Static task
static1
Behavioral task
behavioral1
Sample
b8da436078476acca0f97dcbcd735810_NeikiAnalytics.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral2
Sample
b8da436078476acca0f97dcbcd735810_NeikiAnalytics.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
General
-
Target
b8da436078476acca0f97dcbcd735810_NeikiAnalytics
-
Size
6.1MB
-
MD5
b8da436078476acca0f97dcbcd735810
-
SHA1
c5e883284e24d530d15e4257cc79c7262b9ccc6f
-
SHA256
4172e3d51ad747fd0fb5f50ca23d2443e479ae76daf54ddb27787689fa971927
-
SHA512
19c43dc90fe99477164be8167972386d3af1eca7b258ff41878e58aba801de8588453394445b228cdb22f6687bc6ba7935404c4dfa4fe4c667af096694700b9f
-
SSDEEP
98304:RqwVmxDbukwG/u71wih4qVWj74OG0aOLNXA5uYbT8mNln9PUb30/V/HVGZM/Igv3:RGf/rBpJXAhln9R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b8da436078476acca0f97dcbcd735810_NeikiAnalytics
Files
-
b8da436078476acca0f97dcbcd735810_NeikiAnalytics.exe windows:4 windows x64 arch:x64
1b2aef3d8843c31bc627d14787ec000f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
libronganfastlz
fastlzlibSetCompressor
libronganfind
_Z10AcceptFileP15FindFilesPacket
_Z10NewOptionsP15FindFilesPacketP22findIncludeExcludeItem
_Z11CreateFileAP16JobControlRecordP10AttributesP19RonganWinFilePacketi
_Z11FindOneFileP16JobControlRecordP15FindFilesPacketPFiS0_S2_bEPcjb
_Z11IsInFilesetP15FindFilesPacket
_Z11new_excludeP11findFILESET
_Z11new_includeP11findFILESET
_Z12CheckChangesP16JobControlRecordP15FindFilesPacket
_Z12SetCmdPluginP19RonganWinFilePacketP16JobControlRecord
_Z12new_hardlinkP16JobControlRecordP15FindFilesPacketPctj
_Z13SetAttributesP16JobControlRecordP10AttributesP19RonganWinFilePacket
_Z13TermFindFilesP15FindFilesPacket
_Z13start_optionsP15FindFilesPacket
_Z14HasFileChangedP16JobControlRecordP15FindFilesPacket
_Z14ParseSizeMatchPKcP13s_sz_matching
_Z14SetFindOptionsP15FindFilesPacketbx
_Z14have_win32_apiv
_Z14new_preincludeP11findFILESET
_Z15init_find_filesv
_Z15is_win32_streami
_Z15lookup_hardlinkP16JobControlRecordP15FindFilesPackettj
_Z15stream_to_asciii
_Z16IsPortableBackupP19RonganWinFilePacket
_Z16SelectDataStreamP15FindFilesPacketb
_Z16encode_attribsExP16JobControlRecordPcP15FindFilesPacket
_Z17ParseXattrStreamsP16JobControlRecordP9XattrDataiPcj
_Z17SetPortableBackupP19RonganWinFilePacket
_Z17parse_acl_streamsP16JobControlRecordP7AclDataiPcj
_Z18FfPktSetLinkDigestP15FindFilesPacketiPKcj
_Z20expand_win32_filesetP11findFILESET
_Z22EnableBackupPrivilegesP16JobControlRecordi
_Z22SetFindChangedFunctionP15FindFilesPacketPFbP16JobControlRecordS0_E
_Z22get_win32_drivelettersP11findFILESETPc
_Z23win32_flush_copy_threadP16JobControlRecord
_Z23win32_onefs_is_disabledP11findFILESET
_Z24IsRestoreStreamSupportedi
_Z25CheckIncludeListShadowingP16JobControlRecordP11findFILESET
_Z25win32_cleanup_copy_threadP16JobControlRecord
_Z25win32_send_to_copy_threadP16JobControlRecordP19RonganWinFilePacketPci
_Z26processWin32BackupAPIBlockP19RonganWinFilePacketPvx
_Z44exclude_win32_not_to_backup_registry_entriesP16JobControlRecordP15FindFilesPacket
_Z5binitP19RonganWinFilePacket
_Z5bopenP19RonganWinFilePacketPKcitj
_Z5breadP19RonganWinFilePacketPvy
_Z6bcloseP19RonganWinFilePacket
_Z6blseekP19RonganWinFilePacketxi
_Z6bwriteP19RonganWinFilePacketPvy
_Z7IsBopenP19RonganWinFilePacket
_Z9FindFilesP16JobControlRecordP15FindFilesPacketPFiS0_S2_bES4_
plugin_bclose
plugin_blseek
plugin_bopen
plugin_bread
plugin_bwrite
librongan
_Z10BSTR_2_strPw
_Z10CloseBpipeP5Bpipe
_Z10DecodeStatPcP4statiPi
_Z10EncodeStatPcP4statiii
_Z10InitCryptov
_Z10IsBnetStopP12RonganSocket
_Z10JcrWalkEndP16JobControlRecord
_Z10RunScriptsP16JobControlRecordP5alistPKcS2_
_Z10SkipSpacesPPc
_Z10b_free_jcrPKciP16JobControlRecord
_Z10bstrftimesPcix
_Z10edit_int64xPc
_Z10json_itemsP12ResourceItem
_Z11BinToBase64PciS_ib
_Z11Bmicrosleepii
_Z11BnetGetPeerP12RonganSocketPci
_Z11BstrcasecmpPKcS0_
_Z11DumpPluginsP5alistP6_iobuf
_Z11InitSignalsPFviE
_Z11IsBnetErrorP12RonganSocket
_Z11LexGetTokenP13s_lex_contexti
_Z11ListPluginsP5alistR7PoolMem
_Z11LoadPluginsPvS_P5alistPKcS1_S3_PFbP6PluginE
_Z11SecureEraseP16JobControlRecordPKc
_Z11edit_uint64yPc
_Z12BnetStrerrorP12RonganSocket
_Z12BtimeToUtimex
_Z12CompressDataP16JobControlRecordjPcjPhjPj
_Z12FreePathListP6htable
_Z12GetTimestampv
_Z12InitJcrChainv
_Z12PrintMessagePvPKcz
_Z12SetTimestampi
_Z12StopWatchdogv
_Z12UTF8_2_wcharRPcPKc
_Z12UnbashSpacesPc
_Z12UnloadPluginP5alistP6Plugini
_Z12bstrftime_ncPcix
_Z12daemon_startv
_Z12get_bregexpsPKc
_Z12str_to_int64PKc
_Z12wchar_2_UTF8RPcPKw
_Z13CleanupCryptov
_Z13CreatePidFilePcPKci
_Z13DeletePidFilePcPKci
_Z13FreeAddressesP5dlist
_Z13FreeRunscriptP9RunScript
_Z13GetPoolMemoryi
_Z13InitStackDumpv
_Z13PrintLsOutputP16JobControlRecordP10Attributes
_Z13ReadStateFilePKcS0_i
_Z13SkipNonspacesPPc
_Z13StartWatchdogv
_Z13UnloadPluginsP5alist
_Z13jcr_walk_nextP16JobControlRecord
_Z13serial_uint16PPht
_Z13serial_uint32PPhj
_Z13serial_uint64PPhy
_Z13str_to_uint64PKc
_Z14CryptoSignFreeP9Signature
_Z14DecompressDataP16JobControlRecordPKciPPcPjb
_Z14FreePoolMemoryPc
_Z14FreeRunscriptsP5alist
_Z14InitializeJsonv
_Z14WriteStateFilePKcS0_i
_Z14edit_job_codesP16JobControlRecordPcPKcS3_PFS1_S0_S3_E
_Z14jcr_walk_startv
_Z15CloseMemoryPoolv
_Z15DequeueMessagesP16JobControlRecord
_Z15GetCurrentBtimev
_Z15StopThreadTimerP8btimer_t
_Z15crypto_sign_newP16JobControlRecord
_Z15crypto_strerror14crypto_error_t
_Z15job_type_to_stri
_Z15new_dlistStringPKc
_Z15unserial_uint32PPh
_Z15unserial_uint64PPh
_Z16BnetHost2IpAddrsPKciPS0_
_Z16BnetWaitDataIntrP12RonganSocketi
_Z16CryptoCipherFreeP14Cipher_Context
_Z16CryptoDigestFreeP6Digest
_Z16CryptoSignEncodeP9SignaturePhPj
_Z16CryptoSignVerifyP9SignatureP12X509_KeypairP6Digest
_Z16DbgPluginAddHookPFvP6PluginP6_iobufE
_Z16FlushMntentCachev
_Z16InitJcrSubsystemi
_Z16SizeofPoolMemoryPc
_Z17BnetSetBufferSizeP12RonganSocketji
_Z17CryptoKeypairFreeP12X509_Keypair
_Z17CryptoSessionFreeP14Crypto_Session
_Z17InitWinAPIWrapperv
_Z17ReallocPoolMemoryPci
_Z17SetVSSPathConvertPFbPKcPciEPFbPKwPwiE
_Z17StripTrailingJunkPc
_Z17crypto_cipher_newP14Crypto_SessionbPj
_Z17crypto_digest_newP16JobControlRecord15crypto_digest_t
_Z18AllowOsSuspensionsv
_Z18CleanupCompressionP16JobControlRecord
_Z18CryptoCipherUpdateP14Cipher_ContextPKhjS2_Pj
_Z18CryptoDigestUpdateP6DigestPKhj
_Z18Win32SetCompatiblev
_Z18cmprs_algo_to_textj
_Z18crypto_digest_nameP6Digest
_Z18crypto_keypair_dupP12X509_Keypair
_Z18crypto_keypair_newv
_Z18crypto_session_new15crypto_cipher_tP5alist
_Z18crypto_sign_decodeP16JobControlRecordPKhj
_Z18start_thread_timerP16JobControlRecordyj
_Z19BnetThreadServerTcpP5dlistiP5alistR10ThreadListSt8functionIFPvP19ConfigurationParserS6_EES8_PSt6atomicI15BnetServerStateES5_IFS6_S6_EES5_IFvvEE
_Z19CheckPoolMemorySizePci
_Z19CryptoKeypairHasKeyPKc
_Z19CryptoSessionDecodePKhjP5alistPP14Crypto_Session
_Z19CryptoSessionEncodeP14Crypto_SessionPhPj
_Z19CryptoSignAddSignerP9SignatureP6DigestP12X509_Keypair
_Z19CryptoSignGetDigestP9SignatureP12X509_KeypairR15crypto_digest_tPP6Digest
_Z19SetWorkingDirectoryPKc
_Z20BuildAddressesStringP5dlistPcib
_Z20CryptoCipherFinalizeP14Cipher_ContextPhPj
_Z20CryptoDigestFinalizeP6DigestPhPj
_Z20CryptoKeypairLoadKeyP12X509_KeypairPKcPFiPciPKvES5_
_Z20PreventOsSuspensionsv
_Z20PrintMemoryPoolStatsv
_Z20Win32ClearCompatiblev
_Z20get_jcr_by_full_namePc
_Z21BuildAttrOutputFnamesP16JobControlRecordP10Attributes
_Z21CryptoKeypairLoadCertP12X509_KeypairPKc
_Z21DbgPrintPluginAddHookPFvP6_iobufE
_Z21GetFirstPortHostOrderP5dlist
_Z21InitializeComSecurityv
_Z21SetLogTimestampFormatPKc
_Z21SetSecureEraseCmdlinePKc
_Z22UnpackAttributesRecordP16JobControlRecordiPciP10Attributes
_Z23SetupCompressionBuffersP16JobControlRecordbjPj
_Z23edit_uint64_with_commasyPc
_Z23edit_uint64_with_suffixyPc
_Z24GarbageCollectMemoryPoolv
_Z24TryTlsHandshakeAsAServerP12RonganSocketP19ConfigurationParser
_Z25BnetSuppressErrorMessagesP12RonganSocketb
_Z25SetupDecompressionBuffersP16JobControlRecordPj
_Z26SetJcrInThreadSpecificDataP16JobControlRecord
_Z28GetJcrFromThreadSpecificDatav
_Z33BnetStopAndWaitForThreadServerTcpy
_Z4JmsgP16JobControlRecordixPKcz
_Z4MmsgR7PoolMemPKcz
_Z4MmsgRPcPKcz
_Z4dropPcS_b
_Z4killii
_Z5d_msgPKciiS0_z
_Z5e_msgPKciiiS0_z
_Z5j_msgPKciP16JobControlRecordixS0_z
_Z5p_msgPKciiS0_z
_Z5q_msgPKciP16JobControlRecordixS0_z
_Z5sleepi
_Z6Lmgr_pPx
_Z6Lmgr_vPx
_Z6bfgetsPciP6_iobuf
_Z7BgetMsgP12RonganSocket
_Z7InitMsgP16JobControlRecordP16MessagesResourcePFPcS0_PKcE
_Z7TermMsgv
_Z7bsscanfPKcS0_z
_Z7bstrcmpPKcS0_
_Z7geteuidv
_Z7new_jcrPFvP16JobControlRecordE
_Z8CloseMsgP16JobControlRecord
_Z8FreeAttrP10Attributes
_Z8GetTracev
_Z8JobCountv
_Z8MyNameIsiPPcPKc
_Z8PmStrcatR7PoolMemPKc
_Z8PmStrcatRPcPKc
_Z8PmStrcpyR7PoolMemPKc
_Z8PmStrcpyRPcPKc
_Z8SetTracei
_Z8WSA_Initv
_Z8ZdeflatePciS_Ri
_Z8ZinflatePciS_Ri
_Z8bstrncatPcPKci
_Z8bstrncmpPKcS0_i
_Z8bstrncpyPcPKci
_Z8new_attrP16JobControlRecord
_Z9BsnprintfPciPKcz
_Z9GetHangupv
_Z9GetMemoryi
_Z9IsBufZeroPci
_Z9OpenBpipePciPKcb
_Z9ScanToEolP13s_lex_context
_Z9SetHangupi
_Z9bstrutimePcix
_ZN10ThreadListC1Ev
_ZN10ThreadListD1Ev
_ZN12RonganSocket10SetLockingEv
_ZN12RonganSocket12InitBnetDumpENSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN12RonganSocket14DoTlsHandshakeE9TlsPolicyP11TlsResourcebPKcS4_P16JobControlRecord
_ZN12RonganSocket16SetSourceAddressEP5dlist
_ZN12RonganSocket29AuthenticateInboundConnectionEP16JobControlRecordP19ConfigurationParserPKcR10s_passwordP11TlsResource
_ZN12RonganSocket30AuthenticateOutboundConnectionEP16JobControlRecordNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPKcR10s_passwordP11TlsResource
_ZN12RonganSocket5fsendEPKcz
_ZN12RonganSocket6signalEi
_ZN12RonganSocket9bstrerrorEv
_ZN12StatusPacket4sendEPKci
_ZN14RonganResource11PrintConfigER23OutputFormatterResourceRK19ConfigurationParserbb
_ZN14RonganResource17PrintResourceItemER12ResourceItemRK19ConfigurationParserR23OutputFormatterResourcebbb
_ZN14RonganResource8ValidateEv
_ZN14RonganResourceC2Ev
_ZN15OutputFormatterC1EPFbPvPKczES0_PF15of_filter_stateS0_S0_P15of_filter_tupleES0_i
_ZN15OutputFormatterD1Ev
_ZN15RonganSocketTCPC1Ev
_ZN16JobControlRecord12setJobStatusEi
_ZN16JobControlRecord18MyThreadSendSignalEi
_ZN16MessagesResourceC1Ev
_ZN19ConfigurationParser11ParseConfigEv
_ZN19ConfigurationParser13DumpResourcesEPFbPvPKczES0_b
_ZN19ConfigurationParser22AppendToResourcesChainEP14RonganResourcei
_ZN19ConfigurationParser44InitializeQualifiedResourceNameTypeConverterERKSt3mapIiNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4lessIiESaISt4pairIKiS6_EEE
_ZN19ConfigurationParserC1EPKcPFvS1_iP13s_lex_contextS1_zES5_PFvP12ResourceItemiEPFvS3_S7_iiEPFvRS6_R23OutputFormatterResourcebbbEiiiP13ResourceTablePP14RonganResourceS1_S1_PFvRS_ESO_PFbiS7_iEPFviSK_PFbPvS1_zESR_bbEPFvSK_iE
_ZN19ConfigurationParserD1Ev
_ZN20RecentJobResultsList22GetMostRecentJobResultEv
_ZN20RecentJobResultsList3GetEv
_ZN20RecentJobResultsList5CountEv
_ZN23OutputFormatterResourceC1EP15OutputFormatteri
_ZN23OutputFormatterResourceD1Ev
_ZN5alist3getEi
_ZN5alist4nextEv
_ZN5alist5firstEv
_ZN5alist6appendEPv
_ZN5alist6removeEi
_ZN5alist7destroyEv
_ZN5dlist4nextEPv
_ZN5dlist6appendEPv
_ZN5dlist7destroyEv
_ZN6BErrNo9bstrerrorEv
_ZN6htable11hash_mallocEi
_ZN6htable4initEPvS0_iii
_ZN6htable4nextEv
_ZN6htable5firstEv
_ZN6htable6insertEPcPv
_ZN6htable6lookupEPc
_ZN6htable7destroyEv
_ZN7PoolMem8bsprintfEPKcz
_ZN7PoolMem9BvsprintfEPKcPc
_ZN8BnetDump23EvaluateCommandLineArgsEPKc
_ZN9RunScript10SetCommandERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEi
_ZN9RunScript18SetJobCodeCallbackEPFPcP16JobControlRecordPKcE
_ZN9RunScript3RunEP16JobControlRecordPKc
_ZNK11TlsResource15IsTlsConfiguredEv
_ZNK19ConfigurationParser10GetNextResEiP14RonganResource
_ZNK19ConfigurationParser11GetWarningsEv
_ZNK19ConfigurationParser11HasWarningsEv
_ZNK19ConfigurationParser11b_UnlockResEPKci
_ZNK19ConfigurationParser14GetResWithNameEiPKcb
_ZNK19ConfigurationParser36CreateOwnQualifiedNameForNetworkDumpB5cxx11Ev
_ZNK19ConfigurationParser8ResToStrEi
_ZNK19ConfigurationParser9b_LockResEPKci
_ZNK34QualifiedResourceNameTypeConverter16ResourceToStringERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERKiRS5_
_ZNK6IPADDR15GetPortNetOrderEv
_ZNK9RunScript5DebugEv
_ZTV14RonganResource
b_regcomp
b_regerror
b_regfree
daemon_start_time
dbg_timestamp
debug_level
exepath
g_MajorVersion
g_MinorVersion
kRonganVersionStrings
my_name
num_jobs_run
p_AdjustTokenPrivileges
p_AttachConsole
p_BackupRead
p_BackupWrite
p_CreateFileA
p_CreateFileW
p_FindFirstFileA
p_FindFirstFileW
p_FindNextFileA
p_FindNextFileW
p_GetCurrentDirectoryA
p_GetCurrentDirectoryW
p_GetFileAttributesA
p_GetFileAttributesExA
p_GetFileAttributesExW
p_GetFileAttributesW
p_GetVolumeNameForVolumeMountPointW
p_GetVolumePathNameW
p_LookupPrivilegeValue
p_MultiByteToWideChar
p_OpenProcessToken
p_ReadEncryptedFileRaw
p_SetCurrentDirectoryA
p_SetCurrentDirectoryW
p_SetFileAttributesA
p_SetFileAttributesW
p_SetProcessShutdownParameters
p_WideCharToMultiByte
p_wmkdir
p_wunlink
prt_kaboom
verbose
watchdog_sleep_time
working_directory
libronganlmdb
mdb_cursor_close
mdb_cursor_get
mdb_cursor_open
mdb_dbi_open
mdb_drop
mdb_env_close
mdb_env_create
mdb_env_open
mdb_env_set_mapsize
mdb_env_set_maxreaders
mdb_get
mdb_put
mdb_strerror
mdb_txn_abort
mdb_txn_begin
mdb_txn_commit
mdb_txn_renew
mdb_txn_reset
libgcc_s_seh-1
_Unwind_Resume
libstdc++-6
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_replaceEyyPKcy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_createERyy
_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE9_M_appendEPKwy
_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE9_M_createERyy
_ZSt18_Rb_tree_decrementPSt18_Rb_tree_node_base
_ZSt19__throw_logic_errorPKc
_ZSt20__throw_length_errorPKc
_ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv119__pointer_type_infoE
_ZTVN10__cxxabiv120__function_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv121__vmi_class_type_infoE
_ZdlPv
_Znwy
__cxa_begin_catch
__cxa_end_catch
__cxa_pure_virtual
__cxa_rethrow
__dynamic_cast
__gxx_personality_seh0
advapi32
CloseServiceHandle
ControlService
CreateServiceA
DeleteService
DeregisterEventSource
LockServiceDatabase
OpenSCManagerA
OpenServiceA
QueryServiceLockStatusA
QueryServiceStatus
RegCloseKey
RegCreateKeyA
RegDeleteValueA
RegOpenKeyA
RegSetValueExA
RegisterEventSourceA
RegisterServiceCtrlHandlerA
ReportEventA
SetServiceStatus
StartServiceCtrlDispatcherA
UnlockServiceDatabase
comctl32
InitCommonControlsEx
kernel32
AllocConsole
CreateThread
DeleteCriticalSection
EnterCriticalSection
FindFirstVolumeMountPointA
FindNextVolumeMountPointA
FindVolumeMountPointClose
FormatMessageA
FreeLibrary
GetCurrentThreadId
GetEnvironmentVariableW
GetLastError
GetModuleFileNameA
GetProcAddress
GetStartupInfoA
GetStdHandle
GetVersionExA
GetVolumeNameForVolumeMountPointA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteConsoleA
__C_specific_handler
msvcrt
___lc_codepage_func
___mb_cur_max_func
__argv
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_errno
_exit
_fmode
_getpid
_initterm
_lock
_onexit
_strnicmp
_time64
_unlock
abort
atoi
calloc
exit
fclose
fopen
fprintf
fputc
fputs
free
fwrite
isalpha
islower
iswalpha
localeconv
malloc
memcpy
memmove
memset
signal
strchr
strcpy
strerror
strlen
strncmp
strncpy
strrchr
strstr
tolower
toupper
towupper
vfprintf
wcscmp
wcslen
wcsncat
wcsncpy
_tzset
_strdup
_itoa
ole32
CoInitializeEx
CoUninitialize
oleaut32
SysFreeString
libwinpthread-1
pthread_create
pthread_detach
pthread_join
pthread_kill
pthread_self
user32
CreateWindowExA
DefWindowProcA
DispatchMessageA
FindWindowA
GetMessageA
MessageBoxA
PostMessageA
PostQuitMessage
PostThreadMessageA
RegisterClassExA
TranslateMessage
ws2_32
WSACleanup
ntohs
libjansson
json_delete
json_dumps
json_integer
json_object
json_object_set_new
json_string
libz
deflateParams
Sections
.text Size: 198KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.buildid Size: 512B - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/31 Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 238KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/57 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/70 Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/81 Size: 630KB - Virtual size: 630KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/92 Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ