0084cc746b2824369fe21ab9f4705c8c_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

0084cc746b2824369fe21ab9f4705c8c_JaffaCakes118
Size

1.4MB
MD5

0084cc746b2824369fe21ab9f4705c8c
SHA1

0d291ae9c14909fbabcc4f8c0e4f37bab0edefd9
SHA256

c0dff0a3db90e555952cb893f182d4074f108d5c788daf0754411f8eb8ad5c7b
SHA512

66ff2e8554850ce4401309307cb5129b194885c781319956c6c37c0fab37c96e0c0eea57720a1b345ff5c039cbf684945fee189becc463f3f9e1dfd8af21584a
SSDEEP

24576:RefBHRmtypE2Pc+9SPqayXlT9JDq0OlT0Boow9jl689RAkEa/jet9Anid4VDCONG:0fBwtyfPaB+rJZUIoowf6YRAkMt9Anbo

Score

3^/10

Malware Config

Signatures

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
0084cc746b2824369fe21ab9f4705c8c_JaffaCakes118
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$_3_/StarcatMobileCard/starcatMobileCard.exe
unpack001/caeConv.dll
unpack001/starcat.exe

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_1

Files

0084cc746b2824369fe21ab9f4705c8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7fa974366048f9c551ef45714595665e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetTempPathA

user32

EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow

gdi32

SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation

advapi32

RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA

comctl32

ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$DOCUMENTS/StarCat/MediaBox/__Default/data/mode_menu/data.xml
$DOCUMENTS/StarCat/MediaBox/__Default/data/mode_radio/menu.xml
$DOCUMENTS/StarCat/MediaBox/__Default/data/mode_shoutcast/menu.xml
$DOCUMENTS/StarCat/MediaBox/__Default/data/mode_time/data.xml
$PLUGINSDIR/InstallOptions.dll
.dll windows:4 windows x86 arch:x86

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc

user32

MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect

gdi32

SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

ole32

CoTaskMemFree

Exports

Exports

dialog
initDialog
show

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
$PLUGINSDIR/ioSpecial.ini
$PLUGINSDIR/modern-wizard.bmp
$_3_/StarcatMobileCard/starcatMobileCard.exe
.exe windows:4 windows x86 arch:x86

83d558a8a516abc8fdec89e8f8397e59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42u

ord361
ord2505
ord293
ord538
ord2355
ord1197
ord861
ord925
ord922
ord4124
ord924
ord6139
ord6655
ord6279
ord6278
ord535
ord5568
ord2910
ord2606
ord4273
ord6654
ord6865
ord6868
ord4272
ord4199
ord5852
ord4197
ord942
ord927
ord940
ord5706
ord6918
ord941
ord3737
ord818
ord1229
ord2144
ord3084
ord2372
ord755
ord470
ord3792
ord6211
ord3915
ord4294
ord3750
ord4078
ord1912
ord3284
ord2855
ord2574
ord4396
ord3365
ord3635
ord693
ord4238
ord2706
ord3087
ord6754
ord6688
ord6646
ord3614
ord4128
ord2857
ord5142
ord4688
ord956
ord3016
ord4667
ord4269
ord6371
ord4480
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord2717
ord4074
ord4692
ord5303
ord5285
ord5710
ord4616
ord3733
ord561
ord815
ord654
ord801
ord765
ord616
ord6113
ord2613
ord1131
ord541
ord2057
ord2508
ord2015
ord4213
ord2570
ord4392
ord3577
ord3693
ord341
ord2362
ord6399
ord860
ord6398
ord6874
ord537
ord3517
ord3516
ord3991
ord2858
ord2550
ord6597
ord6451
ord6896
ord2634
ord6136
ord5854
ord5599
ord5679
ord1105
ord283
ord6193
ord4155
ord2114
ord1143
ord289
ord6871
ord1634
ord613
ord2854
ord1633
ord6017
ord6190
ord2746
ord5871
ord540
ord3871
ord800
ord3591
ord5860
ord6057
ord5567
ord5575
ord5732
ord5674
ord5790
ord5785
ord5869
ord6168
ord6185
ord4324
ord6182
ord5752
ord6188
ord5755
ord2966
ord2859
ord1569
ord5977
ord5047
ord2397
ord2371
ord4279
ord4270
ord5781
ord2406
ord3621
ord3658
ord567
ord556
ord323
ord609
ord809
ord640
ord3566
ord3569
ord4418
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord858
ord2810
ord6195
ord4847
ord4704
ord6330
ord4229
ord2294
ord2293
ord2350
ord324
ord641
ord656
ord793
ord3714
ord3605
ord3592
ord4419
ord5276
ord1767
ord6048
ord2506
ord4992
ord4370
ord5261
ord354
ord562
ord816
ord1263
ord2385
ord5787
ord3687
ord795
ord3568
ord3716
ord4401
ord2559
ord472
ord5784
ord2403
ord4292
ord2047
ord2640
ord4435
ord4831
ord3793
ord4347
ord6370
ord5157
ord2377
ord5237
ord4390
ord1768
ord4073
ord6051
ord3397
ord5273
ord5286
ord2567
ord1165
ord825
ord4018
ord823

msvcrt

sprintf
_ftol
free
malloc
wcsncpy
wcslen
_purecall
fclose
_wfopen
fread
fwrite
fseek
ftell
fflush
fputc
getc
fgets
fscanf
rand
srand
__CxxFrameHandler
wcscpy
wcsrchr
swprintf
_wtoi
wcscmp
wcsstr
wcstoul
_wcsnicmp
_wcsdup
rewind
fopen
exit
wcschr
_wunlink
time
_wcsicmp
_wstat
swscanf
wcspbrk
wcsspn
realloc
floor
longjmp
_setjmp3
__CxxLongjmpUnwind
strncpy
printf
isprint
fprintf
_iob
_waccess
sscanf
getenv
_exit
_controlfp
_onexit
__dllonexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
_XcptFilter

kernel32

CreateDirectoryW
FindFirstFileW
FindNextFileW
FindClose
GetLastError
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
lstrlenA
GetModuleFileNameA
lstrcpynW
lstrcmpiW
MultiByteToWideChar
GetModuleHandleW
GetProcAddress
GetVersionExA
GetWindowsDirectoryW
LoadLibraryW
lstrcpyW
lstrlenW
WinExec
WideCharToMultiByte
LoadLibraryExW
FreeLibrary
GetPrivateProfileStringW
lstrcatW
GetVersion
MulDiv
GetStartupInfoW

user32

ClientToScreen
PostMessageW
TrackPopupMenuEx
GetSubMenu
GetWindowRect
DrawFocusRect
InflateRect
PeekMessageW
CharNextW
DrawIcon
GetSystemMenu
AppendMenuW
LoadIconW
WindowFromPoint
UpdateWindow
DrawEdge
DrawFrameControl
GetFocus
GetKeyState
TranslateMessage
GetClientRect
OffsetRect
DrawStateW
DispatchMessageW
DestroyCursor
GetActiveWindow
InvalidateRect
SetCursor
GetParent
GetNextDlgTabItem
SendMessageW
GetWindowLongW
GetMessagePos
DestroyIcon
IsRectEmpty
GetWindowTextW
GetClassNameW
ChildWindowFromPoint
IsWindowEnabled
SetWindowRgn
SetTimer
KillTimer
EqualRect
FillRect
GetSysColor
GetCursorPos
ScreenToClient
IsWindow
SetRectEmpty
GetClassInfoW
DefWindowProcW
IsIconic
LoadCursorW
DestroyMenu
GetDC
ReleaseDC
LoadBitmapW
SetRect
CreateIconIndirect
GetIconInfo
CopyIcon
PtInRect
GetMonitorInfoW
GetSystemMetrics
MonitorFromPoint
RedrawWindow
EnableWindow
GrayStringW
DrawTextW
TabbedTextOutW
FrameRect
LoadImageW
CopyRect

gdi32

RectVisible
TextOutW
ExtTextOutW
Escape
CreateDIBSection
CreateSolidBrush
CreatePalette
RealizePalette
StretchBlt
GdiFlush
GetDIBColorTable
GetPaletteEntries
GetDIBits
SetViewportExtEx
SetViewportOrgEx
CreateDCW
LineTo
MoveToEx
CreatePen
GetTextMetricsW
SetBkMode
CreateFontIndirectW
LPtoDP
SetTextJustification
PtVisible
FrameRgn
SelectClipRgn
FillRgn
OffsetRgn
CombineRgn
CreateRectRgn
CreatePolygonRgn
CreateRoundRectRgn
GetCurrentObject
EnumFontsW
GetMapMode
DPtoLP
GetBkColor
BitBlt
GetStockObject
GetWindowExtEx
GetViewportExtEx
GetPixel
SetPixel
SetBkColor
SetTextColor
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
GetTextExtentExPointW
GetGlyphOutlineW
GetDeviceCaps
CreateFontW
SelectObject
CreateBitmap
GetBitmapBits
GetTextExtentPoint32W
GetObjectW
DeleteObject

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegQueryValueW

shell32

DragQueryFileW
DragFinish
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFolderPathW

comctl32

ImageList_SetBkColor
ImageList_GetImageInfo
ord17
ImageList_GetImageCount
ImageList_GetIcon
_TrackMouseEvent
ImageList_GetBkColor

ole32

CoCreateInstance

avifil32

AVIStreamSetFormat
AVIStreamRelease
AVIMakeCompressedStream
AVIFileInit
AVIFileOpenW
AVIFileExit
AVIFileCreateStreamW
AVIFileRelease
AVIStreamWrite

msvfw32

DrawDibClose

winmm

PlaySoundW

msvcp60

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??1_Lockit@std@@QAE@XZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
??0_Lockit@std@@QAE@XZ

Exports

Exports

??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??0CxMemFile@@QAE@ABV0@@Z
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??1CxImage@@UAE@XZ
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_7CxImage@@6B@
??_7CxMemFile@@6B@
??_FCxIOFile@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXABV0@@Z
?Close@CxIOFile@@UAE_NXZ
?Eof@CxIOFile@@UAE_NXZ
?Error@CxIOFile@@UAEJXZ
?Flush@CxIOFile@@UAE_NXZ
?GetC@CxIOFile@@UAEJXZ
?GetS@CxIOFile@@UAEPADPADH@Z
?Open@CxIOFile@@QAE_NPBG0@Z
?PutC@CxFile@@UAE_NE@Z
?PutC@CxIOFile@@UAE_NE@Z
?Read@CxIOFile@@UAEIPAXII@Z
?Scanf@CxIOFile@@UAEJPBDPAX@Z
?Seek@CxIOFile@@UAE_NJH@Z
?Size@CxIOFile@@UAEJXZ
?Tell@CxIOFile@@UAEJXZ
?Write@CxIOFile@@UAEIPBXII@Z

Sections

.text
Size: 264KB - Virtual size: 261KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
caeConv.dll
.dll windows:4 windows x86 arch:x86

c7dfc407514fe96115e66d701c60a636

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
??1type_info@@UAE@XZ
_onexit
__dllonexit
_CxxThrowException
_ftol
_purecall
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
sprintf

msvcp60

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??1strstreambuf@std@@UAE@XZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?_Global@_Locimp@locale@std@@0PAV123@A
?_Init@strstreambuf@std@@IAEXHPAD0H@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?overflow@strstreambuf@std@@MAEHH@Z
?pbackfail@strstreambuf@std@@MAEHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@strstreambuf@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?seekoff@strstreambuf@std@@MAE?AV?$fpos@H@2@JW4seekdir@ios_base@2@H@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?_Fpz@std@@3_JB
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
??_7?$basic_ifstream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0ios_base@std@@IAE@XZ
??_8?$basic_ifstream@DU?$char_traits@D@std@@@std@@7B@
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
??_7?$basic_ofstream@DU?$char_traits@D@std@@@std@@6B@
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_8?$basic_ofstream@DU?$char_traits@D@std@@@std@@7B@
??1?$basic_ofstream@DU?$char_traits@D@std@@@std@@UAE@XZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?flush@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??1ios_base@std@@UAE@XZ
??1istrstream@std@@UAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
?seekpos@strstreambuf@std@@MAE?AV?$fpos@H@2@V32@H@Z

Exports

Exports

?conv_convert@@YAHPBD0H@Z

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
config/ebook/img/bookcover.jpg
.jpg
license/mobile.lic
license/module.lic
starcat.exe
.exe windows:4 windows x86 arch:x86

b68c6ba5b724dba4500683912820e774

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathAppendA
StrFormatByteSizeA
PathGetArgsA
PathRemoveArgsA
PathUnquoteSpacesA

winmm

PlaySoundA
waveOutClose
waveOutOpen
waveOutGetVolume
waveOutSetVolume
waveOutPause
waveOutGetPosition
waveOutRestart
waveOutReset
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutWrite
waveOutGetNumDevs
waveOutGetDevCapsA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

urlmon

URLDownloadToCacheFileA
URLDownloadToFileA

mfc42

ord6402
ord6403
ord3521
ord2725
ord4033
ord1108
ord861
ord435
ord1269
ord1572
ord1265
ord1871
ord2614
ord4204
ord940
ord2915
ord341
ord654
ord6140
ord5858
ord5603
ord2061
ord4202
ord538
ord3573
ord3610
ord656
ord3721
ord795
ord4809
ord6389
ord6663
ord1949
ord6242
ord818
ord686
ord384
ord2408
ord3092
ord4083
ord2243
ord4299
ord2431
ord5572
ord2860
ord6128
ord3752
ord2380
ord3742
ord1270
ord1232
ord3138
ord2393
ord1271
ord3807
ord6178
ord924
ord4287
ord2089
ord5440
ord6383
ord5450
ord6394
ord6449
ord2727
ord6467
ord2730
ord2729
ord2251
ord3692
ord5791
ord6157
ord816
ord562
ord665
ord5442
ord5186
ord354
ord6334
ord765
ord4278
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord3698
ord2582
ord4402
ord3370
ord3640
ord693
ord616
ord2358
ord2370
ord3996
ord2820
ord3811
ord859
ord2642
ord793
ord3719
ord2301
ord2513
ord293
ord2363
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord692
ord3803
ord1105
ord2784
ord2652
ord1979
ord1669
ord3317
ord1577
ord1575
ord923
ord668
ord3304
ord3010
ord3310
ord3324
ord4215
ord3181
ord1980
ord3178
ord4058
ord2781
ord2770
ord356
ord6874
ord6143
ord3873
ord1802
ord6571
ord6930
ord6928
ord2740
ord2801
ord1799
ord614
ord2623
ord290
ord4226
ord2486
ord4003
ord4530
ord4525
ord4544
ord4523
ord5685
ord3274
ord3353
ord3579
ord439
ord736
ord4542
ord1567
ord268
ord3174
ord1175
ord2135
ord1601
ord6170
ord2763
ord2452
ord5787
ord3293
ord3754
ord3753
ord3337
ord434
ord5575
ord5651
ord3130
ord3676
ord5710
ord350
ord6779
ord6778
ord1860
ord3887
ord2830
ord4222
ord5467
ord1581
ord2918
ord1989
ord2805
ord960
ord6314
ord4179
ord5445
ord6012
ord5775
ord2603
ord3180
ord3183
ord3176
ord3508
ord551
ord1106
ord2558
ord2078
ord5860
ord4220
ord2584
ord3654
ord2438
ord6270
ord2919
ord2863
ord1644
ord2528
ord713
ord6141
ord414
ord6320
ord2688
ord5435
ord1683
ord1673
ord2628
ord5980
ord2641
ord4122
ord6214
ord6196
ord4298
ord5948
ord3088
ord3875
ord3872
ord3871
ord6198
ord4286
ord4283
ord3137
ord3796
ord5719
ord6092
ord3524
ord4032
ord6095
ord4035
ord2549
ord2433
ord426
ord726
ord1642
ord6111
ord2113
ord2100
ord6905
ord4224
ord3301
ord1948
ord5303
ord4699
ord565
ord817
ord1233
ord2726
ord5715
ord326
ord1768
ord2450
ord4476
ord2111
ord3708
ord781
ord5937
ord6134
ord6136
ord2935
ord3767
ord3876
ord4132
ord5821
ord3662
ord5859
ord6876
ord536
ord6662
ord2065
ord3981
ord3701
ord500
ord772
ord6142
ord5495
ord1907
ord5161
ord5162
ord5160
ord4905
ord4976
ord4948
ord4358
ord4377
ord4835
ord768
ord489
ord4258
ord5287
ord4742
ord4854
ord2086
ord5856
ord6927
ord2152
ord3920
ord3755
ord1920
ord3289
ord2096
ord4694
ord1783
ord2938
ord6888
ord6907
ord3998
ord6675
ord3699
ord1690
ord4439
ord2054
ord4431
ord5850
ord1008
ord2882
ord5288
ord4243
ord2714
ord6762
ord6696
ord6654
ord4023
ord2862
ord5148
ord3021
ord2116
ord6129
ord3711
ord783
ord6377
ord2112
ord3005
ord4881
ord4400
ord3630
ord682
ord3546
ord6379
ord539
ord2753
ord2634
ord6241
ord3810
ord920
ord6458
ord6380
ord1193
ord1151
ord3693
ord4259
ord1908
ord771
ord497
ord3398
ord3733
ord6008
ord4000
ord3303
ord4125
ord3287
ord3475
ord3290
ord5849
ord2881
ord2587
ord4406
ord3394
ord3729
ord804
ord6785
ord2119
ord4715
ord2637
ord810
ord1114
ord3258
ord4034
ord433
ord5271
ord1795
ord6883
ord826
ord1205
ord1199
ord6438
ord824
ord1134
ord2621
ord6117
ord4159
ord1200
ord296
ord5214
ord617
ord6442
ord4601
ord2132
ord5247
ord5231
ord6225
ord2144
ord2145
ord4046
ord5683
ord561
ord541
ord5861
ord815
ord801
ord3738
ord4622
ord5714
ord5289
ord5307
ord4698
ord4079
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord1643
ord273
ord1969
ord3318
ord2454
ord603
ord882
ord879
ord4610
ord4612
ord4615
ord2567
ord472
ord5788
ord4297
ord4133
ord283
ord1088
ord2122
ord289
ord613
ord3874
ord5981
ord5053
ord556
ord809
ord5785
ord3797
ord3089
ord6021
ord6194
ord2754
ord3596
ord5864
ord6061
ord5571
ord5579
ord5736
ord5678
ord5794
ord5789
ord5873
ord6189
ord4330
ord6186
ord5756

msvcrt

__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit
_XcptFilter
_acmdln
?terminate@@YAXXZ
strtod
abort
getenv
_iob
isprint
__getmainargs
ceil
__CxxLongjmpUnwind
_setjmp3
longjmp
floor
_strnicmp
_mbsspn
sscanf
calloc
_CIpow
strtol
wcstol
towupper
vsprintf
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
mbstowcs
strtoul
fprintf
_CIasin
realloc
_mbsspnp
strpbrk
strncpy
_stat
_access
_mbsstr
_snprintf
wcscmp
_mbstok
_mbsrchr
_splitpath
_except_handler3
strncmp
_unlink
_mbsnbicmp
wcschr
memmove
sprintf
memchr
_beginthreadex
_mbsinc
_mbspbrk
_mbschr
_itoa
_CxxThrowException
rewind
exit
_strdup
_stricmp
_read
srand
wcslen
rand
fscanf
fgets
getc
fputc
fflush
ftell
fseek
fwrite
fread
fopen
fclose
atol
_mbsnbcpy
malloc
free
_ftol
atoi
time
_mbscmp
_purecall
__CxxFrameHandler
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
printf
_controlfp
strerror
_errno
_pctype
_isctype
__mb_cur_max
_lseeki64
toupper
tolower
localtime
_setmbcp
_close
_fstat
_open
_write
_mbsicmp

kernel32

GetModuleFileNameA
GetCommandLineA
OpenProcess
GetTickCount
MulDiv
CreateFileA
GetFileSize
ReadFile
CloseHandle
UnmapViewOfFile
GetStartupInfoA
GetCurrentProcessId
SetCurrentDirectoryA
GetCurrentDirectoryA
lstrlenA
WriteFile
GetLastError
GetProcAddress
GetModuleHandleA
FreeLibrary
InitializeCriticalSection
CreateEventA
DeleteCriticalSection
LeaveCriticalSection
SetEvent
EnterCriticalSection
WaitForSingleObject
Sleep
InterlockedIncrement
InterlockedDecrement
LoadLibraryA
MultiByteToWideChar
lstrlenW
SetUnhandledExceptionFilter
CreateProcessA
lstrcatA
IsDebuggerPresent
VirtualQuery
SetFilePointer
OutputDebugStringA
lstrcpyA
GetCurrentProcess
GetCurrentThreadId
RaiseException
GetSystemInfo
GetFileTime
FileTimeToDosDateTime
FileTimeToLocalFileTime
GlobalMemoryStatus
GetSystemTimeAsFileTime
GetVersionExA
WideCharToMultiByte
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalAddAtomA
DeleteAtom
CompareStringA
GetPrivateProfileStringA
WritePrivateProfileStringA
GlobalFree
GetFullPathNameA
FindClose
FindNextFileA
FindFirstFileA
TerminateThread
ResumeThread
CreateMutexA
ReleaseMutex
CopyFileA
lstrcpynA
HeapFree
HeapAlloc
GetProcessHeap
GetLocaleInfoA
GetLocalTime
GetFileInformationByHandle
IsBadWritePtr
FlushFileBuffers
LoadLibraryExA
WinExec
GetWindowsDirectoryA
lstrcmpiA
SizeofResource
LockResource
LoadResource
FindResourceA
GlobalReAlloc
GetUserDefaultLangID
LoadLibraryW
GetVersion
CreateThread
SystemTimeToFileTime
CreateDirectoryA
GetFileAttributesA
DeleteFileA
LocalFree
IsBadReadPtr
FileTimeToSystemTime
MapViewOfFile
LocalAlloc
CreateFileW
ResetEvent
GetTempPathA
SetEndOfFile
UnlockFile
LockFile
GetSystemTime
CreateFileMappingA

user32

MonitorFromPoint
GetSystemMetrics
GetAsyncKeyState
GetCursorPos
GetMonitorInfoA
IntersectRect
SetWindowPos
CallNextHookEx
EnumDisplayMonitors
SetWindowTextA
GetFocus
EnableMenuItem
RemoveMenu
InsertMenuA
GetMenuStringA
ModifyMenuA
CheckMenuItem
ShowWindow
PeekMessageA
PostThreadMessageA
SendMessageTimeoutA
EqualRect
UnhookWindowsHookEx
IsClipboardFormatAvailable
GetMenuItemID
SetWindowsHookExA
GetMenuItemCount
RegisterClassA
GetTopWindow
SetWindowRgn
IsWindowEnabled
ChildWindowFromPoint
GetClassNameA
GetWindowTextA
IsRectEmpty
DrawEdge
UnionRect
GetMessagePos
IsZoomed
EnumChildWindows
FindWindowExA
ScreenToClient
CallWindowProcA
RemovePropA
wvsprintfA
wsprintfA
LoadStringA
LoadStringW
CharNextW
UpdateWindow
MessageBoxA
TranslateMessage
GetMessageA
GetWindow
CopyIcon
GetKeyState
DrawFrameControl
GetCursor
GetClassInfoA
DefWindowProcA
TrackPopupMenu
GetWindowDC
GetPropA
SetRectEmpty
SetPropA
IsWindow
SetWindowLongA
RedrawWindow
IsWindowVisible
RegisterWindowMessageA
FindWindowA
LoadCursorA
GetSysColorBrush
GetDesktopWindow
FrameRect
LoadMenuA
LoadImageA
GetIconInfo
CreateIconIndirect
GetSysColor
FillRect
DrawStateA
OffsetRect
CopyRect
InflateRect
DrawFocusRect
GetSubMenu
TrackPopupMenuEx
SetCursor
GetNextDlgTabItem
DestroyIcon
DestroyCursor
DestroyMenu
GrayStringA
TabbedTextOutA
LoadBitmapA
GetActiveWindow
GetCapture
SetCapture
ClientToScreen
WindowFromPoint
ReleaseCapture
GetWindowLongA
SystemParametersInfoA
SetRect
DrawTextA
KillTimer
SetTimer
GetDC
ReleaseDC
InvalidateRect
GetParent
EnableWindow
TranslateAcceleratorA
GetClientRect
PtInRect
LoadIconA
LoadAcceleratorsA
GetWindowRect
SendMessageA
UpdateLayeredWindow
ShowScrollBar
EndDeferWindowPos
DeferWindowPos
PostMessageA
BeginDeferWindowPos
SetMenuDefaultItem
SetParent
DrawAnimatedRects
SetActiveWindow
GetWindowRgn
SetForegroundWindow
EndPaint
BeginPaint
DrawIcon
DispatchMessageA

gdi32

GetTextExtentPoint32A
GetStockObject
GetObjectA
CreateFontIndirectA
DPtoLP
CreateRectRgn
SetRectRgn
EnumFontsA
CreateDCA
SetBkMode
SetViewportOrgEx
GetViewportOrgEx
SetViewportExtEx
OffsetRgn
CreatePen
FloodFill
Ellipse
LineTo
MoveToEx
GetTextMetricsA
SetTextJustification
TextOutA
FrameRgn
SelectClipRgn
CombineRgn
CreateRoundRectRgn
GetCurrentObject
BitBlt
ExtCreateRegion
ExtCreatePen
Polyline
MaskBlt
ExtTextOutA
Escape
DeleteDC
SetBkColor
SetPixel
GetPixel
CreateDIBSection
CreateSolidBrush
CreatePolygonRgn
FillRgn
PlgBlt
Rectangle
PtInRegion
CreatePalette
RealizePalette
GetDeviceCaps
GetGlyphOutlineW
SelectObject
CreateCompatibleDC
SetTextColor
DeleteObject
GetBitmapBits
CreateBitmap
CreateFontA
GetWindowExtEx
PtVisible
CreateRectRgnIndirect
RectVisible
GetTextExtentExPointW
StretchBlt
GetBkColor
GetMapMode
LPtoDP
CreateCompatibleBitmap
GdiFlush
GetViewportExtEx
GetDIBColorTable
GetPaletteEntries
GetDIBits

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
GetUserNameA
RegQueryValueExA
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
RegQueryValueA
RegDeleteValueA
RegOpenKeyExA
RegFlushKey

shell32

SHAppBarMessage
ShellExecuteExA
SHBrowseForFolderA
SHGetFolderPathA
SHGetMalloc
SHGetSpecialFolderLocation
ShellExecuteA
DragFinish
DragQueryFileA
Shell_NotifyIconA
SHGetPathFromIDListA

comctl32

ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ord17
ImageList_GetImageCount
ImageList_GetIcon
ImageList_Create
ImageList_AddMasked
ord8
ImageList_Draw
ImageList_GetImageInfo
_TrackMouseEvent
ImageList_Remove

ole32

CoTaskMemFree
CoTaskMemAlloc
CreateStreamOnHGlobal
CoCreateInstance

olepro32

ord251

oleaut32

SysAllocStringLen
SysFreeString
VariantChangeType
SysAllocString
VariantClear
SysStringLen
VariantInit
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData

msvcp60

??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??9std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBDI@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PAD0PBD1@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??_7runtime_error@std@@6B@
??1runtime_error@std@@UAE@XZ
??_7logic_error@std@@6B@
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??0logic_error@std@@QAE@ABV01@@Z
?what@logic_error@std@@UBEPBDXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??1_Lockit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Xlen@std@@YAXXZ
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

avifil32

AVIFileExit
AVIFileOpenA
AVIFileInit
AVIFileRelease
AVIStreamRelease
AVIStreamSetFormat
AVIMakeCompressedStream
AVIFileCreateStreamA
AVIStreamWrite

msvfw32

DrawDibClose

psapi

EnumProcesses
EnumProcessModules
GetModuleBaseNameA

msvcirt

?sh_read@filebuf@@2HB
?open@ifstream@@QAEXPBDHH@Z
?read@istream@@QAEAAV1@PADH@Z
?close@ifstream@@QAEXXZ
??1ifstream@@UAE@XZ
??1ios@@UAE@XZ
??_Difstream@@QAEXXZ
??0ifstream@@QAE@XZ

wininet

InternetSetOptionA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
InternetReadFileExA
InternetOpenA

caeconv

?conv_convert@@YAHPBD0H@Z

rpcrt4

UuidCreate
UuidToStringA
RpcStringFreeA

dbghelp

MiniDumpWriteDump

iphlpapi

GetPerAdapterInfo
GetAdaptersInfo

brx134

?assign@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QAEAAV12@PBDI@Z
??1?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QAE@XZ
??_7abstract_protected_call@re_detail@boost@@6B@
?execute@abstract_protected_call@re_detail@boost@@QBI_NXZ
?size@?$basic_regex@DU?$regex_traits@DV?$w32_regex_traits@D@boost@@@boost@@@boost@@QBIIXZ
?verify_options@re_detail@boost@@YIXIK@Z
?raise_runtime_error@re_detail@boost@@YIXABVruntime_error@std@@@Z
?get_default_error_string@re_detail@boost@@YIPBDW4error_type@regex_constants@2@@Z
?w32_transform@re_detail@boost@@YI?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@KPBD0@Z

gdiplus

GdipFree
GdipAlloc
GdipSetSmoothingMode
GdipDisposeImage
GdipGetImageWidth
GdipCreateFromHDC
GdipSetPageUnit
GdipSetPageScale
GdipCloneImage
GdiplusStartup
GdiplusShutdown
GdipDeleteGraphics
GdipReleaseDC
GdipDrawImageRectI
GdipGetImageHeight
GdipLoadImageFromFile

Exports

Exports

??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??0CxMemFile@@QAE@ABV0@@Z
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??1CxImage@@UAE@XZ
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_7CxImage@@6B@
??_7CxMemFile@@6B@
??_FCxIOFile@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXABV0@@Z
?Close@CxIOFile@@UAE_NXZ
?Eof@CxIOFile@@UAE_NXZ
?Error@CxIOFile@@UAEJXZ
?Flush@CxIOFile@@UAE_NXZ
?GetC@CxIOFile@@UAEJXZ
?GetS@CxIOFile@@UAEPADPADH@Z
?Open@CxIOFile@@QAE_NPBD0@Z
?PutC@CxFile@@UAE_NE@Z
?PutC@CxIOFile@@UAE_NE@Z
?Read@CxIOFile@@UAEIPAXII@Z
?Scanf@CxIOFile@@UAEJPBDPAX@Z
?Seek@CxIOFile@@UAE_NJH@Z
?Size@CxIOFile@@UAEJXZ
?Tell@CxIOFile@@UAEJXZ
?Write@CxIOFile@@UAEIPBXII@Z
?interfaceMap@CCustomControlSite@@1UAFX_INTERFACEMAP@@B
?interfaceMap@CCustomWmpControlSite@@1UAFX_INTERFACEMAP@@B

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 324KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 620KB - Virtual size: 616KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7fa974366048f9c551ef45714595665e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 151KB

.ndata Size: - Virtual size: 40KB

.rsrc Size: 16KB - Virtual size: 15KB

b1cd0d78f652ce5fc63f0879371af012

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

comdlg32

ole32

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 152B

.reloc Size: 1024B - Virtual size: 1012B

83d558a8a516abc8fdec89e8f8397e59

Headers

File Characteristics

Imports

mfc42u

msvcrt

kernel32

user32

gdi32

comdlg32

advapi32

shell32

comctl32

ole32

avifil32

msvfw32

winmm

msvcp60

Exports

Exports

Sections

.text Size: 264KB - Virtual size: 261KB

.rdata Size: 36KB - Virtual size: 32KB

.data Size: 24KB - Virtual size: 35KB

.rsrc Size: 276KB - Virtual size: 275KB

c7dfc407514fe96115e66d701c60a636

Headers

File Characteristics

Imports

msvcrt

msvcp60

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 12KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 4KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 1KB

b68c6ba5b724dba4500683912820e774

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 151KB

.ndata
Size: - Virtual size: 40KB

.rsrc
Size: 16KB - Virtual size: 15KB

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 152B

.reloc
Size: 1024B - Virtual size: 1012B

.text
Size: 264KB - Virtual size: 261KB

.rdata
Size: 36KB - Virtual size: 32KB

.data
Size: 24KB - Virtual size: 35KB

.rsrc
Size: 276KB - Virtual size: 275KB

.text
Size: 16KB - Virtual size: 12KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 4KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 1KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 324KB - Virtual size: 321KB

.data
Size: 84KB - Virtual size: 110KB

.rsrc
Size: 620KB - Virtual size: 616KB