Static task
static1
Behavioral task
behavioral1
Sample
925d6835e0aa743e8a0ef974b530a030acb3fc5a3e34db2ad770852dfd056811.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
925d6835e0aa743e8a0ef974b530a030acb3fc5a3e34db2ad770852dfd056811.exe
Resource
win10v2004-20231222-en
General
-
Target
925d6835e0aa743e8a0ef974b530a030acb3fc5a3e34db2ad770852dfd056811
-
Size
821KB
-
MD5
7d2ff02a7f7ed00f68251ca792005381
-
SHA1
9747bcc281626b75a8e8e39fd7cee4a74c74fdbe
-
SHA256
925d6835e0aa743e8a0ef974b530a030acb3fc5a3e34db2ad770852dfd056811
-
SHA512
2c40633357ee2a2a6b91edb9799f6c58ecacc6fc6f2cd8c0428aa7f66afc46fe1c0f6bec4928182f78dc91e26edbb01fddc1145a891ad5bbf484553c74e84ef9
-
SSDEEP
12288:LgbkL6SbQvevBBCLRblU3UB4zpKfZOfntCI:LgzDXQwfZEnn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 925d6835e0aa743e8a0ef974b530a030acb3fc5a3e34db2ad770852dfd056811
Files
-
925d6835e0aa743e8a0ef974b530a030acb3fc5a3e34db2ad770852dfd056811.exe windows:4 windows x86 arch:x86
188ac49def27306cb7ed5207a79a5584
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
cactus
?setProxyServerPort@CHttpClient@cactus@@QAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setProxyUserName@CHttpClient@cactus@@QAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setProxyPassword@CHttpClient@cactus@@QAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0CHttpClient@cactus@@QAE@XZ
?performGet@CHttpClient@cactus@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?getLastWebResponse@CHttpClient@cactus@@QAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setProxyServerIp@CHttpClient@cactus@@QAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1CHttpClient@cactus@@QAE@XZ
duilib
?SetLimitText@CRichEditUI@DuiLib@@QAEXH@Z
??9CDuiString@DuiLib@@QBE_NPB_W@Z
?SelectItem@CTabLayoutUI@DuiLib@@QAE_NH@Z
?GetCurSel@CTabLayoutUI@DuiLib@@QBEHXZ
?SetValue@CProgressUI@DuiLib@@QAEXH@Z
?ShowWindow@CWindowWnd@DuiLib@@QAEX_N0@Z
?SetDefaultFont@CPaintManagerUI@DuiLib@@QAEXPB_WH_N11@Z
?SetTextPadding@CLabelUI@DuiLib@@QAEXUtagRECT@@@Z
?GetPlugins@CPaintManagerUI@DuiLib@@SAPAVCStdPtrArray@2@XZ
?GetAt@CStdPtrArray@DuiLib@@QBEPAXH@Z
?GetPaintWindow@CPaintManagerUI@DuiLib@@QBEPAUHWND__@@XZ
?IsSelected@COptionUI@DuiLib@@QBE_NXZ
?SetNumberOnly@CEditUI@DuiLib@@QAEX_N@Z
?SetMaxChar@CEditUI@DuiLib@@QAEXI@Z
??BCDuiString@DuiLib@@QBEPB_WXZ
?SetTextColor@CRichEditUI@DuiLib@@QAEXK@Z
?IsEmpty@CDuiString@DuiLib@@QBE_NXZ
?SetTextColor@CLabelUI@DuiLib@@QAEXK@Z
?GetData@CDuiString@DuiLib@@QBEPB_WXZ
??0CDuiString@DuiLib@@QAE@ABV01@@Z
?PostMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z
??1CDuiString@DuiLib@@QAE@XZ
?messageMap@WindowImplBase@DuiLib@@1UDUI_MSGMAP@2@B
??0CDelegateBase@DuiLib@@QAE@ABV01@@Z
?GetObjectW@CDelegateBase@DuiLib@@IAEPAXXZ
??0CDelegateBase@DuiLib@@QAE@PAX0@Z
?ShowModal@CWindowWnd@DuiLib@@QAEIXZ
??8CDuiString@DuiLib@@QBE_NPB_W@Z
?Close@CWindowWnd@DuiLib@@QAEXI@Z
??1CDelegateBase@DuiLib@@UAE@XZ
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
??YCEventSource@DuiLib@@QAEXABVCDelegateBase@1@@Z
?GetSizeBox@CPaintManagerUI@DuiLib@@QAEAAUtagRECT@@XZ
??0CDuiString@DuiLib@@QAE@PB_WH@Z
?Create@CShadowUI@DuiLib@@QAEXPAUHWND__@@PAVCPaintManagerUI@2@@Z
?OnCreate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?GetShadow@CPaintManagerUI@DuiLib@@QAEPAVCShadowUI@2@XZ
?CopyShadow@CShadowUI@DuiLib@@QAE_NPAV12@@Z
??BCWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?ParentProc@CShadowUI@DuiLib@@QAGJPAUHWND__@@IIJ@Z
?HandleMessage@WindowImplBase@DuiLib@@UAEJIIJ@Z
??1CShadowUI@DuiLib@@UAE@XZ
?CreateControl@WindowImplBase@DuiLib@@UAEPAVCControlUI@2@PB_W@Z
?MessageHandler@WindowImplBase@DuiLib@@UAEJIIJAA_N@Z
?Notify@WindowImplBase@DuiLib@@UAEXAAUtagTNotifyUI@2@@Z
?GetMessageMap@WindowImplBase@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ
?GetStyle@WindowImplBase@DuiLib@@UAEJXZ
?HandleCustomMessage@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseMove@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonUp@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSetFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKillFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSysCommand@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnChar@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseHover@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseWheel@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?GetMainWindow@CPaintManagerUI@DuiLib@@SAPAUHWND__@@XZ
?OnNcHitTest@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcPaint@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnDestroy@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnClose@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?GetResourceID@WindowImplBase@DuiLib@@UBEPB_WXZ
?GetZIPFileName@WindowImplBase@DuiLib@@UBE?AVCDuiString@2@XZ
?GetResourceType@WindowImplBase@DuiLib@@UBE?AW4UILIB_RESOURCETYPE@2@XZ
?ResponseDefaultKeyEvent@WindowImplBase@DuiLib@@MAEJI@Z
?OnClick@WindowImplBase@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?InitWindow@WindowImplBase@DuiLib@@UAEXXZ
?OnFinalMessage@WindowImplBase@DuiLib@@UAEXPAUHWND__@@@Z
?GetClassStyle@WindowImplBase@DuiLib@@UBEIXZ
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
??0WindowImplBase@DuiLib@@QAE@XZ
??0CShadowUI@DuiLib@@QAE@XZ
??1WindowImplBase@DuiLib@@UAE@XZ
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?SetIcon@CWindowWnd@DuiLib@@QAEXI@Z
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
?GetHWND@CWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?MessageLoop@CPaintManagerUI@DuiLib@@SAXXZ
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?SetResourceDll@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?LoadPlugin@CPaintManagerUI@DuiLib@@SA_NPB_W@Z
dgctrl
?IsDefault@CStarButtonView@@QAE_NXZ
?GetLevel@CStarButtonView@@QAEHXZ
?GetReportPos@CDGOptionUIEX@@QAEHXZ
?GetReportOpt@CDGOptionUIEX@@QAEHXZ
?GetReportSel@CDGOptionUIEX@@QAEHXZ
?GetInfoText@CDGOptionUIEX@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?SelectDefaultLevel@CStarButtonView@@QAEXXZ
dgcore
CreateCoreInterface
kernel32
TlsAlloc
TlsFree
TlsGetValue
ReleaseSemaphore
GetLocaleInfoA
GetACP
HeapSize
HeapDestroy
GetVersionExA
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
OpenEventA
TlsSetValue
ResumeThread
FormatMessageA
GetThreadLocale
VerSetConditionMask
VerifyVersionInfoW
GetCommandLineW
lstrcmpiW
MapViewOfFileEx
CreateEventA
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcmpA
LocalAlloc
OpenFileMappingW
InterlockedDecrement
InterlockedIncrement
GetTickCount
GetPrivateProfileStringA
TerminateThread
InterlockedExchange
HeapReAlloc
OpenEventW
GetCurrentProcessId
lstrcmpW
LoadLibraryExW
GetLocalTime
GetProcessHeap
HeapAlloc
HeapFree
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OutputDebugStringW
CopyFileW
lstrcpyW
GetWindowsDirectoryW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetTempPathW
MoveFileExW
SetFileAttributesW
GetSystemDirectoryW
GetLogicalDriveStringsW
QueryDosDeviceW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
Sleep
OpenProcess
GetCurrentThreadId
WaitForSingleObject
WaitForMultipleObjects
ResetEvent
GetProcAddress
GetModuleHandleW
SetEvent
CreateEventW
GetModuleFileNameA
RaiseException
CloseHandle
GetModuleFileNameW
GetLastError
CreateDirectoryW
GetFileAttributesW
RemoveDirectoryW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
FindResourceW
SizeofResource
LockResource
LoadResource
FindResourceExW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
CreateFileW
LocalFree
GetExitCodeProcess
CreateProcessW
InterlockedCompareExchange
GetSystemInfo
GetVersionExW
GetCurrentProcess
ReadFile
SetFilePointer
GetFileSize
lstrlenA
WriteFile
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryW
FreeLibrary
GetExitCodeThread
user32
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
CharNextW
SendMessageW
ShowWindow
SetWindowPos
SetForegroundWindow
CharLowerA
GetDC
PostMessageW
GetWindowLongW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
UnregisterClassA
LoadStringW
wsprintfW
EnumDisplaySettingsW
EnumDisplayDevicesW
DefWindowProcW
UpdateLayeredWindow
LoadCursorW
RegisterClassW
CreateWindowExW
SetWindowLongW
UpdateWindow
ReleaseDC
IntersectRect
DestroyWindow
PtInRect
IsZoomed
GetClientRect
ScreenToClient
KillTimer
SetTimer
IsWindowVisible
IsWindow
PostQuitMessage
gdi32
GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
GetDeviceCaps
DeleteObject
GetStockObject
CreateDIBSection
DeleteDC
BitBlt
SelectObject
GetObjectW
advapi32
RegEnumKeyExW
CredEnumerateW
CredFree
ControlService
QueryServiceStatus
StartServiceW
DeleteService
RegCreateKeyExW
RegOpenKeyW
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegDeleteKeyW
RegDeleteValueW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegOpenKeyExW
RegQueryInfoKeyW
shell32
ShellExecuteW
SHGetFolderPathW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
ole32
CoTaskMemFree
CoUninitialize
CoInitialize
CLSIDFromString
CoInitializeSecurity
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
oleaut32
VariantClear
SysAllocString
VarUI4FromStr
SysFreeString
msvcp80
?length@?$char_traits@_W@std@@SAIPB_W@Z
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?eof@?$char_traits@_W@std@@SAGXZ
?eq_int_type@?$char_traits@_W@std@@SA_NABG0@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?good@ios_base@std@@QBE_NXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
??0?$allocator@D@std@@QAE@XZ
??0?$allocator@_W@std@@QAE@XZ
?deallocate@?$allocator@D@std@@QAEXPADI@Z
??0?$allocator@D@std@@QAE@ABV01@@Z
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
??0?$allocator@_W@std@@QAE@ABV01@@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
?max_size@?$allocator@D@std@@QBEIXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?max_size@?$allocator@_W@std@@QBEIXZ
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
?max@?$numeric_limits@I@std@@SAIXZ
?eq@?$char_traits@_W@std@@SA_NAB_W0@Z
?max@?$numeric_limits@H@std@@SAHXZ
??0_Lockit@std@@QAE@H@Z
?id@?$numpunct@_W@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$numpunct@_W@std@@SAIPAPBVfacet@locale@2@@Z
?_Incref@facet@locale@std@@QAEXXZ
?_Register@facet@locale@std@@QAEXXZ
??1_Lockit@std@@QAE@XZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?to_char_type@?$char_traits@_W@std@@SA_WABG@Z
??0locale@std@@QAE@XZ
?classic@locale@std@@SAABV12@XZ
??8locale@std@@QBE_NABV01@@Z
??1locale@std@@QAE@XZ
?grouping@?$numpunct@_W@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?thousands_sep@?$numpunct@_W@std@@QBE_WXZ
?to_int_type@?$char_traits@_W@std@@SAGAB_W@Z
?assign@?$char_traits@_W@std@@SAXAA_WAB_W@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W0@Z
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??0?$_String_val@_WV?$allocator@_W@std@@@std@@IAE@V?$allocator@_W@1@@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PB_WHH@Z
?close@?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
msvcr80
__CxxFrameHandler3
_purecall
??3@YAXPAX@Z
strcmp
??2@YAPAXI@Z
fprintf
??_V@YAXPAX@Z
sscanf_s
_stricmp
_vsnprintf_s
isalpha
isalnum
isspace
strncmp
strchr
tolower
_beginthreadex
strcat
free
memset
wcscmp
wcsrchr
wcschr
_wcslwr_s
strerror
memmove_s
_CxxThrowException
memcpy_s
wcslen
_vscwprintf
vswprintf_s
wcstol
_wcstoi64
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
malloc
wcspbrk
wcsncpy_s
_wtoi
iswspace
_wcsnicmp
_wcsicmp
wcsstr
memcpy
wcscat_s
memmove
calloc
wprintf
memcmp
wcscpy_s
_recalloc
realloc
_vscprintf
swprintf_s
_strlwr_s
_ultoa_s
printf
vsprintf_s
_waccess
rand
srand
_wtoi64
_wcsupr_s
wcsnlen
_scwprintf
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
_itow_s
_resetstkoflw
strtol
_get_errno
_set_errno
towupper
_time64
_mbsstr
_time32
??0exception@std@@QAE@ABQBDH@Z
_endthreadex
??8type_info@@QBE_NABV0@@Z
_wrename
__RTDynamicCast
_mbsicmp
wcsncmp
wcsncat_s
?terminate@@YAXXZ
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
_strnicmp
strlen
shlwapi
PathFindFileNameW
StrStrIW
PathAddBackslashW
PathAppendW
PathRemoveFileSpecW
PathIsDirectoryW
PathFileExistsW
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
crypt32
CertCloseStore
CryptMsgGetParam
CryptQueryObject
CertFreeCertificateContext
CertFindCertificateInStore
CertGetNameStringW
CryptDecodeObject
CryptMsgClose
psapi
GetProcessImageFileNameW
GetModuleFileNameExW
rpcrt4
UuidFromStringW
ws2_32
WSASetLastError
WSASend
WSAGetLastError
WSAGetOverlappedResult
WSAStartup
WSACloseEvent
freeaddrinfo
WSAResetEvent
getaddrinfo
WSASocketW
WSAEnumNetworkEvents
WSAConnect
WSAEventSelect
WSASetEvent
WSACreateEvent
WSARecv
WSACleanup
closesocket
iphlpapi
GetAdaptersInfo
Sections
.text Size: 544KB - Virtual size: 543KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE