D:\Project\Git Project\TP_PUSH\NewThirdpartyServer\Release\NewThirdpartyServer.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5031b48c259d1463af258d50a06b3740N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5031b48c259d1463af258d50a06b3740N.exe
Resource
win10v2004-20240802-en
General
-
Target
5031b48c259d1463af258d50a06b3740N
-
Size
1006KB
-
MD5
5031b48c259d1463af258d50a06b3740
-
SHA1
01c5089920be74a57431073b45b1ca716325be07
-
SHA256
c90abe573c1e2cab65582e179579aac1e40c8749bd77bff7211cff3cefce8384
-
SHA512
fb822d023509e15229f7589461de8bac8af7783c2c121ad740ff1c43dac8730c0b58b480532beec868c456baf2c8d2f464c62635003656e249c5ad6b6850da9a
-
SSDEEP
24576:tPcB/Ksah25EzlxlFgLrTbKQRTZ5Fwgfd:tP2mzWrTuQb1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5031b48c259d1463af258d50a06b3740N
Files
-
5031b48c259d1463af258d50a06b3740N.exe windows:5 windows x86 arch:x86
18b9071146d965ca98cd630f915370b5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ws2_32
WSAAddressToStringW
ntohs
WSAIoctl
getaddrinfo
getsockname
freeaddrinfo
__WSAFDIsSet
listen
getpeername
WSACleanup
shutdown
closesocket
socket
WSAGetLastError
htons
inet_addr
sendto
accept
WSASendTo
inet_ntoa
gethostbyname
gethostname
getsockopt
connect
ntohl
WSAStringToAddressW
WSASocketW
WSASend
WSARecv
select
ioctlsocket
WSASetLastError
setsockopt
bind
htonl
recvfrom
WSAStartup
winmm
timeGetTime
libcrypto-1_1
ERR_reason_error_string
CONF_modules_unload
comctl32
InitCommonControlsEx
version
VerQueryValueA
kernel32
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
ResetEvent
OpenEventA
WakeAllConditionVariable
SleepConditionVariableSRW
GetModuleHandleW
EncodePointer
OutputDebugStringW
InterlockedDecrement
FormatMessageA
lstrlenA
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
GetLastError
InterlockedIncrement
InterlockedExchange
InterlockedExchangeAdd
PostQueuedCompletionStatus
TlsFree
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
WaitForMultipleObjects
TerminateThread
QueueUserAPC
WaitForSingleObject
CreateIoCompletionPort
SetWaitableTimer
GetQueuedCompletionStatus
VerSetConditionMask
VerifyVersionInfoA
CloseHandle
SetEvent
CreateEventA
GetLocalTime
InitializeCriticalSection
GetProcAddress
FindFirstFileA
FindNextFileA
FindClose
LoadLibraryA
FreeLibrary
Sleep
ReleaseMutex
CreateMutexA
InterlockedCompareExchange
MultiByteToWideChar
CreateEventW
SleepEx
CreateWaitableTimerA
GetSystemTimeAsFileTime
TlsGetValue
SetLastError
TlsSetValue
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleA
HeapAlloc
GetProcessHeap
HeapFree
LocalFree
LoadResource
LockResource
SizeofResource
DecodePointer
FindResourceA
GetModuleFileNameW
CreateProcessW
FreeResource
SetCurrentDirectoryA
SetUnhandledExceptionFilter
MoveFileA
GetFileAttributesA
CreateDirectoryA
CreateFileA
SetFilePointer
WriteFile
WideCharToMultiByte
ReadFile
GetModuleFileNameA
GetFileSize
SetEndOfFile
FlushFileBuffers
GlobalFree
SetConsoleTextAttribute
ReleaseSemaphore
GetStdHandle
CreateSemaphoreW
GetConsoleScreenBufferInfo
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WaitForSingleObjectEx
ReleaseSRWLockShared
InitializeSRWLock
AcquireSRWLockShared
user32
GetWindow
MapWindowPoints
wsprintfA
SetWindowTextA
MoveWindow
RegisterClassA
ReleaseCapture
SendMessageTimeoutA
GetCapture
SetCapture
GetClientRect
GetWindowRect
EndDialog
CreateDialogParamA
SetWindowLongA
DialogBoxParamA
GetDlgItem
GetParent
IsRectEmpty
SetFocus
SetWindowPos
GetDesktopWindow
FindWindowA
LoadCursorA
CreateWindowExA
ShowWindow
UpdateWindow
DefWindowProcA
BeginPaint
EndPaint
LoadStringA
DestroyWindow
GetWindowTextA
MessageBoxA
PostMessageA
IsWindowEnabled
CallWindowProcA
SetTimer
IsWindow
GetScrollInfo
EnableScrollBar
GetDC
SetScrollInfo
FillRect
KillTimer
InvalidateRect
DrawTextA
GetSystemMetrics
CopyRect
GetWindowLongA
EnableWindow
GetDialogBaseUnits
OffsetRect
MapDialogRect
SetRectEmpty
SendMessageA
gdi32
GetStockObject
BitBlt
CreateCompatibleDC
SelectObject
DeleteObject
DeleteDC
SetTextColor
SetBkMode
CreateSolidBrush
CreateCompatibleBitmap
ole32
CoInitialize
OleRun
CoCreateInstance
CoUninitialize
oleaut32
VariantInit
SysFreeString
VariantClear
SysAllocString
GetErrorInfo
VariantChangeType
msvcp120
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
??_7_Facet_base@std@@6B@
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PB_W_J@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
??_7facet@locale@std@@6B@
?classic@locale@std@@SAABV12@XZ
?id@?$numpunct@D@std@@2V0locale@2@A
?length@?$codecvt@_WDH@std@@QBEHAAHPBD1I@Z
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?exceptions@ios_base@std@@QAEXH@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?id@?$codecvt@_WDH@std@@2V0locale@2@A
?_Swap_all@_Container_base12@std@@QAEXAAU12@@Z
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?_Xout_of_range@std@@YAXPBD@Z
?_BADOFF@std@@3_JB
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?ws@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@@Z
_Thrd_join
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_current
_Thrd_equal
?uncaught_exception@std@@YA_NXZ
?_Launch@_Pad@std@@QAEXPAU_Thrd_imp_t@@@Z
??1_Pad@std@@QAE@XZ
?_Release@_Pad@std@@QAEXXZ
??0_Pad@std@@QAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
_Xtime_get_ticks
?_Throw_C_error@std@@YAXH@Z
_Mtx_init
_Cnd_init
_Cnd_destroy
_Mtx_destroy
?_Future_error_map@std@@YAPBDH@Z
?_Xbad_function_call@std@@YAXXZ
?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPAD_J@Z
?pubimbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?pubsync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PAV32@@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@_JHH@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
_Thrd_detach
_Mtx_lock
_Mtx_unlock
_Cnd_timedwait
_Cnd_signal
xtime_get
_Xtime_diff_to_millis2
_Thrd_sleep
_Mtx_current_owns
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
msvcr120
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__wgetmainargs
__set_app_type
exit
_exit
_cexit
_configthreadlocale
_initterm_e
_initterm
_wcmdln
_fmode
_commode
_except_handler4_common
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
strerror
memcpy
isdigit
_getptd
__RTDynamicCast
_localtime64
_vsnprintf
__iob_func
__setusermatherr
memmove
??3@YAXPAX@Z
memcpy_s
??2@YAPAXI@Z
??_V@YAXPAX@Z
sprintf_s
vsprintf_s
_purecall
??0exception@std@@QAE@ABV01@@Z
fgetc
fputc
ungetc
strstr
_lock_file
_unlock_file
fwrite
_fseeki64
fgetpos
fsetpos
setvbuf
fflush
fclose
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
strcpy_s
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
atoi
?terminate@@YAXXZ
strncpy_s
memchr
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
_vsnprintf_s
_vscprintf
free
malloc
tolower
_endthreadex
_localtime64_s
_mktime64
vswprintf_s
??8type_info@@QBE_NABV0@@Z
_gmtime64
_beginthreadex
swprintf_s
?_Id@_CurrentScheduler@details@Concurrency@@SAIXZ
?wait@Concurrency@@YAXI@Z
wcscat_s
wcscpy_s
printf
isspace
strcat_s
_mbsnbcpy_s
_time64
strftime
_stat64i32
??0exception@std@@QAE@XZ
_itoa_s
_mbscmp
_mbstok_s
strtok_s
wcstol
_wtoi
memmove_s
_wcslwr_s
wcsncmp
_wcsnicmp
iswdigit
_wcsicmp
_wfopen_s
calloc
sprintf
remove
fopen
fread
rand
ftell
fseek
??0exception@std@@QAE@ABQBDH@Z
?before@type_info@@QBE_NABV1@@Z
?_GetConcurrency@details@Concurrency@@YAIXZ
__CxxFrameHandler3
_CxxThrowException
memset
??1type_info@@UAE@XZ
pocofoundation
?makeDirectory@Path@Poco@@QAEAAV12@XZ
?format@DateTimeFormatter@Poco@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVDateTime@2@ABV34@H@Z
?SORTABLE_FORMAT@DateTimeFormat@Poco@@2V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@B
??0DateTime@Poco@@QAE@XZ
??1DateTime@Poco@@QAE@XZ
?getQuery@URI@Poco@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??1URI@Poco@@QAE@XZ
??0URI@Poco@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?release@RefCountedObject@Poco@@QBEXXZ
??0AtomicCounter@Poco@@QAE@H@Z
??0Path@Poco@@QAE@XZ
??1Path@Poco@@QAE@XZ
??0File@Poco@@QAE@PBD@Z
??1File@Poco@@UAE@XZ
?exists@File@Poco@@QBE_NXZ
??0Path@Poco@@QAE@PBD@Z
?isDirectory@File@Poco@@QBE_NXZ
?makeFile@Path@Poco@@QAEAAV12@XZ
pocozip
?close@Compress@Zip@Poco@@QAE?AVZipArchive@23@XZ
?addFile@Compress@Zip@Poco@@QAEXABVPath@3@0W4CompressionMethod@ZipCommon@23@W4CompressionLevel@623@@Z
?addRecursive@Compress@Zip@Poco@@QAEXABVPath@3@W4CompressionLevel@ZipCommon@23@_N0@Z
??1Compress@Zip@Poco@@QAE@XZ
??0Compress@Zip@Poco@@QAE@AAV?$basic_ostream@DU?$char_traits@D@std@@@std@@_N@Z
??1ZipArchive@Zip@Poco@@QAE@XZ
mswsock
AcceptEx
GetAcceptExSockaddrs
poconet
??1HTTPRequestHandlerFactory@Net@Poco@@UAE@XZ
?setChunkedTransferEncoding@HTTPMessage@Net@Poco@@QAEX_N@Z
?setContentType@HTTPMessage@Net@Poco@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1HTTPServerParams@Net@Poco@@MAE@XZ
??0HTTPServerParams@Net@Poco@@QAE@XZ
?setMaxQueued@TCPServerParams@Net@Poco@@QAEXH@Z
?setMaxThreads@TCPServerParams@Net@Poco@@QAEXH@Z
??0ServerSocket@Net@Poco@@QAE@GH@Z
??1ServerSocket@Net@Poco@@UAE@XZ
??0HTTPServer@Net@Poco@@QAE@V?$SharedPtr@VHTTPRequestHandlerFactory@Net@Poco@@VReferenceCounter@3@V?$ReleasePolicy@VHTTPRequestHandlerFactory@Net@Poco@@@3@@2@ABVServerSocket@12@V?$AutoPtr@VHTTPServerParams@Net@Poco@@@2@@Z
??1HTTPServer@Net@Poco@@UAE@XZ
?start@TCPServer@Net@Poco@@QAEXXZ
?stop@TCPServer@Net@Poco@@QAEXXZ
??0HTTPRequestHandlerFactory@Net@Poco@@QAE@XZ
??0HTTPRequestHandler@Net@Poco@@QAE@XZ
pocoNetworkInitializer
??1HTTPRequestHandler@Net@Poco@@UAE@XZ
shlwapi
PathIsDirectoryA
winhttp
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpWriteData
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpConnect
WinHttpCrackUrl
WinHttpSetOption
WinHttpSetTimeouts
WinHttpOpen
WinHttpCloseHandle
WinHttpReceiveResponse
Exports
Exports
GAddDataToStream
GBase64Decode
GBase64Encode
GCompressToBuf
GCompressToFile
GDeCompressToFile
GExecSQL
GExecStoredProc
GGetDBField
GGetDBFieldByIndex
GGetDBFields
GGetHTTPData
GGetHTTPDataEx
GGetLastTPError
GGetProperty
GGetThreadInterTagValue
GGetUDPData
GGetUDPDataToBuf
GIsDateTime
GIsThreadNeedTerminated
GOpenSQL
GSetProperty
GSetThreadInterTagValue
GSetThreadParams
GShowTPMessage
GTCPSendAndGetResult
GTransBig5ToGBStr
GTransStreamBYTES
GTryLock
GTryLockEx
GUnLock
GUnLockEx
GZipFiles
_GAddDataToStream@12
_GBase64Decode@16
_GBase64Encode@16
_GCompressToBuf@16
_GCompressToFile@12
_GDeCompressToFile@12
_GExecSQL@16
_GExecStoredProc@28
_GGetDBField@20
_GGetDBFieldByIndex@20
_GGetDBFields@20
_GGetHTTPData@16
_GGetHTTPDataEx@20
_GGetLastTPError@4
_GGetProperty@16
_GGetThreadInterTagValue@4
_GGetUDPData@28
_GGetUDPDataToBuf@32
_GIsDateTime@4
_GIsThreadNeedTerminated@4
_GOpenSQL@20
_GSetProperty@12
_GSetThreadInterTagValue@8
_GSetThreadParams@8
_GShowTPMessage@12
_GTCPSendAndGetResult@32
_GTransBig5ToGBStr@12
_GTransStreamBYTES@4
_GTryLock@8
_GTryLockEx@12
_GUnLock@4
_GUnLockEx@8
_GZipFiles@20
Sections
.text Size: 662KB - Virtual size: 662KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 163KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ