c:\workarea\8.563.3.2\install\Monet\Apps\bin\win32\b_rel\InstallManagerApp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a98bae3a2d2d290832381009f461f36e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a98bae3a2d2d290832381009f461f36e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a98bae3a2d2d290832381009f461f36e_JaffaCakes118
-
Size
4.3MB
-
MD5
a98bae3a2d2d290832381009f461f36e
-
SHA1
8acd0becb849878cca4e848e976c7af6f5845f4f
-
SHA256
6e43c4aedbd18d16e6a84f50bb229aa2d5b6a7e2ffeed324a4f44ccf9b64ba3d
-
SHA512
13bae31171aa81a189bbbf630635af9a7d72848519238619adf5d8097cc62385d657d5acd198fa8cd6e8bac25ab5a6d174c70a9aefb94f08232b6c212b4e3887
-
SSDEEP
49152:SgQ6TKSITV2GD4kDxFblZ4XO4EMMaHGV7EWFl:NwThD4k3B2XO4EMMaHGV7Ewl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a98bae3a2d2d290832381009f461f36e_JaffaCakes118
Files
-
a98bae3a2d2d290832381009f461f36e_JaffaCakes118.exe windows:4 windows x86 arch:x86
6a7b969df73cb1d20745bed18077eb91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msi
ord8
ord32
ord92
ord159
ord160
ord118
shell32
Shell_NotifyIconW
SHGetDesktopFolder
ShellExecuteW
SHGetFolderPathW
SHGetPathFromIDListW
SHCreateDirectoryExW
SHAppBarMessage
SHGetMalloc
SHGetFolderLocation
SHBrowseForFolderW
mfc80u
ord2086
ord3678
ord1270
ord709
ord501
ord5727
ord1957
ord3198
ord1920
ord5633
ord5723
ord4314
ord4347
ord3435
ord605
ord356
ord354
ord3635
ord5636
ord3417
ord587
ord4226
ord3158
ord2077
ord4109
ord2362
ord3995
ord4117
ord5637
ord3281
ord5704
ord4714
ord5207
ord4730
ord4207
ord4184
ord4838
ord4861
ord4611
ord6744
ord5066
ord5064
ord2788
ord2860
ord1416
ord3546
ord718
ord516
ord3661
ord5654
ord5609
ord3133
ord5698
ord2421
ord5065
ord2161
ord4762
ord591
ord3165
ord4228
ord1538
ord2080
ord4092
ord1474
ord1922
ord651
ord416
ord1555
ord715
ord3286
ord1572
ord1634
ord736
ord3306
ord1579
ord1637
ord5965
ord3946
ord3565
ord760
ord3331
ord6033
ord5638
ord1784
ord3570
ord3395
ord1004
ord5434
ord1545
ord747
ord1178
ord3168
ord1086
ord2422
ord3902
ord3677
ord757
ord3327
ord4475
ord2832
ord5562
ord5209
ord5226
ord4562
ord3942
ord5222
ord5220
ord2925
ord1911
ord3826
ord5378
ord6215
ord3800
ord5579
ord2054
ord6274
ord3795
ord6272
ord4008
ord4032
ord1049
ord3824
ord2239
ord1119
ord2027
ord3064
ord977
ord3176
ord2365
ord4743
ord2160
ord2012
ord3547
ord721
ord524
ord4266
ord1512
ord4274
ord5208
ord1573
ord1318
ord3662
ord6115
ord4577
ord4313
ord3301
ord1578
ord731
ord5981
ord5618
ord3342
ord410
ord4267
ord2711
ord5162
ord1351
ord3338
ord5202
ord1610
ord5910
ord6763
ord3968
ord4854
ord4857
ord4373
ord4378
ord4375
ord4393
ord4395
ord4380
ord4770
ord4581
ord4172
ord4165
ord4974
ord4383
ord4775
ord4198
ord4784
ord4437
ord4438
ord3734
ord4908
ord4513
ord1271
ord4914
ord4553
ord5043
ord4433
ord4362
ord4495
ord4840
ord4964
ord4474
ord4510
ord4788
ord4281
ord4370
ord4371
ord4799
ord5047
ord4958
ord4643
ord4940
ord4501
ord4955
ord4125
ord1293
ord1999
ord4126
ord2413
ord2414
ord2412
ord2411
ord648
ord1562
ord629
ord384
ord3156
ord2076
ord618
ord5999
ord1921
ord2074
ord2255
ord2066
ord1190
ord6116
ord1091
ord266
ord265
ord370
ord4755
ord6031
ord5630
ord3296
ord3453
ord630
ord3050
ord4713
ord4728
ord4205
ord4459
ord4619
ord4458
ord4966
ord3630
ord2159
ord1386
ord3783
ord3309
ord1580
ord1638
ord739
ord1182
ord3590
ord1299
ord2167
ord2784
ord2254
ord3471
ord4704
ord2560
ord3644
ord5914
ord655
ord1908
ord5283
ord1430
ord2299
ord6284
ord5279
ord1590
ord1646
ord1647
ord2397
ord2409
ord2386
ord2390
ord2392
ord2394
ord2384
ord5229
ord5231
ord1542
ord870
ord577
ord2876
ord6063
ord293
ord5398
ord2460
ord2895
ord3756
ord2311
ord283
ord1883
ord776
ord280
ord287
ord3869
ord5869
ord3873
ord2121
ord2877
ord774
ord3390
ord1172
ord1582
ord1058
ord1719
ord355
ord1536
ord3927
ord1472
ord896
ord899
ord6173
ord6167
ord1476
ord6161
ord2893
ord4026
ord5862
ord2310
ord1118
ord2260
ord2444
ord777
ord559
ord3383
ord4101
ord2261
ord1605
ord566
ord5096
ord1007
ord2009
ord4320
ord5971
ord5484
ord5485
ord4100
ord1236
ord1479
ord6111
ord282
ord6700
ord5705
ord5524
ord3990
ord526
ord1553
ord4523
ord4965
ord4667
ord4942
ord4957
ord4790
ord4668
ord2415
ord385
ord4904
ord860
ord2765
ord1002
ord1003
ord2266
ord1156
ord2468
ord4194
ord4122
ord4123
ord4124
ord4358
ord1235
ord1248
ord421
ord5657
ord993
ord5102
ord2798
ord383
ord992
ord3155
ord4234
ord3311
ord347
ord741
ord602
ord5316
ord6282
ord1571
ord6293
ord5327
ord2340
ord3249
ord5867
ord6749
ord1176
ord6751
ord1079
ord2364
ord3204
ord1925
ord3157
ord2361
ord3396
ord326
ord3789
ord2867
ord558
ord746
ord2648
ord5053
ord5829
ord4558
ord3645
ord6276
ord6061
ord2083
ord4232
ord2952
ord3224
ord658
ord1095
ord6086
ord3298
ord730
ord2155
ord1396
ord6721
ord5911
ord1393
ord5210
ord2985
ord4255
ord3189
ord572
ord620
ord2366
ord762
ord4119
ord2651
ord2011
ord1894
ord4206
ord6232
ord4729
ord4574
ord4112
ord1785
ord5178
ord4884
ord1662
ord1661
ord6720
ord5908
ord1611
ord1608
ord3940
ord1392
ord4238
ord5148
ord1899
ord5067
ord6271
ord4179
ord5199
ord3397
ord4716
ord4276
ord1591
ord5956
ord920
ord925
ord929
ord927
ord931
ord2404
ord2388
ord2407
ord2402
ord2379
ord2381
ord2399
ord2169
ord2163
ord1513
ord6273
ord3796
ord6275
ord3339
ord4961
ord1353
ord5171
ord1955
ord5196
ord2531
ord2725
msvcr80
towlower
wcsrchr
_wstat64i32
fclose
fread
malloc
fopen
_stat64i32
rewind
ftell
_mktime64
wcscmp
labs
wcslen
memcpy_s
_waccess
wcsncpy
wcsstr
memmove_s
sprintf
strlen
_vsnwprintf
strcmp
wcstod
_wtol
_wtoi
__RTDynamicCast
abs
_wtof
free
cos
sin
_ultow_s
memset
fseek
fwrite
_ultow
_localtime64_s
wcsftime
_time64
wcstoul
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
_invalid_parameter_noinfo
__CxxFrameHandler3
_wchmod
_wrmdir
_wmkdir
_beginthreadex
wcsncpy_s
mbstowcs_s
wcstombs_s
_itoa_s
_memicmp
_wfopen_s
_vsnwprintf_s
wcsncmp
memcpy
wcscpy
_wstrtime
_wstrdate
wcschr
isalpha
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
printf
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_except_handler4_common
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_invoke_watson
_controlfp_s
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
kernel32
GetCurrentProcess
GetSystemInfo
DeleteFileW
CopyFileW
FindClose
FindNextFileW
FindFirstFileW
RemoveDirectoryW
CreateEventW
ResumeThread
TerminateThread
GetExitCodeThread
SetThreadPriority
GlobalFree
GlobalAlloc
GetUserDefaultUILanguage
Sleep
GetLogicalDriveStringsW
LockResource
LoadResource
SizeofResource
FindResourceW
lstrcpyW
RaiseException
SetUnhandledExceptionFilter
CreateFileW
GetVersionExW
VirtualQuery
IsBadWritePtr
GetCurrentThread
WriteFile
GetShortPathNameW
FreeLibrary
CreateMutexW
ReleaseMutex
ConnectNamedPipe
DisconnectNamedPipe
FlushFileBuffers
CreateNamedPipeW
ReadFile
SetNamedPipeHandleState
WaitNamedPipeW
OpenMutexW
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
GetSystemTime
GetModuleFileNameW
GetVersion
CreateDirectoryW
GetFullPathNameW
CreateProcessW
FormatMessageW
LocalFree
lstrlenW
lstrcpynW
GetDiskFreeSpaceExW
GetWindowsDirectoryW
MultiByteToWideChar
OutputDebugStringW
LeaveCriticalSection
EnterCriticalSection
CreateEventA
CloseHandle
WaitForSingleObject
GetTickCount
GlobalUnlock
GlobalLock
SetEvent
SetLastError
GetLastError
GetProcAddress
LoadLibraryW
SetFilePointer
GetModuleHandleW
GetDriveTypeW
DeleteCriticalSection
InitializeCriticalSection
user32
LoadStringW
DestroyMenu
LoadMenuW
RegisterClassExW
UpdateWindow
EndPaint
BeginPaint
CallWindowProcW
OffsetRect
EnumChildWindows
GetClassNameW
SystemParametersInfoW
InflateRect
SetScrollPos
FindWindowExW
SetWindowPos
SetWindowTextW
IsIconic
GetSystemMetrics
GetSystemMenu
AppendMenuW
RegisterClassW
CreateWindowExW
PostQuitMessage
DefWindowProcW
DestroyIcon
DestroyWindow
GetDesktopWindow
GetMessageW
ExitWindowsEx
MessageBeep
OpenClipboard
CloseClipboard
TranslateMessage
DispatchMessageW
SetMenuDefaultItem
ReleaseCapture
SetCursor
LoadCursorW
CopyIcon
SetWindowLongW
DestroyCursor
LoadIconW
SetForegroundWindow
CloseWindow
IsWindowVisible
SetRect
BringWindowToTop
PostMessageW
DrawFocusRect
DrawIcon
LoadImageW
CopyRect
ReleaseDC
GetDC
LoadBitmapW
FillRect
PtInRect
GetKeyState
GetFocus
GetParent
GetSysColor
GetWindowRect
InvalidateRect
SendMessageW
GetWindowLongW
KillTimer
SetTimer
RedrawWindow
SetParent
GetClientRect
IsWindow
EnableWindow
GetSubMenu
EnableMenuItem
ModifyMenuW
TrackPopupMenu
GetCursorPos
FindWindowW
DrawAnimatedRects
SetActiveWindow
RegisterWindowMessageW
SetFocus
IsWindowEnabled
GetCapture
SetCapture
wvsprintfW
GetClipboardData
gdi32
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
SetPixel
CreateRectRgn
GetWindowOrgEx
GetViewportOrgEx
GetDeviceCaps
GetStockObject
CreateSolidBrush
Arc
CreatePen
GetTextExtentPoint32W
Ellipse
CreateFontIndirectW
PatBlt
GetObjectW
CreateBitmap
CreateDIBSection
GetDIBits
DeleteObject
StretchBlt
BitBlt
GetPixel
msimg32
TransparentBlt
GradientFill
advapi32
AdjustTokenPrivileges
GetTokenInformation
LookupPrivilegeNameW
RegSetValueExW
RegQueryValueExW
CryptDestroyHash
CryptReleaseContext
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDecrypt
CryptDeriveKey
CryptEncrypt
CryptDestroyKey
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
OpenProcessToken
comctl32
ord17
shlwapi
StrCmpW
PathIsDirectoryW
ole32
CoCreateInstance
CreateStreamOnHGlobal
oleaut32
SysAllocStringLen
SysFreeString
msvcp80
?empty@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE_NXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?good@ios_base@std@@QBE_NXZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?length@?$char_traits@G@std@@SAIPBG@Z
?width@ios_base@std@@QBEHXZ
?flags@ios_base@std@@QBEHXZ
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGXZ
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?eof@?$char_traits@G@std@@SAGXZ
?eq_int_type@?$char_traits@G@std@@SA_NABG0@Z
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEHPBGH@Z
?width@ios_base@std@@QAEHH@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
?length@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??$?6GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
?str@?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
??_D?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
?swap@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXAAV12@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$_String_const_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?_Myptr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IAEPAGXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@G@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z
?_Incref@facet@locale@std@@QAEXXZ
?_Register@facet@locale@std@@QAEXXZ
??1_Lockit@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?widen@?$ctype@G@std@@QBEGD@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AV?$_String_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@V32@0@Z
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AV?$_String_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AV?$_String_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?rend@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AV?$reverse_iterator@V?$_String_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@2@XZ
?rbegin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AV?$reverse_iterator@V?$_String_iterator@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@2@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
?fail@ios_base@std@@QBE_NXZ
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@XZ
?open@?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAEXPBDHH@Z
?is_open@?$basic_ofstream@GU?$char_traits@G@std@@@std@@QBE_NXZ
?close@?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAEXXZ
?endl@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@AAV21@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHPBG@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?str@?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?length@?$char_traits@D@std@@SAIPBD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?eof@?$char_traits@D@std@@SAHXZ
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?find_first_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PBDHH@Z
??7ios_base@std@@QBE_NXZ
??_D?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAEXXZ
??0locale@std@@QAE@PBDH@Z
?sync_with_stdio@ios_base@std@@SA_N_N@Z
?imbue@?$basic_ios@GU?$char_traits@G@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??1locale@std@@QAE@XZ
?rdbuf@?$basic_ifstream@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_filebuf@GU?$char_traits@G@std@@@2@XZ
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?getline@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAGH@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIPBG@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHABV12@@Z
?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
msvfw32
DrawDibDraw
DrawDibOpen
DrawDibClose
installmanager
RemoveIInstallMgr
GetIInstallMgr
GetCoreCounter
IMCore_SetErrorHandler
ws2_32
gethostbyname
inet_addr
WSAGetLastError
WSACleanup
inet_ntoa
gethostbyaddr
wininet
InternetAttemptConnect
InternetCheckConnectionW
InternetGetConnectedState
iphlpapi
GetRTTAndHopCount
Sections
.text Size: 784KB - Virtual size: 780KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 276KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE