Static task
static1
Behavioral task
behavioral1
Sample
00610704d805c19b7bec0a8bd71d805b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
00610704d805c19b7bec0a8bd71d805b_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
00610704d805c19b7bec0a8bd71d805b_JaffaCakes118
-
Size
529KB
-
MD5
00610704d805c19b7bec0a8bd71d805b
-
SHA1
7b1c82ad51ccd688c98f1b969067435412e4c90b
-
SHA256
7b882186c9e0ae0835f07f26557c533f37a04d440a096f227804ad87708b3ecf
-
SHA512
f73dc5b128889c214646347858019ff7bad3540687d91ff1c7bea5ad1149604a943d20e6910c80cc5ec3bf7f5ed33ef667d0dc50bc8e8fa630c48df611a8fe11
-
SSDEEP
1536:EEeFhigva/42XsCDUOQ4ueSnMBoOBE7OBzQC+Bmh0dT/z6Ye1jNfWQI7GiUvGX9N:EEeL81SnMJ5M7GiM2k+WYGwNdce
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00610704d805c19b7bec0a8bd71d805b_JaffaCakes118
Files
-
00610704d805c19b7bec0a8bd71d805b_JaffaCakes118.exe windows:4 windows x86 arch:x86
919e0edbc8e19bf46098fe7b99cd504d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
vaeasql
??0VaeParamSet@@QAE@ABV0@@Z
?SetDBA@CoMazSes@@QAEXH@Z
?DoSQLActionText@CoMazSes@@QAEFPBDAAVVaxnString@@PAVVaeParamSet@@2@Z
?GetDBA@CoMazSes@@QAEHXZ
?ClearItems@VaeParamSet@@QAEXXZ
?DoVoidSQLAction@CoMazSes@@QAEFPBDPAVVaeParamSet@@1@Z
?GetVersion@CoMazSes@@QAE?AW4VaeDBVersion@1@PAF00@Z
?GetItem@VaeDataSet@@QBEPBDII@Z
?DoDataSQLAction@CoMazSes@@QAEFPBDAAPAVVaeDataSet@@PAVVaeParamSet@@2@Z
??1VaeParamSet@@UAE@XZ
?AddItem@VaeParamSet@@QAEJABVVaxnString@@@Z
??0VaeParamSet@@QAE@XZ
vao
??4VaoResult@@QAEABV0@ABV0@@Z
?SUCCESS@VaoResult@@SA?AV1@XZ
?GetType@VaoObject@@QBE?AW4VaoType@1@XZ
?GetErrorText@VaoResult@@QBEABVVaxnString@@XZ
?GetName@VaoObject@@QBEABVVaxnString@@XZ
?Succeeded@VaoResult@@QBEHXZ
?StringToVaoType@VaoObject@@SA?AW4VaoType@1@ABVVaxnString@@PAH@Z
?OnDragOver@VaoSessObject@@SAKPAVCOleDataObject@@K@Z
?VaoTypeToString@VaoObject@@SA?AVVaxnString@@W4VaoType@1@H@Z
??0VaoDBNoButtons@@QAE@PBDPAVCWnd@@I@Z
?GetCause@VaoResult@@QBE?AW4VaoErrorCause@1@XZ
?OnDragOver@VaoObject@@SAKPAVCOleDataObject@@K@Z
vaos
??0VaosTrigger@@QAE@XZ
??0VaosView@@QAE@XZ
??0VaosAdvQueue@@QAE@XZ
??0VaosSynonym@@QAE@XZ
??0VaosTablePartition@@QAE@XZ
??0VaosSnapshotLog@@QAE@XZ
??0VaosSnapshot@@QAE@XZ
??0VaosSequence@@QAE@XZ
??0VaosRefreshGroup@@QAE@XZ
??0VaosFunction@@QAE@XZ
??0VaosProcedure@@QAE@XZ
??0VaosPackageBody@@QAE@XZ
??0VaosPackage@@QAE@XZ
??0VaosDBLink@@QAE@XZ
??0VaosIndexPartition@@QAE@XZ
??0VaosIndex@@QAE@XZ
??0VaosTable@@QAE@XZ
??0VaosCluster@@QAE@XZ
??0VaosSchema@@QAE@XZ
??0VaosAdvQueue@@QAE@ABV0@@Z
??0VaosView@@QAE@ABV0@@Z
??0VaosTrigger@@QAE@ABV0@@Z
??0VaosSynonym@@QAE@ABV0@@Z
??0VaosSnapshotLog@@QAE@ABV0@@Z
??0VaosSnapshot@@QAE@ABV0@@Z
??0VaosSequence@@QAE@ABV0@@Z
??0VaosRefreshGroup@@QAE@ABV0@@Z
??0VaosFunction@@QAE@ABV0@@Z
??0VaosProcedure@@QAE@ABV0@@Z
??0VaosPackageBody@@QAE@ABV0@@Z
??0VaosPackage@@QAE@ABV0@@Z
??0VaosDBLink@@QAE@ABV0@@Z
??0VaosIndexPartition@@QAE@ABV0@@Z
??0VaosIndex@@QAE@ABV0@@Z
??0VaosTablePartition@@QAE@ABV0@@Z
??0VaosTable@@QAE@ABV0@@Z
??0VaosCluster@@QAE@ABV0@@Z
??0VaosSchema@@QAE@ABV0@@Z
?PreMergeCheck@VaosIndexPartition@@QBE?BVVaxnString@@XZ
?PreMergeCheck@VaosTablePartition@@QBE?BVVaxnString@@XZ
??0VaosTableWizard@@QAE@XZ
?UsingWizard@VaosTabCreDialog@@QAEHXZ
?DoModal@VaosTabCreDialog@@UAEHXZ
??0VaosTabCreDialog@@QAE@PAVCWnd@@@Z
??1VaosGrantPrivDlg@@UAE@XZ
??0VaosGrantPrivDlg@@QAE@PAVVaoSchemaObject@@PAVCWnd@@@Z
?SetSynObjectName@VaosSynonym@@QAE?AVVaoResult@@ABVVaxnString@@@Z
?SetSynObjectSchema@VaosSynonym@@QAE?AVVaoResult@@ABVVaxnString@@@Z
?SetSynObjectType@VaosSynonym@@QAE?AVVaoResult@@ABVVaxnString@@@Z
vaxa
?CreateMCW@VaxaDBDetailView@@QAEXABVVaxnString@@PAVVaeParamSet@@1H@Z
?GetSelectedVaoType@VaxaDBDoc@@QBE?AW4VaoType@VaoObject@@XZ
?messageMap@VaxaDBApp@@1UAFX_MSGMAP@@B
?DestroyObject@VaxaDoc@@QAEHPAVVaoObject@@W4ObjectRole@1@@Z
?InitInstance@VaxaDBApp@@UAEHABVCString@@0@Z
??1VaxaDBApp@@UAE@XZ
??0VaxaDBApp@@QAE@XZ
?GetAboutBoxVersion@VaxaDBApp@@SA?AVVaxnString@@XZ
?classVaxaDBDoc@VaxaDBDoc@@2UCRuntimeClass@@B
?messageMap@VaxaDBDoc@@1UAFX_MSGMAP@@B
?dispatchMap@VaxaDBDoc@@1UAFX_DISPMAP@@B
?OnUpdateVmdbPauseResume@VaxaDBDoc@@UAEXPAVCCmdUI@@@Z
?OnUpdateVmdbRecord@VaxaDBDoc@@UAEXPAVCCmdUI@@@Z
?OnSize@VaxaDBTreeView@@QAEXIHH@Z
?OnUpdate@VaxaDBTreeView@@UAEXPAVCView@@JPAVCObject@@@Z
?SetTree@VaxaDBTreeView@@QAEXPAVVaxcRtreeCtrl@@@Z
?OnTreeSelChange@VaxaDBTreeView@@IAEXPAUtagNMHDR@@PAJ@Z
?GetRootNodeLabel@VaxaDBTreeView@@UAE?AVVaxnString@@XZ
?OnInitialUpdate@VaxaDBTreeView@@UAEXXZ
??0VaxaDBTreeView@@IAE@XZ
??1VaxaDBTreeView@@UAE@XZ
?OnDraw@VaxAikoView@@MAEXPAVCDC@@@Z
?GetTree@VaxaDBTreeView@@UAEPAVVaxcRtreeCtrl@@XZ
?SetFilter@VaxaDBTreeView@@UAEXXZ
?GetScrollParameters@VaxAikoView@@MAEXAAHAAUtagSIZE@@11@Z
?RefreshTree@VaxaDBTreeView@@UAEXW4VaoType@VaoObject@@@Z
?OnItemInsert@VaxaDBTreeView@@MAEXPAUtagNMHDR@@PAJ@Z
?OnItemDelete@VaxaDBTreeView@@MAEXPAUtagNMHDR@@PAJ@Z
?messageMap@VaxaDBTreeView@@1UAFX_MSGMAP@@B
?classVaxaDBTreeView@VaxaDBTreeView@@2UCRuntimeClass@@B
?NumMCWSelected@VaxaDBDoc@@QBEIXZ
?NumSelected@VaxaDBDoc@@QBEIXZ
?IsContainerFocused@VaxaDBDoc@@QBEHXZ
?GetFocusedObj@VaxaDBDoc@@QAEPAVVaoObject@@XZ
?GetDetailView@VaxaDBDoc@@QBEPAVVaxaDBDetailView@@XZ
?OnObjectCreate@VaxaDBFrame@@QAEXW4VaoType@VaoObject@@KVVaxnString@@@Z
?GetTreeView@VaxaDBDoc@@QBEPAVVaxaDBTreeView@@XZ
?DismissAllDialogs@VaxaMainframe@@UAEHXZ
?OnCommand@VaxaDBFrame@@UAEHIJ@Z
?OnObjectCreatelike@VaxaDBFrame@@QAEXXZ
?OnObjectDrop@VaxaDBFrame@@QAEXXZ
?OnMCWObjectAlter@VaxaDBFrame@@QAEXXZ
?GetFocusedObjType@VaxaDoc@@QAE?AW4VaoType@VaoObject@@XZ
?SetAppToolbarItems@VaxaDBFrame@@QAEXIPAII@Z
?OnAddCommonMenus@VaxaDBFrame@@QAEXIH@Z
?OnAddCommonToolbarItems@VaxaDBFrame@@QAEXI@Z
?UpdateMenus@VaxaDBFrame@@UAEXXZ
??0VaxaDBFrame@@IAE@XZ
??1VaxaDBFrame@@UAE@XZ
?PreCreateWindow@VaxaDBFrame@@UAEHAAUtagCREATESTRUCTA@@@Z
?OnCreateClient@VaxaDBFrame@@UAEHPAUtagCREATESTRUCTA@@PAUCCreateContext@@@Z
?LaunchObjectDialog@VaxaMainframe@@UAEHPAVVaoObject@@PAVVaoPropertySheet@@@Z
?LaunchSessDialog@VaxaMainframe@@UAEHPAVVaoSessObject@@PAVVaoPropertySheet@@@Z
?DismissObjectDialog@VaxaMainframe@@UAEHPAVVaoObject@@@Z
?DismissSessDialog@VaxaMainframe@@UAEHPAVVaoSessObject@@@Z
?OnHelpContents@VaxaMainframe@@UAEXXZ
?TreeIsVisible@VaxaMainframe@@MAEHXZ
?GetTreeViewClass@VaxaDBFrame@@UBEPAUCRuntimeClass@@XZ
?OnChangeDatabase@VaxaDBFrame@@UAEHXZ
?OnChangeDatabaseReConnect@VaxaDBFrame@@UAEHXZ
?GetHeightInfo@VaxaDBFrame@@UAEXAAH0@Z
?GetLoggingMenuPosFromRight@VaxaDBFrame@@UAEIXZ
?QueryEndApp@VaxaDBFrame@@UAEHXZ
?LaunchCreateDialog@VaxaDBFrame@@MAEHPAVVaoSessObject@@@Z
?messageMap@VaxaDBFrame@@1UAFX_MSGMAP@@B
?classVaxaDBFrame@VaxaDBFrame@@2UCRuntimeClass@@B
?GetMCW@VaxaDBDetailView@@QAEPAVVaxcListWidget@@XZ
?ContainerSelected@VaxaDBDetailView@@UAEXPAVVaxcRtreeCtrlNode@@@Z
?DisplayDBBanner@VaxaDBDetailView@@QAEXXZ
?SetBitmap@VaxaDBDetailView@@QAEHVVaxnString@@@Z
?VaoObjectSelected@VaxaDBDetailView@@UAEXPAVVaoSessObject@@@Z
?CleanUp@VaxaDBDetailView@@QAEHXZ
?OnStop@VaxaDBDoc@@UAEXXZ
?messageMap@VaxaDBDetailView@@1UAFX_MSGMAP@@B
?GetRowObjectType@VaxaDBDetailView@@UAE?AW4VaoType@VaoObject@@PAVVaxcRowItemBase@@@Z
?GetFirstSelectionPos@VaxaDBDoc@@QBEPAU__POSITION@@XZ
?GetNextSelection@VaxaDBDoc@@QBEPAVVaxcRtreeCtrlNode@@AAPAU__POSITION@@@Z
?CreatePropertySheet@VaxaDBDetailView@@UAEPAVVaoSessPropertySheet@@W4VaoType@VaoObject@@PBDPAVCWnd@@@Z
?OnSize@VaxaDBDetailView@@QAEXIHH@Z
?OnInitialUpdate@VaxaDBDetailView@@UAEXXZ
??0VaxaDBDetailView@@IAE@XZ
??1VaxaDBDetailView@@UAE@XZ
?OnUpdate@VaxaDBDetailView@@UAEXPAVCView@@JPAVCObject@@@Z
?OnDraw@VaxaDBDetailView@@UAEXPAVCDC@@@Z
?GetTree@VaxAikoView@@UAEPAVVaxcRtreeCtrl@@XZ
?SetFilter@VaxAikoView@@UAEXXZ
?NavDrop@VaxAikoView@@UAEXXZ
?NavAlter@VaxAikoView@@UAEXXZ
?CreateLikeObject@VaxAikoView@@UAEXXZ
?VaxaCreateObject@VaxAikoView@@UAEXXZ
?NavQuickEdit@VaxAikoView@@UAEXXZ
?DisplaySplitView@VaxAikoView@@UAEXPAV1@@Z
?CreateFloatingView@VaxAikoView@@UAEPAV1@PAUCRuntimeClass@@PAVVaxaMainframe@@@Z
?GetScrollParameters@VaxaDBDetailView@@UAEXAAHAAUtagSIZE@@11@Z
?PreProcessData@VaxaDBDetailView@@UAEXPAVVaeDataSet@@@Z
?SetMCWImages@VaxaDBDetailView@@UAEXPAVVaxcListWidget@@@Z
?SetRowImage@VaxaDBDetailView@@UAEXPAVVaxcRowItemBase@@@Z
?MixedTypesSelected@VaxaDBDetailView@@UAEXXZ
?MultipleSelected@VaxaDBDetailView@@UAEXXZ
?OnRowDblClick@VaxaDBDetailView@@UAEXPAVVaxcRowItemBase@@@Z
?RefreshMCW@VaxaDBDetailView@@UAEXXZ
?RefreshMCWFromRepository@VaxaDBDetailView@@UAEXXZ
?OnDatabaseDown@VaxaDBDetailView@@UAEHXZ
?GetRepositorySession@VaxaDoc@@UAEPAVCoMazSes@@XZ
?classVaxaDBDetailView@VaxaDBDetailView@@2UCRuntimeClass@@B
?GetSession@VaxaDoc@@UAEPAVCoMazSes@@XZ
?GetSession@VaxaDoc@@UAEPAVCoMazSes@@ABVVaxnString@@00HHHW4VaxaCredentialRole@VaxaCredential@@@Z
?OnUpdateVmdbStop@VaxaDBDoc@@UAEXPAVCCmdUI@@@Z
?IsRHSFocused@VaxaDBDoc@@QBEHXZ
?GetFocusedObjName@VaxaDoc@@QAE?AVVaxnString@@XZ
?GetSelectedName@VaxaDBDoc@@QBEABVVaxnString@@XZ
?Serialize@VaxaDBDoc@@UAEXAAVCArchive@@@Z
?OnNewDocument@VaxaDBDoc@@UAEHXZ
??0VaxaDBDoc@@IAE@XZ
??1VaxaDBDoc@@UAE@XZ
?OnCloseDocument@VaxaDBDoc@@UAEXXZ
?GetEnableRoleSession@VaxaDoc@@UAEPAVCoMazSes@@XZ
?GetBaseSession@VaxaDoc@@UAEPAVCoMazSes@@ABVVaxnString@@00HHHW4VaxaCredentialRole@VaxaCredential@@@Z
?SetFocusedObj@VaxaDoc@@UAEHW4VaoType@VaoObject@@ABVVaxnString@@1PAVCWnd@@PAVCoMazSes@@@Z
?LaunchLoginDialog@VaxaDoc@@UAEHPAVVaxnString@@00PAW4VaxaCredentialRole@VaxaCredential@@PAPAVCoMazSes@@PAPAV4@HHH@Z
?ReleaseSession@VaxaDoc@@UAEXAAPAVCoMazSes@@@Z
?RunConnectDialog@VaxaDoc@@UAEHXZ
?RunChangeConnectDialog@VaxaDoc@@UAEHXZ
?RunChangeReConnectDialog@VaxaDoc@@UAEHXZ
?OnFinishEmbeddedLaunch@VaxaDBDoc@@UAEXXZ
?GetSessObject@VaxaDoc@@UAEPAVVaoSessObject@@W4VaoType@VaoObject@@ABVVaxnString@@PAVCoMazSes@@W4ObjectRole@1@I@Z
?OnNewSession@VaxaDoc@@MAEXABVVaxaCredential@@@Z
?OnSerializeSession@VaxaDoc@@MAEXABVVaxaCredential@@@Z
?TranslateServiceName@VaxaDoc@@MAE?AVVaxnString@@ABV2@@Z
?CanHandleObjectType@VaxaDoc@@MBEHW4VaoType@VaoObject@@@Z
?Refresh@VaxaDBDoc@@UAEXXZ
?OnRecording@VaxaDBDoc@@UAEXXZ
?OnPauseResume@VaxaDBDoc@@UAEXXZ
vaxc
?AppendMenuItem@VaxcRightMenu@@QAEXIVVaxnString@@I@Z
?AppendMenuA@VaxcRightMenu@@QAEXABVCMenu@@@Z
?AppendSeparator@VaxcRightMenu@@QAEXXZ
vaxct
?GetFirstAncestorInstToken@VaxctStr@@QAEPAVVaxctTok@@W4VaoType@VaoObject@@PAV2@@Z
?GetVisibleParentNode@VaxcRtreeCtrlNode@@QAEPAV1@XZ
?GetListId@VaxcRtreeCtrlNode@@QBEABVVaxnString@@XZ
?GetText@VaxcRowItemBase@@QBE?AVVaxnString@@H@Z
?GetVaoType@VaxcRtreeCtrlNode@@QAE?AW4VaoType@VaoObject@@XZ
??1VaxctStr@@UAE@XZ
?GetValue@VaxctTok@@QAE?AVVaxnString@@XZ
?ParseContextStr@VaxctStr@@QAEXVVaxnString@@@Z
?SetRootNodeName@VaxcRtreeCtrl@@QAEXABVVaxnString@@@Z
?GetContext@VaxcRtreeCtrlNode@@QBEABVVaxnString@@XZ
??0VaxctStr@@QAE@XZ
?GetLabel@VaxcRtreeCtrlNode@@QBE?AVCString@@XZ
?DeleteColumn@VaxcListWidget@@QAEHH@Z
?GetFirstInstToken@VaxctStr@@QAEPAVVaxctTok@@W4VaoType@VaoObject@@PAV2@@Z
?GetName@VaxcRtreeCtrlNode@@QBEABVVaxnString@@XZ
?BuildRightMenu@VaxcRtreeProxy@@UAEHPAVVaxcRtreeCtrlNode@@IJI@Z
?BuildMenuArraysForRelTools@VaxcRtreeProxy@@UAEHPAVVaxcRtreeCtrlNode@@PAVCStringArray@@PAVCUIntArray@@@Z
?OnDrop@VaxcRtreeProxyCont@@UAEHPAVCOleDataObject@@KPAVVaxcRtreeCtrlNode@@@Z
?DragOver@VaxcRtreeProxyCont@@UAEKPAVVaxcRtreeCtrlNode@@PAVCWnd@@PAVCOleDataObject@@KVCPoint@@@Z
?CreateSession@VaxcRtreeProxyCont@@UAEPAVCoMazSes@@PAVVaxcRtreeCtrlNode@@@Z
?GetSession@VaxcRtreeCtrlNode@@QAEPAVCoMazSes@@XZ
?HasFilterEnabled@VaxcRtreeCtrlNode@@QAEHXZ
?GetNameFilter@VaxcRtreeCtrlNode@@QBEABVVaxnString@@XZ
??1VaxcRtreeProxyCont@@UAE@XZ
??0VaxcRtreeProxyCont@@IAE@XZ
?OnItemExpanding@VaxcRtreeCtrl@@MAEXPAUtagNMHDR@@PAJ@Z
?ProcessFetchError@VaxcRtreeCtrl@@MAEHPAVVaxcRtreeCtrlNode@@@Z
?CreateImageList@VaxcRtreeCtrl@@MAEHI@Z
?GetCustomGroupList@VaxcRtreeCtrl@@MAEHABVVaxnString@@AAPAVVaeDataSet@@@Z
?SetNodeVtp@VaxcRtreeCtrl@@MAEXPAVVaxcRtreeCtrlNode@@0@Z
?NodeStateCheck@VaxcRtreeCtrl@@MAEXW4VaoType@VaoObject@@PAVVaxcRtreeCtrlNode@@@Z
?PropogateSessions@VaxcRtreeCtrl@@UAEXPAVVaxcRtreeCtrlNode@@@Z
?GetMessageMap@VaxcRtreeCtrl@@MBEPBUAFX_MSGMAP@@XZ
??1VaxcRtreeCtrl@@UAE@XZ
??0VaxcRtreeCtrl@@QAE@XZ
?AddChild@VaxcRtreeCtrlNode@@QAEXPAV1@@Z
?InitializeNodelist@VaxcRtreeCtrl@@QAEXPAVCPtrList@@@Z
?Initialize@VaxcRtreeCtrlNode@@QAEXXZ
??0VaxcRtreeCtrlNode@@QAE@VVaxnString@@0HHHW4NodeType@0@W4VaoType@VaoObject@@HPAVVaxcRtreeProxy@@PAVVaxcRtreeCtrl@@@Z
?GetSession@VaxcRtreeCtrl@@QAEPAVCoMazSes@@XZ
??0VaxcRtreeProxyGroup@@QAE@XZ
?SetHideDuringAutoExpand@VaxcRtreeCtrlNode@@QAEXH@Z
?Create@VaxcRtreeCtrl@@QAEHKABUtagRECT@@IPAVCWnd@@IPAUCCreateContext@@@Z
?SetSession@VaxcRtreeCtrl@@QAEXPAVCoMazSes@@@Z
vaxn
??9@YAHABVVaxnString@@PBD@Z
??1VaxnString@@UAE@XZ
??BVaxnString@@QBEPBDXZ
??4VaxnString@@QAEABV0@ABV0@@Z
??H@YA?AVVaxnString@@ABV0@0@Z
??H@YA?AVVaxnString@@ABV0@PBD@Z
??BVaxnString@@QAEAAVCString@@XZ
??0VaxnString@@QAE@XZ
??8@YAHABVVaxnString@@PBD@Z
??0VaxnString@@QAE@PBD@Z
?DoModal@VaxnMsgDlg@@QAEII@Z
??0VaxnMsgDlg@@QAA@VVaxnString@@ZZ
??0VaxnString@@QAE@ABV0@@Z
??0VaxnMsgDlg@@QAA@KPADHZZ
?MakeUpper@VaxnString@@QAEXXZ
??8@YAHABVVaxnString@@0@Z
?LoadMessage@VaxnString@@QAEHIPBDH@Z
?Left@VaxnString@@QBE?AV1@H@Z
?Find@VaxnString@@QBEHPBD@Z
?GetDateFormatA@VaxnDate@@SAXAAVVaxnString@@@Z
??0VaxnString@@QAE@ABVCString@@@Z
?Mid@VaxnString@@QBEXHAAV1@@Z
?Left@VaxnString@@QBEXHAAV1@@Z
vaxs
?GetActivePane@VaxsPanedWnd@@UAEPAVVaxsPane@@XZ
vaxx
?OraAssertFailedLine@@YAHPBDH@Z
?OraTrace@@YAXPBDZZ
vap
??0VapPropertySheet@@QAE@PAVCoMazSes@@W4VaoType@VaoObject@@ABVVaxnString@@PBDPAVCWnd@@I@Z
?Dismiss@VapPropertySheet@@QAEXXZ
mfc42
ord2621
ord537
ord5265
ord4387
ord2402
ord4338
ord4345
ord4490
ord1168
ord1576
ord4860
ord4623
ord5003
ord4921
ord5106
ord5019
ord5652
ord2858
ord2955
ord2793
ord1781
ord4483
ord3298
ord5455
ord6395
ord4730
ord4669
ord3097
ord5953
ord4710
ord641
ord3597
ord324
ord4627
ord5277
ord4425
ord2446
ord5261
ord2124
ord5065
ord3749
ord1727
ord2055
ord2648
ord6215
ord4299
ord3742
ord6194
ord3442
ord2563
ord4653
ord457
ord749
ord4626
ord3281
ord4038
ord5075
ord4537
ord4993
ord4522
ord4980
ord4646
ord4912
ord5108
ord5018
ord4857
ord4688
ord4717
ord4937
ord4932
ord4927
ord4990
ord3407
ord4958
ord1895
ord5607
ord1083
ord2109
ord4457
ord2863
ord5642
ord501
ord773
ord5282
ord4151
ord5472
ord3702
ord2120
ord4147
ord5883
ord6064
ord2626
ord2627
ord2494
ord5871
ord4460
ord2104
ord5495
ord442
ord554
ord450
ord439
ord736
ord747
ord807
ord739
ord4427
ord5252
ord4436
ord1665
ord2649
ord5285
ord5237
ord4077
ord4154
ord2878
ord2879
ord3403
ord5476
ord975
ord5012
ord3350
ord4303
ord4467
ord5103
ord5100
ord3059
ord2390
ord2723
ord4470
ord5656
ord5006
ord1695
ord2441
ord3254
ord4946
ord4251
ord1886
ord4681
ord4685
ord4671
ord4450
ord2438
ord1644
ord3654
ord2584
ord4220
ord6009
ord3256
ord5981
ord2379
ord441
ord2521
ord1669
ord2175
ord1265
ord3769
ord2652
ord1832
ord2394
ord738
ord4432
ord5260
ord1725
ord3748
ord5290
ord5240
ord1776
ord6055
ord4960
ord4963
ord4524
ord4529
ord4526
ord4543
ord4545
ord4531
ord4889
ord4349
ord4341
ord4892
ord4370
ord4899
ord4588
ord4589
ord3663
ord1567
ord268
ord1881
ord1223
ord2623
ord1206
ord4430
ord4234
ord3280
ord3261
ord6175
ord6081
ord3198
ord3454
ord4512
ord6376
ord2014
ord4956
ord5654
ord3172
ord5577
ord1747
ord5742
ord5244
ord2542
ord2510
ord6336
ord3066
ord3060
ord4697
ord3250
ord3787
ord3449
ord1003
ord5627
ord6344
ord3514
ord5025
ord3417
ord2991
ord4155
ord5752
ord4657
ord4628
ord5501
ord5090
ord4416
ord5000
ord4605
ord3106
ord5021
ord4491
ord4494
ord5002
ord4916
ord4640
ord4517
ord5020
ord2171
ord2437
ord4950
ord3187
ord4826
ord4861
ord4957
ord5128
ord5127
ord5092
ord4563
ord5122
ord4554
ord3803
ord3092
ord1894
ord4083
ord1729
ord5824
ord4493
ord2371
ord4388
ord4382
ord6329
ord420
ord720
ord3353
ord3268
ord4037
ord5956
ord5508
ord2548
ord4645
ord2058
ord971
ord4962
ord4424
ord4492
ord5022
ord4647
ord4673
ord4612
ord4610
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord1205
ord3738
ord459
ord825
ord743
ord800
ord5500
ord6354
ord6352
ord5716
ord5717
ord2036
ord986
ord6137
ord5914
ord520
ord823
ord4159
ord1199
ord4407
ord266
ord1876
ord4376
ord4853
ord4998
ord2514
ord6052
ord4078
ord1775
ord4353
ord5241
ord2385
ord5163
ord6374
ord5280
ord3798
ord4837
ord4441
msvcrt
__CxxFrameHandler
_onexit
_purecall
__dllonexit
_XcptFilter
??1type_info@@UAE@XZ
_exit
_initterm
exit
__p__acmdln
_adjust_fdiv
__getmainargs
__setusermatherr
__set_app_type
__p__commode
__p__fmode
_controlfp
_except_handler3
_setmbcp
kernel32
GetStartupInfoA
GetModuleHandleA
GetVersion
Sleep
user32
AppendMenuA
InsertMenuA
GetClientRect
EnableWindow
SetRect
SendMessageA
CreateMenu
DeleteMenu
GetWindowRect
GetSubMenu
GetMenu
IsWindow
EnableMenuItem
Sections
.text Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 387KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE