95e51d33edf8225f14c84715603b3237a9696a98f8c4b5e6ea51a0bf449fc1ce

Sharing

Copy URL Twitter E-mail

General

Target

95e51d33edf8225f14c84715603b3237a9696a98f8c4b5e6ea51a0bf449fc1ce
Size

3.3MB
MD5

146f120a43ba0dcdaa96edcf9f1f571a
SHA1

e84f15518c555c0d4fb0b42da3e7de0c398f196d
SHA256

95e51d33edf8225f14c84715603b3237a9696a98f8c4b5e6ea51a0bf449fc1ce
SHA512

542538a38284c1b2f9263e831e579c3d139b0673a3d9ac609a184dbde8b34f3d9585a60f85e865dbe51affc0d040ecbd84f7443aa3caf0c6f68f9738b86db6af
SSDEEP

49152:rU1/eVUj8NaJHi8MADEXGkVdIklxAJ72LNskuMqGf1iV+OenVPeDxEk:OeSwzLxAB2SkW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95e51d33edf8225f14c84715603b3237a9696a98f8c4b5e6ea51a0bf449fc1ce

Files

95e51d33edf8225f14c84715603b3237a9696a98f8c4b5e6ea51a0bf449fc1ce
.dll windows x86

165ae6af9288e20e58e6fc4d563ec68e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libcairo-2

cairo_pattern_create_for_surface
cairo_pattern_set_matrix
cairo_matrix_init_scale
cairo_set_source
cairo_pattern_set_extend
cairo_line_to
cairo_pattern_set_filter
cairo_get_source
cairo_stroke_preserve
cairo_win32_surface_create
cairo_clip
cairo_set_line_width
cairo_stroke
cairo_create
cairo_select_font_face
cairo_set_source_rgb
cairo_translate
cairo_surface_write_to_png_stream
cairo_win32_surface_create_with_dib
cairo_svg_surface_create_for_stream
cairo_new_sub_path
cairo_text_extents
cairo_set_dash
cairo_fill_preserve
cairo_set_font_size
cairo_pattern_destroy
cairo_pdf_surface_create_for_stream
cairo_scale
cairo_set_source_rgba
cairo_font_options_set_hint_style
cairo_identity_matrix
cairo_text_path
cairo_destroy
cairo_move_to
cairo_paint
cairo_set_fill_rule
cairo_restore
cairo_font_options_destroy
cairo_font_options_create
cairo_show_page
cairo_fill
cairo_surface_destroy
cairo_set_source_surface
cairo_rectangle
cairo_font_options_set_hint_metrics
cairo_save
cairo_image_surface_create
cairo_set_line_join
cairo_set_line_cap
cairo_new_path
cairo_arc_negative
cairo_image_surface_create_from_png_stream
cairo_curve_to
cairo_pattern_create_linear
cairo_pattern_add_color_stop_rgba
cairo_image_surface_get_width
cairo_surface_reference
cairo_paint_with_alpha
cairo_pop_group_to_source
cairo_push_group
cairo_matrix_translate
cairo_win32_printing_surface_create
cairo_surface_status
cairo_image_surface_get_height
cairo_rel_move_to
cairo_image_surface_get_data
cairo_rotate
cairo_rel_line_to
cairo_arc
cairo_close_path

libpango-1.0-0

pango_layout_get_pixel_extents
pango_font_description_set_absolute_size
pango_layout_set_ellipsize
pango_layout_get_extents
pango_layout_get_context
pango_layout_set_font_description
pango_font_description_free
pango_layout_set_spacing
pango_layout_set_alignment
pango_layout_set_wrap
pango_font_description_new
pango_layout_set_single_paragraph_mode
pango_layout_is_wrapped
pango_font_description_set_family_static
pango_layout_set_text
pango_layout_get_baseline
pango_layout_is_ellipsized
pango_layout_set_width
pango_font_description_set_weight
pango_font_description_set_style

libpangocairo-1.0-0

pango_cairo_show_layout
pango_cairo_update_layout
pango_cairo_context_set_font_options
pango_cairo_create_layout

libgobject-2.0-0

g_object_unref

dparser

dparser_select_column_formatted_alias_start
dparser_select_column_formatted_parent2_quote
dparser_expr_complex_start
dparser_select_tab_formatted_parent1_quote
dparser_expr_formatted_parent2
dparser_select_column_formatted_alias_length
dparser_select_tab_name
dparser_select_tab_formatted_alias
dparser_select_column_formatted_parent1_quote
dparser_select_tab_formatted_name_length
dparser_select_group_by_column_at
dparser_select_length
dparser_expr_formatted_parent1_quote
dparser_expr_formatted_name_length
dparser_select_tab_formatted_name_quote
dparser_expr_complex
dparser_select_column_formatted_alias_quote
dparser_select_group_by_number_of_columns
dparser_expr_formatted_name_start
dparser_select_column_formatted_parent0
dparser_select_column_formatted_name
dparser_select_column_formatted_name_start
dparser_select_tab_formatted_name
dparser_select_start
dparser_expr_formatted_name_quote
dparser_expr_formatted_parent2_start
dparser_select_column_formatted_alias
dparser_select_column_formatted_parent1_length
dparser_select_column_parent0
dparser_expr_formatted_parent1
dparser_select_column_aggre_func
dparser_select_tab_formatted_parent0
dparser_expr_left
dparser_free
dparser_select_tab_formatted_parent1_length
dparser_select_column_at
dparser_expr_formatted_parent2_quote
dparser_select_tab_formatted_alias_quote
dparser_select_order_by_number_of_columns
dparser_select_column_formatted_parent2_length
dparser_select_tab_complex
dparser_select_tab_formatted_parent_quote
dparser_select_column_name
dparser_select_tab_at
dparser_expr_formatted_parent1_start
dparser_expr_formatted_parent2_length
dparser_select_column_parent1
dparser_select_tab_complex_start
dparser_last_stmt_type
dparser_select_tab_formatted_parent0_length
dparser_select_column_formatted_parent2
dparser_select_tab_parent1
dparser_select_tab_on_expr_lr
dparser_select_column_formatted_parent1
dparser_select_tab_formatted_name_start
dparser_select_column_formatted_parent1_start
dparser_select_having_expr
dparser_select_order_by_column_at
dparser_expr_parent2
dparser_create
dparser_select_number_of_tables
dparser_select_column_formatted_parent0_start
dparser_select_tab_formatted_parent0_quote
dparser_select_tab_parent0
dparser_expr_parent1
dparser_expr_formatted_name
dparser_select_tab_formatted_parent0_start
dparser_select_tab_formatted_parent
dparser_select_tab_formatted_parent_start
dparser_select_tab_formatted_alias_length
dparser_select_tab_formatted_alias_start
dparser_select_tab_formatted_parent1_start
dparser_select_column_complex_start
dparser_select_column_formatted_parent0_quote
dparser_select_where_expr
dparser_select_tab_formatted_parent1
dparser_select_column_formatted_name_quote
dparser_expr_right
dparser_select
dparser_select_column_formatted_parent0_length
dparser_select_number_of_columns
dparser_select_column_parent2
dparser_select_column_alias
dparser_select_column_complex
dparser_select_column_formatted_parent2_start
dparser_select_tab_alias
dparser_expr_formatted_parent1_length
dparser_select_tab_formatted_parent_length
dparser_expr_name
dparser_select_tab_parent
dparser_select_column_formatted_name_length

libpng14-14

png_set_write_fn
png_create_info_struct
png_write_end
png_set_IHDR
png_set_longjmp_fn
png_get_io_ptr
png_set_bgr
png_create_write_struct
png_write_info
png_set_PLTE
png_write_image

libcc

?encodeToBase64@CCNavicat@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?writeUInt@CCNavicat@@SAXPAVICSPropertyAccessor@@HIH@Z
?writeInt@CCNavicat@@SAXPAVICSPropertyAccessor@@HHH@Z
?readInt@CCNavicat@@SAHPAVICSPropertyAccessor@@HH@Z
?guessFieldDecimal@CCNavicat@@QAEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4CMConnType@@@Z
?guessFieldLength@CCNavicat@@QAEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4CMConnType@@@Z
?guessFieldType@CCNavicat@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@W4CMConnType@@@Z
?indexOfString@CCNavicat@@QAEHPAVCMObject@@HV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?cmConnTypeToString@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4CMConnType@@@Z
?obtainConditionalPropertyIsSupported@CCNavicat@@QAE_NPAVCMObject@@H@Z
?writeInt64@CCNavicat@@SAXPAVICSPropertyAccessor@@H_JH@Z
?writeBool@CCNavicat@@SAXPAVICSPropertyAccessor@@H_NH@Z
?readBool@CCNavicat@@SA_NPAVICSPropertyAccessor@@HH@Z
?removeStringAtIndex@CCNavicat@@SAXPAVICSPropertyAccessor@@HH@Z
?indexOfSubObject@CCNavicat@@QAEHPAVCMObject@@HV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?removeAllStrings@CCNavicat@@SAXPAVICSPropertyAccessor@@H@Z
?findSubObject@CCNavicat@@QAEPAVCMObject@@PAV2@HV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?readString@CCNavicat@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVICSPropertyAccessor@@HH@Z
?writeString@CCNavicat@@SAXPAVICSPropertyAccessor@@HV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?removeObject@CCNavicat@@QAEXPAVICSPropertyAccessor@@HPAVCMObject@@_N@Z
?reorderObject@CCNavicat@@SAXPAVICSPropertyAccessor@@HHH@Z
?postNotification@CCNavicat@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAX1@Z
?obtainServer@CCNavicat@@SAPAVCMObject@@PAV2@@Z
?readName@CCNavicat@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVICSPropertyAccessor@@_N@Z
?writeName@CCNavicat@@SAXPAVICSPropertyAccessor@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?isNameAvailable@CCNavicat@@QAE_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4CMObjectType@@PAVCMObject@@@Z
?isNameAvailableForObject@CCNavicat@@QAE_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVCMObject@@1@Z
?smartFormatIdentifier@CCNavicat@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V23@W4CMConnType@@K@Z
?obtainNewTableRefAfterTableDesignSave@CCNavicat@@QAEPAVCMObject@@PAV2@@Z
?obtainConnType@CCNavicat@@SA?AW4CMConnType@@PAVCMObject@@@Z
?obtainServerVersion@CCNavicat@@SAHPAVCMObject@@@Z
?obtainServerEditionValue@CCNavicat@@SAHPAVCMObject@@@Z
?obtainDDL@CCNavicat@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVCMObject@@@Z
?handleErrorMessage@CCNavicat@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBX@Z
?createJson@CCNavicat@@QAEXPAPAVICOJsonValue@@@Z
?createJsonFromString@CCNavicat@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAPAVICOJsonValue@@@Z
?jsonParseFileSafe@CCNavicat@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAPAVICOJsonValue@@@Z
?jsonWriteFilePretty@CCNavicat@@QAE_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVICOJsonValue@@@Z
?jsonFreeHandle@CCNavicat@@QAEXPAVICOJsonValue@@@Z
?serializeObject@CCNavicat@@QAEPAVICOJsonValue@@PAVCMObject@@@Z
?readObject@CCNavicat@@SAPAVCMObject@@PAVICSPropertyAccessor@@HH@Z
?endAccess@CCNavicat@@QAEXPAVICSPropertyAccessor@@@Z
?beginReadAccess@CCNavicat@@QAEPAVICSPropertyAccessor@@PAVCMObject@@@Z
?designFormGetDirtyObjectRef@CCNavicat@@QAEPAVCMObject@@PAVICSForm@@@Z
?obtainParent@CCNavicat@@SAPAVCMObject@@PAV2@@Z
?obtainSchema@CCNavicat@@SAPAVCMObject@@PAV2@@Z
?obtainObjectType@CCNavicat@@SA?AW4CMObjectType@@PAVCMObject@@@Z
?collectGarbage@CCNavicat@@QAEXPAVCMObject@@@Z
?decodeFromBase64@CCNavicat@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?removeObjectFromListOnly@CCNavicat@@QAEXPAVICSPropertyAccessor@@HPAVCMObject@@@Z
?insertObject@CCNavicat@@SAXPAVICSPropertyAccessor@@HPAVCMObject@@H@Z
?insertNewObject@CCNavicat@@QAEPAVCMObject@@PAVICSPropertyAccessor@@HW4CMObjectType@@H@Z
?readListCount@CCNavicat@@SAHPAVICSPropertyAccessor@@H@Z
?findObjectInHolder@CCNavicat@@QAEPAVCMObject@@PAV2@W4CMObjectType@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?obtainVersionNum@@YAHW4CMConnType@@III@Z
?hybridConvertToTargetObject@CCNavicat@@QAE_NPAVCMObject@@W4CMConnType@@KHPAPAV2@@Z
?copyObject@CCNavicat@@QAEPAVCMObject@@PAV2@@Z
?writeObject@CCNavicat@@SAXPAVICSPropertyAccessor@@HPAVCMObject@@H@Z
?beginUnsafeAccess@CCNavicat@@QAEPAVICSPropertyAccessor@@PAVCMObject@@@Z
?modelDesignFormInitWithConnTypeInfo@CCNavicat@@QAE_NPAVICSForm@@W4CMConnType@@H_N@Z
?obtainFormServiceCMFormRef@CCNavicat@@QAEPAVCMObject@@PAVICSForm@@@Z
?deserializeObjectJson@CCNavicat@@QAEPAVCMObject@@PAVICOJsonValue@@@Z
?serializeObjectWithFilter@CCNavicat@@QAEPAVICOJsonValue@@PAVCMObject@@V?$set@PAVCMObject@@U?$less@PAVCMObject@@@std@@V?$allocator@PAVCMObject@@@3@@std@@@Z
?insertString@CCNavicat@@SAXPAVICSPropertyAccessor@@HV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z

libstat

?nstat_collect_unbind_identifier@@YAXPAX@Z
?nstat_property_map_create@@YAPAXABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z
?nstat_collect@@YAXPAXABQAXW4CollectPropertySource@NStat@@ABV?$set@PAXU?$less@PAX@std@@V?$allocator@PAX@2@@std@@@Z

libcf

?cfStringToWideString@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
?cfToLower@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV12@@Z
?cfObtainExtendedFilePath@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV12@@Z

kernel32

FreeLibrary
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
FindResourceW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetSystemInfo
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
LoadResource
LoadLibraryW
LockResource
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceFrequency
MultiByteToWideChar

user32

ReleaseCapture
GetWindowRect
PtInRect
GetScrollInfo
KillTimer
GetDoubleClickTime
SetTimer
SetCapture
GetFocus
SetScrollInfo
EndPaint
InvalidateRect
UpdateWindow
GetClientRect
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
ScreenToClient
BeginPaint
TrackMouseEvent
GetCapture
GetAsyncKeyState
GetCursorPos
MapWindowPoints

gdi32

CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
DeleteDC
DeleteObject
BitBlt

msvcp140

?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPAD_J@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Xinvalid_argument@std@@YAXPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
_Strcoll
?id@?$collate@D@std@@2V0locale@2@A
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
_Strxfrm
??Bid@locale@std@@QAEIXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
_Thrd_join
_Thrd_id
_Cnd_do_broadcast_at_thread_exit
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Throw_Cpp_error@std@@YAXH@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ

vcruntime140

__std_exception_copy
__std_exception_destroy
_purecall
_setjmp3
__std_terminate
memchr
strrchr
_except_handler4_common
__std_type_info_destroy_list
__current_exception_context
__current_exception
__RTDynamicCast
strchr
__CxxFrameHandler3
memset
_CxxThrowException
memmove
memcpy
longjmp

api-ms-win-crt-runtime-l1-1-0

_errno
exit
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_beginthreadex
_register_onexit_function
terminate
_execute_onexit_table
_crt_atexit
_cexit
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-string-l1-1-0

_strnicmp
strncpy
islower
isspace
strtok
tolower
isupper
_stricmp
toupper
strcpy_s

api-ms-win-crt-heap-l1-1-0

_callnewh
calloc
realloc
free
malloc

api-ms-win-crt-stdio-l1-1-0

_get_stream_buffer_pointers
__stdio_common_vsprintf
fputc
fflush
fgetc
__acrt_iob_func
__stdio_common_vfprintf
fclose
fgetpos
fread
fwrite
setvbuf
ferror
__stdio_common_vsscanf
_fseeki64
ungetc
fsetpos
__stdio_common_vsprintf_s
_wfopen

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-math-l1-1-0

floor
_CIatan2
_CIfmod
_libm_sse2_acos_precise
_libm_sse2_asin_precise
_libm_sse2_atan_precise
_libm_sse2_cos_precise
_libm_sse2_pow_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
_libm_sse2_tan_precise
ceil
round

api-ms-win-crt-convert-l1-1-0

_strtoui64
_strtoi64
strtol
strtod
atoi
strtoul

api-ms-win-crt-utility-l1-1-0

rand
ldiv

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-time-l1-1-0

clock

Exports

Exports

?ddGetFirstSelectedDiagramObjectsBorderColor@@YA?AUDDColor@@PAVDDNavicat@@PAVDDDiagram@@@Z
?ddSetSelectedDiagramObjectsBorderToDefaultColor@@YAXPAVDDNavicat@@PAVDDDiagram@@@Z
ddAddDiagram
ddAddDiagramImage
ddAddDiagramLabel
ddAddDiagramLayer
ddAddDiagramNote
ddAddDiagramShape
ddAddDiagramTable
ddAddDiagramView
ddAddModelSchema
ddAddModelTable
ddAddModelTableToDiagram
ddAddModelView
ddAddModelViewToDiagram
ddAlignSelectedDiagramObjects
ddBringSelectedDiagramObjectsToFront
ddCancelImport
ddConstParam
ddControlClearFilter
ddControlControlToSheet
ddControlEndEdit
ddControlFilterTable
ddControlGetDDMode
ddControlGetDDModeShape
ddControlGetScalingFactor
ddControlGetSheetOrigin
ddControlGetSheetSize
ddControlGetZoomRatio
ddControlGoToNextFilteredTable
ddControlGoToPreviousFilteredTable
ddControlHandleMsg
ddControlRegisterCallback
ddControlSetAsDarkTheme
ddControlSetDDMode
ddControlSetDDModeShape
ddControlSetHasContextMenu
ddControlSetModel
ddControlSetScalingFactor
ddControlSetSheetOrigin
ddControlSetZoomRatio
ddControlZoomIn
ddControlZoomOut
ddCopy
ddCreate
ddCreateNavigator
ddCreateViewer
ddCut
ddDelDiagram
ddDelDiagramObject
ddDelModelSchema
ddDelModelTable
ddDelModelView
ddDesignModelTable
ddDesignModelView
ddDiagramArrowParam
ddDiagramAutoLayout
ddDiagramAutoLayoutSimple
ddDiagramDeleteSelectedDiagramModelObjects
ddDiagramDeleteSelectedDiagramObjects
ddDiagramDeleteSelectedDiagramRelationAllVertices
ddDiagramFlush
ddDiagramGetSelectedObjectsType
ddDiagramImageResetSize
ddDiagramLayerParam
ddDiagramLayerRename
ddDiagramLineAddVertex
ddDiagramLineDeleteAllVertices
ddDiagramLineDeleteVertex
ddDiagramLineNumberOfVertices
ddDiagramLineParam
ddDiagramLinePointOnVertex
ddDiagramLinePointOnVertices
ddDiagramNoteEdit
ddDiagramNoteParam
ddDiagramNotifySelectionChange
ddDiagramObjectGetOpacity
ddDiagramObjectGetShapeStyle
ddDiagramObjectParam
ddDiagramObjectResetAspectRatio
ddDiagramObjectSetOpacity
ddDiagramObjectSetShapeStyle
ddDiagramObjectSizeToFit
ddDiagramObjectsSizeToFit
ddDiagramParam
ddDiagramPrint
ddDiagramPrintIcon
ddDiagramPrintJPG
ddDiagramPrintPDF
ddDiagramPrintPNG
ddDiagramPrintPreview
ddDiagramPrintSVG
ddDiagramPrintSnapshot
ddDiagramPrintThumbnail
ddDiagramRelationBaseAddVertex
ddDiagramRelationBaseDeleteAllVertex
ddDiagramRelationBaseDeleteVertex
ddDiagramRelationBaseGetDiagramTable
ddDiagramRelationBaseNumberOfLine
ddDiagramRelationBasePointOnVertex
ddDiagramRelationBaseVertexIndex
ddDiagramRelationGetCardinality
ddDiagramRelationGetIsValidCardinality
ddDiagramRelationGetLineWidth
ddDiagramRelationGetModelRelation
ddDiagramRelationGetModelTable
ddDiagramRelationSetCardinality
ddDiagramSelectAll
ddDiagramTableAddField
ddDiagramTableDeleteField
ddDiagramTableExpandColumns
ddDiagramTableGetDBSchemaName
ddDiagramTableGetModelTable
ddDiagramTableInsertField
ddDiagramTableRenameField
ddDiagramTableSetColor
ddDiagramTableSetDBSchema
ddDiagramTableSizeToDisplay
ddDiagramTableTogglePrimaryKey
ddDiagramUnselectAll
ddDiagramViewGetDBSchemaName
ddDiagramViewGetModelView
ddDiagramViewRenameField
ddDiagramViewSetDBSchema
ddDistributeSelectedDiagramObjects
ddEndImport
ddEndMacro
ddExistInActiveDiagram
ddFindSupportedPaper
ddFree
ddFreeNavigator
ddFreeViewer
ddGetActiveDiagram
ddGetActiveDiagramIndex
ddGetDiagram
ddGetDiagramObjectWithName
ddGetDiagramObjects
ddGetFirstSelectedDiagramObjectsColor
ddGetLastStatus
ddGetLastStatusMessage
ddGetModelDBSchemaNameAtIndex
ddGetModelTables
ddGetModelViews
ddGetNumberOfModelDBSchema
ddGotoCommand
ddImportModelObject
ddImportModelObjectsDone
ddImportUpdateDiagram
ddLoad
ddLoadActiveDiagramObjects
ddModelParam
ddModelSetSchema
ddModelVersion
ddNavigatorSetViewer
ddNumberOfDiagram
ddNumberOfModelTables
ddNumberOfModelViews
ddNumberOfSupportedPaper
ddObtainProject
ddPaperParam
ddPaste
ddRedo
ddRegisterCallback
ddRegisterLocalizedFormatFunction
ddRenameObject
ddResetHistory
ddSave
ddSaveLoadToNavicat
ddSelectObject
ddSelectObjectWithFocus
ddSelectedTableBaseAddRelatedObjects
ddSendSelectedDiagramObjectsToBack
ddSetActiveDiagram
ddSetActiveDiagramIndex
ddSetAsDarkTheme
ddSetCCNavicat
ddSetCSFormRef
ddSetSelectedDiagramObjectsColor
ddSetSelectedDiagramObjectsToDefaultColor
ddSetSelectedDiagramShapesBorderColor
ddSetSelectedDiagramShapesBorderToDefaultColor
ddSetupNewModel
ddStartImport
ddStartMacro
ddSupportedPaper
ddSyncERDiagramWithSchema
ddUndo
ddUnselectObject
ddViewerGetPreviewPageMode
ddViewerSetPreviewPageMode

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 432KB - Virtual size: 431KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

165ae6af9288e20e58e6fc4d563ec68e

Headers

DLL Characteristics

File Characteristics

Imports

libcairo-2

libpango-1.0-0

libpangocairo-1.0-0

libgobject-2.0-0

dparser

libpng14-14

libcc

libstat

libcf

kernel32

user32

gdi32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-time-l1-1-0

Exports

Exports

Sections

.text Size: 2.7MB - Virtual size: 2.7MB

.rdata Size: 432KB - Virtual size: 431KB

.data Size: 65KB - Virtual size: 72KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 147KB - Virtual size: 147KB

.text
Size: 2.7MB - Virtual size: 2.7MB

.rdata
Size: 432KB - Virtual size: 431KB

.data
Size: 65KB - Virtual size: 72KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 147KB - Virtual size: 147KB