_ZN11wkhtmltopdf8settings14colorModeToStrEN8QPrinter9ColorModeE
_ZN11wkhtmltopdf8settings14strToColorModeEPKcPb
_ZN11wkhtmltopdf8settings16orientationToStrEN8QPrinter11OrientationE
_ZN11wkhtmltopdf8settings16printerModeToStrEN8QPrinter11PrinterModeE
_ZN11wkhtmltopdf8settings16strToOrientationEPKcPb
_ZN11wkhtmltopdf8settings16strToPrinterModeEPKcPb
_ZN11wkhtmltopdf8settings22loadErrorHandlingToStrENS0_8LoadPage17LoadErrorHandlingE
_ZN11wkhtmltopdf8settings22strToLoadErrorHandlingEPKcPb
_ZN11wkhtmltopdf8settings3WebC1Ev
_ZN11wkhtmltopdf8settings3WebC2Ev
_ZN11wkhtmltopdf8settings4SizeC1Ev
_ZN11wkhtmltopdf8settings4SizeC2Ev
_ZN11wkhtmltopdf8settings5ProxyC1Ev
_ZN11wkhtmltopdf8settings5ProxyC2Ev
_ZN11wkhtmltopdf8settings6MarginC1Ev
_ZN11wkhtmltopdf8settings6MarginC2Ev
_ZN11wkhtmltopdf8settings8LoadPage20mediaFilesExtensionsE
_ZN11wkhtmltopdf8settings8LoadPageC1Ev
_ZN11wkhtmltopdf8settings8LoadPageC2Ev
_ZN11wkhtmltopdf8settings9PdfGlobal3getEPKc
_ZN11wkhtmltopdf8settings9PdfGlobal3setEPKcRK7QString
_ZN11wkhtmltopdf8settings9PdfGlobalC1Ev
_ZN11wkhtmltopdf8settings9PdfGlobalC2Ev
_ZN11wkhtmltopdf8settings9PdfObject3getEPKc
_ZN11wkhtmltopdf8settings9PdfObject3setEPKcRK7QString
_ZN11wkhtmltopdf8settings9PdfObjectC1Ev
_ZN11wkhtmltopdf8settings9PdfObjectC2Ev
_ZN11wkhtmltopdf9Converter10phaseCountEv
_ZN11wkhtmltopdf9Converter11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11wkhtmltopdf9Converter11qt_metacastEPKc
_ZN11wkhtmltopdf9Converter12currentPhaseEv
_ZN11wkhtmltopdf9Converter12phaseChangedEv
_ZN11wkhtmltopdf9Converter13httpErrorCodeEv
_ZN11wkhtmltopdf9Converter14progressStringEv
_ZN11wkhtmltopdf9Converter15beginConversionEv
_ZN11wkhtmltopdf9Converter15progressChangedEi
_ZN11wkhtmltopdf9Converter16emitCheckboxSvgsERKNS_8settings8LoadPageE
_ZN11wkhtmltopdf9Converter16phaseDescriptionEi
_ZN11wkhtmltopdf9Converter16staticMetaObjectE
_ZN11wkhtmltopdf9Converter18checkboxSvgChangedERK7QString
_ZN11wkhtmltopdf9Converter18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN11wkhtmltopdf9Converter21radiobuttonSvgChangedERK7QString
_ZN11wkhtmltopdf9Converter25checkboxCheckedSvgChangedERK7QString
_ZN11wkhtmltopdf9Converter25staticMetaObjectExtraDataE
_ZN11wkhtmltopdf9Converter28radiobuttonCheckedSvgChangedERK7QString
_ZN11wkhtmltopdf9Converter5errorERK7QString
_ZN11wkhtmltopdf9Converter6cancelEv
_ZN11wkhtmltopdf9Converter7convertEv
_ZN11wkhtmltopdf9Converter7warningERK7QString
_ZN11wkhtmltopdf9Converter8finishedEb
_ZN12MyLooksStyle11qt_metacallEN11QMetaObject4CallEiPPv
_ZN12MyLooksStyle11qt_metacastEPKc
_ZN12MyLooksStyle11radiobuttonE
_ZN12MyLooksStyle14producingFormsEb
_ZN12MyLooksStyle14setCheckboxSvgERK7QString
_ZN12MyLooksStyle16checkbox_checkedE
_ZN12MyLooksStyle16staticMetaObjectE
_ZN12MyLooksStyle17setRadioButtonSvgERK7QString
_ZN12MyLooksStyle18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
_ZN12MyLooksStyle19radiobutton_checkedE
_ZN12MyLooksStyle21setCheckboxCheckedSvgERK7QString
_ZN12MyLooksStyle24setRadioButtonCheckedSvgERK7QString
_ZN12MyLooksStyle25staticMetaObjectExtraDataE
_ZN12MyLooksStyle8checkboxE
_ZN12MyLooksStyleC1Ev
_ZN12MyLooksStyleC2Ev
_ZNK11wkhtmltopdf12PdfConverter10metaObjectEv
_ZNK11wkhtmltopdf12PdfConverter14globalSettingsEv
_ZNK11wkhtmltopdf14ImageConverter10metaObjectEv
_ZNK11wkhtmltopdf9Converter10metaObjectEv
_ZNK12MyLooksStyle10metaObjectEv
_ZNK12MyLooksStyle13drawPrimitiveEN6QStyle16PrimitiveElementEPK12QStyleOptionP8QPainterPK7QWidget
_ZTI12MyLooksStyle
_ZTIN11wkhtmltopdf12PdfConverterE
_ZTIN11wkhtmltopdf14ImageConverterE
_ZTIN11wkhtmltopdf9ConverterE
_ZTV12MyLooksStyle
_ZTVN11wkhtmltopdf12PdfConverterE
_ZTVN11wkhtmltopdf14ImageConverterE
_ZTVN11wkhtmltopdf9ConverterE
wkhtmltoimage_convert
wkhtmltoimage_create_converter
wkhtmltoimage_create_global_settings
wkhtmltoimage_current_phase
wkhtmltoimage_deinit
wkhtmltoimage_destroy_converter
wkhtmltoimage_destroy_global_settings
wkhtmltoimage_extended_qt
wkhtmltoimage_get_global_setting
wkhtmltoimage_get_output
wkhtmltoimage_http_error_code
wkhtmltoimage_init
wkhtmltoimage_phase_count
wkhtmltoimage_phase_description
wkhtmltoimage_progress_string
wkhtmltoimage_set_error_callback
wkhtmltoimage_set_finished_callback
wkhtmltoimage_set_global_setting
wkhtmltoimage_set_phase_changed_callback
wkhtmltoimage_set_progress_changed_callback
wkhtmltoimage_set_warning_callback
wkhtmltoimage_version
wkhtmltopdf_add_object
wkhtmltopdf_convert
wkhtmltopdf_create_converter
wkhtmltopdf_create_global_settings
wkhtmltopdf_create_object_settings
wkhtmltopdf_current_phase
wkhtmltopdf_deinit
wkhtmltopdf_destroy_converter
wkhtmltopdf_destroy_global_settings
wkhtmltopdf_destroy_object_settings
wkhtmltopdf_extended_qt
wkhtmltopdf_get_global_setting
wkhtmltopdf_get_object_setting
wkhtmltopdf_get_output
wkhtmltopdf_http_error_code
wkhtmltopdf_init
wkhtmltopdf_phase_count
wkhtmltopdf_phase_description
wkhtmltopdf_progress_string
wkhtmltopdf_set_error_callback
wkhtmltopdf_set_finished_callback
wkhtmltopdf_set_global_setting
wkhtmltopdf_set_object_setting
wkhtmltopdf_set_phase_changed_callback
wkhtmltopdf_set_progress_changed_callback
wkhtmltopdf_set_warning_callback
wkhtmltopdf_version

Sections

.text
Size: 30.2MB - Virtual size: 30.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1003KB - Virtual size: 1003KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 81KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 477KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16d538a410fc9155106e4f4b4f897649

Headers

File Characteristics

Imports

advapi32

comdlg32

gdi32

imm32

kernel32

msvcrt

ole32

shell32

shlwapi

user32

version

winmm

winspool.drv

ws2_32

Exports

Exports

Sections

.text Size: 30.2MB - Virtual size: 30.2MB

.data Size: 135KB - Virtual size: 135KB

.rdata Size: 5.3MB - Virtual size: 5.3MB

.pdata Size: 1003KB - Virtual size: 1003KB

.xdata Size: 2.5MB - Virtual size: 2.5MB

.bss Size: - Virtual size: 81KB

.edata Size: 9KB - Virtual size: 9KB

.idata Size: 23KB - Virtual size: 22KB

.CRT Size: 512B - Virtual size: 112B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1024B - Virtual size: 608B

.reloc Size: 477KB - Virtual size: 477KB

.text
Size: 30.2MB - Virtual size: 30.2MB

.data
Size: 135KB - Virtual size: 135KB

.rdata
Size: 5.3MB - Virtual size: 5.3MB

.pdata
Size: 1003KB - Virtual size: 1003KB

.xdata
Size: 2.5MB - Virtual size: 2.5MB

.bss
Size: - Virtual size: 81KB

.edata
Size: 9KB - Virtual size: 9KB

.idata
Size: 23KB - Virtual size: 22KB

.CRT
Size: 512B - Virtual size: 112B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 608B

.reloc
Size: 477KB - Virtual size: 477KB