Static task
static1
Behavioral task
behavioral1
Sample
2ef8b79cb7d81125bceaf3e2e68bdc971dcab6a0f46009fdc6626158ca131207.exe
Resource
win7-20231023-en
windows7-x64
Behavioral task
behavioral2
Sample
2ef8b79cb7d81125bceaf3e2e68bdc971dcab6a0f46009fdc6626158ca131207.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
General
-
Target
2ef8b79cb7d81125bceaf3e2e68bdc971dcab6a0f46009fdc6626158ca131207
-
Size
902KB
-
MD5
1c06c666990740bcbe10e4310739c6f2
-
SHA1
01183984f1d3149e3012fa2506206f6682492461
-
SHA256
2ef8b79cb7d81125bceaf3e2e68bdc971dcab6a0f46009fdc6626158ca131207
-
SHA512
78116167c68b9978f8694a14f4eee89df95335331633ccd11b14bbd2b698f941e22b8f270f24df3598affd37d03d5fff3290d53d7224769f1e3b496f19325e4a
-
SSDEEP
24576:KZcgjKsJNQ9TGWRmldDZlOCxNFsTLldDZlOCxNFsTA:KZcoKsJNaTGzDTOiNFKXDTOiNFKA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ef8b79cb7d81125bceaf3e2e68bdc971dcab6a0f46009fdc6626158ca131207
Files
-
2ef8b79cb7d81125bceaf3e2e68bdc971dcab6a0f46009fdc6626158ca131207.exe windows:5 windows x86 arch:x86
0321c519eed7b1ed9d41a8309db89df0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
imm32
ImmGetContext
ImmGetConversionStatus
ImmReleaseContext
tbbmalloc_proxy
__TBB_malloc_proxy
mfc90
ord4333
ord5663
ord6001
ord3110
ord4890
ord3659
ord793
ord2447
ord5646
ord4981
ord736
ord300
ord2481
ord4506
ord4392
ord817
ord2057
ord2038
ord6613
ord3213
ord305
ord1611
ord3783
ord4881
ord3992
ord4820
ord1664
ord4337
ord2935
ord531
ord3408
ord1182
ord1871
ord2141
ord411
ord2210
ord4606
ord3718
ord4812
ord4527
ord4396
ord5206
ord2693
ord4115
ord2321
ord6048
ord2896
ord6253
ord2154
ord6616
ord3387
ord4551
ord6291
ord4704
ord1868
ord6516
ord6783
ord4409
ord4434
ord4029
ord4875
ord4878
ord4882
ord376
ord617
ord5658
ord5814
ord4427
ord2352
ord6756
ord5552
ord341
ord1619
ord994
ord6487
ord457
ord1186
ord513
ord589
ord1932
ord2046
ord1258
ord1254
ord600
ord4507
ord813
ord296
ord5963
ord306
ord655
ord2091
ord5380
ord5252
ord5254
ord4897
ord4851
ord4848
ord5196
ord4794
ord5403
ord4576
ord4585
ord5005
ord5191
ord4793
ord4808
ord4806
ord4788
ord4791
ord4786
ord5282
ord5279
ord4364
ord2327
ord1276
ord800
ord3987
ord611
ord6557
ord5584
ord3670
ord1443
ord4679
ord6109
ord393
ord4616
ord5151
ord3228
ord3489
ord5960
ord2372
ord1387
ord2069
ord2592
ord3528
ord1252
ord3409
ord6427
ord5597
ord3797
ord5246
ord3730
ord6170
ord5650
ord6554
ord4475
ord2523
ord320
ord4117
ord511
ord2076
ord2588
ord1265
ord4929
ord337
ord4263
ord613
ord3882
ord6711
ord4445
ord3999
ord5350
ord6810
ord3413
ord5433
ord1700
ord5436
ord3225
ord4416
ord2070
ord5640
ord5601
ord2138
ord450
ord979
ord3841
ord5659
ord5274
ord4116
ord265
ord404
ord5520
ord6793
ord1555
ord266
ord663
ord5159
ord4481
ord945
ord941
ord3178
ord6148
ord3726
ord4936
ord6127
ord2094
ord1603
ord6733
ord5275
ord5160
ord5126
ord3019
ord5265
ord2129
ord1811
ord4913
ord5228
ord5313
ord5336
ord4776
ord4742
ord4739
ord5337
ord2913
ord4869
ord5311
ord4659
ord5418
ord5815
ord4896
ord6039
ord4423
ord2776
ord3290
ord5343
ord3405
ord6749
ord5897
ord1011
ord3326
ord3715
ord3097
ord4980
ord2856
ord2863
ord6742
ord2204
ord2239
ord5590
ord6029
ord1467
ord5844
ord3004
ord5929
ord4666
ord5125
ord4627
ord3331
ord3030
ord6420
ord6533
ord3109
ord3132
ord4891
ord4676
ord510
ord3881
ord4000
ord6406
ord4113
ord4656
ord6584
ord6555
ord6811
ord3414
ord4311
ord4706
ord6318
ord2340
ord2341
ord2189
ord4112
ord1734
ord2080
ord5434
ord5437
ord4717
ord6360
ord6362
ord5786
ord2647
ord4417
ord2071
ord5641
ord4684
ord5602
ord4673
ord451
ord576
ord778
ord3842
ord670
ord5332
ord5276
ord3282
ord5300
ord5241
ord5251
ord4998
ord4969
ord5155
ord5440
ord5223
ord4921
ord5290
ord4782
ord5303
ord4800
ord5402
ord4287
ord3133
ord3227
ord4894
ord310
ord820
ord741
ord6178
ord6401
ord4006
ord4411
ord798
ord4709
ord739
ord5260
ord3101
ord2134
ord1414
ord5317
ord5931
ord4718
ord4970
ord5339
ord2445
ord2079
ord2855
ord5432
ord5435
ord4716
ord4539
ord3224
ord5323
ord3221
ord6359
ord3222
ord6361
ord978
ord5790
ord3278
ord2646
ord2645
ord4418
ord1684
ord4330
ord5581
ord5642
ord2369
ord1384
ord4683
ord6355
ord3217
ord5598
ord4671
ord494
ord585
ord503
ord732
ord787
ord5657
ord3209
ord2087
ord4199
ord5813
ord6721
ord5533
ord1046
ord4165
ord6018
ord2206
ord2251
ord4733
ord6781
ord4009
ord4159
ord1137
ord3534
ord601
ord1183
ord910
ord2539
ord316
ord2106
ord3612
ord3479
ord3477
ord1358
ord3873
ord5615
ord4617
ord5152
ord5309
ord2208
ord1810
ord1809
ord3344
ord6388
ord1496
ord4650
ord5636
ord4668
ord3506
ord374
ord639
ord2587
ord367
ord6078
ord636
ord4801
ord4030
ord1490
ord4993
ord6615
ord4431
ord2691
ord5835
ord6257
ord1108
ord1668
ord3346
ord6391
ord1755
ord1752
ord4331
ord1497
ord4638
ord5585
ord2074
ord5497
ord6780
ord4589
ord5647
ord3732
ord5139
ord4688
ord1729
ord6446
ord5668
ord5666
ord958
ord963
ord967
ord965
ord969
ord2610
ord2630
ord2614
ord2620
ord2618
ord2616
ord2633
ord2628
ord2612
ord2635
ord2623
ord2605
ord2607
ord2625
ord2375
ord2368
ord1644
ord6784
ord4160
ord6782
ord3671
ord5389
ord6356
ord3218
ord1446
ord5608
ord2139
ord1792
ord1791
ord1728
ord740
ord6559
ord5633
ord2766
ord2978
ord3107
ord4714
ord2961
ord3135
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4895
msvcr90
_difftime64
tmpnam
getenv
clock
fputws
strtoul
feof
ungetc
freopen
getc
strcoll
strtod
strncat
strcspn
strcat
iswctype
localeconv
setvbuf
_fdopen
_open_osfhandle
tmpfile
fscanf
clearerr
fflush
abs
_setmbcp
strpbrk
memchr
islower
ispunct
isdigit
iscntrl
isxdigit
isupper
_HUGE
ldexp
frexp
exp
log10
log
pow
sqrt
modf
fmod
ceil
atan2
atan
acos
asin
tanh
tan
cosh
cos
sinh
sin
fabs
fputs
fgets
longjmp
_setjmp3
__iob_func
fprintf
strncpy
realloc
strerror
_gmtime64
isprint
_controlfp_s
_invoke_watson
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__CxxFrameHandler3
_getdiskfree
_getdrive
sscanf
_splitpath
memset
_mbschr
_mbscmp
_time64
strftime
_localtime64_s
setlocale
_purecall
_localtime64
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
fclose
_mktime64
_itow_s
ftell
fread
fwrite
fseek
memcpy
strlen
_stricmp
_vsnprintf
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
strcpy
??0exception@std@@QAE@ABV01@@Z
abort
??0bad_cast@std@@QAE@PBD@Z
_CxxThrowException
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
memmove_s
??8type_info@@QBE_NABV0@@Z
_splitpath_s
_fsopen
strcmp
_errno
sprintf
strcat_s
memcmp
??0exception@std@@QAE@ABQBDH@Z
srand
rand
strrchr
malloc
free
strchr
isalnum
_except_handler3
towlower
towupper
isspace
strstr
rename
remove
floor
fopen
ferror
tolower
toupper
isalpha
?terminate@@YAXXZ
_unlock
__dllonexit
_strlwr
kernel32
CreateFileA
CreateProcessA
LocalFree
GetCurrentThreadId
GetCurrentProcess
HeapFree
GetProcessHeap
FormatMessageA
FlushFileBuffers
CreateEventA
GetExitCodeProcess
CreatePipe
TlsSetValue
OpenEventA
TlsGetValue
TlsFree
TlsAlloc
WaitForSingleObject
SetEvent
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
GetStdHandle
GetTickCount
GetCurrentProcessId
QueryPerformanceCounter
ResetEvent
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
WriteFile
CloseHandle
MoveFileW
GetFileAttributesW
GetLastError
MultiByteToWideChar
lstrlenA
MulDiv
lstrcpynA
FreeLibrary
GlobalMemoryStatus
user32
MessageBoxA
GetDC
ReleaseDC
CreateWindowExA
SetWindowTextA
SetWindowPos
DestroyWindow
SetWindowLongA
GetParent
GetFocus
KillTimer
SetTimer
UpdateWindow
GetWindowRect
BringWindowToTop
InflateRect
IsRectEmpty
IsWindowVisible
SendMessageA
IsZoomed
wsprintfA
LoadIconA
EnableWindow
GetClientRect
DrawIcon
FillRect
SetRect
GetSystemMetrics
gdi32
CreateCompatibleBitmap
GetStockObject
CreateCompatibleDC
GetDeviceCaps
CreateFontIndirectA
GetObjectA
GetTextMetricsA
StretchBlt
Rectangle
shell32
DragAcceptFiles
oleaut32
VariantClear
msvcp90
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??7ios_base@std@@QBE_NXZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?eof@ios_base@std@@QBE_NXZ
?bad@ios_base@std@@QBE_NXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$allocator@_W@std@@QAE@ABV01@@Z
??0?$allocator@D@std@@QAE@ABV01@@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?precision@ios_base@std@@QAEHH@Z
?flags@ios_base@std@@QAEHH@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?exceptions@ios_base@std@@QAEXH@Z
??4locale@std@@QAEAAV01@ABV01@@Z
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
?widen@?$ctype@D@std@@QBEDD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?length@?$char_traits@D@std@@SAIPBD@Z
?width@ios_base@std@@QBEHXZ
?flags@ios_base@std@@QBEHXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?width@ios_base@std@@QAEHH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?good@ios_base@std@@QBE_NXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0locale@std@@QAE@XZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?narrow@?$ctype@D@std@@QBEDDD@Z
?is@?$ctype@D@std@@QBE_NFD@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z
??0locale@std@@QAE@ABV01@@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?allocate@?$allocator@D@std@@QAEPADIPBX@Z
?copy@?$char_traits@D@std@@SAPADPADPBDI@Z
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?to_char_type@?$char_traits@D@std@@SADABH@Z
?eq@?$char_traits@D@std@@SA_NABD0@Z
?not_eof@?$char_traits@D@std@@SAHABH@Z
?eof@?$char_traits@D@std@@SAHXZ
?to_int_type@?$char_traits@D@std@@SAHABD@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?_Xsgetn_s@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADIH@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$allocator@D@std@@QAE@XZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?deallocate@?$allocator@D@std@@QAEXPADI@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?max_size@?$allocator@_W@std@@QBEIXZ
?max_size@?$allocator@D@std@@QBEIXZ
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@D@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Incref@facet@locale@std@@QAEXXZ
??1_Lockit@std@@QAE@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??1locale@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??0?$_String_val@_WV?$allocator@_W@std@@@std@@IAE@V?$allocator@_W@1@@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??0?$allocator@_W@std@@QAE@XZ
Sections
.text Size: 188KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 601KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ