be49694c4941b090c2efdbb98b33304c2a6c6884f54ba50904619063937764b9

Sharing

Copy URL Twitter E-mail

General

Target

be49694c4941b090c2efdbb98b33304c2a6c6884f54ba50904619063937764b9
Size

3.0MB
MD5

1b2417de07aa11e817535aedef825e59
SHA1

da4d0cbd8ca1af9f7c81fbb7efc86fd2afc41260
SHA256

be49694c4941b090c2efdbb98b33304c2a6c6884f54ba50904619063937764b9
SHA512

36ea938291f89904d7b96482eca878a6985566657ce278d9de216561f828e823dda089e68979fc219d3470d5e1f7faae2d41759e587b4c15b130e8467db01181
SSDEEP

98304:DtuEAT2z/3rlUCJ6w+pBY+TPzX7zmSx1xw:DtkT2z/6CJ6wQpzP9TC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be49694c4941b090c2efdbb98b33304c2a6c6884f54ba50904619063937764b9

Files

be49694c4941b090c2efdbb98b33304c2a6c6884f54ba50904619063937764b9
.dll windows x86

3562bc2a1497f691164b5ef06bcb0eed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegEnumValueA
RegOpenKeyExA

libgcc_s_dw2-1

__deregister_frame_info
__divdi3
__emutls_get_address
__moddi3
__register_frame_info
__udivdi3
__udivmoddi4

kernel32

AreFileApisANSI
CloseHandle
CreateFileA
CreateFileW
DeleteCriticalSection
EnterCriticalSection
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetFileAttributesA
GetFileSizeEx
GetFileTime
GetFullPathNameA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetVersionExA
GetWindowsDirectoryA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
ReadFile
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__mb_cur_max
__setusermatherr
_amsg_exit
_errno
_fdopen
_filelengthi64
_fileno
_fileno
_get_osfhandle
_hypot
_initterm
_iob
_lock
_pclose
_popen
_setjmp3
_setmode
_strdup
_stricmp
_stricmp
_strtoi64
_strtoui64
_unlock
_wfopen
abort
acos
asin
atof
atoi
bsearch
calloc
difftime
fclose
feof
fflush
fgetc
fgetpos
fopen
fputc
fread
free
fseek
fsetpos
ftell
fwrite
getc
getenv
gmtime
isalnum
isalpha
isprint
isspace
isupper
localtime
isxdigit
localeconv
log10
longjmp
malloc
memcpy
memmove
memset
mktime
memcmp
qsort
realloc
rewind
setlocale
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strstr
strtol
strtoul
time
tolower
ungetc
vfprintf
wcslen

libwinpthread-1

pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_unlock

shell32

SHGetFolderPathA

libstdc++-6

_ZNKSt5ctypeIcE13_M_widen_initEv
_ZNKSt6locale2id5_M_idEv
_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE4findEPKcjj
_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE5rfindEcj
_ZNKSt8__detail20_Prime_rehash_policy11_M_next_bktEj
_ZNKSt8__detail20_Prime_rehash_policy14_M_need_rehashEjjj
_ZNKSt9type_infoeqERKS_
_ZNSi10_M_extractIlEERSiRT_
_ZNSo5writeEPKci
_ZNSo9_M_insertImEERSoT_
_ZNSt13random_device7_M_finiEv
_ZNSt13random_device7_M_initERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZNSt13random_device9_M_getvalEv
_ZNSt5ctypeIcE2idE
_ZNSt6localeC1ERKS_
_ZNSt6localeC1Ev
_ZNSt6localeD1Ev
_ZNSt6localeaSERKS_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_disposeEv
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_replaceEjjPKcj
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE12_M_constructEjc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE14_M_replace_auxEjjjc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE4swapERS4_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE7reserveEj
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE7reserveEv
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE8_M_eraseEjj
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_appendEPKcj
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_assignERKS4_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_createERjj
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_mutateEjjPKcj
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9push_backEc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC2EOS4_
_ZNSt7__cxx1115basic_stringbufIcSt11char_traitsIcESaIcEE7_M_syncEPcjj
_ZNSt7__cxx117collateIcE2idE
_ZNSt8ios_baseC2Ev
_ZNSt8ios_baseD2Ev
_ZNSt9basic_iosIcSt11char_traitsIcEE4initEPSt15basic_streambufIcS1_E
_ZSt11_Hash_bytesPKvjj
_ZSt16__throw_bad_castv
_ZSt17__throw_bad_allocv
_ZSt18_Rb_tree_decrementPSt18_Rb_tree_node_base
_ZSt18_Rb_tree_incrementPSt18_Rb_tree_node_base
_ZSt19__throw_logic_errorPKc
_ZSt19__throw_regex_errorNSt15regex_constants10error_typeE
_ZSt20__throw_length_errorPKc
_ZSt20__throw_out_of_rangePKc
_ZSt20__throw_system_errori
_ZSt24__throw_invalid_argumentPKc
_ZSt24__throw_out_of_range_fmtPKcz
_ZSt25__throw_bad_function_callv
_ZSt28_Rb_tree_rebalance_for_erasePSt18_Rb_tree_node_baseRS_
_ZSt28__throw_bad_array_new_lengthv
_ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_
_ZTTNSt7__cxx1118basic_stringstreamIcSt11char_traitsIcESaIcEEE
_ZTTNSt7__cxx1119basic_istringstreamIcSt11char_traitsIcESaIcEEE
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv119__pointer_type_infoE
_ZTVN10__cxxabiv120__function_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZTVNSt7__cxx1115basic_stringbufIcSt11char_traitsIcESaIcEEE
_ZTVNSt7__cxx1118basic_stringstreamIcSt11char_traitsIcESaIcEEE
_ZTVNSt7__cxx1119basic_istringstreamIcSt11char_traitsIcESaIcEEE
_ZTVSt15basic_streambufIcSt11char_traitsIcEE
_ZTVSt9basic_iosIcSt11char_traitsIcEE
_ZdaPv
_ZdaPvj
_ZdlPvj
_Znaj
_Znwj
__cxa_guard_acquire
__cxa_guard_release
__dynamic_cast

libcurl-4

curl_easy_cleanup
curl_easy_getinfo
curl_easy_init
curl_easy_perform
curl_easy_reset
curl_easy_setopt

libfreetype-6

FT_Done_Face
FT_Done_FreeType
FT_Done_Glyph
FT_Get_Glyph
FT_Get_Name_Index
FT_Init_FreeType
FT_Load_Glyph
FT_New_Memory_Face
FT_New_Size
FT_Open_Face
FT_Outline_Check
FT_Outline_Decompose
FT_Outline_Get_CBox
FT_Render_Glyph
FT_Set_Char_Size
FT_Set_Pixel_Sizes
FT_Set_Transform

libjpeg-8

jpeg_CreateCompress
jpeg_CreateDecompress
jpeg_abort_decompress
jpeg_destroy_compress
jpeg_destroy_decompress
jpeg_finish_compress
jpeg_mem_src
jpeg_read_header
jpeg_read_scanlines
jpeg_resync_to_restart
jpeg_set_colorspace
jpeg_set_defaults
jpeg_set_quality
jpeg_simple_progression
jpeg_start_compress
jpeg_start_decompress
jpeg_std_error
jpeg_stdio_dest
jpeg_write_scanlines

liblcms2-2

cmsCloseProfile
cmsCreateTransform
cmsCreateXYZProfile
cmsCreate_sRGBProfile
cmsDeleteTransform
cmsDoTransform
cmsGetColorSpace
cmsGetEncodedCMMversion
cmsGetPostScriptCSA
cmsGetProfileContextID
cmsOpenProfileFromMem
cmsSetLogErrorHandler

libnspr4

PR_ErrorToString

nss3

CERT_CompareName
CERT_DestroyCertificate
CERT_ExtractPublicKey
CERT_FindCertByNickname
CERT_GetCertEmailAddress
CERT_GetCertTimes
CERT_GetClassicOCSPDisabledPolicy
CERT_GetClassicOCSPEnabledSoftFailurePolicy
CERT_GetCommonName
CERT_GetDefaultCertDB
CERT_GetOrgName
CERT_NameToAscii
CERT_NewTempCertificate
CERT_PKIXVerifyCert
DER_GetInteger
HASH_Create
HASH_Destroy
HASH_End
HASH_GetHashTypeByOidTag
HASH_Update
NSS_Get_CERT_NameTemplate
NSS_Get_SECOID_AlgorithmIDTemplate
NSS_Init
NSS_IsInitialized
NSS_NoDB_Init
NSS_Shutdown
PK11_Authenticate
PK11_FreeSlotList
PK11_GetAllTokens
PK11_GetCertFromPrivateKey
PK11_GetTokenName
PK11_HashBuf
PK11_ListPrivateKeysInSlot
PK11_NeedLogin
PK11_SetPasswordFunc
PORT_ArenaAlloc
PORT_ArenaGrow
PORT_ArenaMark
PORT_ArenaRelease
PORT_ArenaUnmark
PORT_Free
PORT_FreeArena
PORT_GetError
PORT_NewArena
PORT_SetError
SECITEM_CopyItem
SECITEM_FreeItem
SECKEY_DestroyPrivateKeyList
SECKEY_DestroyPublicKey
SECKEY_PublicKeyStrengthInBits
SECMOD_AddNewModule
SECOID_FindOID
SECOID_FindOIDByTag
SECOID_FindOIDTag
SECOID_SetAlgorithmID
SEC_ASN1EncodeItem

libopenjp2-7

opj_create_decompress@4
opj_decode@12
opj_destroy_codec@4
opj_end_decompress@8
opj_image_destroy@4
opj_read_header@12
opj_set_decode_area@24
opj_set_default_decoder_parameters@4
opj_set_error_handler@12
opj_set_warning_handler@12
opj_setup_decoder@8
opj_stream_default_create@4
opj_stream_destroy@4
opj_stream_set_read_function@8
opj_stream_set_seek_function@8
opj_stream_set_skip_function@8
opj_stream_set_user_data@12
opj_stream_set_user_data_length@12

libplc4

PL_strdup
PL_strlen
PL_strncasecmp

libpng16-16

png_create_info_struct
png_create_read_struct
png_create_write_struct
png_destroy_read_struct
png_destroy_write_struct
png_get_bit_depth
png_get_channels
png_get_color_type
png_get_image_height
png_get_image_width
png_get_io_ptr
png_get_rowbytes
png_get_valid
png_init_io
png_read_image
png_read_info
png_read_update_info
png_set_IHDR
png_set_compression_level
png_set_expand_gray_1_2_4_to_8
png_set_iCCP
png_set_longjmp_fn
png_set_pHYs
png_set_packing
png_set_palette_to_rgb
png_set_read_fn
png_set_sRGB
png_set_tRNS_to_alpha
png_write_end
png_write_image
png_write_info
png_write_rows

smime3

NSS_CMSContentInfo_GetContent
NSS_CMSContentInfo_SetContent_Data
NSS_CMSContentInfo_SetContent_SignedData
NSS_CMSEncoder_Finish
NSS_CMSEncoder_Start
NSS_CMSMessage_ContentLevel
NSS_CMSMessage_Create
NSS_CMSMessage_CreateFromDER
NSS_CMSMessage_Destroy
NSS_CMSMessage_GetContentInfo
NSS_CMSMessage_IsSigned
NSS_CMSSignedData_AddCertificate
NSS_CMSSignedData_AddSignerInfo
NSS_CMSSignedData_Create
NSS_CMSSignedData_GetContentInfo
NSS_CMSSignedData_GetDigestAlgs
NSS_CMSSignedData_GetSignerInfo
NSS_CMSSignedData_SetDigestValue
NSS_CMSSignerInfo_Create
NSS_CMSSignerInfo_GetSigningCertificate
NSS_CMSSignerInfo_GetSigningTime
NSS_CMSSignerInfo_IncludeCerts
NSS_CMSSignerInfo_Verify

libtiff-6

TIFFClose
TIFFDefaultStripSize
TIFFFdOpen
TIFFSetField
TIFFWriteScanline

zlib1

deflate
deflateEnd
deflateInit_

Exports

Exports

_Z10utf8ToUCS4PKcPPj
_Z11localtime_rPKlP2tm
_Z11utf16ToUtf8PKtPcii
_Z11utf16ToUtf8PKtPi
_Z11utf8ToUtf16PKcPi
_Z11utf8ToUtf16PKcPtii
_Z12appendToPathP9GooStringPKc
_Z13gbase64EncodeB5cxx11PKvj
_Z13utf8CountUCS4PKc
_Z15parseDateStringPK9GooStringPiS2_S2_S2_S2_S2_PcS2_S2_
_Z15unicodeToAscii7PKjiPPjPiPKiPS3_
_Z16TextStringToUCS4RKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPPj
_Z16dateStringToTimePK9GooString
_Z16setErrorCallbackPFv13ErrorCategoryxPKcE
_Z16timeToDateStringPKl
_Z18utf8ToUtf16WithBomRKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_Z19utf16CountUtf8BytesPKt
_Z20unicodeNormalizeNFKCPKjiPiPS1_
_Z20unicodeNormalizeNFKCPKjiPiPS1_b
_Z21ft_new_face_from_fileP14FT_LibraryRec_PKclPP11FT_FaceRec_
_Z21pdfDocEncodingToUTF16RKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPi
_Z22make_GfxLCMSProfilePtrPv
_Z23utf8CountUtf16CodeUnitsPKc
_Z26getFileSpecNameForPlatformPK6Object
_Z5error13ErrorCategoryxPKcz
_Z6GfseekP6_iobufxi
_Z6GftellP6_iobuf
_Z6timegmP2tm
_Z7getLinePciP6_iobuf
_Z7mapUTF8jPci
_Z8gmtime_rPKlP2tm
_Z8openFilePKcS0_
_Z9gbasenameB5cxx11PKc
_ZN10ActualText3endEPK8GfxState
_ZN10ActualText5beginEPK8GfxStatePK9GooString
_ZN10ActualText7addCharEPK8GfxStateddddjiPKji
_ZN10ActualTextC1EP8TextPage
_ZN10ActualTextC2EP8TextPage
_ZN10ActualTextD1Ev
_ZN10ActualTextD2Ev
_ZN10AnnotCaret10initializeEP6PDFDocP4Dict
_ZN10AnnotCaret9setSymbolENS_16AnnotCaretSymbolE
_ZN10AnnotCaretC1EP6PDFDocO6ObjectPKS2_
_ZN10AnnotCaretC1EP6PDFDocP12PDFRectangle
_ZN10AnnotCaretC2EP6PDFDocO6ObjectPKS2_
_ZN10AnnotCaretC2EP6PDFDocP12PDFRectangle
_ZN10AnnotCaretD0Ev
_ZN10AnnotCaretD1Ev
_ZN10AnnotCaretD2Ev
_ZN10AnnotColor11adjustColorEi
_ZN10AnnotColorC1EP5Arrayi
_ZN10AnnotColorC1Ed
_ZN10AnnotColorC1Eddd
_ZN10AnnotColorC1Edddd
_ZN10AnnotColorC1Ev
_ZN10AnnotColorC2EP5Arrayi
_ZN10AnnotColorC2Ed
_ZN10AnnotColorC2Eddd
_ZN10AnnotColorC2Edddd
_ZN10AnnotColorC2Ev
_ZN10AnnotMovie10initializeEP6PDFDocP4Dict
_ZN10AnnotMovie4drawEP3Gfxb
_ZN10AnnotMovieC1EP6PDFDocO6ObjectPKS2_
_ZN10AnnotMovieC1EP6PDFDocP12PDFRectangleP5Movie
_ZN10AnnotMovieC2EP6PDFDocO6ObjectPKS2_
_ZN10AnnotMovieC2EP6PDFDocP12PDFRectangleP5Movie
_ZN10AnnotMovieD0Ev
_ZN10AnnotMovieD1Ev
_ZN10AnnotMovieD2Ev
_ZN10AnnotPopup10initializeEP6PDFDocP4Dict
_ZN10AnnotPopup7setOpenEb
_ZN10AnnotPopup9setParentEP5Annot
_ZN10AnnotPopupC1EP6PDFDocO6ObjectPKS2_
_ZN10AnnotPopupC1EP6PDFDocP12PDFRectangle
_ZN10AnnotPopupC2EP6PDFDocO6ObjectPKS2_
_ZN10AnnotPopupC2EP6PDFDocP12PDFRectangle
_ZN10AnnotPopupD0Ev
_ZN10AnnotPopupD1Ev
_ZN10AnnotPopupD2Ev
_ZN10AnnotStamp10initializeEP6PDFDocP4Dict
_ZN10AnnotStamp14setCustomImageEP21AnnotStampImageHelper
_ZN10AnnotStamp16clearCustomImageEv
_ZN10AnnotStamp29generateStampCustomAppearanceEv
_ZN10AnnotStamp30generateStampDefaultAppearanceEv
_ZN10AnnotStamp4drawEP3Gfxb
_ZN10AnnotStamp7setIconEP9GooString
_ZN10AnnotStampC1EP6PDFDocO6ObjectPKS2_
_ZN10AnnotStampC1EP6PDFDocP12PDFRectangle
_ZN10AnnotStampC2EP6PDFDocO6ObjectPKS2_
_ZN10AnnotStampC2EP6PDFDocP12PDFRectangle
_ZN10AnnotStampD0Ev
_ZN10AnnotStampD1Ev
_ZN10AnnotStampD2Ev
_ZN10BaseStreamC1EO6Objectx
_ZN10BaseStreamC2EO6Objectx
_ZN10BaseStreamD0Ev
_ZN10BaseStreamD1Ev
_ZN10BaseStreamD2Ev
_ZN10CachedFile4readEPvjj
_ZN10CachedFile4seekEli
_ZN10CachedFile4tellEv
_ZN10CachedFile5cacheERKSt6vectorI10_ByteRangeSaIS1_EE
_ZN10CachedFile5cacheEjj
_ZN10CachedFile9decRefCntEv
_ZN10CachedFile9incRefCntEv
_ZN10CachedFileC1EP16CachedFileLoader
_ZN10CachedFileC2EP16CachedFileLoader
_ZN10CachedFileD1Ev
_ZN10CachedFileD2Ev
_ZN10CryptoSign7Factory12createActiveEv
_ZN10CryptoSign7Factory12getAvailableEv
_ZN10CryptoSign7Factory14typeFromStringESt17basic_string_viewIcSt11char_traitsIcEE
_ZN10CryptoSign7Factory16preferredBackendE
_ZN10CryptoSign7Factory19setPreferredBackendENS_7Backend4TypeE
_ZN10CryptoSign7Factory6createENS_7Backend4TypeE
_ZN10CryptoSign7Factory9getActiveEv
_ZN10FileStream13makeSubStreamExbxO6Object
_ZN10FileStream4copyEv
_ZN10FileStream5closeEv
_ZN10FileStream5resetEv
_ZN10FileStream6setPosExi
_ZN10FileStream7fillBufEv
_ZN10FileStream9moveStartEx
_ZN10FileStreamC1EP7GooFilexbxO6Object
_ZN10FileStreamC2EP7GooFilexbxO6Object
_ZN10FileStreamD0Ev
_ZN10FileStreamD1Ev
_ZN10FileStreamD2Ev
_ZN10FoFiType1C11readCharsetEv
_ZN10FoFiType1C11readTopDictEv
_ZN10FoFiType1C12readFDSelectEv
_ZN10FoFiType1C13buildEncodingEv
_ZN10FoFiType1C13cvtGlyphWidthEbP9GooStringPK17Type1CPrivateDict
_ZN10FoFiType1C13eexecCvtGlyphEP14Type1CEexecBufPKciiPK11Type1CIndexPK17Type1CPrivateDict
_ZN10FoFiType1C14convertToType0EPKcPKiiPFvPvS1_jES4_
_ZN10FoFiType1C14convertToType1EPKcPS1_bPFvPvS1_jES3_
_ZN10FoFiType1C15readPrivateDictEiiP17Type1CPrivateDict
_ZN10FoFiType1C17convertToCIDType0EPKcPKiiPFvPvS1_jES4_
_ZN10FoFiType1C4loadEPKc
_ZN10FoFiType1C4makeEPKhi
_ZN10FoFiType1C5getOpEibPb
_ZN10FoFiType1C5parseEv
_ZN10FoFiType1C6readFDEiiP17Type1CPrivateDict
_ZN10FoFiType1C8cvtGlyphEiiP9GooStringPK11Type1CIndexPK17Type1CPrivateDictbRSt3setIiSt4lessIiESaIiEE
_ZN10FoFiType1CC1EPKhib
_ZN10FoFiType1CC2EPKhib
_ZN10FoFiType1CD0Ev
_ZN10FoFiType1CD1Ev
_ZN10FoFiType1CD2Ev
_ZN10FormWidget11setReadOnlyEb
_ZN10FormWidget14setPartialNameERK9GooString
_ZN10FormWidget19getActivationActionEv
_ZN10FormWidget19getAdditionalActionEN5Annot25FormAdditionalActionsTypeE
_ZN10FormWidget19setAdditionalActionEN5Annot25FormAdditionalActionsTypeERK9GooString
_ZN10FormWidget21getFullyQualifiedNameEv
_ZN10FormWidget22createWidgetAnnotationEv
_ZN10FormWidget5printEi
_ZN10FormWidget8decodeIDEjPjS0_
_ZN10FormWidget8encodeIDEjj
_ZN10FormWidgetC1EP6PDFDocP6Objectj3RefP9FormField
_ZN10FormWidgetC2EP6PDFDocP6Objectj3RefP9FormField
_ZN10FormWidgetD0Ev
_ZN10FormWidgetD1Ev
_ZN10FormWidgetD2Ev
_ZN10GfxCIDFont12mapCodeToGIDEP12FoFiTrueTypeijb
_ZN10GfxCIDFont15getCodeToGIDMapEP12FoFiTrueTypePi
_ZN10GfxCIDFontC1EP4XRefPKc3RefOSt8optionalINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEE11GfxFontTypeS4_P4Dict
_ZN10GfxCIDFontC2EP4XRefPKc3RefOSt8optionalINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEE11GfxFontTypeS4_P4Dict
_ZN10GfxCIDFontD0Ev
_ZN10GfxCIDFontD1Ev
_ZN10GfxCIDFontD2Ev
_ZN10GfxFontLoc7setPathEP9GooString
_ZN10GfxFontLocC1EOS_
_ZN10GfxFontLocC1Ev
_ZN10GfxFontLocC2EOS_
_ZN10GfxFontLocC2Ev
_ZN10GfxFontLocD1Ev
_ZN10GfxFontLocD2Ev
_ZN10GfxFontLocaSEOS_
_ZN10GfxShading4initEP12GfxResourcesP4DictP9OutputDevP8GfxState
_ZN10GfxShading5parseEP12GfxResourcesP6ObjectP9OutputDevP8GfxState
_ZN10GfxShadingC1EPKS_
_ZN10GfxShadingC1Ei
_ZN10GfxShadingC2EPKS_
_ZN10GfxShadingC2Ei
_ZN10GfxShadingD0Ev
_ZN10GfxShadingD1Ev
_ZN10GfxShadingD2Ev
_ZN10JpegWriter10setQualityEi
_ZN10JpegWriter11setOptimizeEb
_ZN10JpegWriter11supportCMYKEv
_ZN10JpegWriter13writePointersEPPhi
_ZN10JpegWriter14setProgressiveEb
_ZN10JpegWriter4initEP6_iobufiidd
_ZN10JpegWriter5closeEv
_ZN10JpegWriter8writeRowEPPh
_ZN10JpegWriterC1ENS_6FormatE
_ZN10JpegWriterC1EibNS_6FormatE
_ZN10JpegWriterC2ENS_6FormatE
_ZN10JpegWriterC2EibNS_6FormatE
_ZN10JpegWriterD0Ev
_ZN10JpegWriterD1Ev
_ZN10JpegWriterD2Ev
_ZN10LinkAction11parseActionEPK6ObjectRKSt8optionalINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEE
_ZN10LinkAction11parseActionEPK6ObjectRKSt8optionalINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEEPSt3setIiSt4lessIiESaIiEE
_ZN10LinkAction9parseDestEPK6Object
_ZN10LinkActionC1Ev
_ZN10LinkActionC2Ev
_ZN10LinkActionD0Ev
_ZN10LinkActionD1Ev
_ZN10LinkActionD2Ev
_ZN10SplashPath19addStrokeAdjustHintEiiii
_ZN10SplashPath4growEi
_ZN10SplashPath5closeEb
_ZN10SplashPath6appendEPS_
_ZN10SplashPath6lineToEdd
_ZN10SplashPath6moveToEdd
_ZN10SplashPath6offsetEdd
_ZN10SplashPath7curveToEdddddd
_ZN10SplashPath7reserveEi
_ZN10SplashPath8getCurPtEPdS0_
_ZN10SplashPathC1EOS_
_ZN10SplashPathC1Ev
_ZN10SplashPathC2EOS_
_ZN10SplashPathC2Ev
_ZN10SplashPathD1Ev
_ZN10SplashPathD2Ev
_ZN10TiffWriter13writePointersEPPhi
_ZN10TiffWriter20setCompressionStringEPKc
_ZN10TiffWriter4initEP6_iobufiidd
_ZN10TiffWriter5closeEv
_ZN10TiffWriter8writeRowEPPh
_ZN10TiffWriterC1ENS_6FormatE
_ZN10TiffWriterC2ENS_6FormatE
_ZN10TiffWriterD0Ev
_ZN10TiffWriterD1Ev
_ZN10TiffWriterD2Ev
_ZN10UnicodeMap4swapERS_
_ZN10UnicodeMap5parseERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN10UnicodeMapC1EOS_
_ZN10UnicodeMapC1EPKcbPFijPciE
_ZN10UnicodeMapC1EPKcbPK15UnicodeMapRangei
_ZN10UnicodeMapC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN10UnicodeMapC2EOS_
_ZN10UnicodeMapC2EPKcbPFijPciE
_ZN10UnicodeMapC2EPKcbPK15UnicodeMapRangei
_ZN10UnicodeMapC2ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN10UnicodeMapD1Ev
_ZN10UnicodeMapD2Ev
_ZN10UnicodeMapaSEOS_
_ZN11AnnotBorder14parseDashArrayEP6Object
_ZN11AnnotBorderC1Ev
_ZN11AnnotBorderC2Ev
_ZN11AnnotBorderD0Ev
_ZN11AnnotBorderD1Ev
_ZN11AnnotBorderD2Ev
_ZN11AnnotMarkup10initializeEP6PDFDocP4Dict
_ZN11AnnotMarkup10setOpacityEd
_ZN11AnnotMarkup23removeReferencedObjectsEv
_ZN11AnnotMarkup7setDateEP9GooString
_ZN11AnnotMarkup8setLabelEOSt10unique_ptrI9GooStringSt14default_deleteIS1_EE
_ZN11AnnotMarkup8setPopupEOSt10unique_ptrI10AnnotPopupSt14default_deleteIS1_EE
_ZN11AnnotMarkupC1EP6PDFDocO6ObjectPKS2_
_ZN11AnnotMarkupC1EP6PDFDocP12PDFRectangle
_ZN11AnnotMarkupC2EP6PDFDocO6ObjectPKS2_
_ZN11AnnotMarkupC2EP6PDFDocP12PDFRectangle
_ZN11AnnotMarkupD0Ev
_ZN11AnnotMarkupD1Ev
_ZN11AnnotMarkupD2Ev
_ZN11AnnotScreen10initializeEP6PDFDocP4Dict
_ZN11AnnotScreen19getAdditionalActionEN5Annot21AdditionalActionsTypeE
_ZN11AnnotScreenC1EP6PDFDocO6ObjectPKS2_
_ZN11AnnotScreenC1EP6PDFDocP12PDFRectangle
_ZN11AnnotScreenC2EP6PDFDocO6ObjectPKS2_
_ZN11AnnotScreenC2EP6PDFDocP12PDFRectangle
_ZN11AnnotScreenD0Ev
_ZN11AnnotScreenD1Ev
_ZN11AnnotScreenD2Ev
_ZN11AnnotWidget10initializeEP6PDFDocP4Dict
_ZN11AnnotWidget19getAdditionalActionEN5Annot21AdditionalActionsTypeE
_ZN11AnnotWidget20invalidateAppearanceEv
_ZN11AnnotWidget22updateAppearanceStreamEv
_ZN11AnnotWidget23generateFieldAppearanceEv
_ZN11AnnotWidget23getFormAdditionalActionEN5Annot25FormAdditionalActionsTypeE
_ZN11AnnotWidget23setFormAdditionalActionEN5Annot25FormAdditionalActionsTypeERK9GooString
_ZN11AnnotWidget4drawEP3Gfxb
_ZN11AnnotWidgetC1EP6PDFDocO6ObjectPKS2_
_ZN11AnnotWidgetC1EP6PDFDocP6ObjectS3_P9FormField
_ZN11AnnotWidgetC2EP6PDFDocO6ObjectPKS2_
_ZN11AnnotWidgetC2EP6PDFDocP6ObjectS3_P9FormField
_ZN11AnnotWidgetD0Ev
_ZN11AnnotWidgetD1Ev
_ZN11AnnotWidgetD2Ev
_ZN11EmbedStream13makeSubStreamExbxO6Object
_ZN11EmbedStream4copyEv
_ZN11EmbedStream5resetEv
_ZN11EmbedStream6getPosEv
_ZN11EmbedStream6rewindEv
_ZN11EmbedStream6setPosExi
_ZN11EmbedStream7getCharEv
_ZN11EmbedStream7restoreEv
_ZN11EmbedStream8getCharsEiPh
_ZN11EmbedStream8getStartEv
_ZN11EmbedStream8lookCharEv
_ZN11EmbedStream9moveStartEx
_ZN11EmbedStreamC1EP6StreamO6Objectbxb
_ZN11EmbedStreamC2EP6StreamO6Objectbxb
_ZN11EmbedStreamD0Ev
_ZN11EmbedStreamD1Ev
_ZN11EmbedStreamD2Ev
_ZN11Gfx8BitFont11getCharProcEi
_ZN11Gfx8BitFont12getCharProcsEv
_ZN11Gfx8BitFont12getResourcesEv
_ZN11Gfx8BitFont13getCharProcNFEi
_ZN11Gfx8BitFont15getCodeToGIDMapEP12FoFiTrueType
_ZN11Gfx8BitFontC1EP4XRefPKc3RefOSt8optionalINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEE11GfxFontTypeS4_P4Dict
_ZN11Gfx8BitFontC2EP4XRefPKc3RefOSt8optionalINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEE11GfxFontTypeS4_P4Dict
_ZN11Gfx8BitFontD0Ev
_ZN11Gfx8BitFontD1Ev
_ZN11Gfx8BitFontD2Ev
_ZN11ImageStream5closeEv
_ZN11ImageStream5resetEv
_ZN11ImageStream7getLineEv
_ZN11ImageStream8getPixelEPh
_ZN11ImageStream8skipLineEv
_ZN11ImageStreamC1EP6Streamiii
_ZN11ImageStreamC2EP6Streamiii
_ZN11ImageStreamD1Ev
_ZN11ImageStreamD2Ev
_ZN11OutlineItem11insertChildERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEij
_ZN11OutlineItem11removeChildEj
_ZN11OutlineItem11setPageDestEi
_ZN11OutlineItem12readItemListEPS_PK6ObjectP4XRefP6PDFDoc
_ZN11OutlineItem13setStartsOpenEb
_ZN11OutlineItem4openEv
_ZN11OutlineItem7getKidsEv
_ZN11OutlineItem7hasKidsEv
_ZN11OutlineItem8setTitleERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN11OutlineItemC1EPK4Dict3RefPS_P4XRefP6PDFDoc
_ZN11OutlineItemC2EPK4Dict3RefPS_P4XRefP6PDFDoc
_ZN11OutlineItemD1Ev
_ZN11OutlineItemD2Ev
_ZN11PSOutputDev10drawStringEP8GfxStatePK9GooString
_ZN11PSOutputDev10opiBegin13EP8GfxStateP4Dict
_ZN11PSOutputDev10opiBegin20EP8GfxStateP4Dict
_ZN11PSOutputDev10setupFontsEP4Dict
_ZN11PSOutputDev10setupFormsEP4Dict
_ZN11PSOutputDev10setupImageE3RefP6Streamb
_ZN11PSOutputDev10updateFontEP8GfxState
_ZN11PSOutputDev10updateRiseEP8GfxState
_ZN11PSOutputDev10writePSBufEPKci
_ZN11PSOutputDev10writePSFmtEPKcz
_ZN11PSOutputDev11cvtFunctionEPK8Functionb
_ZN11PSOutputDev11saveTextPosEP8GfxState
_ZN11PSOutputDev11setupImagesEP4Dict
_ZN11PSOutputDev11writeHeaderEiPK12PDFRectangleS2_iPKc
_ZN11PSOutputDev11writePSCharEc
_ZN11PSOutputDev11writePSNameEPKc
_ZN11PSOutputDev12doImageL1SepEP6ObjectP16GfxImageColorMapbbP6StreamiiiPKiS5_iib
_ZN11PSOutputDev12filterPSNameERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN11PSOutputDev12opiTransformEP8GfxStateddPdS2_
_ZN11PSOutputDev12restoreStateEP8GfxState
_ZN11PSOutputDev12updateRenderEP8GfxState
_ZN11PSOutputDev12writeTrailerEv
_ZN11PSOutputDev13drawImageMaskEP8GfxStateP6ObjectP6Streamiibbb
_ZN11PSOutputDev13endTextObjectEP8GfxState
_ZN11PSOutputDev13filterPSLabelEP9GooStringPb
_ZN11PSOutputDev13updateLineCapEP8GfxState
_ZN11PSOutputDev13updateTextMatEP8GfxState
_ZN11PSOutputDev13updateTextPosEP8GfxState
_ZN11PSOutputDev13writeDocSetupEP7CatalogRKSt6vectorIiSaIiEEb
_ZN11PSOutputDev13writePSStringERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN11PSOutputDev14addCustomColorEP23GfxSeparationColorSpace
_ZN11PSOutputDev14checkPageSliceEP4PageddibbiiiibPFbPvES2_PFbP5AnnotS2_ES2_
_ZN11PSOutputDev14makePSFontNameEP7GfxFontPK3Ref
_ZN11PSOutputDev14restoreTextPosEP8GfxState
_ZN11PSOutputDev14setupResourcesEP4Dict
_ZN11PSOutputDev14setupType3FontEP7GfxFontP9GooStringP4Dict
_ZN11PSOutputDev14updateFlatnessEP8GfxState
_ZN11PSOutputDev14updateLineDashEP8GfxState
_ZN11PSOutputDev14updateLineJoinEP8GfxState
_ZN11PSOutputDev14updateTransferEP8GfxState
_ZN11PSOutputDev15addProcessColorEdddd
_ZN11PSOutputDev15axialShadedFillEP8GfxStateP15GfxAxialShadingdd
_ZN11PSOutputDev15beginTextObjectEP8GfxState
_ZN11PSOutputDev15drawMaskedImageEP8GfxStateP6ObjectP6StreamiiP16GfxImageColorMapbS5_iibb
_ZN11PSOutputDev15updateCharSpaceEP8GfxState
_ZN11PSOutputDev15updateFillColorEP8GfxState
_ZN11PSOutputDev15updateLineWidthEP8GfxState
_ZN11PSOutputDev15updateTextShiftEP8GfxStated
_ZN11PSOutputDev15updateWordSpaceEP8GfxState
_ZN11PSOutputDev15writePSTextLineEPK9GooString
_ZN11PSOutputDev16clipToStrokePathEP8GfxState
_ZN11PSOutputDev16dumpColorSpaceL2EP8GfxStateP13GfxColorSpacebbb
_ZN11PSOutputDev16radialShadedFillEP8GfxStateP16GfxRadialShadingdd
_ZN11PSOutputDev16updateMiterLimitEP8GfxState
_ZN11PSOutputDev16writePageTrailerEv
_ZN11PSOutputDev16writeXpdfProcsetEv
_ZN11PSOutputDev17tilingPatternFillEP8GfxStateP3GfxP7CatalogP16GfxTilingPatternPKdiiiidd
_ZN11PSOutputDev17updateStrokeColorEP8GfxState
_ZN11PSOutputDev18functionShadedFillEP8GfxStateP18GfxFunctionShading
_ZN11PSOutputDev18maskToClippingPathEP6Streamiib
_ZN11PSOutputDev18updateHorizScalingEP8GfxState
_ZN11PSOutputDev19patchMeshShadedFillEP8GfxStateP19GfxPatchMeshShading
_ZN11PSOutputDev19tilingPatternFillL1EP8GfxStateP7CatalogP6ObjectPKdiiP4DictS7_S7_iiiidd
_ZN11PSOutputDev19tilingPatternFillL2EP8GfxStateP7CatalogP6ObjectPKdiiP4DictS7_S7_iiiidd
_ZN11PSOutputDev19updateFillOverprintEP8GfxState
_ZN11PSOutputDev19updateOverprintModeEP8GfxState
_ZN11PSOutputDev20updateFillColorSpaceEP8GfxState
_ZN11PSOutputDev21updateStrokeOverprintEP8GfxState
_ZN11PSOutputDev22setupEmbeddedType1FontEP3RefP9GooString
_ZN11PSOutputDev22setupExternalType1FontEPK9GooStringPS0_
_ZN11PSOutputDev22updateStrokeColorSpaceEP8GfxState
_ZN11PSOutputDev23setupEmbeddedType1CFontEP7GfxFontP3RefP9GooString
_ZN11PSOutputDev23updateFontMaxValidGlyphEP7GfxFonti
_ZN11PSOutputDev24setSoftMaskFromImageMaskEP8GfxStateP6ObjectP6StreamiibbPd
_ZN11PSOutputDev25setupEmbeddedCIDType0FontEP7GfxFontP3RefP9GooString
_ZN11PSOutputDev25setupEmbeddedTrueTypeFontEP7GfxFontP3RefP9GooString
_ZN11PSOutputDev25setupExternalTrueTypeFontEP7GfxFontPK9GooStringPS2_
_ZN11PSOutputDev26unsetSoftMaskFromImageMaskEP8GfxStatePd
_ZN11PSOutputDev28setupEmbeddedCIDTrueTypeFontEP7GfxFontP3RefP9GooStringb
_ZN11PSOutputDev28setupEmbeddedOpenTypeCFFFontEP7GfxFontP3RefP9GooString
_ZN11PSOutputDev28setupEmbeddedOpenTypeT1CFontEP7GfxFontP3RefP9GooString
_ZN11PSOutputDev28setupExternalCIDTrueTypeFontEP7GfxFontPK9GooStringPS2_b
_ZN11PSOutputDev4clipEP8GfxState
_ZN11PSOutputDev4fillEP8GfxState
_ZN11PSOutputDev4initEPFvPvPKcjES0_10PSFileTypePcP6PDFDocRKSt6vectorIiSaIiEE9PSOutModeiiiibiibb7PSLevel
_ZN11PSOutputDev6doPathEPK7GfxPath
_ZN11PSOutputDev6eoClipEP8GfxState
_ZN11PSOutputDev6eoFillEP8GfxState
_ZN11PSOutputDev6opiEndEP8GfxStateP4Dict
_ZN11PSOutputDev6strokeEP8GfxState
_ZN11PSOutputDev7endPageEv
_ZN11PSOutputDev7type3D0EP8GfxStatedd
_ZN11PSOutputDev7type3D1EP8GfxStatedddddd
_ZN11PSOutputDev7writePSEPKc
_ZN11PSOutputDev8drawFormE3Ref
_ZN11PSOutputDev8opiBeginEP8GfxStateP4Dict
_ZN11PSOutputDev8postInitEv
_ZN11PSOutputDev9doImageL1EP6ObjectP16GfxImageColorMapbbP6StreamiiiPKiS5_iib
_ZN11PSOutputDev9doImageL2EP8GfxStateP6ObjectP16GfxImageColorMapbbP6StreamiiiPKiS7_iib
_ZN11PSOutputDev9doImageL3EP8GfxStateP6ObjectP16GfxImageColorMapbbP6StreamiiiPKiS7_iib
_ZN11PSOutputDev9drawImageEP8GfxStateP6ObjectP6StreamiiP16GfxImageColorMapbPKib
_ZN11PSOutputDev9psXObjectEP6StreamS1_
_ZN11PSOutputDev9saveStateEP8GfxState
_ZN11PSOutputDev9setupFontEP7GfxFontP4Dict
_ZN11PSOutputDev9setupFormE3RefP6Object
_ZN11PSOutputDev9startPageEiP8GfxStateP4XRef
_ZN11PSOutputDev9updateCTMEP8GfxStatedddddd
_ZN11PSOutputDevC1EPFvPvPKcjES0_PcP6PDFDocRKSt6vectorIiSaIiEE9PSOutModeiibbiiii16PSForceRasterizebPFP9GooStringPS_23PSOutCustomCodeLocationiS0_ES0_7PSLevel
_ZN11PSOutputDevC1EPKcP6PDFDocPcRKSt6vectorIiSaIiEE9PSOutModeiibbiiii16PSForceRasterizebPFP9GooStringPS_23PSOutCustomCodeLocationiPvESG_7PSLevel
_ZN11PSOutputDevC1EiP6PDFDocPcRKSt6vectorIiSaIiEE9PSOutModeiibbiiii16PSForceRasterizebPFP9GooStringPS_23PSOutCustomCodeLocationiPvESE_7PSLevel
_ZN11PSOutputDevC2EPFvPvPKcjES0_PcP6PDFDocRKSt6vectorIiSaIiEE9PSOutModeiibbiiii16PSForceRasterizebPFP9GooStringPS_23PSOutCustomCodeLocationiS0_ES0_7PSLevel
_ZN11PSOutputDevC2EPKcP6PDFDocPcRKSt6vectorIiSaIiEE9PSOutModeiibbiiii16PSForceRasterizebPFP9GooStringPS_23PSOutCustomCodeLocationiPvESG_7PSLevel
_ZN11PSOutputDevC2EiP6PDFDocPcRKSt6vectorIiSaIiEE9PSOutModeiibbiiii16PSForceRasterizebPFP9GooStringPS_23PSOutCustomCodeLocationiPvESE_7PSLevel
_ZN11PSOutputDevD0Ev
_ZN11PSOutputDevD1Ev
_ZN11PSOutputDevD2Ev
_ZN12AnnotPolygon10initializeEP6PDFDocP4Dict
_ZN12AnnotPolygon11setVerticesEP9AnnotPath
_ZN12AnnotPolygon16setInteriorColorEOSt10unique_ptrI10AnnotColorSt14default_deleteIS1_EE
_ZN12AnnotPolygon16setStartEndStyleE20AnnotLineEndingStyleS0_
_ZN12AnnotPolygon26generatePolyLineAppearanceEP22AnnotAppearanceBuilder
_ZN12AnnotPolygon4drawEP3Gfxb
_ZN12AnnotPolygon7setTypeEN5Annot12AnnotSubtypeE
_ZN12AnnotPolygon9setIntentENS_18AnnotPolygonIntentE
_ZN12AnnotPolygonC1EP6PDFDocO6ObjectPKS2_
_ZN12AnnotPolygonC1EP6PDFDocP12PDFRectangleN5Annot12AnnotSubtypeE
_ZN12AnnotPolygonC2EP6PDFDocO6ObjectPKS2_
_ZN12AnnotPolygonC2EP6PDFDocP12PDFRectangleN5Annot12AnnotSubtypeE
_ZN12AnnotPolygonD0Ev
_ZN12AnnotPolygonD1Ev
_ZN12AnnotPolygonD2Ev
_ZN12FoFiTrueType12mapToVertGIDEj
_ZN12FoFiTrueType13readPostTableEv
_ZN12FoFiTrueType14doMapToVertGIDEj
_ZN12FoFiTrueType14scanLookupListEjj
_ZN12FoFiTrueType18checkGIDInCoverageEjj
_ZN12FoFiTrueType18scanLookupSubTableEjj
_ZN12FoFiTrueType4loadEPKci
_ZN12FoFiTrueType4makeEPKhii
_ZN12FoFiTrueType5parseEv
_ZN12FoFiTrueType9charToTagEPKc
_ZN12FoFiTrueType9setupGSUBEPKc
_ZN12FoFiTrueType9setupGSUBEPKcS1_
_ZN12FoFiTrueTypeC1EPKhibi
_ZN12FoFiTrueTypeC2EPKhibi
_ZN12FoFiTrueTypeD0Ev
_ZN12FoFiTrueTypeD1Ev
_ZN12FoFiTrueTypeD2Ev
_ZN12GfxResources10lookupFontEPKc
_ZN12GfxResources12lookupGStateEPKc
_ZN12GfxResources13lookupPatternEPKcP9OutputDevP8GfxState
_ZN12GfxResources13lookupShadingEPKcP9OutputDevP8GfxState
_ZN12GfxResources13lookupXObjectEPKc
_ZN12GfxResources14lookupGStateNFEPKc
_ZN12GfxResources15lookupXObjectNFEPKc
_ZN12GfxResources16lookupColorSpaceEPKc
_ZN12GfxResources21lookupMarkedContentNFEPKc
_ZN12GfxResourcesC1EP4XRefP4DictPS_

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 807KB - Virtual size: 807KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3562bc2a1497f691164b5ef06bcb0eed

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

libgcc_s_dw2-1

kernel32

msvcrt

libwinpthread-1

shell32

libstdc++-6

libcurl-4

libfreetype-6

libjpeg-8

liblcms2-2

libnspr4

nss3

libopenjp2-7

libplc4

libpng16-16

smime3

libtiff-6

zlib1

Exports

Exports

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.data Size: 14KB - Virtual size: 14KB

.rdata Size: 807KB - Virtual size: 807KB

/4 Size: 265KB - Virtual size: 265KB

.bss Size: - Virtual size: 4KB

.edata Size: 118KB - Virtual size: 117KB

.idata Size: 15KB - Virtual size: 15KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 82KB - Virtual size: 82KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.data
Size: 14KB - Virtual size: 14KB

.rdata
Size: 807KB - Virtual size: 807KB

/4
Size: 265KB - Virtual size: 265KB

.bss
Size: - Virtual size: 4KB

.edata
Size: 118KB - Virtual size: 117KB

.idata
Size: 15KB - Virtual size: 15KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 82KB - Virtual size: 82KB