Static task
static1
Behavioral task
behavioral1
Sample
5763209b6b62f762385c259466cff12eb603c1dcde9bb755583fcb153b679cde.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5763209b6b62f762385c259466cff12eb603c1dcde9bb755583fcb153b679cde.exe
Resource
win10v2004-20230703-en
General
-
Target
5763209b6b62f762385c259466cff12eb603c1dcde9bb755583fcb153b679cde
-
Size
2.1MB
-
MD5
0ff5b44e265adf1c1cb6648bb7606bf6
-
SHA1
39dfe47e59a667e121ddc4111be14650bfd44b47
-
SHA256
5763209b6b62f762385c259466cff12eb603c1dcde9bb755583fcb153b679cde
-
SHA512
e6670f3f4e2cbe550fec62dbac737fe4245eeff25895606cfcbd9b25854ca1fe33bf4a8bd938e4786322f15c893c02395dec54d3c47e15c55d2bffcb6d723d6f
-
SSDEEP
49152:D113hlWA115esVMpMKVVWFgkoYdi/QHjnPhLHL:D113hlWA115esV+MKVsfQ/QZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5763209b6b62f762385c259466cff12eb603c1dcde9bb755583fcb153b679cde
Files
-
5763209b6b62f762385c259466cff12eb603c1dcde9bb755583fcb153b679cde.exe windows x86
b17f57fe52d60b3cbac9c7d69ba8eaf3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
cximagecrt
?Draw@CxImage@@QAEHPAUHDC__@@ABUtagRECT@@PAU3@_N3@Z
?Resample@CxImage@@QAE_NHHHPAV1@@Z
?Rotate@CxImage@@QAE_NMPAV1@@Z
?GetHeight@CxImage@@QBEIXZ
?GetWidth@CxImage@@QBEIXZ
?Load@CxImage@@QAE_NPB_WI@Z
??0CxImage@@QAE@I@Z
core-client
ld_core_send_get_installed_package_msg
ld_core_uninit
ld_core_send_touch_updown_msg
ld_core_send_preview_msg
ld_core_send_screencap_msg
ld_core_close_phone
ld_core_send_touch_move_msg
ld_core_send_function_key
ld_core_send_function_key_by_hwnd
ld_core_send_user_login_data
ld_core_connect_phone
ld_core_send_text_event
ld_core_send_key_event
ld_core_set_forcerotation
ld_core_switch_video_quality
ld_core_init
ld_core_send_adb_command_msg
ld_core_send_transfer_file_msg
kernel32
FindNextFileW
FindClose
GlobalFree
GetVersionExW
lstrcpyW
RemoveDirectoryW
CopyFileW
MoveFileExW
UnmapViewOfFile
GetExitCodeProcess
ExitProcess
FreeResource
LockResource
GetFileSize
CreateMutexW
CreateEventW
WaitForSingleObject
SetEvent
GetFileAttributesW
WriteFile
WideCharToMultiByte
TerminateThread
DeleteFileW
GetFileSizeEx
CreateFileMappingW
MapViewOfFile
OutputDebugStringA
IsProcessorFeaturePresent
EncodePointer
QueryPerformanceCounter
GetSystemTimeAsFileTime
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
FindFirstFileW
OutputDebugStringW
IsDebuggerPresent
GetCurrentProcessId
GetLocalTime
CreateFileW
FreeLibrary
LoadLibraryExW
lstrcmpiW
GetModuleHandleW
FindResourceW
SizeofResource
LoadResource
MultiByteToWideChar
Sleep
InitializeCriticalSection
GetTickCount
GetProcAddress
LoadLibraryW
GetUserDefaultUILanguage
GetPrivateProfileStringW
GlobalUnlock
GlobalLock
MulDiv
GetCurrentThreadId
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
GlobalAlloc
ReadFile
CloseHandle
CreateProcessW
GetStartupInfoW
CreatePipe
DecodePointer
DeleteCriticalSection
user32
GetUpdateRect
MapWindowPoints
IsRectEmpty
RegisterClassW
GetMenu
SetPropW
GetPropW
AdjustWindowRectEx
GetCaretBlinkTime
GetCaretPos
CharPrevW
DrawTextW
SetRect
CreateCaret
HideCaret
ShowCaret
SetCaretPos
GetGUIThreadInfo
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetActiveWindow
UnionRect
FindWindowExW
EndPaint
GetDC
ReleaseDC
InvalidateRect
wvsprintfW
MessageBoxW
SetWindowRgn
BeginPaint
ScreenToClient
ClientToScreen
GetClientRect
GetWindowRect
SetWindowPos
MoveWindow
PostMessageW
InvalidateRgn
SetCapture
SetFocus
GetWindow
GetParent
IsWindow
GetSysColor
GetFocus
FillRect
CreateAcceleratorTableW
ReleaseCapture
DefWindowProcW
OffsetRect
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetForegroundWindow
LoadImageW
PtInRect
SendMessageW
DestroyWindow
CreateWindowExW
GetWindowLongW
SetWindowLongW
CharNextW
GetDesktopWindow
IntersectRect
GetKeyState
KillTimer
SetTimer
EnableWindow
SetCursor
PostQuitMessage
IsIconic
GetCursorPos
TranslateMessage
DispatchMessageW
GetMessageW
GetSystemMetrics
GetMonitorInfoW
MonitorFromWindow
IsWindowVisible
IsZoomed
BringWindowToTop
wsprintfW
MessageBoxA
ShowWindow
CallWindowProcW
RegisterClassExW
LoadCursorW
GetClassInfoExW
gdi32
SetBkMode
SetTextColor
CombineRgn
CreatePenIndirect
CreateRectRgnIndirect
GetCharABCWidthsW
GetClipBox
CreateCompatibleBitmap
Rectangle
RoundRect
SelectClipRgn
CreatePatternBrush
SetBkColor
StretchBlt
SetStretchBltMode
GetTextMetricsW
MoveToEx
TextOutW
ExtTextOutW
GdiFlush
GetObjectA
ExtSelectClipRgn
SetWindowOrgEx
CreatePen
CreateFontIndirectW
CreateRoundRectRgn
CreateSolidBrush
DeleteObject
SelectObject
GetDeviceCaps
SaveDC
CreateDIBSection
RestoreDC
LineTo
GetObjectW
GetStockObject
DeleteDC
BitBlt
CreateCompatibleDC
GetTextExtentPoint32W
advapi32
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegEnumKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegQueryValueExW
RegOpenKeyExW
shell32
Shell_NotifyIconW
DragAcceptFiles
ShellExecuteW
ShellExecuteExW
DragQueryFileW
DragFinish
ord165
SHGetFolderPathW
SHGetDesktopFolder
ole32
OleLockRunning
OleInitialize
OleUninitialize
CoTaskMemRealloc
CoInitialize
CoUninitialize
CoInitializeSecurity
CoCreateGuid
CLSIDFromProgID
CreateStreamOnHGlobal
CLSIDFromString
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
oleaut32
SysAllocString
VarUI4FromStr
VariantClear
VariantInit
SysFreeString
ws2_32
WSAStartup
msvcp120
?_Launch@_Pad@std@@QAEXPAU_Thrd_imp_t@@@Z
??1_Pad@std@@QAE@XZ
?_Release@_Pad@std@@QAEXXZ
??0_Pad@std@@QAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?_Make_dir@sys@tr2@std@@YAHPB_W@Z
?_Open_dir@sys@tr2@std@@YAPAXAAY0BAE@_WPB_WAAHAAW4file_type@123@@Z
?_Close_dir@sys@tr2@std@@YAXPAX@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Future_error_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?_Throw_C_error@std@@YAXH@Z
_Mtx_init
_Mtx_lock
_Mtx_unlock
_Cnd_init
_Cnd_wait
_Cnd_broadcast
_Cnd_destroy
_Mtx_destroy
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
??1?$codecvt@_WDH@std@@MAE@XZ
??_7_Facet_base@std@@6B@
??_7facet@locale@std@@6B@
??_7codecvt_base@std@@6B@
??_7?$codecvt@_WDH@std@@6B@
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??0?$codecvt@_WDH@std@@QAE@I@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
_Thrd_equal
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Winerror_map@std@@YAPBDH@Z
?_Read_dir@sys@tr2@std@@YAPA_WAAY0BAE@_WPAXAAW4file_type@123@@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??1_Lockit@std@@QAE@XZ
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Stat@sys@tr2@std@@YA?AW4file_type@123@PB_WAAH@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
_Xtime_get_ticks
_Thrd_join
_Cnd_timedwait
_Mtx_current_owns
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_current
?_Xinvalid_argument@std@@YAXPBD@Z
libcurl
curl_global_init
curl_global_cleanup
curl_easy_init
curl_slist_append
curl_easy_setopt
curl_easy_perform
curl_easy_strerror
curl_easy_cleanup
libeay32
ord3171
ord3024
ord3106
shlwapi
PathFileExistsW
msvcr120
wcsncpy_s
wcsstr
_errno
wcstol
longjmp
_snwprintf_s
_snprintf_s
fputc
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
_except1
fflush
setvbuf
fgetpos
_fseeki64
fsetpos
ungetc
fgetc
_unlock_file
_lock_file
vswprintf_s
wcstoul
calloc
_wcsicmp
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
wcschr
wcsncpy
wcsrchr
_wcslwr
isdigit
isalnum
toupper
_itow
wcstod
iswalnum
wcsncmp
_wtof
swscanf
_mktime64
tolower
_vswprintf_c_l
_beginthreadex
vsprintf_s
??0exception@std@@QAE@ABQBD@Z
??8type_info@@QBE_NABV0@@Z
??1type_info@@UAE@XZ
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__wgetmainargs
__set_app_type
exit
_exit
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_wcmdln
_fmode
_commode
_except_handler4_common
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
_wmkdir
_time64
srand
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
rand
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?_Oversubscribe@_Context@details@Concurrency@@SAX_N@Z
?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPAX@Z0@Z
?_NewCollection@_AsyncTaskCollection@details@Concurrency@@SAPAV123@PAV_CancellationTokenState@23@@Z
?wait@event@Concurrency@@QAEII@Z
??1scoped_lock@critical_section@Concurrency@@QAE@XZ
??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z
??1critical_section@Concurrency@@QAE@XZ
??0critical_section@Concurrency@@QAE@XZ
??1event@Concurrency@@QAE@XZ
??0event@Concurrency@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBDH@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
?set@event@Concurrency@@QAEXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ
?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_GetCurrentInlineDepth@_StackGuard@details@Concurrency@@CAAAIXZ
?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?Free@Concurrency@@YAXPAX@Z
?Alloc@Concurrency@@YAPAXI@Z
?terminate@@YAXXZ
atoi
fwrite
fclose
fopen
sprintf_s
_wtoi
_wtoi64
realloc
_recalloc
memcpy_s
malloc
swprintf_s
mbstowcs_s
memchr
_purecall
memmove
??2@YAPAXI@Z
??_V@YAXPAX@Z
free
??3@YAXPAX@Z
_wcsnicmp
_setjmp3
ceil
floor
??0bad_cast@std@@QAE@PBD@Z
iphlpapi
GetAdaptersInfo
comctl32
ord17
_TrackMouseEvent
imm32
ImmSetCompositionWindow
ImmSetCompositionFontW
ImmReleaseContext
ImmGetContext
ImmGetVirtualKey
wininet
InternetConnectW
InternetCloseHandle
HttpQueryInfoW
InternetReadFile
HttpSendRequestW
InternetCrackUrlW
InternetOpenW
HttpOpenRequestW
comdlg32
GetOpenFileNameW
gdiplus
GdipSetPixelOffsetMode
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDrawString
GdipGetFamily
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipGetImageWidth
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushI
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetCompositingQuality
GdipSetSmoothingMode
GdipCreateFontFromDC
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipGraphicsClear
GdipDrawImage
GdipDrawImageRectI
GdipDeleteFontFamily
GdipLoadImageFromStream
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 336KB - Virtual size: 335KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ