Static task
static1
Behavioral task
behavioral1
Sample
VirusShare-00b96c6bbc0cedcc28f807b076fb7944.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare-00b96c6bbc0cedcc28f807b076fb7944.exe
Resource
win10v2004-20231215-en
General
-
Target
VirusShare-00b96c6bbc0cedcc28f807b076fb7944
-
Size
253KB
-
MD5
00b96c6bbc0cedcc28f807b076fb7944
-
SHA1
c3be805a1ff26a69d15cb561373aae49fd58c2e2
-
SHA256
0b782f356d9278691628c9d7bb5d4474bce92cfce6892d44b77879ad81a46039
-
SHA512
8ffd1157b49506e04d6396e54c52ea47aa93dd82894545057b3e912cf245cdbfc8b31a3750a4b2e366b09238f06d6792008eddc29e0750ef1a74021863d342fc
-
SSDEEP
3072:NqALAgKFjUQfpgB/zjf8j6mmmuYe3oAt9DzjYm+iB7SXxtrNa3TtqlWM:NWxj7Afie17zk8TtqlWM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare-00b96c6bbc0cedcc28f807b076fb7944
Files
-
VirusShare-00b96c6bbc0cedcc28f807b076fb7944.exe windows:4 windows x86 arch:x86
e63a0bc95600feea5f9c1308c67327fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
itc_m33
?get_IIOP_port@Configuration@@QAEJXZ
?glob_Config@@3PAVConfiguration@@A
?_throwit@OBJ_ADAPTER@CORBA@@UAEXXZ
?strstr@IONA@@SAPBDPBD0@Z
?lookup@hashTable@@QAEPAXPBDK@Z
?unsetServerEnvs@Configuration@@QAEXXZ
?copy@OBJ_ADAPTER@CORBA@@UBEPAVException@2@XZ
??4String_mgr@CORBA@@QAEAAV01@PAD@Z
?length@_IDL_SEQUENCE_IT_daemon_serverDetails@IT_daemon@@QAEXK@Z
?copy@BAD_OPERATION@CORBA@@UBEPAVException@2@XZ
?_throwit@BAD_OPERATION@CORBA@@UAEXXZ
?get_default_classpath_MT_UNSAFE@Configuration@@QAEPBDXZ
?get_java_interpreter_MT_UNSAFE@Configuration@@QAEPBDXZ
?registerIOCallback@ORB@CORBA@@QAEP6AXH@ZP6AXH@ZW4OrbixIOCallbackType@@@Z
?Orbix@CORBA@@2VBOA@1@A
??A_IDL_SEQUENCE_IT_daemon_serverDetails@IT_daemon@@QAEAAUserverDetails@1@K@Z
?timeStamp@Configuration@@QAEXAAVOrbixStream@@@Z
?getUserName@IT_HAL_UserInfo@@SAPADXZ
?set_server_code@Configuration@@QAEXPBD@Z
?set_server_comms@Configuration@@QAEXPBD@Z
?glob_SecurityPolicy@@3PAVSecurityPolicy@@A
?set_server_port@Configuration@@QAEXJ@Z
?get_daemon_port@Configuration@@QAEJXZ
?set_server_name@Configuration@@QAEXPBD@Z
??BEnvironment@CORBA@@QBEHXZ
??BPrincipal_ptr@CORBA@@QBEPADXZ
?get_principal@BOA@CORBA@@QAE?AVPrincipal_ptr@2@AAVEnvironment@2@@Z
?get_def_code@Configuration@@QAEPADXZ
?get_def_comms@Configuration@@QAEPADXZ
??4Environment@CORBA@@QAEAAV01@PAVSystemException@1@@Z
?descriptor@Request@CORBA@@QBEHXZ
?request@Environment@CORBA@@QAEPAVRequest@2@XZ
?copy@NO_PERMISSION@CORBA@@UBEPAVException@2@XZ
?get_diagnostics@Configuration@@QAEJXZ
?_throwit@NO_PERMISSION@CORBA@@UAEXXZ
??A_IDL_SEQUENCE_string@@QBE?BVString_SeqElem@CORBA@@K@Z
??BString_SeqElem@CORBA@@QBEPBDXZ
?length@_IDL_SEQUENCE_string@@QBEKXZ
??BString_var@CORBA@@QAEAAPADXZ
??0String_var@CORBA@@QAE@PAD@Z
??1_IDL_SEQUENCE_string@@QAE@XZ
??0_IDL_SEQUENCE_string@@QAE@K@Z
??0_IDL_SEQUENCE_string@@QAE@XZ
??A_IDL_SEQUENCE_string@@QAE?AVString_SeqElem@CORBA@@K@Z
??4String_SeqElem@CORBA@@QAEAAV01@PAD@Z
?length@_IDL_SEQUENCE_string@@QAEXK@Z
?IT_compareHosts@IT_HAL_HostInfo@@SAEPBD0@Z
?myHost@ORB@CORBA@@QBEPBDAAVEnvironment@2@@Z
?IT_chooseDefaultEnv@CORBA@@SGAAVEnvironment@1@XZ
??1_IDL_SEQUENCE_octet_var@@QAE@XZ
??1IOR@@QAE@XZ
?to_string@IOR@@QAEPADXZ
??0IOR@@QAE@PBD0GPAV_IDL_SEQUENCE_octet@@EEFF@Z
??B_IDL_SEQUENCE_octet_var@@QAEAAPAV_IDL_SEQUENCE_octet@@XZ
?get_IIOP_version@Configuration@@QAEJXZ
??0_IDL_SEQUENCE_octet_var@@QAE@PAV_IDL_SEQUENCE_octet@@@Z
??0_IDL_SEQUENCE_octet@@QAE@KKPAEE@Z
??0_IDL_SEQUENCE_IT_daemon_serverDetails@IT_daemon@@QAE@K@Z
?default_environment@CORBA@@2VEnvironment@1@A
?fileChanged@ASCII_file@@UAEEXZ
?restoreFile@ASCII_file@@UAEEPBDAAVEnvironment@CORBA@@@Z
?backupFile@ASCII_file@@UAEEPBDAAVEnvironment@CORBA@@@Z
?deleteFile@ASCII_file@@UAEEAAVEnvironment@CORBA@@@Z
?moveFile@ASCII_file@@UAEEPBDAAVEnvironment@CORBA@@@Z
?moveFile@ASCII_file@@UAEEPBD0AAVEnvironment@CORBA@@@Z
?copyFile@ASCII_file@@UAEEPBDAAVEnvironment@CORBA@@@Z
?closeFile@ASCII_file@@UAEHAAVEnvironment@CORBA@@@Z
?createFile@ASCII_file@@UAEPAU_iobuf@@AAVEnvironment@CORBA@@@Z
?openFile@ASCII_file@@UAEPAU_iobuf@@AAVEnvironment@CORBA@@@Z
??1String_var@CORBA@@QAE@XZ
?lastUpdate@ASCII_file@@UAEAAJXZ
?isMissing@ASCII_file@@UAEAAEXZ
?pathname@ASCII_file@@UBEPADXZ
?filename@ASCII_file@@UBEPADXZ
?changeFullName@ASCII_file@@UAEXPBD@Z
??1ASCII_file@@UAE@XZ
??0ASCII_file@@QAE@PBDH@Z
?IT_HAL_fprintf@IT_HAL_File@@SAHPAU_iobuf@@PBDZZ
?IT_HAL_stat@IT_HAL_File@@SAHPBDPAUstat@@@Z
?inReplyFailure@Filter@CORBA@@UAEXAAVRequest@2@AAVEnvironment@2@@Z
?outReplyFailure@Filter@CORBA@@UAEXAAVRequest@2@AAVEnvironment@2@@Z
?inReplyPostMarshal@Filter@CORBA@@UAEEAAVRequest@2@AAVEnvironment@2@@Z
?inReplyPreMarshal@Filter@CORBA@@UAEEAAVRequest@2@AAVEnvironment@2@@Z
?outReplyPostMarshal@Filter@CORBA@@UAEEAAVRequest@2@AAVEnvironment@2@@Z
?outReplyPreMarshal@Filter@CORBA@@UAEEAAVRequest@2@AAVEnvironment@2@@Z
?inRequestPostMarshal@Filter@CORBA@@UAEEAAVRequest@2@AAVEnvironment@2@@Z
?outRequestPostMarshal@Filter@CORBA@@UAEEAAVRequest@2@AAVEnvironment@2@@Z
?outRequestPreMarshal@Filter@CORBA@@UAEEAAVRequest@2@AAVEnvironment@2@@Z
?inRequestPreAuth@Filter@CORBA@@UAEHAAVRequest@2@AAVEnvironment@2@@Z
??1Filter@CORBA@@MAE@XZ
??0Filter@CORBA@@IAE@XZ
?getTimeAsString@IONA@@SAXPAD@Z
?closeChannel@ORB@CORBA@@QAEEHAAVEnvironment@2@@Z
?getOperation@Request@CORBA@@QBEPBDXZ
?get_it_daemon_connection_limit@Configuration@@QAEJXZ
?get_it_daemon_connection_reap_number@Configuration@@QAEJXZ
?get_it_daemon_server_connection_close@Configuration@@QAE_NXZ
??1IT_PtrBase@IT_RefCounted@@IAE@XZ
?principal@Request@CORBA@@QAEXPBD@Z
??5Request@CORBA@@QAEAAV01@AAPAD@Z
?getChannel@IT_RequestImpl@@QAE?AV?$IT_RefCountedPtr@VIT_Channel@@@@XZ
??1OrbixORImpl@@UAE@XZ
?convertToForwardReply@RequestS@@QAEXKAAVEnvironment@CORBA@@@Z
??BString_var@CORBA@@QBEPBDXZ
?request@Environment@CORBA@@QAEXPAVRequest@2@@Z
?expandHostName@Configuration@@QAEPADPBD@Z
?extractException@IT_EnvironmentImpl@@QAEPAXXZ
?glob_Daemon@@3PAVSSL_enabled_Daemon@@A
?getImplementation@OrbixORImpl@@UAEPBDXZ
??0String_var@CORBA@@QAE@XZ
?object_to_string@OrbixORImpl@@UAEPADXZ
??0OrbixORImpl@@QAE@PBD@Z
?create@ObjectReferenceFactory@@SAPAVObjectReferenceImpl@@PBDAAVEnvironment@CORBA@@@Z
??0Environment@CORBA@@QAE@AAVRequest@1@@Z
?getHisProtocol@IT_Channel@@QBEKXZ
?_narrow@SystemException@CORBA@@SGPAV12@PAVException@2@@Z
?exception@Environment@CORBA@@QBEPAVException@2@XZ
?principal@Request@CORBA@@QBEPBDXZ
?here@locator_impl@@QAEPADI@Z
??1locator_impl@@QAE@XZ
?databaseChanged@locator_impl@@QAEHXZ
??0locator_impl@@QAE@HHAAVEnvironment@CORBA@@@Z
?copy@INITIALIZE@CORBA@@UBEPAVException@2@XZ
?_throwit@INITIALIZE@CORBA@@UAEXXZ
??BString_SeqElem@CORBA@@QAEPADXZ
?lookUp@locator_impl@@QAEEPBDAAV_IDL_SEQUENCE_string@@AAVEnvironment@CORBA@@@Z
?copy@LOCATOR@CORBA@@UBEPAVException@2@XZ
?_throwit@LOCATOR@CORBA@@UAEXXZ
?closeGroups@locator_impl@@QAEHXZ
?closeHosts@locator_impl@@QAEHXZ
?makeRuntimeException2@Request@CORBA@@QAEXXZ
??5Request@CORBA@@QAEAAV01@AAE@Z
??6Request@CORBA@@QAEAAV01@ABK@Z
??5Request@CORBA@@QAEAAV01@AAJ@Z
??1_IDL_SEQUENCE_IT_daemon_serverDetails@IT_daemon@@QAE@XZ
?encodeOp@_IDL_SEQUENCE_IT_daemon_serverDetails@IT_daemon@@QBEXAAVRequest@CORBA@@@Z
?decodeOp@_IDL_SEQUENCE_string@@QAEXAAVRequest@CORBA@@@Z
??6Request@CORBA@@QAEAAV01@ABE@Z
?encodeOp@_IDL_SEQUENCE_string@@QBEXAAVRequest@CORBA@@@Z
?wasMissing@ASCII_file@@UAEAAEXZ
?remove@hashTable@@QAEPAXPBDK@Z
??5Request@CORBA@@QAEAAV01@AAK@Z
?encodeStringOp@Request@CORBA@@QAEXPBDK@Z
?targetProtocol@Request@CORBA@@QAEKXZ
?string_free@CORBA@@SGXPAD@Z
?propagate@Environment@CORBA@@QAEXPBVException@2@@Z
?propagate@Environment@CORBA@@QAEXPBVSystemException@2@@Z
?inRequestPostM@Filter@CORBA@@QAEEAAVRequest@2@AAVEnvironment@2@@Z
?isException@Request@CORBA@@QBEEAAVEnvironment@2@@Z
?decodeStringOp@Request@CORBA@@QAEXAAPAD@Z
?tcAssert@Request@CORBA@@QAEEPBD@Z
?getFilter@BOA@CORBA@@QAEPAVFilter@2@XZ
?hash@hashMatrix@@SGGPAPBDGPBD@Z
?getObj@PPTR@CORBA@@QBEPAXXZ
?tcPreAssert@Request@CORBA@@QAEXPBD@Z
?release@CORBA@@SGXPAVObject@1@AAVEnvironment@1@@Z
?record@IT_implTableClass@CORBA@@QAEPAXPBD0@Z
?IT_implTable@CORBA@@2VIT_implTableClass@1@A
?_release@Object@CORBA@@UAEXAAVEnvironment@2@@Z
?_IT_PING@Object@CORBA@@UAEEAAVEnvironment@2@@Z
?_isRemote@Object@CORBA@@UBEEAAVEnvironment@2@@Z
?_save@Object@CORBA@@UAEXAAVEnvironment@2@@Z
?_loader@Object@CORBA@@UBEPAVLoaderClass@2@AAVEnvironment@2@@Z
?_deref@Object@CORBA@@UAEPAXXZ
??1Object@CORBA@@UAE@XZ
?_set_pptr@Object@CORBA@@QAEXPAVPPTR@2@@Z
??0PPTR@CORBA@@IAE@PBDPAXPAVObject@1@E@Z
??0Object@CORBA@@QAE@E@Z
??0PPTR@CORBA@@IAE@PBVObjectReferenceImpl@@PAXPAVObject@1@E@Z
??1EnvExcRaiser@CORBA@@QAE@XZ
?registerEnv@EnvExcRaiser@CORBA@@QAEAAVEnvironment@2@PAV32@@Z
??0EnvExcRaiser@CORBA@@QAE@XZ
?New@FactoryTable@CORBA@@QAEPAXPBDAAVEnvironment@2@ABVContext@2@000@Z
?Factory@CORBA@@2VFactoryTable@1@A
??1Context@CORBA@@QAE@XZ
??0Context@CORBA@@QAE@PAV01@@Z
?IT_castUp@ObjectFactoryClass@CORBA@@UAEPAXPAXPBDAAVEnvironment@2@@Z
?_interfaceCmp@CORBA@@SGHPBD0AAVEnvironment@1@@Z
?_pptr@Object@CORBA@@QBEPAVPPTR@2@XZ
?baseInterfaces@ObjectFactoryClass@CORBA@@UAEXAAV_IDL_SEQUENCE_string@@@Z
?add@ProxyFactory@CORBA@@IAEXAAV_IDL_SEQUENCE_string@@PBD@Z
?bind@ProxyFactory@CORBA@@UAEPAXPBD000ABVContext@2@AAVEnvironment@2@@Z
??1ProxyFactory@CORBA@@MAE@XZ
??0ObjectFactoryClass@CORBA@@QAE@E@Z
??0ProxyFactory@CORBA@@IAE@PBDE@Z
??1Request@CORBA@@UAE@XZ
?exceptionKind@Request@CORBA@@QBE?AW4exception_type@2@XZ
?checkEnv@Request@CORBA@@QAEXAAVEnvironment@2@@Z
?reset@Request@CORBA@@QAEXPAVObject@2@PBDAAVEnvironment@2@@Z
?target@Request@CORBA@@QBEPAVObject@2@AAVEnvironment@2@@Z
?operation@Request@CORBA@@QBEPBDAAVEnvironment@2@@Z
?invoke@Request@CORBA@@QAEKABVFlags@2@AAVEnvironment@2@@Z
??0Request@CORBA@@QAE@PAVObject@1@PBDAAVEnvironment@1@EE@Z
?_get_isNull@Object@CORBA@@QBEEXZ
?insertOctet@Request@CORBA@@QAEAAV12@AAE@Z
?decodeOp@_IDL_SEQUENCE_IT_daemon_serverDetails@IT_daemon@@QAEXAAVRequest@CORBA@@@Z
??0_IDL_SEQUENCE_IT_daemon_serverDetails@IT_daemon@@QAE@XZ
??6Request@CORBA@@QAEAAV01@ABJ@Z
??0PPTR@CORBA@@IAE@PAXPAVObject@1@PBDPAVLoaderClass@1@20@Z
??1PPTR@CORBA@@UAE@XZ
??6Request@CORBA@@QAEAAV01@ABF@Z
??5Request@CORBA@@QAEAAV01@AAF@Z
??0IT_InitOrbix@@QAE@XZ
?copy@BAD_PARAM@CORBA@@UBEPAVException@2@XZ
?_throwit@BAD_PARAM@CORBA@@UAEXXZ
?string_alloc@CORBA@@SGPADK@Z
??4String_var@CORBA@@QAEAAV01@PAD@Z
?string_dupl@CORBA@@SGPADPBD@Z
?get_errors_file@Configuration@@QAEPADXZ
?get_imp_rep_path@Configuration@@QAEPADXZ
?getTempFilename@IONA@@SAEPAD@Z
?IT_HAL_fscanf@IT_HAL_File@@SAHPAU_iobuf@@PBDZZ
optarg
getopt
reinitialiseopt
?processEvents@BOA@CORBA@@QAEKKAAVEnvironment@2@@Z
?get_daemon_port_range@Configuration@@QAEJXZ
?get_daemon_port_base@Configuration@@QAEJXZ
?close@WinSockInterface@@QAEHI@Z
?bind@WinSockInterface@@QAEHIPBUsockaddr@@H@Z
?socket@WinSockInterface@@QAEIHHH@Z
?glob_WSI@@3PAVWinSockInterface@@A
?copy@IMP_LIMIT@CORBA@@UBEPAVException@2@XZ
?_throwit@IMP_LIMIT@CORBA@@UAEXXZ
?copy@NO_IMPLEMENT@CORBA@@UBEPAVException@2@XZ
?_throwit@NO_IMPLEMENT@CORBA@@UAEXXZ
??1IT_Object_var@CORBA@@QAE@XZ
?send@Request@CORBA@@QAEKABVFlags@2@AAVEnvironment@2@@Z
??BIT_Object_var@CORBA@@QAEAAPAVObject@1@XZ
??0IT_Object_var@CORBA@@QAE@PAVObject@1@@Z
?string_to_object@ORB@CORBA@@QAEPAVObject@2@PBD00000AAVEnvironment@2@@Z
?glob_IRimplName@@3PBDB
?getPid@IT_Channel@@QBEKXZ
?glob_ChannelTable@@3PAVChannelTable@@A
?getHostName@Configuration@@QAEPBDXZ
??4IT_PtrBase@IT_RefCounted@@IAEAAV01@ABV01@@Z
?printVerInfo@IT_ORBImpl@@QAEXPBD@Z
?get_default_classpath@Configuration@@QAEPADXZ
?get_java_interpreter@Configuration@@QAEPADXZ
?get_locator_file@Configuration@@QAEPADXZ
?get_local_domain@Configuration@@QAEPADXZ
?get_IR_file@Configuration@@QAEPADXZ
?processNextEvent@BOA@CORBA@@QAEKKAAVEnvironment@2@@Z
?glob_ContextS@@3PAVContextClassS@@A
?_object_to_string@Object@CORBA@@QAEPADKAAVEnvironment@2@@Z
?impl_is_ready@BOA@CORBA@@QAEXVImplementationDef_ptr@2@KAAVEnvironment@2@@Z
??0ImplementationDef_ptr@CORBA@@QAE@PBD@Z
?_marker@Object@CORBA@@QAEEPBDAAVEnvironment@2@@Z
?registerIOCallbackObject@ORB@CORBA@@QAEEEPAVIT_IOCallback@2@@Z
?OrbixIO@CORBA@@2EB
?exit@IONA@@SAXH@Z
?setServerName@ORB@CORBA@@QAEXPBDAAVEnvironment@2@@Z
?eagerListeners@ORB@CORBA@@QBEEAAVEnvironment@2@@Z
?connectionTimeout@ORB@CORBA@@QAEKKAAVEnvironment@2@@Z
?propagateTIEdelete@BOA@CORBA@@QAEEEAAVEnvironment@2@@Z
?useHostNameInIOR@ORB@CORBA@@SGXEAAVEnvironment@2@@Z
?setDiagnostics@ORB@CORBA@@QAEFFAAVEnvironment@2@@Z
?glob_MsgDispatcher@@3PAVIT_MessageDispatcher@@A
?glob_StdOutHandler@@3PAVIT_StdOutMsgHandler@@A
?filterBadConnectAttempts@BOA@CORBA@@QAEEEAAVEnvironment@2@@Z
?SetConfigValue@ORB@CORBA@@SGEPBDPAD@Z
?_okToDeleteImpl@Object@CORBA@@QBEEXZ
?copy@LICENCING@CORBA@@UBEPAVException@2@XZ
?_throwit@LICENCING@CORBA@@UAEXXZ
?toString@Environment@CORBA@@QBEPBDXZ
?architectureProductCode@Configuration@@QAEPBDXZ
?resetBucket@hashTableIterator@@QAEXXZ
?match@@YAHPBD0@Z
??1SystemException@CORBA@@UAE@XZ
??0Environment@CORBA@@QAE@XZ
??1Environment@CORBA@@QAE@XZ
?insertYourself@SystemException@CORBA@@UAEXPAVEnvironment@2@@Z
?enter@hashTable@@QAEKPBDPAXK_N@Z
??0SystemException@CORBA@@IAE@PBDKW4CompletionStatus@1@0@Z
?copy@INTERNAL@CORBA@@UBEPAVException@2@XZ
?_throwit@INTERNAL@CORBA@@UAEXXZ
?_toString@SystemException@CORBA@@UBEPBDXZ
??1hashTable@@UAE@XZ
??0hashTableIterator@@QAE@PAVhashTable@@@Z
??RhashTableIterator@@QAEPAVhashEntry@@XZ
??1IT_InitOrbix@@QAE@XZ
??0hashTable@@QAE@K@Z
?insert@hashTable@@MAE_NPBDPAXAAKAAPAVhashEntry@@K_N@Z
?makeRuntimeException6@Request@CORBA@@QAEXXZ
?extractOctet@Request@CORBA@@QAEAAV12@AAE@Z
??1ObjectFactoryClass@CORBA@@UAE@XZ
itolm33
?m_endl@OrbixStream@@2VManip@1@B
??6OrbixStream@@QAEAAV0@H@Z
??6OrbixStream@@QAEAAV0@K@Z
?IT_out@@3PAVOrbixStream@@A
?Output@IT_StdOutMsgHandler@@UAEXABVIT_Message@@@Z
?Process@IT_MessageHandler@@MAEXPAVRDCData@@@Z
??6OrbixStream@@QAEAAV0@J@Z
??6OrbixStream@@QAEAAV0@ABVManip@0@@Z
??0IT_StdOutMsgHandler@@QAE@PAVIT_MessageDispatcher@@ABVITString@Orbix33@@@Z
??6OrbixStream@@QAEAAV0@PBD@Z
??1IT_StdOutMsgHandler@@UAE@XZ
itglm33
??4ITString@Orbix33@@QAEAAV01@ABV01@@Z
??0ITString@Orbix33@@QAE@PBD@Z
?OwnString@ITString@Orbix33@@SA?AV12@PAD@Z
?Access@ITString@Orbix33@@QBEPBDXZ
?Narrow@RDCHandler@@UBEPAXH@Z
?Append@ITString@Orbix33@@QAEXPBDI@Z
?Append@ITString@Orbix33@@QAEXPBD@Z
??1ITString@Orbix33@@UAE@XZ
??BITString@Orbix33@@QBEPBDXZ
?Access@ITString@Orbix33@@QBEPAD_N@Z
??0ITString@Orbix33@@QAE@I@Z
??0ITString@Orbix33@@QAE@ABV01@@Z
?Append@ITString@Orbix33@@QAEXABV12@@Z
kernel32
CreateProcessA
FindFirstFileA
FindNextFileA
GetProcessTimes
FindClose
TerminateProcess
GetLastError
LocalFree
GetExitCodeProcess
FormatMessageA
CloseHandle
OpenProcess
GetModuleFileNameA
GetVersionExA
SetEnvironmentVariableA
CompareFileTime
advapi32
CloseServiceHandle
OpenServiceA
DeregisterEventSource
RegCloseKey
RegSetValueExA
OpenSCManagerA
CreateServiceA
DeleteService
RegCreateKeyA
RegisterEventSourceA
StartServiceCtrlDispatcherA
ReportEventA
SetServiceStatus
RegisterServiceCtrlHandlerA
RegQueryValueExA
ws2_32
getpeername
getsockname
ntohs
gethostbyaddr
htons
htonl
inet_ntoa
msvcirt
?seekpos@streambuf@@UAEJJH@Z
??5istream@@QAEAAV0@AAK@Z
??1filebuf@@UAE@XZ
??0filebuf@@QAE@XZ
?openprot@filebuf@@2HB
?open@filebuf@@QAEPAV1@PBDHH@Z
??4ostream@@IAEAAV0@PAVstreambuf@@@Z
??_Dostrstream@@QAEXXZ
??1ios@@UAE@XZ
??1ostrstream@@UAE@XZ
?str@strstreambuf@@QAEPADXZ
??6ostream@@QAEAAV0@E@Z
??6ostream@@QAEAAV0@H@Z
??6ostream@@QAEAAV0@PBD@Z
??0ostrstream@@QAE@XZ
??_Distrstream@@QAEXXZ
?sync@filebuf@@UAEHXZ
??5istream@@QAEAAV0@AAH@Z
??5istream@@QAEAAV0@AAF@Z
??0istrstream@@QAE@PAD@Z
??1istrstream@@UAE@XZ
?endl@@YAAAVostream@@AAV1@@Z
?cout@@3Vostream_withassign@@A
?doallocate@streambuf@@MAEHXZ
?pbackfail@streambuf@@UAEHH@Z
?underflow@filebuf@@UAEHXZ
?overflow@filebuf@@UAEHH@Z
?xsgetn@streambuf@@UAEHPADH@Z
?xsputn@streambuf@@UAEHPBDH@Z
?cerr@@3Vostream_withassign@@A
?seekoff@filebuf@@UAEJJW4seek_dir@ios@@H@Z
?setbuf@filebuf@@UAEPAVstreambuf@@PADH@Z
msvcrt
fflush
strtok
getc
_fileno
_itoa
_rmdir
_mkdir
_stat
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
sprintf
strrchr
atoi
strncmp
signal
strncpy
atol
_write
fgets
time
vsprintf
strchr
free
calloc
strstr
fclose
sscanf
strerror
_errno
fopen
freopen
rename
putc
_access
_onexit
fprintf
_iob
perror
exit
_exit
__p___initenv
localtime
_tzset
mktime
__dllonexit
_adjust_fdiv
??1type_info@@UAE@XZ
_XcptFilter
__p__fmode
__getmainargs
_initterm
__setusermatherr
__p__commode
_controlfp
__set_app_type
_except_handler3
_unlink
Sections
.text Size: 168KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE