93d856a0bf5e3a0318e3d5e4f7f7141c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

93d856a0bf5e3a0318e3d5e4f7f7141c_JaffaCakes118
Size

1.0MB
MD5

93d856a0bf5e3a0318e3d5e4f7f7141c
SHA1

f96b8cf7729e91c7158891f21a5f3ce61ba77215
SHA256

d1ca70318a894bc198a75a11e98c5fcc61fde3eafb095775027b34c8906abce3
SHA512

f8933be5e7964572c10b1e0d4d1b03d119a52fbc878eaaccaa649464174867e5230889ccd11a71990f1e8b406cc277804612edcdf421c4bcd13e456f709c0c39
SSDEEP

24576:LuOiY2+yEInHlNneE25G+gL4+I9SIqzVQKL5Qw0pwVT:KnUCne75G1M695Qwwc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93d856a0bf5e3a0318e3d5e4f7f7141c_JaffaCakes118

Files

93d856a0bf5e3a0318e3d5e4f7f7141c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

608751426d70d300ff07082e4dd75c45

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wonauth

?GetCommunityId@WON_AuthCertificate1@@QBEKXZ
?GetNextKey@WON_AuthPublicKeyBlock1@@QBE?AUPubKeyReturn@1@XZ
?Verify@WON_AuthFamilyBuffer@@QBEHPBEG@Z
?GetUserId@WON_AuthCertificate1@@QBEKXZ
?DeleteAuthCertificate1@WON_AuthFactory@@SAXPAVWON_AuthCertificate1@@@Z
?GetRawLen@WON_AuthFamilyBuffer@@QBEGXZ
?GetFirstKey@WON_AuthPublicKeyBlock1@@QBE?AUPubKeyReturn@1@XZ
?GetNumKeys@WON_AuthPublicKeyBlock1@@QBEHXZ
?DeleteAuthPublicKeyBlock1@WON_AuthFactory@@SAXPAVWON_AuthPublicKeyBlock1@@@Z
?NewAuthPublicKeyBlock1@WON_AuthFactory@@SAPAVWON_AuthPublicKeyBlock1@@PBEG@Z
?NewAuthCertificate1@WON_AuthFactory@@SAPAVWON_AuthCertificate1@@PBEG@Z
?IsValid@WON_AuthFamilyBuffer@@QBEHXZ
?GetIssueTime@WON_AuthFamilyBuffer@@QBEJXZ
?GetBlockId@WON_AuthPublicKeyBlock1@@QBEGXZ
?GetExpireTime@WON_AuthFamilyBuffer@@QBEJXZ
?GetPubKey@WON_AuthCertificate1@@QBEPBEXZ
?GetRaw@WON_AuthFamilyBuffer@@QBEPBEXZ
?GetPubKeyLen@WON_AuthCertificate1@@QBEGXZ

woncrypt

?GetKeyLen@WON_CryptKeyBase@@QBEGXZ
?NewEGPrivateKey@WON_CryptFactory@@SAPAVWON_EGPrivateKey@@GPBE@Z
?DeleteEGPublicKey@WON_CryptFactory@@SAXPAVWON_EGPublicKey@@@Z
?GetKey@WON_CryptKeyBase@@QBEPBEXZ
?NewEGPublicKey@WON_CryptFactory@@SAPAVWON_EGPublicKey@@GPBE@Z
?Decrypt@WON_EGPrivateKey@@QAE?AVCryptReturn@WON_CryptKeyBase@@PBEK@Z
?Encrypt@WON_EGPublicKey@@QAE?AVCryptReturn@WON_CryptKeyBase@@PBXK@Z
?NewBFSymmetricKey@WON_CryptFactory@@SAPAVWON_BFSymmetricKey@@GPBE@Z
?Decrypt@WON_BFSymmetricKey@@QAE?AVCryptReturn@WON_CryptKeyBase@@PBEK@Z
?Sign@WON_EGPrivateKey@@QAE?AVCryptReturn@WON_CryptKeyBase@@PBXK@Z
?DeleteEGPrivateKey@WON_CryptFactory@@SAXPAVWON_EGPrivateKey@@@Z
??4CryptReturn@WON_CryptKeyBase@@QAEAAV01@ABV01@@Z
??0CryptReturn@WON_CryptKeyBase@@QAE@PAEK@Z
??1CryptReturn@WON_CryptKeyBase@@QAE@XZ
?Encrypt@WON_BFSymmetricKey@@QAE?AVCryptReturn@WON_CryptKeyBase@@PBXK@Z
?DeleteBFSymmetricKey@WON_CryptFactory@@SAXPAVWON_BFSymmetricKey@@@Z

vgui

?wasMouseReleased@App@vgui@@UAE_NW4MouseCode@2@PAVPanel@2@@Z
?isMouseDown@App@vgui@@UAE_NW4MouseCode@2@PAVPanel@2@@Z
?wasMouseDoublePressed@App@vgui@@UAE_NW4MouseCode@2@PAVPanel@2@@Z
?wasKeyPressed@App@vgui@@UAE_NW4KeyCode@2@PAVPanel@2@@Z
?wasKeyTyped@App@vgui@@UAE_NW4KeyCode@2@PAVPanel@2@@Z
?isKeyDown@App@vgui@@UAE_NW4KeyCode@2@PAVPanel@2@@Z
?stop@App@vgui@@UAEXXZ
?start@App@vgui@@UAEXXZ
??0App@vgui@@QAE@_N@Z
?wasKeyReleased@App@vgui@@UAE_NW4KeyCode@2@PAVPanel@2@@Z
?addTickSignal@App@vgui@@UAEXPAVTickSignal@2@@Z
?setCursorPos@App@vgui@@UAEXHH@Z
?getCursorPos@App@vgui@@UAEXAAH0@Z
?getBitmap@Cursor@vgui@@UAEPAVBitmap@2@XZ
?getHotspot@Cursor@vgui@@UAEXAAH0@Z
?privateInit@Cursor@vgui@@EAEXPAVBitmap@2@HH@Z
?getDefaultCursor@Cursor@vgui@@UAE?AW4DefaultCursor@12@XZ
?wasMousePressed@App@vgui@@UAE_NW4MouseCode@2@PAVPanel@2@@Z
?externalTick@App@vgui@@UAEXXZ
?setMouseArena@App@vgui@@UAEXPAVPanel@2@@Z
?setMouseArena@App@vgui@@UAEXHHHH_N@Z
?internalTick@App@vgui@@MAEXXZ
?updateMouseFocus@App@vgui@@EAEXHHPAVSurfaceBase@2@@Z
?init@App@vgui@@EAEXXZ
?internalKeyReleased@App@vgui@@UAEXW4KeyCode@2@PAVSurfaceBase@2@@Z
?internalKeyTyped@App@vgui@@UAEXW4KeyCode@2@PAVSurfaceBase@2@@Z
?internalKeyPressed@App@vgui@@UAEXW4KeyCode@2@PAVSurfaceBase@2@@Z
?internalMouseWheeled@App@vgui@@UAEXHPAVSurfaceBase@2@@Z
?internalMouseReleased@App@vgui@@UAEXW4MouseCode@2@PAVSurfaceBase@2@@Z
?internalMouseDoublePressed@App@vgui@@UAEXW4MouseCode@2@PAVSurfaceBase@2@@Z
?internalMousePressed@App@vgui@@UAEXW4MouseCode@2@PAVSurfaceBase@2@@Z
?internalCursorMoved@App@vgui@@UAEXHHPAVSurfaceBase@2@@Z
?run@App@vgui@@UAEXXZ
?setMinimumTickMillisInterval@App@vgui@@UAEXH@Z
?getCursorOveride@App@vgui@@UAEPAVCursor@2@XZ
?setCursorOveride@App@vgui@@UAEXPAVCursor@2@@Z
?getRegistryInteger@App@vgui@@UAE_NPBDAAH@Z
?setRegistryInteger@App@vgui@@UAE_NPBDH@Z
?getRegistryString@App@vgui@@UAE_NPBDPADH@Z
?setRegistryString@App@vgui@@UAE_NPBD0@Z
?internalSetMouseArena@App@vgui@@UAEXHHHH_N@Z
?reset@App@vgui@@UAEXXZ
?getClipboardText@App@vgui@@UAEHHPADH@Z
?setClipboardText@App@vgui@@UAEXPBDH@Z
?getClipboardTextCount@App@vgui@@UAEHXZ
?getKeyCodeText@App@vgui@@UAEXW4KeyCode@2@PADH@Z
?getKeyCodeChar@App@vgui@@UAEDW4KeyCode@2@_N@Z
?getTimeMillis@App@vgui@@UAEJXZ
?enableBuildMode@App@vgui@@UAEXXZ
?getScheme@App@vgui@@UAEPAVScheme@2@XZ
?setScheme@App@vgui@@UAEXPAVScheme@2@@Z
?repaintAll@App@vgui@@UAEXXZ
?getFocus@App@vgui@@UAEPAVPanel@2@XZ
?setMouseCapture@App@vgui@@UAEXPAVPanel@2@@Z
?requestFocus@App@vgui@@UAEXPAVPanel@2@@Z
?platTick@App@vgui@@MAEXXZ
?setMouseFocus@App@vgui@@EAEXPAVPanel@2@@Z
?surfaceBaseCreated@App@vgui@@MAEXPAVSurfaceBase@2@@Z
?surfaceBaseDeleted@App@vgui@@MAEXPAVSurfaceBase@2@@Z

mss32

_AIL_set_stream_user_data@12
_AIL_pause_stream@8
_AIL_set_stream_loop_count@8
_AIL_close_stream@4
_AIL_open_stream@12
_AIL_stream_playback_rate@4
_AIL_start_stream@4
_AIL_set_stream_volume@8
_AIL_close_digital_driver@4
_AIL_shutdown@0
_AIL_set_redist_directory@4
_AIL_startup@0
_AIL_set_preference@8
_AIL_open_digital_driver@16

ddraw

DirectDrawEnumerateA
DirectDrawCreate

winmm

mmioSeek
mmioGetInfo
mciSendCommandA
mciGetErrorStringA
timeGetTime
joyGetDevCapsA
joyGetPosEx
joyGetNumDevs
mciGetDeviceIDA
mciSendStringA
waveOutWrite
waveOutPrepareHeader
sndPlaySoundA
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetDevCapsA
mixerOpen
mixerGetNumDevs
mixerClose
mixerGetControlDetailsA
mixerSetControlDetails
mmioClose
mmioAscend
mmioRead
mmioDescend
mmioOpenA
mmioAdvance
mmioSetInfo

kernel32

LoadResource
GlobalLock
GetTickCount
GetProcAddress
LockResource
GlobalAlloc
QueryPerformanceCounter
FindResourceA
GlobalFree
QueryPerformanceFrequency
OutputDebugStringA
GetLastError
GetCurrentThreadId
CreateProcessA
WinExec
GetVersionExA
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileSectionA
CreateEventA
GlobalMemoryStatus
lstrlenA
lstrcatA
SetErrorMode
LeaveCriticalSection
ResetEvent
WaitForSingleObject
EnterCriticalSection
DeleteCriticalSection
TerminateThread
SetEvent
CreateThread
InitializeCriticalSection
LocalFree
CopyFileA
GlobalHandle
GetTimeZoneInformation
lstrcpynA
lstrcmpiA
ReleaseMutex
InterlockedExchange
CreateMutexA
GetCurrentProcess
GetFullPathNameA
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
FindClose
SetVolumeLabelA
_lclose
FormatMessageA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
InterlockedIncrement
MultiByteToWideChar
SetLastError
MulDiv
GetCurrentThread
lstrcmpA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
OpenFile
GlobalUnlock
GetFileAttributesA
GetTempFileNameA
GetFileTime
DuplicateHandle
ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
GetStringTypeExA
GetThreadLocale
GlobalFlags
SizeofResource
TlsAlloc
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
LocalFileTimeToFileTime
SystemTimeToFileTime
RtlUnwind
GetSystemTime
GetLocalTime
IsBadReadPtr
LoadLibraryA
TerminateProcess
SetEnvironmentVariableA
SetCurrentDirectoryA
GetSystemTimeAsFileTime
CreateDirectoryA
GetStartupInfoA
RaiseException
GetACP
HeapReAlloc
HeapSize
SetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadCodePtr
CompareStringA
CompareStringW
FreeLibrary
GetProcessHeap
HeapAlloc
HeapFree
GetFileSize
GetDriveTypeA
GetVolumeInformationA
GetDiskFreeSpaceA
CreateFileA
WriteFile
CloseHandle
DeleteFileA
Sleep
SetFileAttributesA
FileTimeToSystemTime
LocalAlloc
InterlockedDecrement
WideCharToMultiByte
GetProfileStringA
GetVersion
SetFileTime
GetExitCodeProcess
lstrcpyA
ExitProcess

user32

SetForegroundWindow
ReleaseDC
GetDC
GetDesktopWindow
EndPaint
BeginPaint
MsgWaitForMultipleObjects
GetForegroundWindow
IsWindowVisible
SetWindowPos
SetCapture
ReleaseCapture
GetCapture
RedrawWindow
PostMessageA
SetWindowsHookExA
CallNextHookEx
GetKeyState
DestroyWindow
UnhookWindowsHookEx
CreateWindowExA
AdjustWindowRectEx
RegisterClassA
LoadIconA
UnregisterClassA
ShowCursor
GetWindowLongA
CallWindowProcA
PtInRect
GetAsyncKeyState
KillTimer
SetTimer
SetCursor
RegisterWindowMessageA
ChangeDisplaySettingsA
GetActiveWindow
wsprintfA
ScreenToClient
GetCursorPos
DrawTextA
GetNextDlgTabItem
LoadBitmapA
DestroyCaret
GetClassNameA
GetWindow
ClientToScreen
IntersectRect
HideCaret
ShowCaret
EqualRect
AppendMenuA
CreatePopupMenu
DrawFocusRect
GetMenuState
DrawTextExA
BringWindowToTop
DispatchMessageA
TranslateMessage
OemToCharA
CharToOemA
GetDlgItem
CreateDialogIndirectParamA
EndDialog
GetWindowPlacement
IsIconic
SystemParametersInfoA
GetLastActivePopup
GetMessagePos
GetMessageTime
RemovePropA
GetPropA
SetPropA
GetClassLongA
GetDlgCtrlID
GetWindowTextA
GetWindowTextLengthA
TrackPopupMenu
GetMenuItemID
GetSubMenu
GetMenuItemCount
SetFocus
FindWindowA
WinHelpA
GetTopWindow
SetScrollPos
GetSysColor
MapWindowPoints
SendDlgItemMessageA
IsDialogMessageA
SetWindowTextA
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuCheckMarkDimensions
GetWindowDC
TabbedTextOutA
GrayStringA
CharUpperA
DestroyMenu
GetSysColorBrush
InsertMenuA
DeleteMenu
GetMenuStringA
GetParent
PeekMessageA
MoveWindow
MessageBoxA
ValidateRect
SetActiveWindow
GetWindowRect
GetSystemMetrics
LoadStringA
DefWindowProcA
GetClientRect
FrameRect
GetFocus
FillRect
CopyRect
LoadCursorA
InflateRect
SendMessageA
EnableWindow
LockWindowUpdate
ShowWindow
ClipCursor
UpdateWindow
SetWindowLongA
InvalidateRect
OffsetRect
UnionRect
PostQuitMessage
IsWindow
GetMenu
IsWindowEnabled
GetClassInfoA
GetMessageA
IsWindowUnicode
CharNextA
DefDlgProcA
ExcludeUpdateRgn

gdi32

SetBkColor
CreateBitmap
GetClipBox
GetTextExtentPointA
CreateDIBitmap
SetTextColor
CreateFontA
GetStockObject
StretchDIBits
SetDIBitsToDevice
SetStretchBltMode
DPtoLP
CreateFontIndirectA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
LineTo
MoveToEx
IntersectClipRect
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
StretchBlt
GetDeviceCaps
PatBlt
GetDIBits
GetObjectA
CreatePen
GetCurrentObject
DeleteObject
GetTextExtentPoint32A
GetTextMetricsA
CreateICA
Ellipse
GetBoundsRect
DeleteDC
CreateDIBSection
SelectObject
RestoreDC
CreateSolidBrush
SaveDC
SetBkMode

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCreateKeyA
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA
GetSecurityDescriptorLength
IsValidSid
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegFlushKey
RegOpenKeyExA
GetSecurityDescriptorOwner
IsValidAcl
GetSecurityDescriptorDacl
IsValidSecurityDescriptor
SetKernelObjectSecurity
GetKernelObjectSecurity
GetSecurityDescriptorControl
AdjustTokenPrivileges
LookupPrivilegeValueA
RegDeleteKeyA
RegEnumKeyExA
GetSecurityDescriptorSacl
GetSecurityDescriptorGroup
OpenProcessToken
GetFileSecurityA
SetFileSecurityA

shell32

ShellExecuteA

comctl32

ord17
ImageList_Destroy

wsock32

gethostbyname
WSAAsyncSelect
accept
WSASetLastError
inet_addr
ntohs
gethostname
WSAGetLastError
WSAStartup
WSACleanup
htons
closesocket
ioctlsocket
inet_ntoa
setsockopt
socket
bind
htonl
connect
select
send
recv
sendto
recvfrom

wininet

InternetFindNextFileA
FtpFindFirstFileA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetQueryDataAvailable
InternetConnectA
FtpSetCurrentDirectoryA
FtpGetCurrentDirectoryA
FtpOpenFileA
InternetGetLastResponseInfoA
InternetCrackUrlA

Exports

Exports

??0?$Dar@D@vgui@@QAE@H@Z
??0?$Dar@D@vgui@@QAE@XZ
??0?$Dar@H@vgui@@QAE@H@Z
??0?$Dar@H@vgui@@QAE@XZ
??0?$Dar@PAD@vgui@@QAE@H@Z
??0?$Dar@PAD@vgui@@QAE@XZ
??0?$Dar@PAV?$Dar@D@vgui@@@vgui@@QAE@H@Z
??0?$Dar@PAV?$Dar@D@vgui@@@vgui@@QAE@XZ
??0?$Dar@PAVActionSignal@vgui@@@vgui@@QAE@H@Z
??0?$Dar@PAVActionSignal@vgui@@@vgui@@QAE@XZ
??0?$Dar@PAVButton@vgui@@@vgui@@QAE@H@Z
??0?$Dar@PAVButton@vgui@@@vgui@@QAE@XZ
??0?$Dar@PAVChangeSignal@vgui@@@vgui@@QAE@H@Z
??0?$Dar@PAVChangeSignal@vgui@@@vgui@@QAE@XZ
??0?$Dar@PAVDesktopIcon@vgui@@@vgui@@QAE@H@Z
??0?$Dar@PAVDesktopIcon@vgui@@@vgui@@QAE@XZ
??0?$Dar@PAVFocusChangeSignal@vgui@@@vgui@@QAE@H@Z
??0?$Dar@PAVFocusChangeSignal@vgui@@@vgui@@QAE@XZ
??0?$Dar@PAVFrame@vgui@@@vgui@@QAE@H@Z
??0?$Dar@PAVFrame@vgui@@@vgui@@QAE@XZ
??0?$Dar@PAVFrameSignal@vgui@@@vgui@@QAE@H@Z
??0?$Dar@PAVFrameSignal@vgui@@@vgui@@QAE@XZ
??0?$Dar@PAVInputSignal@vgui@@@vgui@@QAE@H@Z
??0?$Dar@PAVInputSignal@vgui@@@vgui@@QAE@XZ
??0?$Dar@PAVIntChangeSignal@vgui@@@vgui@@QAE@H@Z
??0?$Dar@PAVIntChangeSignal@vgui@@@vgui@@QAE@XZ
??0?$Dar@PAVLabel@vgui@@@vgui@@QAE@H@Z
??0?$Dar@PAVLabel@vgui@@@vgui@@QAE@XZ
??0?$Dar@PAVPanel@vgui@@@vgui@@QAE@H@Z
??0?$Dar@PAVPanel@vgui@@@vgui@@QAE@XZ
??0?$Dar@PAVRepaintSignal@vgui@@@vgui@@QAE@H@Z
??0?$Dar@PAVRepaintSignal@vgui@@@vgui@@QAE@XZ
??0?$Dar@PAVSurfaceBase@vgui@@@vgui@@QAE@H@Z
??0?$Dar@PAVSurfaceBase@vgui@@@vgui@@QAE@XZ
??0?$Dar@PAVTickSignal@vgui@@@vgui@@QAE@H@Z
??0?$Dar@PAVTickSignal@vgui@@@vgui@@QAE@XZ
??0App@vgui@@QAE@ABV01@@Z
??0Cursor@vgui@@QAE@ABV01@@Z
??4?$Dar@D@vgui@@QAEAAV01@ABV01@@Z
??4?$Dar@H@vgui@@QAEAAV01@ABV01@@Z
??4?$Dar@PAD@vgui@@QAEAAV01@ABV01@@Z
??4?$Dar@PAV?$Dar@D@vgui@@@vgui@@QAEAAV01@ABV01@@Z
??4?$Dar@PAVActionSignal@vgui@@@vgui@@QAEAAV01@ABV01@@Z
??4?$Dar@PAVButton@vgui@@@vgui@@QAEAAV01@ABV01@@Z
??4?$Dar@PAVChangeSignal@vgui@@@vgui@@QAEAAV01@ABV01@@Z
??4?$Dar@PAVDesktopIcon@vgui@@@vgui@@QAEAAV01@ABV01@@Z
??4?$Dar@PAVFocusChangeSignal@vgui@@@vgui@@QAEAAV01@ABV01@@Z
??4?$Dar@PAVFrame@vgui@@@vgui@@QAEAAV01@ABV01@@Z
??4?$Dar@PAVFrameSignal@vgui@@@vgui@@QAEAAV01@ABV01@@Z
??4?$Dar@PAVInputSignal@vgui@@@vgui@@QAEAAV01@ABV01@@Z
??4?$Dar@PAVIntChangeSignal@vgui@@@vgui@@QAEAAV01@ABV01@@Z
??4?$Dar@PAVLabel@vgui@@@vgui@@QAEAAV01@ABV01@@Z
??4?$Dar@PAVPanel@vgui@@@vgui@@QAEAAV01@ABV01@@Z
??4?$Dar@PAVRepaintSignal@vgui@@@vgui@@QAEAAV01@ABV01@@Z
??4?$Dar@PAVSurfaceBase@vgui@@@vgui@@QAEAAV01@ABV01@@Z
??4?$Dar@PAVTickSignal@vgui@@@vgui@@QAEAAV01@ABV01@@Z
??4App@vgui@@QAEAAV01@ABV01@@Z
??4Cursor@vgui@@QAEAAV01@ABV01@@Z
??A?$Dar@D@vgui@@QAEDH@Z
??A?$Dar@H@vgui@@QAEHH@Z
??A?$Dar@PAD@vgui@@QAEPADH@Z
??A?$Dar@PAV?$Dar@D@vgui@@@vgui@@QAEPAV?$Dar@D@1@H@Z
??A?$Dar@PAVActionSignal@vgui@@@vgui@@QAEPAVActionSignal@1@H@Z
??A?$Dar@PAVButton@vgui@@@vgui@@QAEPAVButton@1@H@Z
??A?$Dar@PAVChangeSignal@vgui@@@vgui@@QAEPAVChangeSignal@1@H@Z
??A?$Dar@PAVDesktopIcon@vgui@@@vgui@@QAEPAVDesktopIcon@1@H@Z
??A?$Dar@PAVFocusChangeSignal@vgui@@@vgui@@QAEPAVFocusChangeSignal@1@H@Z
??A?$Dar@PAVFrame@vgui@@@vgui@@QAEPAVFrame@1@H@Z
??A?$Dar@PAVFrameSignal@vgui@@@vgui@@QAEPAVFrameSignal@1@H@Z
??A?$Dar@PAVInputSignal@vgui@@@vgui@@QAEPAVInputSignal@1@H@Z
??A?$Dar@PAVIntChangeSignal@vgui@@@vgui@@QAEPAVIntChangeSignal@1@H@Z
??A?$Dar@PAVLabel@vgui@@@vgui@@QAEPAVLabel@1@H@Z
??A?$Dar@PAVPanel@vgui@@@vgui@@QAEPAVPanel@1@H@Z
??A?$Dar@PAVRepaintSignal@vgui@@@vgui@@QAEPAVRepaintSignal@1@H@Z
??A?$Dar@PAVSurfaceBase@vgui@@@vgui@@QAEPAVSurfaceBase@1@H@Z
??A?$Dar@PAVTickSignal@vgui@@@vgui@@QAEPAVTickSignal@1@H@Z
??_7App@vgui@@6B@
??_7Cursor@vgui@@6B@
?addElement@?$Dar@D@vgui@@QAEXD@Z
?addElement@?$Dar@H@vgui@@QAEXH@Z
?addElement@?$Dar@PAD@vgui@@QAEXPAD@Z
?addElement@?$Dar@PAV?$Dar@D@vgui@@@vgui@@QAEXPAV?$Dar@D@2@@Z
?addElement@?$Dar@PAVActionSignal@vgui@@@vgui@@QAEXPAVActionSignal@2@@Z
?addElement@?$Dar@PAVButton@vgui@@@vgui@@QAEXPAVButton@2@@Z
?addElement@?$Dar@PAVChangeSignal@vgui@@@vgui@@QAEXPAVChangeSignal@2@@Z
?addElement@?$Dar@PAVDesktopIcon@vgui@@@vgui@@QAEXPAVDesktopIcon@2@@Z
?addElement@?$Dar@PAVFocusChangeSignal@vgui@@@vgui@@QAEXPAVFocusChangeSignal@2@@Z
?addElement@?$Dar@PAVFrame@vgui@@@vgui@@QAEXPAVFrame@2@@Z
?addElement@?$Dar@PAVFrameSignal@vgui@@@vgui@@QAEXPAVFrameSignal@2@@Z
?addElement@?$Dar@PAVInputSignal@vgui@@@vgui@@QAEXPAVInputSignal@2@@Z
?addElement@?$Dar@PAVIntChangeSignal@vgui@@@vgui@@QAEXPAVIntChangeSignal@2@@Z
?addElement@?$Dar@PAVLabel@vgui@@@vgui@@QAEXPAVLabel@2@@Z
?addElement@?$Dar@PAVPanel@vgui@@@vgui@@QAEXPAVPanel@2@@Z
?addElement@?$Dar@PAVRepaintSignal@vgui@@@vgui@@QAEXPAVRepaintSignal@2@@Z
?addElement@?$Dar@PAVSurfaceBase@vgui@@@vgui@@QAEXPAVSurfaceBase@2@@Z
?addElement@?$Dar@PAVTickSignal@vgui@@@vgui@@QAEXPAVTickSignal@2@@Z
?ensureCapacity@?$Dar@D@vgui@@QAEXH@Z
?ensureCapacity@?$Dar@H@vgui@@QAEXH@Z
?ensureCapacity@?$Dar@PAD@vgui@@QAEXH@Z
?ensureCapacity@?$Dar@PAV?$Dar@D@vgui@@@vgui@@QAEXH@Z
?ensureCapacity@?$Dar@PAVActionSignal@vgui@@@vgui@@QAEXH@Z
?ensureCapacity@?$Dar@PAVButton@vgui@@@vgui@@QAEXH@Z
?ensureCapacity@?$Dar@PAVChangeSignal@vgui@@@vgui@@QAEXH@Z
?ensureCapacity@?$Dar@PAVDesktopIcon@vgui@@@vgui@@QAEXH@Z
?ensureCapacity@?$Dar@PAVFocusChangeSignal@vgui@@@vgui@@QAEXH@Z
?ensureCapacity@?$Dar@PAVFrame@vgui@@@vgui@@QAEXH@Z
?ensureCapacity@?$Dar@PAVFrameSignal@vgui@@@vgui@@QAEXH@Z
?ensureCapacity@?$Dar@PAVInputSignal@vgui@@@vgui@@QAEXH@Z
?ensureCapacity@?$Dar@PAVIntChangeSignal@vgui@@@vgui@@QAEXH@Z
?ensureCapacity@?$Dar@PAVLabel@vgui@@@vgui@@QAEXH@Z
?ensureCapacity@?$Dar@PAVPanel@vgui@@@vgui@@QAEXH@Z
?ensureCapacity@?$Dar@PAVRepaintSignal@vgui@@@vgui@@QAEXH@Z
?ensureCapacity@?$Dar@PAVSurfaceBase@vgui@@@vgui@@QAEXH@Z
?ensureCapacity@?$Dar@PAVTickSignal@vgui@@@vgui@@QAEXH@Z
?getCount@?$Dar@D@vgui@@QAEHXZ
?getCount@?$Dar@H@vgui@@QAEHXZ
?getCount@?$Dar@PAD@vgui@@QAEHXZ
?getCount@?$Dar@PAV?$Dar@D@vgui@@@vgui@@QAEHXZ
?getCount@?$Dar@PAVActionSignal@vgui@@@vgui@@QAEHXZ
?getCount@?$Dar@PAVButton@vgui@@@vgui@@QAEHXZ
?getCount@?$Dar@PAVChangeSignal@vgui@@@vgui@@QAEHXZ
?getCount@?$Dar@PAVDesktopIcon@vgui@@@vgui@@QAEHXZ
?getCount@?$Dar@PAVFocusChangeSignal@vgui@@@vgui@@QAEHXZ
?getCount@?$Dar@PAVFrame@vgui@@@vgui@@QAEHXZ
?getCount@?$Dar@PAVFrameSignal@vgui@@@vgui@@QAEHXZ
?getCount@?$Dar@PAVInputSignal@vgui@@@vgui@@QAEHXZ
?getCount@?$Dar@PAVIntChangeSignal@vgui@@@vgui@@QAEHXZ
?getCount@?$Dar@PAVLabel@vgui@@@vgui@@QAEHXZ
?getCount@?$Dar@PAVPanel@vgui@@@vgui@@QAEHXZ
?getCount@?$Dar@PAVRepaintSignal@vgui@@@vgui@@QAEHXZ
?getCount@?$Dar@PAVSurfaceBase@vgui@@@vgui@@QAEHXZ
?getCount@?$Dar@PAVTickSignal@vgui@@@vgui@@QAEHXZ
?hasElement@?$Dar@D@vgui@@QAE_ND@Z
?hasElement@?$Dar@H@vgui@@QAE_NH@Z
?hasElement@?$Dar@PAD@vgui@@QAE_NPAD@Z
?hasElement@?$Dar@PAV?$Dar@D@vgui@@@vgui@@QAE_NPAV?$Dar@D@2@@Z
?hasElement@?$Dar@PAVActionSignal@vgui@@@vgui@@QAE_NPAVActionSignal@2@@Z
?hasElement@?$Dar@PAVButton@vgui@@@vgui@@QAE_NPAVButton@2@@Z
?hasElement@?$Dar@PAVChangeSignal@vgui@@@vgui@@QAE_NPAVChangeSignal@2@@Z
?hasElement@?$Dar@PAVDesktopIcon@vgui@@@vgui@@QAE_NPAVDesktopIcon@2@@Z
?hasElement@?$Dar@PAVFocusChangeSignal@vgui@@@vgui@@QAE_NPAVFocusChangeSignal@2@@Z
?hasElement@?$Dar@PAVFrame@vgui@@@vgui@@QAE_NPAVFrame@2@@Z
?hasElement@?$Dar@PAVFrameSignal@vgui@@@vgui@@QAE_NPAVFrameSignal@2@@Z
?hasElement@?$Dar@PAVInputSignal@vgui@@@vgui@@QAE_NPAVInputSignal@2@@Z
?hasElement@?$Dar@PAVIntChangeSignal@vgui@@@vgui@@QAE_NPAVIntChangeSignal@2@@Z
?hasElement@?$Dar@PAVLabel@vgui@@@vgui@@QAE_NPAVLabel@2@@Z
?hasElement@?$Dar@PAVPanel@vgui@@@vgui@@QAE_NPAVPanel@2@@Z
?hasElement@?$Dar@PAVRepaintSignal@vgui@@@vgui@@QAE_NPAVRepaintSignal@2@@Z
?hasElement@?$Dar@PAVSurfaceBase@vgui@@@vgui@@QAE_NPAVSurfaceBase@2@@Z
?hasElement@?$Dar@PAVTickSignal@vgui@@@vgui@@QAE_NPAVTickSignal@2@@Z
?insertElementAt@?$Dar@D@vgui@@QAEXDH@Z
?insertElementAt@?$Dar@H@vgui@@QAEXHH@Z
?insertElementAt@?$Dar@PAD@vgui@@QAEXPADH@Z
?insertElementAt@?$Dar@PAV?$Dar@D@vgui@@@vgui@@QAEXPAV?$Dar@D@2@H@Z
?insertElementAt@?$Dar@PAVActionSignal@vgui@@@vgui@@QAEXPAVActionSignal@2@H@Z
?insertElementAt@?$Dar@PAVButton@vgui@@@vgui@@QAEXPAVButton@2@H@Z
?insertElementAt@?$Dar@PAVChangeSignal@vgui@@@vgui@@QAEXPAVChangeSignal@2@H@Z
?insertElementAt@?$Dar@PAVDesktopIcon@vgui@@@vgui@@QAEXPAVDesktopIcon@2@H@Z
?insertElementAt@?$Dar@PAVFocusChangeSignal@vgui@@@vgui@@QAEXPAVFocusChangeSignal@2@H@Z
?insertElementAt@?$Dar@PAVFrame@vgui@@@vgui@@QAEXPAVFrame@2@H@Z
?insertElementAt@?$Dar@PAVFrameSignal@vgui@@@vgui@@QAEXPAVFrameSignal@2@H@Z
?insertElementAt@?$Dar@PAVInputSignal@vgui@@@vgui@@QAEXPAVInputSignal@2@H@Z
?insertElementAt@?$Dar@PAVIntChangeSignal@vgui@@@vgui@@QAEXPAVIntChangeSignal@2@H@Z
?insertElementAt@?$Dar@PAVLabel@vgui@@@vgui@@QAEXPAVLabel@2@H@Z
?insertElementAt@?$Dar@PAVPanel@vgui@@@vgui@@QAEXPAVPanel@2@H@Z
?insertElementAt@?$Dar@PAVRepaintSignal@vgui@@@vgui@@QAEXPAVRepaintSignal@2@H@Z
?insertElementAt@?$Dar@PAVSurfaceBase@vgui@@@vgui@@QAEXPAVSurfaceBase@2@H@Z
?insertElementAt@?$Dar@PAVTickSignal@vgui@@@vgui@@QAEXPAVTickSignal@2@H@Z
?putElement@?$Dar@D@vgui@@QAEXD@Z
?putElement@?$Dar@H@vgui@@QAEXH@Z
?putElement@?$Dar@PAD@vgui@@QAEXPAD@Z
?putElement@?$Dar@PAV?$Dar@D@vgui@@@vgui@@QAEXPAV?$Dar@D@2@@Z
?putElement@?$Dar@PAVActionSignal@vgui@@@vgui@@QAEXPAVActionSignal@2@@Z
?putElement@?$Dar@PAVButton@vgui@@@vgui@@QAEXPAVButton@2@@Z
?putElement@?$Dar@PAVChangeSignal@vgui@@@vgui@@QAEXPAVChangeSignal@2@@Z
?putElement@?$Dar@PAVDesktopIcon@vgui@@@vgui@@QAEXPAVDesktopIcon@2@@Z
?putElement@?$Dar@PAVFocusChangeSignal@vgui@@@vgui@@QAEXPAVFocusChangeSignal@2@@Z
?putElement@?$Dar@PAVFrame@vgui@@@vgui@@QAEXPAVFrame@2@@Z
?putElement@?$Dar@PAVFrameSignal@vgui@@@vgui@@QAEXPAVFrameSignal@2@@Z
?putElement@?$Dar@PAVInputSignal@vgui@@@vgui@@QAEXPAVInputSignal@2@@Z
?putElement@?$Dar@PAVIntChangeSignal@vgui@@@vgui@@QAEXPAVIntChangeSignal@2@@Z
?putElement@?$Dar@PAVLabel@vgui@@@vgui@@QAEXPAVLabel@2@@Z
?putElement@?$Dar@PAVPanel@vgui@@@vgui@@QAEXPAVPanel@2@@Z
?putElement@?$Dar@PAVRepaintSignal@vgui@@@vgui@@QAEXPAVRepaintSignal@2@@Z
?putElement@?$Dar@PAVSurfaceBase@vgui@@@vgui@@QAEXPAVSurfaceBase@2@@Z
?putElement@?$Dar@PAVTickSignal@vgui@@@vgui@@QAEXPAVTickSignal@2@@Z
?removeAll@?$Dar@D@vgui@@QAEXXZ
?removeAll@?$Dar@H@vgui@@QAEXXZ
?removeAll@?$Dar@PAD@vgui@@QAEXXZ
?removeAll@?$Dar@PAV?$Dar@D@vgui@@@vgui@@QAEXXZ
?removeAll@?$Dar@PAVActionSignal@vgui@@@vgui@@QAEXXZ
?removeAll@?$Dar@PAVButton@vgui@@@vgui@@QAEXXZ
?removeAll@?$Dar@PAVChangeSignal@vgui@@@vgui@@QAEXXZ
?removeAll@?$Dar@PAVDesktopIcon@vgui@@@vgui@@QAEXXZ
?removeAll@?$Dar@PAVFocusChangeSignal@vgui@@@vgui@@QAEXXZ
?removeAll@?$Dar@PAVFrame@vgui@@@vgui@@QAEXXZ
?removeAll@?$Dar@PAVFrameSignal@vgui@@@vgui@@QAEXXZ
?removeAll@?$Dar@PAVInputSignal@vgui@@@vgui@@QAEXXZ
?removeAll@?$Dar@PAVIntChangeSignal@vgui@@@vgui@@QAEXXZ
?removeAll@?$Dar@PAVLabel@vgui@@@vgui@@QAEXXZ
?removeAll@?$Dar@PAVPanel@vgui@@@vgui@@QAEXXZ
?removeAll@?$Dar@PAVRepaintSignal@vgui@@@vgui@@QAEXXZ
?removeAll@?$Dar@PAVSurfaceBase@vgui@@@vgui@@QAEXXZ
?removeAll@?$Dar@PAVTickSignal@vgui@@@vgui@@QAEXXZ
?removeElement@?$Dar@D@vgui@@QAEXD@Z
?removeElement@?$Dar@H@vgui@@QAEXH@Z
?removeElement@?$Dar@PAD@vgui@@QAEXPAD@Z
?removeElement@?$Dar@PAV?$Dar@D@vgui@@@vgui@@QAEXPAV?$Dar@D@2@@Z
?removeElement@?$Dar@PAVActionSignal@vgui@@@vgui@@QAEXPAVActionSignal@2@@Z
?removeElement@?$Dar@PAVButton@vgui@@@vgui@@QAEXPAVButton@2@@Z
?removeElement@?$Dar@PAVChangeSignal@vgui@@@vgui@@QAEXPAVChangeSignal@2@@Z
?removeElement@?$Dar@PAVDesktopIcon@vgui@@@vgui@@QAEXPAVDesktopIcon@2@@Z
?removeElement@?$Dar@PAVFocusChangeSignal@vgui@@@vgui@@QAEXPAVFocusChangeSignal@2@@Z
?removeElement@?$Dar@PAVFrame@vgui@@@vgui@@QAEXPAVFrame@2@@Z
?removeElement@?$Dar@PAVFrameSignal@vgui@@@vgui@@QAEXPAVFrameSignal@2@@Z
?removeElement@?$Dar@PAVInputSignal@vgui@@@vgui@@QAEXPAVInputSignal@2@@Z
?removeElement@?$Dar@PAVIntChangeSignal@vgui@@@vgui@@QAEXPAVIntChangeSignal@2@@Z
?removeElement@?$Dar@PAVLabel@vgui@@@vgui@@QAEXPAVLabel@2@@Z
?removeElement@?$Dar@PAVPanel@vgui@@@vgui@@QAEXPAVPanel@2@@Z
?removeElement@?$Dar@PAVRepaintSignal@vgui@@@vgui@@QAEXPAVRepaintSignal@2@@Z
?removeElement@?$Dar@PAVSurfaceBase@vgui@@@vgui@@QAEXPAVSurfaceBase@2@@Z
?removeElement@?$Dar@PAVTickSignal@vgui@@@vgui@@QAEXPAVTickSignal@2@@Z
?removeElementAt@?$Dar@D@vgui@@QAEXH@Z
?removeElementAt@?$Dar@H@vgui@@QAEXH@Z
?removeElementAt@?$Dar@PAD@vgui@@QAEXH@Z
?removeElementAt@?$Dar@PAV?$Dar@D@vgui@@@vgui@@QAEXH@Z
?removeElementAt@?$Dar@PAVActionSignal@vgui@@@vgui@@QAEXH@Z
?removeElementAt@?$Dar@PAVButton@vgui@@@vgui@@QAEXH@Z
?removeElementAt@?$Dar@PAVChangeSignal@vgui@@@vgui@@QAEXH@Z
?removeElementAt@?$Dar@PAVDesktopIcon@vgui@@@vgui@@QAEXH@Z
?removeElementAt@?$Dar@PAVFocusChangeSignal@vgui@@@vgui@@QAEXH@Z
?removeElementAt@?$Dar@PAVFrame@vgui@@@vgui@@QAEXH@Z
?removeElementAt@?$Dar@PAVFrameSignal@vgui@@@vgui@@QAEXH@Z
?removeElementAt@?$Dar@PAVInputSignal@vgui@@@vgui@@QAEXH@Z
?removeElementAt@?$Dar@PAVIntChangeSignal@vgui@@@vgui@@QAEXH@Z
?removeElementAt@?$Dar@PAVLabel@vgui@@@vgui@@QAEXH@Z
?removeElementAt@?$Dar@PAVPanel@vgui@@@vgui@@QAEXH@Z
?removeElementAt@?$Dar@PAVRepaintSignal@vgui@@@vgui@@QAEXH@Z
?removeElementAt@?$Dar@PAVSurfaceBase@vgui@@@vgui@@QAEXH@Z
?removeElementAt@?$Dar@PAVTickSignal@vgui@@@vgui@@QAEXH@Z
?setCount@?$Dar@D@vgui@@QAEXH@Z
?setCount@?$Dar@H@vgui@@QAEXH@Z
?setCount@?$Dar@PAD@vgui@@QAEXH@Z
?setCount@?$Dar@PAV?$Dar@D@vgui@@@vgui@@QAEXH@Z
?setCount@?$Dar@PAVActionSignal@vgui@@@vgui@@QAEXH@Z
?setCount@?$Dar@PAVButton@vgui@@@vgui@@QAEXH@Z
?setCount@?$Dar@PAVChangeSignal@vgui@@@vgui@@QAEXH@Z
?setCount@?$Dar@PAVDesktopIcon@vgui@@@vgui@@QAEXH@Z
?setCount@?$Dar@PAVFocusChangeSignal@vgui@@@vgui@@QAEXH@Z
?setCount@?$Dar@PAVFrame@vgui@@@vgui@@QAEXH@Z
?setCount@?$Dar@PAVFrameSignal@vgui@@@vgui@@QAEXH@Z
?setCount@?$Dar@PAVInputSignal@vgui@@@vgui@@QAEXH@Z
?setCount@?$Dar@PAVIntChangeSignal@vgui@@@vgui@@QAEXH@Z
?setCount@?$Dar@PAVLabel@vgui@@@vgui@@QAEXH@Z
?setCount@?$Dar@PAVPanel@vgui@@@vgui@@QAEXH@Z
?setCount@?$Dar@PAVRepaintSignal@vgui@@@vgui@@QAEXH@Z
?setCount@?$Dar@PAVSurfaceBase@vgui@@@vgui@@QAEXH@Z
?setCount@?$Dar@PAVTickSignal@vgui@@@vgui@@QAEXH@Z
?setElementAt@?$Dar@D@vgui@@QAEXDH@Z
?setElementAt@?$Dar@H@vgui@@QAEXHH@Z
?setElementAt@?$Dar@PAD@vgui@@QAEXPADH@Z
?setElementAt@?$Dar@PAV?$Dar@D@vgui@@@vgui@@QAEXPAV?$Dar@D@2@H@Z
?setElementAt@?$Dar@PAVActionSignal@vgui@@@vgui@@QAEXPAVActionSignal@2@H@Z
?setElementAt@?$Dar@PAVButton@vgui@@@vgui@@QAEXPAVButton@2@H@Z
?setElementAt@?$Dar@PAVChangeSignal@vgui@@@vgui@@QAEXPAVChangeSignal@2@H@Z
?setElementAt@?$Dar@PAVDesktopIcon@vgui@@@vgui@@QAEXPAVDesktopIcon@2@H@Z
?setElementAt@?$Dar@PAVFocusChangeSignal@vgui@@@vgui@@QAEXPAVFocusChangeSignal@2@H@Z
?setElementAt@?$Dar@PAVFrame@vgui@@@vgui@@QAEXPAVFrame@2@H@Z
?setElementAt@?$Dar@PAVFrameSignal@vgui@@@vgui@@QAEXPAVFrameSignal@2@H@Z
?setElementAt@?$Dar@PAVInputSignal@vgui@@@vgui@@QAEXPAVInputSignal@2@H@Z
?setElementAt@?$Dar@PAVIntChangeSignal@vgui@@@vgui@@QAEXPAVIntChangeSignal@2@H@Z
?setElementAt@?$Dar@PAVLabel@vgui@@@vgui@@QAEXPAVLabel@2@H@Z
?setElementAt@?$Dar@PAVPanel@vgui@@@vgui@@QAEXPAVPanel@2@H@Z
?setElementAt@?$Dar@PAVRepaintSignal@vgui@@@vgui@@QAEXPAVRepaintSignal@2@H@Z
?setElementAt@?$Dar@PAVSurfaceBase@vgui@@@vgui@@QAEXPAVSurfaceBase@2@H@Z
?setElementAt@?$Dar@PAVTickSignal@vgui@@@vgui@@QAEXPAVTickSignal@2@H@Z

Sections

.text
Size: 688KB - Virtual size: 685KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 59.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

608751426d70d300ff07082e4dd75c45

Headers

File Characteristics

Imports

wonauth

woncrypt

vgui

mss32

ddraw

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

wsock32

wininet

Exports

Exports

Sections

.text Size: 688KB - Virtual size: 685KB

.rdata Size: 128KB - Virtual size: 127KB

.data Size: 52KB - Virtual size: 59.3MB

.rsrc Size: 116KB - Virtual size: 116KB

.text Size: 64KB - Virtual size: 64KB

.text
Size: 688KB - Virtual size: 685KB

.rdata
Size: 128KB - Virtual size: 127KB

.data
Size: 52KB - Virtual size: 59.3MB

.rsrc
Size: 116KB - Virtual size: 116KB

.text
Size: 64KB - Virtual size: 64KB