97100d900bf8fa2c4f7eeb43970de040f21fc1b4def68e9bdab99e3c17075307[.]zip[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

97100d900bf8fa2c4f7eeb43970de040f21fc1b4def68e9bdab99e3c17075307.zip.zip
Size

6.7MB
MD5

0ad578eb4e3ca0fb9f925cccdf6c7ecd
SHA1

db5c9d56d9d5a2ae5b8d262cdf2d5f3a82379701
SHA256

428ead95ce69dd961d50b3ce7aae95886b9bb895073e0666b37e5e9a4c814a1a
SHA512

410f058a11d5005760268927bbff12bcf8de3fb5c95a330e0b58aa0b9f39b2201ddc2ca211ffc838cbfe2e7a814e1f2f673136a91e354c43df3eb1a2d7ad2ad6
SSDEEP

98304:6S1aMOfcTBZe1ItlMhEKenOB0gYrXsrq1HbCZXA2FySrWHpfDZQbfDL:64OfFItlCBeC0r2XVFy4cGb7L

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack002/libgmp-10.dll
unpack002/libhwloc-15.dll
unpack002/prime95.exe

Files

97100d900bf8fa2c4f7eeb43970de040f21fc1b4def68e9bdab99e3c17075307.zip.zip
.zip

Password: infected
97100d900bf8fa2c4f7eeb43970de040f21fc1b4def68e9bdab99e3c17075307.zip
.zip
libgmp-10.dll
.dll windows:4 windows x64

0367c23aafa70f57dd31e90949ad6d88

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
ferror
fgetc
fprintf
fputc
fread
free
fscanf
fwrite
getc
islower
isspace
isxdigit
localeconv
malloc
memcpy
memmove
memset
printf
putc
putchar
puts
raise
realloc
signal
sprintf
sscanf
strchr
strlen
strncmp
strstr
strtol
ungetc
vfprintf
vsprintf

Exports

Exports

__gmp_0
__gmp_allocate_func
__gmp_asprintf
__gmp_asprintf_final
__gmp_asprintf_funs
__gmp_asprintf_memory
__gmp_asprintf_reps
__gmp_assert_fail
__gmp_assert_header
__gmp_binvert_limb_table
__gmp_bits_per_limb
__gmp_default_allocate
__gmp_default_fp_limb_precision
__gmp_default_free
__gmp_default_reallocate
__gmp_digit_value_tab
__gmp_divide_by_zero
__gmp_doprnt
__gmp_doprnt_integer
__gmp_doprnt_mpf2
__gmp_doscan
__gmp_errno
__gmp_exception
__gmp_extract_double
__gmp_fac2cnt_table
__gmp_fib_table
__gmp_fprintf
__gmp_fprintf_funs
__gmp_free_func
__gmp_fscanf
__gmp_fscanf_funs
__gmp_get_memory_functions
__gmp_init_primesieve
__gmp_invalid_operation
__gmp_jacobi_table
__gmp_junk
__gmp_limbroots_table
__gmp_mt_recalc_buffer
__gmp_nextprime
__gmp_odd2fac_table
__gmp_oddfac_table
__gmp_primesieve
__gmp_printf
__gmp_randclear
__gmp_randclear_mt
__gmp_randget_mt
__gmp_randinit
__gmp_randinit_default
__gmp_randinit_lc_2exp
__gmp_randinit_lc_2exp_size
__gmp_randinit_mt
__gmp_randinit_mt_noseed
__gmp_randinit_set
__gmp_randiset_mt
__gmp_rands
__gmp_rands_initialized
__gmp_randseed
__gmp_randseed_ui
__gmp_reallocate_func
__gmp_replacement_vsnprintf
__gmp_scanf
__gmp_set_memory_functions
__gmp_snprintf
__gmp_snprintf_funs
__gmp_sprintf
__gmp_sprintf_funs
__gmp_sqrt_of_negative
__gmp_sscanf
__gmp_sscanf_funs
__gmp_tmp_reentrant_alloc
__gmp_tmp_reentrant_free
__gmp_urandomb_ui
__gmp_urandomm_ui
__gmp_vasprintf
__gmp_version
__gmp_vfprintf
__gmp_vfscanf
__gmp_vprintf
__gmp_vscanf
__gmp_vsnprintf
__gmp_vsprintf
__gmp_vsscanf
__gmpf_abs
__gmpf_add
__gmpf_add_ui
__gmpf_ceil
__gmpf_clear
__gmpf_clears
__gmpf_cmp
__gmpf_cmp_d
__gmpf_cmp_si
__gmpf_cmp_ui
__gmpf_cmp_z
__gmpf_div
__gmpf_div_2exp
__gmpf_div_ui
__gmpf_dump
__gmpf_eq
__gmpf_fits_sint_p
__gmpf_fits_slong_p
__gmpf_fits_sshort_p
__gmpf_fits_uint_p
__gmpf_fits_ulong_p
__gmpf_fits_ushort_p
__gmpf_floor
__gmpf_get_d
__gmpf_get_d_2exp
__gmpf_get_default_prec
__gmpf_get_prec
__gmpf_get_si
__gmpf_get_str
__gmpf_get_ui
__gmpf_init
__gmpf_init2
__gmpf_init_set
__gmpf_init_set_d
__gmpf_init_set_si
__gmpf_init_set_str
__gmpf_init_set_ui
__gmpf_inits
__gmpf_inp_str
__gmpf_integer_p
__gmpf_mul
__gmpf_mul_2exp
__gmpf_mul_ui
__gmpf_neg
__gmpf_out_str
__gmpf_pow_ui
__gmpf_random2
__gmpf_reldiff
__gmpf_set
__gmpf_set_d
__gmpf_set_default_prec
__gmpf_set_prec
__gmpf_set_prec_raw
__gmpf_set_q
__gmpf_set_si
__gmpf_set_str
__gmpf_set_ui
__gmpf_set_z
__gmpf_size
__gmpf_sqrt
__gmpf_sqrt_ui
__gmpf_sub
__gmpf_sub_ui
__gmpf_swap
__gmpf_trunc
__gmpf_ui_div
__gmpf_ui_sub
__gmpf_urandomb
__gmpn_add
__gmpn_add_1
__gmpn_add_err1_n
__gmpn_add_err2_n
__gmpn_add_err3_n
__gmpn_add_n
__gmpn_add_n_atom
__gmpn_add_n_bobcat
__gmpn_add_n_core2
__gmpn_add_n_coreisbr
__gmpn_add_n_init
__gmpn_add_n_pentium4
__gmpn_add_n_sub_n
__gmpn_add_n_x86_64
__gmpn_add_nc_atom
__gmpn_add_nc_bobcat
__gmpn_add_nc_core2
__gmpn_add_nc_coreisbr
__gmpn_add_nc_pentium4
__gmpn_add_nc_x86_64
__gmpn_addlsh1_n
__gmpn_addlsh1_n_atom
__gmpn_addlsh1_n_bd1
__gmpn_addlsh1_n_core2
__gmpn_addlsh1_n_coreisbr
__gmpn_addlsh1_n_init
__gmpn_addlsh1_n_pentium4
__gmpn_addlsh1_n_x86_64
__gmpn_addlsh1_nc_atom
__gmpn_addlsh1_nc_bd1
__gmpn_addlsh1_nc_coreisbr
__gmpn_addlsh2_n
__gmpn_addlsh2_n_atom
__gmpn_addlsh2_n_core2
__gmpn_addlsh2_n_coreisbr
__gmpn_addlsh2_n_init
__gmpn_addlsh2_n_pentium4
__gmpn_addlsh2_n_x86_64
__gmpn_addlsh2_nc_coreisbr
__gmpn_addlsh_n
__gmpn_addmul_1
__gmpn_addmul_1_atom
__gmpn_addmul_1_bd1
__gmpn_addmul_1_bobcat
__gmpn_addmul_1_core2
__gmpn_addmul_1_coreihwl
__gmpn_addmul_1_coreinhm
__gmpn_addmul_1_coreisbr
__gmpn_addmul_1_init
__gmpn_addmul_1_x86_64
__gmpn_addmul_1c_core2
__gmpn_addmul_2
__gmpn_addmul_2_atom
__gmpn_addmul_2_coreihwl
__gmpn_addmul_2_coreisbr
__gmpn_addmul_2_init
__gmpn_addmul_2_x86_64
__gmpn_and_n
__gmpn_andn_n
__gmpn_bases
__gmpn_bc_mulmod_bnm1
__gmpn_bc_set_str
__gmpn_bdiv_dbm1c
__gmpn_bdiv_dbm1c_init
__gmpn_bdiv_dbm1c_x86_64
__gmpn_bdiv_q
__gmpn_bdiv_q_1
__gmpn_bdiv_q_itch
__gmpn_bdiv_qr
__gmpn_bdiv_qr_itch
__gmpn_binvert
__gmpn_binvert_itch
__gmpn_broot
__gmpn_broot_invm1
__gmpn_brootinv
__gmpn_bsqrt
__gmpn_bsqrtinv
__gmpn_cmp
__gmpn_cnd_add_n
__gmpn_cnd_add_n_init
__gmpn_cnd_add_n_x86_64
__gmpn_cnd_sub_n
__gmpn_cnd_sub_n_init
__gmpn_cnd_sub_n_x86_64
__gmpn_cnd_swap
__gmpn_com
__gmpn_com_atom
__gmpn_com_bd1
__gmpn_com_init
__gmpn_com_x86_64
__gmpn_copyd
__gmpn_copyd_atom
__gmpn_copyd_bd1
__gmpn_copyd_bobcat
__gmpn_copyd_core2
__gmpn_copyd_init
__gmpn_copyd_nano
__gmpn_copyd_x86_64
__gmpn_copyi
__gmpn_copyi_atom
__gmpn_copyi_bd1
__gmpn_copyi_bobcat
__gmpn_copyi_core2
__gmpn_copyi_init
__gmpn_copyi_nano
__gmpn_copyi_x86_64
__gmpn_cpuid
__gmpn_cpuvec
__gmpn_cpuvec_init
__gmpn_cpuvec_initialized
__gmpn_dc_set_str
__gmpn_dcpi1_bdiv_q
__gmpn_dcpi1_bdiv_q_n
__gmpn_dcpi1_bdiv_q_n_itch
__gmpn_dcpi1_bdiv_qr
__gmpn_dcpi1_bdiv_qr_n
__gmpn_dcpi1_bdiv_qr_n_itch
__gmpn_dcpi1_div_q
__gmpn_dcpi1_div_qr
__gmpn_dcpi1_div_qr_n
__gmpn_dcpi1_divappr_q
__gmpn_dcpi1_divappr_q_n
__gmpn_div_q
__gmpn_div_qr_1
__gmpn_div_qr_1n_pi1
__gmpn_div_qr_2
__gmpn_div_qr_2n_pi1
__gmpn_div_qr_2u_pi1
__gmpn_divexact
__gmpn_divexact_1
__gmpn_divexact_1_atom
__gmpn_divexact_1_init
__gmpn_divexact_1_nano
__gmpn_divexact_1_x86_64
__gmpn_divexact_by3
__gmpn_divexact_by3c
__gmpn_divisible_p
__gmpn_divmod_1
__gmpn_divrem
__gmpn_divrem_1
__gmpn_divrem_1_core2
__gmpn_divrem_1_coreisbr
__gmpn_divrem_1_init
__gmpn_divrem_1_x86_64
__gmpn_divrem_2
__gmpn_dump
__gmpn_fft_best_k
__gmpn_fft_next_size
__gmpn_fib2_ui
__gmpn_gcd
__gmpn_gcd_1
__gmpn_gcd_1_bd1
__gmpn_gcd_1_core2
__gmpn_gcd_1_init
__gmpn_gcd_1_k10
__gmpn_gcd_1_nano
__gmpn_gcd_1_x86_64
__gmpn_gcd_subdiv_step
__gmpn_gcdext
__gmpn_gcdext_1
__gmpn_gcdext_hook
__gmpn_gcdext_lehmer_n
__gmpn_get_d
__gmpn_get_str
__gmpn_hamdist
__gmpn_hgcd
__gmpn_hgcd2
__gmpn_hgcd2_jacobi
__gmpn_hgcd_appr
__gmpn_hgcd_appr_itch
__gmpn_hgcd_itch
__gmpn_hgcd_jacobi
__gmpn_hgcd_matrix_adjust
__gmpn_hgcd_matrix_init
__gmpn_hgcd_matrix_mul
__gmpn_hgcd_matrix_mul_1
__gmpn_hgcd_matrix_update_q
__gmpn_hgcd_mul_matrix1_vector
__gmpn_hgcd_reduce
__gmpn_hgcd_reduce_itch
__gmpn_hgcd_step
__gmpn_invert
__gmpn_invert_limb
__gmpn_invert_limb_table
__gmpn_invertappr
__gmpn_ior_n
__gmpn_iorn_n
__gmpn_jacobi_2
__gmpn_jacobi_base
__gmpn_jacobi_n
__gmpn_lshift
__gmpn_lshift_atom
__gmpn_lshift_core2
__gmpn_lshift_coreisbr
__gmpn_lshift_init
__gmpn_lshift_k10
__gmpn_lshift_pentium4
__gmpn_lshift_x86_64
__gmpn_lshiftc
__gmpn_lshiftc_atom
__gmpn_lshiftc_core2
__gmpn_lshiftc_coreisbr
__gmpn_lshiftc_init
__gmpn_lshiftc_k10
__gmpn_lshiftc_pentium4
__gmpn_lshiftc_x86_64
__gmpn_matrix22_mul
__gmpn_matrix22_mul1_inverse_vector
__gmpn_matrix22_mul_itch
__gmpn_matrix22_mul_strassen
__gmpn_mod_1
__gmpn_mod_1_1p
__gmpn_mod_1_1p_cps
__gmpn_mod_1_1p_cps_init
__gmpn_mod_1_1p_cps_x86_64
__gmpn_mod_1_1p_init
__gmpn_mod_1_1p_x86_64
__gmpn_mod_1_fat
__gmpn_mod_1_init
__gmpn_mod_1s_2p
__gmpn_mod_1s_2p_cps
__gmpn_mod_1s_2p_cps_init
__gmpn_mod_1s_2p_cps_x86_64
__gmpn_mod_1s_2p_init
__gmpn_mod_1s_2p_x86_64
__gmpn_mod_1s_3p
__gmpn_mod_1s_3p_cps
__gmpn_mod_1s_4p
__gmpn_mod_1s_4p_cps
__gmpn_mod_1s_4p_cps_init
__gmpn_mod_1s_4p_cps_x86_64
__gmpn_mod_1s_4p_init
__gmpn_mod_1s_4p_x86_64
__gmpn_mod_34lsub1
__gmpn_mod_34lsub1_init
__gmpn_mod_34lsub1_pentium4
__gmpn_mod_34lsub1_x86_64
__gmpn_modexact_1_odd_x86_64
__gmpn_modexact_1c_odd
__gmpn_modexact_1c_odd_init
__gmpn_modexact_1c_odd_x86_64
__gmpn_mu_bdiv_q
__gmpn_mu_bdiv_q_itch
__gmpn_mu_bdiv_qr
__gmpn_mu_bdiv_qr_itch
__gmpn_mu_div_q
__gmpn_mu_div_q_itch
__gmpn_mu_div_qr
__gmpn_mu_div_qr_choose_in
__gmpn_mu_div_qr_itch
__gmpn_mu_divappr_q
__gmpn_mu_divappr_q_choose_in
__gmpn_mu_divappr_q_itch
__gmpn_mul
__gmpn_mul_1
__gmpn_mul_1_atom
__gmpn_mul_1_bd1
__gmpn_mul_1_bobcat
__gmpn_mul_1_coreihwl
__gmpn_mul_1_coreisbr
__gmpn_mul_1_init
__gmpn_mul_1_x86_64
__gmpn_mul_1c_atom
__gmpn_mul_1c_bd1
__gmpn_mul_1c_bobcat
__gmpn_mul_1c_x86_64
__gmpn_mul_2
__gmpn_mul_basecase
__gmpn_mul_basecase_bd1
__gmpn_mul_basecase_bobcat
__gmpn_mul_basecase_core2
__gmpn_mul_basecase_coreibwl
__gmpn_mul_basecase_coreihwl
__gmpn_mul_basecase_coreisbr
__gmpn_mul_basecase_fat
__gmpn_mul_basecase_init
__gmpn_mul_basecase_k8
__gmpn_mul_fft
__gmpn_mul_n
__gmpn_mullo_basecase
__gmpn_mullo_basecase_core2
__gmpn_mullo_basecase_coreihwl
__gmpn_mullo_basecase_coreisbr
__gmpn_mullo_basecase_fat
__gmpn_mullo_basecase_init
__gmpn_mullo_basecase_k8
__gmpn_mullo_n
__gmpn_mulmid
__gmpn_mulmid_basecase
__gmpn_mulmid_n
__gmpn_mulmod_bnm1
__gmpn_mulmod_bnm1_next_size
__gmpn_nand_n
__gmpn_neg
__gmpn_ni_invertappr
__gmpn_nior_n
__gmpn_nussbaumer_mul
__gmpn_perfect_power_p
__gmpn_perfect_square_p
__gmpn_pi1_bdiv_q_1
__gmpn_popcount
__gmpn_pow_1
__gmpn_powlo
__gmpn_powm
__gmpn_preinv_divrem_1
__gmpn_preinv_divrem_1_core2
__gmpn_preinv_divrem_1_coreisbr
__gmpn_preinv_divrem_1_init
__gmpn_preinv_divrem_1_x86_64
__gmpn_preinv_mod_1
__gmpn_preinv_mod_1_init
__gmpn_preinv_mu_div_qr
__gmpn_preinv_mu_div_qr_itch
__gmpn_preinv_mu_divappr_q
__gmpn_random
__gmpn_random2
__gmpn_redc_1
__gmpn_redc_1_atom
__gmpn_redc_1_bobcat
__gmpn_redc_1_core2
__gmpn_redc_1_coreihwl
__gmpn_redc_1_coreinhm
__gmpn_redc_1_coreisbr
__gmpn_redc_1_fat
__gmpn_redc_1_init
__gmpn_redc_1_k8
__gmpn_redc_2
__gmpn_redc_2_fat
__gmpn_redc_2_init
__gmpn_redc_n
__gmpn_remove
__gmpn_rootrem
__gmpn_rsblsh1_n
__gmpn_rsblsh2_n
__gmpn_rsblsh_n
__gmpn_rsh1add_n
__gmpn_rsh1add_nc
__gmpn_rsh1sub_n
__gmpn_rsh1sub_nc
__gmpn_rshift
__gmpn_rshift_atom
__gmpn_rshift_core2
__gmpn_rshift_coreisbr
__gmpn_rshift_init
__gmpn_rshift_k10
__gmpn_rshift_pentium4
__gmpn_rshift_x86_64
__gmpn_sbpi1_bdiv_q
__gmpn_sbpi1_bdiv_qr
__gmpn_sbpi1_div_q

Sections

.text
Size: 414KB - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
libhwloc-15.dll
.dll windows:4 windows x64

dfbe98cf5b61a9f17e084aa27e254c1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFileAttributesA
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetProcAddress
GetProcessAffinityMask
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetProcessAffinityMask
SetThreadAffinityMask
SetUnhandledExceptionFilter
Sleep
SwitchToThread
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
__iob_func
_amsg_exit
_close
_errno
_exit
_findclose
_findfirst64
_findnext64
_fstat64
_fullpath
_initterm
_lock
_onexit
_open
_read
_snwprintf
_stat64
_strdup
_stricmp
_strnicmp
_unlock
_vsnprintf
abort
atof
atoi
calloc
exit
fclose
ferror
fgets
fopen
fprintf
fputc
fread
free
fseek
fwprintf
fwrite
getenv
islower
isspace
isupper
malloc
memcmp
memcpy
memmove
memset
qsort
raise
realloc
signal
sprintf
sscanf
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncmp
strncpy
strrchr
strspn
strstr
strtol
strtoul
tolower
vfprintf
wcscpy

user32

MessageBoxW

Exports

Exports

hwloc__add_info
hwloc__add_info_nodup
hwloc__attach_memory_object
hwloc__free_infos
hwloc__insert_object_by_cpuset
hwloc__move_infos
hwloc__object_cpusets_compare_first
hwloc__reorder_children
hwloc__topology_disadopt
hwloc__topology_dup
hwloc__xml_export_diff
hwloc__xml_export_topology
hwloc__xml_import_diff
hwloc__xml_verbose
hwloc_add_uname_info
hwloc_alloc
hwloc_alloc_heap
hwloc_alloc_membind
hwloc_alloc_root_sets
hwloc_alloc_setup_object
hwloc_backend_alloc
hwloc_backend_enable
hwloc_backends_disable_all
hwloc_backends_find_callbacks
hwloc_backends_init
hwloc_backends_is_thissystem
hwloc_bitmap_allbut
hwloc_bitmap_alloc
hwloc_bitmap_alloc_full
hwloc_bitmap_and
hwloc_bitmap_andnot
hwloc_bitmap_asprintf
hwloc_bitmap_clr
hwloc_bitmap_clr_range
hwloc_bitmap_compare
hwloc_bitmap_compare_first
hwloc_bitmap_compare_inclusion
hwloc_bitmap_copy
hwloc_bitmap_dup
hwloc_bitmap_fill
hwloc_bitmap_first
hwloc_bitmap_first_unset
hwloc_bitmap_free
hwloc_bitmap_from_ith_ulong
hwloc_bitmap_from_ulong
hwloc_bitmap_intersects
hwloc_bitmap_isequal
hwloc_bitmap_isfull
hwloc_bitmap_isincluded
hwloc_bitmap_isset
hwloc_bitmap_iszero
hwloc_bitmap_last
hwloc_bitmap_last_unset
hwloc_bitmap_list_asprintf
hwloc_bitmap_list_snprintf
hwloc_bitmap_list_sscanf
hwloc_bitmap_next
hwloc_bitmap_next_unset
hwloc_bitmap_not
hwloc_bitmap_only
hwloc_bitmap_or
hwloc_bitmap_set
hwloc_bitmap_set_ith_ulong
hwloc_bitmap_set_range
hwloc_bitmap_singlify
hwloc_bitmap_snprintf
hwloc_bitmap_sscanf
hwloc_bitmap_taskset_asprintf
hwloc_bitmap_taskset_snprintf
hwloc_bitmap_taskset_sscanf
hwloc_bitmap_tma_dup
hwloc_bitmap_to_ith_ulong
hwloc_bitmap_to_ulong
hwloc_bitmap_weight
hwloc_bitmap_xor
hwloc_bitmap_zero
hwloc_compare_types
hwloc_components_fini
hwloc_components_init
hwloc_decode_from_base64
hwloc_disc_component_force_enable
hwloc_disc_components_enable_others
hwloc_distances_add
hwloc_distances_get
hwloc_distances_get_by_depth
hwloc_distances_release
hwloc_distances_remove
hwloc_distances_remove_by_depth
hwloc_encode_to_base64
hwloc_export_obj_userdata
hwloc_export_obj_userdata_base64
hwloc_fallback_nbprocessors
hwloc_find_insert_io_parent_by_complete_cpuset
hwloc_free
hwloc_free_heap
hwloc_free_object_and_children
hwloc_free_object_siblings_and_children
hwloc_free_unlinked_object
hwloc_free_xmlbuffer
hwloc_get_api_version
hwloc_get_area_membind
hwloc_get_area_memlocation
hwloc_get_closest_objs
hwloc_get_cpubind
hwloc_get_depth_type
hwloc_get_largest_objs_inside_cpuset
hwloc_get_last_cpu_location
hwloc_get_membind
hwloc_get_memory_parents_depth
hwloc_get_nbobjs_by_depth
hwloc_get_obj_by_depth
hwloc_get_proc_cpubind
hwloc_get_proc_last_cpu_location
hwloc_get_proc_membind
hwloc_get_thread_cpubind
hwloc_get_type_depth
hwloc_hide_errors
hwloc_insert_object_by_cpuset
hwloc_insert_object_by_parent
hwloc_internal_distances_add
hwloc_internal_distances_add_by_index
hwloc_internal_distances_destroy
hwloc_internal_distances_dup
hwloc_internal_distances_init
hwloc_internal_distances_invalidate_cached_objs
hwloc_internal_distances_prepare
hwloc_internal_distances_refresh
hwloc_namecoloncmp
hwloc_noos_component
hwloc_obj_add_children_sets
hwloc_obj_add_info
hwloc_obj_add_other_obj_sets
hwloc_obj_attr_snprintf
hwloc_obj_type_is_cache
hwloc_obj_type_is_dcache
hwloc_obj_type_is_icache
hwloc_obj_type_is_io
hwloc_obj_type_is_memory
hwloc_obj_type_is_normal
hwloc_obj_type_snprintf
hwloc_obj_type_string
hwloc_pci_belowroot_apply_locality
hwloc_pci_class_string
hwloc_pci_discovery_exit
hwloc_pci_discovery_init
hwloc_pci_discovery_prepare
hwloc_pcidisc_check_bridge_type
hwloc_pcidisc_find_busid_parent
hwloc_pcidisc_find_by_busid
hwloc_pcidisc_find_cap
hwloc_pcidisc_find_linkspeed
hwloc_pcidisc_setup_bridge_attr
hwloc_pcidisc_tree_attach
hwloc_pcidisc_tree_insert_by_busid
hwloc_progname
hwloc_report_os_error
hwloc_set_area_membind
hwloc_set_binding_hooks
hwloc_set_cpubind
hwloc_set_membind
hwloc_set_native_binding_hooks
hwloc_set_proc_cpubind
hwloc_set_proc_membind
hwloc_set_thread_cpubind
hwloc_set_windows_hooks
hwloc_setup_pu_level
hwloc_shmem_topology_adopt
hwloc_shmem_topology_get_length
hwloc_shmem_topology_write
hwloc_snprintf
hwloc_synthetic_component
hwloc_topology_abi_check
hwloc_topology_alloc_group_object
hwloc_topology_check
hwloc_topology_clear
hwloc_topology_destroy
hwloc_topology_diff_apply
hwloc_topology_diff_build
hwloc_topology_diff_destroy
hwloc_topology_diff_export_xml
hwloc_topology_diff_export_xmlbuffer
hwloc_topology_diff_load_xml
hwloc_topology_diff_load_xmlbuffer
hwloc_topology_dup
hwloc_topology_export_synthetic
hwloc_topology_export_xml
hwloc_topology_export_xmlbuffer
hwloc_topology_get_allowed_cpuset
hwloc_topology_get_allowed_nodeset
hwloc_topology_get_complete_cpuset
hwloc_topology_get_complete_nodeset
hwloc_topology_get_depth
hwloc_topology_get_flags
hwloc_topology_get_support
hwloc_topology_get_topology_cpuset
hwloc_topology_get_topology_nodeset
hwloc_topology_get_type_filter
hwloc_topology_get_userdata
hwloc_topology_init
hwloc_topology_insert_group_object
hwloc_topology_insert_misc_object
hwloc_topology_is_thissystem
hwloc_topology_load
hwloc_topology_reconnect
hwloc_topology_restrict
hwloc_topology_set_all_types_filter
hwloc_topology_set_cache_types_filter
hwloc_topology_set_flags
hwloc_topology_set_icache_types_filter
hwloc_topology_set_io_types_filter
hwloc_topology_set_pid
hwloc_topology_set_synthetic
hwloc_topology_set_type_filter
hwloc_topology_set_userdata
hwloc_topology_set_userdata_export_callback
hwloc_topology_set_userdata_import_callback
hwloc_topology_set_xml
hwloc_topology_set_xmlbuffer
hwloc_topology_setup_defaults
hwloc_type_sscanf
hwloc_type_sscanf_as_depth
hwloc_windows_component
hwloc_x86_component
hwloc_xml_callbacks_register
hwloc_xml_callbacks_reset
hwloc_xml_component
hwloc_xml_nolibxml_component

Sections

.text
Size: 150KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 915KB - Virtual size: 914KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 280KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
license.txt
prime95.exe
.exe windows:4 windows x64

2075902fe32f163f29c402ab2e8c6b77

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libhwloc-15

ord133
ord66
ord159
ord32
ord28
ord61
ord43
ord111
ord116
ord140
ord194
ord203
ord199
ord110

libgmp-10

ord740
ord758
ord716
ord681
ord796
ord727
ord815
ord690
ord792
ord678
ord790
ord799
ord75
ord756
ord658
ord800
ord731
ord733
ord769
ord726
ord755
ord754
ord697
ord675
ord695
ord813
ord730
ord657

winmm

timeGetTime

psapi

EnumProcesses
EnumProcessModules
GetModuleFileNameExA

kernel32

HeapCreate
GetVersionExW
GetTempPathW
GetTempPathA
GetSystemTimeAsFileTime
GetSystemTime
GetFullPathNameW
GetFullPathNameA
GetFileSize
GetFileAttributesExW
GetFileAttributesW
GetFileAttributesA
GetDiskFreeSpaceW
GetDiskFreeSpaceA
GetCurrentProcessId
FormatMessageW
FormatMessageA
FlushFileBuffers
DeleteFileW
DeleteFileA
CreateMutexW
CreateFileMappingW
CreateFileMappingA
CreateFileW
CreateFileA
AreFileApisANSI
GetCurrentThreadId
GetModuleHandleA
lstrcmpW
SetLastError
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeResource
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
CopyFileA
GlobalFree
GetModuleFileNameW
lstrcmpA
HeapDestroy
ConvertDefaultLocale
ResumeThread
SuspendThread
SetFileTime
GetFileTime
GetTempFileNameA
GlobalReAlloc
TlsGetValue
TlsAlloc
GlobalHandle
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
GetAtomNameA
GetThreadLocale
FileTimeToSystemTime
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetCurrentDirectoryA
MoveFileA
DuplicateHandle
FindClose
FindFirstFileA
GetVolumeInformationA
GetShortPathNameA
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SetFileAttributesA
SetErrorMode
GetCommandLineA
RtlLookupFunctionEntry
RtlUnwindEx
GetDriveTypeA
SetEnvironmentVariableA
SetCurrentDirectoryA
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetDateFormatA
GetTimeFormatA
VirtualProtect
VirtualQuery
GetFileType
ExitThread
CreateThread
ExitProcess
WriteConsoleW
GetStdHandle
DebugBreak
RaiseException
RtlPcToFileHeader
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
HeapSetInformation
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
RtlVirtualUnwind
GetACP
IsValidCodePage
FatalAppExitA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
SetConsoleCtrlHandler
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
ReleaseMutex
WaitForMultipleObjects
GetExitCodeThread
TerminateThread
SleepEx
ExpandEnvironmentStringsA
HeapReAlloc
HeapSize
HeapValidate
HeapCompact
LoadLibraryW
LockFile
LockFileEx
MapViewOfFile
ReadFile
SetEndOfFile
SetFilePointer
SystemTimeToFileTime
UnlockFile
UnlockFileEx
UnmapViewOfFile
WriteFile
WaitForSingleObjectEx
OutputDebugStringA
OutputDebugStringW
FlushViewOfFile
ResetEvent
SetEvent
WaitForSingleObject
CreateEventA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualAlloc
VirtualFree
QueryPerformanceFrequency
SetEnvironmentVariableW
QueryPerformanceCounter
GetSystemInfo
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
GetEnvironmentVariableA
lstrcmpiW
lstrcmpiA
CompareStringW
CompareStringA
lstrlenW
GetVersion
MultiByteToWideChar
CreateToolhelp32Snapshot
Process32First
Process32Next
GetProcessHeap
HeapFree
HeapAlloc
OpenProcess
GetTickCount
GetSystemPowerStatus
GetLocaleInfoA
GlobalMemoryStatusEx
GetComputerNameA
SetThreadAffinityMask
GetCurrentThread
GetCurrentProcess
SetPriorityClass
SetThreadPriority
SetThreadPriorityBoost
GetVersionExA
LocalAlloc
CreateMutexA
LocalFree
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
CloseHandle
GetProcAddress
GetModuleFileNameA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetLastError
Sleep
GetStartupInfoA
EnumResourceLanguagesA

user32

CreateDialogIndirectParamA
GetActiveWindow
GetDesktopWindow
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
BringWindowToTop
TranslateMDISysAccel
TranslateAcceleratorA
RedrawWindow
SetMenu
SetRectEmpty
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
ReleaseCapture
ReuseDDElParam
UnpackDDElParam
GetMenuItemInfoA
FillRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
WindowFromPoint
IsZoomed
SetCapture
TranslateMessage
GetMessageA
WaitMessage
PostQuitMessage
ValidateRect
ShowOwnedPopups
FindWindowA
IsRectEmpty
DrawIcon
SetWindowRgn
GetSysColorBrush
GetDialogBaseUnits
GetKeyNameTextA
MapVirtualKeyA
DeleteMenu
SetParent
UnionRect
SetRect
UnregisterClassA
DestroyIcon
GetDCEx
LockWindowUpdate
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
UpdateWindow
GetMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetNextDlgTabItem
CopyRect
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetSystemMetrics
GetWindow
CharUpperW
CharUpperA
CharLowerW
CharLowerA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
wsprintfA
FlashWindow
IsCharAlphaNumericA
EnumWindows
ShowWindow
LoadIconA
GetWindowLongPtrA
RegisterWindowMessageA
GetWindowThreadProcessId
EnumThreadWindows
GetCursorPos
LoadMenuA
GetSubMenu
SetMenuItemInfoA
SetMenuDefaultItem
DestroyMenu
SetForegroundWindow
IsWindowVisible
IsIconic
PostMessageA
GetPropA
SetWindowLongPtrA
RemovePropA
SetWindowLongA
LoadCursorA
CopyIcon
MessageBeep
IsWindow
GetSysColor
GetMessagePos
GetParent
KillTimer
SetTimer
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
GetClientRect
GetWindowRect
InflateRect
PtInRect
SetCursor
GetSystemMenu
EnableMenuItem
EnableWindow
SendMessageA
EndDialog
ScrollWindowEx
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
LoadBitmapA
CheckMenuItem
GetMenuState
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
GetClassLongPtrA
SetPropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageA
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
GetKeyState
DeferWindowPos
SetScrollRange
TrackPopupMenu

gdi32

GetBkColor
StretchDIBits
CreateFontA
GetCharWidthA
Ellipse
LPtoDP
CreateFontIndirectA
GetObjectA
GetTextExtentPoint32A
GetDCOrgEx
GetClipBox
SetTextColor
SetBkColor
GetDeviceCaps
CopyMetaFileA
CreateDCA
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
ExtTextOutA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
DeleteObject
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
GetPixel
StartDocA
PtVisible
RectVisible
TextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
DeleteDC
CreateDIBPatternBrushPt
CreatePatternBrush
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
GetTextMetricsA
CreateEllipticRgn
GetStockObject

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyA
GetFileSecurityA
SetFileSecurityA
RegEnumKeyA
RegDeleteKeyA
RegSetValueA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
LookupAccountNameA
ConvertSidToStringSidA
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
RegSetKeySecurity
RegOpenKeyA
RegGetKeySecurity
AllocateAndInitializeSid
SetEntriesInAclA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
CreateServiceA
ChangeServiceConfig2A
OpenServiceA
DeleteService
RegQueryValueExA
OpenSCManagerA
CloseServiceHandle
RegOpenKeyExA
RegQueryValueA
RegCloseKey
RegisterEventSourceA
ReportEventA
DeregisterEventSource
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA

shell32

ShellExecuteA
DragQueryFileA
ExtractIconA
SHGetFileInfoA
DragFinish
Shell_NotifyIconA

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

ole32

CLSIDFromString
CoCreateInstance
CoDisconnectObject
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
StringFromGUID2

oleaut32

VarCyFromStr
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarDateFromStr
SysReAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
VarBstrFromDate

ws2_32

inet_addr
WSACleanup
WSAGetLastError
recv
closesocket
send
setsockopt
getprotobyname
getsockopt
bind
getsockname
ioctlsocket
select
__WSAFDIsSet
WSASetLastError
ntohs
gethostbyname
inet_ntoa
htons
socket
connect
WSAStartup

Exports

Exports

curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_perform
curl_easy_reset
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_maprintf
curl_mfprintf
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape

Sections

.text
Size: 34.7MB - Virtual size: 34.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 533KB - Virtual size: 533KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_GWDATA
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
readme.txt
stress.txt
undoc.txt
whatsnew.txt

Sharing

General

Malware Config

Signatures

Files

Password: infected

0367c23aafa70f57dd31e90949ad6d88

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 414KB - Virtual size: 413KB

.data Size: 1024B - Virtual size: 608B

.rdata Size: 80KB - Virtual size: 80KB

.pdata Size: 8KB - Virtual size: 7KB

.xdata Size: 10KB - Virtual size: 9KB

.bss Size: - Virtual size: 2KB

.edata Size: 23KB - Virtual size: 22KB

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 672B

/4 Size: 1024B - Virtual size: 848B

/19 Size: 234KB - Virtual size: 234KB

/31 Size: 9KB - Virtual size: 9KB

/45 Size: 12KB - Virtual size: 12KB

/57 Size: 2KB - Virtual size: 2KB

/70 Size: 1KB - Virtual size: 1KB

/81 Size: 13KB - Virtual size: 13KB

/92 Size: 1KB - Virtual size: 1KB

dfbe98cf5b61a9f17e084aa27e254c1f

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 150KB - Virtual size: 149KB

.data Size: 512B - Virtual size: 512B

.rdata Size: 29KB - Virtual size: 28KB

.pdata Size: 5KB - Virtual size: 5KB

.xdata Size: 6KB - Virtual size: 5KB

.bss Size: - Virtual size: 2KB

.edata Size: 8KB - Virtual size: 7KB

.idata Size: 4KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 104B

.reloc Size: 512B - Virtual size: 208B

/4 Size: 2KB - Virtual size: 1KB

/19 Size: 915KB - Virtual size: 914KB

/31 Size: 31KB - Virtual size: 31KB

/45 Size: 55KB - Virtual size: 54KB

/57 Size: 30KB - Virtual size: 29KB

/70 Size: 17KB - Virtual size: 16KB

/81 Size: 280KB - Virtual size: 279KB

/92 Size: 29KB - Virtual size: 29KB

2075902fe32f163f29c402ab2e8c6b77

Headers

DLL Characteristics

File Characteristics

Imports

libhwloc-15

libgmp-10

winmm

psapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

shlwapi

.text
Size: 414KB - Virtual size: 413KB

.data
Size: 1024B - Virtual size: 608B

.rdata
Size: 80KB - Virtual size: 80KB

.pdata
Size: 8KB - Virtual size: 7KB

.xdata
Size: 10KB - Virtual size: 9KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 23KB - Virtual size: 22KB

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 672B

/4
Size: 1024B - Virtual size: 848B

/19
Size: 234KB - Virtual size: 234KB

/31
Size: 9KB - Virtual size: 9KB

/45
Size: 12KB - Virtual size: 12KB

/57
Size: 2KB - Virtual size: 2KB

/70
Size: 1KB - Virtual size: 1KB

/81
Size: 13KB - Virtual size: 13KB

/92
Size: 1KB - Virtual size: 1KB

.text
Size: 150KB - Virtual size: 149KB

.data
Size: 512B - Virtual size: 512B

.rdata
Size: 29KB - Virtual size: 28KB

.pdata
Size: 5KB - Virtual size: 5KB

.xdata
Size: 6KB - Virtual size: 5KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 8KB - Virtual size: 7KB

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 104B

.reloc
Size: 512B - Virtual size: 208B

/4
Size: 2KB - Virtual size: 1KB

/19
Size: 915KB - Virtual size: 914KB

/31
Size: 31KB - Virtual size: 31KB

/45
Size: 55KB - Virtual size: 54KB

/57
Size: 30KB - Virtual size: 29KB

/70
Size: 17KB - Virtual size: 16KB

/81
Size: 280KB - Virtual size: 279KB

/92
Size: 29KB - Virtual size: 29KB

.text
Size: 34.7MB - Virtual size: 34.7MB

.rdata
Size: 533KB - Virtual size: 533KB

.data
Size: 43KB - Virtual size: 313KB

.pdata
Size: 97KB - Virtual size: 96KB

_GWDATA
Size: 213KB - Virtual size: 212KB

.rsrc
Size: 44KB - Virtual size: 44KB