Static task
static1
Behavioral task
behavioral1
Sample
28f0eb54bed6f7c743088f8f8c22e67d536463b0b6b5c9aafc7aab6ec03747a8.exe
Resource
win7-20230712-en
windows7-x64
Behavioral task
behavioral2
Sample
28f0eb54bed6f7c743088f8f8c22e67d536463b0b6b5c9aafc7aab6ec03747a8.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
General
-
Target
28f0eb54bed6f7c743088f8f8c22e67d536463b0b6b5c9aafc7aab6ec03747a8
-
Size
1.6MB
-
MD5
e78cbe00c48d4d2708dafa104f274a10
-
SHA1
171582fdb2e2ce64173761e550d820bf3f41f0ed
-
SHA256
28f0eb54bed6f7c743088f8f8c22e67d536463b0b6b5c9aafc7aab6ec03747a8
-
SHA512
d4d35989c9b020dc2c0ba3ffb87c7f7679101fde7cb3eddad36fcfa8d7c30d2f1c82f603c92da8b649078c27274032834737d31d9ddba2fae74983f68953dfa4
-
SSDEEP
24576:6XgDx+2IB48T+D1yzNs+YcrRcAx2Jgu+YZDyxf9f:6XgDxIBqD1ypocr1UJtZDuf9f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28f0eb54bed6f7c743088f8f8c22e67d536463b0b6b5c9aafc7aab6ec03747a8
Files
-
28f0eb54bed6f7c743088f8f8c22e67d536463b0b6b5c9aafc7aab6ec03747a8.exe windows x86
baaf16e562a8ce47ed7a90c3f51ef9ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
credittraderapi
?CreateTstpTraderApi@CTORATstpTraderApi@TORACREDITAPI@@SAPAV12@PBD_N@Z
traderapi
?CreateTstpTraderApi@CTORATstpTraderApi@TORASTOCKAPI@@SAPAV12@PBD_N10@Z
xmdapi
?CreateTstpXMdApi@CTORATstpXMdApi@TORALEV1API@@SAPAV12@ABD0@Z
ice37
?ice_factory@ThreadMetrics@IceMX@@SA?AV?$Handle@VValueFactory@Ice@@@IceInternal@@XZ
?ice_factory@Metrics@IceMX@@SA?AV?$Handle@VValueFactory@Ice@@@IceInternal@@XZ
?upCast@Ice@@YAPAVLocalObject@1@PAVValueFactory@1@@Z
?ice_factory@DispatchMetrics@IceMX@@SA?AV?$Handle@VValueFactory@Ice@@@IceInternal@@XZ
??1UnknownMetricsView@IceMX@@UAE@XZ
??1RemoteLoggerAlreadyAttachedException@Ice@@UAE@XZ
??1AdapterNotFoundException@Ice@@UAE@XZ
??1FactoryTableInit@IceInternal@@QAE@XZ
??0FactoryTableInit@IceInternal@@QAE@XZ
??0UnknownMetricsView@IceMX@@QAE@XZ
??0RemoteLoggerAlreadyAttachedException@Ice@@QAE@XZ
?ice_factory@ChildInvocationMetrics@IceMX@@SA?AV?$Handle@VValueFactory@Ice@@@IceInternal@@XZ
?ice_factory@CollocatedMetrics@IceMX@@SA?AV?$Handle@VValueFactory@Ice@@@IceInternal@@XZ
?ice_factory@RemoteMetrics@IceMX@@SA?AV?$Handle@VValueFactory@Ice@@@IceInternal@@XZ
?ice_factory@ConnectionMetrics@IceMX@@SA?AV?$Handle@VValueFactory@Ice@@@IceInternal@@XZ
?ice_factory@InvocationMetrics@IceMX@@SA?AV?$Handle@VValueFactory@Ice@@@IceInternal@@XZ
??0AdapterNotFoundException@Ice@@QAE@XZ
glacier237
??1PermissionDeniedException@Glacier2@@UAE@XZ
??0CannotCreateSessionException@Glacier2@@QAE@XZ
??0PermissionDeniedException@Glacier2@@QAE@XZ
??0SessionNotExistException@Glacier2@@QAE@XZ
?ice_factory@SessionMetrics@IceMX@@SA?AV?$Handle@VValueFactory@Ice@@@IceInternal@@XZ
??1SessionNotExistException@Glacier2@@UAE@XZ
??1CannotCreateSessionException@Glacier2@@UAE@XZ
qcvalueaddproapi
?CreateInfoQryApi@CQCValueAddProApi@QCVALUEADDPROAPI@@SAPAV12@XZ
mfc140
ord14131
ord8931
ord9165
ord8438
ord14223
ord12526
ord7275
ord13996
ord3841
ord7090
ord481
ord13984
ord13756
ord2855
ord5588
ord6174
ord9038
ord3849
ord10924
ord10972
ord11214
ord9154
ord12727
ord5556
ord12518
ord11199
ord8355
ord7620
ord2840
ord13293
ord2556
ord12361
ord12601
ord4693
ord9438
ord2716
ord12905
ord12036
ord1126
ord4129
ord4080
ord14425
ord5356
ord5347
ord10381
ord10203
ord10670
ord11086
ord11087
ord9318
ord11689
ord9933
ord9169
ord305
ord5744
ord3689
ord4468
ord13475
ord10986
ord6471
ord3142
ord4213
ord8703
ord2988
ord3864
ord1068
ord9085
ord2204
ord2383
ord2387
ord12706
ord4639
ord4161
ord4656
ord5096
ord14334
ord2003
ord5826
ord13584
ord8031
ord8718
ord13407
ord5814
ord13582
ord9320
ord7452
ord7406
ord998
ord7962
ord12870
ord10384
ord4582
ord12191
ord1471
ord2532
ord8934
ord11182
ord10969
ord8999
ord10519
ord11117
ord11877
ord11880
ord11878
ord11879
ord6283
ord10948
ord12159
ord4869
ord6354
ord3232
ord6222
ord5021
ord13165
ord13166
ord4100
ord1922
ord4478
ord2592
ord9210
ord3049
ord9182
ord9146
ord985
ord13884
ord13200
ord1461
ord14332
ord3949
ord3796
ord3797
ord3801
ord3688
ord3789
ord4476
ord358
ord7782
ord6464
ord3140
ord4210
ord1064
ord9083
ord7035
ord7346
ord914
ord11280
ord1406
ord7592
ord7347
ord926
ord10447
ord1409
ord12160
ord7593
ord7385
ord6814
ord3253
ord3358
ord4230
ord1451
ord9095
ord7607
ord6092
ord3856
ord11028
ord4477
ord500
ord12695
ord6925
ord1140
ord12685
ord975
ord1448
ord2166
ord5059
ord498
ord6302
ord12294
ord14520
ord2880
ord1882
ord12686
ord1885
ord12555
ord12585
ord6274
ord6562
ord3184
ord6996
ord4215
ord8704
ord2989
ord3866
ord14487
ord2751
ord1177
ord9088
ord13859
ord12800
ord11528
ord3627
ord14154
ord12620
ord3169
ord5017
ord5023
ord5018
ord6105
ord1783
ord5910
ord13625
ord13634
ord5915
ord13632
ord5914
ord2555
ord4486
ord5931
ord12948
ord8172
ord5348
ord4578
ord12024
ord11442
ord10353
ord9258
ord11487
ord13378
ord754
ord3210
ord13555
ord6241
ord13723
ord13983
ord13721
ord1300
ord1848
ord7108
ord515
ord2063
ord10789
ord12404
ord12121
ord8359
ord14503
ord11378
ord9171
ord9195
ord12046
ord7882
ord1150
ord2053
ord5726
ord11456
ord9161
ord9673
ord11742
ord11450
ord8790
ord3836
ord11747
ord9133
ord11631
ord7472
ord2291
ord789
ord7281
ord2125
ord8513
ord11907
ord4789
ord3686
ord5858
ord5155
ord13278
ord3888
ord13732
ord8070
ord3005
ord14238
ord6104
ord7619
ord12163
ord1000
ord1389
ord890
ord13234
ord6533
ord1529
ord1650
ord2381
ord6195
ord13681
ord2759
ord9213
ord9166
ord13011
ord1106
ord450
ord3946
ord2518
ord6460
ord2520
ord2165
ord266
ord265
ord1507
ord7461
ord9192
ord12116
ord462
ord7078
ord1111
ord2298
ord2210
ord12074
ord6193
ord13677
ord2758
ord9167
ord1109
ord8997
ord10963
ord11343
ord10421
ord4084
ord3395
ord3396
ord3159
ord3298
ord3295
ord10207
ord8173
ord14699
ord10237
ord10239
ord10238
ord10236
ord10240
ord5631
ord11671
ord11672
ord9096
ord12032
ord3830
ord3825
ord11881
ord14502
ord8922
ord6947
ord10950
ord3259
ord13798
ord12205
ord12201
ord1717
ord1739
ord1765
ord1751
ord1772
ord4920
ord4987
ord4932
ord4950
ord4944
ord4938
ord4997
ord4981
ord4926
ord5003
ord4958
ord4896
ord4911
ord4972
ord4493
ord5769
ord9647
ord4485
ord3050
ord14510
ord7887
ord14508
ord6848
ord11663
ord13628
ord5911
ord14054
ord5401
ord2680
ord12067
ord2799
ord8420
ord3933
ord3363
ord3364
ord3258
ord12111
ord5228
ord5528
ord5739
ord9305
ord5504
ord5231
ord5390
ord5210
ord7687
ord7688
ord7677
ord5388
ord8182
ord6463
ord3874
ord6540
ord2241
ord4807
ord1044
ord316
ord8146
ord5861
ord1661
ord1509
ord1698
ord7641
ord5250
ord7988
ord7963
ord7910
ord4581
ord1469
ord994
ord6832
ord1909
ord6507
ord953
ord8429
ord7618
ord8347
ord12190
ord10383
ord12869
ord12806
ord7961
ord4450
ord8285
ord5336
ord10099
ord10096
ord2484
ord12485
ord12484
ord14509
ord7886
ord14507
ord9353
ord4143
ord4082
ord12888
ord7905
ord12189
ord11972
ord2027
ord11928
ord11927
ord1860
ord14380
ord12474
ord7964
ord14581
ord6322
ord14583
ord6324
ord14582
ord6323
ord13189
ord13830
ord8421
ord1070
ord366
ord3844
ord5894
ord12182
ord8180
ord12194
ord12162
ord5742
ord10202
ord8426
ord2986
ord14421
ord3808
ord14328
ord301
ord14461
ord2022
ord983
ord7783
ord8322
ord12863
ord4655
ord1692
kernel32
lstrlenA
CreateDirectoryA
GetFileAttributesA
CreateMutexA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetTickCount
InitializeCriticalSection
QueryPerformanceCounter
lstrcpynA
QueryPerformanceFrequency
MulDiv
CreateEventA
WaitForSingleObject
SetEvent
CloseHandle
Sleep
GetCurrentThreadId
OpenEventA
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
GetProcAddress
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
DeleteCriticalSection
InitializeCriticalSectionEx
GetStartupInfoW
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringW
InitOnceBeginInitialize
InitOnceComplete
GetLastError
GetCurrentDirectoryA
user32
GetSysColor
DrawFrameControl
IsZoomed
GetSystemMetrics
InvalidateRect
GetWindow
CallWindowProcA
BeginDeferWindowPos
GetWindowRect
EndDeferWindowPos
SetCapture
ReleaseCapture
DrawTextA
OffsetRect
GetClientRect
AdjustWindowRectEx
SetCursor
ClientToScreen
WindowFromPoint
DeferWindowPos
CopyRect
SetRect
IntersectRect
UnionRect
SubtractRect
PtInRect
GetWindowLongA
IsWindow
PostMessageA
LoadIconW
EnableWindow
SendMessageA
SetWindowLongA
LoadCursorA
DestroyCursor
UpdateWindow
RedrawWindow
GetParent
SetCursorPos
GetFocus
SetTimer
KillTimer
PostQuitMessage
GetAncestor
FrameRect
LoadBitmapA
AppendMenuA
GetSystemMenu
GetDesktopWindow
ReleaseDC
GetDC
GetDlgCtrlID
PostThreadMessageA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
ShowScrollBar
FillRect
gdi32
GetObjectA
GetCurrentObject
DeleteDC
CreateCompatibleBitmap
SetBkMode
GetDeviceCaps
CreateDIBSection
SetPixel
DeleteObject
CreatePen
Rectangle
BitBlt
GetTextExtentPoint32A
CreateCompatibleDC
SelectObject
CreateFontIndirectA
CreateFontA
CreateSolidBrush
shell32
ShellExecuteExA
uxtheme
OpenThemeData
CloseThemeData
DrawThemeBackground
gdiplus
GdiplusShutdown
imm32
ImmAssociateContext
msvcp140
??0facet@locale@std@@IAE@I@Z
?_Xlength_error@std@@YAXPBD@Z
_Thrd_join
_Thrd_id
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_broadcast
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPBD@Z
_Mtx_trylock
_Thrd_detach
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
??0task_continuation_context@Concurrency@@AAE@XZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
_Cnd_unregister_at_thread_exit
_Cnd_register_at_thread_exit
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?id@?$collate@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?is@?$ctype@D@std@@QBE_NFD@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
??1facet@locale@std@@MAE@XZ
?_Throw_C_error@std@@YAXH@Z
??Bid@locale@std@@QAEIXZ
?c_str@?$_Yarn@D@std@@QBEPBDXZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
_Strxfrm
?_Throw_Cpp_error@std@@YAXH@Z
_Strcoll
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Xbad_alloc@std@@YAXXZ
?_Xbad_function_call@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
hxdbf
?GetMacAddress@HeObject@@SA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetHostIp@HeObject@@SA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PADH@Z
?CheckAU@HeObject@@SA_NPBD@Z
?GetDiskInfo@HeObject@@SA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?GetMacKey@HeObject@@SA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@PBD@Z
?GetDiskSerial@HeObject@@SA?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
ws2_32
WSAStartup
vcruntime140
memcmp
__std_exception_destroy
_CxxThrowException
memcpy
memmove
_except_handler4_common
__current_exception_context
__current_exception
__std_terminate
memset
__RTDynamicCast
__CxxFrameHandler3
strchr
_purecall
memchr
__std_exception_copy
api-ms-win-crt-heap-l1-1-0
_set_new_mode
realloc
free
malloc
api-ms-win-crt-runtime-l1-1-0
_beginthreadex
_controlfp_s
_invalid_parameter_noinfo_noreturn
_c_exit
exit
abort
_exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
terminate
_set_app_type
_seh_filter_exe
_errno
_register_thread_local_exe_atexit_callback
_cexit
_crt_atexit
_invalid_parameter_noinfo
_register_onexit_function
_initialize_onexit_table
_configure_narrow_argv
_initialize_narrow_environment
api-ms-win-crt-math-l1-1-0
__setusermatherr
_libm_sse2_sqrt_precise
api-ms-win-crt-convert-l1-1-0
atof
atoi
mbstowcs_s
wcstombs_s
strtod
atoll
api-ms-win-crt-utility-l1-1-0
rand
srand
api-ms-win-crt-time-l1-1-0
_time64
_localtime64_s
strftime
api-ms-win-crt-string-l1-1-0
strcpy_s
api-ms-win-crt-stdio-l1-1-0
setvbuf
fwrite
_fseeki64
fsetpos
fputc
fgetpos
fgetc
fflush
fclose
_get_stream_buffer_pointers
__stdio_common_vsprintf
__p__commode
_set_fmode
fread
ungetc
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
_setmbcp
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 238KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ