Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
4980fc113cce3624d05b1b8ea2839dfe_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4980fc113cce3624d05b1b8ea2839dfe_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4980fc113cce3624d05b1b8ea2839dfe_JaffaCakes118
Size
1.4MB
MD5
4980fc113cce3624d05b1b8ea2839dfe
SHA1
5791bb1ccd262307022ae4fbc6fce8e950c2f2fa
SHA256
2fe501640247938b09828da15c93a378180fc293161acb382fbed00f00baea19
SHA512
c7b8df83b2a146b1f992cd12add3693450b0e7ee24e19c2906d42d445824971080d09daec270844bf5394e6d59e466eb6d3f1e06ef74a488fa5f12455cf2cfd3
SSDEEP
24576:SxkeopW4s/+f2eB3kD8CFxlJNOmNc6a22YN2qIVvbqTPR+Y49H6+uAAf9Eo:Vs788cma6aHbqT5+PJtT2Eo
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
f:\qqpcmgr_proj\QQPCMgr_Trojan\qqpcmgr_proj\Basic\Output\BinFinal\plugins\qmtrojanscan\QMTrojanScan.pdb
GetModuleFileNameExW
GetModuleBaseNameW
EnumProcessModules
EnumProcesses
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
htonl
ntohl
StrFromTimeIntervalW
PathFileExistsW
PathRemoveFileSpecW
PathAppendW
SHGetValueW
StrRChrW
PathFindFileNameW
StrFormatKBSizeW
StrFormatByteSizeW
PathAddBackslashW
??4CTXStringW@@QAEAAV0@ABV0@@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
??ICTXBSTR@@QAEPAPA_WXZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??BCTXStringW@@QBEPB_WXZ
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?RecordTransEnd@Perf@Util@@YAJ_JPB_WHH11H@Z
?IsEmpty@CTXBSTR@@QAEHXZ
??0CTXBSTR@@QAE@PB_W@Z
??0CTXBSTR@@QAE@XZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??M@YA_NABVCTXStringW@@0@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??9@YA_NPB_WABVCTXStringW@@@Z
?GetLength@CTXStringW@@QBEHXZ
?Mid@CTXStringW@@QBE?AV1@HH@Z
?Compare@CTXStringW@@QBEHPB_W@Z
??1CTXStringW@@QAE@XZ
?Empty@CTXBSTR@@QAEXXZ
??0CTXStringW@@QAE@PA_W@Z
?Find@CTXStringW@@QBEHPB_WH@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
?Left@CTXStringW@@QBE?AV1@H@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
??9@YA_NABVCTXStringW@@PB_W@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
?Right@CTXStringW@@QBE?AV1@H@Z
??YCTXBSTR@@QAEAAV0@PB_W@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??YCTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
??0CTXStringW@@QAE@ABV0@@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?Find@CTXStringW@@QBEH_WH@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??0CFmtString@@QAE@XZ
??8CTXBSTR@@QBE_NPB_W@Z
??1CFmtString@@QAE@XZ
?PropertyStr@CFmtString@@QAEHPB_W0@Z
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
??0CTXStringW@@QAE@H@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
??0CTXStringW@@QAE@PB_W@Z
?RecordTransBegin@Perf@Util@@YA_JPB_WHH00@Z
??1CTXBSTR@@QAE@XZ
?Format@CTXStringW@@QAAXPB_WZZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??0CTXStringW@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
??4CTXStringW@@QAEAAV0@PB_W@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0@Z
?GetService@GF@Util@@YAJABU_GUID@@PA_WPAPAX@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
DeleteCanvas
CreateCanvasFromDC
ord5727
ord1957
ord2878
ord5864
ord3322
ord2870
ord1006
ord754
ord3198
ord563
ord1939
ord753
ord1970
ord3674
ord4344
ord3793
ord2872
ord2362
ord3435
ord1785
ord4686
ord6061
ord1659
ord4109
ord6086
ord3877
ord386
ord631
ord2271
ord2279
ord3925
ord2745
ord2742
ord1431
ord773
ord6173
ord1476
ord777
ord896
ord2121
ord4074
ord4101
ord2460
ord5398
ord5558
ord2260
ord284
ord764
ord581
ord1200
ord1170
ord1168
ord1192
ord1115
ord1162
ord371
ord1093
ord1199
ord1197
ord1087
ord1033
ord315
ord765
ord314
ord2708
ord283
ord4301
ord6751
ord2829
ord266
ord2725
ord2531
ord1044
ord5562
ord5209
ord1908
ord5226
ord1043
ord4562
ord1182
ord1133
ord3942
ord5222
ord5220
ord6248
ord2925
ord1145
ord1911
ord3826
ord5378
ord6215
ord5096
ord1007
ord3800
ord5579
ord2009
ord2054
ord4320
ord6274
ord3795
ord6272
ord4008
ord4032
ord3677
ord1123
ord1079
ord1139
ord566
ord1472
ord354
ord757
ord1176
ord577
ord3327
ord762
ord3824
ord5379
ord2239
ord4255
ord4475
ord3943
ord2638
ord3703
ord1178
ord572
ord2942
ord6063
ord3756
ord5196
ord6721
ord5911
ord1393
ord5210
ord2255
ord6033
ord5638
ord3713
ord3712
ord2527
ord2399
ord2361
ord2169
ord2163
ord1513
ord602
ord6273
ord1118
ord347
ord3796
ord1271
ord1925
ord6275
ord3249
ord3339
ord4961
ord1353
ord5178
ord5171
ord4206
ord1955
ord4729
ord1647
ord4884
ord1646
ord4574
ord1590
ord1894
ord2011
ord1662
ord2856
ord1661
ord4480
ord1542
ord4256
ord5199
ord709
ord3176
ord501
ord6720
ord5908
ord1611
ord3635
ord1608
ord3940
ord1392
ord4238
ord2366
ord5148
ord1899
ord5316
ord605
ord5067
ord1172
ord6271
ord6282
ord4179
ord5609
ord5327
ord6293
ord3397
ord4716
ord3204
ord4276
ord1591
ord5956
ord5231
ord3155
ord5229
ord920
ord925
ord929
ord927
ord931
ord2384
ord2404
ord5633
ord2388
ord2394
ord2392
ord2390
ord2407
ord2402
ord2386
ord1270
ord2409
ord2397
ord2311
ord2379
ord2381
ord280
ord2261
ord5524
ord4100
ord1479
ord282
ord3990
ord6700
ord774
ord293
ord776
ord267
ord899
ord2832
ord2534
ord265
ord2640
ord278
memset
_wstat64
_wmkdir
_strlwr_s
_mbschr
_mbsstr
strtoul
_CIpow
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
_wsplitpath_s
wcsncmp
_vsnprintf
setlocale
_memicmp
strrchr
putwchar
putchar
realloc
ldiv
isprint
_wcsupr
_snwscanf
memmove
strchr
strncmp
isalnum
isalpha
tolower
isspace
memcpy
fseek
ftell
fread
__CxxFrameHandler3
fprintf
fputc
ferror
fopen_s
wcsncat
_vswprintf_c_l
swscanf_s
_vsnprintf_s
strncpy_s
_vsnwprintf_s
vsprintf_s
_vscprintf
printf
_snwprintf
_beginthreadex
fclose
fflush
fwrite
_wfopen
wcsncat_s
wcstoul
wcstol
wcsncpy
_wcsnicmp
wprintf
_wtol
_wtoi
_snprintf_s
wcsrchr
_wcslwr_s
atoi
_snwprintf_s
_localtime64_s
_time64
_mktime64
calloc
vswprintf_s
iswspace
wcsstr
_vscwprintf
memmove_s
_wcsicmp
wcschr
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
wcscpy_s
wcsncpy_s
wcscat_s
free
_recalloc
malloc
memcpy_s
_purecall
_CxxThrowException
_except_handler3
_wfopen_s
SetFilePointer
SetLastError
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
FileTimeToSystemTime
FileTimeToLocalFileTime
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
GetLocaleInfoA
GetTimeFormatW
GetDateFormatW
GetCurrencyFormatW
GetNumberFormatW
GetLocaleInfoW
InterlockedExchangeAdd
GetOverlappedResult
ConnectNamedPipe
CreateNamedPipeW
SetNamedPipeHandleState
WaitNamedPipeW
QueueUserAPC
WaitForMultipleObjects
TerminateThread
GetSystemTime
GetCurrentDirectoryW
ProcessIdToSessionId
GetCurrentProcessId
WriteFile
ReadFile
GetTempPathW
CreateEventW
CreateTimerQueueTimer
DuplicateHandle
DeleteTimerQueueTimer
SwitchToThread
ChangeTimerQueueTimer
FormatMessageA
OpenFileMappingA
CreateFileMappingA
InitializeCriticalSectionAndSpinCount
GetSystemInfo
GetSystemDirectoryW
HeapFree
GetProcessHeap
HeapAlloc
MapViewOfFile
GetVersionExW
InterlockedCompareExchange
SetEvent
OpenEventW
InterlockedExchange
GetSystemTimeAsFileTime
DeviceIoControl
GetDiskFreeSpaceW
SetConsoleTitleW
SetConsoleCtrlHandler
AllocConsole
ReadConsoleInputW
FlushConsoleInputBuffer
FreeConsole
WriteConsoleInputW
WriteConsoleW
FillConsoleOutputCharacterW
ScrollConsoleScreenBufferW
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
GetStdHandle
ResumeThread
OpenFileMappingW
GetFileSize
GetThreadPriority
SetThreadPriority
UnhandledExceptionFilter
MoveFileW
FindNextFileW
GetCurrentThreadId
FindClose
FindFirstFileW
Sleep
CreateProcessW
OpenMutexW
GetPrivateProfileStringW
FormatMessageW
CreateFileW
UnmapViewOfFile
MapViewOfFileEx
CreateFileMappingW
GetCurrentProcess
OpenProcess
MoveFileExW
GetFileAttributesW
WritePrivateProfileStringW
GetPrivateProfileIntW
lstrlenA
CloseHandle
CreateDirectoryW
CreateMutexW
WaitForSingleObject
ReleaseMutex
GetFullPathNameW
LoadLibraryW
DeleteFileW
GetLocalTime
FindResourceExW
LockResource
WideCharToMultiByte
GetTickCount
GetProcAddress
GetDriveTypeW
GetLogicalDriveStringsW
GetVolumeInformationW
lstrcpynW
GetLastError
lstrcmpiW
GetModuleFileNameW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
InterlockedDecrement
InterlockedIncrement
FreeLibrary
LeaveCriticalSection
GetModuleHandleW
EnterCriticalSection
RaiseException
DeleteCriticalSection
lstrlenW
InitializeCriticalSection
GetSystemDefaultLangID
VirtualQuery
LoadLibraryA
LocalAlloc
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
LockFile
UnlockFile
HeapSize
HeapReAlloc
HeapDestroy
GetThreadLocale
GetACP
GetVersionExA
GetFullPathNameA
FlushFileBuffers
GetFileAttributesExW
ExpandEnvironmentStringsW
LocalFree
UnlockFileEx
CreateFileA
LockFileEx
SetEndOfFile
GetTempPathA
AreFileApisANSI
DeleteFileA
GetFileAttributesA
GetDiskFreeSpaceA
CreatePipe
CopyFileW
ResetEvent
MultiByteToWideChar
FindWindowA
SendMessageTimeoutW
DestroyWindow
UnregisterClassA
CreateWindowExW
RegisterClassExW
PostMessageW
ShowWindow
RemoveMenu
GetSystemMenu
MoveWindow
ExitWindowsEx
FindWindowW
GetSystemMetrics
GetCursorPos
OffsetRect
DefWindowProcW
GetWindowLongW
LoadImageW
PtInRect
IsWindow
SendMessageW
GetDC
GetClientRect
GetParent
GetWindowRect
EnableWindow
ReleaseDC
RedrawWindow
CharNextW
SetWindowLongW
CreateFontIndirectW
GetObjectW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteObject
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
RegDeleteValueW
RegQueryInfoKeyW
RegOpenKeyExW
RegQueryValueExW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
GetSecurityDescriptorSacl
RegOpenKeyExA
RegQueryValueExA
AddAccessAllowedAce
FreeSid
InitializeAcl
GetLengthSid
SetSecurityDescriptorSacl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
AllocateAndInitializeSid
ShellExecuteExW
SHGetFileInfoW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
ShellExecuteW
SHOpenFolderAndSelectItems
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
_TrackMouseEvent
CoUninitialize
CoInitialize
CoTaskMemAlloc
CoFreeUnusedLibrariesEx
CoCreateGuid
CLSIDFromString
StringFromGUID2
StringFromCLSID
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
StgOpenStorage
StgIsStorageFile
StgCreateDocfile
CoLoadLibrary
CoRegisterClassObject
VariantInit
VarUI4FromStr
RegisterTypeLi
SysFreeString
VariantClear
LoadRegTypeLi
SysStringLen
SysAllocString
UnRegisterTypeLi
VariantChangeType
VariantCopy
LoadTypeLi
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?ends@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??0strstreambuf@std@@QAE@H@Z
??1strstreambuf@std@@UAE@XZ
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?compare@?$char_traits@D@std@@SAHPBD0I@Z
?copy@?$char_traits@D@std@@SAPADPADPBDI@Z
?compare@?$char_traits@_W@std@@SAHPB_W0I@Z
?copy@?$char_traits@_W@std@@SAPA_WPA_WPB_WI@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?freeze@strstreambuf@std@@QAEX_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V32@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
Netbios
NetApiBufferFree
NetWkstaTransportEnum
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SetLoadQMTrojanPlug
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ