?GetParentTabViewContainer@@YGPAVCDSTabViewContainer@@PBVCWnd@@H@Z
?classCDiffView@CDiffView@@2UCRuntimeClass@@B
?messageMap@CDiffView@@1UAFX_MSGMAP@@B
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
12921426512.zip
Resource
win7-20231023-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
12921426512.zip
Resource
win10v2004-20231023-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
12921426512.zip
-
Size
986KB
-
MD5
aacd4ae46e2a24c57a4ae5c6be3d6c97
-
SHA1
673b5845873982993596822a0e614186978e6ea0
-
SHA256
ecffca4904603fe8a1cf843cb3f1f88bb8251446307ecd85d12f0a5d8e822049
-
SHA512
338aa913482cb26e8a85fb12da5934736e06946260bdcd3cbee38db1feefee168f31bddda1aec53b65f7226dd22e07843537a977963a19dd843755a80428073a
-
SSDEEP
24576:NnN4L3kwHVt8Xtzb2X6NbFBdQWiN5l88zdazgq:NnNs0m89zCXkm/nl82Vq
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/75a47d0b381982e27bbd14b7ffe1773fe9a1c4b62af458e65e49fb7a1abbc413
Files
-
12921426512.zip.zip
Password: infected
-
75a47d0b381982e27bbd14b7ffe1773fe9a1c4b62af458e65e49fb7a1abbc413.exe windows:4 windows x86
Password: infected
3f4150f852a73c6ca6ca28ec4d1b8d4e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dscomponents
?GetUndoText@CUndoObject@@QBE?AVCString@@XZ
?GetFirstTypedCompositeUO@CUndoObject@@QAEPAV1@PAUCRuntimeClass@@@Z
?GetTypedCompositeUOCount@CUndoObject@@QBEHPAUCRuntimeClass@@@Z
?Undo@CUndoManager@@QAE_NXZ
?Redo@CUndoManager@@QAE_NXZ
?GetPrevCursor@CUndoManager@@QBEXAAPAU__POSITION@@@Z
?GetUndoText@CUndoManager@@QBE_NAAVCString@@@Z
?CanUndo@CUndoManager@@QBE_NXZ
?GetRedoText@CUndoManager@@QBE_NAAVCString@@@Z
?CanRedo@CUndoManager@@QBE_NXZ
?RemoveAllUOs@CUndoManager@@QAEXXZ
?GetRedoIntDesc@CUndoObject@@UBE?AVCString@@XZ
?GetUndoIntDesc@CUndoObject@@UBE?AVCString@@XZ
?AddCompositeUO@CUndoObject@@UAEXPAV1@_N@Z
?OnAfterRedo@CUndoObject@@MAE_NXZ
?OnEndCommitRedo@CUndoObject@@MAE_NXZ
?OnBeginCommitRedo@CUndoObject@@MAE_NXZ
?OnPrepareRedo@CUndoObject@@MAE_NXZ
?OnAfterUndo@CUndoObject@@MAE_NXZ
?OnEndCommitUndo@CUndoObject@@MAE_NXZ
?OnBeginCommitUndo@CUndoObject@@MAE_NXZ
?OnPrepareUndo@CUndoObject@@MAE_NXZ
??1CUndoObject@@UAE@XZ
??0CUndoObject@@QAE@XZ
?classCUndoObject@CUndoObject@@2UCRuntimeClass@@B
?GetStageInfo_OleName@CStageInfoManager@@QBEPAVCStageInfo@@ABVCPlatformType@@ABVCString@@@Z
?DragEnter@CReposItemILManager@@QAE_NABVCPoint@@@Z
?DragLeave@CReposItemILManager@@QAE_NXZ
?DecodeOleDataObjectAsDNDPIChildItem@CDragNDropPaletteItem@@SA_NPAVCOleDataObject@@PAV1@HABVCStageInfoManager@@@Z
?IsCompatible@CDragNDropPaletteItem@@QBE_NXZ
?DecodeOleDataObjectAsDNDPI@CDragNDropPaletteItem@@SA_NPAVCOleDataObject@@PAV1@ABVCStageInfoManager@@@Z
?GetNumDotNetOleDataObjectElements@CDragNDropPaletteItem@@SAJPAVCOleDataObject@@@Z
?DragOver@CReposItemILManager@@QAE_NABVCPoint@@@Z
?DragOverEnd@CReposItemILManager@@QAE_NXZ
?DragOverBegin@CReposItemILManager@@QAE_NABVCPoint@@@Z
?Compare@CPlatformType@@QBE_NABV1@_N11@Z
?GetLocalizedName@CStageInfo@@QBE?AVCString@@XZ
?GetStageInfo@CPaletteItem@@QBEPAVCStageInfo@@ABVCStageInfoManager@@PBVCPlatformType@@@Z
?Serialize@CPaletteItem@@UAEXAAVCArchive@@@Z
?GetRuntimeClass@CPaletteItem@@UBEPAUCRuntimeClass@@XZ
?AddPaletteSubItem@CPaletteItem@@QAEXPAV1@_N@Z
??0CPaletteItem@@QAE@ABV0@@Z
?GetName@CPaletteItem@@QBE?AVCString@@_N@Z
??1CPaletteItem@@UAE@XZ
??1CPaletteCustomiser@@UAE@XZ
?AddNewlyInstalledStageTypes@CPaletteCustomiser@@QAE_NPAUIDispatch@@ABVCStageInfoManager@@ABU_FactoryDefault2Names@1@@Z
?IsSameSrvAndPrj@CPaletteCustomiser@@QBE_NXZ
?GetRedoText@CUndoObject@@QBE?AVCString@@XZ
?FromFactoryDefault2@CPaletteCustomiser@@QAE_NPAUIDispatch@@ABVCStageInfoManager@@ABU_FactoryDefault2Names@1@@Z
?FromProjectDefault@CPaletteCustomiser@@QAE_NPAUIDispatch@@ABVCStageInfoManager@@AAVCString@@@Z
?FromUserCommonProfile@CPaletteCustomiser@@QAE_NPAUIDispatch@@ABVCStageInfoManager@@@Z
?FromUserPerProjectProfile@CPaletteCustomiser@@QAE_NPAUIDispatch@@ABVCStageInfoManager@@@Z
??0CPaletteCustomiser@@QAE@XZ
?ToUserCommonProfile@CPaletteCustomiser@@QBE_NPAUIDispatch@@@Z
?ToUserPerProjectProfile@CPaletteCustomiser@@QBE_NPAUIDispatch@@@Z
??0CDragNDropPaletteItem@@QAE@ABVCPaletteItem@@W4_DNDPaletteItemType@0@@Z
??4CDragNDropPaletteItem@@QAEAAV0@ABV0@@Z
??0CDragNDropPaletteItem@@QAE@PAUIUnknown@@PBVCStageInfoManager@@@Z
?EndDrag@CReposItemILManager@@QAE_NXZ
?BeginDrag@CReposItemILManager@@QAE_NPAVCImageList@@HABVCPoint@@@Z
?DragHide@CReposItemILManager@@QAE_N_N@Z
?GetILIndexFolder@CReposItemILManager@@QAEH_N0@Z
?RemoveAllPaletteSubItems@CPaletteItem@@QAEXXZ
??0CPaletteGroup@@QAE@ABV0@@Z
??1CPaletteGroup@@UAE@XZ
?GetILIndexFromPaletteItem@CReposItemILManager@@QAEHABVCPaletteItem@@_N@Z
?RemovePaletteSubItem@CPaletteItem@@QAE_NPAV1@@Z
?DeletePaletteItem@CPaletteGroup@@QAE_NPAVCPaletteItem@@@Z
?DeletePaletteGroup@CPaletteCustomiser@@QAE_NPAVCPaletteGroup@@@Z
??0CPaletteGroup@@QAE@ABVCString@@00ABVCPlatformType@@_N@Z
??1CReposItemDispatcher@@UAE@XZ
?ReadEditableObject@CReposItemDispatcher@@QAE_NPAPAUIDispatch@@@Z
?ShowProperties@CReposItemDispatcher@@QAE_NPAUIDispatch@@@Z
??0CReposItemDispatcher@@QAE@PAUIDispatch@@PAVCPaletteItem@@@Z
?GetItemType@CPlatformType@@QBEHXZ
?GetDefaultPaletteSubItem@CPaletteItem@@QBEPAV1@XZ
?DoesReposItemExist@CReposItemDispatcher@@QAE_NAA_N@Z
??4CPaletteItem@@QAEAAV0@ABV0@@Z
?SetPaletteSubItems@CPaletteItem@@QAEXPAV?$CList@PAVCPaletteItem@@PAV1@@@@Z
?IsPlatformTypeAll@CPlatformType@@QBE_NXZ
?BuildKnownStageTypes@CPaletteCustomiser@@IBE_NABVCStageInfoManager@@AAVCStringList@@@Z
?DoesTargetExist@CPaletteItem@@QAE_NPAUIDispatch@@ABVCStageInfoManager@@@Z
?GetShortDescription@CStageInfo@@QBE?AVCString@@XZ
?FromServerFile@CPaletteCustomiser@@QAE_NPAUIDispatch@@ABVCStageInfoManager@@ABVCString@@AAV4@@Z
?BrowseForProjectFileName@CPaletteCustomiser@@QBE_NPAUIDispatch@@AAVCString@@@Z
?GetProjectDefaultFileName@CPaletteCustomiser@@QBE_NPAUIDispatch@@_NAAVCString@@@Z
?FromFactoryDefault3@CPaletteCustomiser@@QAE_NPAUIDispatch@@ABVCStageInfoManager@@ABU_FactoryDefault3Names@1@@Z
?ToServerFile@CPaletteCustomiser@@QBE_NPAUIDispatch@@ABVCString@@AAV3@@Z
?ToProjectDefault@CPaletteCustomiser@@QBE_NPAUIDispatch@@AAVCString@@@Z
?SortPaletteItems@CPaletteGroup@@QAEX_N@Z
?MoveFirstTypedCompositeUOToHead@CUndoObject@@QAE_NPAUCRuntimeClass@@@Z
?GetName@CStageInfo@@QBE?AVCString@@XZ
?GetBaseStageID@CStageInfo@@QBE?AVCString@@XZ
DecodeOleDataObject
?RemoveCompositeUO@CUndoObject@@QAE_NPAV1@@Z
?RemoveUO@CUndoManager@@QAE_NPAVCUndoObject@@@Z
?AddUO@CUndoManager@@QAEPAU__POSITION@@PAVCUndoObject@@@Z
??1CUndoManager@@UAE@XZ
??0CUndoManager@@QAE@I@Z
?PlatformType_All@CPlatformType@@2V1@B
?Set@CPlatformType@@QAEXHHABVCString@@0@Z
?Find@CStageInfoManager@@QBEPAVCPlatformStageTypes@@HH@Z
?Find@CStageInfoManager@@QBEPAVCPlatformStageTypes@@HHABVCString@@@Z
??1CReposItemILManager@@UAE@XZ
??1CStageInfoManager@@UAE@XZ
InitDSComponents
??0CStageInfoManager@@QAE@PAUIDispatch@@@Z
?Build@CStageInfoManager@@QAE_NXZ
??0CReposItemILManager@@QAE@ABVCStageInfoManager@@@Z
?s_sDefHost@CPaletteCustomiser@@1VCString@@A
?s_sDefProject@CPaletteCustomiser@@1VCString@@A
?s_sDefVersion@CPaletteCustomiser@@1VCString@@A
??0CPlatformType@@QAE@HHABVCString@@0@Z
?GetComponentName@CStageInfo_External@@QBEXPAVCString@@@Z
?GetStageInfo_StageTypeID@CStageInfoManager@@QBEPAVCStageInfo@@ABVCPlatformType@@ABVCString@@@Z
?Getplatform@CPlatformType@@QBEABVCString@@XZ
??0CDragNDropPaletteItem@@QAE@XZ
??4CPlatformType@@QAEAAV0@ABV0@@Z
?SetName@CPaletteItem@@QAEX_NABVCString@@@Z
?CF_DNDPALETTEITEM@CDragNDropPaletteItem@@1GB
CreateOleDataSource
??1CDragNDropPaletteItem@@UAE@XZ
??0CPlatformType@@QAE@ABV0@@Z
?Serialize@CPlatformType@@UAEXAAVCArchive@@@Z
?SetNewJobTypesToFactoryDefault2@CPaletteCustomiser@@QAEXPAUIDispatch@@ABVCStageInfoManager@@ABU_FactoryDefault2Names@1@@Z
??1CPlatformType@@UAE@XZ
mfc42
ord430
ord729
ord2386
ord1706
ord786
ord603
ord2461
ord1969
ord273
ord519
ord1858
ord4245
ord5101
ord2101
ord2723
ord2390
ord3059
ord5100
ord5104
ord4303
ord3351
ord5012
ord976
ord5472
ord3403
ord2879
ord2878
ord4152
ord4077
ord5237
ord2382
ord5283
ord2649
ord1665
ord4436
ord2445
ord4427
ord401
ord674
ord5254
ord2884
ord3349
ord941
ord922
ord2817
ord861
ord5683
ord5572
ord2915
ord5220
ord1768
ord3521
ord5681
ord2652
ord1601
ord1669
ord5981
ord6402
ord6453
ord2379
ord539
ord801
ord541
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord2514
ord3597
ord616
ord324
ord1200
ord2824
ord3811
ord3522
ord6403
ord3317
ord5953
ord3097
ord2614
ord699
ord397
ord3438
ord4188
ord3525
ord6569
ord5601
ord6663
ord912
ord432
ord1083
ord501
ord997
ord415
ord1081
ord5597
ord715
ord2765
ord1082
ord3295
ord6154
ord2530
ord4366
ord4056
ord5471
ord4121
ord2389
ord5234
ord6369
ord5279
ord5064
ord5248
ord2444
ord6209
ord5990
ord4163
ord2860
ord6442
ord3797
ord3138
ord3874
ord882
ord879
ord3495
ord1133
ord2864
ord1266
ord4083
ord1841
ord2582
ord4402
ord3370
ord3640
ord4589
ord4588
ord4899
ord4370
ord4892
ord4533
ord5076
ord4340
ord4347
ord4889
ord4531
ord4545
ord4543
ord4526
ord4529
ord4524
ord4963
ord4960
ord4108
ord6054
ord5240
ord5281
ord3748
ord1725
ord5260
ord2091
ord4432
ord364
ord784
ord693
ord4241
ord3996
ord4720
ord5037
ord6270
ord6605
ord1928
ord6230
ord6148
ord2568
ord6268
ord6271
ord3225
ord3257
ord3912
ord2544
ord2543
ord2511
ord978
ord1731
ord5851
ord2883
ord2398
ord2418
ord6224
ord6226
ord2429
ord2250
ord4732
ord4541
ord5477
ord2259
ord4836
ord4440
ord527
ord794
ord4264
ord3481
ord6232
ord5910
ord6120
ord5038
ord1842
ord5103
ord3350
ord975
ord4151
ord5252
ord366
ord4242
ord2252
ord4467
ord5282
ord2092
ord6007
ord3998
ord6197
ord6379
ord5861
ord6143
ord6883
ord3447
ord3196
ord936
ord2813
ord323
ord640
ord2405
ord2645
ord1779
ord1640
ord5951
ord3095
ord4055
ord6650
ord6591
ord6807
ord6857
ord6823
ord6855
ord6832
ord6859
ord6867
ord6847
ord6839
ord6846
ord6858
ord6816
ord6815
ord6812
ord6845
ord6856
ord6808
ord6835
ord6614
ord6691
ord6478
ord6597
ord6800
ord6822
ord6796
ord6514
ord6814
ord6699
ord1572
ord3005
ord1825
ord4238
ord857
ord940
ord4696
ord3058
ord3065
ord6336
ord2510
ord2542
ord5243
ord5740
ord1746
ord5577
ord3172
ord5653
ord4953
ord4858
ord2399
ord4387
ord3454
ord3198
ord6080
ord6175
ord4623
ord4426
ord652
ord338
ord6877
ord6803
ord4420
ord4823
ord3499
ord2515
ord355
ord3810
ord4275
ord5053
ord3571
ord5785
ord613
ord686
ord2096
ord384
ord2754
ord5875
ord5873
ord289
ord2919
ord5130
ord4486
ord2554
ord5731
ord3922
ord1089
ord5199
ord2396
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4274
ord6756
ord2629
ord4695
ord5939
ord5197
ord2003
ord5730
ord3948
ord2185
ord2184
ord4214
ord3107
ord5616
ord988
ord3444
ord3193
ord4162
ord6451
ord3402
ord986
ord411
ord2826
ord5214
ord3579
ord6117
ord2621
ord1134
ord1205
ord709
ord617
ord296
ord2725
ord290
ord614
ord4616
ord3606
ord3072
ord6329
ord1161
ord1126
ord4606
ord2464
ord2867
ord6467
ord1154
ord4287
ord2152
ord1232
ord1153
ord3706
ord755
ord470
ord6458
ord1567
ord1265
ord2233
ord268
ord1945
ord5852
ord5789
ord5787
ord4133
ord4297
ord5788
ord472
ord4023
ord2567
ord3742
ord4200
ord2753
ord5631
ord5593
ord6093
ord4364
ord1709
ord4003
ord2727
ord3626
ord2729
ord4204
ord1979
ord5186
ord665
ord354
ord5583
ord3528
ord6094
ord6615
ord2859
ord1233
ord6930
ord2044
ord2448
ord5834
ord2086
ord2452
ord2453
ord2408
ord1140
ord4243
ord3721
ord5086
ord1710
ord1715
ord3730
ord554
ord807
ord795
ord4700
ord2862
ord2100
ord6905
ord5063
ord2116
ord5884
ord2012
ord6625
ord2921
ord4671
ord4676
ord3869
ord2127
ord2391
ord5255
ord6242
ord6887
ord2494
ord2117
ord4457
ord4724
ord3870
ord2997
ord6195
ord5032
ord2827
ord4981
ord4123
ord4076
ord996
ord4468
ord4153
ord3256
ord1270
ord2088
ord1859
ord3815
ord5991
ord1752
ord3102
ord2531
ord4057
ord5083
ord1819
ord1234
ord3986
ord3100
ord5299
ord5685
ord3274
ord439
ord736
ord4326
ord4324
ord5510
msvcrt
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__CxxFrameHandler
_acmdln
exit
_XcptFilter
_exit
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
??1type_info@@UAE@XZ
mbstowcs
malloc
_itoa
sqrt
log10
_mbsnbcpy
isleadbyte
_mbsrchr
__RTDynamicCast
sprintf
strcpy
strlen
memset
_mbscmp
memcpy
atoi
_purecall
_mbstok
_mbsinc
_mbsnbcmp
_mbschr
qsort
towlower
_CIpow
fclose
fread
_mbsicmp
_CxxThrowException
wcslen
memcmp
wcscmp
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
_chdir
_strdup
free
atol
strtok
strcat
_splitpath
memmove
abs
ceil
_ftol
strtol
_setmbcp
_stricmp
isdigit
strtod
fopen
_controlfp
kernel32
CreateFileW
ReadFile
LocalAlloc
FindResourceA
LoadResource
GetFullPathNameA
GlobalSize
GetProfileStringA
lstrcpynA
GetModuleHandleA
GetDriveTypeA
GetFileAttributesA
FormatMessageA
LocalFree
GetCurrentThreadId
FreeLibrary
CreateMutexA
ReleaseMutex
WaitForSingleObject
CreateProcessA
GlobalDeleteAtom
GlobalAddAtomA
InterlockedIncrement
LoadLibraryA
GetProcAddress
GetWindowsDirectoryA
GetSystemDirectoryA
GetShortPathNameA
SetEnvironmentVariableA
GetEnvironmentVariableA
RemoveDirectoryA
CreateDirectoryA
GetLastError
GetCurrentDirectoryA
CopyFileA
SetCurrentDirectoryA
WinExec
GetTempPathA
GetTempFileNameA
CreateFileA
WriteFile
CloseHandle
DeleteFileA
lstrcpyA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
GetTickCount
InterlockedDecrement
DeleteFileW
GetThreadLocale
GetModuleFileNameA
GetLongPathNameA
MultiByteToWideChar
lstrlenA
MulDiv
lstrlenW
WideCharToMultiByte
GetVersionExA
IsBadWritePtr
GetVersion
WriteProfileStringA
Sleep
lstrcmpA
lstrcmpiA
GetStartupInfoA
user32
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetDlgItemTextA
IntersectRect
LoadBitmapA
DrawEdge
SystemParametersInfoA
CheckMenuItem
ReleaseDC
DispatchMessageA
GetCapture
ReleaseCapture
SetCapture
PtInRect
InflateRect
DrawFrameControl
SetRectEmpty
GetCursorPos
EqualRect
IsRectEmpty
GetClassLongA
LoadCursorA
SetWindowLongA
CopyRect
GetWindowLongA
RegisterWindowMessageA
RedrawWindow
PostMessageA
GetFocus
SetForegroundWindow
GetMenuStringA
LoadImageA
BringWindowToTop
PeekMessageA
GetDlgItem
EnumChildWindows
InsertMenuA
ModifyMenuA
EnableMenuItem
GetKeyState
KillTimer
GetParent
SetTimer
ClientToScreen
ScreenToClient
IsWindow
GetClassNameA
GetSystemMetrics
GetMenuItemCount
CreatePopupMenu
GetAsyncKeyState
SetRect
UpdateWindow
MessageBeep
LoadIconA
GetClientRect
IsWindowVisible
GetSysColor
MessageBoxA
RegisterClipboardFormatA
LoadMenuA
GetSubMenu
RemoveMenu
AppendMenuA
OffsetRect
SendMessageA
InvalidateRect
GetWindowRect
EnableWindow
CreateMenu
GetMenuState
SetWindowPos
SetFocus
DeleteMenu
GetMenuItemID
wsprintfA
GetMenuItemInfoA
GetActiveWindow
DestroyIcon
GetWindowDC
WindowFromPoint
DrawMenuBar
GetMenu
SetMenu
SetWindowsHookExA
IsMenu
UnhookWindowsHookEx
CallWindowProcA
CallNextHookEx
GetMessagePos
GetDesktopWindow
WaitMessage
EndDeferWindowPos
BeginDeferWindowPos
GetMessageA
IsWindowEnabled
DeferWindowPos
TranslateMessage
MsgWaitForMultipleObjects
GetWindowThreadProcessId
IsChild
SetMenuDefaultItem
DrawStateA
GetMenuItemRect
DrawTextA
FillRect
GetMenuDefaultItem
UnionRect
GetCursor
SetCursor
DrawFocusRect
GetQueueStatus
LoadAcceleratorsA
TranslateAcceleratorA
ValidateRect
GetUpdateRect
DrawIconEx
GetKeyboardState
FrameRect
GetWindow
GetDCEx
GetSystemMenu
SetParent
TranslateMDISysAccel
GetTopWindow
RegisterClassA
GetClassInfoA
DestroyMenu
LockWindowUpdate
SetMenuItemInfoA
InsertMenuItemA
MenuItemFromPoint
SendMessageTimeoutA
MoveWindow
ShowWindow
SetActiveWindow
GetClipboardData
ScrollDC
GetWindowPlacement
IsIconic
ChildWindowFromPointEx
SetScrollPos
SetScrollRange
DestroyCursor
GetDlgCtrlID
IsClipboardFormatAvailable
GetWindowTextA
EnumWindows
LoadStringA
GetDC
gdi32
GetStockObject
CreatePalette
RealizePalette
StretchDIBits
CreatePen
GetPixel
GetTextColor
GetBkMode
CreateRectRgn
RectVisible
StretchBlt
SetTextColor
SetBkColor
ExtTextOutA
SelectObject
GetTextMetricsA
Polygon
CreatePolygonRgn
CreateRectRgnIndirect
CombineRgn
GetCurrentObject
FillRgn
CreateCompatibleBitmap
GetBkColor
DeleteObject
CreateCompatibleDC
BitBlt
GetDeviceCaps
CreateDCA
CreateSolidBrush
GetObjectA
CreateFontIndirectA
GetCharWidthA
CreateFontA
Rectangle
SetPixelV
LineTo
MoveToEx
SetPixel
CreateBitmap
CreatePatternBrush
CreateDIBitmap
GetTextExtentPoint32A
GetMapMode
DPtoLP
ExtFloodFill
UnrealizeObject
GetDCOrgEx
GetClipBox
GetTextExtentPointA
EnumFontFamiliesExA
comdlg32
PrintDlgA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegQueryValueExA
RegOpenKeyA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
shell32
SHFileOperationA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
FindExecutableA
ShellExecuteA
ShellExecuteExA
comctl32
ImageList_LoadImageA
ImageList_Create
InitCommonControlsEx
ImageList_GetImageInfo
ImageList_Destroy
ImageList_GetIcon
ImageList_AddMasked
ImageList_Draw
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_GetImageCount
ord6
ord8
ImageList_Remove
ImageList_DragShowNolock
ImageList_SetOverlayImage
ImageList_DragMove
ImageList_DragEnter
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragLeave
ImageList_Add
ole32
CoCreateGuid
CoInitialize
CoUninitialize
CLSIDFromProgID
OleRun
CLSIDFromString
StringFromCLSID
CoCreateInstance
StringFromGUID2
olepro32
ord252
ord254
oleaut32
CreateErrorInfo
VariantChangeType
SetErrorInfo
VariantCopy
VarBstrFromDate
SafeArrayCreateEx
SafeArrayAccessData
SafeArrayDestroy
SafeArrayUnaccessData
SysAllocString
SysFreeString
SysAllocStringLen
SysStringLen
VariantClear
VariantInit
GetErrorInfo
msvcp60
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@D@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??_7out_of_range@std@@6B@
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV01@@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??_7runtime_error@std@@6B@
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??1runtime_error@std@@UAE@XZ
??0runtime_error@std@@QAE@ABV01@@Z
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueW
shlwapi
StrCmpW
PathAddBackslashA
PathFindFileNameA
SHDeleteKeyA
PathAppendA
Exports
Exports
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 300KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ