896d22a599d1b92fd1248170c9f4ce76f647215e3a51b20d3d89aa21c2b055f6

Sharing

Copy URL Twitter E-mail

General

Target
896d22a599d1b92fd1248170c9f4ce76f647215e3a51b20d3d89aa21c2b055f6
Size 1.8MB
Sample260831-kpd7wsfe29
SHA256 896d22a599d1b92fd1248170c9f4ce76f647215e3a51b20d3d89aa21c2b055f6
MD5 3df4ba473146f3e94440e08350ce765a
SHA1 7b21ac34bd4c433523a3267724efd23228d7a16d
SHA512 513310d84ff06c8c3859363ba3f8b8bac65b2aa68d910ccb94921c6246c68e753ebbaf2d95be994644ee7147cc4467c10089e2e03d833706946da73e39c0cab6
SSDEEP 49152:rzHcZ2L6Iu/8fXPUif7x9OvWOA1PiCK5qTQ6v4H2kJ4ha1sN:rNLHXPUif7x9OvWi6v4Wkm
TLSH
T12F855C3035418072EA8222F5AD7CFABA455D9E300F6554CB53EC7A2A7FB41D32B32A57
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
896d22a599d1b92fd1248170c9f4ce76f647215e3a51b20d3d89aa21c2b055f6

File Explorer

896d22a599d1b92fd1248170c9f4ce76f647215e3a51b20d3d89aa21c2b055f6

.exe 1.8MB

896d22a599d1b92fd1248170c9f4ce76f647215e3a51b20d3d89aa21c2b055f6

IMPHASH 5577ba9a62fe2f04197022b801b6bbab
SHA256 896d22a599d1b92fd1248170c9f4ce76f647215e3a51b20d3d89aa21c2b055f6
MD5 3df4ba473146f3e94440e08350ce765a
SHA1 7b21ac34bd4c433523a3267724efd23228d7a16d
SHA512 513310d84ff06c8c3859363ba3f8b8bac65b2aa68d910ccb94921c6246c68e753ebbaf2d95be994644ee7147cc4467c10089e2e03d833706946da73e39c0cab6
SSDEEP 49152:rzHcZ2L6Iu/8fXPUif7x9OvWOA1PiCK5qTQ6v4H2kJ4ha1sN:rNLHXPUif7x9OvWi6v4Wkm
TLSH
T12F855C3035418072EA8222F5AD7CFABA455D9E300F6554CB53EC7A2A7FB41D32B32A57
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

614768

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\a\weasel-hd2-private\weasel-hd2-private\output\Win32\WeaselServer.pdb

imm32

ImmDisableIME

kernel32

RegisterApplicationRestart MultiByteToWideChar SetThreadLocale GetUserDefaultUILanguage SetThreadUILanguage ExpandEnvironmentStringsW GetThreadUILanguage CloseHandle SetEvent CreateEventA CreateEventW LocalFree FormatMessageA FormatMessageW WideCharToMultiByte WakeAllConditionVariable FindResourceW SizeofResource LockResource LoadResource LoadLibraryExW GetProcAddress GetModuleHandleW GetModuleFileNameW FreeLibrary FindResourceExW GetCurrentThreadId WriteConsoleW ReadConsoleW GetConsoleMode GetConsoleOutputCP SetFilePointerEx GetFileSizeEx SetStdHandle SetConsoleCtrlHandler SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage GetTimeZoneInformation GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW Sleep CompareStringW GetTimeFormatW GetDateFormatW GetCurrentThread LeaveCriticalSection EnterCriticalSection GetProcessHeap HeapSize HeapFree HeapReAlloc HeapAlloc HeapDestroy RaiseException CreateDirectoryW VerifyVersionInfoW VerSetConditionMask DeleteCriticalSection InitializeCriticalSectionEx FreeLibraryAndExitThread ExitThread CreateThread GetStdHandle ExitProcess InitializeCriticalSectionAndSpinCount InterlockedFlushSList RtlUnwind CreateWaitableTimerA GetModuleHandleA GetLogicalProcessorInformation GetSystemInfo TlsFree TlsSetValue GetLastError DecodePointer TlsGetValue TlsAlloc ResumeThread SetWaitableTimer OpenEventA WaitForMultipleObjectsEx WaitForSingleObjectEx ReleaseSemaphore ResetEvent GetCPInfo CompareStringEx CloseThreadpoolWait SetThreadpoolWait CreateThreadpoolWait CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks SetThreadpoolTimer CreateThreadpoolTimer FreeLibraryWhenCallbackReturns GetTickCount64 GetCurrentProcessorNumber FlushProcessWriteBuffers CreateSemaphoreExW CreateEventExW InitOnceExecuteOnce LCMapStringEx TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive QueryPerformanceFrequency GetStringTypeW CreateSymbolicLinkW GetFileInformationByHandleEx CreateHardLinkW MoveFileExW CopyFileW CreateDirectoryExW DeviceIoControl AreFileApisANSI GetTempPathW SetFileTime SetFileInformationByHandle SetFileAttributesW GetFullPathNameW lstrcmpiW LCMapStringW GetFinalPathNameByHandleW GetFileInformationByHandle SetLastError OutputDebugStringW FindResourceA GetCurrentProcessId CreateMutexW GetModuleHandleExW WaitNamedPipeW SetNamedPipeHandleState CreateFileW WriteFile FlushFileBuffers DisconnectNamedPipe ReadFile CreateNamedPipeW ConnectNamedPipe IsDebuggerPresent EncodePointer InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList GetCurrentProcess FlushInstructionCache IsProcessorFeaturePresent VirtualAlloc VirtualFree LoadLibraryExA UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime GetLocaleInfoEx SetCurrentDirectoryW GetCurrentDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetDiskFreeSpaceExW GetFileAttributesW GetFileAttributesExW SleepConditionVariableSRW

user32

CreateWindowExW IsWindow DestroyWindow SetTimer MessageBoxA PeekMessageW GetMessageW TranslateMessage DispatchMessageW SetWindowTextW SetRect CallWindowProcW EndPaint BeginPaint DrawIconEx GetMonitorInfoW CopyRect UpdateLayeredWindow GetClientRect InvalidateRect ClientToScreen DefWindowProcW PtInRect InflateRect CloseClipboard SetClipboardData EmptyClipboard OpenClipboard OffsetRect IsRectEmpty ReleaseDC SetWindowPos GetDC MonitorFromRect LoadCursorW GetClassInfoExW ShowWindow PostMessageW DrawAnimatedRects RegisterWindowMessageW GetSystemMetrics KillTimer LoadMenuW DestroyMenu GetSubMenu GetMenuItemID TrackPopupMenu RegisterClassExW LoadStringW UnregisterClassW TrackMouseEvent SetMenuDefaultItem AppendMenuW MessageBoxExW MessageBoxW CharNextW SystemParametersInfoW LoadImageW DestroyIcon LoadIconW GetClassNameW FindWindowW EnumChildWindows SetParent SetWindowLongW GetWindowLongW GetCursorPos GetWindowRect RedrawWindow SetForegroundWindow SetActiveWindow

advapi32

RegCreateKeyExW RegQueryValueExW RegOpenKeyW GetUserNameW RegCloseKey StartServiceCtrlDispatcherW SetServiceStatus RegisterServiceCtrlHandlerW RegGetValueW RegSetValueExW RegQueryInfoKeyW RegOpenKeyExW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW ConvertStringSecurityDescriptorToSecurityDescriptorW

shell32

ShellExecuteW Shell_NotifyIconW SHAppBarMessage

ole32

CoTaskMemFree CoTaskMemRealloc CoTaskMemAlloc CoUninitialize CoCreateInstance CoInitialize

oleaut32

VarUI4FromStr SysFreeString

comctl32

InitCommonControlsEx

winsparkle

win_sparkle_set_registry_path win_sparkle_set_lang

api-ms-win-shcore-scaling-l1-1-1

SetProcessDpiAwareness GetDpiForMonitor

gdiplus

GdipIsEmptyRegion GdipCombineRegionRegion GdipCloneRegion GdipCreateRegionPath GdipDeleteRegion GdipFree GdipAlloc GdipDeleteBrush GdipCloneBrush GdipCreateSolidFill GdipDisposeImage GdipCreatePen1 GdipDeletePen GdipSetPenColor GdipCreatePath GdipDeletePath GdipAddPathRectangleI GdipCreateFromHDC GdipGetImageGraphicsContext GdipDeleteGraphics GdipSetSmoothingMode GdipDrawPath GdipFillPath GdipDrawImageI GdipCloneImage GdipCreateBitmapFromScan0 GdiplusStartup GdiplusShutdown GdipAddPathLineI GdipAddPathArcI GdipGetImageWidth GdipGetImageHeight GdipGetImagePixelFormat GdipBitmapLockBits GdipBitmapUnlockBits

d2d1

ord1

dwrite

DWriteCreateFactory

rime

rime_get_api

gdi32

DeleteDC SelectObject CreateCompatibleBitmap BitBlt SetViewportOrgEx CreateCompatibleDC DeleteObject

??0?$codecvt_null@_W@archive@boost@@QAE@I@Z ??0?$oserializer@Vtext_woarchive@archive@boost@@UCandidateInfo@weasel@@@detail@archive@boost@@QAE@XZ ??0?$oserializer@Vtext_woarchive@archive@boost@@UText@weasel@@@detail@archive@boost@@QAE@XZ ??0?$oserializer@Vtext_woarchive@archive@boost@@UTextAttribute@weasel@@@detail@archive@boost@@QAE@XZ ??0?$oserializer@Vtext_woarchive@archive@boost@@UTextRange@weasel@@@detail@archive@boost@@QAE@XZ ??0?$oserializer@Vtext_woarchive@archive@boost@@UUIStyle@weasel@@@detail@archive@boost@@QAE@XZ ??0?$oserializer@Vtext_woarchive@archive@boost@@V?$vector@UText@weasel@@V?$allocator@UText@weasel@@@std@@@std@@@detail@archive@boost@@QAE@XZ ??0?$oserializer@Vtext_woarchive@archive@boost@@V?$vector@UTextAttribute@weasel@@V?$allocator@UTextAttribute@weasel@@@std@@@std@@@detail@archive@boost@@QAE@XZ ??0?$singleton@V?$extended_type_info_typeid@UCandidateInfo@weasel@@@serialization@boost@@@serialization@boost@@IAE@XZ ??0?$singleton@V?$extended_type_info_typeid@UText@weasel@@@serialization@boost@@@serialization@boost@@IAE@XZ ??0?$singleton@V?$extended_type_info_typeid@UTextAttribute@weasel@@@serialization@boost@@@serialization@boost@@IAE@XZ ??0?$singleton@V?$extended_type_info_typeid@UTextRange@weasel@@@serialization@boost@@@serialization@boost@@IAE@XZ ??0?$singleton@V?$extended_type_info_typeid@UUIStyle@weasel@@@serialization@boost@@@serialization@boost@@IAE@XZ ??0?$singleton@V?$extended_type_info_typeid@V?$vector@UText@weasel@@V?$allocator@UText@weasel@@@std@@@std@@@serialization@boost@@@serialization@boost@@IAE@XZ ??0?$singleton@V?$extended_type_info_typeid@V?$vector@UTextAttribute@weasel@@V?$allocator@UTextAttribute@weasel@@@std@@@std@@@serialization@boost@@@serialization@boost@@IAE@XZ ??1?$codecvt_null@_W@archive@boost@@UAE@XZ ??_F?$codecvt_null@_W@archive@boost@@QAEXXZ ?do_always_noconv@?$codecvt_null@_W@archive@boost@@EBE_NXZ ?do_encoding@?$codecvt_null@_W@archive@boost@@EBEHXZ ?do_in@?$codecvt_null@_W@archive@boost@@EBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z ?do_max_length@?$codecvt_null@_W@archive@boost@@EBEHXZ ?do_out@?$codecvt_null@_W@archive@boost@@EBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z ?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCandidateInfo@weasel@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UCandidateInfo@weasel@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@UText@weasel@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UText@weasel@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@UTextAttribute@weasel@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UTextAttribute@weasel@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@UTextRange@weasel@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UTextRange@weasel@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@UUIStyle@weasel@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UUIStyle@weasel@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$vector@UText@weasel@@V?$allocator@UText@weasel@@@std@@@std@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$vector@UText@weasel@@V?$allocator@UText@weasel@@@std@@@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$vector@UTextAttribute@weasel@@V?$allocator@UTextAttribute@weasel@@@std@@@std@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$vector@UTextAttribute@weasel@@V?$allocator@UTextAttribute@weasel@@@std@@@std@@@23@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UCandidateInfo@weasel@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@UCandidateInfo@weasel@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UText@weasel@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@UText@weasel@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UTextAttribute@weasel@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@UTextAttribute@weasel@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@UTextRange@weasel@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@UTextRange@weasel@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$vector@UText@weasel@@V?$allocator@UText@weasel@@@std@@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@V?$vector@UText@weasel@@V?$allocator@UText@weasel@@@std@@@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_wiarchive@archive@boost@@V?$vector@UTextAttribute@weasel@@V?$allocator@UTextAttribute@weasel@@@std@@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vtext_wiarchive@archive@boost@@V?$vector@UTextAttribute@weasel@@V?$allocator@UTextAttribute@weasel@@@std@@@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$map@Vtext_wiarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vtext_wiarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$map@Vtext_woarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vtext_woarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ ?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UCandidateInfo@weasel@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@UCandidateInfo@weasel@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UText@weasel@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@UText@weasel@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UTextAttribute@weasel@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@UTextAttribute@weasel@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UTextRange@weasel@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@UTextRange@weasel@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@UUIStyle@weasel@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@UUIStyle@weasel@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$vector@UText@weasel@@V?$allocator@UText@weasel@@@std@@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@V?$vector@UText@weasel@@V?$allocator@UText@weasel@@@std@@@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_woarchive@archive@boost@@V?$vector@UTextAttribute@weasel@@V?$allocator@UTextAttribute@weasel@@@std@@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vtext_woarchive@archive@boost@@V?$vector@UTextAttribute@weasel@@V?$allocator@UTextAttribute@weasel@@@std@@@std@@@detail@archive@3@XZ ?get_lock@singleton_module@serialization@boost@@AAEAA_NXZ ?get_mutable_instance@?$singleton@V?$map@Vtext_wiarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vtext_wiarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$map@Vtext_woarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vtext_woarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ ?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ ?is_destroyed@?$singleton@V?$map@Vtext_wiarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$map@Vtext_woarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ ?is_locked@singleton_module@serialization@boost@@QAE_NXZ ?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@UCandidateInfo@weasel@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@UText@weasel@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@UTextAttribute@weasel@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@UTextRange@weasel@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@V?$vector@UText@weasel@@V?$allocator@UText@weasel@@@std@@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vtext_wiarchive@archive@boost@@V?$vector@UTextAttribute@weasel@@V?$allocator@UTextAttribute@weasel@@@std@@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?lock@?1??get_lock@singleton_module@serialization@boost@@AAEAA_NXZ@4_NA ?lock@singleton_module@serialization@boost@@QAEXXZ ?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@UCandidateInfo@weasel@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@UText@weasel@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@UTextAttribute@weasel@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@UTextRange@weasel@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@UUIStyle@weasel@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@V?$vector@UText@weasel@@V?$allocator@UText@weasel@@@std@@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?save_object_data@?$oserializer@Vtext_woarchive@archive@boost@@V?$vector@UTextAttribute@weasel@@V?$allocator@UTextAttribute@weasel@@@std@@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?unlock@singleton_module@serialization@boost@@QAEXXZ

Sharing

General

Malware Config

Signatures

File Explorer

896d22a599d1b92fd1248170c9f4ce76f647215e3a51b20d3d89aa21c2b055f6

imm32

kernel32

user32

advapi32

shell32

ole32

oleaut32

comctl32

winsparkle

api-ms-win-shcore-scaling-l1-1-1

gdiplus

d2d1

dwrite

rime

gdi32

generic