ab104d42b2c59c1058d8fc7df5114f847fe5329ae3dac9f7f0965e3de8f61513

Sharing

Copy URL

Twitter E-mail

General

Target

ab104d42b2c59c1058d8fc7df5114f847fe5329ae3dac9f7f0965e3de8f61513
Size

1.9MB
MD5

131854a935d5e5bdb8d6ff97a1c301f4
SHA1

2837e34fa10d82e05231ecf07c6997a9d4247f54
SHA256

ab104d42b2c59c1058d8fc7df5114f847fe5329ae3dac9f7f0965e3de8f61513
SHA512

df102d02c46e4923b0ffd04cc8a9459e5b1307d03763e0baec897df40386391283109bdaf107061f126ee8be65148b15ed83f865e0ab5fb523dd2cfec551c72f
SSDEEP

49152:/m/tkVzGGL74fk9RPbQXxgFC522foYL6Q7fwO:/ieRGGH43hgFCl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab104d42b2c59c1058d8fc7df5114f847fe5329ae3dac9f7f0965e3de8f61513

Files

ab104d42b2c59c1058d8fc7df5114f847fe5329ae3dac9f7f0965e3de8f61513
.dll windows x86

70fcb7f0a0c1695b8c121e5923e3b3a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc100u

ord4100
ord13605
ord322
ord6686
ord1186
ord734
ord6323
ord13070
ord12413
ord7913
ord12186
ord4802
ord8509
ord4573
ord3978
ord2435
ord5801
ord7249
ord1274
ord6125
ord5456
ord8276
ord2847
ord2946
ord3766
ord12948
ord4805
ord2407
ord1479
ord7914
ord5652
ord3628
ord980
ord422
ord7973
ord11940
ord2185
ord4356
ord5855
ord942
ord5824
ord2755
ord13047
ord917
ord5802
ord8264
ord2746
ord3746
ord11123
ord8179
ord10058
ord10412
ord3627
ord2981
ord2980
ord2756
ord5556
ord12606
ord2417
ord11163
ord8347
ord7911
ord7006
ord12951
ord9525
ord6711
ord3261
ord1262
ord6114
ord2841
ord2943
ord970
ord5846
ord921
ord5809
ord5468
ord8266
ord2748
ord3749
ord7901
ord2617
ord3436
ord948
ord381
ord6344
ord7624
ord7548
ord11784
ord13854
ord4744
ord2164
ord11476
ord11477
ord13381
ord7108
ord13387
ord8530
ord3684
ord3625
ord11864
ord7126
ord1739
ord14162
ord10976
ord13267
ord11469
ord7179
ord13570
ord13567
ord13572
ord13569
ord13571
ord13568
ord3416
ord5261
ord4103
ord11236
ord4086
ord7391
ord9498
ord11240
ord11209
ord11845
ord5118
ord9328
ord6140
ord1986
ord7176
ord1292
ord890
ord6869
ord310
ord903
ord7877
ord3413
ord417
ord5852
ord4888
ord11704
ord290
ord4890
ord1312
ord7047
ord5558
ord12610
ord2887
ord2884
ord7385
ord2418
ord14146
ord14148
ord14147
ord2234
ord11325
ord2883
ord3170
ord3171
ord1301
ord1299
ord1895
ord2878
ord3879
ord7301
ord6667
ord5637
ord5074
ord5641
ord13219
ord11494
ord4355
ord2509
ord13342
ord4139
ord1734
ord6243
ord1282
ord880
ord1266
ord6117
ord8273
ord2844
ord3763
ord2119
ord7338
ord2903
ord2902
ord7972
ord13073
ord11065
ord14145
ord14149
ord14132
ord14059
ord14060
ord8277
ord11081
ord3402
ord10937
ord13380
ord8112
ord11210
ord6247
ord10045
ord11089
ord3191
ord2870
ord9218
ord4360
ord6346
ord296
ord902
ord1490
ord323
ord1873
ord1945
ord2088
ord2090
ord8393
ord2853
ord12724
ord11246
ord11244
ord1501
ord1508
ord1514
ord4102
ord3150
ord5302
ord2877
ord2876
ord3474
ord3679
ord7302
ord12710
ord7299
ord5688
ord12707
ord11850
ord6241
ord4908
ord7928
ord7931
ord12950
ord7004
ord4801
ord11228
ord12346
ord1512
ord1519
ord4388
ord4425
ord4396
ord4408
ord4404
ord4400
ord4430
ord4421
ord4392
ord4434
ord4413
ord4379
ord4383
ord4416
ord3999
ord14067
ord3992
ord2665
ord13382
ord7109
ord13388
ord6156
ord10725
ord12557
ord5276
ord2339
ord11116
ord2951
ord2852
ord11159
ord4642
ord4923
ord5115
ord8483
ord4901
ord5143
ord4645
ord4794
ord4623
ord6931
ord6932
ord6922
ord4792
ord7393
ord9333
ord8346
ord3397
ord2030
ord2952
ord6870
ord3491
ord1296
ord897
ord6661
ord1476
ord1934
ord5862
ord3446
ord1987
ord4290
ord5813
ord978
ord415
ord2064
ord2068
ord1272
ord871
ord4512
ord4276
ord13398
ord266
ord265
ord1440
ord2614
ord2620
ord4150
ord4151
ord11801
ord7876
ord7871
ord11838
ord2629
ord285
ord5264
ord12061
ord6037
ord6036
ord11330
ord2057
ord13396
ord2823
ord11353
ord13415
ord4331
ord723
ord1716
ord2528
ord10960
ord979
ord421
ord1176
ord11540
ord1310
ord280
ord2062
ord3846
ord4511
ord286
ord1298
ord1450
ord1953
ord408
ord2045
ord1984
ord2080
ord2053
ord2055
ord2091
ord908
ord12947
ord13045
ord7511
ord3977
ord12411
ord12412
ord3909
ord7399
ord2224
ord1300

msvcr100

_localtime64
memchr
malloc
div
memcpy_s
_vsnwprintf_s
_vscwprintf
memmove
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_wsplitpath_s
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
_itow
_swprintf
_exit
__iob_func
fprintf
wcsrchr
wcscat_s
memset
wcslen
memcpy
__CxxFrameHandler3
strlen
_CxxThrowException
wcsstr
_wmakepath_s
_wtoi64
rand
wcsncpy_s
srand
wcscpy_s
_wcsicmp
strstr
_isnan
_stricmp
_atoi64
strcpy_s
strncpy_s
_i64toa_s
atoi
_snwprintf_s
calloc
_recalloc
free
wcsftime
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
fflush
strtol
vsprintf_s
atol
strtod
isdigit
_purecall
_wtof
atof
_localtime64_s
_time64
_mktime64
sprintf_s
_vsnprintf_s
_vscprintf
_wtoi
??0exception@std@@QAE@ABV01@@Z

kernel32

DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedExchangeAdd
CreateThread
SetThreadPriority
WaitForSingleObject
GetCurrentThreadId
TerminateThread
InterlockedExchange
WaitForMultipleObjects
MultiByteToWideChar
lstrlenW
GlobalAlloc
lstrcpyW
InterlockedDecrement
GetLocalTime
OutputDebugStringA
CloseHandle
Sleep
WideCharToMultiByte
GetFileAttributesW
GetModuleFileNameW
lstrlenA
QueryPerformanceFrequency
QueryPerformanceCounter
CreateEventW
GetTickCount
Beep
LocalFree
GetLastError
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
Thread32Next
GetWindowsDirectoryW
LoadLibraryW
FreeLibrary
WinExec
SetFilePointer
CreateFileW
ReleaseMutex
CreateMutexW
CreateProcessW
SetLastError
WriteFile
IsDebuggerPresent
InterlockedCompareExchange
GetCurrentProcess
GetProcAddress
SearchPathW
LocalAlloc
EncodePointer
DecodePointer
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
ResetEvent
SetEvent
CreateDirectoryW
DeleteFileW
FindClose
FindNextFileW
FindFirstFileW
FormatMessageW

user32

DestroyWindow
CopyIcon
LoadCursorW
InflateRect
ReleaseDC
GetDC
RedrawWindow
GetSysColor
SetCursor
PtInRect
ScreenToClient
GetMessagePos
InvalidateRect
MessageBeep
SetWindowLongW
DestroyCursor
RegisterWindowMessageW
GetParent
UpdateWindow
BringWindowToTop
GetClientRect
PostMessageW
GetWindowRect
SendMessageW
MessageBoxW
EnableWindow
KillTimer
SetTimer
IsWindow

gdi32

GetStockObject
CreateSolidBrush
CreateFontIndirectW
GetObjectW
GetTextExtentPoint32W

advapi32

RegCloseKey
RegQueryValueW
RegOpenKeyExW

shell32

ShellExecuteW

shlwapi

PathCanonicalizeW
StrStrIA

ole32

CoCreateInstance
CoUninitialize
CreateStreamOnHGlobal
CoInitialize
CLSIDFromString
CLSIDFromProgID
OleRun

oleaut32

SysAllocString
SysFreeString
VariantClear
VariantInit
VariantCopy
GetErrorInfo

ws2_32

WSAStartup

msvcp100

?width@ios_base@std@@QAE_J_J@Z
?_BADOFF@std@@3_JB
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?uncaught_exception@std@@YA_NXZ
?flags@ios_base@std@@QBEHXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?width@ios_base@std@@QBE_JXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?max@?$numeric_limits@I@std@@SAIXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
??1_Container_base12@std@@QAE@XZ
??0_Container_base12@std@@QAE@XZ
?_Swap_all@_Container_base12@std@@QAEXAAU12@@Z
?_Orphan_all@_Container_base12@std@@QAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xfunc@tr1@std@@YAXXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Incref@facet@locale@std@@QAEXXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@UAE@XZ
_Mbrtowc
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?classic@locale@std@@SAABV12@XZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?id@?$numpunct@_W@std@@2V0locale@2@A
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?quiet_NaN@?$numeric_limits@M@std@@SAMXZ
_FNan
_Nan
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z

sqlite3

sqlite3_backup_init
sqlite3_backup_step
sqlite3_backup_finish
sqlite3_errcode
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_sleep
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_text16
sqlite3_column_type
sqlite3_prepare16
sqlite3_busy_timeout
sqlite3_last_insert_rowid
sqlite3_finalize
sqlite3_step
sqlite3_changes
sqlite3_exec
sqlite3_close
sqlite3_errmsg16
sqlite3_open16
sqlite3_column_name16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_text16
sqlite3_column_count
sqlite3_reset

wininet

InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
FtpOpenFileW
InternetWriteFile
HttpOpenRequestW
HttpSendRequestW
InternetConnectW

Exports

Exports

?CanRemove@Formula@@QAE_NXZ
?CanStop@Formula@@QBE_NXZ
?CanTrade@Formula@@QAE_NXZ
?ChangeStrCklLimitDate@Formula@@QAE_NH@Z
?ClearLastError@Formula@@QAEXXZ
?EnableDataRequest@Formula@@QAEX_N@Z
?ExecOffset@Formula@@AAEHXZ
?GetData@Formula@@QAEPAUDATA@@XZ
?GetDataCount@Formula@@QAEHXZ
?GetDataCycle@Formula@@QAEHXZ
?GetDefaultPeriod@Formula@@QAEHXZ
?GetDesc@Formula@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetDesc@Formula@@QAEXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetDisabledPeriod@Formula@@QAEHXZ
?GetDrawObjectsCount@Formula@@QAEHXZ
?GetExitOnCloseSec@Formula@@QAEHXZ
?GetFmlNoTitle@Formula@@QAE_NXZ
?GetGroupName@Formula@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetGroupName@Formula@@QAEXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetHasParamTemplate@Formula@@QAE_NXZ
?GetHisData@Formula@@QAE?AV?$shared_ptr@VHistoryData@data@@@tr1@std@@XZ
?GetInputs@Formula@@QAEPAV?$vector@UINPUT_PARAM@@V?$allocator@UINPUT_PARAM@@@std@@@std@@XZ
?GetLastError@Formula@@QAEHXZ
?GetLastErrorMsg@Formula@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetLimitDate@Formula@@QAEHXZ
?GetListener@Formula@@QAEPAURunnerListener@@XZ
?GetMaxBarsBack@Formula@@QAEHXZ
?GetName@Formula@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetName@Formula@@QAEXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetNameA@Formula@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetNote@Formula@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetNote@Formula@@QAEXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetParamTemplate@Formula@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetParamTemplate@Formula@@QAEXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetPath@Formula@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetPath@Formula@@QAEXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetPrint@Formula@@QAEPAVFmlPrintBuffer@@XZ
?GetPrivateTester@Formula@@QAEPAVBackTester@@XZ
?GetProductID@Formula@@QAEHXZ
?GetQuickCalcBars@Formula@@QAEHXZ
?GetRefLines@Formula@@QAEPAV?$vector@MV?$allocator@M@std@@@std@@XZ
?GetSecurity@Formula@@QAE?AV?$shared_ptr@VSecurity@data@@@tr1@std@@XZ
?GetShortCut@Formula@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetShortCut@Formula@@QAEXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetTestingMode@Formula@@QAE_NXZ
?GetTotalK@Formula@@QAEHXZ
?GetVersion@Formula@@QAEHXZ
?HasDrawObjects@Formula@@QAE_NXZ
?HasListFunction@Formula@@QAE_NXZ
?HasSysParam@Formula@@QAE_NXZ
?HasTrade@Formula@@QAE_NXZ
?IsDingLiangJieGou@Formula@@QAE_NXZ
?IsLimitAxis@Formula@@QAE_NXZ
?IsOptEval@Formula@@QAE_NXZ
?IsOptimizing@Formula@@QAE_NXZ
?IsPrivateTestRunning@Formula@@QAE_NXZ
?IsRunning@Formula@@QAE_NXZ
?IsYinCangKXian@Formula@@QAE_NXZ
?IsZhuTu@Formula@@QAE_NXZ
?SecurityChange@Formula@@QAEXXZ
?SetCanRemove@Formula@@QAEX_N@Z
?SetChartCallBack@Formula@@QAEXPAX0@Z
?SetChartView@Formula@@QAEXPAUHWND__@@@Z
?SetCustomEvalDataLen@Formula@@QAEXH@Z
?SetExitOnCloseSec@Formula@@QAEXH@Z
?SetFormulaCallback@Formula@@QAEXPAVIFormulaCallback@@@Z
?SetHasParamTemplate@Formula@@QAEX_N@Z
?SetHasTrade@Formula@@QAEX_N@Z
?SetIDrawing@Formula@@QAEXPAVIDrawing@@@Z
?SetIsOptimizing@Formula@@QAEX_N@Z
?SetLastError@Formula@@QAEXW4RUNTIME_ERROR@@@Z
?SetListener@Formula@@QAEXPAURunnerListener@@@Z
?SetMaxBarsBack@Formula@@QAEXH@Z
?SetMultiPos@Formula@@QAEXH@Z
?SetNK@Formula@@QAEXH@Z
?SetNote@Formula@@QAEXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetParamTemplate@Formula@@QAEXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetPath@Formula@@QAEXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetQuickCalcBars@Formula@@QAEXH@Z
?SetRunMode@Formula@@QAEX_N@Z
?SetSysParam@Formula@@QAE_NHHHMMM@Z
?SetTestingMode@Formula@@QAEX_N@Z
?SetTrackSignals@Formula@@QAEX_N@Z
?SetTradeNeedConfirm@Formula@@QAEX_N@Z
?SetZjlData@Formula@@QAEXV?$shared_ptr@VTData@data@@@tr1@std@@@Z
?SetiInfoPanel@Formula@@QAEXPAVIInfoPanel@api@fox@@@Z
?TradeNeedConfirm@Formula@@QAE_NXZ
FoxGetPluginObject

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 331KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

70fcb7f0a0c1695b8c121e5923e3b3a3

Headers

DLL Characteristics

File Characteristics

Imports

mfc100u

msvcr100

kernel32

user32

gdi32

advapi32

shell32

shlwapi

ole32

oleaut32

ws2_32

msvcp100

sqlite3

wininet

Exports

Exports

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 331KB - Virtual size: 330KB

.data Size: 27KB - Virtual size: 36KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 133KB - Virtual size: 132KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 331KB - Virtual size: 330KB

.data
Size: 27KB - Virtual size: 36KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 133KB - Virtual size: 132KB