HTTP-F4Ilb2DItcW5E1qYj[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

HTTP-F4Ilb2DItcW5E1qYj.exe
Size

6.7MB
MD5

91660c94f9f3283785febcb51cadba4c
SHA1

242200d2af9cdfabedc8bd382f575ad9cfabdbfd
SHA256

ce851fbadd03576d2d97373c748f009386a0e1bb121568bdcfb654515482318f
SHA512

f02ac82748f854ea48de4ac1a2c9b832b6f1b1bcc078ad389c7b4e7d691d9b7d1885a27fb7c265256e16c77e345a292f3769ef380e36e320383273a28a5de6b7
SSDEEP

98304:N16B9pGVnz/4hplABOFpXlMI/9GAb8nNGlEJePyobKRZY8eXJBM5x6MdQ2sLmaDF:tz/8lABOFpXiI/9GAb8Nju8P78jV

Score

1^/10

Malware Config

Signatures

Files

HTTP-F4Ilb2DItcW5E1qYj.exe
.dll windows x86

138adb58a6b7fd8a827165881a08d238

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetUserNameA
RegCloseKey
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegNotifyChangeKeyValue
CryptAcquireContextA
CryptGenRandom
RegisterEventSourceA
DeregisterEventSource
ReportEventA
CreateProcessAsUserA
OpenProcessToken
OpenThreadToken
ConvertSidToStringSidA
MapGenericMask
GetTokenInformation
AccessCheck
CopySid
EqualSid
DuplicateToken
DuplicateTokenEx
GetFileSecurityA
GetLengthSid
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash

ws2_32

getprotobynumber
getservbyname
getservbyport
ntohl
gethostname
gethostbyname
recvfrom
shutdown
sendto
recv
send
listen
inet_addr
inet_ntop
getpeername
ioctlsocket
connect
getprotobyname
htonl
getaddrinfo
select
htons
ntohs
getsockname
setsockopt
getsockopt
accept
WSAStartup
WSAGetLastError
WSACleanup
bind
socket
freeaddrinfo
__WSAFDIsSet
closesocket
WSASetLastError
gethostbyaddr
inet_ntoa
inet_pton

odbc32

ord40
ord72
ord70
ord67
ord66
ord65
ord63
ord61
ord60
ord59
ord58
ord56
ord6
ord41
ord23
ord54
ord53
ord52
ord51
ord21
ord50
ord20
ord49
ord19
ord48
ord18
ord47
ord45
ord43
ord17
ord42
ord16
ord15
ord14
ord13
ord12
ord11
ord10
ord9
ord57
ord7
ord1
ord2
ord24
ord4
ord27

kernel32

IsDebuggerPresent
IsProcessorFeaturePresent
EncodePointer
DecodePointer
QueryPerformanceCounter
GetSystemDirectoryA
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentThreadId
InterlockedCompareExchange
Sleep
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
MultiByteToWideChar
GetACP
TerminateProcess
SetErrorMode
SetFilePointer
InterlockedIncrement
CreateHardLinkA
GetFileAttributesA
VerifyVersionInfoA
GetComputerNameA
GetModuleHandleA
VerSetConditionMask
UnlockFileEx
LockFileEx
GetDiskFreeSpaceA
SleepEx
SetEnvironmentVariableA
GetCurrentProcessId
VirtualFree
VirtualAlloc
CreateMutexA
ReleaseMutex
GetLocalTime
OpenFileMappingA
GetVersion
DuplicateHandle
CreatePipe
GetStdHandle
GetBinaryTypeA
CreateProcessA
GetExitCodeProcess
GetCurrentThread
GetCurrentProcess
MapViewOfFileEx
GetFullPathNameA
CreateWaitableTimerA
GetSystemTimeAsFileTime
SetWaitableTimer
GetTickCount64
CreateEventA
WaitForSingleObject
FindNextFileA
GetSystemInfo
GetFileType
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
PeekNamedPipe
GetFileSize
GetTempPathA
GetTempFileNameA
GetEnvironmentVariableA
GetSystemWindowsDirectoryA
GetWindowsDirectoryA
LocalFree
GetVersionExA
OutputDebugStringA
GetModuleFileNameA
FormatMessageA
GetSystemTime
CloseHandle
GetCurrentDirectoryA
DeviceIoControl
FindClose
SetLastError
GetLastError
FreeLibrary
HeapReAlloc
HeapAlloc
HeapFree
HeapDestroy
HeapCreate
IsDBCSLeadByte
CreateTimerQueueTimer
DeleteTimerQueueTimer
GetProcAddress
LoadLibraryA
GetCommandLineA
CreateFileA
MoveFileExA
SystemTimeToFileTime
GetFileAttributesExA
GetProcessHeap
SetFileTime
WideCharToMultiByte
FileTimeToSystemTime
FindFirstFileA

ole32

CoUninitialize
CoInitialize

user32

GetSystemMetrics
MsgWaitForMultipleObjects

dnsapi

DnsQuery_A
DnsFree

msvcr110

setlocale
_umask
_putenv
_access
_lseek
_chsize
_read
_write
_unlink
_open
_chmod
_isatty
_strnicmp
_except_handler4_common
__clean_type_info_names_internal
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
_vsnprintf
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_stricmp
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
fputc
sprintf_s
strcpy_s
_wstat64i32
_stat64i32
_wfopen
vfprintf
_wopen
_lseeki64
wcstombs
abort
clearerr
strcmp
_dup
putc
_fileno
ferror
_setmode
remove
_mktemp
_creat
srand
rand
_close
strncpy_s
strcat_s
_libm_sse2_tan_precise
_libm_sse2_log_precise
_libm_sse2_log10_precise
_libm_sse2_exp_precise
_libm_sse2_atan_precise
_libm_sse2_asin_precise
_CItanh
_CIsinh
_CIfmod
_CIcosh
_hypot
getc
fgetc
_difftime32
mblen
_putenv_s
strcspn
_setjmp3
atof
sscanf
strtoul
atol
_libm_sse2_pow_precise
calloc
strtod
_libm_sse2_sqrt_precise
_libm_sse2_sin_precise
_libm_sse2_cos_precise
_libm_sse2_acos_precise
_CIatan2
floor
strncat
free
malloc
atoi
_snprintf
fopen
longjmp
realloc
exit
ceil
__iob_func
strtol
fprintf
getenv
fflush
memchr
sprintf
memmove
strncmp
strchr
isalpha
strrchr
strspn
_controlfp_s
_errno
ftell
printf
strcoll
_tolower_l
toupper
_finite
_get_current_locale
fread
_fstat32
fclose
isspace
_HUGE
_time32
_set_errno
_memicmp
_stat32
strstr
tolower
isalnum
strncpy
_getcwd
strerror
_chdir
_set_invalid_parameter_handler
memcmp
fwrite
qsort
vsprintf
_environ
_ctime32
_localtime32
asctime
_gmtime32
_atoi64
_i64toa_s
strpbrk
localeconv
isdigit
_fpclass
_isnan
islower
strnlen
rewind
feof
_mkdir
setvbuf
_rmdir
_get_osfhandle
fseek
strtok
__daylight
__timezone
_tzset
_getpid
_strdup
_open_osfhandle
_fdopen
memset
putchar
memcpy
_mktime32
isupper
isxdigit
ispunct
isprint
isgraph
iscntrl
strftime

Exports

Exports

GetSMErrorText
OnUpdateBaseDir
OnUpdateBool
OnUpdateLong
OnUpdateLongGEZero
OnUpdateReal
OnUpdateString
OnUpdateStringUnempty
PHP_3HAVAL128Init
PHP_3HAVAL160Init
PHP_3HAVAL192Init
PHP_3HAVAL224Init
PHP_3HAVAL256Init
PHP_3TIGERInit
PHP_4HAVAL128Init
PHP_4HAVAL160Init
PHP_4HAVAL192Init
PHP_4HAVAL224Init
PHP_4HAVAL256Init
PHP_4TIGERInit
PHP_5HAVAL128Init
PHP_5HAVAL160Init
PHP_5HAVAL192Init
PHP_5HAVAL224Init
PHP_5HAVAL256Init
PHP_ADLER32Copy
PHP_ADLER32Final
PHP_ADLER32Init
PHP_ADLER32Update
PHP_CRC32BFinal
PHP_CRC32BUpdate
PHP_CRC32Copy
PHP_CRC32Final
PHP_CRC32Init
PHP_CRC32Update
PHP_FNV132Final
PHP_FNV132Init
PHP_FNV132Update
PHP_FNV164Final
PHP_FNV164Init
PHP_FNV164Update
PHP_FNV1a32Update
PHP_FNV1a64Update
PHP_GOSTFinal
PHP_GOSTInit
PHP_GOSTInitCrypto
PHP_GOSTUpdate
PHP_HAVAL128Final
PHP_HAVAL160Final
PHP_HAVAL192Final
PHP_HAVAL224Final
PHP_HAVAL256Final
PHP_HAVALUpdate
PHP_JOAATFinal
PHP_JOAATInit
PHP_JOAATUpdate
PHP_MD2Final
PHP_MD2Init
PHP_MD2Update
PHP_MD4Final
PHP_MD4Init
PHP_MD4Update
PHP_MD5Final
PHP_MD5Init
PHP_MD5Update
PHP_RIPEMD128Final
PHP_RIPEMD128Init
PHP_RIPEMD128Update
PHP_RIPEMD160Final
PHP_RIPEMD160Init
PHP_RIPEMD160Update
PHP_RIPEMD256Final
PHP_RIPEMD256Init
PHP_RIPEMD256Update
PHP_RIPEMD320Final
PHP_RIPEMD320Init
PHP_RIPEMD320Update
PHP_SHA1Final
PHP_SHA1Init
PHP_SHA1Update
PHP_SHA224Final
PHP_SHA224Init
PHP_SHA224Update
PHP_SHA256Final
PHP_SHA256Init
PHP_SHA256Update
PHP_SHA384Final
PHP_SHA384Init
PHP_SHA384Update
PHP_SHA512Final
PHP_SHA512Init
PHP_SHA512Update
PHP_SNEFRUFinal
PHP_SNEFRUInit
PHP_SNEFRUUpdate
PHP_TIGER128Final
PHP_TIGER160Final
PHP_TIGER192Final
PHP_TIGERUpdate
PHP_WHIRLPOOLFinal
PHP_WHIRLPOOLInit
PHP_WHIRLPOOLUpdate
TSMClose
TSendMail
UTF8ToHtml
UTF8Toisolat1
ValidateFormat
XML_GetUserData
_DllMain@12
__docbDefaultSAXHandler
__htmlDefaultSAXHandler
__oldXMLWDcompatibility
__xmlBufferAllocScheme
__xmlDefaultBufferSize
__xmlDefaultSAXHandler
__xmlDefaultSAXLocator
__xmlDeregisterNodeDefaultValue
__xmlDoValidityCheckingDefaultValue
__xmlGenericError
__xmlGenericErrorContext
__xmlGetWarningsDefaultValue
__xmlIndentTreeOutput
__xmlKeepBlanksDefaultValue
__xmlLineNumbersDefaultValue
__xmlLoadExtDtdDefaultValue
__xmlParserDebugEntities
__xmlParserVersion
__xmlPedanticParserDefaultValue
__xmlRegisterNodeDefaultValue
__xmlSaveNoEmptyTags
__xmlSubstituteEntitiesDefaultValue
__xmlTreeIndentString
_array_init
_convert_to_cstring
_convert_to_string
_ecalloc
_efree
_emalloc
_erealloc
_estrdup
_estrndup
_libiconv_version
_mysqlnd_calloc
_mysqlnd_debug
_mysqlnd_ecalloc
_mysqlnd_efree
_mysqlnd_emalloc
_mysqlnd_erealloc
_mysqlnd_free
_mysqlnd_get_client_stats
_mysqlnd_init
_mysqlnd_malloc
_mysqlnd_pecalloc
_mysqlnd_pefree
_mysqlnd_pemalloc
_mysqlnd_perealloc
_mysqlnd_pestrdup
_mysqlnd_pestrndup
_mysqlnd_plugin_apply_with_argument
_mysqlnd_plugin_find
_mysqlnd_plugin_get_plugin_connection_data
_mysqlnd_plugin_get_plugin_connection_data_data
_mysqlnd_plugin_get_plugin_net_data
_mysqlnd_plugin_get_plugin_protocol_data
_mysqlnd_plugin_get_plugin_result_buffered_data_c
_mysqlnd_plugin_get_plugin_result_buffered_data_zval
_mysqlnd_plugin_get_plugin_result_data
_mysqlnd_plugin_get_plugin_result_metadata_data
_mysqlnd_plugin_get_plugin_result_unbuffered_data
_mysqlnd_plugin_get_plugin_stmt_data
_mysqlnd_poll
_mysqlnd_realloc
_mysqlnd_sprintf
_mysqlnd_sprintf_free
_mysqlnd_vsprintf
_object_and_properties_init
_object_init
_object_init_ex
_php_emit_fd_setsize_warning
_php_error_log
_php_error_log_ex
_php_find_ps_module
_php_find_ps_serializer
_php_get_stream_filters_hash
_php_glob_stream_get_count
_php_glob_stream_get_path
_php_glob_stream_get_pattern
_php_math_basetolong
_php_math_basetozval
_php_math_longtobase
_php_math_number_format
_php_math_number_format_ex
_php_math_round
_php_math_zvaltobase
_php_regcomp@12
_php_regerror@16
_php_regexec@20
_php_regfree@4
_php_stream_alloc
_php_stream_cast
_php_stream_copy_to_mem
_php_stream_copy_to_stream
_php_stream_copy_to_stream_ex
_php_stream_eof
_php_stream_fill_read_buffer
_php_stream_filter_alloc
_php_stream_filter_append
_php_stream_filter_flush
_php_stream_filter_prepend
_php_stream_flush
_php_stream_fopen
_php_stream_fopen_from_fd
_php_stream_fopen_from_file
_php_stream_fopen_from_pipe
_php_stream_fopen_temporary_file
_php_stream_fopen_tmpfile
_php_stream_fopen_with_path
_php_stream_free
_php_stream_free_enclosed
_php_stream_get_line
_php_stream_get_url_stream_wrappers_hash
_php_stream_getc
_php_stream_make_seekable
_php_stream_memory_create
_php_stream_memory_get_buffer
_php_stream_memory_open
_php_stream_mkdir
_php_stream_mmap_range
_php_stream_mmap_unmap
_php_stream_mmap_unmap_ex
_php_stream_open_wrapper_as_file
_php_stream_open_wrapper_ex
_php_stream_opendir
_php_stream_passthru
_php_stream_printf
_php_stream_putc
_php_stream_puts
_php_stream_read
_php_stream_readdir
_php_stream_rmdir
_php_stream_scandir
_php_stream_seek
_php_stream_set_option
_php_stream_sock_open_from_socket
_php_stream_sock_open_host
_php_stream_stat
_php_stream_stat_path
_php_stream_tell
_php_stream_temp_create
_php_stream_temp_create_ex
_php_stream_temp_open
_php_stream_truncate_set_size
_php_stream_write
_php_stream_xport_create
_safe_emalloc
_safe_emalloc_string
_safe_erealloc
_safe_malloc
_safe_realloc
_xml_zval_strdup
_zend_bailout
_zend_get_parameters_array
_zend_get_parameters_array_ex
_zend_hash_add_or_update
_zend_hash_index_update_or_next_insert
_zend_hash_init
_zend_hash_init_ex
_zend_hash_merge
_zend_hash_quick_add_or_update
_zend_hash_splice
_zend_list_addref
_zend_list_delete
_zend_list_find
_zend_mem_block_size
_zend_mm_alloc
_zend_mm_block_size
_zend_mm_free
_zend_mm_realloc
_zend_ts_hash_add_or_update
_zend_ts_hash_index_update_or_next_insert
_zend_ts_hash_init
_zend_ts_hash_init_ex
_zend_ts_hash_quick_add_or_update
_zval_copy_ctor_func
_zval_dtor_func
_zval_dtor_wrapper
_zval_internal_dtor
_zval_internal_ptr_dtor
_zval_ptr_dtor
add_assoc_bool_ex
add_assoc_double_ex
add_assoc_function
add_assoc_long_ex
add_assoc_null_ex
add_assoc_resource_ex
add_assoc_string_ex
add_assoc_stringl_ex
add_assoc_zval_ex
add_char_to_string
add_function
add_get_assoc_string_ex
add_get_assoc_stringl_ex
add_get_index_double
add_get_index_long
add_get_index_string
add_get_index_stringl
add_index_bool
add_index_double
add_index_long
add_index_null
add_index_resource
add_index_string
add_index_stringl
add_index_zval
add_next_index_bool
add_next_index_double
add_next_index_long
add_next_index_null
add_next_index_resource
add_next_index_string
add_next_index_stringl
add_next_index_zval
add_property_bool_ex
add_property_double_ex
add_property_long_ex
add_property_null_ex
add_property_resource_ex
add_property_string_ex
add_property_stringl_ex
add_property_zval_ex
add_string_to_string
adler32
ap_php_asprintf
ap_php_conv_10
ap_php_conv_p2
ap_php_slprintf
ap_php_snprintf
ap_php_vasprintf
ap_php_vslprintf
ap_php_vsnprintf
append_user_shutdown_function
arcfour_LTX__is_block_algorithm
arcfour_LTX__mcrypt_algorithm_version
arcfour_LTX__mcrypt_decrypt
arcfour_LTX__mcrypt_encrypt
arcfour_LTX__mcrypt_get_algo_iv_size
arcfour_LTX__mcrypt_get_algorithms_name
arcfour_LTX__mcrypt_get_block_size
arcfour_LTX__mcrypt_get_key_size
arcfour_LTX__mcrypt_get_size
arcfour_LTX__mcrypt_get_supported_key_sizes
arcfour_LTX__mcrypt_self_test
arcfour_LTX__mcrypt_set_key
array_set_zval_key
attribute
attributeDecl
basic_globals
bitwise_and_function
bitwise_not_function
bitwise_or_function
bitwise_xor_function
blowfish_LTX__is_block_algorithm
blowfish_LTX__mcrypt_algorithm_version
blowfish_LTX__mcrypt_decrypt
blowfish_LTX__mcrypt_encrypt
blowfish_LTX__mcrypt_get_algorithms_name
blowfish_LTX__mcrypt_get_block_size
blowfish_LTX__mcrypt_get_key_size
blowfish_LTX__mcrypt_get_size
blowfish_LTX__mcrypt_get_supported_key_sizes
blowfish_LTX__mcrypt_self_test
blowfish_LTX__mcrypt_set_key
blowfish_compat_LTX__is_block_algorithm
blowfish_compat_LTX__mcrypt_algorithm_version
blowfish_compat_LTX__mcrypt_decrypt
blowfish_compat_LTX__mcrypt_encrypt
blowfish_compat_LTX__mcrypt_get_algorithms_name
blowfish_compat_LTX__mcrypt_get_block_size
blowfish_compat_LTX__mcrypt_get_key_size
blowfish_compat_LTX__mcrypt_get_size
blowfish_compat_LTX__mcrypt_get_supported_key_sizes
blowfish_compat_LTX__mcrypt_self_test
blowfish_compat_LTX__mcrypt_set_key
boolean_not_function
boolean_xor_function
call_user_function
call_user_function_ex
cast_128_LTX__is_block_algorithm
cast_128_LTX__mcrypt_algorithm_version
cast_128_LTX__mcrypt_decrypt
cast_128_LTX__mcrypt_encrypt
cast_128_LTX__mcrypt_get_algorithms_name
cast_128_LTX__mcrypt_get_block_size
cast_128_LTX__mcrypt_get_key_size
cast_128_LTX__mcrypt_get_size
cast_128_LTX__mcrypt_get_supported_key_sizes
cast_128_LTX__mcrypt_self_test
cast_128_LTX__mcrypt_set_key
cast_256_LTX__is_block_algorithm
cast_256_LTX__mcrypt_algorithm_version
cast_256_LTX__mcrypt_decrypt
cast_256_LTX__mcrypt_encrypt
cast_256_LTX__mcrypt_get_algorithms_name
cast_256_LTX__mcrypt_get_block_size
cast_256_LTX__mcrypt_get_key_size
cast_256_LTX__mcrypt_get_size
cast_256_LTX__mcrypt_get_supported_key_sizes
cast_256_LTX__mcrypt_self_test
cast_256_LTX__mcrypt_set_key
cdataBlock
cfg_get_double
cfg_get_entry
cfg_get_long
cfg_get_string
characters
checkNamespace
clean_non_persistent_class_full
clean_non_persistent_function_full
comment
compare_function
compile_file
compile_filename
compile_string
compiler_globals
compress
compress2
compressBound
concat_function
config_zval_dtor
convert_scalar_to_number
convert_to_array
convert_to_boolean
convert_to_double
convert_to_long
convert_to_long_base
convert_to_null
convert_to_object
core_globals
crc32
decrement_function
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
des_LTX__is_block_algorithm
des_LTX__mcrypt_algorithm_version
des_LTX__mcrypt_decrypt
des_LTX__mcrypt_encrypt
des_LTX__mcrypt_get_algorithms_name
des_LTX__mcrypt_get_block_size
des_LTX__mcrypt_get_key_size
des_LTX__mcrypt_get_size
des_LTX__mcrypt_get_supported_key_sizes
des_LTX__mcrypt_self_test
des_LTX__mcrypt_set_key
destroy_op_array
destroy_zend_class
destroy_zend_function
display_ini_entries
display_link_numbers
div_function
do_bind_class
do_bind_function
do_bind_inherited_class
docbCreateFileParserCtxt
docbCreatePushParserCtxt
docbDefaultSAXHandlerInit
docbEncodeEntities
docbFreeParserCtxt
docbParseChunk
docbParseDoc
docbParseDocument
docbParseFile
docbSAXParseDoc
docbSAXParseFile
dom_node_class_entry
dom_object_get_node
dummy_indent
elementDecl
empty_fcall_info
empty_fcall_info_cache
endDocument
endElement
end_mcrypt
enigma_LTX__is_block_algorithm
enigma_LTX__mcrypt_algorithm_version
enigma_LTX__mcrypt_decrypt
enigma_LTX__mcrypt_encrypt
enigma_LTX__mcrypt_get_algo_iv_size
enigma_LTX__mcrypt_get_algorithms_name
enigma_LTX__mcrypt_get_block_size
enigma_LTX__mcrypt_get_key_size
enigma_LTX__mcrypt_get_size
enigma_LTX__mcrypt_get_supported_key_sizes

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 388KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

138adb58a6b7fd8a827165881a08d238

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

ws2_32

odbc32

kernel32

ole32

user32

dnsapi

msvcr110

Exports

Exports

Sections

.text Size: 3.7MB - Virtual size: 3.7MB

.rdata Size: 2.6MB - Virtual size: 2.6MB

.data Size: 34KB - Virtual size: 162KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 388KB - Virtual size: 388KB

.text
Size: 3.7MB - Virtual size: 3.7MB

.rdata
Size: 2.6MB - Virtual size: 2.6MB

.data
Size: 34KB - Virtual size: 162KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 388KB - Virtual size: 388KB