aa54bf08d29223341e3d5eea13509993_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

aa54bf08d29223341e3d5eea13509993_JaffaCakes118
Size

303KB
MD5

aa54bf08d29223341e3d5eea13509993
SHA1

41f8a6b7af17ed581c398ee77ed5644c160fd98d
SHA256

fbad0d1dc276c057c5cec7d2cd687479cfe3dd57ef7defff8ecba1067f06d9bb
SHA512

298de2999fedede1b2a5099554652b1f5ac65484fb5c64969373bebfcd303b723919b1bf6dd479cc91ad2f25132b356e79a6881991f513ccd9a2cfaf5b970ac0
SSDEEP

3072:+pIdCs3x9hc2cjeSC4wY4Yfgx9cWQR1C2iWzsyqXvsKFtYlata/K86H644:+pIdCG9hGjZCYS9cwFL8h/Km44

Score

1^/10

Malware Config

Signatures

Files

aa54bf08d29223341e3d5eea13509993_JaffaCakes118
.dll windows:5 windows x86 arch:x86

13ba652712dceacda88d5754022fc52d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0e:c7:89:17:b2:30:2a:52:2b:d5:c9:eb:12:4a:6c:c7
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

05/07/2019, 00:00

Not After

07/07/2020, 12:00

Subject

CN=Shenzhen Thinksky Technology Co.\,Ltd,OU=R&D Dept.,O=Shenzhen Thinksky Technology Co.\,Ltd,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:35:d4:a4:de:d0:85:ce:eb:9c:f8:15:90:48:21:4d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/07/2019, 00:00

Not After

07/07/2020, 12:00

Subject

CN=Shenzhen Thinksky Technology Co.\,Ltd,OU=R&D Dept.,O=Shenzhen Thinksky Technology Co.\,Ltd,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

db:3c:ae:a1:f8:8a:27:7d:db:87:5d:cb:b6:f5:21:ab:a1:ba:0d:83:00:f4:de:51:e9:af:b5:48:21:a0:5f:11
Signer

Actual PE Digest

db:3c:ae:a1:f8:8a:27:7d:db:87:5d:cb:b6:f5:21:ab:a1:ba:0d:83:00:f4:de:51:e9:af:b5:48:21:a0:5f:11

Digest Algorithm

sha256

PE Digest Matches

true

6a:5a:14:c5:8d:ba:5a:93:c7:eb:9f:3d:a7:28:84:ec:5f:75:d6:00
Signer

Actual PE Digest

6a:5a:14:c5:8d:ba:5a:93:c7:eb:9f:3d:a7:28:84:ec:5f:75:d6:00

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Program Files (x86)\Jenkins\workspace\iTools4\bin\downloader.pdb

Imports

libcurl

curl_easy_strerror
curl_easy_setopt

globalinterface

CreateIUnZip
GetResHandle
CreateIHttpAgent
CreateIZlib
GetReport
GetMainBox
GetDevTransfer
GetNetwork
GetConfig
CreateISQLite3
CreateIPngFixer

soui

?OnFinalRelease@?$TObjRefImpl@UIObjRef@@@SOUI@@UAEXXZ
?IsLayeredWindow@SWindow@SOUI@@MBEHXZ
?InitFromXml@SWindow@SOUI@@UAEHVxml_node@pugi@@@Z
?GetScale@SWindow@SOUI@@UBEHXZ
?BeforePaint@SWindow@SOUI@@UAEXPAUIRenderTarget@2@AAVSPainter@2@@Z
?AfterPaint@SWindow@SOUI@@UAEXPAUIRenderTarget@2@AAVSPainter@2@@Z
?RedrawItem@SMCListView@SOUI@@IAEXPAVSItemPanel@2@@Z
?GetItemPanel@SMCListView@SOUI@@QAEPAVSItemPanel@2@H@Z
?GetFocusManager@SwndContainerImpl@SOUI@@QAEPAVCFocusManager@2@XZ
?GetClassNameW@SEdit@SOUI@@SAPB_WXZ
?SetFocusedHwnd@CFocusManager@SOUI@@QAEXK@Z
?IsFocused@SWindow@SOUI@@QAEHXZ
?KillFocus@SWindow@SOUI@@QAEXXZ
?SetCheck@SWindow@SOUI@@QAEXH@Z
?SetMsgHandled@SMsgHandleState@SOUI@@QAEXH@Z
?IsMsgHandled@SMsgHandleState@SOUI@@QBEHXZ
?GetClassNameW@SImageButton@SOUI@@SAPB_WXZ
?GetClassNameW@SProgress@SOUI@@SAPB_WXZ
?GetClassNameW@SStatic@SOUI@@SAPB_WXZ
?GetClassNameW@SButton@SOUI@@SAPB_WXZ
?SMessageBox@SOUI@@YAHPAUHWND__@@PB_W1I@Z
?GetClassNameW@SwndContainerImpl@SOUI@@SAPB_WXZ
?GetParent@SWindow@SOUI@@QBEPAV12@XZ
?SetValue@SProgress@SOUI@@QAEHH@Z
?SetIcon@SImageWnd@SOUI@@QAEHH@Z
?SetVisible@SWindow@SOUI@@QAEXHH@Z
?GetChildrenCount@SWindow@SOUI@@QBEIXZ
?GetObjectClass@SHostWnd@SOUI@@UBEPB_WXZ
?IsClass@SHostWnd@SOUI@@UBEHPB_W@Z
?RequestRelayout@SWindow@SOUI@@UAEXPAV12@H@Z
?UpdateLayout@SWindow@SOUI@@UAEXXZ
?GetMsgLoop@SHostWnd@SOUI@@MAEPAVSMessageLoop@2@XZ
?GetWindowRect@SWindow@SOUI@@QAE?AVCRect@2@XZ
?RequestRelayout@SWindow@SOUI@@QAEXXZ
?GetObjectType@SImageWnd@SOUI@@UBEHXZ
?IsClass@SImageWnd@SOUI@@UBEHPB_W@Z
??0SImageWnd@SOUI@@QAE@XZ
??1SImageWnd@SOUI@@UAE@XZ
?OnPaint@SImageWnd@SOUI@@QAEXPAUIRenderTarget@2@@Z
?ProcessSwndMessage@SImageWnd@SOUI@@MAEHIIJAAJ@Z
?GetClientRect@SWindow@SOUI@@UBE?AVCRect@2@XZ
?OnColorize@SImageWnd@SOUI@@MAEXK@Z
?EnableWindow@SWindow@SOUI@@QAEXHH@Z
?Invalidate@SWindow@SOUI@@QAEXXZ
?GetItem@STabCtrl@SOUI@@QAEPAVSTabPage@2@H@Z
?SetTitle@STabPage@SOUI@@QAEXPB_W@Z
?GetContainer@SWindow@SOUI@@QAEPAUISwndContainer@2@XZ
??_7ISlotFunctor@SOUI@@6B@
?subscribeEvent@SEventSet@SOUI@@QAE_NKABUISlotFunctor@2@@Z
?SetAdapter@SMCListView@SOUI@@QAEHPAUIMcAdapter@2@@Z
??1SHostWnd@SOUI@@UAE@XZ
??0SHostWnd@SOUI@@QAE@PB_W@Z
?ReflectNotifications@CSimpleWnd@SOUI@@QAEJIIJAAH@Z
?ProcessWindowMessage@SHostWnd@SOUI@@UAEHPAUHWND__@@IIJAAJK@Z
?OnCreate@SHostWnd@SOUI@@IAEHPAUtagCREATESTRUCTW@@@Z
??1SObjectInfo@SOUI@@QAE@XZ
??0SObjectInfo@SOUI@@QAE@ABV?$TStringT@_WUwchar_traits@SOUI@@@1@H@Z
?RegisterFactory@SObjectFactoryMgr@SOUI@@QAE_NAAVSObjectFactory@2@_N@Z
?tr@SApplication@SOUI@@QBE?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV32@0@Z
?SendMessageW@CSimpleWnd@SOUI@@QAEJIIJ@Z
?GetClassNameW@SImageWnd@SOUI@@SAPB_WXZ
?ShowWindow@CSimpleWnd@SOUI@@QAEHH@Z
?OnFinalMessage@CSimpleWnd@SOUI@@MAEXPAUHWND__@@@Z
?ProcessWindowMessage@SHostDialog@SOUI@@UAEHPAUHWND__@@IIJAAJK@Z
?OnFinalRelease@?$TObjRefImpl2@UIObjRef@@VSWindow@SOUI@@@SOUI@@UAEXXZ
?Release@?$TObjRefImpl@UIObjRef@@@SOUI@@UAEJXZ
?AddRef@?$TObjRefImpl@UIObjRef@@@SOUI@@UAEJXZ
?GetTrCtx@SWindow@SOUI@@UAEABV?$TStringT@_WUwchar_traits@SOUI@@@2@XZ
?OnScaleChanged@SHostWnd@SOUI@@MAEXH@Z
?OnLanguageChanged@SHostWnd@SOUI@@MAEJXZ
?ProcessSwndMessage@SWindow@SOUI@@MAEHIIJAAJ@Z
?SwndProc@SWindow@SOUI@@MAEHIIJAAJ@Z
?IsLayeredWindow@SHostWnd@SOUI@@MBEHXZ
?IsDrawToCache@SWindow@SOUI@@MBE_NXZ
?SetCaretPos@SWindow@SOUI@@UAEXHH@Z
?ShowCaret@SWindow@SOUI@@UAEXH@Z
?CreateCaret@SWindow@SOUI@@UAEHPAUHBITMAP__@@HH@Z
?AfterPaint@SHostWnd@SOUI@@MAEXPAUIRenderTarget@2@AAVSPainter@2@@Z
?BeforePaint@SHostWnd@SOUI@@MAEXPAUIRenderTarget@2@AAVSPainter@2@@Z
?DrawFocus@SWindow@SOUI@@UAEXPAUIRenderTarget@2@@Z
?DrawTextW@SWindow@SOUI@@UAEXPAUIRenderTarget@2@PB_WHPAUtagRECT@@I@Z
?GetTextRect@SWindow@SOUI@@UAEXPAUtagRECT@@@Z
?NeedRedrawWhenStateChange@SWindow@SOUI@@UAEHXZ
?GetDesiredSize@SWindow@SOUI@@UAE?AVCSize@2@PBUtagRECT@@@Z
?GetDesiredSize@SWindow@SOUI@@UAE?AVCSize@2@HH@Z
?GetChildrenLayoutRect@SWindow@SOUI@@UAE?AVCRect@2@XZ
?OnRelayout@SWindow@SOUI@@UAEHABVCRect@2@@Z
?OnUpdateFloatPosition@SWindow@SOUI@@UAEXABVCRect@2@@Z
?UpdateChildrenPosition@SWindow@SOUI@@UAEXXZ
?IsClipClient@SWindow@SOUI@@UAEHXZ
?OnNcHitTest@SWindow@SOUI@@UAEHVCPoint@2@@Z
?IsFocusable@SWindow@SOUI@@UAEHXZ
?OnGetDlgCode@SWindow@SOUI@@UAEIXZ
?FireEvent@SWindow@SOUI@@UAEHAAVEventArgs@2@@Z
?SwndFromPoint@SWindow@SOUI@@UAEKVCPoint@2@H@Z
?tr@SWindow@SOUI@@UAE?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV32@@Z
?UpdateLayout@SHostWnd@SOUI@@MAEXXZ
?RequestRelayout@SHostWnd@SOUI@@UAEXPAVSWindow@2@H@Z
?OnStateChanged@SWindow@SOUI@@UAEXKK@Z
?OnStateChanging@SWindow@SOUI@@UAEXKK@Z
?OnUpdateToolTip@SWindow@SOUI@@UAEHVCPoint@2@AAUSwndToolTipInfo@2@@Z
?OnSetCursor@SWindow@SOUI@@UAEHABVCPoint@2@@Z
?GetSelectedChildInGroup@SWindow@SOUI@@UAEPAV12@XZ
?GetSelectedSiblingInGroup@SWindow@SOUI@@UAEPAV12@XZ
?IsSiblingsAutoGroupped@SWindow@SOUI@@UAEHXZ
?CreateChildren@SWindow@SOUI@@UAEHVxml_node@pugi@@@Z
?OnColorize@SWindow@SOUI@@MAEXK@Z
?IsContainPoint@SWindow@SOUI@@UBEHABUtagPOINT@@H@Z
?GetClientRect@SWindow@SOUI@@UBEXPAUtagRECT@@@Z
?GetClientRect@SHostWnd@SOUI@@UBE?AVCRect@2@XZ
?GetToolTipText@SWindow@SOUI@@UAE?AV?$TStringT@_WUwchar_traits@SOUI@@@2@XZ
?SetToolTipText@SWindow@SOUI@@UAEXPB_W@Z
?SetWindowTextW@SWindow@SOUI@@UAEXPB_W@Z
?GetWindowTextW@SWindow@SOUI@@UAE?AV?$TStringT@_WUwchar_traits@SOUI@@@2@H@Z
?GetAttribute@SWindow@SOUI@@MBE?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV32@@Z
?DefAttributeProc@SWindow@SOUI@@MAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0H@Z
?InitFromXml@SHostWnd@SOUI@@UAEHVxml_node@pugi@@@Z
?GetName@SWindow@SOUI@@UBEPB_WXZ
?GetID@SWindow@SOUI@@UBEHXZ
?AfterAttribute@SWindow@SOUI@@MAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0HJ@Z
?SetAttribute@SWindow@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0H@Z
?GetObjectType@SHostWnd@SOUI@@UBEHXZ
?GetObjectType@SHostDialog@SOUI@@UBEHXZ
?GetObjectClass@SHostDialog@SOUI@@UBEPB_WXZ
?IsClass@SHostDialog@SOUI@@UBEHPB_W@Z
?DoModal@SHostDialog@SOUI@@UAEHPAUHWND__@@@Z
?onRootResize@SHostWnd@SOUI@@UAE_NPAVEventArgs@2@@Z
?DoFrameEvent@SwndContainerImpl@SOUI@@MAEJIIJ@Z
?GetScale@SHostWnd@SOUI@@MBEHXZ
?GetScriptModule@SHostWnd@SOUI@@MAEPAUIScriptModule@2@XZ
?BuildWndTreeZorder@SwndContainerImpl@SOUI@@MAEXXZ
?MarkWndTreeZorderDirty@SwndContainerImpl@SOUI@@MAEXXZ
?GetMsgLoop@SHostDialog@SOUI@@MAEPAVSMessageLoop@2@XZ
?UnregisterTrackMouseEvent@SwndContainerImpl@SOUI@@MAEHK@Z
?RegisterTrackMouseEvent@SwndContainerImpl@SOUI@@MAEHK@Z
?UnregisterTimelineHandler@SHostWnd@SOUI@@MAEHPAUITimelineHandler@2@@Z
?RegisterTimelineHandler@SHostWnd@SOUI@@MAEHPAUITimelineHandler@2@@Z
?GetAcceleratorMgr@SwndContainerImpl@SOUI@@MAEPAUIAcceleratorMgr@2@XZ
?FrameToHost@SwndContainerImpl@SOUI@@MAEXAAUtagRECT@@@Z
?UpdateTooltip@SHostWnd@SOUI@@MAEXXZ
?UpdateWindow@SHostWnd@SOUI@@MAEHXZ
?OnSetCaretPos@SHostWnd@SOUI@@MAEHHH@Z
?OnShowCaret@SHostWnd@SOUI@@MAEHH@Z
?OnCreateCaret@SHostWnd@SOUI@@MAEHKPAUHBITMAP__@@HH@Z
?GetFocus@SwndContainerImpl@SOUI@@MAEKXZ
?GetHover@SwndContainerImpl@SOUI@@MAEKXZ
?OnSetSwndFocus@SwndContainerImpl@SOUI@@MAEXK@Z
?OnSetSwndCapture@SHostWnd@SOUI@@MAEKK@Z
?OnReleaseSwndCapture@SHostWnd@SOUI@@MAEHXZ
?OnGetSwndCapture@SwndContainerImpl@SOUI@@MAEKXZ
?OnRedraw@SHostWnd@SOUI@@MAEXABVCRect@2@@Z
?OnReleaseRenderTarget@SHostWnd@SOUI@@MAEXPAUIRenderTarget@2@ABVCRect@2@K@Z
?OnGetRenderTarget@SHostWnd@SOUI@@MAEPAUIRenderTarget@2@ABVCRect@2@K@Z
?GetContainerRect@SHostWnd@SOUI@@MAE?AVCRect@2@XZ
?IsSendWheel2Hover@SHostWnd@SOUI@@MBEHXZ
?IsTranslucent@SHostWnd@SOUI@@MBEHXZ
?GetTranslatorContext@SHostWnd@SOUI@@MAEABV?$TStringT@_WUwchar_traits@SOUI@@@2@XZ
?GetHostHwnd@SHostWnd@SOUI@@MAEPAUHWND__@@XZ
?OnFireEvent@SHostWnd@SOUI@@MAEHAAVEventArgs@2@@Z
?RevokeDragDrop@SwndContainerImpl@SOUI@@MAEHK@Z
?RegisterDragDrop@SwndContainerImpl@SOUI@@MAEHKPAUIDropTarget@@@Z
?OnNextFrame@SwndContainerImpl@SOUI@@UAEXXZ
?getSingleton@?$SSingleton@VSApplication@SOUI@@@SOUI@@SAAAVSApplication@2@XZ
?GetLogManager@SApplication@SOUI@@QAEPAUILog4zManager@2@XZ
?getSingletonPtr@?$SSingleton@VSApplication@SOUI@@@SOUI@@SAPAVSApplication@2@XZ
?GetClassNameW@SCheckBox@SOUI@@SAPB_WXZ
?FindChildByName@SWindow@SOUI@@QAEPAV12@PB_WH@Z
?EndDialog@SHostDialog@SOUI@@UAEXH@Z
?IsChecked@SWindow@SOUI@@QAEHXZ
??1SHostDialog@SOUI@@UAE@XZ
??0SHostDialog@SOUI@@QAE@PB_W@Z
?OnCancel@SHostDialog@SOUI@@MAEXXZ
?_HandleEvent@SHostDialog@SOUI@@UAEHPAVEventArgs@2@@Z
?OnLanguageChanged@SWindow@SOUI@@UAEJXZ
?OnScaleChanged@SImageWnd@SOUI@@MAEXH@Z
?SetAttribute@SImageWnd@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0H@Z
?Create@SHostWnd@SOUI@@QAEPAUHWND__@@PAU3@HHHH@Z
?GetObjectType@EventArgs@SOUI@@UBEHXZ
?IsClass@EventArgs@SOUI@@UBEHPB_W@Z
??0EventArgs@SOUI@@QAE@PAV?$SObjectImpl@UIObject@SOUI@@@1@@Z
??1EventArgs@SOUI@@UAE@XZ

utilities

?SetAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJABV?$TStringT@DUchar_traits@SOUI@@@2@0H@Z
?SetAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJPBD0H@Z
?OnInitFinished@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEXVxml_node@pugi@@@Z
?SouiFree@soui_mem_wrapper@SOUI@@SAXPAX@Z
??1?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAE@XZ
??0?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAE@PB_W@Z
??1?$TStringT@DUchar_traits@SOUI@@@SOUI@@QAE@XZ
??0?$TStringT@DUchar_traits@SOUI@@@SOUI@@QAE@PBD@Z
?U82U@CHIconv@@QAE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PBD@Z
?ReadBin@CHBitmap@@QAEHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0JValue@@QAE@N@Z
?Decode@CHBase64@@QAEPBDPBDHPAH@Z
?asFloat@JValue@@QBENXZ
?Digest32@CHMD5@@QAEPBDPBEI@Z
?A2U@CHIconv@@QAE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PBD@Z
??1CHAutoLock@@QAE@XZ
??0CHAutoLock@@QAE@PAVCHLock@@H@Z
?CreateThumb@CHBitmap@@QAE?AV1@HHH@Z
?DumpBin@CHBitmap@@QAEHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetPixelAlpha@CHBitmap@@QAEXJJE@Z
?GetPixel@CHBitmap@@QAEKJJ@Z
?SetPixel@CHBitmap@@QAEXJJK@Z
?Create@CHBitmap@@QAEHHHG@Z
?Create@CHBitmap@@QAEHPBXKHHHK@Z
?isArray@JValue@@QBE_NXZ
?U2A@CHIconv@@QAE?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PB_W@Z
?GetUniqueSavePath@CHiFile@@SA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V23@H@Z
?CreateFolderEx@CHiFile@@SAHPB_WPBU_SECURITY_ATTRIBUTES@@@Z
?Create@CHBitmap@@QAEHPAUHINSTANCE__@@PB_WIHH@Z
??1CHBitmap@@UAE@XZ
??0CHBitmap@@QAE@XZ
?asCString@JValue@@QBEPBDXZ
?SouiMalloc@soui_mem_wrapper@SOUI@@SAPAXI@Z
?IsValid@CHBitmap@@QAEHXZ
?FormatFileSize@CHiFile@@SA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_KI@Z
?GetFileSize@CHiFile@@SA_KPB_W@Z
?Format@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAA?AV12@PB_WZZ
?OpenDialog@CHiFile@@SAHAAV?$vector@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@std@@AAV?$map@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V12@U?$less@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@V?$allocator@U?$pair@$$CBV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V12@@std@@@4@@3@PB_WHPAUHWND__@@@Z
?CvtA2W@SStrCpCvt@SOUI@@SA?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV?$TStringT@DUchar_traits@SOUI@@@2@II@Z
??BJValue@@QBEHXZ
?asString@JValue@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?asInt@JValue@@QBEHXZ
?read@JValue@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAV23@@Z
?URLEncode@CHUtil@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?Encode@CHBase64@@QAEPBDPBDH@Z
??1CHBase64@@QAE@XZ
??0CHBase64@@QAE@XZ
?Encrypt@CBAES@@QAEHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
??1CBAES@@QAE@XZ
??0CBAES@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
??AJValue@@QAEAAV0@I@Z
??BJValue@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?size@JValue@@QBEIXZ
?readPList@JValue@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAV23@@Z
?Request@CHUtil@@SAHPAXHPB_WAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@21ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$vector@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@5@AAV?$map@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V12@U?$less@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@V?$allocator@U?$pair@$$CBV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V12@@std@@@4@@5@AAV45@HPAH@Z
?URLDecode@CHUtil@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?ConcatCopy@?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@IAE_NHPB_WH0@Z
?IsCanceled@CHThread@@QAEHXZ
?GetChannelID@CHUtil@@SA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PB_W@Z
?GetUnixStamp@CHUtil@@SA_JXZ
?write@JValue@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0JValue@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??AJValue@@QAEAAV0@H@Z
?has@JValue@@QBE_NPBD@Z
??0JValue@@QAE@H@Z
??0JValue@@QAE@PBD@Z
??0JValue@@QAE@V?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z
??AJValue@@QAEAAV0@PBD@Z
??4JValue@@QAEAAV0@ABV0@@Z
??1JValue@@QAE@XZ
?AfterAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0HJ@Z
?DefAttributeProc@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0H@Z
?GetAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UBE?AV?$TStringT@_WUwchar_traits@SOUI@@@2@ABV32@@Z
?InitFromXml@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEHVxml_node@pugi@@@Z
?SetAttribute@?$SObjectImpl@UIObject@SOUI@@@SOUI@@UAEJABV?$TStringT@_WUwchar_traits@SOUI@@@2@0H@Z
?Draw@CHBitmap@@QAEHPAUHDC__@@AAUtagRECT@@@Z
??0JValue@@QAE@W4TYPE@0@@Z
?XThread_Post2UI@@YAXABV?$function@$$A6AXXZ@std@@@Z
?GetSysTempFolder@CHiFile@@SA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@XZ
?RemoveFolderEx@CHiFile@@SAHPB_WHH@Z
?Cancel@CHThread@@QAEXXZ
??0CHLock@@QAE@XZ
?SplitCString@CHUtil@@SAXAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@PB_WAAV?$vector@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@@std@@@Z
?Start@CHThread@@QAEHP6AKPAV1@PAX@Z1@Z
?Unlock@CHLock@@QAEXXZ
?Lock@CHLock@@QAEXXZ
?Terminate@CHThread@@QAEXXZ
??1CHLock@@QAE@XZ
??0?$TStringT@_WUwchar_traits@SOUI@@@SOUI@@QAE@XZ
??RCHTraceImplement@@QBAXPB_WZZ
?Start@CHThread@@QAEHV?$function@$$A6AXPAVCHThread@@@Z@std@@@Z
?U82U@CHIconv@@QAE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?U2U8@CHIconv@@QAE?AV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@PB_W@Z
?MsgJoin@CHThread@@QAEXK@Z
?IsRunning@CHThread@@QAEHXZ
??1CHThread@@QAE@XZ
??0CHThread@@QAE@XZ
??1CHIconv@@QAE@XZ
??0CHIconv@@QAE@XZ

shlwapi

PathFindFileNameW
PathFindExtensionW
PathRemoveExtensionW
PathFileExistsW
PathRemoveFileSpecW

kernel32

GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
EnterCriticalSection
LeaveCriticalSection
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
DecodePointer
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
OutputDebugStringA
GetProcessHeap
LoadLibraryW
GetProcAddress
FreeLibrary
GetTickCount
LoadResource
SizeofResource
FindResourceW
FindResourceExW
MultiByteToWideChar
CloseHandle
DeleteFileW
SetEvent
WaitForSingleObject
CreateEventA
Sleep
InterlockedIncrement
InterlockedDecrement
OutputDebugStringW
MoveFileW
MulDiv
HeapSize
LockResource
WideCharToMultiByte

user32

MessageBoxW
GetDC
ReleaseDC
DrawIconEx
DestroyIcon

gdi32

GetDeviceCaps

shell32

ShellExecuteW

devicecontent

?GetRingtoneMaker@@YAPAUIRingtoneMaker@@XZ

iosdevice

IsSupportAppBuy
CreateIAppleHacker
GetITunesCore

msvcp120

??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Future_error_map@std@@YAPBDH@Z
?_Xbad_function_call@std@@YAXXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Throw_C_error@std@@YAXH@Z
_Thrd_detach
?_Throw_Cpp_error@std@@YAXH@Z
?_BADOFF@std@@3_JB
?uncaught_exception@std@@YA_NXZ
_Mtx_unlock
_Mtx_lock
_Mtx_destroy
_Mtx_init
??Bid@locale@std@@QAEIXZ
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
??0_Pad@std@@QAE@XZ
?_Release@_Pad@std@@QAEXXZ
??1_Pad@std@@QAE@XZ
?_Launch@_Pad@std@@QAEXPAU_Thrd_imp_t@@@Z

msvcr120

??1exception@std@@UAE@XZ
??3@YAXPAX@Z
_snwprintf_s
memmove_s
free
??2@YAPAXI@Z
memmove
_purecall
memcpy_s
wcsnlen
??_V@YAXPAX@Z
sprintf_s
_wtoi
wmemcpy_s
wcsncpy_s
wcsstr
malloc
_wcsicmp
_vscwprintf
vswprintf_s
calloc
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
?what@exception@std@@UBEPBDXZ
?terminate@@YAXXZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
round
roundf
_wcslwr_s
wcsrchr
iswspace
wcschr
_CxxThrowException
__CxxFrameHandler3
memcpy
??1type_info@@UAE@XZ
_lock
_except1
_unlock
_calloc_crt
__dllonexit
_onexit
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_except_handler4_common
__clean_type_info_names_internal
memset
floor
_recalloc

wininet

InternetOpenW
InternetCloseHandle

Exports

Exports

??0DownloadCtlr@@QAE@XZ
??1DownloadCtlr@@QAE@XZ
??_7DownloadCtlr@@6BIDevProgress@@@
??_7DownloadCtlr@@6BIDownloader@@@
?AddLocalItems@DownloadCtlr@@UAE_NV?$vector@U?$pair@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V12@@std@@V?$allocator@U?$pair@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V12@@std@@@2@@std@@@Z
?AddObserver@DownloadCtlr@@UAEXPAUIDownStatus@@@Z
?CheckAccount@DownloadCtlr@@AAEHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0HPAH@Z
?CreateDownloadDlg@DownloadCtlr@@QAEXPAUHWND__@@@Z
?CreateDownloader@@YAPAUIDownloader@@XZ
?DeleteTask@DownloadCtlr@@QAE_NV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_N@Z
?DownStatusChanged@DownloadCtlr@@QAEXHV?$vector@U?$pair@PAXUDownTaskInfo@@@std@@V?$allocator@U?$pair@PAXUDownTaskInfo@@@std@@@2@@std@@@Z
?Download@DownloadCtlr@@UAE_NV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@00W4DL_RES_TYPE@@@Z
?DownloadAndImport@DownloadCtlr@@UAE_NV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0000W4DL_RES_TYPE@@V?$function@$$A6A_NHHV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0@Z@std@@0@Z
?DownloadAndImport@DownloadCtlr@@UAE_NV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0@Z
?DownloadAndImport@DownloadCtlr@@UAE_NV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?DownloadDelete@DownloadCtlr@@UAE_NV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?DownloadPause@DownloadCtlr@@UAE_NV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?DownloadResume@DownloadCtlr@@UAE_NV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?Downloader@DownloadCtlr@@QAE?AV?$shared_ptr@VDownloadCoreAria2@@@std@@XZ
?FetchArtwork@DownloadCtlr@@QAE_NPAUDLItem@@AAH@Z
?GetDownloadedInfo@DownloadCtlr@@UAE?AVJValue@@V?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@Z
?GetRealURL@DownloadCtlr@@AAE?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V23@@Z
?HandleAppAuth@DownloadCtlr@@QAEXPAUDLItem@@@Z
?ImportItem@DownloadCtlr@@QAEXPAUDLItem@@@Z
?ImportToDev@DownloadCtlr@@QAEXPAUDLItem@@PAUIDevice@@@Z
?Init@DownloadCtlr@@QAE_NXZ
?NotifyWeb@DownloadCtlr@@QAEXPAUDLItem@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@1@Z
?OnDownloadUpdate@DownloadCtlr@@QAEXV?$vector@UDownTaskInfo@@V?$allocator@UDownTaskInfo@@@std@@@std@@@Z
?PauseOrResumTask@DownloadCtlr@@QAEXV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?PauseTask@DownloadCtlr@@QAEXV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?PurcheseApp@DownloadCtlr@@AAE_NPAUDLItem@@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?PurcheseAppImpl@DownloadCtlr@@AAE_NPAUDLItem@@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?PurcheseVIPApp@DownloadCtlr@@AAE_NPAUDLItem@@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?PurcheseVIPAppImpl@DownloadCtlr@@AAE_NPAUDLItem@@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?RemoveObserver@DownloadCtlr@@UAEXPAUIDownStatus@@@Z
?ReportAppInstall@DownloadCtlr@@QAEXPAUDLItem@@PAUIDevice@@@Z
?ResumTask@DownloadCtlr@@QAEXV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?SetSpeedLimit@DownloadCtlr@@UAEXH@Z
?ShowDownloadBox@DownloadCtlr@@UAEXPAUHWND__@@H@Z
?Uninit@DownloadCtlr@@UAEXXZ
?UpdateDownIconState@DownloadCtlr@@QAEXXZ
?UpdateList@DownloadCtlr@@QAEXABV?$set@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@U?$less@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@std@@V?$allocator@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@4@@std@@@Z
?progress@DownloadCtlr@@UAE_NPAUIDevice@@W4DL_RES_TYPE@@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@H2@Z

Sections

.text
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

13ba652712dceacda88d5754022fc52d

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

0e:c7:89:17:b2:30:2a:52:2b:d5:c9:eb:12:4a:6c:c7Certificate

Extended Key Usages

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

01:35:d4:a4:de:d0:85:ce:eb:9c:f8:15:90:48:21:4dCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

db:3c:ae:a1:f8:8a:27:7d:db:87:5d:cb:b6:f5:21:ab:a1:ba:0d:83:00:f4:de:51:e9:af:b5:48:21:a0:5f:11Signer

6a:5a:14:c5:8d:ba:5a:93:c7:eb:9f:3d:a7:28:84:ec:5f:75:d6:00Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

libcurl

globalinterface

soui

utilities

shlwapi

kernel32

user32

gdi32

shell32

devicecontent

iosdevice

msvcp120

msvcr120

wininet

Exports

Exports

Sections

.text Size: 191KB - Virtual size: 191KB

.rdata Size: 70KB - Virtual size: 70KB

.data Size: 11KB - Virtual size: 11KB

.rsrc Size: 1024B - Virtual size: 736B

.reloc Size: 15KB - Virtual size: 14KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

0e:c7:89:17:b2:30:2a:52:2b:d5:c9:eb:12:4a:6c:c7
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

01:35:d4:a4:de:d0:85:ce:eb:9c:f8:15:90:48:21:4d
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

db:3c:ae:a1:f8:8a:27:7d:db:87:5d:cb:b6:f5:21:ab:a1:ba:0d:83:00:f4:de:51:e9:af:b5:48:21:a0:5f:11
Signer

6a:5a:14:c5:8d:ba:5a:93:c7:eb:9f:3d:a7:28:84:ec:5f:75:d6:00
Signer

.text
Size: 191KB - Virtual size: 191KB

.rdata
Size: 70KB - Virtual size: 70KB

.data
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 1024B - Virtual size: 736B

.reloc
Size: 15KB - Virtual size: 14KB