Static task
static1
Behavioral task
behavioral1
Sample
aedef05d04c950046b48590b9c15d3c0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aedef05d04c950046b48590b9c15d3c0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aedef05d04c950046b48590b9c15d3c0_JaffaCakes118
-
Size
7.2MB
-
MD5
aedef05d04c950046b48590b9c15d3c0
-
SHA1
6941f48b4459b8d2b9a31ca50fa919fbbcb96790
-
SHA256
497e866388219b33020195dd5f35b631feb5df330b6b44a96a692d69b03c1c6f
-
SHA512
9d2a576b4b6d034c36c1ca36fa409bfb75fd4f034fb3fa573d0f3e3a99a7a5689a0443bc14e1d9e34cb0ace19006b6330001a7d32b13a96d58529046d0784bea
-
SSDEEP
49152:sxgasyHYPhES4DvdtGJXWEA9n6QWD2z7mceivkPFj:sGasyHYPhCfiXDA9n6QWktK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aedef05d04c950046b48590b9c15d3c0_JaffaCakes118
Files
-
aedef05d04c950046b48590b9c15d3c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
ce9b800d4f0b953647efbbd84bcf52e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
tcalc
?Init@CalcInterface@@QAEHPAD000@Z
?RegisterDataIO@CalcInterface@@QAEFP6GJPADFFPAXFUtag_NTime@@2EK@Z@Z
??1CalcInterface@@UAE@XZ
?PopupDlg@CalcInterface@@QAEHF@Z
?GetTreeInfo@CalcInterface@@QAEJPAXHH@Z
?InputDataInfo@CalcInterface@@QAEJPADFFUtag_NTime@@1EK@Z
?InputData@CalcInterface@@QAEJPADFFPAXFEK@Z
?PopupDlg@CalcInterface@@QAEHEJF@Z
?SetSysLimited@CalcInterface@@QAEXHHHJJPAD0@Z
?Calc@CalcInterface@@QAEMPADF0@Z
?InputDataInfo@CalcInterface@@QAEJPADFFFEK@Z
?Freefloat@CalcInterface@@QAEXPAM@Z
?Allocfloat@CalcInterface@@QAEPAMF@Z
?Calc@CalcInterface@@QAEFEJQAPAM@Z
?GetIndexNo@CalcInterface@@QBEJEPAD@Z
?GetIndexNum@CalcInterface@@QBEJE@Z
?GetTypeNum@CalcInterface@@QBEJXZ
?GetTypeName@CalcInterface@@QBEPADJ@Z
?GetIndexInfo@CalcInterface@@QBEPAUtag_INDEXINFO@@EJ@Z
?GetIndexInfo@CalcInterface@@QBEPAUtag_INDEXINFO@@EPAD@Z
??0CalcInterface@@QAE@XZ
??ACalcInterface@@QBEPAUtag_INDEXINFO@@E@Z
viewthem
?INFO_GetCjzxNum@@YAHXZ
?INFO_GetCjzxTitle@@YAHFPAUext_info_title@@@Z
?INFO_AskCjzxTitle@@YAHJ@Z
?INFO_GetGGBWTitle@@YAHFPADPAUext_ggbw_title@@F@Z
?INFO_GetMineNum@@YAHXZ
?INFO_GetMineTitle@@YAHFPAUext_info_title@@@Z
?INFO_AskMineTitle@@YAHFPADFQAJ1@Z
?INFO_GetStatus@@YAXPAD0PAG0@Z
?INFO_SetOtherinfo@@YAXJKQAD@Z
?INFO_GetHqMineInfo@@YAHPAPAUstock_mine_info@@@Z
?INFO_Connect@@YAHH@Z
?INFO_AskHqMineInfo@@YAHHPAUsetcode_and_stockcode@@@Z
?INFO_Exit@@YAHXZ
?INFO_RegisterCallBack@@YAXP6GJPADFFPAXFUtag_NTime@@2EK@ZP6GJ0F0JFFK@Z@Z
?INFO_Init@@YAHPAUHWND__@@JPBD111IJ@Z
?INFO_ShowFunc@@YAHPAUHWND__@@FFJFPADFPAUext_info_title@@PAUext_ggbw_title@@F@Z
?INFO_ProcessMsg@@YAHFPAUHWND__@@IIJ@Z
?INFO_ShowCjzx2Content@@YAHPAUHWND__@@PAUext_info_title@@@Z
?INFO_DisConnect@@YAXXZ
?INFO_SetLoginName@@YAXQADKD0@Z
?INFO_IsConnect@@YAHXZ
?INFO_Scheme@@YAXUtag_OP_Scheme_Color@@Utag_OP_Scheme_Font@@Utag_OP_Scheme_Menu@@@Z
invest
?SetPrivateInvestDir@@YAXPAD@Z
?RegisterInvestGPInfoHq@@YAXP6GJPBDFPADPAM2@Z@Z
?PopupInvestDlg@@YAXXZ
dbf
?OpenBase@@YAFPAUDBFINFO@@PADF@Z
?GetFieldStr@@YAFPAUDBFINFO@@PAD1@Z
?ReadDbf@@YAJPAUDBFINFO@@J@Z
?Skip@@YAJJPAUDBFINFO@@@Z
?GetFieldStr2@@YAFPAUDBFINFO@@PAD1@Z
?WriteDbf@@YAJPAUDBFINFO@@J@Z
?PrevFieldStr@@YAFPAUDBFINFO@@PAD1@Z
?CloseBase@@YAFPAUDBFINFO@@@Z
ttools
MakeBuildNo
MD5BIN_Buffer
SoftKey_Switch
SoftKey_Close
OpenTdxIni
GetTDXProfileInt
GetTDXProfileString
CloseTdxIni
MD5_String
MD5_Buffer
tlist
CreateNewTList
DeleteTList
tinfo
I_HasJGData
I_ShowJGDialog
I_PopupWnd
I_Exit
I_Init_Environment
I_RegisterCallBack
tusercomm
DelUserCommModule
NewUserCommModule
talgo
BufToDouble
ClassXP
ListCtrl2Txt
GetNetCardStr
Base64Encode
GetPYStr
SaveToBMPFile
tchart
?CreateNewTChart@@YAPAVVChart@@KPAUHWND__@@VCRect@@I@Z
?DeleteTChart@@YAXPAPAVVChart@@@Z
tcomm
DirectConnect
SendToSocket
mfc42
ord6675
ord3286
ord641
ord616
ord804
ord693
ord5287
ord4247
ord4234
ord4248
ord4245
ord4242
ord4246
ord1644
ord4457
ord4724
ord5053
ord2379
ord2863
ord4499
ord1133
ord2864
ord4810
ord4774
ord3021
ord6453
ord4458
ord4500
ord4501
ord4775
ord3663
ord3619
ord3626
ord2414
ord640
ord2405
ord6876
ord2764
ord860
ord5789
ord1640
ord323
ord1641
ord4277
ord858
ord4129
ord6930
ord6928
ord535
ord5572
ord2915
ord6877
ord4376
ord5280
ord3597
ord6055
ord1776
ord5290
ord4837
ord3402
ord4424
ord3721
ord795
ord567
ord324
ord6215
ord6880
ord4853
ord3573
ord1146
ord2135
ord818
ord4299
ord6197
ord1945
ord4589
ord4588
ord4899
ord4370
ord4892
ord5076
ord4341
ord4890
ord4531
ord4545
ord4543
ord4526
ord4529
ord4524
ord4964
ord4961
ord4108
ord5240
ord3748
ord1726
ord5260
ord4432
ord560
ord813
ord4273
ord4723
ord1175
ord4349
ord4464
ord4508
ord4284
ord5440
ord6383
ord5450
ord6394
ord3398
ord3733
ord2575
ord4396
ord3574
ord810
ord609
ord2642
ord3287
ord4125
ord6008
ord4000
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord2358
ord924
ord1949
ord4275
ord2688
ord665
ord1979
ord6385
ord5186
ord354
ord926
ord1601
ord850
ord539
ord1572
ord1574
ord4809
ord755
ord2754
ord470
ord3708
ord781
ord2301
ord941
ord3337
ord3811
ord6380
ord6270
ord5981
ord4694
ord5148
ord798
ord1997
ord6010
ord3511
ord6407
ord5194
ord922
ord533
ord2513
ord293
ord5787
ord5788
ord2380
ord472
ord283
ord2859
ord2582
ord4402
ord3370
ord3640
ord6663
ord5465
ord3998
ord6283
ord5645
ord5583
ord3499
ord2515
ord355
ord3571
ord3711
ord2112
ord6128
ord3752
ord4133
ord4297
ord3693
ord6172
ord5875
ord2753
ord5785
ord783
ord809
ord556
ord3874
ord613
ord289
ord2122
ord4160
ord6358
ord1088
ord2567
ord2452
ord1816
ord326
ord5101
ord2101
ord2723
ord2390
ord3059
ord5100
ord5104
ord4467
ord4303
ord3351
ord5012
ord976
ord5472
ord3403
ord2879
ord2878
ord4152
ord4077
ord5237
ord2382
ord5283
ord2649
ord1665
ord4436
ord5254
ord2445
ord4427
ord401
ord674
ord5054
ord5031
ord3610
ord2587
ord4406
ord3394
ord3729
ord656
ord6785
ord5953
ord4278
ord4476
ord3089
ord5810
ord5481
ord2031
ord4335
ord4863
ord4975
ord5796
ord5478
ord1971
ord966
ord3570
ord278
ord605
ord2256
ord4919
ord4411
ord4447
ord1795
ord6154
ord2530
ord4364
ord4056
ord5471
ord4121
ord2389
ord5234
ord6369
ord5248
ord2444
ord620
ord298
ord1232
ord1803
ord4230
ord6335
ord1233
ord5871
ord2997
ord1709
ord3103
ord4023
ord2569
ord2714
ord3220
ord4759
ord2078
ord4454
ord6209
ord2800
ord5279
ord3797
ord6605
ord2841
ord2107
ord1567
ord1265
ord2233
ord268
ord2450
ord1771
ord6366
ord2413
ord2024
ord4401
ord3639
ord692
ord4219
ord2581
ord6119
ord5873
ord2516
ord361
ord4220
ord2584
ord3654
ord2438
ord1825
ord4696
ord3058
ord3065
ord6336
ord2510
ord2542
ord5243
ord5740
ord1746
ord5577
ord3172
ord5653
ord4420
ord4953
ord4858
ord2399
ord4387
ord3454
ord3198
ord6080
ord6175
ord4623
ord4426
ord338
ord4823
ord652
ord4238
ord6640
ord3317
ord5651
ord3616
ord3127
ord350
ord4202
ord5442
ord3803
ord2289
ord2370
ord2297
ord2363
ord3873
ord2086
ord5768
ord2614
ord4854
ord3742
ord1200
ord4083
ord1134
ord1247
ord2919
ord5710
ord6696
ord5773
ord3318
ord3790
ord6379
ord1841
ord4533
ord4340
ord4347
ord4720
ord4889
ord4963
ord4960
ord6054
ord1725
ord364
ord784
ord4241
ord2091
ord6131
ord6216
ord6778
ord6648
ord6779
ord3753
ord5146
ord5281
ord551
ord4243
ord2148
ord1916
ord2362
ord2366
ord2763
ord6222
ord6223
ord6282
ord5683
ord3177
ord2298
ord6392
ord1151
ord1193
ord913
ord912
ord3939
ord398
ord4204
ord940
ord3938
ord397
ord3439
ord3438
ord5593
ord5594
ord4189
ord4188
ord925
ord3447
ord3196
ord6911
ord5778
ord668
ord3181
ord3185
ord2781
ord2770
ord356
ord2393
ord6153
ord3920
ord6241
ord3996
ord3301
ord3706
ord548
ord2123
ord3914
ord3698
ord765
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord6021
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord6194
ord4614
ord4613
ord2111
ord2535
ord3517
ord3812
ord5937
ord3061
ord3584
ord543
ord803
ord2029
ord2077
ord4128
ord4194
ord6597
ord6800
ord6242
msvcrt
_setmbcp
_strlwr
_fileno
_chsize
_unlink
_strcmpi
_stricmp
_memicmp
fwrite
_mbsnbcpy
fread
fclose
toupper
strncpy
atoi
sscanf
_ftol
sprintf
__CxxFrameHandler
memmove
fseek
atof
time
memchr
isalnum
_fsopen
free
realloc
strstr
_mbsicmp
strrchr
_controlfp
_strnicmp
strtok
strncmp
isprint
_findclose
_findnext
_findfirst
vsprintf
atol
fgets
rewind
_CIpow
ftell
exit
srand
qsort
rand
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@ABQBD@Z
_CxxThrowException
_mbsnbicmp
_mbsstr
_errno
_stat
_snprintf
_purecall
isdigit
localtime
_getdiskfree
_getdrive
floor
malloc
calloc
_EH_prolog
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__dllonexit
_onexit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
fopen
_mbscmp
kernel32
DeleteFileA
lstrcmpA
IsDBCSLeadByte
GetProcAddress
GetLastError
GetPrivateProfileStructA
WritePrivateProfileStructA
InterlockedExchange
GetModuleFileNameA
lstrlenA
RemoveDirectoryA
CloseHandle
CreateProcessA
GetLocalTime
lstrcpyA
lstrcpynA
GlobalUnlock
GlobalLock
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
TerminateThread
WaitForSingleObject
InterlockedExchangeAdd
GetExitCodeThread
WaitForMultipleObjects
CreateThread
GetTempPathA
WinExec
lstrcatA
GetCurrentDirectoryA
LockResource
LoadResource
FindResourceA
InterlockedIncrement
GlobalSize
MulDiv
LocalFree
FormatMessageA
GetVersionExA
GetVersion
SetLastError
GetCurrentThreadId
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
CreateEventA
ResetEvent
GlobalAlloc
GetModuleHandleA
GetCurrentProcessId
GetWindowsDirectoryA
CreateMutexA
ReleaseMutex
GlobalMemoryStatus
LoadLibraryA
FreeLibrary
SetFileAttributesA
LocalAlloc
GetStartupInfoA
CreateDirectoryA
GetTickCount
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
MultiByteToWideChar
lstrlenW
CopyFileA
SetEvent
Sleep
FindClose
FindFirstFileA
FindNextFileA
user32
GetMessageA
GetCapture
GetMenuState
InsertMenuA
DrawEdge
GetMessagePos
IsMenu
ShowScrollBar
EmptyClipboard
SetClipboardData
SetCursorPos
GetMenuStringA
GetWindowRgn
GetCursor
SetClassLongA
EnableMenuItem
SetActiveWindow
GetAsyncKeyState
RemoveMenu
GetWindowThreadProcessId
SetClipboardViewer
GetMenuItemID
ShowWindow
ModifyMenuA
GetPriorityClipboardFormat
OpenClipboard
GetClipboardData
CloseClipboard
DrawFrameControl
GetDlgCtrlID
FlashWindow
HideCaret
ShowCaret
DestroyCaret
GetKeyboardLayout
CreateCaret
GetCaretPos
IsClipboardFormatAvailable
SetCaretPos
ValidateRect
RegisterClassA
CallNextHookEx
GetClassNameA
SetPropA
CallWindowProcA
GetPropA
RemovePropA
UnhookWindowsHookEx
SetWindowsHookExA
IntersectRect
IsRectEmpty
DeleteMenu
SendMessageA
LoadIconA
PostMessageA
GetSystemMenu
GetMenu
KillTimer
GetCursorPos
MenuItemFromPoint
IsChild
GetFocus
EnableWindow
InflateRect
GetWindowRect
GetClientRect
GetDesktopWindow
GetParent
InvalidateRect
GetClassInfoA
SystemParametersInfoA
FindWindowA
keybd_event
ChangeClipboardChain
GetMenuItemRect
IsZoomed
RegisterHotKey
UnregisterHotKey
SetForegroundWindow
SetRect
CreatePopupMenu
PtInRect
ReleaseDC
GetDC
SetScrollPos
SetScrollRange
CopyRect
SetCursor
GetWindow
PostQuitMessage
DrawFocusRect
CreateMenu
AppendMenuA
SetWindowRgn
CreateWindowExA
LoadCursorA
DestroyMenu
DestroyCursor
DestroyIcon
WindowFromDC
SetMenuDefaultItem
GetMenuItemCount
GetWindowLongA
GetNextDlgTabItem
GetActiveWindow
WindowFromPoint
ClientToScreen
TrackPopupMenuEx
GetSubMenu
OffsetRect
GetSysColor
FrameRect
DrawStateA
LoadImageA
GetIconInfo
DrawIcon
UpdateWindow
GrayStringA
TabbedTextOutA
RegisterWindowMessageA
EnumWindows
GetWindowTextA
CheckMenuItem
GetMenuItemInfoA
SetMenuItemInfoA
MessageBoxA
MessageBeep
PeekMessageA
TranslateMessage
DispatchMessageA
ChildWindowFromPoint
wsprintfA
BeginPaint
EndPaint
IsWindow
EqualRect
ScreenToClient
GetKeyState
ClipCursor
DrawTextA
GetDCEx
RedrawWindow
LockWindowUpdate
SetRectEmpty
GetSysColorBrush
DefWindowProcA
DrawIconEx
IsWindowVisible
GetLastActivePopup
SetWindowLongA
SetMenu
IsIconic
GetSystemMetrics
SetTimer
SetCapture
ReleaseCapture
GetWindowDC
LoadBitmapA
FillRect
LoadMenuA
GetForegroundWindow
gdi32
GetObjectA
CreateBitmap
GetTextExtentPoint32A
CreateDCA
GetMapMode
Arc
FrameRgn
CreatePolygonRgn
Pie
SelectClipRgn
GetNearestColor
CreateFontA
Rectangle
CreatePen
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
DeleteObject
GetStockObject
SelectObject
SetPixel
CreateRectRgnIndirect
GetPixel
RoundRect
ExtCreateRegion
GetBkMode
OffsetRgn
CombineRgn
GetBitmapBits
CreateBitmapIndirect
CreateFontIndirectA
GetTextMetricsA
CreateRectRgn
PtInRegion
GetDeviceCaps
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
Ellipse
CreateEllipticRgn
FillRgn
Polyline
DeleteDC
BeginPath
EndPath
StrokeAndFillPath
CreateSolidBrush
DPtoLP
StretchBlt
PatBlt
advapi32
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueA
shell32
SHGetPathFromIDListA
ShellExecuteExA
ShellExecuteA
SHBrowseForFolderA
SHChangeNotify
Shell_NotifyIconA
SHGetSpecialFolderPathA
SHGetFileInfoA
comctl32
ImageList_DragMove
ImageList_BeginDrag
ImageList_DragLeave
ImageList_GetIcon
ImageList_Draw
ImageList_AddMasked
_TrackMouseEvent
ImageList_ReplaceIcon
ImageList_EndDrag
ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_Add
ImageList_Replace
ImageList_GetIconSize
ImageList_DragEnter
ImageList_SetBkColor
ole32
CoCreateInstance
CoInitialize
CoUninitialize
oleaut32
SysAllocString
VariantClear
wsock32
WSACleanup
__WSAFDIsSet
ntohs
ioctlsocket
closesocket
recv
select
WSAGetLastError
send
WSAAsyncSelect
socket
gethostbyname
msvcp60
??_7ctype_base@std@@6B@
?_Xlen@std@@YAXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
?seekpos@strstreambuf@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekoff@strstreambuf@std@@MAE?AV?$fpos@H@2@JW4seekdir@ios_base@2@H@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@strstreambuf@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?pbackfail@strstreambuf@std@@MAEHH@Z
?overflow@strstreambuf@std@@MAEHH@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1istrstream@std@@UAE@XZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
??1locale@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Init@strstreambuf@std@@IAEXHPAD0H@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0ios_base@std@@IAE@XZ
?do_toupper@?$ctype@D@std@@MBEDD@Z
?do_toupper@?$ctype@D@std@@MBEPBDPADPBD@Z
?do_tolower@?$ctype@D@std@@MBEDD@Z
?do_tolower@?$ctype@D@std@@MBEPBDPADPBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??1ctype_base@std@@UAE@XZ
??_7bad_cast@std@@6B@
??1_Locinfo@std@@QAE@XZ
?_Term@?$ctype@D@std@@KAXXZ
?_Cltab@?$ctype@D@std@@0PBFB
_Getctype
??0_Locinfo@std@@QAE@PBD@Z
??_7?$ctype@D@std@@6B@
??_7facet@locale@std@@6B@
?_Iscloc@locale@std@@QBE_NXZ
?_Getfacet@locale@std@@QBEPBVfacet@12@I_N@Z
?_Id_cnt@id@locale@std@@0HA
?id@?$ctype@D@std@@2V0locale@2@A
??1?$ctype@D@std@@UAE@XZ
??1strstreambuf@std@@UAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
winmm
PlaySoundA
imm32
ImmIsIME
ImmSimulateHotKey
Sections
.text Size: 7.2MB - Virtual size: 7.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE