d:\cm\build\public\cool_win32_x86_4_6_8j\cool\dist\Win32\release\coolcore46.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
06981a69d4e31c5d15f23e13050cd9f8_JaffaCakes118.dll
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
06981a69d4e31c5d15f23e13050cd9f8_JaffaCakes118.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
06981a69d4e31c5d15f23e13050cd9f8_JaffaCakes118
-
Size
828KB
-
MD5
06981a69d4e31c5d15f23e13050cd9f8
-
SHA1
7183e16a43bd362c9fc49de278d150f1e0eb9e4b
-
SHA256
e2184bd38791b744a18e0a74baa1d8723085eca9b7d9364ee44a048f542754eb
-
SHA512
8c49167f85b27a853c43c82db7f2300ba767af9dc977de7ff706720abfcf5888e1083d9eddcc31bc90f31f6c5d2be1e6b7674ebe5b19553ba74aeb381882bea3
-
SSDEEP
24576:FvnImr1gCVYxHnt0NvMveLYHgKn4J9VZrvsyNWAHeKlUUMn3Jm:dnImr17YxHnt0NvMveL869VZr1NWAKm
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06981a69d4e31c5d15f23e13050cd9f8_JaffaCakes118
Files
-
06981a69d4e31c5d15f23e13050cd9f8_JaffaCakes118.dll windows:4 windows x86 arch:x86
82baa3865ab60b4328f11ed6ac50bc5f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
xprt5
?RemoveAt@TPtrArray@XPRT@@QAEXHH@Z
?Append@TPtrArray@XPRT@@QAEHABV12@@Z
??1TPtrList@XPRT@@QAE@XZ
??0TPtrList@XPRT@@QAE@H@Z
?RemoveHead@TPtrList@XPRT@@QAEPAXXZ
xprt_uintlen
xprt_intlen
_XprtStringLen@4
_XprtStringUtf8ByteLen@8
kUnicodeEncoding
kUtf8Encoding
kLatin1Encoding
kAsciiEncoding
?IsEmpty@TBstr@XPRT@@QBE_NXZ
_XprtFlipMem@8
kEnglishLanguage
?GetBestEncoding@TBstr@XPRT@@QBE?AV12@XZ
_XprtBinToBase64@16
??0TBstr@XPRT@@QAE@PBGH@Z
_XprtUtf8ToString@16
_XprtBase64ToBin@12
xprt_iswdigit
?GetAt@TBstr@XPRT@@QBEGH@Z
?Format@TBstr@XPRT@@QAAXPBGZZ
_XprtGetMilliseconds@0
??0TShaDigest@XPRT@@QAE@XZ
??0TMd4Digest@XPRT@@QAE@H@Z
?Set@TTime@XPRT@@QAEXPBG@Z
?GetTime64@TTime@XPRT@@QBE_JXZ
?Finish@TShaDigest@XPRT@@UAEHPAEH@Z
?SetIv@TBlockCipher@XPRT@@QAEXPBE@Z
?SetOp@TCipher@XPRT@@QAEXW4ECipherOp@12@@Z
_XprtGenerateRandom@8
xprt_time
?SetMode@TBlockCipher@XPRT@@QAEXW4ECipherMode@12@@Z
??1TCipher@XPRT@@UAE@XZ
?ProcessData@TBlockCipher@XPRT@@UAEHPAEH_N@Z
?GetType@TBlockCipher@XPRT@@UAE?AW4ECipherType@TCipher@2@XZ
??0TBlockCipher@XPRT@@QAE@W4ECipherOp@TCipher@1@@Z
??0TCipher@XPRT@@QAE@W4ECipherOp@01@@Z
?TrimRight@TBstr@XPRT@@QAEAAV12@G@Z
?SetAt@TBstr@XPRT@@QAEXHG@Z
_XprtCompareVersionsA@8
?AppendFileNameToSpec@TFile@XPRT@@SA?AVTBstr@2@PBG0@Z
_XprtGetDelayLoadRoot@0
?MakeBigEndian@TBstr@XPRT@@QAEAAV12@XZ
?kDirectorySeparator@TFile@XPRT@@2GB
??1TConvertFromUcs2@XPRT@@QAE@XZ
??0TConvertFromUcs2@XPRT@@QAE@PBG0@Z
?Append@TBstr@XPRT@@QAEAAV12@ABV12@@Z
?Append@TBstr@XPRT@@QAEAAV12@PBG@Z
_XprtUrlEncode@8
_XprtUrlDecode@8
?Mid@TBstr@XPRT@@QBE?AV12@HH@Z
?Find@TBstr@XPRT@@QBEHGH@Z
?Find@TBstr@XPRT@@QBEHPBGH@Z
?ToInt@TBstr@XPRT@@QBEHH@Z
?Insert@TBstr@XPRT@@QAEHHPBG@Z
xprt_strtol
xprt_strncmp
xprt_strstr
?Mid@TBstr@XPRT@@QBE?AV12@H@Z
?Left@TBstr@XPRT@@QBE?AV12@H@Z
?FindIndex@TPtrList@XPRT@@QBEPAU__POSITION@2@H@Z
xprt_isspace
xprt_strtok
xprt_strchr
xprt_toupper
?TrimLeft@TBstr@XPRT@@QAEAAV12@XZ
xprt_wcstol
?InsertBefore@TPtrList@XPRT@@QAEPAU__POSITION@2@PAU32@PAX@Z
?Tokenize@TBstr@XPRT@@QBE?AV12@PBGAAH@Z
?SetAtGrow@TPtrArray@XPRT@@QAEXHPAX@Z
_XprtHashFile@16
??0TSha256Digest@XPRT@@QAE@XZ
xprt_abs
?AddHead@TPtrList@XPRT@@QAEPAU__POSITION@2@PAX@Z
_XprtInetNtoA@8
_XprtInetParse@16
?Delete@TBstr@XPRT@@QAEHHH@Z
_XprtGetMicroseconds@0
_XprtStringEncodedByteLen@12
kGsmEncoding
_XprtAolToIsoEncoding@8
_XprtIsoToAolEncoding@8
?Lookup@TPtrFromPtrMap@XPRT@@QAEPAVTPair@12@PAX@Z
?Finish@THmac@XPRT@@QAEHPAEH@Z
?Update@THmac@XPRT@@QAEXPBEH@Z
??0THmac@XPRT@@QAE@AAVTMessageDigest@1@PBEH@Z
xprt_wcscmp
?Set@TTime@XPRT@@QAEXN@Z
?Init@TFileInfo@XPRT@@IAEXPBGI_JABVTTime@2@22@Z
?SetLastWriteTime@TFile@XPRT@@SA_NPBGABVTTime@2@@Z
?GetInfo@TFile@XPRT@@SA_NPBGAAVTFileInfo@2@@Z
_XprtComputeChecksum@8
?GetString@TBstr@XPRT@@QBEPBGXZ
_XprtHashNormal@4
?FindValue@TPtrFromPtrMap@XPRT@@QAEPAU__POSITION@2@PAXPAU32@@Z
?Remove@TBstr@XPRT@@QAEHG@Z
kTextMimeType
xprt_wcsnicmp
_XprtAolToIsoLang@8
_XprtIsoToAolLang@8
kTextAolRtfMimeType
?FormatGmt@TTime@XPRT@@QBE?AVTBstr@2@PBG@Z
_XprtCreateThread@8
?DirSpecFromFullSpec@TFile@XPRT@@SA?AVTBstr@2@PBG@Z
?Replace@TBstr@XPRT@@QAEHPBG0@Z
?MakeLower@TBstr@XPRT@@QAEAAV12@XZ
xprt_pow
kTextPlainMimeType
??1TFileFinder@XPRT@@UAE@XZ
?Remove@TFile@XPRT@@SA_NPBG@Z
?FindNext@TFileFinder@XPRT@@QAE_NI@Z
?GetFileSpec@TFileFinder@XPRT@@QBE?AVTBstr@2@XZ
?Find@TFileFinder@XPRT@@QAE_NPBGI@Z
??0TFileFinder@XPRT@@QAE@XZ
?CompareNoCase@TBstr@XPRT@@QBEHPBG@Z
?Replace@TBstr@XPRT@@QAEHGG@Z
?CanonicalizeSpec@TFile@XPRT@@SA?AVTBstr@2@PBG@Z
?ReverseFind@TBstr@XPRT@@QBEHG@Z
_XprtInetIsNonroutable@4
?Right@TBstr@XPRT@@QBE?AV12@H@Z
_XprtInetIsValid@4
?Find@TPtrArray@XPRT@@QBEHPAXH@Z
?RemoveAtPos@TPtrFromPtrMap@XPRT@@QAEXPAU__POSITION@2@@Z
xprt_wcsrchr
?MakeValidSpec@TFile@XPRT@@SA?AVTBstr@2@PBG_N@Z
?GetMonth@TTime@XPRT@@QBEHXZ
?GetDay@TTime@XPRT@@QBEHXZ
?GetYear@TTime@XPRT@@QBEHXZ
?GetHour@TTime@XPRT@@QBEHXZ
?GetMinute@TTime@XPRT@@QBEHXZ
?RemoveTrailingSeparator@TFile@XPRT@@SA?AVTBstr@2@PBG@Z
?FileNameFromFullSpec@TFile@XPRT@@SA?AVTBstr@2@PBG@Z
?AddTrailingSeparator@TFile@XPRT@@SA?AVTBstr@2@PBG@Z
?CreateTempFileSpec@TFile@XPRT@@SA?AVTBstr@2@XZ
?Insert@TBstr@XPRT@@QAEHHG@Z
??1TBufferedFile@XPRT@@UAE@XZ
?TestAccess@TFile@XPRT@@SA_NPBGI@Z
??0TBufferedFile@XPRT@@QAE@H@Z
??0TInetChecksum@XPRT@@QAE@XZ
?Finish@TInetChecksum@XPRT@@QAEGXZ
?SetCurrent@TInetChecksum@XPRT@@QAEXGH@Z
?Update@TInetChecksum@XPRT@@QAEXPBEH@Z
?Finish@TCrc32Digest@XPRT@@QAEIXZ
??0TCrc32Digest@XPRT@@QAE@XZ
_XprtDestroyThread@8
_XprtCompareWildcard@8
xprt_iswalpha
xprt_iswalnum
xprt_wcsncmp
?Assign@TBstr@XPRT@@QAEAAV12@PBGH@Z
_XprtBinToHex@16
??1TMemStream@XPRT@@UAE@XZ
??1TXmlDeserializer@XPRT@@UAE@XZ
?Deserialize@TXmlSerializable@XPRT@@QAE_NAAVTXmlDeserializer@2@@Z
??0TXmlDeserializer@XPRT@@QAE@AAVTStream@1@@Z
??0TMemStream@XPRT@@QAE@PBXH@Z
??1TXmlWriter@XPRT@@UAE@XZ
?GetData@TMemStream@XPRT@@QBEPBXXZ
?GetLength@TMemStream@XPRT@@UBE_JXZ
?WriteEndDocument@TXmlWriter@XPRT@@QAE_NXZ
?Serialize@TXmlSerializable@XPRT@@QBE_NAAVTXmlWriter@2@@Z
?WriteStartDocument@TXmlWriter@XPRT@@QAE_NXZ
??0TXmlWriter@XPRT@@QAE@AAVTStream@1@@Z
??0TMemStream@XPRT@@QAE@XZ
?OnExternalEntityRef@TXmlParser@XPRT@@MAE_NPBD000@Z
?OnDefault@TXmlParser@XPRT@@MAEXPBDH@Z
?OnEndCdataSection@TXmlParser@XPRT@@MAEXXZ
?OnStartCdataSection@TXmlParser@XPRT@@MAEXXZ
?OnComment@TXmlParser@XPRT@@MAEXPBD@Z
?OnCharacterData@TXmlParser@XPRT@@MAEXPBDH@Z
?OnEndElement@TXmlParser@XPRT@@MAEXPBD0@Z
?OnProcessingInstruction@TXmlParser@XPRT@@MAEXPBD0@Z
??0TXmlParser@XPRT@@QAE@AAVTStream@1@@Z
?Go@TXmlParser@XPRT@@QAE_NXZ
?Stop@TXmlParser@XPRT@@QAEXXZ
??1TXmlParser@XPRT@@UAE@XZ
xprt_strcmp
?SetPosition@TMemStream@XPRT@@UAE_N_JH@Z
_XprtGetSystemInfo@0
?Assign@TBstr@XPRT@@QAEAAV12@PBDHPBG@Z
xprt_isdigit
??1TZipArchive@XPRT@@UAE@XZ
?ExtractAt@TZipArchive@XPRT@@UAEPAVTStream@2@PAU__POSITION@2@@Z
?Find@TZipArchive@XPRT@@UAEPAU__POSITION@2@PBG@Z
??0TZipArchive@XPRT@@QAE@AAVTStream@1@@Z
?GetTempDirectory@TFile@XPRT@@SA?AVTBstr@2@XZ
xprt_strlcat
?TrimRight@TBstr@XPRT@@QAEAAV12@XZ
?MakeUpper@TBstr@XPRT@@QAEAAV12@XZ
??0TLibrary@XPRT@@QAE@XZ
?Load@TLibrary@XPRT@@QAE_NPBG@Z
?GetProcAddress@TLibrary@XPRT@@QBEP6GHXZPBD@Z
??1TLibrary@XPRT@@UAE@XZ
??0TBstr@XPRT@@QAE@PBG@Z
??1TBstr@XPRT@@QAE@XZ
_XprtPostMessage@16
xprt_ucslcpy
xprt_wcslen
xprt_strlen
_XprtFreeString@4
_XprtAtomicDecrement@4
_XprtAtomicIncrement@4
_XprtUnicodeToMultibyte@16
_XprtMultibyteToUnicode@16
?Term@TCritSec@XPRT@@QAEXXZ
?GetNextValue@TPtrFromPtrMap@XPRT@@QAEAAPAXAAPAU__POSITION@2@@Z
_XprtInetAtoN@12
?Assign@TBstr@XPRT@@QAEAAV12@PBG@Z
?Read@TFile@XPRT@@UAEHPAXH@Z
?CompareNormal@TBstr@XPRT@@QBEHPBG@Z
?RemoveAll@TPtrList@XPRT@@QAEXXZ
?GetBstrPtr@TBstr@XPRT@@QAEPAPAGXZ
?Normalize@TBstr@XPRT@@QAEAAV12@XZ
?RemoveAt@TPtrList@XPRT@@QAEXPAU__POSITION@2@@Z
?Find@TPtrList@XPRT@@QBEPAU__POSITION@2@PAXPAU32@@Z
?AddTail@TPtrList@XPRT@@QAEPAU__POSITION@2@PAX@Z
?GetLength@TBstr@XPRT@@QBEHXZ
_XprtStringToUtf8@16
xprt_isalnum
xprt_tolower
xprt_strlcpy
?Write@TFile@XPRT@@UAEHPBXH@Z
??0TMd5Digest@XPRT@@QAE@H@Z
?Update@TMessageDigest@XPRT@@QAEXPBEH@Z
?Finish@TMdXDigest@XPRT@@UAEHPAEH@Z
xprt_snprintf
?kLibraryExtension@TLibrary@XPRT@@2QBGB
?AppendFormat@TBstr@XPRT@@QAAXPBGZZ
xprt_wcsicmp
?Lock@TCritSec@XPRT@@QAEXXZ
?Unlock@TCritSec@XPRT@@QAEXXZ
_XprtMemFree@4
_XprtMemAlloc@4
?InsertAt@TPtrArray@XPRT@@QAEXHPAXH@Z
?Copy@TPtrArray@XPRT@@QAEXABV12@@Z
??0TTimer@XPRT@@QAE@XZ
?SetCallback@TTimer@XPRT@@QAEXPAVTTimerCallback@2@@Z
?Stop@TTimer@XPRT@@QAEXXZ
?IsRunning@TTimer@XPRT@@QBE_NXZ
?Start@TTimer@XPRT@@QAE_NH_N@Z
??1TTimer@XPRT@@UAE@XZ
xprt_rand
?Append@TBstr@XPRT@@QAEAAV12@PBDPBG@Z
?Append@TBstr@XPRT@@QAEAAV12@G@Z
?TrimLeft@TBstr@XPRT@@QAEAAV12@G@Z
?Empty@TBstr@XPRT@@QAEXXZ
??0TFile@XPRT@@QAE@XZ
?Open@TFile@XPRT@@QAE_NPBGI_N@Z
?GetLength@TFile@XPRT@@UBE_JXZ
??1TFile@XPRT@@UAE@XZ
?Create@SPlex@XPRT@@SGPAU12@AAPAU12@II@Z
?Detach@TBstr@XPRT@@QAEPAGXZ
??0TBstr@XPRT@@QAE@PBDHPBG@Z
xprt_memcpy
??0TBstr@XPRT@@QAE@ABV01@@Z
?Assign@TBstr@XPRT@@QAEAAV12@PBDPBG@Z
?Assign@TBstr@XPRT@@QAEAAV12@ABV12@@Z
?GetEncodedString@TBstr@XPRT@@QBEPBDPBG@Z
?SetCount@TPtrArray@XPRT@@QAE_NHH@Z
xprt_memmove
?Add@TPtrArray@XPRT@@QAEHPAX@Z
??0TPtrArray@XPRT@@QAE@XZ
xprt_memset
?Copy@TBstr@XPRT@@QBEPAGXZ
?FreeDataChain@SPlex@XPRT@@QAEXXZ
??1TPtrArray@XPRT@@QAE@XZ
?GetTickCount@TTime@XPRT@@SA?AV12@XZ
?GetTimeZoneOffset@TTime@XPRT@@SA?AVTTimeSpan@2@ABV12@@Z
xprt_snwprintf
xprt_wcstoul
_XprtUninitialize@0
_XprtInitialize@8
?Unlock@TSpinLockRE@XPRT@@QAEXXZ
?Lock@TSpinLockRE@XPRT@@QAEXXZ
_XprtMemRealloc@8
?GetNext@TPtrFromPtrMap@XPRT@@QBEPBVTPair@12@AAPAU__POSITION@2@@Z
?Compare@TBstr@XPRT@@QBEHPBG@Z
?GetStartPosition@TPtrFromPtrMap@XPRT@@QBEPAU__POSITION@2@XZ
??0TBstr@XPRT@@QAE@XZ
_XprtUnregisterMessageCallback@4
_XprtReleaseMessageId@4
?GetFileSpec@TLibrary@XPRT@@QBEABVTBstr@2@XZ
??2TXprtAllocated@XPRT@@SAPAXI@Z
_XprtHashString@4
_XprtCompareString@8
??3TXprtAllocated@XPRT@@SAXPAX@Z
_XprtGetMessageQueue@0
_XprtRequestMessageId@0
_XprtRegisterMessageCallback@8
?SetAt@TPtrFromPtrMap@XPRT@@QAEPAU__POSITION@2@PAX0@Z
?VAdoptKey@TPtrFromGuidMap@XPRT@@MBEPAXPAX@Z
?VOrphanKey@TPtrFromGuidMap@XPRT@@MBEXPAX@Z
?VCompareKeys@TPtrFromGuidMap@XPRT@@MBEHPBX0@Z
?VHashKey@TPtrFromGuidMap@XPRT@@MBEIPBX@Z
?GetNextAssoc@TPtrFromPtrMap@XPRT@@QBEXAAPAU__POSITION@2@AAPAX1@Z
?Attach@TBstr@XPRT@@QAEXPAG@Z
?RemoveKey@TPtrFromPtrMap@XPRT@@QAE_NPAX@Z
??ATPtrFromPtrMap@XPRT@@QAEAAPAXPAX@Z
?Lookup@TPtrFromPtrMap@XPRT@@QBE_NPAXAAPAX@Z
??0TPtrFromPtrMap@XPRT@@QAE@H@Z
_XprtAllocString@4
?RemoveAll@TPtrFromPtrMap@XPRT@@QAEXXZ
??1TPtrFromPtrMap@XPRT@@QAE@XZ
?CreatePath@TFile@XPRT@@SA_NPBG@Z
?Free@TLibrary@XPRT@@QAE_NXZ
?Init@TCritSec@XPRT@@QAEXXZ
kSystemEncoding
??0TBstr@XPRT@@QAE@PBDPBG@Z
_XprtCompareNormal@8
xprt_memcmp
kernel32
LocalAlloc
InterlockedExchange
RaiseException
GetModuleHandleA
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcatA
lstrcpyA
DisableThreadLibraryCalls
WaitForSingleObject
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
ExitProcess
GetLastError
user32
DispatchMessageA
SetParent
FindWindowExA
LoadStringA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ole32
CoCreateInstance
CoUninitialize
CoDisconnectObject
ProgIDFromCLSID
CoTaskMemFree
CoRegisterClassObject
CoRevokeClassObject
CoUnmarshalInterface
CreateStreamOnHGlobal
CoMarshalInterface
CoReleaseMarshalData
CoInitialize
oleaut32
SafeArrayGetUBound
SafeArrayCreate
SafeArrayDestroy
SafeArrayCopy
SafeArrayRedim
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayLock
SafeArrayUnlock
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetElement
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElemsize
VariantInit
VariantClear
VariantCopy
VariantChangeType
LoadRegTypeLi
LoadTypeLibEx
SysStringLen
SetErrorInfo
SysAllocString
LoadTypeLi
RegisterTypeLi
GetErrorInfo
CreateErrorInfo
wsock32
htonl
WSAGetLastError
send
connect
htons
sendto
socket
bind
setsockopt
inet_ntoa
WSACleanup
ntohs
inet_addr
getsockname
getpeername
recvfrom
WSAAsyncSelect
WSAStartup
recv
closesocket
listen
accept
gethostbyname
gethostname
WSAAsyncGetHostByName
WSACancelAsyncRequest
iphlpapi
GetIpAddrTable
NotifyAddrChange
Exports
Exports
_XpcsCLSIDFromString@8
_XpcsCreateErrorInfo@4
_XpcsCreateInstance@20
_XpcsCreateSimpleInstance@12
_XpcsEnumRegistrations@8
_XpcsFreeUnusedLibraries@0
_XpcsGetClassObject@20
_XpcsGetErrorInfo@4
_XpcsGetSimpleClassFactory@8
_XpcsInitialize@4
_XpcsInitializeEx@12
_XpcsLoadTypeLib@8
_XpcsPostMessage2@8
_XpcsPostMessage@4
_XpcsRegisterClass@8
_XpcsRegisterClassObject@8
_XpcsRegisterServer@4
_XpcsSafeArrayAccessData@8
_XpcsSafeArrayCopy@8
_XpcsSafeArrayCreate@12
_XpcsSafeArrayDestroy@4
_XpcsSafeArrayGetDim@4
_XpcsSafeArrayGetElement@12
_XpcsSafeArrayGetElemsize@4
_XpcsSafeArrayGetIID@8
_XpcsSafeArrayGetLBound@12
_XpcsSafeArrayGetUBound@12
_XpcsSafeArrayGetVartype@8
_XpcsSafeArrayLock@4
_XpcsSafeArrayPtrOfIndex@12
_XpcsSafeArrayPutElement@12
_XpcsSafeArrayRedim@8
_XpcsSafeArraySetIID@8
_XpcsSafeArrayUnaccessData@4
_XpcsSafeArrayUnlock@4
_XpcsSetErrorInfo@4
_XpcsStringFromCLSID@8
_XpcsStringFromGUID2@12
_XpcsStringFromIID@8
_XpcsTaskMemAlloc@4
_XpcsTaskMemFree@4
_XpcsTaskMemRealloc@8
_XpcsUninitialize@0
_XpcsUnixTimeToVarTime@8
_XpcsUnregisterClass@4
_XpcsUnregisterClassObject@4
_XpcsUnregisterServer@4
_XpcsVarChangeType@12
_XpcsVarClear@4
_XpcsVarCopy@8
_XpcsVarInit@4
_XpcsVarTimeToUnixTime@12
_XptlAdvise@16
_XptlComPtrAssign@8
_XptlComQIPtrAssign@12
_XptlFreeMarshalStream@4
_XptlGetVersion@4
_XptlInternalQueryInterface@16
_XptlMarshalPtrInProc@12
_XptlModuleAddTermFunc@12
_XptlModuleGetClassObject@16
_XptlModuleInit@12
_XptlModuleLoadTypeLib@16
_XptlModuleRegisterClassObjects@12
_XptlModuleRegisterServer@12
_XptlModuleRegisterTypeLib@8
_XptlModuleRevokeClassObjects@4
_XptlModuleTerm@4
_XptlModuleUnRegisterTypeLib@8
_XptlModuleUnregisterServer@8
_XptlModuleUnregisterServerEx@12
_XptlSetErrorInfo@28
_XptlUnadvise@12
_XptlUnmarshalPtr@12
_XptlWaitWithMessageLoop@4
Sections
.text Size: 560KB - Virtual size: 559KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 112KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE