C:\ADE\aime_956679\oracle\rdbms\bin\oraasmclnt12.dll.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
oraasmclnt12.dll
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
oraasmclnt12.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
oraasmclnt12.dll
-
Size
1.0MB
-
MD5
1d7683d5bdb848b69d84acba7075f7bc
-
SHA1
8b8554c71de350c050d597644ea3913c7255bdbf
-
SHA256
7a7d9dd358002c0f752c15c302a437e38106b72d3d4842639b2797aefd7e7c9a
-
SHA512
5145f0db5751c672f95cac82df7c9b75304ecb400214d61fef50f261267a78caaa4cb6e81aae67006d134fda6470d6420650b0fbead7d6359dac14332a8df968
-
SSDEEP
24576:EO/czhX0+KtZAp60RtijpUVl//nUOHNV+k8meyoxAc:2XOtZh5jg//UOHNV+k8meyoA
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource oraasmclnt12.dll
Files
-
oraasmclnt12.dll.dll windows:5 windows x64 arch:x64
d2f95a347b3ccc74efe79004e84692c3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
oracore12
lcvbg2b
lmmmalloc
lfiskb
lfilen
lfidlb
lstrep
sltsmxd
sltskydestroy
sltskys
sltskyg
sltstprint
sltstgi
sltstidinit
sltskyc
lfilini
lcvb24
lstss
lstclo
lcvb2w
slcgems
sltrgftime64
lsttokr
slzprintf
lpmprterm
lpmprinit
sltsmxi
sltster
sltsmnr
sltsmna
sltsini
lcv42b
ss_mem_fre
ss_mem_alc
slosFillInt
slosOtherInfo
slosFillErr
lembem
lemces
lemgec
lemgem
lemged
lemsev
lemrev
lempfsic
lfignam
lfiflu
lfigfn
lfipthad
ldxdts
ldxsto
lfimkpth
lmebco
lmebucp
lsrsrt
slemdsp
lrmgsv
lrmg8v
lrmgbv
lstprintf
lrmtrm
lstup
lrmhorv
lrmpaa
lmmfree
lmmrealloc
lmmcalloc
lemfaf
lmmtophp
sldxgd
ldxbegin
lrminit
lemfaa
lemptfr
lemptfs
lpmmkpri
slzsetevar
lempbar
lempbas
lfifno
lficls
lfiwr
lfird
lfilsek
lfiopn
lfifini
lfimknam
sltrusleep
lstmup
slosDep2String
slosDep2Mesg
lstmclo
lsfp
lpmdelete
lsfcln
lsfini
lpmloadpkg
lpminit
slzgetevar
oranls12
lmsaicmt
lxhLangEnv
lxinitc
lxlinit
lxhlinfo
lxhidtolang
oracommon12
vsnpri
skfnbeqOpenInfo
skfnbeqGetConnectString
skfnbeqCloseInfo
skfnbeqPostConnect
skfnbeqPreConnect
vsnnum
vsnupr
orageneric12
kgxgntrylock
kgxgnunlock
kge_is_resig_mandatory_errframe
slgtd
kgefaa2
dbgdInitParse
dbgdEndParse
dbgdGetDefaultEventGrp
dbgdParseCmd
dbgc_get_diagctx
dbgc_new_diagctx
dbgrgpi_get_prodinst_id
dbgrgbd_get_basedir_default
dbgrgad_get_adrbase_directory
dbgc_iset_options
dbgc_iset_adr_par1
dbgc_iset_adr_enable
dbgc_init_all
dbgc_rls_diagctx
kgxgnqgrp
kgxgnpbdata
kgxgnqname
dbgtDumpMem_int
kgesecl0
kghfre
slgcs
kgegbc
kgesec2
kgxgnlock
dbgtbBucketDump
kgedes
slgtds
slcts
slgfn
kgghash2
skgovprint
kggpnpInit
kggpnpAttrGet
kggpnpAttrValueFree
kggpnpDestroy
kggpnpConf
kggpnpInit2
kggpnpAttrSet
skgdllWriteResource
skgdllReadResource
skgpreset
kgerecoserr
skgpinit
kgerec0
skgfofi
skgfifi
skgfrpdstry
skgfrsetioparam
skgfrsini
skgfrpini
skgfrchk
skgfrwat
skgfqio
skgfrcre
skgfcfi
skgfrgsz
skgfrtrc
skgnfs_connect
skgnfs_listen
skgnfs_bind
skgnfs_disconnect
skgnfs_sendmsg
skgnfs_recvmsg
kgodm_unidentify
kgnfs_fillch
skgnfs_accept
skgnfs_poll_channels
kgodm_io
kgodm_error
kghalf
kghini
kghalp
kgeasnmierr
kghfrh
kghfrf
dbgrlWraCom_int
kgghash
skgdllInit
skgdllDestroy
skgdllDiscover
skgdllIterNext
kgodm_identify
kgodm_init
kgnfsfini
kgodm_destroy
kgodm_fini
kgodm_discover
kgnfs_setup_stats
kgnfsini
kgnfssetgp
kgegec
kgerec1
kgesoftnmierr
dbgeEndDDEInvocation
dbgeEndDDECustomDump
dbgeStartDDECustomDump
kgerin
dbgeSetDDEFlag
skgdllIterTerm
skgdllOpen
skgfrchkhdr0
skgfrchkhdr1
skgdllClose
skgdllSym
skgfrdscdevs
kxdvers_ossiorm_curversion
sdbgrfude_dir_exists
slgsds
sdbgrfucd_create_dir
kgereml
slrac
kggdml
kggchk
kgesin
kghalo
kpummTLSGDBGC
dbgdChkEventIntV
dbgtCtrl_intEvalCtrlEvent
dbgtCtrl_intEvalTraceFilters
dbgtTrc_int
kgxgncin
kgxgnqcguid
kgxgnqicin
kgxgnqcnum
kgxgnqlnid
kgxgnqat
kgxgnqcname
skgoprint
kgxgncdel
kgerec2
skge_sign_fr
kge_reuse_guard_fr
kge_push_guard_fr
kge_pop_guard_fr
kgesic2
kgersel
kgebem
kgeresl
kgekeep
oraclient12
OCIStmtFetch2
OCIDefineByPos
OCIBindByName
OCIStmtRelease
OCIStmtPrepare2
OCIStmtExecute
OCIThreadIdSame
OCIThreadIdGet
OCIThreadIdNull
OCIPServerPost
OCISessionEnd
OCISessionBegin
OCIServerDetach
OCIAttrSet
OCIServerAttach
OCIHandleFree
OCIThreadIdDestroy
OCIThreadIdSetNull
OCIThreadIdInit
OCIHandleAlloc
kpuhhalp
OCIEnvCreate
OCIErrorGet
OCIAttrGet
kpuhhrsm
kpurcs
kpuhhmrk
OCIStmtPrepare
orawsec12
sswseGetOracleHomeType
sswseGetUnameForOhome
sswseGetOracleHomeKey
oraxml12
XmlSaveDom
XmlCreate
XmlLoadDom
oran12
nlstdgg
orannzsbb12
ztcr2rnd
oracell12
oss_sparse_ioctl
oss_errstr
oss_cell_discovery_close
oss_cell_discovery_fetch
oss_cell_discovery_open
oss_finalize
oss_close
oss_write
oss_wait
oss_read
oss_open
osssec_getkey
oss_discovery_close
oss_discovery_fetch
oss_initialize
oss_discovery_open
orahasgen12
clsns_DNSSD_FindServers
clsrhgapi_asmendps
clsrhgapi_asmllsnrendps
clsuhost
clsns_Make_AList
clsCredDomGetCredSet
clsxdsig_Init
clsxwrap_WrapLoadFile
clsnsAList_Close
clsxwrap_WrapGetSect
clsCredInit
clsCredInitFromXml
clsu_get_target_node_role
clsCredSetGetCount
clsCredGetAttrStr
clsuGenerateGUID
clsuFormatGUID
clsCredDomCreateCredSet
clsCredDomDelete
clsxwrap_WrapSectDestroy
clsxwrap_WrapDestroy
clsxdsig_Term
clsCredDomImportFromXMLFile
clsxwrap_WrapSectGetProp
clsCredSetAttrSet
clsCredSetAddMemberUserpass
clsCredSetMemberAttrGet
clsCredDomExportToXMLFile
clsxwrap_WrapAddSect
clsxwrap_WrapSectSetProp
clsxwrap_WrapSaveFile
clsgGet
scls_idq_get_user_name
clso_get_crs_user
scls_iddb_has_ha_privs
scls_idq_get_user_id
clsCredDomFindDom
clsCredDomClose
clsCredDomCreateDom
clsCredDomAttrSet
clsCredDomAttrGet
clsnsAList_GetCount
clsnsAList_GetEntries
clsnsAList_Add
clsns_Make_AListServers
clsssVoteDiskFormat
clsssVoteDiskFormatSize
clsssVoteDiskFormatDone
clsinet_AddrToStr
clsinet_init
clsuGetDevEnv
clsinet_GetNetData
clsinet_infdata_to_interface
clsinet_FreeNetData
clsinet_term
clsinet_StrToAddr
clsssinit
clsssmarshsize
clsssmarshcookie
clssscookieext_fencetype
clsu_get_config_cluster
scls_iddb_is_a_privgrp_member_by_id
clsu_get_asm_mode
clsns_setUserAList
clsnsInit
clsns_Term
clsnsAnswer_ReleaseArray
clscrs_term
clsrhgapi_set_usercredentials
clscrs_init_api
clscrs_ctxsize
scls_meta_ctx_destroy
scls_iddb_get_user_id_by_name
scls_iddb_get_privgrp_id_by_name
scls_meta_ctx_init
scls_meta_init
scls_meta_query_size
clsuhexdump
clssscookieext_memberid
clssscookieext_groupid
clssscookieext_nodeid
clssscookieext_clustid
clssscookieext_propdata
clsssattrib
clssgsqgrp
clsugetconf
oraocr12
procr_set_value
procr_get_value
procr_open_key
procr_terminate
procr_init_ext
procr_enum_subkey_ext
procr_enum_subkey
procr_create_n_set_key
procr_get_last_error
procr_close_key
procr_delete_key
procr_create_key
orauts
GetProcAddress
LoadLibraryA
SleepEx
GetCurrentThreadId
Sleep
msvcr100
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__crt_debugger_hook
__CppXcptFilter
__C_specific_handler
_amsg_exit
_encoded_null
free
_initterm_e
_initterm
_malloc_crt
strcmp
memset
memcpy
isalnum
strtok
_strnicmp
bsearch
_strtoui64
strstr
toupper
strtoul
isalpha
_snprintf
strcspn
isdigit
strncpy
strchr
strncmp
qsort
_setjmp
sscanf
vsprintf
_vsnprintf
sprintf
isprint
abort
_wassert
strrchr
_flushall
kernel32
RtlCaptureContext
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
DecodePointer
EncodePointer
Exports
Exports
kfbtChkSum
kfbtNew
kfbtTraverse
kfbtTraverseBlock
kfbtTraverseStruct
kfbtValid
kfbtcxEndian
kfbtcxInit
kfbtcxTerm
kfbtedGet
kfbtedGet2
kfbtedGetName
kfbttsGet
kfbttsLookup
kfgpCreate
kfgpDestroy
kfgpDump
kfgpGet
kfgpGetApplAttributes
kfgpGetFGCnt
kfgpGetTemplate
kfgpPartners
kfgpSet
kfklCellScanInit
kfklCellScanNext
kfklCellScanTerm
kfklChkForeign
kfklClose
kfklCmp
kfklHasBlock0
kfklInit
kfklInit2
kfklInitCtx
kfklLibScanInit
kfklLibScanNext
kfklLibScanTerm
kfklLoadLib
kfklOpen
kfklRead
kfklScanInit
kfklScanNext
kfklScanTerm
kfklTerm
kfklTermCtx
kfklUnloadLib
kfklWrite
kfmiApbToBuf
kfmiBufToApb
kfmiFindTpl
kfmu_main
kfuhCleanup
kfuhDump
kfuhInit
kfuhInsert
kfuhIterInit
kfuhLookup
kfuhRelease
kfuhRemove
kfuhTerm
kfuhnodeDump
kfuitrnCopy
kfuitrnDump
kfuitrnInit
kfuitrnTerm
kfuppCleanup
kfuppInit
kfupsDump
kfupsIterInit
kfupsLookup
kfupsRelease
kfupsReleaseAll
kfupsReserve
kfuqAlloc
kfuqDump
kfuqFree
kfuqInsert
kfuqRemove
kgfArray_aget
kgfArray_capacity
kgfArray_construct
kgfArray_destroy
kgfArray_get
kgfArray_grow
kgfArray_length
kgfIter_construct
kgfIter_create
kgfIter_getSz
kgfIter_next
kgfIter_reset
kgfIter_restrict
kgfMap_append
kgfMap_construct
kgfMap_getIter
kgfMap_getRange
kgfMap_query
kgfSet_clear
kgfSet_construct
kgfSet_construct2
kgfSet_dump
kgfSet_foreach
kgfSet_getDif
kgfSet_getElem
kgfSet_getIter
kgfSet_getSz
kgfSet_getUnion
kgfSet_insert
kgfSet_load
kgfSet_query
kgfSet_size
kgfStack_allUnique
kgfStack_construct
kgfStack_getIter
kgfStack_getSz
kgfStack_pop
kgfStack_push
kgfStack_query
kgfStack_top
kgfUnitTest
kgfcCreatectx
kgfcCreatectxInt
kgfcDestroyctx
kgfcTimeout
kgfdDiscover2
kgfdDiscoverTerm
kgfdDskGetLibNam
kgfdGetByNum
kgfdGetKgfkContext
kgfdInit
kgfdIterInit
kgfdIterNext
kgfdIterTerm
kgfdTerm
kgfdpAlloc
kgfdpAllocAlign
kgfdpBlk_abs2Log
kgfdpBlk_abs2Rel
kgfdpBlk_get
kgfdpBlk_getDskNum
kgfdpBlk_getIoSz
kgfdpBlk_getSz
kgfdpBlk_log2Rel
kgfdpBlk_rel2Abs
kgfdpBlk_rel2Log
kgfdpCmpHdrP
kgfdpCmpKidn
kgfdpCmpKidnP
kgfdpCmpUword
kgfdpDtaBlk_unpickle
kgfdpDta_construct
kgfdpDta_copy
kgfdpDta_destroy
kgfdpDta_dump
kgfdpDta_get
kgfdpDta_getAllDsks
kgfdpDta_getDsksDiff
kgfdpDta_getMaxSz
kgfdpDta_getMinFgNum
kgfdpDta_init
kgfdpDta_isConsistent
kgfdpDta_isPartSymmetric
kgfdpDta_remove
kgfdpDta_set
kgfdpDta_swapInOutDsk
kgfdpDta_unpickle
kgfdpEntry_dump
kgfdpEntry_getPickledSz
kgfdpEntry_toDevice
kgfdpEntry_unpickle
kgfdpGetField
kgfdpHdr_dump
kgfdpHdr_getDtaSz
kgfdpHdr_getEnforceQrm
kgfdpHdr_getFgCnt
kgfdpHdr_getIdealCopyCnt
kgfdpHdr_getPickledSz
kgfdpHdr_getPstSz
kgfdpHdr_getQuorumSz
kgfdpHdr_isDegenerate
kgfdpHdr_isQuorum
kgfdpHdr_setCopy
kgfdpHdr_setDtaSz
kgfdpHdr_setEnforceQrm
kgfdpHdr_sufficientCopyCnt
kgfdpHdr_sufficientFgCnt
kgfdpHdr_unpickle
kgfdpLocMap_abort
kgfdpLocMap_commit
kgfdpLocMap_construct
kgfdpLocMap_destroy
kgfdpLocMap_dump
kgfdpLocMap_getDirty
kgfdpLocMap_getLoc
kgfdpLocMap_getSz
kgfdpLocMap_grow
kgfdpLocMap_setAllDirty
kgfdpLocMap_setDirty
kgfdpLocMap_unpickle
kgfdpLocMap_updateLoc
kgfdpMetaBlk_getHdr
kgfdpMetaBlk_getHdrPos
kgfdpMetaBlk_getLocMap
kgfdpMetaBlk_isDead
kgfdpMetaBlk_unpickle
kgfdpMetaSet_checkEnforceQrm
kgfdpMetaSet_filterDead
kgfdpMetaSet_filterOld
kgfdpMetaSet_getCopyCnt
kgfdpMetaSet_getMaxClique
kgfdpMetaSet_getMaxNext
kgfdpMetaSet_getOkDsks
kgfdpMetaSet_getSupportSet
kgfdpMetaSet_remove
kgfdpSetField
kgfdpStatus_construct
kgfdpStatus_dump
kgfdpStatus_isPstOk
kgfdpStatus_toDevice
kgfdpStatus_toMode
kgfdpStatus_unpickle
kgfdpTest_isActive
kgfdpTraceSet
kgfdpUtil_cmpInvLastNextTs
kgfdpUtil_errorPush
kgfdpUtil_getMaxDskNum
kgfdp_getMaxPhysSz
kgfdp_init
kgfdp_query
kgfdputl_dsk2arr
kgfdvfClientCreate
kgfdvfClientDelete
kgfdvfCreate
kgfdvfDelete
kgfdvfPushDiskString
kgfenceCheck
kgfenceCreateCtx
kgfenceEntry
kgfenceExit
kgfenceFreeHdl
kgfenceIsReady
kgfenceIssue
kgfenceNeedthr
kgfkCancelIO
kgfkClose
kgfkCompare
kgfkCreate
kgfkDiscover
kgfkDiscoverType
kgfkFetchEx
kgfkFetchSparseDiskInfo
kgfkGetIO
kgfkInitExt
kgfkInitIO
kgfkLabelCheck
kgfkLabelClear
kgfkLabelFilter
kgfkLabelManage
kgfkLabelRead
kgfkLabelScan
kgfkLabelWrite
kgfkOpen
kgfkReinitIO
kgfkRequestSize
kgfkSetTraceLevel
kgfkStatusIO
kgfkSubmitIO
kgfkSyncIO
kgfkTerm
kgfkWaitAnyIO
kgfkWaitIO
kgflkAcquire
kgflkAcquireExt
kgflkLockGet
kgflkLockMode
kgflkLockRelease
kgflkLockTry
kgfmCopyOdaPr
kgfmDumpApplAttributes
kgfmDumpCtx
kgfmDumpProperties
kgfmGetFixedPPat
kgfmGetNumAttributeCtx
kgfmGetPPatType
kgfmGetPartners
kgfmGetSlots
kgfmGetStrAttribute
kgfmInitApplAttributes
kgfmInitialize
kgfmIsAppliance
kgfmIsDisabled
kgfmIsExadataTest
kgfmIsOdaTest
kgfmLookup
kgfmPPatEqual
kgfmPTypeStr
kgfmReloadConfig
kgfmStrToDiskType
kgfmTerminate
kgfmTestAddDisk
kgfmTestGetExaSlot
kgfmTgtCardinality
kgfmUnitTest
kgfnCheckOCIConnection
kgfnConnAcquire
kgfnConnCheckHeld
kgfnConnRelease
kgfnConnect
kgfnConnect2
kgfnCredCreate
kgfnCredFree
kgfnCredRetrieve
kgfnCredSave
kgfnDisconnect
kgfnEnvCreate
kgfnEnvCreate2
kgfnEnvDestroy
kgfnGetClusType
kgfnGetConnDetails
kgfnGetLocalListeners
kgfnInitEnv
kgfnInitEnv2
kgfnInitExtSkgcb
kgfnRConnect
kgfnRDisconnect
kgfnRecordErrPriv
kgfnRetrieveErr
kgfnServerCopy
kgfnServerInstance
kgfnServerIsLocal
kgfnServerOraHome
kgfnServerOraSID
kgfnServerService
kgfnServerSetHosts
kgfnServerSetInstance
kgfnServerSize
kgfnServerSizeHosts
kgfnServerTrace
kgfnStmtBind
kgfnStmtExecuteInt
kgfnStmtExecuteQuiet
kgfnStmtInit
kgfnStmtPrepare
kgfnStmtRelease
kgfnStmtSingle
kgfnTgtCreate
kgfnTgtCreateCS
kgfnTgtDestroy
kgfnTgtInit
kgfncCredGen
kgfnmAlloc
kgfnmEqual
kgfnmFree
kgfnmParse
kgfnmParse2
kgfnsCredGen
kgfoCheckHdl
kgfoCheckMount
kgfoCloseFile
kgfoCommit2P
kgfoControl
kgfoCreate2P
kgfoCreateCtx
kgfoCreateCtxExt
kgfoCreateCtxExt2
kgfoCreateFile
kgfoDeleteFile
kgfoDestroyCtx
kgfoErrorMessage
kgfoFnameMax
kgfoGetOCRName
kgfoGetSize
kgfoIO
kgfoOpenDirty
kgfoOpenFile
kgfoReconnectHdl
kgfoRenameFile
kgfoShrinkFile
kgfo_kge2slos
kgfpAbort
kgfpAbort2
kgfpCheckOCIConn
kgfpClose
kgfpCloseHdl
kgfpCommit
kgfpCommitHdl
kgfpCreate
kgfpCreate2
kgfpCreateDir
kgfpDGInfo
kgfpDelete
kgfpDestroyHdl
kgfpDisconnectHdl
kgfpDiskInfo
kgfpFileAttr
kgfpGetBlkSize
kgfpGroupState
kgfpHdlAttr
kgfpInit
kgfpInit2
kgfpInitComplete
kgfpInitComplete2
kgfpInitEnv
kgfpInitEnv2
kgfpMapExtent
kgfpOpen
kgfpOpen2
kgfpOpenPwFile
kgfpRead
kgfpRename
kgfpRename2
kgfpResetErrStk
kgfpResize
kgfpRetrieveErr
kgfpWrite
kgfpmClientInit
kgfpmClusterStateToStr
kgfpmConnect
kgfpmErrorMessage
kgfpmGetNewpatchlvl
kgfpmGetNextPatch
kgfpmGetPatchlvl
kgfpmInit
kgfpmInitPatchIter
kgfpmQryClusterState
kgfpmRecoverRollingMigration
kgfpmStartRollingMigration
kgfpmStartRollingPatch
kgfpmStopRollingMigration
kgfpmStopRollingPatch
kgfpmTerm
kgfpmTermPatchIter
kgfpmUpdatePatchdata
kgfspb_close
kgfspb_getmircnt
kgfspb_open
kgfspb_read
kgfspb_stat
kgfz_ausrFree
kgfz_ausrGetASMPassword
kgfz_ausrGetASMUsername
kgfz_checkClientClusVer
kgfz_clusAddOSUser
kgfz_clusChngOwn
kgfz_clusFree
kgfz_clusGetOSUserByName
kgfz_cmpOSUserName
kgfz_createClientCluster
kgfz_deleteClientCluster
kgfz_disableRemoteASM
kgfz_enableRemoteASM
kgfz_exportCluster
kgfz_getASMDGs
kgfz_getASMGUID
kgfz_getAccessMode
kgfz_getClientOSUserName
kgfz_getClientVersion
kgfz_getClusterByGUID
kgfz_getClusterByName
kgfz_getClusterGUID
kgfz_getClusterName
kgfz_getDiskAccessMode
kgfz_getFlexClusterName
kgfz_getGNSAddr
kgfz_getLocalClusterType
kgfz_getNodeType
kgfz_getWrapFileVersion
kgfz_importCluster
kgfz_init
kgfz_isCRSUserForClientCluster
kgfz_lookupASMUser
kgfz_ousrCreateCred
kgfz_ousrFree
kgfz_setClientClusVer
kgfz_term
kgfz_updateASMDGs
kgfz_verifyClientCluster
kgfz_verifyCrsHaUser
Sections
.text Size: 729KB - Virtual size: 729KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 283KB - Virtual size: 283KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ