?GetRegistrationInformation@@YGXPAD@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Overview
overview
6Static
static
3OpenBrowse...em.vbs
windows7-x64
1OpenBrowse...em.vbs
windows10-2004-x64
1OpenBrowse...ms.vbs
windows7-x64
1OpenBrowse...ms.vbs
windows10-2004-x64
1OpenBrowse...er.vbs
windows7-x64
1OpenBrowse...er.vbs
windows10-2004-x64
1OpenBrowse...ds.vbs
windows7-x64
1OpenBrowse...ds.vbs
windows10-2004-x64
1OpenBrowse...N4.dll
windows7-x64
3OpenBrowse...N4.dll
windows10-2004-x64
3OpenBrowse...er.dll
windows7-x64
6OpenBrowse...er.dll
windows10-2004-x64
6OpenBrowse...01.dll
windows7-x64
3OpenBrowse...01.dll
windows10-2004-x64
3OpenBrowse...04.dll
windows7-x64
3OpenBrowse...04.dll
windows10-2004-x64
3OpenBrowse...VB.dll
windows7-x64
3OpenBrowse...VB.dll
windows10-2004-x64
3OpenBrowse...ll.dll
windows7-x64
3OpenBrowse...ll.dll
windows10-2004-x64
3OpenBrowse...32.dll
windows7-x64
3OpenBrowse...32.dll
windows10-2004-x64
3OpenBrowse...er.bat
windows7-x64
6OpenBrowse...er.bat
windows10-2004-x64
6OpenBrowse...r6.dll
windows7-x64
3OpenBrowse...r6.dll
windows10-2004-x64
3OpenBrowse...st.dll
windows7-x64
3OpenBrowse...st.dll
windows10-2004-x64
3OpenBrowse...AR.vbs
windows7-x64
1OpenBrowse...AR.vbs
windows10-2004-x64
1OpenBrowse...ls.vbs
windows7-x64
1OpenBrowse...ls.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
OpenBrowser/Classes/NavBarItem.vbs
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
OpenBrowser/Classes/NavBarItem.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
OpenBrowser/Classes/NavBarItems.vbs
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
OpenBrowser/Classes/NavBarItems.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
OpenBrowser/Classes/cControlFlater.vbs
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
OpenBrowser/Classes/cControlFlater.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
OpenBrowser/Classes/clsThreads.vbs
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
OpenBrowser/Classes/clsThreads.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
OpenBrowser/Dev_Library/ACTSKIN4.dll
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
OpenBrowser/Dev_Library/ACTSKIN4.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
OpenBrowser/Dev_Library/DockBrowser.dll
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
OpenBrowser/Dev_Library/DockBrowser.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
OpenBrowser/Dev_Library/FAST2001.dll
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
OpenBrowser/Dev_Library/FAST2001.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
OpenBrowser/Dev_Library/FAST2004.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
OpenBrowser/Dev_Library/FAST2004.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
OpenBrowser/Dev_Library/MThreadVB.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
OpenBrowser/Dev_Library/MThreadVB.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
OpenBrowser/Dev_Library/OpenBrowser_API_Call.dll
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
OpenBrowser/Dev_Library/OpenBrowser_API_Call.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
OpenBrowser/Dev_Library/RICHTX32.dll
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
OpenBrowser/Dev_Library/RICHTX32.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
OpenBrowser/Dev_Library/Register.bat
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
OpenBrowser/Dev_Library/Register.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
OpenBrowser/Dev_Library/SSubTmr6.dll
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
OpenBrowser/Dev_Library/SSubTmr6.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
OpenBrowser/Dev_Library/cpvCoolList.dll
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
OpenBrowser/Dev_Library/cpvCoolList.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
OpenBrowser/Forms/SIDEBAR.vbs
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
OpenBrowser/Forms/SIDEBAR.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
OpenBrowser/Forms/Tools.vbs
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
OpenBrowser/Forms/Tools.vbs
Resource
win10v2004-20240802-en
Target
c7da2d99883c023189f27b099e1d56a8_JaffaCakes118
Size
651KB
MD5
c7da2d99883c023189f27b099e1d56a8
SHA1
d4d769c24c5f9548a20635372778ed827897b136
SHA256
f57764f85f5edfa02a45ac9f406fa3b953e7502327a80ca9001f5aecef2b3a53
SHA512
a442f802077d946f7f7f3513e5638e073a981228b51dfa58894e5573507a4d4f6fe181552d0d7912d37a35f9f527051b1157c88ede3364c3289e9c76df61e64c
SSDEEP
12288:6WxN2xprwNVJ3G0rACWfWMFhCh+JFhjlEFY+wwK4RZG2wFpI:hYproVhH1MFTEx3xl
Checks for missing Authenticode signature.
resource |
---|
unpack001/OpenBrowser/Dev_Library/ACTSKIN4.obj |
unpack001/OpenBrowser/Dev_Library/DockBrowser.obj |
unpack001/OpenBrowser/Dev_Library/FAST2001.obj |
unpack001/OpenBrowser/Dev_Library/FAST2004.com+ |
unpack001/OpenBrowser/Dev_Library/MThreadVB.com+ |
unpack001/OpenBrowser/Dev_Library/OpenBrowser_API_Call.obj |
unpack001/OpenBrowser/Dev_Library/SSubTmr6.com+ |
unpack001/OpenBrowser/Dev_Library/cpvCoolList.obj |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PlaySoundA
GetVersion
QueryPerformanceCounter
WaitForSingleObject
Sleep
QueryPerformanceFrequency
GetWindowsDirectoryA
WriteFile
DebugBreak
HeapReAlloc
CreateFileA
GetTickCount
FindResourceA
LoadResource
SizeofResource
FreeLibrary
WideCharToMultiByte
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
MultiByteToWideChar
lstrlenW
GetStringTypeW
CloseHandle
GetFileSize
ReadFile
GetCurrentProcess
DeleteFileA
GetCurrentThreadId
InterlockedDecrement
FlushInstructionCache
InterlockedIncrement
lstrcatA
LoadLibraryA
GetProcAddress
LeaveCriticalSection
lstrcpyA
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
GetSystemInfo
HeapCreate
GetVersionExA
IsDBCSLeadByte
HeapAlloc
DisableThreadLibraryCalls
LoadLibraryExA
lstrcpynA
lstrcmpiA
HeapFree
GetLastError
CreateThread
SetFilePointer
TerminateProcess
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
ExitProcess
HeapSize
GetStdHandle
RtlUnwind
SystemParametersInfoA
GetDC
ReleaseDC
SetWindowTextA
GetSysColor
GetWindow
GetParent
CreateWindowExA
DestroyCaret
GetScrollInfo
ClientToScreen
GetUpdateRgn
GetClassNameA
SendMessageA
GetCursorPos
GetWindowRect
GetWindowRgn
SetCapture
SetScrollInfo
GetDesktopWindow
CallWindowProcA
SetFocus
BeginPaint
GetClientRect
EndPaint
InvalidateRect
IntersectRect
EqualRect
OffsetRect
IsRectEmpty
DrawTextA
IsWindow
DestroyWindow
TrackPopupMenu
SetWindowsHookExA
UnhookWindowsHookEx
GetFocus
IsChild
GetClassInfoExA
LoadCursorA
wsprintfA
RegisterClassExA
UnionRect
PtInRect
GetKeyState
DefWindowProcA
RedrawWindow
EnableMenuItem
CallNextHookEx
GetMenuItemCount
SetMenuItemInfoA
GetMenuStringA
GetMenuItemInfoA
GetWindowDC
SendMessageTimeoutA
PostMessageA
EnumThreadWindows
EnumChildWindows
PeekMessageA
GetMessageA
DispatchMessageA
MsgWaitForMultipleObjects
MessageBoxA
LoadBitmapA
ShowWindow
SetMenu
GetMenuItemID
GetSubMenu
GetMenuState
GetActiveWindow
AdjustWindowRect
GetMenu
GetWindowTextLengthA
GetWindowTextA
GetWindowPlacement
DrawIconEx
UpdateWindow
SetWindowRgn
SetWindowPos
ReleaseCapture
GetWindowLongA
SetWindowLongA
LoadStringA
CharNextA
LoadImageA
WindowFromDC
GetSystemMenu
DeleteObject
OffsetRgn
CombineRgn
CreateRectRgn
CreateSolidBrush
SetBkColor
RectInRegion
SetViewportOrgEx
GetStockObject
SetTextColor
RestoreDC
DeleteDC
GetDeviceCaps
SetMapMode
SaveDC
SetWindowOrgEx
CreateDCA
BitBlt
LPtoDP
CreateCompatibleDC
GetObjectA
SelectObject
GetCurrentObject
CreateFontIndirectA
SelectClipRgn
CreateDIBSection
ExtCreateRegion
GetClipBox
SetBkMode
GetRegionData
PtInRegion
CreateRectRgnIndirect
GetSaveFileNameA
GetOpenFileNameA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
ShellExecuteExA
OleSaveToStream
WriteClassStm
CreateOleAdviseHolder
OleRegGetMiscStatus
OleLoadFromStream
CreateStreamOnHGlobal
StringFromCLSID
OleRegGetUserType
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
StgOpenStorage
StgCreateDocfile
OleRegEnumVerbs
ProgIDFromCLSID
OleCreatePropertyFrame
OleCreateFontIndirect
SysAllocStringByteLen
SysStringByteLen
LoadRegTypeLi
CreateErrorInfo
SetErrorInfo
SysStringLen
SysAllocStringLen
VariantClear
LoadTypeLi
SysAllocString
RegisterTypeLi
SysFreeString
VarUI4FromStr
VariantChangeType
ImageList_Draw
?GetRegistrationInformation@@YGXPAD@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EVENT_SINK_GetIDsOfNames
__vbaVarSub
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaAptOffset
__vbaFreeVarList
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaRaiseEvent
__vbaFreeObjList
_adj_fprem1
__vbaCopyBytes
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
ord558
_adj_fdiv_m32
Zombie_GetTypeInfo
__vbaAryDestruct
__vbaLateMemSt
EVENT_SINK2_Release
ord592
__vbaForEachCollObj
__vbaExitProc
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
ord598
__vbaFpR4
__vbaBoolVar
__vbaFpR8
__vbaVargVar
_CIsin
__vbaErase
__vbaNextEachCollObj
__vbaVarZero
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaVarTstEq
__vbaObjVar
__vbaI2I4
ord562
DllFunctionCall
__vbaCastObjVar
_adj_fpatan
__vbaR4Var
Zombie_GetTypeInfoCount
__vbaRedim
EVENT_SINK_Release
__vbaNew
_CIsqrt
__vbaObjIs
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
ord607
__vbaFailedFriend
__vbaFPException
ord319
__vbaI2Var
ord644
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
EVENT_SINK2_AddRef
__vbaFreeStrList
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord101
ord102
__vbaI4Var
ord103
ord104
ord105
__vbaVarAdd
ord320
__vbaVarDup
__vbaStrToAnsi
ord321
__vbaVarLateMemCallLd
__vbaFpI4
ord616
__vbaLateMemCallLd
_CIatan
__vbaCastObj
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EVENT_SINK_GetIDsOfNames
__vbaVarTstGt
__vbaVarSub
ord582
ord583
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
ord585
__vbaVarVargNofree
__vbaFpCDblR4
__vbaFreeVar
__vbaLateIdCall
ord588
__vbaAptOffset
__vbaStrVarMove
__vbaLenBstr
__vbaVarIdiv
__vbaFreeVarList
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaRaiseEvent
__vbaFreeObjList
_adj_fprem1
ord518
__vbaRecAnsiToUni
ord519
__vbaI2Abs
__vbaResume
__vbaStrCat
__vbaRecDestruct
__vbaStrDate
__vbaSetSystemError
__vbaHresultCheckObj
ord556
__vbaLenVar
ord558
_adj_fdiv_m32
Zombie_GetTypeInfo
__vbaAryDestruct
ord592
__vbaExitProc
ord593
ord594
ord301
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
ord599
__vbaFpR4
__vbaBoolVar
ord307
__vbaFpR8
__vbaBoolVarNull
_CIsin
__vbaErase
ord631
__vbaVarCmpGt
ord632
__vbaChkstk
__vbaCyVar
EVENT_SINK_AddRef
ord527
__vbaGenerateBoundsError
__vbaStrCmp
__vbaVarTstEq
__vbaAryConstruct2
ord560
ord561
__vbaI2I4
__vbaPrintObj
DllFunctionCall
ord563
__vbaVarOr
__vbaFpUI1
__vbaCastObjVar
__vbaRedimPreserve
__vbaLbound
_adj_fpatan
__vbaR4Var
__vbaLateIdCallLd
Zombie_GetTypeInfoCount
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
__vbaNew
__vbaUI1I2
_CIsqrt
__vbaObjIs
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaUI1I4
__vbaVarMul
__vbaExceptHandler
ord712
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
__vbaVarDiv
ord608
__vbaFPException
ord717
__vbaInStrVar
ord319
__vbaUbound
__vbaStrVarVal
__vbaVarCat
ord534
__vbaDateVar
__vbaI2Var
ord644
ord537
_CIlog
ord539
__vbaErrorOverflow
__vbaNew2
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
ord681
__vbaVarNot
__vbaFreeStrList
__vbaDerefAry1
_adj_fdivr_m32
__vbaR8Var
__vbaPowerR8
_adj_fdiv_r
ord685
ord101
ord102
__vbaI4Var
ord103
__vbaVarCmpEq
ord104
ord105
__vbaAryLock
__vbaVarAdd
ord320
__vbaStrToAnsi
ord612
__vbaVarDup
ord321
__vbaFpI2
__vbaVarMod
ord616
__vbaVarCopy
__vbaFpI4
__vbaLateMemCallLd
__vbaRecDestructAnsi
_CIatan
__vbaCastObj
__vbaStrMove
ord543
_allmul
ord544
__vbaLateIdSt
_CItan
__vbaAryUnlock
__vbaFPInt
ord547
_CIexp
__vbaFreeObj
__vbaFreeStr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
__vbaR8FixI4
ord582
ord583
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaAptOffset
ord588
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
__vbaFpCDblR8
__vbaRaiseEvent
__vbaFreeObjList
ord516
_adj_fprem1
__vbaRecAnsiToUni
ord519
__vbaResume
__vbaCopyBytes
__vbaStrCat
__vbaVarCmpNe
__vbaLsetFixstr
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaExitProc
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
__vbaFpR4
__vbaStrFixstr
__vbaBoolVarNull
_CIsin
ord631
__vbaErase
__vbaVarZero
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
__vbaAryConstruct2
__vbaI2I4
DllFunctionCall
__vbaFpUI1
__vbaRedimPreserve
_adj_fpatan
__vbaR4Var
__vbaLateIdCallLd
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
__vbaNew
__vbaUI1I2
_CIsqrt
__vbaObjIs
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaUI1I4
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFailedFriend
ord715
__vbaFPException
ord717
__vbaUbound
__vbaI2Var
ord644
ord537
_CIlog
__vbaErrorOverflow
__vbaNew2
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord681
__vbaFreeStrList
__vbaDerefAry1
_adj_fdivr_m32
__vbaPowerR8
_adj_fdiv_r
ord685
ord101
ord102
__vbaI4Var
ord103
ord104
ord105
__vbaAryLock
__vbaStrToAnsi
__vbaVarDup
ord614
__vbaFpI2
__vbaFpI4
ord616
__vbaVarCopy
_CIatan
__vbaStrMove
__vbaCastObj
__vbaR8IntI4
_allmul
__vbaFpCSngR4
_CItan
__vbaFPInt
__vbaUI1Var
__vbaAryUnlock
__vbaFpCSngR8
_CIexp
__vbaFreeObj
__vbaFreeStr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateThread
CoMarshalInterThreadInterfaceInStream
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoInitialize
CoUninitialize
CLSIDFromProgID
EVENT_SINK_GetIDsOfNames
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaHresultCheck
__vbaVarVargNofree
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaRaiseEvent
__vbaFreeObjList
_adj_fprem1
__vbaCopyBytes
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
Zombie_GetTypeInfo
__vbaAryDestruct
__vbaVarForInit
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaErase
__vbaVarZero
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
DllFunctionCall
__vbaRedimPreserve
_adj_fpatan
Zombie_GetTypeInfoCount
__vbaRedim
EVENT_SINK_Release
__vbaNew
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFailedFriend
ord715
__vbaFPException
ord319
ord644
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord101
ord102
__vbaI4Var
ord103
ord104
ord105
__vbaVarAdd
ord320
ord321
__vbaVarCopy
__vbaVarSetObjAddref
_CIatan
__vbaCastObj
__vbaStrMove
_allmul
_CItan
__vbaVarForNext
_CIexp
__vbaFreeObj
__vbaFreeStr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaVarVargNofree
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
ord600
__vbaUI1I2
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
__vbaStrVarVal
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
ord681
__vbaI4Str
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord101
ord102
__vbaI4Var
ord103
ord104
ord105
__vbaStrToAnsi
__vbaVarDup
__vbaVarLateMemCallLd
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
DragAcceptFiles
DragFinish
DragQueryFileA
ord1
GlobalSize
GlobalUnlock
lstrcmpA
GetVersionExA
GlobalLock
FindResourceA
GlobalAlloc
GlobalFree
GetProcAddress
LoadResource
LockResource
HeapReAlloc
GetLocaleInfoA
GetWindowsDirectoryA
lstrcpynA
GetModuleFileNameA
lstrcatA
DisableThreadLibraryCalls
GetFileAttributesA
GetVersion
GetAtomNameA
FindAtomA
AddAtomA
IsBadWritePtr
DeleteAtom
InterlockedIncrement
FreeLibrary
LoadLibraryA
InterlockedDecrement
GetProcessHeap
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
WriteFile
GetLastError
ReadFile
LeaveCriticalSection
CreateFileA
lstrcpyA
HeapAlloc
lstrlenA
HeapFree
WideCharToMultiByte
lstrlenW
SetFilePointer
MultiByteToWideChar
IsDBCSLeadByte
CloseHandle
lstrcmpiA
GetClipboardFormatNameA
PeekMessageW
ScreenToClient
PostMessageW
PeekMessageA
RegisterWindowMessageA
IsDlgButtonChecked
SetDlgItemInt
SetDlgItemTextA
CheckDlgButton
ReleaseCapture
LoadCursorA
SetCursor
SetFocus
CreateDialogIndirectParamA
SetCursorPos
MapWindowPoints
FillRect
PostMessageA
InvalidateRect
ValidateRect
SetRect
GetSysColor
InflateRect
GetClassInfoA
EnableMenuItem
TrackPopupMenu
GetWindow
GetWindowTextA
CharNextA
MessageBoxA
SendDlgItemMessageA
GetDlgItem
DispatchMessageA
TranslateMessage
WindowFromDC
IsChild
IsWindowEnabled
GetNextDlgTabItem
IsDialogMessageA
WinHelpA
MoveWindow
SetParent
BeginPaint
EndPaint
GetMenuItemCount
IsWindowVisible
DeleteMenu
IntersectRect
ShowWindow
SetWindowRgn
GetDlgItemTextA
EqualRect
GetDlgItemInt
SetWindowPos
GetWindowRect
SetWindowLongA
DestroyWindow
GetActiveWindow
UnregisterClassA
RemoveMenu
LoadMenuA
GetSubMenu
GetParent
DestroyMenu
GetFocus
IsWindow
DefWindowProcA
GetClientRect
RegisterClassA
LoadStringA
RegisterClipboardFormatA
GetCapture
GetCursorPos
EnableWindow
EndDialog
wsprintfA
GetKeyState
MessageBeep
CallWindowProcA
GetDC
GetSystemMetrics
ReleaseDC
UpdateWindow
SendMessageA
DialogBoxParamA
GetWindowLongA
CreateWindowExA
ClientToScreen
OffsetRect
PtInRect
DoDragDrop
RegisterDragDrop
CreateOleAdviseHolder
OleCreateFromFile
CLSIDFromProgID
OleCreate
OleSetContainedObject
StringFromCLSID
OleGetIconOfClass
CoGetMalloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleSaveToStream
OleLoadFromStream
RevokeDragDrop
CoTaskMemRealloc
ReleaseStgMedium
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegCloseKey
RegOpenKeyExA
SafeArrayCopy
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetElement
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetUBound
VariantCopy
CreateErrorInfo
VariantCopyInd
OleCreatePropertyFrame
LoadTypeLibEx
SetErrorInfo
LoadTypeLi
RegisterTypeLi
UnRegisterTypeLi
SafeArrayPutElement
GetErrorInfo
SafeArrayCreate
LoadRegTypeLi
OleLoadPicture
OleCreatePictureIndirect
SysAllocStringLen
SysFreeString
OleCreateFontIndirect
SysStringLen
SysAllocString
VariantInit
VariantChangeType
VariantClear
OleTranslateColor
SafeArrayRedim
GetOpenFileNameA
CommDlgExtendedError
GetNearestColor
CreateSolidBrush
DeleteObject
EnumFontFamiliesExA
StretchBlt
PatBlt
GetObjectType
GetBitmapBits
CreateDIBitmap
CreatePalette
SelectPalette
RealizePalette
GetObjectA
GetPaletteEntries
GetStockObject
GetDIBits
CopyEnhMetaFileA
CopyMetaFileA
CreateBitmap
LPtoDP
GetWindowExtEx
CreateDCA
CreateRectRgnIndirect
SetBkColor
GetViewportExtEx
GetClipBox
SetWindowExtEx
IntersectClipRect
SelectObject
CreateCompatibleBitmap
SetViewportExtEx
EndDoc
EndPage
DeleteDC
StartDocA
DPtoLP
StartPage
SetViewportOrgEx
SetMapMode
SetWindowOrgEx
GetMapMode
GetDeviceCaps
CreateICA
CreateCompatibleDC
DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaFreeVar
__vbaAptOffset
__vbaFreeVarList
_adj_fdiv_m64
__vbaRaiseEvent
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
ord301
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord304
ord307
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
ord310
__vbaObjIs
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord312
_adj_fprem
_adj_fdivr_m64
__vbaFailedFriend
__vbaFPException
ord644
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord101
ord102
ord103
ord104
ord105
__vbaStrToAnsi
_CIatan
__vbaStrMove
__vbaCastObj
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EVENT_SINK_GetIDsOfNames
__vbaVarSub
__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaRaiseEvent
__vbaFreeObjList
__vbaStrErrVarCopy
_adj_fprem1
__vbaCopyBytes
__vbaSetSystemError
__vbaRecDestruct
__vbaHresultCheckObj
__vbaLenVar
ord665
_adj_fdiv_m32
Zombie_GetTypeInfo
__vbaAryDestruct
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
__vbaFpR4
__vbaBoolVar
__vbaBoolVarNull
__vbaFpR8
_CIsin
__vbaErase
ord632
__vbaChkstk
__vbaCyVar
EVENT_SINK_AddRef
__vbaGenerateBoundsError
ord528
__vbaStrCmp
__vbaAryConstruct2
__vbaVarTstEq
__vbaR4Str
__vbaI2I4
__vbaPrintObj
__vbaObjVar
DllFunctionCall
__vbaCastObjVar
__vbaRedimPreserve
__vbaLbound
_adj_fpatan
__vbaR4Var
__vbaLateIdCallLd
Zombie_GetTypeInfoCount
__vbaRedim
EVENT_SINK_Release
__vbaNew
_CIsqrt
__vbaObjIs
EVENT_SINK_QueryInterface
__vbaVarMul
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaI2Str
ord607
__vbaFPException
__vbaInStrVar
ord319
__vbaUbound
__vbaVarCat
__vbaI2Var
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord573
ord681
__vbaVarNot
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
ord685
__vbaVarTstNe
ord101
ord102
__vbaI4Var
ord103
ord104
ord105
__vbaAryLock
__vbaLateMemCall
__vbaVarAdd
ord320
__vbaStrToAnsi
__vbaVarDup
ord321
__vbaFpI2
__vbaFpI4
__vbaVarLateMemCallLd
__vbaLateMemCallLd
_CIatan
__vbaCastObj
__vbaStrMove
_allmul
__vbaLateIdSt
_CItan
__vbaFPInt
__vbaAryUnlock
_CIexp
__vbaFreeObj
__vbaFreeStr
__vbaRecAssign
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ