??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
_QueryPluginInterface@8
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5ffd51d1c0f4278b57d1bf9c95181652fbe85ff06f2b047625e019a65a21f441.exe
Resource
win7-20231023-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
5ffd51d1c0f4278b57d1bf9c95181652fbe85ff06f2b047625e019a65a21f441.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
5ffd51d1c0f4278b57d1bf9c95181652fbe85ff06f2b047625e019a65a21f441
-
Size
10.9MB
-
MD5
ee517d208d0980d1a79ce6244ee31357
-
SHA1
8164ff35ed1c43d8d9a6ac48e87d9e12fe65263d
-
SHA256
5ffd51d1c0f4278b57d1bf9c95181652fbe85ff06f2b047625e019a65a21f441
-
SHA512
efb932f7a64de99e4120d3edb25a4e04b1d48b5dbb447b2ae9a7207f0f2afc86b7c7f04606c97bcd687482f202615f4adde24f052ee2b04274bdaa1358f814fe
-
SSDEEP
98304:GdNOqknvsGmVuCYGs8jFHWxUfoJZY1IQlQf9EPR0aO:MyEHs8hHmllf9KO
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5ffd51d1c0f4278b57d1bf9c95181652fbe85ff06f2b047625e019a65a21f441
Files
-
5ffd51d1c0f4278b57d1bf9c95181652fbe85ff06f2b047625e019a65a21f441.exe windows:5 windows x86 arch:x86
afaa73bf38b4038944506c56eb690be4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
RaiseException
HeapSize
HeapReAlloc
HeapDestroy
InitializeCriticalSectionAndSpinCount
CancelIo
ConnectNamedPipe
GetOverlappedResult
LocalFree
GetCurrentProcess
DisconnectNamedPipe
ReleaseSemaphore
CreateNamedPipeW
CreateSemaphoreW
OutputDebugStringW
CreateToolhelp32Snapshot
Process32First
FindResourceW
LoadResource
LockResource
SizeofResource
FindResourceExW
OpenProcess
SetLastError
TerminateProcess
CloseHandle
Process32Next
GetCurrentProcessId
GetCommandLineW
CreateProcessW
GetPrivateProfileIntW
GetTempPathW
MultiByteToWideChar
OutputDebugStringA
GetModuleHandleW
GetProcAddress
GetModuleHandleA
GetModuleFileNameW
CreateDirectoryW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
WritePrivateProfileStringW
FlushConsoleInputBuffer
GlobalMemoryStatus
GetVersion
ExpandEnvironmentStringsA
GetStdHandle
GetFileType
PeekNamedPipe
VerSetConditionMask
VerifyVersionInfoA
SleepEx
LoadLibraryA
LCMapStringA
GetStringTypeExA
GetUserDefaultLCID
lstrlenA
ResumeThread
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
IsProcessorFeaturePresent
CopyFileW
UnhandledExceptionFilter
HeapSetInformation
InterlockedCompareExchange
DecodePointer
EncodePointer
FormatMessageA
AreFileApisANSI
LoadLibraryW
GetCurrentDirectoryW
DeviceIoControl
RemoveDirectoryW
CreateEventW
FlushFileBuffers
OpenFileMappingW
OpenMutexW
CreateMutexW
InterlockedIncrement
GetExitCodeProcess
FreeLibrary
ReadDirectoryChangesW
OpenFileMappingA
VirtualAllocEx
ReadProcessMemory
EnterCriticalSection
DuplicateHandle
SearchPathW
WaitForMultipleObjects
OpenThread
SuspendThread
Thread32First
Thread32Next
SetUnhandledExceptionFilter
WriteProcessMemory
SetErrorMode
VirtualQuery
GetLongPathNameW
GetFileSizeEx
InterlockedExchange
CreateFileMappingA
MapViewOfFileEx
CreateFileA
GetTempPathA
GetTempFileNameA
SetFilePointer
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
MoveFileA
SetWaitableTimer
CreateWaitableTimerA
HeapAlloc
GetSystemTimeAsFileTime
GetProcessHeap
HeapFree
TerminateThread
CreateThread
ResetEvent
CopyFileA
DeleteFileA
GetCurrentThread
SetThreadAffinityMask
GetModuleFileNameA
GetFileSize
ReadFile
CreateFileW
WriteFile
SetEndOfFile
WideCharToMultiByte
GetSystemInfo
ReleaseMutex
CreateMutexA
WaitForSingleObject
OpenEventA
QueryPerformanceFrequency
QueryPerformanceCounter
SwitchToThread
GetNativeSystemInfo
GetSystemTime
SystemTimeToFileTime
FindClose
FindNextFileW
ExpandEnvironmentStringsW
Process32FirstW
Process32NextW
Sleep
GetVersionExA
GlobalMemoryStatusEx
FindFirstFileW
GetDriveTypeW
InterlockedDecrement
GetLogicalDriveStringsA
GetDriveTypeA
GetDiskFreeSpaceExA
CreateEventA
SetEvent
GetLocalTime
GetCurrentThreadId
SetCurrentDirectoryW
GetCommandLineA
GetLastError
MoveFileExW
IsDebuggerPresent
GetTickCount
user32
GetUserObjectInformationW
GetProcessWindowStation
SetCursor
ClipCursor
MessageBoxA
EnumDisplayDevicesA
DispatchMessageA
TranslateMessage
PeekMessageA
SetFocus
SendMessageA
IsWindow
GetParent
GetClassNameA
MsgWaitForMultipleObjects
wsprintfA
DestroyWindow
CreateWindowExW
SetParent
ShowWindow
IsWindowVisible
FindWindowA
FlashWindow
SystemParametersInfoA
PostMessageA
RegisterClassExA
LoadCursorA
UpdateWindow
CreateWindowExA
DefWindowProcA
PostQuitMessage
LoadStringA
wsprintfW
shell32
ShellExecuteA
SHCreateDirectoryExW
SHGetFolderPathW
SHGetDesktopFolder
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
CommandLineToArgvW
ole32
CoTaskMemFree
CoSetProxyBlanket
CoLoadLibrary
CoCreateInstance
CoInitializeSecurity
StringFromCLSID
IIDFromString
OleInitialize
oleaut32
SysAllocString
VariantClear
SysAllocStringLen
SysFreeString
version
VerQueryValueA
GetFileVersionInfoW
GetFileVersionInfoSizeW
shlwapi
StrStrIW
PathFindExtensionA
PathRemoveFileSpecW
PathFileExistsW
PathFindExtensionW
StrStrIA
lua51
lua_iscfunction
lua_call
lua_isnumber
lua_replace
lua_typename
lua_isstring
lua_concat
lua_newuserdata
lua_remove
lua_pushnumber
lua_gettable
lua_toboolean
lua_tonumber
lua_getfenv
lua_error
lua_setfenv
lua_isuserdata
lua_gc
lua_pushcclosure
lua_setfield
luaL_error
lua_rawget
lua_touserdata
lua_getfield
lua_pushstring
lua_pcall
lua_tolstring
lua_settop
lua_gettop
lua_pushlightuserdata
lua_rawequal
lua_getmetatable
lua_settable
lua_pushvalue
luaL_newmetatable
lua_insert
lua_next
lua_pushnil
lua_pushboolean
lua_rawset
lua_createtable
lua_type
lua_setmetatable
lua_tocfunction
lua_pushlstring
msvcp100
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?_Xout_of_range@std@@YAXPBD@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_BADOFF@std@@3_JB
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Xlength_error@std@@YAXPBD@Z
??1_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?width@ios_base@std@@QAE_J_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?good@ios_base@std@@QBE_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?max@?$numeric_limits@I@std@@SAIXZ
??1_Lockit@std@@QAE@XZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??Bid@locale@std@@QAEIXZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?widen@?$ctype@D@std@@QBEDD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?max@?$numeric_limits@_J@std@@SA_JXZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?narrow@?$ctype@D@std@@QBEDDD@Z
?is@?$ctype@D@std@@QBE_NFD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?exceptions@ios_base@std@@QAEXH@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?flags@ios_base@std@@QAEHH@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
?precision@ios_base@std@@QAE_J_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?bad@ios_base@std@@QBE_NXZ
?fail@ios_base@std@@QBE_NXZ
??Bios_base@std@@QBEPAXXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?ws@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@@Z
?eof@ios_base@std@@QBE_NXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_Xinvalid_argument@std@@YAXPBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?unsetf@ios_base@std@@QAEXH@Z
??7ios_base@std@@QBE_NXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?classic@locale@std@@SAABV12@XZ
?c_str@?$_Yarn@D@std@@QBEPBDXZ
?id@?$numpunct@_W@std@@2V0locale@2@A
??1facet@locale@std@@UAE@XZ
??1_Locinfo@std@@QAE@XZ
??0facet@locale@std@@IAE@I@Z
??0_Locinfo@std@@QAE@PBD@Z
_Mbrtowc
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?max@?$numeric_limits@H@std@@SAHXZ
?min@?$numeric_limits@H@std@@SAHXZ
?id@?$numpunct@D@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??0_Container_base12@std@@QAE@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?min@?$numeric_limits@K@std@@SAKXZ
?max@?$numeric_limits@K@std@@SAKXZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?id@?$codecvt@_WDH@std@@2V0locale@2@A
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPAPA_W0PAH001@Z
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PB_W_J@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE_W_W@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?narrow@?$ctype@_W@std@@QBED_WD@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
?setf@ios_base@std@@QAEHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
??0?$codecvt@_WDH@std@@QAE@I@Z
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?do_length@?$codecvt@_WDH@std@@MBEHABHPBD1I@Z
??1?$codecvt@_WDH@std@@MAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
?_Id_cnt@id@locale@std@@0HA
??0_Locimp@locale@std@@AAE@ABV012@@Z
??1_Locimp@locale@std@@MAE@XZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?min@?$numeric_limits@_J@std@@SA_JXZ
?min@?$numeric_limits@I@std@@SAIXZ
?_Xfunc@tr1@std@@YAXXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
msvcr100
_open
_stat64i32
__sys_nerr
getenv
__CxxFrameHandler3
_lseeki64
_fstat64
_getpid
isalnum
fgets
fputs
qsort
isprint
_strtoi64
isalpha
_stat64
_CIsqrt
_snprintf_s
strspn
sprintf
feof
realloc
isxdigit
rewind
strtol
strnlen
_beginthreadex
isgraph
wcsstr
raise
_strnicmp
_setmode
_fileno
signal
_getch
_resetstkoflw
labs
wcscspn
wcsspn
wmemcpy_s
memmove_s
_recalloc
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
_onexit
_lock
__dllonexit
_unlock
_vsnprintf
calloc
strerror
_stricmp
strpbrk
__iob_func
sscanf
strchr
modf
abort
_ftelli64
ftell
strrchr
ferror
fopen_s
_wrmdir
_wstat64i32
_wgetcwd
_wmkdir
_wremove
_wcsnicmp
strncat
_wcsupr_s
atof
fgetwc
ungetwc
fputwc
wcstok
_localtime32_s
_errno
strncmp
strstr
_time32
remove
strtoul
vswprintf_s
srand
_itoa
atoi
wcstoul
_strdup
_snwprintf
memset
_gmtime64
fseek
fprintf
_mbsrchr
_wsplitpath_s
isupper
tolower
clock
rand
fopen
isspace
_wfopen
fread
strncat_s
toupper
_localtime64
_time64
_localtime64_s
wcsftime
wcscpy
_wcsicmp
_wtoi64
strncpy_s
??0exception@std@@QAE@ABQBDH@Z
_snprintf
swprintf_s
malloc
printf
wcscat_s
wcsncpy_s
wcscpy_s
_vsnwprintf_s
wprintf
wcscmp
_snwprintf_s
wcschr
_mbschr
wcsrchr
wcsncpy
free
_waccess
strcmp
vsprintf_s
strncpy
??8type_info@@QBE_NABV0@@Z
__RTDynamicCast
??0exception@std@@QAE@ABQBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
?what@exception@std@@UBEPBDXZ
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
fclose
memchr
memcmp
memmove
fflush
setvbuf
fsetpos
_fseeki64
fgetpos
fgetc
ungetc
fputc
fwrite
_unlock_file
_lock_file
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
_CxxThrowException
??_V@YAXPAX@Z
wcslen
isdigit
memcpy
strcpy_s
sprintf_s
memcpy_s
strlen
??3@YAXPAX@Z
_purecall
islower
_read
_write
_close
_mbsnbcpy_s
winmm
timeGetTime
ws2_32
shutdown
recvfrom
sendto
getpeername
getsockopt
bind
gethostname
getaddrinfo
freeaddrinfo
listen
getsockname
setsockopt
select
htonl
ntohl
connect
htons
closesocket
WSAGetLastError
gethostbyname
socket
ioctlsocket
send
recv
WSAIoctl
WSASetLastError
WSAStartup
WSACleanup
__WSAFDIsSet
ntohs
accept
inet_addr
inet_ntoa
psapi
GetModuleFileNameExW
advapi32
RegisterEventSourceA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
ReportEventA
DeregisterEventSource
SetSecurityDescriptorDacl
RegQueryInfoKeyA
RegSetValueExA
RegDeleteKeyA
RegEnumKeyExA
InitializeSecurityDescriptor
RegSetValueExW
RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExW
gdi32
GetObjectA
CreateDIBSection
SelectObject
SetDIBColorTable
DeleteDC
CreateCompatibleDC
DeleteObject
wldap32
ord143
ord211
ord60
ord46
ord41
ord27
ord301
ord33
ord26
ord22
ord50
ord79
ord35
ord32
ord200
ord30
normaliz
IdnToAscii
iphlpapi
GetAdaptersInfo
comdlg32
GetOpenFileNameW
gdiplus
GdipGetImageEncodersSize
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
GdipGetImagePaletteSize
GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePixelFormat
GdipGetImagePalette
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipDrawImageI
GdipDeleteGraphics
GdiplusStartup
GdiplusShutdown
GdipGetImageEncoders
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage
Exports
Exports
Sections
.text Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 959KB - Virtual size: 958KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 128KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 259KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE