AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a39111e7ddd13c8d7dd8c8b87214adcdcd21b04bba1b2bff6b23c26c69543746.dll
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
a39111e7ddd13c8d7dd8c8b87214adcdcd21b04bba1b2bff6b23c26c69543746.dll
Resource
win10v2004-20231215-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
a39111e7ddd13c8d7dd8c8b87214adcdcd21b04bba1b2bff6b23c26c69543746
-
Size
1.1MB
-
MD5
213105a435309e777b945bb944ca777d
-
SHA1
fe4a6876105737405c82cd04ff6aa8853d4d727f
-
SHA256
a39111e7ddd13c8d7dd8c8b87214adcdcd21b04bba1b2bff6b23c26c69543746
-
SHA512
815c36268a6dc8692c363173852df9f4df069e4ba87ff69168e54e7f01fdea850a11ea4582284eaace6258bf54c4e0c25e2d14122d08f818cc6bf812084ed0ee
-
SSDEEP
24576:8ubD5Qd1nDUJwC3QxwNaEL/cAO3qFTCufPriZ8dM73K0O+pew1G4:8kybx9W/cAO33uHru81+e4
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a39111e7ddd13c8d7dd8c8b87214adcdcd21b04bba1b2bff6b23c26c69543746
Files
-
a39111e7ddd13c8d7dd8c8b87214adcdcd21b04bba1b2bff6b23c26c69543746.dll windows:6 windows x64 arch:x64
4b6b194039bf8a86ea64f4be14de5244
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
dwmapi
DwmSetWindowAttribute
libcef
cef_string_utf16_set
cef_string_utf16_clear
cef_v8value_create_bool
cef_v8context_get_entered_context
cef_v8value_create_function
cef_v8value_create_array
cef_v8value_create_object
cef_v8value_create_string
cef_v8value_create_undefined
cef_v8value_create_double
cef_v8value_create_int
cef_string_userfree_utf16_free
cef_string_utf8_clear
cef_string_utf16_to_utf8
cef_string_utf8_to_utf16
cef_v8context_get_current_context
kernel32
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualFree
VirtualQuery
SetLastError
LoadLibraryExA
LoadLibraryExW
GlobalAlloc
LoadLibraryA
GetModuleHandleA
GetLocaleInfoA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ResumeThread
FindFirstFileW
FindNextFileW
FormatMessageA
GetLocaleInfoEx
SuspendThread
GetCurrentThreadId
GetDiskFreeSpaceExW
GetFileAttributesW
GetLogicalDrives
GetVolumeInformationW
WideCharToMultiByte
CreateProcessW
GetThreadContext
GetCurrentProcessId
LocalFree
ReadDirectoryChangesW
GetOverlappedResult
CreateDirectoryW
FindFirstFileExW
GetFileAttributesExW
FindResourceW
LoadResource
SetFileInformationByHandle
AreFileApisANSI
MoveFileExW
GetFileInformationByHandleEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
ResetEvent
CloseHandle
Process32FirstW
LockResource
Process32NextW
MultiByteToWideChar
CreateEventW
CreateToolhelp32Snapshot
CreateFileW
WriteFile
GetCommandLineW
SizeofResource
GetLastError
FreeLibrary
ExitProcess
GetProcAddress
LoadLibraryW
lstrcatW
DisableThreadLibraryCalls
GetSystemDirectoryW
SetEnvironmentVariableW
GetModuleFileNameW
GetCurrentProcess
GetCurrentThread
GetTickCount64
SetUnhandledExceptionFilter
AllocConsole
GetConsoleWindow
WaitForSingleObject
GlobalUnlock
FindClose
GlobalLock
user32
SetWindowTextW
wsprintfA
MessageBoxA
FindWindowExW
DestroyWindow
ReleaseDC
MessageBoxW
wsprintfW
GetSystemMetrics
ShowWindow
SetActiveWindow
MessageBeep
WindowFromPoint
SetForegroundWindow
FillRect
SetRect
SetWindowRgn
SystemParametersInfoA
CreateIconIndirect
LoadIconA
LoadCursorA
GetWindow
GetParent
SetWindowLongA
GetWindowLongA
MapWindowPoints
ClientToScreen
GetCursorPos
SetCursor
AdjustWindowRectEx
GetDC
ValidateRgn
InvalidateRect
GetUpdateRgn
GetForegroundWindow
KillTimer
SetTimer
MsgWaitForMultipleObjects
ReleaseCapture
SetCapture
GetAsyncKeyState
GetKeyState
SetFocus
EmptyClipboard
GetClipboardData
SetClipboardData
ChangeClipboardChain
SetClipboardViewer
GetClipboardOwner
CloseClipboard
OpenClipboard
BringWindowToTop
IsIconic
SetWindowPos
OpenIcon
SetWindowDisplayAffinity
CreateWindowExW
CreateWindowExA
RegisterClassExW
RegisterClassExA
DefWindowProcW
DefWindowProcA
PostMessageA
SendMessageA
PeekMessageW
DispatchMessageW
TranslateMessage
RegisterWindowMessageW
GetKeyboardLayout
DestroyIcon
GetWindowRect
FindWindowW
SetLayeredWindowAttributes
IsWindow
gdi32
Arc
ExtCreatePen
TextOutW
GetTextMetricsA
SetTextColor
GetCharacterPlacementW
GetTextExtentPoint32W
GetGlyphOutlineW
CreateFontA
Polygon
DPtoLP
EqualRgn
SetPixel
SelectPalette
RealizePalette
GetStockObject
CreateSolidBrush
CreatePen
CreatePalette
PolyPolygon
Polyline
CreateDCA
ExtCreateRegion
GdiFlush
LPtoDP
CreatePolygonRgn
CreateDIBSection
PlayEnhMetaFile
GetEnhMetaFileHeader
UpdateColors
SetTextAlign
SetDIBitsToDevice
SetBkMode
SaveDC
RestoreDC
CreateRectRgn
CreateBitmap
CombineRgn
SelectClipRgn
MoveToEx
StretchDIBits
GetRgnBox
Pie
RectInRegion
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
GetDIBits
GetDeviceCaps
DeleteDC
DeleteObject
LineTo
comdlg32
GetOpenFileNameW
advapi32
RegGetValueW
RegQueryValueExW
RegOpenKeyW
RegCloseKey
shell32
SHGetKnownFolderPath
ShellExecuteExW
CommandLineToArgvW
DragQueryFileW
ole32
CoTaskMemFree
ReleaseStgMedium
OleInitialize
OleUninitialize
RegisterDragDrop
DoDragDrop
msvcp140
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?pubseekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?pubseekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEAD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?good@ios_base@std@@QEBA_NXZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??0_Locinfo@std@@QEAA@PEBD@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?widen@?$ctype@_W@std@@QEBA_WD@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??Bios_base@std@@QEBA_NXZ
?do_encoding@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHXZ
?do_max_length@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHXZ
?do_always_noconv@?$codecvt@_WDU_Mbstatet@@@std@@MEBA_NXZ
?do_length@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1_K@Z
?do_unshift@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?do_out@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?do_in@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
_Cnd_signal
_Thrd_hardware_concurrency
?__ExceptionPtrCreate@@YAXPEAX@Z
_Cnd_init_in_situ
_Strxfrm
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
_Wcscoll
_Query_perf_frequency
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Throw_Cpp_error@std@@YAXH@Z
?uncaught_exceptions@std@@YAHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??1_Locinfo@std@@QEAA@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Xbad_alloc@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?id@?$ctype@_W@std@@2V0locale@2@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Winerror_map@std@@YAHH@Z
?_Xbad_function_call@std@@YAXXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Random_device@std@@YAIXZ
_Cnd_destroy_in_situ
?_Xlength_error@std@@YAXPEBD@Z
?id@?$collate@_W@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?_Syserror_map@std@@YAPEBDH@Z
_Mtx_destroy_in_situ
_Wcsxfrm
?__ExceptionPtrDestroy@@YAXPEAX@Z
_Mtx_lock
?__ExceptionPtrCurrentException@@YAXPEAX@Z
_Mtx_init_in_situ
_Strcoll
_Cnd_do_broadcast_at_thread_exit
_Thrd_sleep
_Cnd_wait
_Thrd_id
_Query_perf_counter
_Thrd_detach
_Xtime_get_ticks
_Thrd_join
_Mtx_unlock
_Cnd_broadcast
ws2_32
WSASocketW
listen
getaddrinfo
closesocket
accept
WSACleanup
WSAStartup
getpeername
getsockname
getnameinfo
setsockopt
freeaddrinfo
recv
socket
ntohs
select
send
bind
shutdown
dbghelp
SymFunctionTableAccess64
UnDecorateSymbolNameW
SymGetModuleBase64
StackWalk64
SymGetSymFromAddr64
SymInitialize
SymCleanup
wininet
InternetCloseHandle
InternetOpenW
InternetOpenUrlW
InternetReadFile
shlwapi
StrCmpIW
PathStripPathW
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
comctl32
_TrackMouseEvent
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memmove
memcpy
__std_exception_copy
_purecall
memcmp
memset
__std_exception_destroy
strchr
__std_type_info_hash
__C_specific_handler
_CxxThrowException
memchr
strrchr
__std_terminate
__current_exception
__current_exception_context
__std_type_info_destroy_list
api-ms-win-crt-stdio-l1-1-0
_wfopen_s
fgetc
_wfopen
fclose
fwrite
fflush
__stdio_common_vswprintf
__stdio_common_vsprintf
fgetpos
fgetwc
ungetwc
fputwc
setvbuf
fputc
__stdio_common_vswprintf_s
__stdio_common_vsscanf
__acrt_iob_func
freopen
_get_stream_buffer_pointers
__stdio_common_vfprintf
_fseeki64
fread
fgets
fsetpos
ungetc
_ftelli64
api-ms-win-crt-heap-l1-1-0
realloc
calloc
free
malloc
_callnewh
api-ms-win-crt-math-l1-1-0
ceil
floor
sin
sqrt
acos
_dtest
_dsign
cos
api-ms-win-crt-convert-l1-1-0
atoi
atol
strtoull
strtoll
strtoul
strtod
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_initialize_narrow_environment
_initialize_onexit_table
_errno
_register_onexit_function
_execute_onexit_table
raise
_beginthreadex
_initterm_e
_initterm
_cexit
_configure_narrow_argv
terminate
_crt_atexit
exit
api-ms-win-crt-string-l1-1-0
isalnum
_stricmp
isspace
isdigit
strcpy_s
strncpy
strlen
isxdigit
strncmp
wcscmp
strncpy_s
strcspn
isalpha
strcmp
isupper
toupper
tolower
_strdup
wcslen
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_access_s
_wmkdir
_stat64i32
_waccess
_unlock_file
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
localeconv
api-ms-win-crt-environment-l1-1-0
_wgetenv
getenv
api-ms-win-crt-time-l1-1-0
_mktime64
_utime64
Exports
Exports
Sections
.text Size: 697KB - Virtual size: 697KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 180KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourd Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ