Static task
static1
Behavioral task
behavioral1
Sample
349dc14d8cffaa48d09dcfe9861d7bf3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
349dc14d8cffaa48d09dcfe9861d7bf3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
349dc14d8cffaa48d09dcfe9861d7bf3_JaffaCakes118
-
Size
453KB
-
MD5
349dc14d8cffaa48d09dcfe9861d7bf3
-
SHA1
4ada7306b7c91840792fc979fa30f5c7031482ca
-
SHA256
eab38836d966658793c09038b6dc321c95ce777cf58860f4ccd577d952353dcb
-
SHA512
31c623552d4a612d0eb23d9d684aaf536b9e0b26eb832736b448a24b76396904832ab4dc2eb013a02933c382221018bfaa1efc68f487c1bd6d4fd507576d285e
-
SSDEEP
6144:nl3vfhuoYYVWOpb2Ysi5caFOgagxZpPVEp2/EbY3Gzb+40PoiNIG4x:nJfM0VJp48OgvxZzEbY31oU4x
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 349dc14d8cffaa48d09dcfe9861d7bf3_JaffaCakes118
Files
-
349dc14d8cffaa48d09dcfe9861d7bf3_JaffaCakes118.exe windows:4 windows x86 arch:x86
79ed8855be93153636797b2e9277c6ba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapReAlloc
HeapAlloc
HeapFree
VirtualAlloc
GetModuleHandleW
GlobalGetAtomNameA
OpenFileMappingW
LocalFree
CreateDirectoryExA
GetConsoleScreenBufferInfo
SetFileTime
GetTimeFormatW
GetPrivateProfileSectionNamesA
LoadLibraryW
CreateThread
RemoveDirectoryW
FindResourceExW
EnumCalendarInfoExA
FreeResource
ReadProcessMemory
GetDiskFreeSpaceExW
LocalFlags
GetMailslotInfo
EnumCalendarInfoA
FindResourceA
FileTimeToDosDateTime
SearchPathA
GlobalAddAtomA
WriteConsoleInputA
GlobalLock
LeaveCriticalSection
CreateEventA
LocalAlloc
GetNamedPipeInfo
GlobalFlags
ResetEvent
MapViewOfFile
GetVolumeInformationA
GetFileTime
PeekConsoleInputW
EnumSystemLocalesA
SetEnvironmentVariableA
GetSystemDefaultLCID
ReleaseSemaphore
LocalUnlock
CreateFileMappingW
GetPrivateProfileSectionNamesW
LocalSize
WriteProfileStringW
SetPriorityClass
WriteConsoleOutputAttribute
ContinueDebugEvent
EnumResourceNamesA
WaitForSingleObject
GetCurrentDirectoryA
LockFileEx
VirtualProtectEx
GetProcessAffinityMask
EnumSystemLocalesW
UpdateResourceA
FlushFileBuffers
SetVolumeLabelW
GlobalMemoryStatus
LocalShrink
OpenEventA
SetCurrentDirectoryW
ReadDirectoryChangesW
GetProcessPriorityBoost
InterlockedDecrement
lstrcmp
GlobalHandle
GetCommandLineW
FindFirstFileExW
GetPrivateProfileStructW
SetFileAttributesA
WaitForSingleObjectEx
TryEnterCriticalSection
SetConsoleTextAttribute
GetThreadSelectorEntry
CreateProcessW
HeapLock
CreateRemoteThread
SetLastError
FlushInstructionCache
SetThreadContext
GlobalGetAtomNameW
GetUserDefaultLangID
ReadConsoleOutputW
OpenFile
SuspendThread
FindAtomA
SystemTimeToTzSpecificLocalTime
OpenWaitableTimerW
OpenSemaphoreW
GetDateFormatA
DisconnectNamedPipe
FreeConsole
RtlMoveMemory
LocalReAlloc
lstrcatW
lstrlenA
SleepEx
HeapWalk
DeviceIoControl
GetCalendarInfoW
InterlockedExchangeAdd
CloseHandle
Heap32ListFirst
GetLogicalDriveStringsW
SetConsoleScreenBufferSize
lstrcpyW
InitializeCriticalSectionAndSpinCount
SetTimeZoneInformation
LoadResource
IsValidLocale
lstrcpy
GetHandleInformation
GetUserDefaultLCID
ReadFileEx
SignalObjectAndWait
GetEnvironmentStrings
LocalLock
ReadConsoleOutputA
FormatMessageW
TlsAlloc
EnumDateFormatsA
GetThreadPriorityBoost
GetPrivateProfileStringW
EscapeCommFunction
FindNextFileW
WriteFileEx
ResetWriteWatch
VirtualQueryEx
SetEndOfFile
OpenSemaphoreA
OutputDebugStringA
MoveFileA
GetFileSize
GlobalAlloc
GetSystemTime
OpenFileMappingA
FillConsoleOutputCharacterW
FillConsoleOutputAttribute
EnumTimeFormatsA
SetConsoleWindowInfo
GetDriveTypeW
VirtualLock
GetFileAttributesA
GlobalFindAtomW
CreateTapePartition
Sleep
GetDateFormatW
SystemTimeToFileTime
GetNumberFormatA
ExpandEnvironmentStringsA
WriteProfileSectionW
HeapValidate
DebugBreak
SetConsoleCursorPosition
InitializeCriticalSection
OpenEventW
SetThreadIdealProcessor
GlobalWire
FlushViewOfFile
PulseEvent
CreateDirectoryA
GetLocaleInfoW
CreateSemaphoreW
CreatePipe
GlobalDeleteAtom
CreateEventW
DuplicateHandle
SetSystemTimeAdjustment
DebugActiveProcess
GetEnvironmentVariableA
Module32First
MoveFileExA
GetSystemDirectoryA
Thread32First
GetShortPathNameA
GetProfileSectionA
EnterCriticalSection
SetVolumeLabelA
lstrcmpi
SearchPathW
LocalFileTimeToFileTime
TlsFree
IsValidCodePage
Heap32Next
SetComputerNameW
FileTimeToLocalFileTime
lstrcmpiW
lstrlenW
GetDiskFreeSpaceW
LocalHandle
GetConsoleOutputCP
RtlFillMemory
ReadConsoleA
SetEnvironmentVariableW
WritePrivateProfileStringA
GetNamedPipeHandleStateW
DeleteFileA
DefineDosDeviceW
GetACP
lstrcpynA
FindFirstFileW
MoveFileW
EnumSystemCodePagesW
GetDriveTypeA
GetProfileIntA
GetCurrencyFormatA
ReadConsoleInputW
GetCurrentDirectoryW
SetHandleCount
GetThreadTimes
ReadConsoleW
ConvertDefaultLocale
DeleteFiber
CreateWaitableTimerW
FoldStringW
InitAtomTable
LoadLibraryExA
GetComputerNameW
GetDiskFreeSpaceExA
GetNumberFormatW
FreeLibrary
CreateConsoleScreenBuffer
GetLogicalDrives
FindCloseChangeNotification
GetFullPathNameW
GetProcessTimes
GetLogicalDriveStringsA
ResumeThread
FoldStringA
ReadConsoleOutputCharacterA
FindResourceW
CreateMailslotW
GetTempPathA
GetModuleFileNameW
WaitForMultipleObjectsEx
FillConsoleOutputCharacterA
GetPrivateProfileStructA
GetLastError
WriteConsoleOutputCharacterA
HeapSize
GetLocalTime
WritePrivateProfileStructA
CreateToolhelp32Snapshot
UnlockFile
GetEnvironmentVariableW
Heap32First
GetAtomNameA
LocalCompact
WriteFileGather
GetStringTypeA
GetSystemPowerStatus
GlobalFix
GetStringTypeExA
CreateMailslotA
SetFilePointer
SetWaitableTimer
GetSystemInfo
FindFirstChangeNotificationA
GetVersionExA
CreateFileA
GetEnvironmentStringsA
WriteConsoleOutputW
SetConsoleCP
SetCurrentDirectoryA
CompareStringA
GetNamedPipeHandleStateA
GlobalAddAtomW
SetThreadAffinityMask
GetCompressedFileSizeW
GetLongPathNameA
MultiByteToWideChar
OpenWaitableTimerA
AllocConsole
FindClose
GetProcessVersion
GetConsoleTitleW
AddAtomA
EnumCalendarInfoW
GetSystemDefaultLangID
WriteProcessMemory
GetFileInformationByHandle
UnhandledExceptionFilter
MoveFileExW
Toolhelp32ReadProcessMemory
CreateNamedPipeW
ConnectNamedPipe
FlushConsoleInputBuffer
EnumResourceLanguagesW
GetCalendarInfoA
FindResourceExA
HeapCreate
DefineDosDeviceA
CreateMutexW
WritePrivateProfileSectionW
GetConsoleCursorInfo
SetThreadPriority
VirtualUnlock
SetConsoleCursorInfo
FindFirstFileExA
FileTimeToSystemTime
CopyFileA
EnumResourceTypesW
WriteConsoleA
WritePrivateProfileStringW
GetVersionExW
SetThreadPriorityBoost
SetConsoleOutputCP
lstrcat
FindFirstChangeNotificationW
GetWriteWatch
EnumTimeFormatsW
WaitForDebugEvent
CreateProcessA
GetWindowsDirectoryW
lstrlen
GetTimeZoneInformation
GetExitCodeProcess
GetPriorityClass
ReadConsoleOutputAttribute
GlobalFree
TerminateThread
GetCommandLineA
GetThreadPriority
BeginUpdateResourceA
HeapCompact
FindFirstFileA
GetFileType
OpenMutexA
LockFile
SetEvent
lstrcmpiA
PeekConsoleInputA
GetLongPathNameW
GetStartupInfoA
SetComputerNameA
Module32Next
DeleteAtom
MulDiv
SetConsoleMode
FormatMessageA
WideCharToMultiByte
SetThreadExecutionState
CreateDirectoryW
TlsGetValue
CreateMutexA
FreeLibraryAndExitThread
GetConsoleTitleA
DosDateTimeToFileTime
GetPrivateProfileSectionW
Thread32Next
ExitThread
GetCompressedFileSizeA
GetLocaleInfoA
lstrcmpW
LockResource
SetConsoleTitleA
SetConsoleCtrlHandler
GetFileAttributesExA
lstrcpynW
GetQueuedCompletionStatus
SetCriticalSectionSpinCount
DeleteCriticalSection
SetLocaleInfoA
WaitNamedPipeW
TlsSetValue
GetTempPathW
GetFileAttributesW
ReadFile
GetTempFileNameW
WriteConsoleW
GetSystemTimeAdjustment
GetThreadLocale
ReadConsoleOutputCharacterW
WinExec
GetEnvironmentStringsW
HeapDestroy
GetWindowsDirectoryA
Heap32ListNext
DisableThreadLibraryCalls
GetPrivateProfileIntW
UpdateResourceW
ExpandEnvironmentStringsW
GetProcessHeap
FreeEnvironmentStringsW
CreateFileMappingA
Process32Next
BeginUpdateResourceW
CommConfigDialogA
EnumDateFormatsExA
EnumResourceLanguagesA
WaitCommEvent
ReadConsoleInputA
GetTempFileNameA
lstrcatA
GetProfileStringW
lstrcmpA
OpenProcess
GlobalReAlloc
PeekNamedPipe
GetStringTypeExW
EnumDateFormatsW
UnlockFileEx
OutputDebugStringW
shell32
ExtractIconW
SHGetFileInfoA
FindExecutableA
FreeIconList
SHGetSpecialFolderPathW
SHGetDataFromIDListA
InternalExtractIconListW
ExtractAssociatedIconW
SHGetPathFromIDList
ShellExecuteEx
SHGetFileInfoW
SHGetDataFromIDListW
SHFreeNameMappings
ShellHookProc
RealShellExecuteExA
SHInvokePrinterCommandW
SHInvokePrinterCommandA
RealShellExecuteW
SHLoadInProc
ShellExecuteW
SHFormatDrive
ShellExecuteA
SHBrowseForFolderA
SHFileOperationA
SHUpdateRecycleBinIcon
ExtractIconEx
SHChangeNotify
SHGetSpecialFolderLocation
DoEnvironmentSubstW
SHAppBarMessage
SHEmptyRecycleBinW
SheChangeDirA
ExtractAssociatedIconExW
SHGetInstanceExplorer
ShellExecuteExA
SHGetSettings
FindExecutableW
advapi32
LookupPrivilegeDisplayNameW
CryptEncrypt
RegSetValueW
CryptEnumProvidersA
RegReplaceKeyW
AbortSystemShutdownW
RegEnumValueA
RegEnumKeyW
CryptHashData
CryptSetProviderA
CryptContextAddRef
LookupAccountNameA
CryptSetProvParam
LookupAccountSidA
CryptEnumProviderTypesA
RegSetKeySecurity
CryptSignHashW
LogonUserA
CryptAcquireContextA
CryptSignHashA
CryptDestroyHash
CryptGetUserKey
CryptEnumProvidersW
RegSetValueExA
LookupPrivilegeNameW
RegQueryValueW
RegReplaceKeyA
RegConnectRegistryA
RegDeleteKeyW
CryptGenRandom
StartServiceW
LogonUserW
RegSaveKeyW
CryptVerifySignatureW
LookupPrivilegeValueA
CryptSetProviderW
RegOpenKeyExW
DuplicateTokenEx
RegSaveKeyA
CryptDuplicateHash
RegEnumValueW
CreateServiceW
LookupSecurityDescriptorPartsA
CryptSetProviderExA
ReportEventA
RegQueryMultipleValuesA
RegFlushKey
RegCreateKeyExA
CryptDecrypt
CryptDeriveKey
RegSetValueExW
CryptCreateHash
RegQueryMultipleValuesW
GetUserNameA
RevertToSelf
CryptReleaseContext
GetUserNameW
RegLoadKeyA
RegConnectRegistryW
LookupAccountSidW
RegQueryValueExW
RegSetValueA
LookupPrivilegeValueW
RegOpenKeyW
CryptGetKeyParam
RegDeleteValueW
LookupPrivilegeDisplayNameA
DuplicateToken
LookupSecurityDescriptorPartsW
RegDeleteKeyA
RegQueryValueA
RegEnumKeyExW
CryptVerifySignatureA
wininet
FtpRemoveDirectoryA
InternetGoOnlineW
InternetAlgIdToStringW
HttpSendRequestExA
SetUrlCacheEntryInfoW
GopherCreateLocatorW
InternetUnlockRequestFile
InternetOpenA
FtpRenameFileW
GopherGetLocatorTypeA
InternetAttemptConnect
InternetConfirmZoneCrossingA
RetrieveUrlCacheEntryFileW
UnlockUrlCacheEntryFile
InternetQueryDataAvailable
InternetShowSecurityInfoByURLW
HttpSendRequestExW
UnlockUrlCacheEntryFileW
CreateUrlCacheGroup
IsUrlCacheEntryExpiredA
CreateUrlCacheEntryA
InternetOpenW
InternetFindNextFileW
InternetFindNextFileA
InternetHangUp
GopherFindFirstFileA
FtpCreateDirectoryA
FindFirstUrlCacheContainerW
InternetReadFileExA
InternetSecurityProtocolToStringW
SetUrlCacheEntryGroupW
SetUrlCacheConfigInfoW
GetUrlCacheConfigInfoW
InternetDialA
GetUrlCacheEntryInfoA
FtpDeleteFileA
GopherFindFirstFileW
CommitUrlCacheEntryW
FindFirstUrlCacheGroup
RetrieveUrlCacheEntryStreamA
InternetTimeToSystemTimeA
InternetGoOnlineA
GetUrlCacheEntryInfoW
InternetShowSecurityInfoByURL
ResumeSuspendedDownload
FindFirstUrlCacheContainerA
ShowClientAuthCerts
DeleteUrlCacheEntry
FtpCommandA
FindNextUrlCacheEntryW
InternetWriteFileExW
RetrieveUrlCacheEntryStreamW
GetUrlCacheConfigInfoA
GetUrlCacheHeaderData
ShowSecurityInfo
InternetCrackUrlA
SetUrlCacheHeaderData
InternetConfirmZoneCrossingW
FtpRemoveDirectoryW
InternetAutodial
ShowCertificate
GopherGetLocatorTypeW
InternetQueryOptionW
InternetAutodialHangup
InternetTimeToSystemTime
FtpGetFileW
GopherOpenFileA
InternetCreateUrlA
HttpOpenRequestW
InternetWriteFile
FtpGetFileSize
HttpQueryInfoW
UpdateUrlCacheContentPath
InternetConnectW
InternetTimeFromSystemTime
InternetReadFile
FreeUrlCacheSpaceW
GetUrlCacheEntryInfoExW
GopherCreateLocatorA
IncrementUrlCacheHeaderData
InternetSetOptionExW
FindFirstUrlCacheEntryA
FtpFindFirstFileW
InternetCreateUrlW
InternetSetCookieA
GopherOpenFileW
IsHostInProxyBypassList
InternetFortezzaCommand
SetUrlCacheEntryInfoA
InternetShowSecurityInfoByURLA
ShowX509EncodedCertificate
FtpGetCurrentDirectoryA
FindNextUrlCacheContainerA
InternetCloseHandle
FtpOpenFileA
HttpAddRequestHeadersW
HttpEndRequestA
GopherGetAttributeA
InternetErrorDlg
DeleteIE3Cache
FindFirstUrlCacheEntryExW
FindNextUrlCacheEntryExA
DeleteUrlCacheEntryW
InternetTimeFromSystemTimeW
UnlockUrlCacheEntryStream
GetUrlCacheGroupAttributeW
FindFirstUrlCacheEntryExA
FtpDeleteFileW
HttpQueryInfoA
FreeUrlCacheSpaceA
InternetConfirmZoneCrossing
SetUrlCacheEntryGroup
InternetSetOptionW
InternetSetOptionExA
DeleteUrlCacheGroup
InternetReadFileExW
InternetSetDialState
HttpSendRequestW
InternetSetFilePointer
InternetTimeFromSystemTimeA
InternetOpenUrlA
InternetQueryOptionA
RunOnceUrlCache
InternetSetDialStateW
HttpSendRequestA
DeleteUrlCacheContainerW
InternetAlgIdToStringA
FtpSetCurrentDirectoryW
InternetGetCookieA
InternetGetLastResponseInfoW
FtpOpenFileW
HttpEndRequestW
FindFirstUrlCacheEntryW
InternetTimeToSystemTimeW
SetUrlCacheGroupAttributeW
InternetLockRequestFile
InternetCrackUrlW
InternetGetConnectedStateEx
GetUrlCacheGroupAttributeA
FindNextUrlCacheEntryExW
InternetSetOptionA
LoadUrlCacheContent
FtpPutFileEx
RetrieveUrlCacheEntryFileA
FtpPutFileW
HttpAddRequestHeadersA
SetUrlCacheGroupAttributeA
DetectAutoProxyUrl
InternetGetConnectedStateExW
InternetInitializeAutoProxyDll
InternetConnectA
InternetCanonicalizeUrlA
GopherGetAttributeW
FtpFindFirstFileA
FindNextUrlCacheGroup
InternetCheckConnectionA
UnlockUrlCacheEntryFileA
InternetOpenUrlW
InternetGoOnline
FtpSetCurrentDirectoryA
GetUrlCacheEntryInfoExA
FtpGetFileEx
CreateUrlCacheContainerW
SetUrlCacheConfigInfoA
InternetGetLastResponseInfoA
FtpGetCurrentDirectoryW
InternetGetCookieW
SetUrlCacheEntryGroupA
DeleteUrlCacheEntryA
UrlZonesDetach
IsUrlCacheEntryExpiredW
CreateUrlCacheEntryW
InternetSetDialStateA
InternetGetConnectedState
InternetGetConnectedStateExA
InternetCombineUrlA
FtpCommandW
ReadUrlCacheEntryStream
FindNextUrlCacheEntryA
FtpPutFileA
CommitUrlCacheEntryA
DeleteUrlCacheContainerA
InternetCanonicalizeUrlW
InternetSecurityProtocolToStringA
InternetSetCookieW
HttpCheckDavCompliance
CreateUrlCacheContainerA
FindNextUrlCacheContainerW
InternetDialW
InternetQueryFortezzaStatus
InternetCheckConnectionW
FindCloseUrlCache
comdlg32
ReplaceTextW
PrintDlgA
FindTextW
GetOpenFileNameW
GetFileTitleW
GetSaveFileNameA
GetOpenFileNameA
PageSetupDlgA
PageSetupDlgW
LoadAlterBitmap
FindTextA
ChooseFontW
ChooseColorW
ReplaceTextA
GetFileTitleA
GetSaveFileNameW
PrintDlgW
gdi32
GetWorldTransform
SetPixel
GdiPlayDCScript
SetEnhMetaFileBits
GetKerningPairsW
OffsetViewportOrgEx
CreateSolidBrush
SwapBuffers
GetTextExtentExPointA
DrawEscape
FloodFill
PlayMetaFileRecord
CreateBitmapIndirect
GetCharABCWidthsW
GetTextExtentPoint32A
SetMapperFlags
GetSystemPaletteEntries
SetMagicColors
StartDocA
Pie
CreatePenIndirect
StrokePath
GdiPlayJournal
CreateICW
PolyTextOutW
GetWindowExtEx
GetPixel
GetMapMode
CreateRoundRectRgn
ResizePalette
SetColorAdjustment
LineTo
GetBoundsRect
UpdateColors
GetTextCharacterExtra
GetCharWidthW
CreateBrushIndirect
GetLogColorSpaceW
CreateEnhMetaFileW
GetEnhMetaFileA
SetICMProfileA
GetObjectW
OffsetWindowOrgEx
ExtCreatePen
SetMapMode
TranslateCharsetInfo
UpdateICMRegKeyA
TextOutW
AbortPath
GetWinMetaFileBits
CreateDIBitmap
GetBitmapDimensionEx
GetViewportOrgEx
GetDeviceCaps
SetTextAlign
GetGraphicsMode
GetCharWidthA
CheckColorsInGamut
GetCharacterPlacementW
GetPixelFormat
OffsetClipRgn
GetColorSpace
SetROP2
Ellipse
DPtoLP
GetOutlineTextMetricsA
EnumFontFamiliesExW
RemoveFontResourceA
SetColorSpace
Rectangle
SelectClipPath
SetPolyFillMode
CreateDiscardableBitmap
CreateDIBPatternBrushPt
SetPixelFormat
ColorMatchToTarget
ExtTextOutW
EnableEUDC
GetCharWidthFloatW
ExtFloodFill
EnumMetaFile
GetEnhMetaFileDescriptionW
GetGlyphOutline
CreateScalableFontResourceW
GetTextExtentPointW
SetPixelV
GetMetaRgn
SetMetaRgn
GetEnhMetaFileW
GetClipBox
GetTextExtentPointA
SetWindowExtEx
CopyMetaFileW
EnumFontFamiliesA
BitBlt
ExcludeClipRect
SetTextCharacterExtra
GetEnhMetaFileDescriptionA
GetEnhMetaFilePaletteEntries
GetObjectType
SelectPalette
UnrealizeObject
AbortDoc
GetSystemPaletteUse
GetTextAlign
PolyTextOutA
GetCurrentObject
EnumObjects
ResetDCW
RectVisible
GetTextFaceA
SetPaletteEntries
SetWinMetaFileBits
UpdateICMRegKeyW
FrameRgn
EqualRgn
CreateEllipticRgnIndirect
GdiPlayScript
PlayEnhMetaFileRecord
PlayEnhMetaFile
SetWindowOrgEx
OffsetRgn
EnumICMProfilesW
SetTextColor
CloseEnhMetaFile
ExtCreateRegion
CreateScalableFontResourceA
GetOutlineTextMetricsW
GetClipRgn
CreateCompatibleBitmap
CloseFigure
GetRgnBox
RealizePalette
GetTextMetricsW
PatBlt
CreatePolyPolygonRgn
GetBitmapBits
GetCharWidthFloatA
DeleteEnhMetaFile
GetColorAdjustment
GetBrushOrgEx
CreateMetaFileW
SetGraphicsMode
CreateBitmap
GetCharWidth32W
GetEnhMetaFileBits
CreateFontIndirectW
BeginPath
CombineRgn
CopyMetaFileA
LineDDA
GetDCOrgEx
EnumFontFamiliesW
GetRandomRgn
SetSystemPaletteUse
ExtTextOutA
DeviceCapabilitiesExW
SetRectRgn
GetCharABCWidthsFloatW
CreateFontIndirectA
GetRasterizerCaps
CreateDCA
StartPage
PolyDraw
EnumFontFamiliesExA
GetMetaFileW
MoveToEx
GetNearestColor
CreateHalftonePalette
GetTextCharset
GdiSetBatchLimit
SetDIBitsToDevice
GetTextCharsetInfo
ScaleViewportExtEx
PathToRegion
GetCharWidth32A
CreateEllipticRgn
ChoosePixelFormat
CreateRectRgnIndirect
GetObjectA
DeleteMetaFile
CreateColorSpaceA
GetRegionData
Polygon
GetPaletteEntries
AnimatePalette
TextOutA
MaskBlt
DescribePixelFormat
CreatePatternBrush
FlattenPath
StretchBlt
GetNearestPaletteIndex
PolyBezierTo
CreatePen
InvertRgn
GetICMProfileA
CreateEnhMetaFileA
ScaleWindowExtEx
GetROP2
GetStockObject
SetWorldTransform
PaintRgn
SetDIBits
SetTextJustification
CreatePalette
GetTextExtentPoint32W
GetPolyFillMode
PtInRegion
GetMetaFileBitsEx
DeleteDC
GdiGetBatchLimit
GetLayout
gdiPlaySpoolStream
GetTextFaceW
ResetDCA
PolyPolygon
PolylineTo
GetDIBits
GetFontLanguageInfo
Chord
ExtEscape
PlgBlt
FillRgn
SetAbortProc
CreateICA
GetCharABCWidthsA
PtVisible
StartDocW
GetKerningPairs
GetGlyphOutlineA
SetViewportExtEx
RestoreDC
RectInRegion
CreateHatchBrush
GetMetaFileA
GetDIBColorTable
EnumFontsW
GetTextMetricsA
EndDoc
Polyline
EndPage
CreateDIBPatternBrush
GetTextExtentExPointW
GetMiterLimit
GetViewportExtEx
GetEnhMetaFileHeader
GetBkColor
CreateCompatibleDC
GetGlyphOutlineW
GdiFlush
SetStretchBltMode
Escape
GetArcDirection
SetBitmapBits
EnumICMProfilesA
CreateColorSpaceW
ColorCorrectPalette
SetBkMode
GetWindowOrgEx
SetFontEnumeration
EnumFontsA
SetBkColor
SetBoundsRect
CreateDIBSection
GetTextColor
GetKerningPairsA
GetICMProfileW
SetBrushOrgEx
SetLayout
SaveDC
GetPath
SetBitmapDimensionEx
RemoveFontResourceW
GetFontData
GetCharacterPlacementA
Sections
.text Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 302KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE