Static task
static1
Behavioral task
behavioral1
Sample
aa58785c2e5907a58064baa128286827ea9db8746d6ab76ed3fe4b73459d5f49.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
aa58785c2e5907a58064baa128286827ea9db8746d6ab76ed3fe4b73459d5f49.exe
Resource
win10v2004-20230915-en
General
-
Target
aa58785c2e5907a58064baa128286827ea9db8746d6ab76ed3fe4b73459d5f49
-
Size
851KB
-
MD5
2ba80df9eecf7a5582125a829542624b
-
SHA1
62f8e6fb3e8499fc817f39d7010d3de24fb8cadc
-
SHA256
aa58785c2e5907a58064baa128286827ea9db8746d6ab76ed3fe4b73459d5f49
-
SHA512
e30338480196767223c246ac64b8ee28a37084297727f0556fa613aef63118b1cb3ca4a89cf620117950da2b85b8b3f2d24609abe39ec177863a31d84024be28
-
SSDEEP
6144:bE1AZloj+/mRhf9idIdnkIgcnSYJqrAzRCa7UDvcj6dVLwyJA3x4DsY75:o1AZ8+/xdqnkIdQQ6RLLZJAu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aa58785c2e5907a58064baa128286827ea9db8746d6ab76ed3fe4b73459d5f49
Files
-
aa58785c2e5907a58064baa128286827ea9db8746d6ab76ed3fe4b73459d5f49.exe windows:6 windows x64
91b449048a8fcf33c763a8a3ec66b525
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
miktex230900-web2c
?RunSystemCommand@Web2C@MiKTeX@@YAHPEBD@Z
miktex_uexit
miktex_web2c_get_output_directory
?RecordFileName@Web2C@MiKTeX@@YAXPEBDW4FileAccess@Core@2@@Z
miktex_zround
?GetSecondsAndMicros@Web2C@MiKTeX@@YAXPEAH0@Z
?GetCurrentFileName@Web2C@MiKTeX@@YAPEADXZ
miktex230900-ptexenc
ismultichr
iskanji1
set_guess_file_enc
set_enc_string
multistrlenshort
input_line2
multistrlen
fromBUFF
fromBUFFshort
toBUFF
toDVI
fromDVI
toJIS
nkf_open
nkf_close
ptenc_from_internal_enc_string_to_utf8
get_enc_string
enable_UPTEX
fputs2
iskanji2
enc_to_string
get_internal_enc
UCStoUTF8
ptenc_conv_first_line
setstdinenc
setinfileenc
putc2
toUCS
fromUCS
fromKUTEN
fromSJIS
fromEUC
is_internalUPTEX
is_terminalUTF8
fromJIS
miktex230900-kpathsea
miktex_kpathsea_set_program_name
miktex_kpse_def
miktex_concatn
miktex_kpathsea_absolute_p
miktex_kpathsea_dir_p
miktex_kpathsea_find_file
miktex_kpathsea_in_name_ok
miktex_kpse_def_inst
miktex_xbasename
miktex_xfclose
miktex230900-texmf
?IsSourceSpecialOn@TeXApp@TeXAndFriends@MiKTeX@@QEBA_NW4SourceSpecial@23@@Z
?MLTeXP@TeXApp@TeXAndFriends@MiKTeX@@QEBA_NXZ
?SourceSpecialsP@TeXApp@TeXAndFriends@MiKTeX@@QEBA_NXZ
?Write18P@TeXApp@TeXAndFriends@MiKTeX@@QEBA_NXZ
?MakeSrcSpecial@TeXApp@TeXAndFriends@MiKTeX@@QEBAHHH@Z
?RememberSourceInfo@TeXApp@TeXAndFriends@MiKTeX@@QEBAXHH@Z
?ETeXP@ETeXApp@TeXAndFriends@MiKTeX@@QEBA_NXZ
?GetTeXStringLength@TeXMFApp@TeXAndFriends@MiKTeX@@QEBAHH@Z
?GetWrite18Mode@TeXApp@TeXAndFriends@MiKTeX@@QEBA?AW4ShellCommandMode@Core@3@XZ
?GetTeXString@TeXMFApp@TeXAndFriends@MiKTeX@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HH@Z
?InvokeEditor@TeXMFApp@TeXAndFriends@MiKTeX@@QEBAXHHHHH@Z
?SetProgram@WebApp@TeXAndFriends@MiKTeX@@QEAAXPEAVProgramBase@C4P@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@111@Z
?SetInitFinalize@WebApp@TeXAndFriends@MiKTeX@@QEAAXPEAVIInitFinalize@23@@Z
?GetProgramName@WebApp@TeXAndFriends@MiKTeX@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?IAm@WebApp@TeXAndFriends@MiKTeX@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?AmI@WebApp@TeXAndFriends@MiKTeX@@QEBA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1ProgramBase@C4P@@UEAA@XZ
?SetParent@ProgramBase@C4P@@QEAAXPEAVApplication@App@MiKTeX@@@Z
??0ProgramBase@C4P@@QEAA@XZ
?InitializeBuffer@TeXMFApp@TeXAndFriends@MiKTeX@@QEBAXXZ
?MakeTeXString@TeXMFApp@TeXAndFriends@MiKTeX@@QEBAHPEBD@Z
?GetInteraction@TeXMFApp@TeXAndFriends@MiKTeX@@QEBAHXZ
?ParseFirstLineP@TeXMFApp@TeXAndFriends@MiKTeX@@QEBA_NXZ
?OpenMemoryDumpFile@TeXMFApp@TeXAndFriends@MiKTeX@@QEAA_NAEBVPathName@Util@3@PEAPEAU_iobuf@@PEAX_K_N@Z
?InitializeCharTables@TeXMFApp@TeXAndFriends@MiKTeX@@QEBAXXZ
?HaltOnErrorP@TeXMFApp@TeXAndFriends@MiKTeX@@QEBA_NXZ
?Enable8BitCharsP@TeXMFApp@TeXAndFriends@MiKTeX@@QEBA_NXZ
?CStyleErrorMessagesP@TeXMFApp@TeXAndFriends@MiKTeX@@QEBA_NXZ
?GetTcxFileName@TeXMFApp@TeXAndFriends@MiKTeX@@QEBA?AVPathName@Util@3@XZ
?GetDefaultMemoryDumpFileName@TeXMFApp@TeXAndFriends@MiKTeX@@QEBA?AVPathName@Util@3@XZ
?IsNewSource@TeXApp@TeXAndFriends@MiKTeX@@QEBA_NHH@Z
?CloseFile@WebAppInputLine@TeXAndFriends@MiKTeX@@QEAAXAEAUFileRoot@C4P@@@Z
?OpenOutputFile@WebAppInputLine@TeXAndFriends@MiKTeX@@QEAA_NAEAUFileRoot@C4P@@AEBVPathName@Util@3@_NAEAV673@@Z
?OpenInputFile@WebAppInputLine@TeXAndFriends@MiKTeX@@QEAA_NAEAUFileRoot@C4P@@AEBVPathName@Util@3@@Z
?InputLine@WebAppInputLine@TeXAndFriends@MiKTeX@@QEBA_NAEAUC4P_text@C4P@@_N@Z
?AllowFileName@WebAppInputLine@TeXAndFriends@MiKTeX@@QEAA_NAEBVPathName@Util@3@_N@Z
?GetFoundFileFq@WebAppInputLine@TeXAndFriends@MiKTeX@@QEBA?AVPathName@Util@3@XZ
?GetFoundFile@WebAppInputLine@TeXAndFriends@MiKTeX@@QEBA?AVPathName@Util@3@XZ
?OpenTFMFile@TeXAndFriends@MiKTeX@@YA_NPEAXAEBVPathName@Util@2@@Z
?WriteChar@ProgramBase@C4P@@AEAAXHPEAU_iobuf@@@Z
?Initialize@ProgramBase@C4P@@IEAAXPEBDHQEAPEAD@Z
?Finish@ProgramBase@C4P@@IEAAXXZ
?GetYear@ProgramBase@C4P@@IEAAIXZ
?GetMonth@ProgramBase@C4P@@IEAAIXZ
?GetMinute@ProgramBase@C4P@@IEAAIXZ
?GetHour@ProgramBase@C4P@@IEAAIXZ
?GetDay@ProgramBase@C4P@@IEAAIXZ
?GetCmdLine@ProgramBase@C4P@@IEAAPEBDXZ
?GetStdFilePtr@ProgramBase@C4P@@IEAAPEAUC4P_text@2@I@Z
?TheNameOfTheGame@WebApp@TeXAndFriends@MiKTeX@@UEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?OnTeXMFFinishJob@TeXMFApp@TeXAndFriends@MiKTeX@@UEAAXXZ
?TouchJobOutputFile@TeXMFApp@TeXAndFriends@MiKTeX@@UEBAXPEAU_iobuf@@@Z
?ProcessCommandLineOptions@TeXMFApp@TeXAndFriends@MiKTeX@@UEAAXXZ
?OnTeXMFStartJob@ETeXApp@TeXAndFriends@MiKTeX@@UEAAXXZ
?Finalize@ETeXApp@TeXAndFriends@MiKTeX@@UEAAXXZ
?BufferSizeExceeded@WebAppInputLine@TeXAndFriends@MiKTeX@@EEBAXXZ
?InputLineInternal@WebAppInputLine@TeXAndFriends@MiKTeX@@UEBA_KPEAU_iobuf@@PEAD1_K2AEAH@Z
?DecodeFileName@WebAppInputLine@TeXAndFriends@MiKTeX@@UEAA?AVPathName@Util@3@AEBV453@@Z
?Init@ETeXApp@TeXAndFriends@MiKTeX@@MEAAXAEAV?$vector@PEADV?$allocator@PEAD@std@@@std@@@Z
?AddOptions@ETeXApp@TeXAndFriends@MiKTeX@@MEAAXXZ
?ProcessOption@ETeXApp@TeXAndFriends@MiKTeX@@MEAA_NHAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1ETeXApp@TeXAndFriends@MiKTeX@@UEAA@XZ
??0ETeXApp@TeXAndFriends@MiKTeX@@QEAA@XZ
?SetFormatHandler@TeXApp@TeXAndFriends@MiKTeX@@QEAAXPEAVIFormatHandler@23@@Z
?GetFormatHandler@TeXApp@TeXAndFriends@MiKTeX@@QEBAPEAVIFormatHandler@23@XZ
?OnKeybordInterrupt@TeXMFApp@TeXAndFriends@MiKTeX@@SAXH@Z
?GetJobName@TeXMFApp@TeXAndFriends@MiKTeX@@UEBAHH@Z
?SetTeXMFMemoryHandler@TeXMFApp@TeXAndFriends@MiKTeX@@QEAAXPEAVITeXMFMemoryHandler@23@@Z
?SetStringHandler@TeXMFApp@TeXAndFriends@MiKTeX@@QEAAXPEAVIStringHandler@23@@Z
?SetErrorHandler@TeXMFApp@TeXAndFriends@MiKTeX@@QEAAXPEAVIErrorHandler@23@@Z
?EnableFeature@TeXMFApp@TeXAndFriends@MiKTeX@@QEAAXW4Feature@23@@Z
?IsInitProgram@TeXMFApp@TeXAndFriends@MiKTeX@@QEBA_NXZ
?GetUserParams@TeXMFApp@TeXAndFriends@MiKTeX@@QEBAAEAV?$unordered_map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HU?$hash@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@U?$equal_to@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@std@@@2@@std@@XZ
?GetTeXMFMemoryHandler@TeXMFApp@TeXAndFriends@MiKTeX@@QEBAPEAVITeXMFMemoryHandler@23@XZ
?GetStringHandler@TeXMFApp@TeXAndFriends@MiKTeX@@QEBAPEAVIStringHandler@23@XZ
?CloseFileInternal@WebAppInputLine@TeXAndFriends@MiKTeX@@UEAAXPEAU_iobuf@@@Z
?TryOpenFileInternal@WebAppInputLine@TeXAndFriends@MiKTeX@@UEAAPEAU_iobuf@@AEBVPathName@Util@3@W4FileMode@Core@3@W4FileAccess@83@@Z
?OpenFileInternal@WebAppInputLine@TeXAndFriends@MiKTeX@@UEAAPEAU_iobuf@@AEBVPathName@Util@3@W4FileMode@Core@3@W4FileAccess@83@@Z
?SetInputOutput@WebAppInputLine@TeXAndFriends@MiKTeX@@QEAAXPEAVIInputOutput@23@@Z
?SetCharacterConverter@WebAppInputLine@TeXAndFriends@MiKTeX@@QEAAXPEAVICharacterConverter@23@@Z
?GetInputOutput@WebAppInputLine@TeXAndFriends@MiKTeX@@QEBAPEAVIInputOutput@23@XZ
?GetTeXStringStart@TeXMFApp@TeXAndFriends@MiKTeX@@QEBAHH@Z
?AddOption@WebApp@TeXAndFriends@MiKTeX@@IEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0HH0PEAXD@Z
miktex230900-app
?GetApplication@Application@App@MiKTeX@@SAPEAV123@XZ
?GetQuietFlag@Application@App@MiKTeX@@QEBA_NXZ
?Trace@Application@App@MiKTeX@@UEAA_NAEBUTraceMessage@TraceCallback@03@@Z
?OnProgress@Application@App@MiKTeX@@UEAA_NW4Notification@Packages@3@@Z
?OnRetryableError@Application@App@MiKTeX@@UEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ReportLine@Application@App@MiKTeX@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?TryCreateFile@Application@App@MiKTeX@@UEAA_NAEBVPathName@Util@3@W4FileType@Core@3@@Z
?InstallPackage@Application@App@MiKTeX@@UEAA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVPathName@Util@3@AEAV673@@Z
?ShowLibraryVersions@Application@App@MiKTeX@@UEBAXXZ
?Finalize2@Application@App@MiKTeX@@UEAAXH@Z
?Init@Application@App@MiKTeX@@UEAAXAEBVInitInfo@Session@Core@3@AEAV?$vector@PEBDV?$allocator@PEBD@std@@@std@@@Z
?Init@Application@App@MiKTeX@@UEAAXAEBVInitInfo@Session@Core@3@AEAV?$vector@PEADV?$allocator@PEAD@std@@@std@@@Z
?Init@Application@App@MiKTeX@@UEAAXAEBVInitInfo@Session@Core@3@@Z
?Init@Application@App@MiKTeX@@UEAAXAEAV?$vector@PEBDV?$allocator@PEBD@std@@@std@@@Z
?Init@Application@App@MiKTeX@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Init@Application@App@MiKTeX@@UEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?ExamineArgs@Application@App@MiKTeX@@UEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAV?$vector@PEBDV?$allocator@PEBD@std@@@5@AEAVInitInfo@Session@Core@3@@Z
?ExamineArgs@Application@App@MiKTeX@@UEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEAV?$vector@PEADV?$allocator@PEAD@std@@@5@AEAVInitInfo@Session@Core@3@@Z
?GetSession@Application@App@MiKTeX@@QEBA?AV?$shared_ptr@VSession@Core@MiKTeX@@@std@@XZ
?Sorry@Application@App@MiKTeX@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVexception@5@@Z
?Sorry@Application@App@MiKTeX@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVMiKTeXException@Core@3@@Z
?GetDependencies@Runtime@vi@App@MiKTeX@@SA?AV?$vector@ULibraryVersion@Core@MiKTeX@@V?$allocator@ULibraryVersion@Core@MiKTeX@@@std@@@std@@XZ
?GetVersion@Runtime@vi@App@MiKTeX@@SA?AUVersionNumber@Core@4@XZ
miktex230900-core
miktex_core_strdup
miktex_core_realloc
miktex_core_malloc
?GetMiKTeXBannerString@Utils@Core@MiKTeX@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?FatalCrtError@Session@Core@MiKTeX@@SAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HAEBVKVMAP@MiKTeXException@23@AEBUSourceLocation@23@@Z
?Realloc@Debug@MiKTeX@@YAPEAXPEAX_KAEBUSourceLocation@Core@2@@Z
?FatalMiKTeXError@Session@Core@MiKTeX@@SAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@000AEBVKVMAP@MiKTeXException@23@AEBUSourceLocation@23@@Z
?Save@MiKTeXException@Core@MiKTeX@@QEBA_NXZ
??0SourceLocation@Core@MiKTeX@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0H@Z
?ToString@VersionNumber@Core@MiKTeX@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??0ConsoleCodePageSwitcher@Core@MiKTeX@@QEAA@XZ
??1ConsoleCodePageSwitcher@Core@MiKTeX@@UEAA@XZ
miktex230900-md5
md5_init
md5_append
md5_finish
miktex230900-trace
?Open@TraceStream@Trace@MiKTeX@@SA?AV?$unique_ptr@VTraceStream@Trace@MiKTeX@@U?$default_delete@VTraceStream@Trace@MiKTeX@@@std@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@PEAVTraceCallback@23@@Z
miktex230900-zlib
gzprintf
gzclose
gzopen
miktex230900-utf8wrap
miktex_utf8_rename
miktex_utf8__access
miktex_utf8_getenv
miktex_utf8__stat64i32
miktex_utf8_fopen
miktex_utf8__stat64
miktex_utf8_remove
miktex230900-util
?WideCharToUTF8@StringUtil@Util@MiKTeX@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEB_W@Z
?CopyString@StringUtil@Util@MiKTeX@@SA_KPEAD_KPEBD@Z
kernel32
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
VerifyVersionInfoW
VerSetConditionMask
msvcp140
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xout_of_range@std@@YAXPEBD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
vcruntime140
memcmp
_purecall
__RTDynamicCast
memmove
memcpy
__current_exception_context
__current_exception
__C_specific_handler
memset
strchr
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__std_type_info_destroy_list
__std_terminate
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_seh_filter_exe
abort
_invalid_parameter_noinfo
_configure_wide_argv
_initialize_wide_environment
_errno
_initterm
_initterm_e
_exit
exit
__p___argc
__p___wargv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
signal
_set_app_type
_invalid_parameter_noinfo_noreturn
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_get_initial_wide_environment
api-ms-win-crt-heap-l1-1-0
free
malloc
_callnewh
_set_new_mode
api-ms-win-crt-convert-l1-1-0
_strtoui64
strtol
api-ms-win-crt-math-l1-1-0
__setusermatherr
ceilf
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
ungetc
__stdio_common_vfprintf
fwrite
fread
fputs
fflush
ferror
feof
getc
__acrt_iob_func
fclose
fseek
__stdio_common_vsprintf
api-ms-win-crt-time-l1-1-0
strftime
_time64
_localtime64
_gmtime64
api-ms-win-crt-locale-l1-1-0
__initialize_lconv_for_unsigned_char
_configthreadlocale
Sections
.text Size: 664KB - Virtual size: 663KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 673KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 373B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ