Static task
static1
Behavioral task
behavioral1
Sample
0621d37818c35e2557fdd8a729e50ea662ba518df8ca61a44cc3add5c6deb3cd.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0621d37818c35e2557fdd8a729e50ea662ba518df8ca61a44cc3add5c6deb3cd.exe
Resource
win10v2004-20241007-en
General
-
Target
0621d37818c35e2557fdd8a729e50ea662ba518df8ca61a44cc3add5c6deb3cd.exe
-
Size
228KB
-
MD5
ed60b3913e6694f4a0ed2fe25551bd1f
-
SHA1
18a2ee2fcd433f0fe27e0b6fc13bdfc890fc637b
-
SHA256
0621d37818c35e2557fdd8a729e50ea662ba518df8ca61a44cc3add5c6deb3cd
-
SHA512
2861c7db0fc4c2f7e745c3d957115cc8c0a734088234a7cd217f1a32f3c511a297fcc0cc98dfee3bedaf314077ca61ee7dc7c4c256522eb4b5692dcf50d9c33b
-
SSDEEP
3072:uXBxyWHmRNs2AoYObdeqZ0kLnPgK8+dP9VCgs83:ur/mRm2AoYCLZ02YK8+1b3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0621d37818c35e2557fdd8a729e50ea662ba518df8ca61a44cc3add5c6deb3cd.exe
Files
-
0621d37818c35e2557fdd8a729e50ea662ba518df8ca61a44cc3add5c6deb3cd.exe.exe windows:6 windows x64 arch:x64
928c951361d3a2211d9106bde4a3a971
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
crypt32
CryptUnprotectData
libcrypto-1_1-x64
EVP_CIPHER_CTX_free
EVP_CIPHER_CTX_new
EVP_DecryptUpdate
EVP_DecryptInit_ex
EVP_aes_256_gcm
qt6webenginewidgets
?load@QWebEngineView@@QEAAXAEBVQUrl@@@Z
?setPage@QWebEngineView@@QEAAXPEAVQWebEnginePage@@@Z
??0QWebEngineView@@QEAA@PEAVQWidget@@@Z
??1QWebEngineView@@UEAA@XZ
qt6widgets
?paintEvent@QMenu@@MEAAXPEAVQPaintEvent@@@Z
?hideEvent@QMenu@@MEAAXPEAVQHideEvent@@@Z
?leaveEvent@QMenu@@MEAAXPEAVQEvent@@@Z
?enterEvent@QMenu@@MEAAXPEAVQEnterEvent@@@Z
?wheelEvent@QMenu@@MEAAXPEAVQWheelEvent@@@Z
?mouseMoveEvent@QMenu@@MEAAXPEAVQMouseEvent@@@Z
?mousePressEvent@QMenu@@MEAAXPEAVQMouseEvent@@@Z
?mouseReleaseEvent@QMenu@@MEAAXPEAVQMouseEvent@@@Z
?keyPressEvent@QMenu@@MEAAXPEAVQKeyEvent@@@Z
?changeEvent@QMenu@@MEAAXPEAVQEvent@@@Z
?sizeHint@QMenu@@UEBA?AVQSize@@XZ
?qt_metacall@QMenu@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QMenu@@UEAAPEAXPEBD@Z
?metaObject@QMenu@@UEBAPEBUQMetaObject@@XZ
?inputMethodQuery@QWidget@@UEBA?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?inputMethodEvent@QWidget@@MEAAXPEAVQInputMethodEvent@@@Z
?sharedPainter@QWidget@@MEBAPEAVQPainter@@XZ
?redirected@QWidget@@MEBAPEAVQPaintDevice@@PEAVQPoint@@@Z
?initPainter@QWidget@@MEBAXPEAVQPainter@@@Z
?metric@QWidget@@MEBAHW4PaintDeviceMetric@QPaintDevice@@@Z
?nativeEvent@QWidget@@MEAA_NAEBVQByteArray@@PEAXPEA_J@Z
?showEvent@QWidget@@MEAAXPEAVQShowEvent@@@Z
?dropEvent@QWidget@@MEAAXPEAVQDropEvent@@@Z
?dragLeaveEvent@QWidget@@MEAAXPEAVQDragLeaveEvent@@@Z
?dragMoveEvent@QWidget@@MEAAXPEAVQDragMoveEvent@@@Z
?dragEnterEvent@QWidget@@MEAAXPEAVQDragEnterEvent@@@Z
?tabletEvent@QWidget@@MEAAXPEAVQTabletEvent@@@Z
?actionEvent@QMenu@@MEAAXPEAVQActionEvent@@@Z
?closeEvent@QWidget@@MEAAXPEAVQCloseEvent@@@Z
?resizeEvent@QWidget@@MEAAXPEAVQResizeEvent@@@Z
?moveEvent@QWidget@@MEAAXPEAVQMoveEvent@@@Z
?focusOutEvent@QWidget@@MEAAXPEAVQFocusEvent@@@Z
?focusInEvent@QWidget@@MEAAXPEAVQFocusEvent@@@Z
?keyReleaseEvent@QWidget@@MEAAXPEAVQKeyEvent@@@Z
?mouseDoubleClickEvent@QWidget@@MEAAXPEAVQMouseEvent@@@Z
?paintEngine@QWidget@@UEBAPEAVQPaintEngine@@XZ
?event@QMenu@@MEAA_NPEAVQEvent@@@Z
?hasHeightForWidth@QWidget@@UEBA_NXZ
?heightForWidth@QWidget@@UEBAHH@Z
?minimumSizeHint@QWidget@@UEBA?AVQSize@@XZ
?setVisible@QWidget@@UEAAX_N@Z
?devType@QWidget@@UEBAHXZ
?setVisible@QSystemTrayIcon@@QEAAX_N@Z
?setIcon@QSystemTrayIcon@@QEAAXAEBVQIcon@@@Z
?setContextMenu@QSystemTrayIcon@@QEAAXPEAVQMenu@@@Z
??1QSystemTrayIcon@@UEAA@XZ
??0QSystemTrayIcon@@QEAA@PEAVQObject@@@Z
??1QMenu@@UEAA@XZ
??0QMenu@@QEAA@PEAVQWidget@@@Z
?addAction@QWidget@@QEAAPEAVQAction@@AEBVQString@@@Z
?resize@QWidget@@QEAAXHH@Z
?hide@QWidget@@QEAAXXZ
?show@QWidget@@QEAAXXZ
?exec@QApplication@@SAHXZ
??1QApplication@@UEAA@XZ
??0QApplication@@QEAA@AEAHPEAPEADH@Z
?contextMenuEvent@QWidget@@MEAAXPEAVQContextMenuEvent@@@Z
?focusNextPrevChild@QMenu@@MEAA_N_N@Z
?initStyleOption@QMenu@@MEBAXPEAVQStyleOptionMenuItem@@PEBVQAction@@@Z
?timerEvent@QMenu@@MEAAXPEAVQTimerEvent@@@Z
qt6webenginecore
?qt_metacast@QWebEnginePage@@UEAAPEAXPEBD@Z
?qt_metacall@QWebEnginePage@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?createWindow@QWebEnginePage@@MEAAPEAV1@W4WebWindowType@1@@Z
?acceptNavigationRequest@QWebEnginePage@@MEAA_NAEBVQUrl@@W4NavigationType@1@_N@Z
?javaScriptConsoleMessage@QWebEnginePage@@MEAAXW4JavaScriptConsoleMessageLevel@1@AEBVQString@@H1@Z
?javaScriptPrompt@QWebEnginePage@@MEAA_NAEBVQUrl@@AEBVQString@@1PEAV3@@Z
?javaScriptConfirm@QWebEnginePage@@MEAA_NAEBVQUrl@@AEBVQString@@@Z
?javaScriptAlert@QWebEnginePage@@MEAAXAEBVQUrl@@AEBVQString@@@Z
?chooseFiles@QWebEnginePage@@MEAA?AV?$QList@VQString@@@@W4FileSelectionMode@1@AEBV2@1@Z
?staticMetaObject@QWebEnginePage@@2UQMetaObject@@B
?event@QWebEnginePage@@UEAA_NPEAVQEvent@@@Z
?triggerAction@QWebEnginePage@@UEAAXW4WebAction@1@_N@Z
?featurePermissionRequested@QWebEnginePage@@QEAAXAEBVQUrl@@W4Feature@1@@Z
?setFeaturePermission@QWebEnginePage@@QEAAXAEBVQUrl@@W4Feature@1@W4PermissionPolicy@1@@Z
??1QWebEnginePage@@UEAA@XZ
??0QWebEnginePage@@QEAA@PEAVQObject@@@Z
qt6gui
?triggered@QAction@@QEAAX_N@Z
??1QIcon@@QEAA@XZ
??0QIcon@@QEAA@AEBVQString@@@Z
?setQuitOnLastWindowClosed@QGuiApplication@@SAX_N@Z
?setWindowIcon@QGuiApplication@@SAXAEBVQIcon@@@Z
?staticMetaObject@QAction@@2UQMetaObject@@B
qt6sql
?removeDatabase@QSqlDatabase@@SAXAEBVQString@@@Z
?setDatabaseName@QSqlDatabase@@QEAAXAEBVQString@@@Z
?lastError@QSqlDatabase@@QEBA?AVQSqlError@@XZ
?open@QSqlDatabase@@QEAA_NXZ
??1QSqlDatabase@@QEAA@XZ
?text@QSqlError@@QEBA?AVQString@@XZ
??1QSqlError@@QEAA@XZ
??0QSqlQuery@@QEAA@AEBVQSqlDatabase@@@Z
??1QSqlQuery@@QEAA@XZ
?value@QSqlQuery@@QEBA?AVQVariant@@H@Z
?next@QSqlQuery@@QEAA_NXZ
?exec@QSqlQuery@@QEAA_NXZ
?prepare@QSqlQuery@@QEAA_NAEBVQString@@@Z
?addDatabase@QSqlDatabase@@SA?AV1@AEBVQString@@0@Z
qt6network
?get@QNetworkAccessManager@@QEAAPEAVQNetworkReply@@AEBVQNetworkRequest@@@Z
?localHostName@QHostInfo@@SA?AVQString@@XZ
?setBoundary@QHttpMultiPart@@QEAAXAEBVQByteArray@@@Z
?setContentType@QHttpMultiPart@@QEAAXW4ContentType@1@@Z
?append@QHttpMultiPart@@QEAAXAEBVQHttpPart@@@Z
??1QHttpMultiPart@@UEAA@XZ
??0QHttpMultiPart@@QEAA@W4ContentType@0@PEAVQObject@@@Z
?setBodyDevice@QHttpPart@@QEAAXPEAVQIODevice@@@Z
?post@QNetworkAccessManager@@QEAAPEAVQNetworkReply@@AEBVQNetworkRequest@@PEAVQHttpMultiPart@@@Z
?setHeader@QHttpPart@@QEAAXW4KnownHeaders@QNetworkRequest@@AEBVQVariant@@@Z
??1QHttpPart@@QEAA@XZ
??0QHttpPart@@QEAA@XZ
?setRawHeader@QNetworkRequest@@QEAAXAEBVQByteArray@@0@Z
?setUrl@QNetworkRequest@@QEAAXAEBVQUrl@@@Z
??1QNetworkAccessManager@@UEAA@XZ
??0QNetworkAccessManager@@QEAA@PEAVQObject@@@Z
??1QNetworkRequest@@QEAA@XZ
??0QNetworkRequest@@QEAA@XZ
?error@QNetworkReply@@QEBA?AW4NetworkError@1@XZ
?finished@QNetworkReply@@QEAAXXZ
?metaObject@QHttpMultiPart@@UEBAPEBUQMetaObject@@XZ
?qt_metacast@QHttpMultiPart@@UEAAPEAXPEBD@Z
?qt_metacall@QHttpMultiPart@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?staticMetaObject@QNetworkReply@@2UQMetaObject@@B
?setBody@QHttpPart@@QEAAXAEBVQByteArray@@@Z
qt6core
??6@YA?AVQDebug@@V0@AEBVQUrl@@@Z
??5@YAAEAVQDataStream@@AEAV0@AEAVQUrl@@@Z
??6@YAAEAVQDataStream@@AEAV0@AEBVQUrl@@@Z
??8QUrl@@QEBA_NAEBV0@@Z
??MQUrl@@QEBA_NAEBV0@@Z
??0QUrl@@QEAA@$$QEAV0@@Z
??0QUrl@@QEAA@AEBV0@@Z
??0QUrl@@QEAA@XZ
?qt_metacall@QThread@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QThread@@UEAAPEAXPEBD@Z
?dynamicMetaObject@QObjectData@@QEBAPEAUQMetaObject@@XZ
??0QMetaType@@QEAA@XZ
?activate@QMetaObject@@SAXPEAVQObject@@PEBU1@HPEAPEAX@Z
?staticMetaObject@QThread@@2UQMetaObject@@B
?qResourceFeatureZlib@@YAEXZ
?qUnregisterResourceData@@YA_NHPEBE00@Z
?qRegisterResourceData@@YA_NHPEBE00@Z
?id@QMetaType@@QEBAHH@Z
?registerNormalizedTypedef@QMetaType@@SAXAEBVQByteArray@@V1@@Z
??6QDataStream@@QEAAAEAV0@H@Z
??5QDataStream@@QEAAAEAV0@AEAH@Z
?append@QByteArray@@QEAAAEAV1@PEBD@Z
?reserve@QByteArray@@QEAAX_J@Z
?className@QMetaObject@@QEBAPEBDXZ
?event@QObject@@UEAA_NPEAVQEvent@@@Z
?setPermissions@QFile@@UEAA_NV?$QFlags@W4Permission@QFileDevice@@@@@Z
?permissions@QFile@@UEBA?AV?$QFlags@W4Permission@QFileDevice@@@@XZ
?resize@QFile@@UEAA_N_J@Z
?size@QFile@@UEBA_JXZ
?fileName@QFile@@UEBA?AVQString@@XZ
?qt_metacall@QFile@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QFile@@UEAAPEAXPEBD@Z
?metaObject@QFile@@UEBAPEBUQMetaObject@@XZ
?readLineData@QFileDevice@@MEAA_JPEAD_J@Z
?writeData@QFileDevice@@MEAA_JPEBD_J@Z
?readData@QFileDevice@@MEAA_JPEAD_J@Z
?atEnd@QFileDevice@@UEBA_NXZ
?seek@QFileDevice@@UEAA_N_J@Z
?pos@QFileDevice@@UEBA_JXZ
?isSequential@QFileDevice@@UEBA_NXZ
?skipData@QIODevice@@MEAA_J_J@Z
?readLineData@QIODevice@@MEAA_JPEAD_J@Z
?waitForBytesWritten@QIODevice@@UEAA_NH@Z
?waitForReadyRead@QIODevice@@UEAA_NH@Z
?canReadLine@QIODevice@@UEBA_NXZ
?bytesToWrite@QIODevice@@UEBA_JXZ
?bytesAvailable@QIODevice@@UEBA_JXZ
?reset@QIODevice@@UEAA_NXZ
?atEnd@QIODevice@@UEBA_NXZ
?seek@QIODevice@@UEAA_N_J@Z
?size@QIODevice@@UEBA_JXZ
?pos@QIODevice@@UEBA_JXZ
?setupChildProcess@QProcess@@EEAA?AUUse_setChildProcessModifier_Instead@1@XZ
?writeData@QProcess@@MEAA_JPEBD_J@Z
?readData@QProcess@@MEAA_JPEAD_J@Z
?close@QProcess@@UEAAXXZ
?isSequential@QProcess@@UEBA_NXZ
?bytesToWrite@QProcess@@UEBA_JXZ
?waitForBytesWritten@QProcess@@UEAA_NH@Z
?waitForReadyRead@QProcess@@UEAA_NH@Z
?open@QProcess@@UEAA_NV?$QFlags@W4OpenModeFlag@QIODeviceBase@@@@@Z
?qt_metacall@QProcess@@UEAAHW4Call@QMetaObject@@HPEAPEAX@Z
?qt_metacast@QProcess@@UEAAPEAXPEBD@Z
?metaObject@QProcess@@UEBAPEBUQMetaObject@@XZ
??AQJsonDocument@@QEBA?BVQJsonValue@@AEBVQString@@@Z
?fromJson@QJsonDocument@@SA?AV1@AEBVQByteArray@@PEAUQJsonParseError@@@Z
??4QJsonDocument@@QEAAAEAV0@$$QEAV0@@Z
??1QJsonDocument@@QEAA@XZ
??0QJsonDocument@@QEAA@XZ
??0QJsonParseError@@QEAA@XZ
??AQJsonValue@@QEBA?BV0@AEBVQString@@@Z
?toVariant@QJsonValue@@QEBA?AVQVariant@@XZ
??1QJsonValue@@QEAA@XZ
?currentType@QOperatingSystemVersion@@SA?AW4OSType@1@XZ
?waitForFinished@QProcess@@QEAA_NH@Z
?start@QProcess@@QEAAXAEBVQString@@AEBV?$QList@VQString@@@@V?$QFlags@W4OpenModeFlag@QIODeviceBase@@@@@Z
??1QProcess@@UEAA@XZ
??0QProcess@@QEAA@PEAVQObject@@@Z
?homePath@QDir@@SA?AVQString@@XZ
?exists@QDir@@QEBA_NXZ
?entryInfoList@QDir@@QEBA?AV?$QList@VQFileInfo@@@@V?$QFlags@W4Filter@QDir@@@@V?$QFlags@W4SortFlag@QDir@@@@@Z
?setNameFilters@QDir@@QEAAXAEBV?$QList@VQString@@@@@Z
??1QDir@@QEAA@XZ
??0QDir@@QEAA@AEBVQString@@@Z
?fileName@QFileInfo@@QEBA?AVQString@@XZ
?filePath@QFileInfo@@QEBA?AVQString@@XZ
??1QFileInfo@@QEAA@XZ
??0QFileInfo@@QEAA@AEBV0@@Z
?toString@QVariant@@QEBA?AVQString@@XZ
?toByteArray@QVariant@@QEBA?AVQByteArray@@XZ
??0QVariant@@QEAA@PEBD@Z
??0QVariant@@QEAA@AEBVQString@@@Z
??1QVariant@@QEAA@XZ
?qt_QMetaEnum_debugOperator@@YA?AVQDebug@@AEAV1@_JPEBUQMetaObject@@PEBD@Z
??6QDebug@@QEAAAEAV0@AEBVQByteArray@@@Z
??6QDebug@@QEAAAEAV0@PEBD@Z
??1QDebug@@QEAA@XZ
?open@QFile@@UEAA_NV?$QFlags@W4OpenModeFlag@QIODeviceBase@@@@@Z
?copy@QFile@@SA_NAEBVQString@@0@Z
?remove@QFile@@SA_NAEBVQString@@@Z
?exists@QFile@@QEBA_NXZ
??1QFile@@UEAA@XZ
??0QFile@@QEAA@AEBVQString@@@Z
?close@QFileDevice@@UEAAXXZ
?write@QIODevice@@QEAA_JAEBVQByteArray@@@Z
?readAll@QIODevice@@QEAA?AVQByteArray@@XZ
?deleteLater@QObject@@QEAAXXZ
?allocate@QArrayData@@SAPEAXPEAPEAU1@_J11W4AllocationOption@1@@Z
??0QString@@QEAA@AEBV0@@Z
??1QString@@QEAA@XZ
??0QString@@QEAA@PEBD@Z
??1Connection@QMetaObject@@QEAA@XZ
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PEBV1@PEAPEAX01PEAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PEBHPEBU3@@Z
?exit@QCoreApplication@@SAXH@Z
??0QUrl@@QEAA@AEBVQString@@W4ParsingMode@0@@Z
??1QUrl@@QEAA@XZ
??0QThread@@QEAA@PEAVQObject@@@Z
??1QThread@@UEAA@XZ
?start@QThread@@QEAAXW4Priority@1@@Z
?event@QThread@@UEAA_NPEAVQEvent@@@Z
?eventFilter@QObject@@UEAA_NPEAV1@PEAVQEvent@@@Z
?timerEvent@QObject@@MEAAXPEAVQTimerEvent@@@Z
?childEvent@QObject@@MEAAXPEAVQChildEvent@@@Z
?customEvent@QObject@@MEAAXPEAVQEvent@@@Z
?connectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?disconnectNotify@QObject@@MEAAXAEBVQMetaMethod@@@Z
?qBadAlloc@@YAXXZ
??0QMessageLogger@@QEAA@PEBDH0@Z
?debug@QMessageLogger@@QEBA?AVQDebug@@XZ
??0QChar@@QEAA@_S@Z
??0QChar@@QEAA@D@Z
?reallocateUnaligned@QArrayData@@SA?AU?$pair@PEAUQArrayData@@PEAX@std@@PEAU1@PEAX_J2W4AllocationOption@1@@Z
?castHelper@QByteArrayView@@CAPEBDPEBD@Z
?size@QByteArrayView@@QEBA_JXZ
?data@QByteArrayView@@QEBAPEBDXZ
??0QByteArray@@QEAA@XZ
??0QByteArray@@QEAA@PEBD_J@Z
??0QByteArray@@QEAA@AEBV0@@Z
??1QByteArray@@QEAA@XZ
??0QByteArray@@QEAA@$$QEAV0@@Z
??4QByteArray@@QEAAAEAV0@$$QEAV0@@Z
?data@QByteArray@@QEAAPEADXZ
?data@QByteArray@@QEBAPEBDXZ
?left@QByteArray@@QEHAA?AV1@_J@Z
?right@QByteArray@@QEGBA?AV1@_J@Z
?append@QByteArray@@QEAAAEAV1@AEBV1@@Z
??YQByteArray@@QEAAAEAV0@PEBD@Z
?fromRawData@QByteArray@@SA?AV1@PEBD_J@Z
?fromBase64@QByteArray@@SA?AV1@AEBV1@V?$QFlags@W4Base64Option@QByteArray@@@@@Z
?size@QByteArray@@QEBA_JXZ
?length@QByteArray@@QEBA_JXZ
?isNull@QByteArray@@QEBA_NXZ
??0QString@@QEAA@$$QEAV0@@Z
?arg@QString@@QEBA?AV1@HHHVQChar@@@Z
?arg@QString@@QEBA?AV1@AEBV1@HVQChar@@@Z
?indexOf@QString@@QEBA_JAEBV1@_JW4CaseSensitivity@Qt@@@Z
?append@QString@@QEAAAEAV1@VQChar@@@Z
?append@QString@@QEAAAEAV1@AEBV1@@Z
?append@QString@@QEAAAEAV1@V?$QBasicUtf8StringView@$0A@@@@Z
?split@QString@@QEBA?AV?$QList@VQString@@@@AEBV1@V?$QFlags@W4SplitBehaviorFlags@Qt@@@@W4CaseSensitivity@Qt@@@Z
?toUtf8@QString@@QEHAA?AVQByteArray@@XZ
?toLocal8Bit@QString@@QEGBA?AVQByteArray@@XZ
?toLocal8Bit@QString@@QEHAA?AVQByteArray@@XZ
?fromUtf8@QString@@SA?AV1@VQByteArrayView@@@Z
?fromLocal8Bit@QString@@SA?AV1@VQByteArrayView@@@Z
?toInt@QString@@QEBAHPEA_NH@Z
??YQString@@QEAAAEAV0@PEBD@Z
??8QString@@QEBA_NPEBD@Z
?QStringList_join@QtPrivate@@YA?AVQString@@PEBV?$QList@VQString@@@@PEBVQChar@@_J@Z
kernel32
WideCharToMultiByte
LocalFree
GetCommandLineW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
vcruntime140_1
__CxxFrameHandler4
vcruntime140
_CxxThrowException
memcpy
memcmp
memmove
__std_terminate
memset
__current_exception
__current_exception_context
__C_specific_handler
__std_exception_copy
__std_exception_destroy
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
_callnewh
malloc
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_initialize_onexit_table
_get_narrow_winmain_command_line
_initterm
_initterm_e
exit
_exit
_initialize_narrow_environment
_c_exit
_register_thread_local_exe_atexit_callback
_configure_narrow_argv
__p___argc
terminate
__p___argv
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
shell32
CommandLineToArgvW
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ