Static task
static1
Behavioral task
behavioral1
Sample
1c0b155d6b6f371606e40a3b7e57c47478c5971de73a1328d786b90f9b39cca6.exe
Resource
win7-20230831-en
windows7-x64
Behavioral task
behavioral2
Sample
1c0b155d6b6f371606e40a3b7e57c47478c5971de73a1328d786b90f9b39cca6.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
General
-
Target
1c0b155d6b6f371606e40a3b7e57c47478c5971de73a1328d786b90f9b39cca6
-
Size
1.2MB
-
MD5
8ccef323e98e9c28952504a4dd2eee15
-
SHA1
14ae58eba7215702e1e7db2d774de3c97c894b0e
-
SHA256
1c0b155d6b6f371606e40a3b7e57c47478c5971de73a1328d786b90f9b39cca6
-
SHA512
57afd5bac3c38c9248fe385bb20bf8322a5081a1a1c303a53295d8dc948e1da0565999653d48474cb06933f11e5bb95a9373a0ae4e453614554b14c5cd4a32d4
-
SSDEEP
24576:EMHu4O19J8S9c63aU1Fs8AcSucltvVuF2NUaj:k9SS9j3aU1ocilNVW2N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c0b155d6b6f371606e40a3b7e57c47478c5971de73a1328d786b90f9b39cca6
Files
-
1c0b155d6b6f371606e40a3b7e57c47478c5971de73a1328d786b90f9b39cca6.exe windows:6 windows x86
7490954b8463eea2c88e12ae5ab4f698
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
PlaySoundW
msvcr120
ceil
fclose
fflush
fgetc
fgetpos
fopen
fprintf
fputc
free
malloc
realloc
memmove_s
_recalloc
fsetpos
_fseeki64
fwrite
setvbuf
_controlfp_s
_invoke_watson
__crtSetUnhandledExceptionFilter
_except_handler4_common
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
memmove
strncmp
_localtime64_s
memcpy
ungetc
memset
??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z
_mkgmtime64
_beginthreadex
_hypot
_CxxThrowException
__CxxFrameHandler3
_wtoi
sprintf_s
??_V@YAXPAX@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??8type_info@@QBE_NABV0@@Z
signal
strncpy
wcsftime
sprintf
_vswprintf_c_l
memcpy_s
_unlock
_lock
?terminate@@YAXXZ
_except1
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_commode
_fmode
_wcmdln
_initterm
_initterm_e
__setusermatherr
_configthreadlocale
_cexit
_exit
__set_app_type
__wgetmainargs
_amsg_exit
__crtGetShowWindowMode
_XcptFilter
isspace
isdigit
??4exception@std@@QAEAAV01@ABV01@@Z
_ftime64
getenv
strchr
vfprintf
abort
_gmtime64_s
_mkdir
_unlink
rename
fopen_s
atol
vsprintf_s
tolower
toupper
??0exception@std@@QAE@XZ
atof
_stat64i32
srand
rand
exit
??_U@YAPAXI@Z
_wcsdup
_wtof
wcscpy_s
_time64
_gmtime64
_snprintf
_wfopen
vswprintf_s
fwprintf
memchr
atoi
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
_localtime64
_errno
_unlock_file
_lock_file
strstr
mfc120u
ord13121
ord13635
ord12429
ord12449
ord450
ord12824
ord12738
ord12966
ord12958
ord13149
ord13907
ord13554
ord13975
ord8763
ord13972
ord12890
ord13987
ord13983
ord12893
ord5119
ord4528
ord6393
ord1105
ord12941
ord887
ord1386
ord5327
ord12899
ord11157
ord11160
ord10999
ord10390
ord8804
ord8794
ord2639
ord9229
ord376
ord9408
ord1075
ord5754
ord13509
ord7061
ord6493
ord4183
ord9014
ord11980
ord7399
ord5888
ord10895
ord8920
ord7002
ord12010
ord11950
ord6402
ord7376
ord5865
ord2341
ord2336
ord6652
ord12219
ord14463
ord12276
ord14516
ord261
ord13991
ord7311
ord6743
ord3218
ord3324
ord4196
ord1449
ord9019
ord7531
ord6020
ord14458
ord1687
ord6492
ord4182
ord1177
ord9013
ord7398
ord5887
ord7033
ord514
ord3132
ord8280
ord4943
ord4944
ord6033
ord12331
ord1746
ord5837
ord13560
ord13569
ord5842
ord13567
ord5841
ord4340
ord3976
ord2515
ord4452
ord11305
ord5858
ord8713
ord1148
ord8091
ord9094
ord11675
ord11670
ord5274
ord12052
ord3800
ord4544
ord11977
ord9118
ord11956
ord11370
ord10283
ord9183
ord11415
ord7394
ord13142
ord4338
ord965
ord13488
ord1442
ord981
ord8358
ord1455
ord963
ord13784
ord1439
ord13516
ord7946
ord7951
ord13404
ord13514
ord971
ord13117
ord1445
ord310
ord1043
ord12635
ord11456
ord6696
ord3821
ord12957
ord12956
ord13153
ord7331
ord4423
ord8227
ord4434
ord1471
ord7543
ord982
ord6927
ord1987
ord14406
ord1457
ord9016
ord1441
ord4193
ord3215
ord6735
ord6032
ord6123
ord13616
ord2719
ord3790
ord12095
ord4936
ord4937
ord4940
ord4938
ord4939
ord14367
ord7704
ord4843
ord999
ord3654
ord8628
ord4184
ord14237
ord2484
ord3889
ord6510
ord8107
ord14211
ord13325
ord5471
ord5472
ord1094
ord12676
ord13676
ord13677
ord6197
ord6198
ord13392
ord13393
ord5473
ord5474
ord2674
ord3805
ord14337
ord4272
ord1879
ord4624
ord8665
ord2839
ord11828
ord11827
ord11826
ord437
ord6991
ord3946
ord4456
ord2520
ord2204
ord1520
ord5669
ord7390
ord9093
ord2478
ord11618
ord9244
ord11020
ord11019
ord10602
ord10132
ord10312
ord5273
ord5282
ord14371
ord4045
ord4095
ord1125
ord11968
ord12835
ord2676
ord9365
ord4660
ord12531
ord12289
ord2516
ord13212
ord2801
ord7544
ord8277
ord11133
ord12446
ord5482
ord12657
ord9078
ord11148
ord10905
ord10857
ord3814
ord8962
ord6102
ord5514
ord2816
ord13692
ord13925
ord481
ord7016
ord3806
ord2163
ord950
ord8352
ord7542
ord1467
ord8268
ord12122
ord10314
ord12799
ord12736
ord8206
ord5262
ord2444
ord12413
ord12412
ord14448
ord7806
ord14454
ord9279
ord4109
ord4047
ord12818
ord7825
ord12121
ord11902
ord1992
ord11858
ord11857
ord1824
ord14326
ord12402
ord7884
ord14526
ord6251
ord14528
ord6253
ord14527
ord6252
ord13771
ord8344
ord992
ord6758
ord1069
ord366
ord2214
ord3809
ord5821
ord12114
ord8099
ord12126
ord12094
ord7382
ord12006
ord6121
ord13612
ord2718
ord9091
ord12047
ord1108
ord8921
ord10896
ord11271
ord10353
ord4049
ord458
ord3361
ord3362
ord3122
ord6434
ord3263
ord3260
ord10136
ord8092
ord10166
ord10168
ord10167
ord10165
ord6431
ord6389
ord10169
ord5557
ord11600
ord11601
ord9020
ord11964
ord3795
ord11811
ord14447
ord8846
ord6875
ord10883
ord9137
ord3224
ord13738
ord12134
ord12132
ord1711
ord1723
ord1731
ord1727
ord1736
ord4879
ord4920
ord4887
ord4899
ord4895
ord4891
ord4928
ord4916
ord4883
ord4932
ord4905
ord4867
ord4874
ord4909
ord4459
ord5693
ord9574
ord4451
ord3013
ord14449
ord7807
ord14455
ord6774
ord11592
ord14094
ord8699
ord13563
ord5838
ord13997
ord2640
ord11999
ord3898
ord3329
ord3330
ord3223
ord12043
ord5157
ord5454
ord5664
ord9231
ord5430
ord5667
ord5160
ord5316
ord5137
ord7609
ord7610
ord7600
ord5314
ord8101
ord10131
ord9090
ord4692
ord4672
ord8059
ord5488
ord1141
ord503
ord6853
ord8242
ord12634
ord12633
ord2948
ord1658
ord1138
ord492
ord2262
ord1518
ord280
ord290
ord14311
ord951
ord6404
ord1447
ord973
ord4772
ord5824
ord1042
ord286
ord285
ord6462
ord2480
ord4839
ord3638
ord3766
ord3773
ord3761
ord7384
ord9116
ord12048
ord462
ord7004
ord1110
ord6392
ord3839
ord6469
ord7393
ord6122
ord13614
ord8793
ord8801
ord12051
ord3131
ord9409
ord10385
ord1146
ord511
ord7032
ord6166
ord11159
ord11156
ord7671
ord10998
ord2638
ord11963
ord11998
ord9107
ord6773
ord9929
ord9928
ord11027
ord8892
ord11003
ord11621
ord9407
ord296
ord2967
ord2347
ord9872
ord9867
ord9395
ord9405
kernel32
MultiByteToWideChar
CreateFileW
ReadFile
GetFileAttributesW
HeapValidate
HeapCreate
GetFileAttributesA
HeapDestroy
FormatMessageW
Sleep
LoadLibraryW
WideCharToMultiByte
WriteFile
FormatMessageA
GetSystemTimeAsFileTime
GetProcessHeap
UnlockFileEx
GetTickCount
OutputDebugStringW
LockFile
UnlockFile
WaitForSingleObject
HeapFree
QueryPerformanceCounter
SystemTimeToFileTime
HeapAlloc
FreeLibrary
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
GetLocalTime
VerSetConditionMask
FlushFileBuffers
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
SetWaitableTimer
QueueUserAPC
GetCurrentThreadId
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
WaitForMultipleObjects
VerifyVersionInfoW
CreateEventA
SetEvent
GetComputerNameW
QueryPerformanceFrequency
GetModuleFileNameW
ResetEvent
GetModuleFileNameA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileStringW
WritePrivateProfileStringW
CreateDirectoryW
FindClose
FindFirstFileW
FindNextFileW
lstrcpyW
lstrlenW
SleepEx
CreateEventW
CreateThread
GetCurrentThread
EncodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleHandleA
GetModuleHandleW
GetTempPathW
GetLastError
GetProcAddress
HeapSize
LockFileEx
GetDiskFreeSpaceW
LoadLibraryA
CreateFileMappingA
CreateFileMappingW
GetDiskFreeSpaceA
GetSystemInfo
GetFileAttributesExW
OutputDebugStringA
GetVersionExA
CloseHandle
DeleteFileW
GetCurrentProcessId
GetTempPathA
LocalFree
GetSystemTime
AreFileApisANSI
DeleteFileA
GetFullPathNameW
GetFullPathNameA
HeapReAlloc
CreateFileA
GetFileSize
CreateMutexW
SetLastError
SetFilePointer
user32
EnableWindow
UpdateWindow
GetDlgItem
GetFocus
GetKeyState
SetTimer
CreatePopupMenu
AppendMenuW
GetWindowRect
GetCursorPos
DrawTextW
DrawTextExW
SendMessageW
TabbedTextOutW
InvalidateRect
GetSysColor
MessageBeep
PostMessageW
GetClientRect
PostThreadMessageW
GetMessageW
SetWindowLongW
GetWindow
PtInRect
wsprintfW
GrayStringW
UnregisterClassW
GetWindowLongW
gdi32
StretchBlt
Rectangle
CreateSolidBrush
CreatePen
CreateFontW
LPtoDP
DPtoLP
ExtTextOutW
TextOutW
GetObjectW
SelectObject
RectVisible
PtVisible
GetWindowExtEx
BitBlt
GetViewportExtEx
GetMapMode
GetBkColor
Escape
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
msimg32
TransparentBlt
advapi32
GetUserNameW
shell32
SHGetDesktopFolder
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
SHOpenFolderAndSelectItems
ord190
ord155
comctl32
_TrackMouseEvent
shlwapi
StrRetToStrW
PathMatchSpecW
ole32
CoTaskMemFree
oleaut32
SysFreeString
gdiplus
GdiplusShutdown
msvcp120
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??_7ios_base@std@@6B@
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
_Nan
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?id@?$ctype@_W@std@@2V0locale@2@A
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@_JHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
boost_thread-vc120-mt-1_63
?notify_all_at_thread_exit@thread_data_base@detail@boost@@UAEXPAVcondition_variable@3@PAVmutex@3@@Z
?join@thread@boost@@QAEXXZ
?get_id@thread@boost@@QBE?AVid@12@XZ
??1thread@boost@@QAE@XZ
?start_thread@thread@boost@@AAEXXZ
??1thread_data_base@detail@boost@@UAE@XZ
??0thread_data_base@detail@boost@@QAE@XZ
boost_system-vc120-mt-1_63
?generic_category@system@boost@@YAABVerror_category@12@XZ
?system_category@system@boost@@YAABVerror_category@12@XZ
ws2_32
gethostname
closesocket
ioctlsocket
htons
listen
setsockopt
WSAStartup
WSACleanup
WSASetLastError
WSAGetLastError
WSASend
WSASocketW
inet_ntoa
socket
shutdown
send
recv
ntohs
inet_addr
getpeername
WSAIoctl
select
htonl
getsockopt
getsockname
connect
accept
__WSAFDIsSet
WSARecv
getaddrinfo
gethostbyname
freeaddrinfo
bind
mswsock
GetAcceptExSockaddrs
AcceptEx
libmysql
mysql_num_rows
mysql_errno
mysql_error
mysql_init
mysql_real_connect
mysql_query
mysql_store_result
mysql_ping
mysql_options
mysql_free_result
mysql_fetch_row
mysql_escape_string
mysql_close
iphlpapi
GetIpAddrTable
Sections
.text Size: 979KB - Virtual size: 979KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ