a6d78f1c5deaacb1b0325d3fe4283ae0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

a6d78f1c5deaacb1b0325d3fe4283ae0N.exe
Size

2.1MB
MD5

a6d78f1c5deaacb1b0325d3fe4283ae0
SHA1

40ee1bd51dff9cbed7bb95c29d2e6abd71c61490
SHA256

3aa0cc4f5fb9a64011db96dfd3f4c619050d03c35c9ebeada7fb11164de22227
SHA512

fc0000a12ae2188e11cec311525bcbb6cf201765d99f88197704bd18d0ab9b1560062e4b100322a893790f72ae782659acb8e59c61e2b19f42c34fd82c39ccc1
SSDEEP

49152:U9o5l9a3QuZVepONfmSua2i+qGyO6WCeKmSua2i+qGyO6lv8zJR5h1W+ud6QOrhc:H5/a31epWNvK5h1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6d78f1c5deaacb1b0325d3fe4283ae0N.exe

Files

a6d78f1c5deaacb1b0325d3fe4283ae0N.exe
.exe windows:6 windows x86 arch:x86

0bc4b93c58a877aed3d305cf47495b37

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Asr_Src\Asr\Asr\Win32\Release\Asr.pdb

Imports

mfc140u

ord9729
ord9732
ord10186
ord9617
ord9623
ord10409
ord5685
ord10418
ord7668
ord9631
ord10192
ord10113
ord9941
ord10240
ord10120
ord9954
ord10195
ord10208
ord9742
ord9680
ord9801
ord9969
ord10243
ord9964
ord9959
ord9903
ord6362
ord6366
ord9610
ord6935
ord10221
ord9789
ord9797
ord10108
ord9792
ord9828
ord10224
ord9808
ord9861
ord10232
ord9878
ord9895
ord9875
ord10414
ord7800
ord10202
ord11856
ord9777
ord9714
ord9593
ord9784
ord9635
ord9738
ord9929
ord9932
ord9936
ord9655
ord9650
ord9672
ord9976
ord10188
ord9619
ord9624
ord10411
ord5686
ord10420
ord10204
ord7669
ord10217
ord9766
ord10116
ord9944
ord9947
ord10122
ord9955
ord10127
ord10197
ord5122
ord5152
ord10210
ord9743
ord9681
ord9688
ord9690
ord10247
ord9970
ord10244
ord9965
ord9960
ord9904
ord9677
ord9644
ord9659
ord9611
ord9918
ord10109
ord9793
ord8159
ord9637
ord11851
ord9711
ord9590
ord9779
ord9926
ord9934
ord9652
ord9647
ord9973
ord10184
ord9615
ord10416
ord10215
ord9764
ord9761
ord10212
ord10111
ord9939
ord10238
ord10118
ord9952
ord6994
ord10124
ord9686
ord9967
ord9957
ord9901
ord9642
ord10219
ord9795
ord9831
ord9811
ord9823
ord9893
ord9889
ord9881
ord9885
ord9870
ord7674
ord6917
ord9913
ord10200
ord4191
ord11854
ord9782
ord9634
ord10114
ord9942
ord6996
ord5440
ord10209
ord9981
ord6363
ord8576
ord10160
ord9586
ord10203
ord11855
ord9783
ord10187
ord9618
ord10410
ord10419
ord10115
ord9943
ord10121
ord6997
ord10126
ord9950
ord10196
ord9587
ord6939
ord11857
ord9715
ord9726
ord9937
ord9656
ord10189
ord9620
ord10412
ord8215
ord9718
ord10205
ord8263
ord9645
ord10959
ord10867
ord9899
ord9805
ord9821
ord9833
ord9829
ord9865
ord9868
ord9854
ord9840
ord10225
ord9809
ord9862
ord9815
ord9818
ord9662
ord9879
ord9848
ord9825
ord9896
ord9891
ord9883
ord9887
ord9872
ord10235
ord6453
ord6449
ord4272
ord4249
ord4253
ord2815
ord9802
ord9591
ord9780
ord9927
ord6961
ord9935
ord10207
ord10105
ord7165
ord7509
ord13649
ord13256
ord928
ord1412
ord6865
ord540
ord1171
ord3182
ord6579
ord4817
ord1665
ord316
ord310
ord1046
ord987
ord2172
ord13965
ord12645
ord822
ord1526
ord8757
ord3075
ord1231
ord12559
ord5117
ord824
ord1355
ord2006
ord12743
ord14657
ord261
ord12405
ord2378
ord12348
ord14604
ord4856
ord3236
ord6751
ord293
ord5885
ord2927
ord12762
ord14409
ord6559
ord8465
ord929
ord1413
ord7653
ord8479
ord14308
ord996
ord1473
ord877
ord13248
ord8558
ord1382
ord7997
ord2307
ord2303
ord2205
ord13911
ord8462
ord4459
ord2215
ord7946
ord816
ord1866
ord3019
ord12532
ord366
ord1072
ord14534
ord2331
ord14535
ord2319
ord12246
ord5039
ord3959
ord2322
ord4590
ord1177
ord8539
ord2524
ord13087
ord12679
ord12642
ord1888
ord12744
ord12611
ord13963
ord7909
ord8352
ord841
ord12552
ord2529
ord3963
ord2470
ord4648
ord4171
ord14047
ord8157
ord5379
ord2203
ord7322
ord4752
ord8291
ord8235
ord8233
ord4764
ord13985
ord10433
ord13690
ord14109
ord14108
ord7759
ord7107
ord14077
ord7676
ord7306
ord6804
ord6861
ord10250
ord5763
ord12928
ord12219
ord12251
ord8217
ord12247
ord12239
ord5918
ord3852
ord6349
ord14668
ord6350
ord14669
ord6348
ord14667
ord8000
ord12531
ord14466
ord11983
ord11982
ord2034
ord7941
ord12947
ord4090
ord4152
ord9398
ord14595
ord7922
ord14589
ord12542
ord12541
ord5357
ord8324
ord12865
ord8386
ord8470
ord8461
ord2801
ord13007
ord11893
ord14216
ord8974
ord9208
ord12583
ord1690
ord14417
ord7121
ord7501
ord7447
ord7456
ord481
ord1128
ord4360
ord2309
ord2325
ord10976
ord14065
ord9212
ord10251
ord3849
ord4703
ord12660
ord12418
ord13352
ord2843
ord7655
ord2558
ord8395
ord13832
ord2858
ord5609
ord6199
ord9081
ord3857
ord11024
ord9197
ord12786
ord5577
ord12575
ord11252
ord9484
ord2718
ord12964
ord12093
ord4138
ord4088
ord14511
ord5377
ord5368
ord10431
ord10721
ord11138
ord11139
ord9363
ord11743
ord9979
ord7137
ord7504
ord2136
ord511
ord1149
ord3694
ord3677
ord12123
ord6300
ord10504
ord13106
ord13940
ord14239
ord2029
ord3905
ord9467
ord4477
ord1105
ord13235
ord11581
ord9701
ord12176
ord8920
ord9226
ord3173
ord2680
ord6876
ord5027
ord5026
ord5029
ord5025
ord5024
ord12088
ord13754
ord6219
ord8304
ord11275
ord11278
ord9509
ord9524
ord9514
ord9986
ord9991
ord9526
ord11117
ord8912
ord11746
ord11122
ord9011
ord11146
ord10047
ord10048
ord7787
ord1693
ord853
ord1374

kernel32

GetExitCodeProcess
SetEnvironmentVariableW
OpenMutexW
GetNativeSystemInfo
GetPrivateProfileIntW
TryEnterCriticalSection
CreateMutexW
lstrcpyW
lstrcatW
lstrlenW
GetTempPathW
GetCurrentProcess
LocalAlloc
CopyFileW
LocalFileTimeToFileTime
CompareStringEx
lstrcmpW
GetSystemTime
GetLocalTime
GetCurrentDirectoryW
SetCurrentDirectoryW
FindCloseChangeNotification
FindFirstChangeNotificationW
WaitForMultipleObjects
FindNextChangeNotification
ReadDirectoryChangesW
FileTimeToLocalFileTime
GetDiskFreeSpaceExW
SetThreadPriority
VirtualProtect
CompareStringW
SearchPathW
GetFileAttributesExW
WideCharToMultiByte
InitializeCriticalSectionEx
GlobalGetAtomNameW
GlobalDeleteAtom
GetFileSize
CreateThreadpool
CreateThreadpoolCleanupGroup
GetTempFileNameW
SetThreadpoolThreadMinimum
CloseThreadpoolCleanupGroup
CloseThreadpool
CloseThreadpoolCleanupGroupMembers
TrySubmitThreadpoolCallback
GetTimeFormatEx
GetDateFormatEx
OutputDebugStringW
ReadFile
FindNextStreamW
FindFirstStreamW
LeaveCriticalSection
EnterCriticalSection
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
SetEvent
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleW
DeleteCriticalSection
CreateThreadpoolWork
CloseThreadpoolWork
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
RaiseException
GetSystemInfo
VirtualQuery
LoadLibraryExA
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
CreateEventW
InitializeCriticalSectionAndSpinCount
SetThreadpoolThreadMaximum
LoadLibraryExW
GetTickCount64
CreateProcessW
GetShortPathNameW
GetLongPathNameW
CompareFileTime
FindNextFileW
GetCurrentProcessId
K32GetModuleFileNameExW
K32EnumProcessModules
OpenProcess
CloseHandle
ExpandEnvironmentStringsW
QueryDosDeviceW
DeleteFileW
RemoveDirectoryW
GetSystemDirectoryW
GetWindowsDirectoryW
GetFileSizeEx
TerminateProcess
WaitForSingleObject
SetFileAttributesW
GlobalFree
GetLogicalDrives
LocalFree
FormatMessageW
GetLastError
FreeLibrary
GetProcAddress
LoadLibraryW
CreateFileW
SystemTimeToFileTime
FileTimeToSystemTime
GetFileAttributesW
FindFirstFileW
FindFirstFileExW
FindClose
GlobalUnlock
GlobalLock
GlobalAlloc
Sleep
MultiByteToWideChar
GetOverlappedResult
ResetEvent

user32

GetActiveWindow
CheckMenuItem
AppendMenuW
FindWindowExW
GetWindow
GetDesktopWindow
GetWindowRect
GetWindowTextW
ReleaseCapture
IsWindowEnabled
PostMessageW
DrawTextW
ReleaseDC
DrawIconEx
GetDC
GetClientRect
EnableWindow
RegisterClipboardFormatW
keybd_event
MapVirtualKeyW
DestroyMenu
CreatePopupMenu
SystemParametersInfoW
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
IsIconic
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
SetForegroundWindow
FindWindowW
ShowWindow
SendMessageW
GetKeyState
OffsetRect
wsprintfW
DestroyIcon
IsMenu
BeginPaint
EndPaint
GetCursorPos
GetSystemMetrics
SetWindowLongW
GetWindowLongW
SetLayeredWindowAttributes
RedrawWindow
KillTimer
SetTimer
CopyRect
DrawEdge
InflateRect
GetMenuStringW
SetCursorPos
GetWindowDC
CreateIconIndirect
GetWindowPlacement
IsZoomed
GetClassNameW
SetMenuItemInfoW
GetMenuItemCount
GetSubMenu
GetMenuItemID
MonitorFromPoint
GetMonitorInfoW
InvalidateRect
UpdateWindow
GetSysColor
EnableMenuItem
FillRect
LoadCursorW
ClientToScreen
ScreenToClient
GetParent
SetCursor
GetClipboardData
SetCapture
MoveWindow
MessageBoxW
WaitForInputIdle
RemoveMenu
ModifyMenuW
CopyImage
LoadBitmapW
PrivateExtractIconsW
DrawTextA
GetMenuDefaultItem
DrawIcon
DrawFocusRect
DeleteMenu
InsertMenuW
GetFocus
SetFocus
IsClipboardFormatAvailable
EndDialog
SetWindowPos
SetRectEmpty
PeekMessageW
TranslateMessage
DispatchMessageW
CheckMenuRadioItem
GetMenuItemInfoW
PtInRect
GetMessagePos
DestroyAcceleratorTable
AllowSetForegroundWindow
AddClipboardFormatListener
GetSystemMenu
CreateWindowExW
CreateAcceleratorTableW
GetClassInfoW
RemoveClipboardFormatListener
ShutdownBlockReasonCreate
ShutdownBlockReasonDestroy
TrackPopupMenu
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
GetAncestor
WindowFromPoint
SetWindowPlacement
CallWindowProcW
DestroyWindow
InsertMenuItemW
DrawFrameControl
IsWindow
EnumWindows

gdi32

GetObjectW
Rectangle
CreatePen
CreateSolidBrush
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
SetBkColor
DeleteDC
ExtTextOutW
BitBlt
SetStretchBltMode
SetTextColor
CreateFontIndirectW
GetDeviceCaps
GetTextExtentPoint32W
SelectObject
SetDIBColorTable
CreateDIBSection
SetBkMode
MoveToEx
RoundRect
StretchBlt
LineTo

msimg32

TransparentBlt
AlphaBlend
GradientFill

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

CheckTokenMembership
RegQueryValueW
LookupPrivilegeDisplayNameW
LookupPrivilegeNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
GetTokenInformation
OpenProcessToken
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
AllocateAndInitializeSid
GetUserNameW
FreeSid

shell32

SHBindToParent
SHGetDesktopFolder
SHGetFileInfoW
SHChangeNotify
SHBrowseForFolderW
ord155
SHGetMalloc
SHCreateItemInKnownFolder
SHGetSpecialFolderLocation
ord165
ExtractIconExW
SHCreateItemFromIDList
SHCreateItemFromParsingName
ord18
ord25
SHAddToRecentDocs
ord77
ord645
ord644
SHCreateShellItemArrayFromIDLists
ord88
SHGetStockIconInfo
SHGetDataFromIDListW
ShellExecuteW
ord21
ord17
SHCreateShellItem
SHEmptyRecycleBinW
Shell_NotifyIconW
ord727
CommandLineToArgvW
SHGetSpecialFolderPathW
ord4
ord2
DragQueryFileW
ord190
ShellExecuteExW
SHGetPathFromIDListEx

comctl32

ImageList_GetIconSize
ImageList_DrawIndirect
ImageList_ReplaceIcon
InitCommonControlsEx
ImageList_AddMasked
ImageList_GetImageInfo
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor
ImageList_GetIcon
_TrackMouseEvent
ImageList_Write
ImageList_Read
ImageList_GetImageCount
ImageList_Destroy
ImageList_LoadImageW

shlwapi

ord172
PathGetDriveNumberW
ord156
StrCmpIW
ord158
PathIsUNCServerShareW
StrCpyNW
StrCmpLogicalW
PathFindExtensionW
StrCpyW
PathIsRootW
PathIsNetworkPathW
SHCreateStreamOnFileW
PathFileExistsW
StrCmpW
StrStrNW

uxtheme

OpenThemeData
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
DrawThemeBackground
CloseThemeData
SetWindowTheme

ole32

RevokeDragDrop
CoFreeUnusedLibrariesEx
OleGetClipboard
CLSIDFromString
RegisterDragDrop
CoInitialize
CreateStreamOnHGlobal
CreateBindCtx
ReleaseStgMedium
CoTaskMemFree
CoCreateInstance
CoUninitialize

oleaut32

VariantInit
SysAllocString
VariantClear
SysFreeString
SysAllocStringByteLen
SysStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
VarUdateFromDate
VariantChangeType

gdiplus

GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdiplusStartup
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCreateBitmapFromScan0
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage
GdipSaveImageToFile
GdiplusShutdown

msvcp140

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
??1_Facet_base@std@@UAE@XZ
??_7_Facet_base@std@@6B@
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Incref@facet@locale@std@@UAEXXZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@H@Z
??1facet@locale@std@@MAE@XZ
??_7facet@locale@std@@6B@
??0facet@locale@std@@IAE@I@Z
?_Xbad_function_call@std@@YAXXZ
?_Xbad_alloc@std@@YAXXZ
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
_Wcscoll
_Wcsxfrm
?id@?$collate@_W@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ

concrt140

?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
??1_StructuredTaskCollection@details@Concurrency@@QAE@XZ
?_GetNumberOfVirtualProcessors@_CurrentScheduler@details@Concurrency@@SAIXZ
??0_StructuredTaskCollection@details@Concurrency@@QAE@PAV_CancellationTokenState@12@@Z
?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IAEXXZ
?Free@Concurrency@@YAXPAX@Z
?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_Byte_reverse_table@details@Concurrency@@3QBEB
?_Trace_ppl_function@Concurrency@@YAXABU_GUID@@EW4ConcRT_EventType@1@@Z
?PPLParallelForEventGuid@Concurrency@@3U_GUID@@B
?_Yield@_Context@details@Concurrency@@SAXXZ
?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ
?_UnderlyingYield@details@Concurrency@@YAXXZ
?_CurrentContext@_Context@details@Concurrency@@SA?AV123@XZ
??0_Cancellation_beacon@details@Concurrency@@QAE@XZ
??1_Cancellation_beacon@details@Concurrency@@QAE@XZ
?_IsSynchronouslyBlocked@_Context@details@Concurrency@@QBE_NXZ
?_Confirm_cancel@_Cancellation_beacon@details@Concurrency@@QAE_NXZ

dwmapi

DwmSetWindowAttribute

iphlpapi

Icmp6SendEcho2
IcmpSendEcho
IcmpCreateFile
IcmpCloseHandle
Icmp6CreateFile

ws2_32

freeaddrinfo
inet_pton
getnameinfo
getaddrinfo
WSAStartup
WSACleanup

vcruntime140

memcpy
_CxxThrowException
memmove
_except_handler4_common
__current_exception_context
__current_exception
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
wcsstr
strchr
wcschr
_purecall
__std_terminate
memset

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_errno
_invalid_parameter_noinfo
_seh_filter_exe
_controlfp_s
terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_set_app_type
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_configure_wide_argv
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_resetstkoflw

api-ms-win-crt-stdio-l1-1-0

fputws
fputs
__p__commode
_set_fmode
fread
_wsopen_s
_filelength
_read
_close
fwrite
_wfsopen
fgetws
fclose

api-ms-win-crt-string-l1-1-0

isalpha
wcsncpy_s
wcsnlen
_wcsicoll
wcscpy_s
towlower
_stricmp
isxdigit
isspace
isdigit
_wcsnicmp
_wcsicmp
strcpy_s

api-ms-win-crt-heap-l1-1-0

malloc
calloc
_recalloc
free
realloc
_set_new_mode

api-ms-win-crt-convert-l1-1-0

_wtoll
_wtoi64
wcstol
_wtoi
wcstod
_wtof

api-ms-win-crt-filesystem-l1-1-0

_wfullpath
_wrename

api-ms-win-crt-utility-l1-1-0

rand
srand

api-ms-win-crt-time-l1-1-0

wcsftime
_time64
_localtime64_s

api-ms-win-crt-locale-l1-1-0

_wsetlocale
_configthreadlocale

api-ms-win-crt-math-l1-1-0

_CIfmod
__setusermatherr
ceil

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 347KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0bc4b93c58a877aed3d305cf47495b37

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mfc140u

kernel32

user32

gdi32

msimg32

comdlg32

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

msvcp140

concrt140

dwmapi

iphlpapi

ws2_32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 347KB - Virtual size: 347KB

.data Size: 17KB - Virtual size: 24KB

.didat Size: 512B - Virtual size: 56B

.rsrc Size: 316KB - Virtual size: 316KB

.reloc Size: 140KB - Virtual size: 140KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 347KB - Virtual size: 347KB

.data
Size: 17KB - Virtual size: 24KB

.didat
Size: 512B - Virtual size: 56B

.rsrc
Size: 316KB - Virtual size: 316KB

.reloc
Size: 140KB - Virtual size: 140KB