C:\Users\HP\Documents\Windows\avafix\ava_fixed_full\3._Source_BIN2\3. Source BIN\Client\bin_new\bin_origins.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
68c9842a0ecaed5044a486ad8e698f927a33dcb8bc3a202a08f99083ce38eea4.exe
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
68c9842a0ecaed5044a486ad8e698f927a33dcb8bc3a202a08f99083ce38eea4.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
68c9842a0ecaed5044a486ad8e698f927a33dcb8bc3a202a08f99083ce38eea4
-
Size
8.2MB
-
MD5
69c62a1f3abd2d4adfcb3f2a970daa62
-
SHA1
12e1ff020d117210a2309b90131d232f1bd65e0b
-
SHA256
68c9842a0ecaed5044a486ad8e698f927a33dcb8bc3a202a08f99083ce38eea4
-
SHA512
293730ca23e09529213d856daedc50fe502a08d9a8cec258e5e16a470c1818a584799f445aaf0cd56bca2ac3195ea82666a7c36221fe839e18f8836d660a160c
-
SSDEEP
98304:+XZG7FEDSx5rbUjzaR+tRokhp1cFj+TN+DJ5cAwxlaDPoNRsk8S6VE47F5bZ:y9HaRZkhp6FSgwXGlL
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68c9842a0ecaed5044a486ad8e698f927a33dcb8bc3a202a08f99083ce38eea4
Files
-
68c9842a0ecaed5044a486ad8e698f927a33dcb8bc3a202a08f99083ce38eea4.exe windows:6 windows x86 arch:x86
4f2cf1d6aa5e9df7a1c2f45f1fd9f222
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
ReadFile
GetFileSize
CreateFileA
ReadProcessMemory
MultiByteToWideChar
SetFileAttributesA
GetLocalTime
CreateDirectoryA
K32GetProcessImageFileNameA
K32GetModuleFileNameExA
QueryDosDeviceA
GetLogicalDriveStringsA
GetHandleInformation
IsBadCodePtr
VirtualQuery
GetFullPathNameA
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
K32QueryWorkingSetEx
VerifyVersionInfoW
SetEndOfFile
WriteConsoleW
HeapQueryInformation
HeapSize
OutputDebugStringW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
VirtualProtect
VirtualAlloc
VerSetConditionMask
Module32Next
IsBadReadPtr
Module32First
Process32Next
Process32First
CreateToolhelp32Snapshot
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
SetStdHandle
DeleteFileW
SetFileAttributesW
SetCurrentDirectoryW
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
HeapReAlloc
CreateDirectoryW
GetTimeZoneInformation
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetFileAttributesExW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetConsoleCtrlHandler
HeapAlloc
GetModuleFileNameA
GetModuleFileNameW
FreeLibraryAndExitThread
ResumeThread
ExitThread
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileInformationByHandle
ExitProcess
GetFullPathNameW
GetDriveTypeW
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RtlUnwind
InterlockedFlushSList
InterlockedPushEntrySList
GetFileSizeEx
VerifyVersionInfoA
FormatMessageW
WaitForMultipleObjects
PeekNamedPipe
GetFileType
GetStdHandle
GetEnvironmentVariableA
MoveFileExA
SleepEx
SetFilePointerEx
GetComputerNameA
GetThreadTimes
SetLastError
GetStartupInfoW
K32GetMappedFileNameA
UnhandledExceptionFilter
InitializeSListHead
FindResourceW
FindResourceA
SizeofResource
LoadResource
LockResource
CreateFileW
InterlockedDecrement
GetProcessHeap
HeapValidate
InterlockedIncrement
GetCPInfo
CompareStringEx
GetNativeSystemInfo
GetExitCodeThread
SwitchToThread
WaitForSingleObjectEx
LCMapStringEx
DecodePointer
EncodePointer
GetLocaleInfoEx
LocalFree
CreateSymbolicLinkW
GetFileInformationByHandleEx
GetModuleHandleW
OpenThread
GetModuleHandleA
K32GetModuleInformation
TerminateThread
GetCurrentDirectoryW
GetTickCount
GetCurrentDirectoryA
DeleteFileA
ReleaseMutex
CreateMutexA
GlobalFree
lstrlenA
GetPrivateProfileStringA
GetPriorityClass
CreateThread
TerminateProcess
Sleep
FindNextFileA
FindFirstFileA
FindClose
LoadLibraryA
GetProcAddress
WTSGetActiveConsoleSessionId
UnregisterWait
RegisterWaitForSingleObject
OpenProcess
GetCurrentThread
GetCurrentProcessId
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
CreateEventExW
InitOnceExecuteOnce
GetTempPathW
SetFileInformationByHandle
InitializeCriticalSectionEx
GetStringTypeW
IsProcessorFeaturePresent
RtlCaptureStackBackTrace
GetModuleHandleExW
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
InitOnceComplete
InitOnceBeginInitialize
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
RaiseException
GetCurrentThreadId
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
FormatMessageA
QueryPerformanceFrequency
QueryPerformanceCounter
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLocaleInfoA
CompareStringA
WideCharToMultiByte
lstrlenW
GlobalLock
GlobalUnlock
FreeLibrary
GetVersionExA
GetSystemDirectoryA
WriteFile
SetFilePointer
SetUnhandledExceptionFilter
GetTempFileNameA
GetTempPathA
RemoveDirectoryA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
GetSystemInfo
OutputDebugStringA
AllocConsole
GlobalAlloc
IsDebuggerPresent
MoveFileA
GetCurrentProcess
GetLastError
CloseHandle
HeapFree
GetFileAttributesA
user32
ReleaseCapture
GetAsyncKeyState
ChangeDisplaySettingsA
GetSystemMetrics
IsWindow
GetMessageA
MessageBoxA
LoadStringA
OffsetRect
SetRect
FillRect
GetClientRect
InvalidateRect
EndPaint
DefWindowProcA
UnregisterClassA
RegisterClassExA
CreateWindowExA
DestroyWindow
MoveWindow
SetFocus
UpdateWindow
GetWindowLongA
CharNextExA
CharPrevExA
RegisterClassA
GetMenu
SetWindowTextA
GetWindowRect
AdjustWindowRectEx
LoadCursorA
GetKeyboardLayoutNameA
GetKeyboardLayout
OpenClipboard
CloseClipboard
GetClipboardData
CharNextW
SendMessageW
DefWindowProcW
UnregisterClassW
RegisterClassExW
CreateWindowExW
LoadImageW
BeginPaint
ReleaseDC
GetDC
PeekMessageA
GetWindowModuleFileNameA
UnhookWinEvent
SetCapture
SetWindowPos
FlashWindowEx
SendMessageA
PostQuitMessage
RegisterRawInputDevices
GetRawInputData
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindowThreadProcessId
SetWindowLongW
SetWindowLongA
IsWindowUnicode
KillTimer
SetTimer
SetWinEventHook
GetKeyState
DispatchMessageA
GetCursorPos
ShowCursor
SetCursor
SystemParametersInfoA
DestroyCursor
ScreenToClient
FindWindowA
LoadImageA
SetCursorPos
ClientToScreen
ShowWindow
GetCapture
LoadIconA
TranslateMessage
gdi32
PatBlt
DeleteObject
GetTextExtentPoint32A
CreateSolidBrush
EnumFontFamiliesExA
GetStockObject
CreateFontIndirectA
GetCharABCWidthsFloatW
GetTextExtentPoint32W
SelectObject
SetBkColor
SetTextColor
TextOutW
TextOutA
CreateDIBSection
SetDIBitsToDevice
SetBkMode
StretchBlt
DeleteDC
CreateCompatibleDC
advapi32
RegCloseKey
CryptReleaseContext
RegOpenKeyExA
RegQueryValueExA
CryptGenRandom
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
RegOpenKeyA
SetKernelObjectSecurity
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorA
CryptEncrypt
CryptAcquireContextA
ole32
CoInitialize
CoCreateInstance
CoInitializeEx
CoInitializeSecurity
CoUninitialize
OleSetContainedObject
OleUninitialize
OleInitialize
CoGetClassObject
oleaut32
SysFreeString
SysStringLen
SafeArrayCreate
SafeArrayDestroy
SafeArrayAccessData
VariantInit
VariantClear
SafeArrayGetUBound
SysAllocString
SafeArrayGetLBound
winmm
timeGetTime
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
d3d8
Direct3DCreate8
python27
PyTuple_GetItem
PyDict_GetItemString
PyInt_FromLong
PyLong_FromLongLong
PyTuple_New
PyTuple_SetItem
PyList_New
PyList_Append
PyDict_New
PyDict_SetItemString
Py_IncRef
PyLong_AsLong
PyModule_AddIntConstant
Py_InitModule4
Py_BuildValue
PyInt_AsLong
PyDict_Next
PyDict_Size
PyObject_GetAttrString
PyString_FromString
PyImport_ImportModule
PyObject_CallObject
PyString_AsString
PyThreadState_Get
PyErr_SetString
PyExc_RuntimeError
PyArg_ParseTuple
PyModule_AddStringConstant
PyString_InternFromString
PyTuple_Size
PyCallable_Check
PyLong_AsLongLong
PyFloat_AsDouble
PyErr_Clear
PyErr_BadArgument
PyErr_Print
PyNumber_Check
_Py_NoneStruct
PyModule_GetDict
PyErr_Fetch
Py_SetProgramName
Py_Initialize
Py_Finalize
PyRun_StringFlags
PyEval_SetTrace
Py_FlushLine
PyImport_GetMagicNumber
PyImport_AddModule
PyObject_AsCharBuffer
PyCode_Addr2Line
PyEval_EvalCode
Py_OptimizeFlag
PyCode_Type
PyUnicodeUCS2_DecodeUTF8
_PyLong_FromByteArray
PyFloat_FromDouble
PyComplex_FromCComplex
PyString_FromStringAndSize
PyList_SetItem
PyDict_SetItem
PyErr_Occurred
PyErr_NoMemory
PyEval_GetRestricted
PyCode_New
PyMarshal_ReadObjectFromString
_PyLong_New
_Py_EllipsisObject
PyExc_EOFError
PyExc_ValueError
PyObject_GetAttr
PyExc_StopIteration
wtsapi32
WTSSendMessageA
netapi32
Netbios
imm32
ImmGetIMEFileNameA
ImmNotifyIME
ImmGetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListW
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmIsIME
devil
ilInit
ilTexImage
ilSetPixels
ilSave
ilShutDown
ilOriginFunc
ilEnable
ilCopyPixels
ilConvertImage
ilLoad
ilGetInteger
ilGenImages
ilDeleteImages
ilBindImage
libconfig++
??4Setting@libconfig@@QAEAAV01@AB_J@Z
??4Setting@libconfig@@QAEAAV01@PBD@Z
??4Setting@libconfig@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??ASetting@libconfig@@QBEAAV01@PBD@Z
??ASetting@libconfig@@QBEAAV01@H@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAA_J@Z
?lookupValue@Setting@libconfig@@QBE_NPBDAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?add@Setting@libconfig@@QAEAAV12@PBDW4Type@12@@Z
?add@Setting@libconfig@@QAEAAV12@W4Type@12@@Z
?getLength@Setting@libconfig@@QBEHXZ
??0Config@libconfig@@QAE@XZ
??1Config@libconfig@@UAE@XZ
?readFile@Config@libconfig@@QAEXPBD@Z
?writeFile@Config@libconfig@@QAEXPBD@Z
?getRoot@Config@libconfig@@QBEAAVSetting@2@XZ
?getPath@SettingException@libconfig@@QBEPBDXZ
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
granny2
_GrannyGetMeshIndexCount@4
_GrannyGetSourceModel@4
_GrannySetControlEaseOutCurve@28
_GrannyGetMeshVertexCount@4
_GrannyFreeControl@4
_GrannyFreeControlOnceUnused@4
_GrannyCompleteControlAt@8
_GrannySetControlEaseIn@8
_GrannyFreeControlIfComplete@4
_GrannyGetControlLoopCount@4
_GrannySetControlLoopCount@8
_GrannyGetControlSpeed@4
_GrannySetControlSpeed@8
_GrannyGetControlLocalDuration@4
_GrannyGetTotalTypeSize@4
_GrannyGetWorldPoseComposite4x4@8
_GrannyGetWorldPose4x4@8
_GrannyMeshIsRigid@4
_GrannyControlIsComplete@4
_GrannyFreeWorldPose@4
_GrannyNewWorldPose@4
_GrannyFindBoneByName@12
_GrannyGetMeshBindingToBoneIndices@4
_GrannyFreeMeshBinding@4
_GrannySetControlEaseOut@8
_GrannySetControlEaseInCurve@28
_GrannyNewMeshBinding@12
_GrannyFreeModelInstance@4
_GrannySetControlRawLocalClock@8
_GrannyPlayControlledAnimation@12
_GrannyBeginControlledAnimation@8
_GrannyInstantiateModel@4
_GrannyGetWorldPoseComposite4x4Array@4
_GrannySetLogCallback@4
_GrannyReadEntireFileFromMemory@8
_GrannyFreeFileSection@8
_GrannyFreeFile@4
_GrannyGetFileInfo@4
_GrannyGetMaterialTextureByType@8
_GrannyFindMatchingMember@16
_GrannyConvertSingleObject@20
_GrannyGetSourceSkeleton@4
_GrannySetModelClock@8
_GrannyFreeCompletedModelControls@4
_GrannySampleModelAnimationsAccelerated@20
_GrannyUpdateModelMatrix@20
_GrannyNewLocalPose@4
_GrannyFindTrackGroupForModel@12
_GrannyFreeLocalPose@4
GrannyPNT332VertexType
_GrannyDeformVertices@24
_GrannyFreeMeshDeformer@4
_GrannyNewMeshDeformer@16
_GrannyCopyMeshIndices@12
_GrannyGetMeshVertices@4
_GrannyCopyMeshVertices@12
_GrannyGetMeshVertexType@4
_GrannyGetMeshTriangleGroups@4
_GrannyGetMeshTriangleGroupCount@4
_GrannySetTrackGroupLOD@16
_GrannySetTrackGroupTarget@12
_GrannyGetControlRawLocalClock@4
_GrannyEndControlledAnimation@4
mss32
_AIL_auto_update_3D_position@8
_AIL_3D_sample_volume@4
_AIL_3D_sample_status@4
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_file@8
_AIL_end_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_start_3D_sample@4
_AIL_release_3D_sample_handle@4
_AIL_allocate_3D_sample_handle@4
_AIL_sample_volume_pan@12
_AIL_sample_status@4
_AIL_set_sample_loop_count@8
_AIL_set_sample_volume_pan@12
_AIL_end_sample@4
_AIL_resume_sample@4
_AIL_update_3D_position@8
_AIL_start_sample@4
_AIL_set_sample_file@12
_AIL_init_sample@4
_AIL_release_sample_handle@4
_AIL_allocate_sample_handle@4
_AIL_last_error@0
_AIL_stream_status@4
_AIL_set_stream_loop_count@8
_AIL_stream_volume_levels@12
_AIL_set_stream_volume_levels@12
_AIL_pause_stream@8
_AIL_start_stream@4
_AIL_close_stream@4
_AIL_set_redist_directory@4
_AIL_shutdown@0
_AIL_startup@0
_AIL_set_3D_orientation@28
_AIL_set_3D_velocity@20
_AIL_set_3D_position@16
_AIL_close_3D_listener@4
_AIL_open_3D_listener@4
_AIL_close_3D_provider@4
_AIL_open_3D_provider@4
_AIL_enumerate_3D_providers@12
_AIL_close_digital_driver@4
_AIL_open_stream@12
_AIL_open_digital_driver@16
_AIL_file_type@8
_AIL_decompress_ADPCM@12
_AIL_decompress_ASI@24
_AIL_WAV_info@8
_AIL_set_file_callbacks@16
_AIL_file_read@8
_AIL_mem_free_lock@4
_AIL_stop_sample@4
_AIL_set_3D_sample_loop_count@8
speedtreert
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?DeleteTransientData@CSpeedTreeRT@@QAEXXZ
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
??3CSpeedTreeRT@@SAXPAX@Z
??2CSpeedTreeRT@@SAPAXI@Z
??1CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetTime@CSpeedTreeRT@@SAXM@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
dinput8
DirectInput8Create
ws2_32
bind
getpeername
getsockname
getsockopt
WSASetLastError
WSAIoctl
accept
listen
getaddrinfo
freeaddrinfo
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
recvfrom
sendto
__WSAFDIsSet
closesocket
connect
ioctlsocket
recv
select
send
socket
WSAGetLastError
WSAStartup
WSACleanup
htonl
htons
inet_addr
setsockopt
ntohs
ntohl
gethostbyname
gethostname
ddraw
DirectDrawCreate
resource
PythonPlayerSettingsModuleLibRegisterVariables
LoadGameNPC
RegisterSkill
GetHorsePathNameByMode
PythonPlayerSettingsModuleLibRegisterFunctions
LoadPythonPlayerSettingsModuleLibrary
iphlpapi
GetAdaptersInfo
shell32
SHGetSpecialFolderPathA
crypt32
CertFindCertificateInStore
CertOpenStore
CertCloseStore
CertFreeCertificateContext
CryptStringToBinaryA
PFXImportCertStore
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertFindExtension
CertAddCertificateContextToStore
CertEnumCertificatesInStore
CryptDecodeObjectEx
wldap32
ord26
ord27
ord32
ord33
ord41
ord301
ord200
ord30
ord79
ord22
ord50
ord45
ord211
ord60
ord46
ord217
ord143
ord35
normaliz
IdnToUnicode
IdnToAscii
Sections
.text Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 188KB - Virtual size: 845KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 408KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ