4b2d2b3019a17e9bf60c10e1dce804b8bc0784ee4439e4c335283e9c4834cb58_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

4b2d2b3019a17e9bf60c10e1dce804b8bc0784ee4439e4c335283e9c4834cb58_NeikiAnalytics.exe
Size

886KB
MD5

a38f666aeaddc181c7a5ca911e117e90
SHA1

e9247053bdcdb9f3633194bff5a09bb3e5cc33db
SHA256

4b2d2b3019a17e9bf60c10e1dce804b8bc0784ee4439e4c335283e9c4834cb58
SHA512

00eb7391830854f36f81573141a9f95d4e5ceca7979732d37d4f9f46f7e53c36856c2f31d4ee9b08c0614a55d26d461f9a3df55fb9c935347bee87946a490074
SSDEEP

24576:FCDHLL09mRRzuOw3/NpguaD3weTRQ6jjBPHcI06:FCDrLamRxuOwTgu2weTR5j1l06

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b2d2b3019a17e9bf60c10e1dce804b8bc0784ee4439e4c335283e9c4834cb58_NeikiAnalytics.exe

Files

4b2d2b3019a17e9bf60c10e1dce804b8bc0784ee4439e4c335283e9c4834cb58_NeikiAnalytics.exe
.dll windows:5 windows x86 arch:x86

47a550876717ace3452e5826da06fbfc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

zwcad.exe

zds_load_dialog
zds_add_list
zds_action_tile
zds_client_data_tile
zds_start_list
zds_set_tile
zds_get_tile
zcedSSGet
zcedEntSel
zcedSetVar
zcedGetVar
zcedUndef
zcedDefun
zcedRetStr
zcedZrxUnload
zcedZrxLoad
zcedInitGet
zdsw_zcadMainWnd
zds_done_positioned_dialog
zds_unload_dialog
zcdbEntNext
zds_start_dialog
?zcedGetZcadDwgView@@YAPAVCView@@XZ
zcedUsrBrk
zcdbInters
zcedInvoke
zds_end_list
zds_term_dialog
zcedRetVoid
zcedGetFunCode
zcedMenuCmd
zcedIsMenuGroupLoaded
zcedGetAppName
zcedGetReal
zcedGetPoint
zcedGetCorner
zcdbTblSearch
zcdbTblNext
zcedFindFile
zcedPrompt
zcedGetKword
zcedTrans
?zcedRestoreStatusBar@@YAXXZ
?zcedSetStatusBarProgressMeter@@YAHPB_WHH@Z
zcedZrxLoaded
?zcedSetStatusBarProgressMeterPos@@YAHH@Z
zcdbEntMake
zcedAlert
zcedCommand
?zcedGetRGB@@YAKH@Z
zcdbEntMod
?zcDocManagerPtr@@YAPAVZcApDocManager@@XZ
zcdbEntGet
zcedSSAdd
zcdbEntLast
zcdbEntDel
zcedSSName
zcedSSFree
zcedSSLength
zds_new_positioned_dialog

zwdatabase

ord8472
ord1234
ord243
ord4420
ord889
ord1179
ord891
ord546
ord1178
ord1183
ord890
ord368
ord551
ord837
ord4538
ord586
ord478
ord426
ord425
ord429
ord428
ord490
ord241
ord8496
ord156
ord239
ord281
ord588
ord530
ord342
ord356
ord651
ord974
ord1189
ord1203
ord946
ord543
ord541
ord538
ord535
ord805
ord611
ord580
ord259
ord943
ord150
ord1103
ord1121
ord9134
ord9131
ord9132
ord9133
ord9127
ord9124
ord9129
ord9126
ord9135
ord149
ord439
ord27
ord347
ord24
ord12
ord48
ord8973
ord348
ord153
ord892
ord1082
ord5738
ord839
ord523
ord354
ord310
ord155
ord389
ord407
ord59
ord28
ord721
ord670
ord1000
ord1091
ord1085
ord1086
ord1088
ord1089
ord1093
ord1102
ord784
ord1206
ord1050
ord321
ord917
ord913
ord1217
ord415
ord1197
ord370
ord406
ord558
ord646
ord848
ord791
ord1090
ord795
ord794
ord1157
ord912
ord838
ord793
ord615
ord614
ord414
ord7002
ord5985
ord5986
ord5987
ord8333
ord2
ord5058
ord26
ord29
ord5729
ord5728
ord5727
ord4909
ord4908
ord5831
ord4796

mfc100

ord12344
ord12438
ord4554
ord12170
ord2611
ord3354
ord1316
ord3253
ord12285
ord4785
ord3970
ord9475
ord12868
ord4385
ord4389
ord4393
ord4381
ord4410
ord4373
ord1514
ord1507
ord1509
ord1503
ord1496
ord11188
ord11190
ord12644
ord2847
ord8351
ord9994
ord6217
ord11154
ord8070
ord13294
ord10883
ord3395
ord11025
ord8231
ord13973
ord13972
ord14045
ord14062
ord14058
ord14060
ord14061
ord14059
ord2417
ord7349
ord2878
ord2881
ord12535
ord5534
ord2838
ord3755
ord1263
ord5777
ord8222
ord2742
ord3738
ord915
ord5784
ord8224
ord2744
ord3741
ord7861
ord2613
ord3429
ord919
ord6314
ord3254
ord3373
ord3977
ord13219
ord4283
ord946
ord316
ord381
ord8305
ord11107
ord8235
ord2416
ord12531
ord5532
ord2752
ord2973
ord2974
ord3620
ord10360
ord2406
ord4415
ord4406
ord4377
ord4419
ord4398
ord4364
ord4368
ord4401
ord3991
ord13980
ord3984
ord2661
ord13302
ord7074
ord13300
ord6128
ord10672
ord12482
ord5253
ord2338
ord11060
ord3484
ord2945
ord2944
ord2846
ord11103
ord4622
ord4903
ord5095
ord8439
ord4881
ord5123
ord4625
ord4774
ord4606
ord5444
ord6897
ord6898
ord6888
ord4772
ord7357
ord9286
ord8304
ord6090
ord895
ord4345
ord310
ord1982
ord901
ord265
ord266
ord2050
ord1948
ord408
ord1929
ord1294
ord1296
ord10007
ord8137
ord11067
ord5204
ord6678

msvcr100

_getpid
vfprintf
strtol
_mbsupr
_beginthreadex
mbtowc
_pctype
__clean_type_info_names_internal
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
_lfind
_strupr
memmove
_isctype
__mb_cur_max
wcslen
fgetpos
strcpy
strlen
atol
_gcvt
_chdir
_strnicmp
_mkdir
_time32
_ctime32
strncat
_access
localeconv
_localtime64
_difftime64
_strlwr
_finite
_gmtime64
_itoa
_getdrive
_chdrive
_findfirst64i32
_findnext64i32
_findclose
_makepath
_strdup
srand
rand
_time64
getenv
_getcwd
strstr
__CxxFrameHandler3
setlocale
sprintf
memset
strncpy
strncmp
strchr
fprintf
atof
fgets
strtok
feof
qsort
_CIsqrt
calloc
fclose
atoi
fopen
free
_stricmp
_purecall
_CIatan
strrchr
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
rename
_splitpath
_controlfp
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
_unlink
sscanf
_except_handler3
clock
wcstombs
memcpy
bsearch
fread
fwrite
fseek
mbstowcs
_CIlog
_CIexp
malloc
_CIcos
_CIsin
freopen
__iob_func
abort
vsprintf
realloc
toupper
fgetc
strerror
_errno
isspace

kernel32

SetEvent
GlobalAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
GlobalFree
MultiByteToWideChar
GetModuleHandleA
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
GetVersionExA
CreateFileA
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetStdHandle
AllocConsole
lstrlenA
LocalAlloc
LocalFree
SetDllDirectoryA
LoadLibraryExA
GetLastError
FindFirstFileA
FindNextFileA
WinExec
DeleteFileA
CreateMutexA
ReleaseMutex
CloseHandle
RaiseException
GetPrivateProfileIntA
GetPrivateProfileStringA
QueryDosDeviceA
DefineDosDeviceA
DeviceIoControl
VerSetConditionMask
VerifyVersionInfoA
ResetEvent
GetExitCodeThread
TerminateThread
WaitForMultipleObjects
WideCharToMultiByte
OpenEventA
FlushViewOfFile
GetTempPathA
OpenFileMappingA
CreateEventA
GetVersion
GetSystemDirectoryA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
CreateProcessA
Sleep
GetFileSize
lstrcmpA

user32

GetActiveWindow
wsprintfA
MessageBoxA
GetSystemMetrics
EnumDisplayMonitors
GetMonitorInfoA
SetForegroundWindow
GetWindowRect
IsWindow
SendMessageA
EnableWindow
GetDesktopWindow
FindWindowA
RegisterWindowMessageA

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

advapi32

GetUserNameA
RegEnumKeyExA
RegOpenKeyA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

SHGetPathFromIDListA
ShellExecuteA
ShellExecuteExA
SHGetMalloc
SHBrowseForFolderA
SHGetSpecialFolderPathA

shlwapi

SHDeleteKeyA

ole32

CoInitialize
CoUninitialize

aplitopgeo8

ConvertirCoordenadas
EstablecerOrigen
EstablecerDestino
SeleccionSRCProyectadoOrigen
ExisteSRCProyectado
ProyeccionEquivalente
SeleccionSRCProyectadoDestino
IniciarCalculadora

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

ncsecwmdt

?ReadLineBIL@CNCSJP2FileView@@UAE?AW4NCSEcwReadStatus@@PAPA_K@Z
?ReadLineBIL@CNCSJP2FileView@@UAE?AW4NCSEcwReadStatus@@PAPAC@Z
?ReadLineBIL@CNCSJP2FileView@@UAE?AW4NCSEcwReadStatus@@PAPAF@Z
?ReadLineBIL@CNCSJP2FileView@@UAE?AW4NCSEcwReadStatus@@PAPAH@Z
?ReadLineBIL@CNCSJP2FileView@@UAE?AW4NCSEcwReadStatus@@PAPA_J@Z
?ReadLineBIL@CNCSJP2FileView@@UAE?AW4NCSEcwReadStatus@@PAPAM@Z
?ReadLineBIL@CNCSJP2FileView@@UAE?AW4NCSEcwReadStatus@@PAPAN@Z
?ReadLineBIL@CNCSJP2FileView@@UAE?AW4NCSEcwReadStatus@@W4NCSEcwCellType@@GPAPAXPAI@Z
?SetView@CNCSJP2FileView@@UAE?AVCNCSError@@IPAIIIIIIINNNN@Z
?Close@CNCSJP2FileView@@UAE?AVCNCSError@@_N@Z
?Open@CNCSJP2FileView@@UAE?AVCNCSError@@PAD_N1@Z
?Open@CNCSJP2FileView@@UAE?AVCNCSError@@PAVCNCSJPCIOStream@@_N@Z
?Work@CNCSJP2FileView@@EAEXPAX@Z
?UnStuff@CNCSJPCIOStream@@UAE_NAA_N@Z
?Stuff@CNCSJPCIOStream@@UAE_N_N@Z
?FlushBitStuff@CNCSJPCIOStream@@UAE_NXZ
?ResetBitStuff@CNCSJPCIOStream@@UAE_NXZ
?WriteIEEE8@CNCSJPCIOStream@@UAE_NN@Z
?WriteIEEE4@CNCSJPCIOStream@@UAE_NM@Z
?WriteINT64@CNCSJPCIOStream@@UAE_N_J@Z
?WriteINT32@CNCSJPCIOStream@@UAE_NH@Z
?WriteINT16@CNCSJPCIOStream@@UAE_NF@Z
?WriteINT8@CNCSJPCIOStream@@UAE_NC@Z
?WriteUINT64@CNCSJPCIOStream@@UAE_N_K@Z
?WriteUINT32@CNCSJPCIOStream@@UAE_NI@Z
?WriteUINT16@CNCSJPCIOStream@@UAE_NG@Z
?WriteUINT8@CNCSJPCIOStream@@UAE_NE@Z
?ReadINT16@CNCSJPCIOStream@@UAE_NAAF@Z
?ReadIEEE8@CNCSJPCIOStream@@UAE_NAAN@Z
?ReadIEEE4@CNCSJPCIOStream@@UAE_NAAM@Z
?ReadINT64@CNCSJPCIOStream@@UAE_NAA_J@Z
?ReadINT32@CNCSJPCIOStream@@UAE_NAAH@Z
?ReadUINT64@CNCSJPCIOStream@@UAE_NAA_K@Z
?ReadUINT32@CNCSJPCIOStream@@UAE_NAAI@Z
?ReadUINT16@CNCSJPCIOStream@@UAE_NAAG@Z
?Write@CNCSJPCIOStream@@UAE_NPAXI@Z
?Read@CNCSJPCIOStream@@UAE_NPAXI@Z
?IsWrite@CNCSJPCIOStream@@UAE_NXZ
?UnMark@CNCSJPCIOStream@@UAE_NXZ
?Rewind@CNCSJPCIOStream@@UAE_NXZ
??1CNCSJPCGlobalLock@@UAE@XZ
??1CNCSJPCIOStream@@UAE@XZ
??1CNCSJP2FileViewVector@CNCSJP2FileView@@UAE@XZ
??1CNCSJP2FileView@@UAE@XZ
??1CNCSFile@@UAE@XZ
?HasAlpha@CNCSRenderer@@QAE_NAAH@Z
??1CNCSRenderer@@UAE@XZ
?Close@CNCSFile@@QAE?AW4NCSError@@E@Z
?Open@CNCSFile@@QAE?AW4NCSError@@PADEE@Z
??0CNCSRenderer@@QAE@XZ
??4CNCSJPCBuffer@@QAEAAV0@ABV0@@Z
??0CNCSJPCBuffer@@QAE@ABV0@@Z
??0ParameterValuePair@CNCSJP2FileView@@QAE@ABV01@@Z
??1CNCSJPCBuffer@@UAE@XZ
?Release@CNCSJPCBuffer@@QAEXXZ
?Assign@CNCSJPCBuffer@@QAE_NHHIIW4Type@1@PAXH_N@Z
?ReadLineBIL@CNCSJP2FileView@@UAE?AW4NCSEcwReadStatus@@PAPAI@Z
?ReadLineBIL@CNCSJP2FileView@@UAE?AW4NCSEcwReadStatus@@PAPAG@Z
?ReadLineBIL@CNCSJP2FileView@@UAE?AW4NCSEcwReadStatus@@PAPAE@Z
?ReadLineRGB@CNCSJP2FileView@@UAE?AW4NCSEcwReadStatus@@PAE@Z
?ReadLineBGR@CNCSJP2FileView@@UAE?AW4NCSEcwReadStatus@@PAE@Z
?ReadLineRGBA@CNCSJP2FileView@@UAE?AW4NCSEcwReadStatus@@PAI@Z
?ReadLineBGRA@CNCSJP2FileView@@UAE?AW4NCSEcwReadStatus@@PAI@Z
?ReadLineARGB@CNCSJP2FileView@@UAE?AW4NCSEcwReadStatus@@PAI@Z
?ReadLineABGR@CNCSJP2FileView@@UAE?AW4NCSEcwReadStatus@@PAI@Z
?WriteLineBIL@CNCSJP2FileView@@UAE?AVCNCSError@@W4NCSEcwCellType@@GPAPAXPAI@Z
?RefreshUpdateEx@CNCSJP2FileView@@UAE?AW4NCSEcwReadStatus@@PAUNCSFileViewSetInfo@@@Z
?Write@CNCSJP2FileView@@UAE?AVCNCSError@@XZ
?WriteReadLine@CNCSJP2FileView@@UAE?AVCNCSError@@IPAPAX@Z
?WriteStatus@CNCSJP2FileView@@UAEXI@Z
?WriteCancel@CNCSJP2FileView@@UAE_NXZ
?GetFileViewSetInfo@CNCSJP2FileView@@UAEPAUNCSFileViewSetInfo@@XZ
?GetFileInfo@CNCSJP2FileView@@UAEPAUNCSFileViewFileInfoEx@@XZ
?SetFileInfo@CNCSJP2FileView@@UAE?AVCNCSError@@AAUNCSFileViewFileInfoEx@@@Z
?GetUUIDBox@CNCSJP2FileView@@UAEPAVCNCSJP2Box@@VNCSUUID@@PAV2@@Z
?GetXMLBox@CNCSJP2FileView@@UAEPAVCNCSJP2Box@@PAV2@@Z
?GetBox@CNCSJP2FileView@@UAEPAVCNCSJP2Box@@IPAV2@@Z
?AddBox@CNCSJP2FileView@@UAE?AVCNCSError@@PAVCNCSJP2Box@@@Z
?OpenForWrite@CNCSJP2FileView@@MAE?AVCNCSError@@PADPAVCNCSJPCIOStream@@_N@Z
?RefreshUpdateEx@CNCSFile@@UAE?AW4NCSEcwReadStatus@@PAUNCSFileViewSetInfo@@@Z
?RefreshUpdate@CNCSFile@@UAEXPAUNCSFileViewSetInfo@@@Z
?ReadLineBIL@CNCSRenderer@@UAE?AW4NCSEcwReadStatus@@PAPAE@Z
?ReadLineRGB@CNCSRenderer@@UAE?AW4NCSEcwReadStatus@@PAE@Z
?ReadLineBGR@CNCSRenderer@@UAE?AW4NCSEcwReadStatus@@PAE@Z
??0CNCSJPCBuffer@@QAE@XZ
?Copy@CNCSJPCBuffer@@SA_NIIPAXHPBXHW4Type@1@@Z
?Work@CNCSJP2FileViewVector@CNCSJP2FileView@@UAEXPAX@Z
?SetBuffers@CNCSJPCBufferCache@@UAEXI@Z
?GetBuffer@CNCSJPCBufferCache@@UAEPAVCNCSJPCBuffer@@I@Z
?FindBuffer@CNCSJPCBufferCache@@UAEPAVCNCSJPCBuffer@@AAIAAVCNCSJPCRect@@AA_NW4Type@2@@Z
?Open@CNCSJPCIOStream@@UAE?AVCNCSError@@PAD_N@Z
?Close@CNCSJPCIOStream@@UAE?AVCNCSError@@XZ
?Seek@CNCSJPCIOStream@@UAE_NXZ
?Seek@CNCSJPCIOStream@@UAE_N_JW4Origin@1@@Z
?Tell@CNCSJPCIOStream@@UAE_JXZ
?Size@CNCSJPCIOStream@@UAE_JXZ
?Mark@CNCSJPCIOStream@@UAE_NXZ

ncsutilmdt

?DisableStats@CNCSThread@@UAEXXZ
??1CNCSError@@QAE@XZ
??4CNCSError@@QAEAAV0@ABV0@@Z
??1CNCSEvent@@UAE@XZ
??0CNCSEvent@@QAE@_N0PAD@Z
??0CNCSError@@QAE@ABV0@@Z
??0CNCSError@@QAE@W4NCSError@@PADHW4NCSLogLevel@CNCSLog@@PBD@Z
??1CNCSLog@@UAE@XZ
?Work@CNCSUpdateLogConfigThread@CNCSLog@@UAEXPAX@Z
??0CNCSThread@@QAE@XZ
??1CNCSThread@@UAE@XZ
?GetSysID@CNCSThread@@UAEKXZ
?GetID@CNCSThread@@UAEIXZ
?Lock@CNCSMutex@@UAEXXZ
?TryLock@CNCSMutex@@UAE_NXZ
?UnLock@CNCSMutex@@UAEXXZ
??1CNCSMutex@@UAE@XZ
NCSGetTimeStampMs
?Spawn@CNCSThread@@UAE_NPAX_N@Z
?Exit@CNCSThread@@UAEXH@Z
?Suspend@CNCSThread@@UAEXXZ
?Resume@CNCSThread@@UAEXXZ
?GetCurrent@CNCSThread@@UAEPAIXZ
?GetStats@CNCSThread@@UAE?AUNCSThreadStats@@XZ
?EnableStats@CNCSThread@@UAEXXZ
?Stop@CNCSThread@@UAE_N_N@Z
?IsRunning@CNCSThread@@UAE_NXZ
?IsSuspended@CNCSThread@@UAE_NXZ
?ThreadYield@CNCSThread@@UAE_NXZ
?SetPriority@CNCSThread@@UAE_NW4NCSThreadPriority@@@Z
?GetPriority@CNCSThread@@UAE?AW4NCSThreadPriority@@XZ
?Terminate@CNCSThread@@UAE_NXZ
?Run@CNCSThread@@UAE_NXZ

tcpimagen8

AjustarBrillo
AjustarContraste
AjustarIntensidad
AjustarSaturacion
AjustarGamma
AjustarBalance
ObtenerContorno
SetIncognitasInversaAfin
TamanyoImagen
VoltearHorizontal
GetRGB
GetAnchoAlto
OpenImagen
AplicarRubberSheetImagen
AplicarDeformacionImagen
Recortar
ObtenerEXIF
PegarImagenes
VoltearVertical
ConvertirResolucionColor
ConvertirEscalaGrises
ConvertirFichero
EstablecerPathEjecutable
LeerTodosEXIF
EstablecerPathAplicacion
CloseImagen

ws2_32

closesocket
bind
WSAGetLastError
getpeername
recv
send
connect
sendto
gethostname
WSAStartup
getsockname

zwgeometry

??0ZcGeLine3d@@QAE@ABVZcGePoint3d@@ABVZcGeVector3d@@@Z
??0ZcGeLine3d@@QAE@ABVZcGePoint3d@@0@Z
?closestPointTo@ZcGeCurve3d@@QBE?AVZcGePoint3d@@ABV1@AAV2@ABVZcGeTol@@@Z
?distanceTo@ZcGeCurve3d@@QBENABVZcGePoint3d@@ABVZcGeTol@@@Z
??1ZcGeEntity3d@@QAE@XZ
??1ZcGeLine3d@@QAE@XZ
?crossProduct@ZcGeVector3d@@QBE?AV1@ABV1@@Z
?gTol@ZcGeContext@@2VZcGeTol@@A
??0ZcGePoint3d@@QAE@XZ
?normal@ZcGeVector3d@@QBE?AV1@ABVZcGeTol@@@Z

Exports

Exports

??0?$TNCSCachedValue@H@@QAE@ABV0@@Z
??0?$TNCSCachedValue@H@@QAE@XZ
??0?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAE@ABV01@@Z
??0?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAE@V?$allocator@PAVCNCSJP2FileView@@@1@@Z
??0?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAE@$$QAV01@@Z
??0?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAE@ABV01@@Z
??0?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAE@ABV?$allocator@PAVCNCSJP2FileView@@@1@@Z
??0?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAE@I@Z
??0?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAE@IABQAVCNCSJP2FileView@@@Z
??0?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAE@IABQAVCNCSJP2FileView@@ABV?$allocator@PAVCNCSJP2FileView@@@1@@Z
??0?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAE@XZ
??0CNCSEvent@@QAE@ABV0@@Z
??0CNCSFile@@QAE@ABV0@@Z
??0CNCSJP2FileView@@QAE@ABV0@@Z
??0CNCSJP2FileViewVector@CNCSJP2FileView@@QAE@ABV01@@Z
??0CNCSJP2FileViewVector@CNCSJP2FileView@@QAE@XZ
??0CNCSJPCBufferCache@@QAE@ABV0@@Z
??0CNCSJPCBufferCache@@QAE@XZ
??0CNCSJPCGlobalLock@@QAE@ABV0@@Z
??0CNCSJPCIOStream@@QAE@ABV0@@Z
??0CNCSJPCRect@@QAE@ABV0@@Z
??0CNCSJPCRect@@QAE@HHHH@Z
??0CNCSJPCRect@@QAE@HHII@Z
??0CNCSJPCRect@@QAE@XZ
??0CNCSLog@@QAE@ABV0@@Z
??0CNCSMutex@@QAE@ABV0@@Z
??0CNCSMutexLock@@QAE@ABV0@@Z
??0CNCSMutexLock@@QAE@PAVCNCSMutex@@@Z
??0CNCSObjectLife@CNCSObject@@QAE@AA_J@Z
??0CNCSObjectLife@CNCSObject@@QAE@ABV01@@Z
??0CNCSObjectLife@CNCSObject@@QAE@PA_J@Z
??0CNCSRenderer@@QAE@ABV0@@Z
??0CNCSThread@@QAE@ABV0@@Z
??0CNCSUpdateLogConfigThread@CNCSLog@@QAE@ABV01@@Z
??0CNCSUpdateLogConfigThread@CNCSLog@@QAE@XZ
??0NCSUUID@@QAE@ABV0@@Z
??0NCSUUID@@QAE@QBE@Z
??0NCSUUID@@QAE@XZ
??1?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAE@XZ
??1?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAE@XZ
??1CNCSJPCBufferCache@@UAE@XZ
??1CNCSJPCRect@@UAE@XZ
??1CNCSMutexLock@@UAE@XZ
??1CNCSObjectLife@CNCSObject@@UAE@XZ
??1CNCSUpdateLogConfigThread@CNCSLog@@UAE@XZ
??1NCSUUID@@UAE@XZ
??4?$TNCSCachedValue@H@@QAEAAHABH@Z
??4?$TNCSCachedValue@H@@QAEAAV0@ABV0@@Z
??4?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEAAV01@ABV01@@Z
??4?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEAAV01@$$QAV01@@Z
??4?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEAAV01@ABV01@@Z
??4CNCSEvent@@QAEAAV0@ABV0@@Z
??4CNCSFile@@QAEAAV0@ABV0@@Z
??4CNCSJP2Box@@QAEAAV0@ABV0@@Z
??4CNCSJP2FileView@@QAEAAV0@ABV0@@Z
??4CNCSJP2FileViewVector@CNCSJP2FileView@@QAEAAV01@ABV01@@Z
??4CNCSJPCBufferCache@@QAEAAV0@ABV0@@Z
??4CNCSJPCGlobalLock@@QAEAAV0@ABV0@@Z
??4CNCSJPCIOStream@@QAEAAV0@ABV0@@Z
??4CNCSJPCRect@@QAEAAV0@ABV0@@Z
??4CNCSLog@@QAEAAV0@ABV0@@Z
??4CNCSMutex@@QAEAAV0@ABV0@@Z
??4CNCSMutexLock@@QAEAAV0@ABV0@@Z
??4CNCSObject@@QAEAAV0@ABV0@@Z
??4CNCSObjectLife@CNCSObject@@QAEAAV01@ABV01@@Z
??4CNCSRenderer@@QAEAAV0@ABV0@@Z
??4CNCSThread@@QAEAAV0@ABV0@@Z
??4CNCSUpdateLogConfigThread@CNCSLog@@QAEAAV01@ABV01@@Z
??4NCSUUID@@QAEAAV0@ABV0@@Z
??4ParameterValuePair@CNCSJP2FileView@@QAEAAV01@ABV01@@Z
??4SystemInfo@CNCSJPCBuffer@@QAEAAV01@ABV01@@Z
??8?$TNCSCachedValue@H@@QBE_NABV0@@Z
??8CNCSError@@QAE_NABV0@@Z
??8CNCSError@@QAE_NW4NCSError@@@Z
??8CNCSJPCRect@@QBE_NABV0@@Z
??8NCSUUID@@QAE_NABV0@@Z
??9?$TNCSCachedValue@H@@QBE_NABV0@@Z
??9CNCSError@@QAE_NABV0@@Z
??9CNCSError@@QAE_NW4NCSError@@@Z
??9CNCSJPCRect@@QBE_NABV0@@Z
??9NCSUUID@@QAE_NABV0@@Z
??A?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEAAPAVCNCSJP2FileView@@I@Z
??A?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBEABQAVCNCSJP2FileView@@I@Z
??B?$TNCSCachedValue@H@@QAEHXZ
??M?$TNCSCachedValue@H@@QBE_NABV0@@Z
??MCNCSJPCRect@@QBE_NABV0@@Z
??_7CNCSEvent@@6B@
??_7CNCSFile@@6B@
??_7CNCSJP2FileView@@6B@
??_7CNCSJP2FileViewVector@CNCSJP2FileView@@6B@
??_7CNCSJPCBufferCache@@6B@
??_7CNCSJPCGlobalLock@@6B@
??_7CNCSJPCIOStream@@6B@
??_7CNCSJPCRect@@6B@
??_7CNCSLog@@6B@
??_7CNCSMutex@@6B@
??_7CNCSMutexLock@@6B@
??_7CNCSObjectLife@CNCSObject@@6B@
??_7CNCSRenderer@@6B@
??_7CNCSThread@@6B@
??_7CNCSUpdateLogConfigThread@CNCSLog@@6B@
??_7NCSUUID@@6B@
??_F?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEXXZ
??_FCNCSError@@QAEXXZ
??_FCNCSEvent@@QAEXXZ
??_FCNCSObjectLife@CNCSObject@@QAEXXZ
?AddDynamicNode@CNCSJP2FileView@@IAEXPAVCNCSJPCNode@@@Z
?Border@CNCSJPCBuffer@@SAIW4Type@1@@Z
?Cached@?$TNCSCachedValue@H@@QAE_NXZ
?CreatedAt@CNCSObjectLife@CNCSObject@@QAE_JXZ
?GetError@CNCSJPCIOStream@@UAE?AVCNCSError@@XZ
?GetErrorNumber@CNCSError@@QAE?AW4NCSError@@XZ
?GetFlags@CNCSJPCBuffer@@QAEIXZ
?GetHeight@CNCSJPCRect@@UAEIXZ
?GetName@CNCSJPCIOStream@@UAEPBDXZ
?GetPtr@CNCSJPCBuffer@@QAEPAXHH@Z
?GetPtr@CNCSJPCBuffer@@QAEPAXXZ
?GetStep@CNCSJPCBuffer@@QAEIXZ
?GetStepBytes@CNCSJPCBuffer@@QAEIXZ
?GetType@CNCSJPCBuffer@@QAE?AW4Type@1@XZ
?GetWidth@CNCSJPCRect@@UAEIXZ
?GetX0@CNCSJPCRect@@UAEHXZ
?GetX1@CNCSJPCRect@@UAEHXZ
?GetY0@CNCSJPCRect@@UAEHXZ
?GetY1@CNCSJPCRect@@UAEHXZ
?HasAlpha@CNCSRenderer@@QAE_NXZ
?Invalidate@?$TNCSCachedValue@H@@QAEXXZ
?IsPacketStream@CNCSJPCIOStream@@UAE_NXZ
?IsValid@CNCSJPCRect@@QAE_NXZ
?ProcessReceivedPackets@CNCSJPCIOStream@@UAEXXZ
?Read@CNCSJPCBuffer@@QAE_NPAV1@@Z
?Read@CNCSJPCBuffer@@QAE_NPAXHHIII@Z
?ReadINT8@CNCSJPCIOStream@@UAE_NAAC@Z
?ReadUINT8@CNCSJPCIOStream@@UAE_NAAE@Z
?SetFlag@CNCSJPCBuffer@@QAEXI@Z
?Size@CNCSJPCBuffer@@SAIW4Type@1@II@Z
?Success@CNCSError@@QAE_NXZ
?TestFlags@CNCSJPCBuffer@@QAE_NI@Z
?TimeToNow@CNCSObjectLife@CNCSObject@@QAE_JXZ
?UnSetFlags@CNCSJPCBuffer@@QAEXI@Z
?_Assign_n@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@IAEXIABQAVCNCSJP2FileView@@@Z
?_Assign_rv@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEX$$QAV12@@Z
?_Buy@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@IAE_NI@Z
?_Construct_n@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEXIPBQAVCNCSJP2FileView@@@Z
?_Destroy@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@IAEXPAPAVCNCSJP2FileView@@0@Z
?_Grow_to@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@IBEII@Z
?_Insert_n@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@IAEXV?$_Vector_const_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@2@IABQAVCNCSJP2FileView@@@Z
?_Inside@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@IBE_NPBQAVCNCSJP2FileView@@@Z
?_Make_iter@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBE?AV?$_Vector_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@2@V?$_Vector_const_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@2@@Z
?_Orphan_range@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@IBEXPAPAVCNCSJP2FileView@@0@Z
?_Reserve@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@IAEXI@Z
?_Tidy@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@IAEXXZ
?_Ufill@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@IAEPAPAVCNCSJP2FileView@@PAPAV3@IPBQAV3@@Z
?_Xlen@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@IBEXXZ
?_Xran@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@IBEXXZ
?assign@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEXIABQAVCNCSJP2FileView@@@Z
?at@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEAAPAVCNCSJP2FileView@@I@Z
?at@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBEABQAVCNCSJP2FileView@@I@Z
?back@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEAAPAVCNCSJP2FileView@@XZ
?back@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBEABQAVCNCSJP2FileView@@XZ
?begin@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAE?AV?$_Vector_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@2@XZ
?begin@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBE?AV?$_Vector_const_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@2@XZ
?capacity@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBEIXZ
?cbegin@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBE?AV?$_Vector_const_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@2@XZ
?cend@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBE?AV?$_Vector_const_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@2@XZ
?clear@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEXXZ
?crbegin@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBE?AV?$reverse_iterator@V?$_Vector_const_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@std@@@2@XZ
?crend@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBE?AV?$reverse_iterator@V?$_Vector_const_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@std@@@2@XZ
?data@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEPAPAVCNCSJP2FileView@@XZ
?data@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBEPBQAVCNCSJP2FileView@@XZ
?emplace_back@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEX$$QAPAVCNCSJP2FileView@@@Z
?empty@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBE_NXZ
?end@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAE?AV?$_Vector_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@2@XZ
?end@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBE?AV?$_Vector_const_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@2@XZ
?erase@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAE?AV?$_Vector_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@2@V?$_Vector_const_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@2@0@Z
?erase@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAE?AV?$_Vector_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@2@V?$_Vector_const_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@2@@Z
?front@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEAAPAVCNCSJP2FileView@@XZ
?front@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBEABQAVCNCSJP2FileView@@XZ
?get_allocator@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBE?AV?$allocator@PAVCNCSJP2FileView@@@2@XZ
?insert@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAE?AV?$_Vector_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@2@V?$_Vector_const_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@2@ABQAVCNCSJP2FileView@@@Z
?insert@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEXV?$_Vector_const_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@2@IABQAVCNCSJP2FileView@@@Z
?isUsingAlphaBand@CNCSRenderer@@QAE_NXZ
?max_size@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBEIXZ
?pop_back@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEXXZ
?push_back@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEX$$QAPAVCNCSJP2FileView@@@Z
?push_back@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEXABQAVCNCSJP2FileView@@@Z
?rbegin@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAE?AV?$reverse_iterator@V?$_Vector_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@std@@@2@XZ
?rbegin@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBE?AV?$reverse_iterator@V?$_Vector_const_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@std@@@2@XZ
?rend@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAE?AV?$reverse_iterator@V?$_Vector_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@std@@@2@XZ
?rend@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBE?AV?$reverse_iterator@V?$_Vector_const_iterator@V?$_Vector_val@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@@std@@@2@XZ
?reserve@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEXI@Z
?resize@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEXI@Z
?resize@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEXIPAVCNCSJP2FileView@@@Z
?shrink_to_fit@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEXXZ
?size@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QBEIXZ
?swap@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEX$$QAV12@@Z
?swap@?$vector@PAVCNCSJP2FileView@@V?$allocator@PAVCNCSJP2FileView@@@std@@@std@@QAEXAAV12@@Z
zcrxEntryPoint
zcrxGetApiVersion

Sections

.text
Size: 572KB - Virtual size: 571KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

47a550876717ace3452e5826da06fbfc

Headers

DLL Characteristics

File Characteristics

Imports

zwcad.exe

zwdatabase

mfc100

msvcr100

kernel32

user32

comdlg32

advapi32

shell32

shlwapi

ole32

aplitopgeo8

msvcp100

ncsecwmdt

ncsutilmdt

tcpimagen8

ws2_32

zwgeometry

Exports

Exports

Sections

.text Size: 572KB - Virtual size: 571KB

.rdata Size: 151KB - Virtual size: 150KB

.data Size: 24KB - Virtual size: 89KB

.rsrc Size: 7KB - Virtual size: 7KB

.reloc Size: 130KB - Virtual size: 130KB

.text
Size: 572KB - Virtual size: 571KB

.rdata
Size: 151KB - Virtual size: 150KB

.data
Size: 24KB - Virtual size: 89KB

.rsrc
Size: 7KB - Virtual size: 7KB

.reloc
Size: 130KB - Virtual size: 130KB