OPENSSL_Applink
Static task
static1
Behavioral task
behavioral1
Sample
68a79f52cb489bba5957cf47eba836e31b6c431a0d3ab49dd96b9fc89bf65f77.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
68a79f52cb489bba5957cf47eba836e31b6c431a0d3ab49dd96b9fc89bf65f77.exe
Resource
win10v2004-20231023-en
General
-
Target
68a79f52cb489bba5957cf47eba836e31b6c431a0d3ab49dd96b9fc89bf65f77
-
Size
7.4MB
-
MD5
39f107001df286f99c04a615f88b0293
-
SHA1
7893c7d71772b4fd793b653bd5bf697f55083c4b
-
SHA256
68a79f52cb489bba5957cf47eba836e31b6c431a0d3ab49dd96b9fc89bf65f77
-
SHA512
b5b3770ce98cc4d18b9a77d9dfda165cd5c6d7b05181f9ac03b34654514f646739598aede1b7d159a666c67b4dc719c99b9ed2d84707502a5f61c52c93f221c8
-
SSDEEP
49152:VJ71/w+Vx9d7n+9S7m9m9msg2jWHPmhLxB1BUrzrg4bpOfCzDx6jO/WIjRJYfToP:x5nESlqrzrgh6rYfT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68a79f52cb489bba5957cf47eba836e31b6c431a0d3ab49dd96b9fc89bf65f77
Files
-
68a79f52cb489bba5957cf47eba836e31b6c431a0d3ab49dd96b9fc89bf65f77.exe windows:6 windows x64
16572ccea3de3e9039ab63e2a912f92c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
libcrypto-3-x64
EVP_sha512
BIO_free
BIO_new_mem_buf
X509_free
BIO_set_callback_arg
BIO_get_callback_arg
BIO_set_callback_ex
ERR_error_string_n
OPENSSL_init_crypto
OSSL_PARAM_construct_utf8_string
OSSL_PARAM_construct_end
EVP_PKEY_free
EVP_PKEY_CTX_new_from_name
EVP_PKEY_CTX_free
EVP_PKEY_CTX_set_params
EVP_PKEY_keygen_init
EVP_PKEY_generate
ERR_get_error
ERR_get_error_all
ERR_error_string
EVP_MD_CTX_new
EVP_MD_CTX_free
EVP_DigestInit_ex
EVP_DigestUpdate
EVP_DigestFinal_ex
EVP_sha256
EVP_MD_CTX_reset
X509_STORE_set_flags
EVP_sha1
EVP_CIPHER_get_iv_length
EVP_DecryptInit
EVP_DecryptUpdate
EVP_DecryptFinal_ex
EVP_CIPHER_CTX_new
OSSL_PROVIDER_available
OSSL_PROVIDER_unload
EVP_CIPHER_CTX_free
EVP_CIPHER_CTX_set_padding
EVP_aes_128_ecb
OSSL_PROVIDER_load
EVP_aes_128_cbc
EVP_default_properties_enable_fips
EVP_default_properties_is_fips_enabled
PEM_read_PUBKEY
EVP_aes_128_cfb1
EVP_aes_128_cfb8
PEM_read_bio_PUBKEY
EVP_PKEY_CTX_set_rsa_padding
EVP_aes_128_cfb128
EVP_aes_128_ofb
EVP_aes_192_ecb
EVP_aes_192_cbc
EVP_aes_192_cfb1
EVP_aes_192_cfb8
EVP_aes_192_cfb128
EVP_aes_192_ofb
EVP_aes_256_ecb
EVP_aes_256_cbc
EVP_aes_256_cfb1
EVP_PKEY_encrypt
EVP_aes_256_cfb8
EVP_aes_256_cfb128
EVP_aes_256_ofb
X509_STORE_load_locations
PKCS5_PBKDF2_HMAC
EVP_PKEY_CTX_new_id
EVP_PKEY_derive_init
EVP_PKEY_derive
EVP_PKEY_encrypt_init
EVP_PKEY_CTX_new
EVP_PKEY_CTX_set_hkdf_md
EVP_PKEY_get_size
EVP_PKEY_CTX_set1_hkdf_salt
EVP_PKEY_CTX_set1_hkdf_key
ERR_clear_error
X509_VERIFY_PARAM_set1_host
EVP_PKEY_CTX_add1_hkdf_info
X509_VERIFY_PARAM_set1_ip_asc
libssl-3-x64
SSL_set_fd
SSL_get_fd
SSL_CTX_load_verify_locations
SSL_clear
SSL_CTX_set_default_verify_paths
TLS_client_method
TLS_server_method
SSL_set_options
SSL_CTX_ctrl
SSL_CTX_get0_param
SSL_CTX_check_private_key
SSL_CTX_set_verify
SSL_CTX_use_certificate_chain_file
SSL_CTX_use_PrivateKey_file
SSL_CTX_set_ciphersuites
SSL_CTX_get_cert_store
SSL_CTX_free
SSL_CTX_new
SSL_CTX_set_cipher_list
SSL_CTX_set0_tmp_dh_pkey
SSL_CTX_set_options
SSL_get_wbio
OPENSSL_init_ssl
SSL_SESSION_set_timeout
SSL_CTX_get_security_level
SSL_get_session
SSL_set_quiet_shutdown
SSL_shutdown
SSL_get_error
SSL_ctrl
SSL_write
SSL_read
SSL_connect
SSL_new
SSL_pending
SSL_set_session
SSL_get_verify_result
SSL_free
SSL_get1_peer_certificate
SSL_SESSION_free
SSL_SESSION_is_resumable
SSL_CIPHER_get_name
SSL_get_current_cipher
PEM_read_bio_SSL_SESSION
SSL_get_rbio
ws2_32
WSAIoctl
getnameinfo
setsockopt
send
select
__WSAFDIsSet
htonl
getpeername
ioctlsocket
recv
WSAStartup
WSACleanup
ntohs
getservbyname
bind
closesocket
getsockname
getsockopt
socket
WSASetLastError
WSAGetLastError
getaddrinfo
freeaddrinfo
shutdown
connect
kernel32
ReleaseSRWLockExclusive
InitOnceBeginInitialize
InitOnceComplete
GetCPInfoExW
GetFileInformationByHandleEx
AreFileApisANSI
SetFileInformationByHandle
GetFileAttributesExW
FindFirstFileW
FindClose
CreateFileW
CreateDirectoryW
GetLocaleInfoEx
WakeAllConditionVariable
SleepConditionVariableSRW
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetLogicalDrives
CancelIo
GetOverlappedResult
QueryPerformanceCounter
DisconnectNamedPipe
GetCurrentProcess
WriteFile
ReadFile
GetFileAttributesExA
FlushFileBuffers
GetStdHandle
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
GetSystemDirectoryA
CreateEventA
GetLocaleInfoA
GetFullPathNameA
GetConsoleCP
WaitNamedPipeA
OpenFileMappingA
OpenMutexA
UnmapViewOfFile
MapViewOfFile
GetCurrentProcessId
OpenEventA
ReleaseMutex
SetNamedPipeHandleState
CreateFileA
LoadLibraryExA
InitializeCriticalSection
lstrcmpW
CreateIoCompletionPort
FormatMessageA
WideCharToMultiByte
FreeLibrary
GetModuleHandleW
CreateProcessW
DeleteCriticalSection
LocalFree
GetProcAddress
K32EnumProcesses
QueueUserAPC
LoadLibraryW
CloseHandle
Process32FirstW
TerminateThread
SetEvent
Process32NextW
GetLastError
FormatMessageW
Sleep
MultiByteToWideChar
CreateToolhelp32Snapshot
AcquireSRWLockExclusive
GetSystemTimeAsFileTime
PeekNamedPipe
PostQueuedCompletionStatus
OpenProcess
GetCurrentThreadId
WaitForSingleObject
GetQueuedCompletionStatus
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
K32GetModuleFileNameExW
WaitForMultipleObjects
GetModuleFileNameW
TerminateProcess
EnterCriticalSection
SetLastError
SetWaitableTimer
GetWindowsDirectoryA
user32
ShowWindow
DispatchMessageW
AdjustWindowRect
SetFocus
TranslateMessage
RegisterClassExW
GetClientRect
PostQuitMessage
UpdateWindow
LoadImageW
GetMessageW
GetWindowLongPtrW
SetWindowTextW
GetSystemMetrics
CreateWindowExW
SetWindowLongPtrW
SetWindowPos
DestroyWindow
PostMessageW
DefWindowProcW
SetWindowLongW
GetWindowLongW
advapi32
RegEnumValueA
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
shell32
SHGetFolderPathW
SHGetKnownFolderPath
ole32
CoInitializeEx
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
cpr
?SetOption@Session@cpr@@QEAAXAEBVTimeout@2@@Z
??0Session@cpr@@QEAA@XZ
??1EncodedAuthentication@cpr@@UEAA@XZ
?SetOption@Session@cpr@@QEAAXAEBVUrl@2@@Z
?Get@Session@cpr@@QEAA?AVResponse@2@XZ
msvcp140
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
_Mtx_unlock
_Thrd_join
_Xtime_get_ticks
_Query_perf_counter
_Thrd_id
_Thrd_sleep
_Cnd_do_broadcast_at_thread_exit
?id@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?good@ios_base@std@@QEBA_NXZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
_Strcoll
_Mtx_init_in_situ
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Mtx_lock
?__ExceptionPtrDestroy@@YAXPEAX@Z
_Mtx_destroy_in_situ
?_Syserror_map@std@@YAPEBDH@Z
?id@?$collate@D@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPEBD@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?_Xbad_function_call@std@@YAXXZ
?_Winerror_map@std@@YAHH@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xout_of_range@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Xbad_alloc@std@@YAXXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?_Throw_C_error@std@@YAXH@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exceptions@std@@YAHXZ
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAO@Z
?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_Getname@_Locinfo@std@@QEBAPEBDXZ
??0_Locinfo@std@@QEAA@HPEBD@Z
?_Xruntime_error@std@@YAXPEBD@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
?_Random_device@std@@YAIXZ
_Mbrtowc
?__ExceptionPtrCreate@@YAXPEAX@Z
_Strxfrm
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
_Query_perf_frequency
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Throw_Cpp_error@std@@YAXH@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
shlwapi
PathFindFileNameW
PathCombineW
dnsapi
DnsQuery_A
DnsFree
secur32
InitializeSecurityContextW
AcquireCredentialsHandleA
FreeCredentialsHandle
CompleteAuthToken
DeleteSecurityContext
FreeContextBuffer
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_destroy
__current_exception
strrchr
strstr
__RTDynamicCast
memset
memchr
__std_type_info_name
memmove
memcpy
memcmp
_CxxThrowException
strchr
__std_terminate
_purecall
__std_type_info_compare
__std_exception_copy
__C_specific_handler
__current_exception_context
api-ms-win-crt-runtime-l1-1-0
system
_invalid_parameter_noinfo_noreturn
__fpe_flt_rounds
signal
terminate
abort
exit
_set_abort_behavior
_errno
_set_invalid_parameter_handler
strerror_s
_configure_narrow_argv
_register_thread_local_exe_atexit_callback
_c_exit
__p___argv
__p___argc
_initialize_narrow_environment
_exit
_initterm_e
_initterm
_get_initial_narrow_environment
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_beginthreadex
api-ms-win-crt-stdio-l1-1-0
_ftelli64
__stdio_common_vsprintf
__p__commode
fgetpos
_get_osfhandle
fwrite
setvbuf
puts
fputs
_sopen_dispatch
_write
_setmode
_read
_lseek
_close
ftell
fseek
fopen
_fileno
fgets
ferror
feof
ungetc
fsetpos
fputc
clearerr
_getcwd
__acrt_iob_func
fread
_fseeki64
_get_stream_buffer_pointers
fflush
__stdio_common_vfprintf
fclose
_set_fmode
fgetc
api-ms-win-crt-heap-l1-1-0
malloc
realloc
calloc
_set_new_mode
free
_callnewh
api-ms-win-crt-string-l1-1-0
strncmp
strcmp
ispunct
tolower
strncpy
strtok_s
isspace
isdigit
strcat_s
toupper
_stricmp
strncat
_strdup
_strnicmp
api-ms-win-crt-math-l1-1-0
_fdsign
__setusermatherr
floor
ceilf
_ldsign
_dsign
_dclass
_fdclass
_ldclass
api-ms-win-crt-convert-l1-1-0
atoi
wcstol
strtod
strtol
strtoll
atol
strtoul
_strtoui64
_strtoi64
strtoull
api-ms-win-crt-time-l1-1-0
_localtime64_s
_tzset
api-ms-win-crt-filesystem-l1-1-0
_findnext64i32
_unlock_file
_findfirst64i32
_lock_file
_findclose
_umask
_stat64
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
localeconv
api-ms-win-crt-environment-l1-1-0
_putenv
getenv
api-ms-win-crt-utility-l1-1-0
rand
qsort
Exports
Exports
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ