Static task
static1
Behavioral task
behavioral1
Sample
AdvHD.exe
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral2
Sample
AdvHD.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
General
-
Target
AdvHD.exe
-
Size
1.9MB
-
MD5
a2e12035a9b456525fc287d76d049aa2
-
SHA1
9b0a0cf06cbc808b2c49a1d5c8cb89a22d712029
-
SHA256
5cf97933a6174969269218effc7e6fda4972fe4aa080229eeb18fb5776048409
-
SHA512
b9e67afdbc07bc888e046f9a54602e0b6c384f62cb5e4a484cc24e7bf7c7ecb7fff892a02424facadf6fdc62797c581e9e5c91850d1cd122e06a498b1347c1d1
-
SSDEEP
49152:MHojtKfXWHJyTvJYTPvymuEvFqvk8vCWu:MHVfGpWoHPuEvFqvk8vC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AdvHD.exe
Files
-
AdvHD.exe.exe windows:6 windows x86 arch:x86
f63ceb416b6928f165c8bce0a0fd5d78
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
InitCommonControlsEx
winmm
mixerGetControlDetailsW
mixerGetDevCapsW
mixerClose
timeKillEvent
mixerOpen
timeGetDevCaps
mixerGetLineInfoW
mixerGetLineControlsW
timeSetEvent
mixerSetControlDetails
timeGetTime
timeBeginPeriod
timeEndPeriod
imm32
ImmGetOpenStatus
ImmNotifyIME
ImmGetCandidateListW
ImmAssociateContext
ImmGetContext
ImmReleaseContext
ImmGetConversionStatus
ImmGetCompositionStringW
ImmSetOpenStatus
ImmDisableTextFrameService
d3d11
D3D11CreateDevice
dxgi
CreateDXGIFactory
d3d9
Direct3DCreate9
d3dx9_43
D3DXCreateBox
D3DXCreateCubeTextureFromFileInMemory
D3DXMatrixRotationZ
D3DXMatrixInverse
D3DXSaveSurfaceToFileInMemory
D3DXVec3TransformCoord
D3DXLoadMeshFromXInMemory
D3DXCreateTexture
D3DXCreateSphere
D3DXVec3Transform
D3DXGetShaderOutputSemantics
D3DXMatrixTranslation
D3DXFillTextureTX
D3DXMatrixMultiply
D3DXMatrixScaling
D3DXMatrixLookAtLH
D3DXCreateMatrixStack
D3DXCreateTextureFromFileInMemory
D3DXMatrixRotationYawPitchRoll
D3DXMatrixPerspectiveFovLH
D3DXVec4Transform
D3DXMatrixRotationY
D3DXCreateLine
D3DXSaveSurfaceToFileW
D3DXVec3Normalize
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateEffect
D3DXVec3CatmullRom
D3DXCreateTextureShader
wininet
InternetOpenW
InternetSetStatusCallbackW
InternetWriteFile
InternetQueryDataAvailable
InternetQueryOptionW
HttpOpenRequestW
InternetReadFileExW
HttpEndRequestW
HttpSendRequestExW
InternetCloseHandle
InternetConnectW
InternetSetOptionW
HttpQueryInfoW
kernel32
WaitForSingleObjectEx
SleepConditionVariableCS
WakeConditionVariable
InitializeConditionVariable
GetTickCount
GetThreadPriority
SetThreadPriority
GetCurrentThread
lstrcmpW
WaitForMultipleObjects
ResetEvent
FormatMessageA
LoadLibraryExA
GetModuleFileNameA
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetStartupInfoW
IsDebuggerPresent
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
InitializeCriticalSectionEx
GetLastError
DeleteCriticalSection
ReleaseSemaphore
OutputDebugStringW
WaitForSingleObject
CreateFileW
CloseHandle
GetCurrentDirectoryW
SetFilePointerEx
CreateSemaphoreW
LoadLibraryW
FreeLibrary
LocalFree
GetCurrentProcess
SetProcessAffinityMask
GetProcessAffinityMask
GetModuleFileNameW
GetVersionExW
Sleep
GetProcAddress
SetThreadExecutionState
GetModuleHandleW
FindFirstFileW
FindNextFileW
FindClose
GetCurrentProcessId
InitializeCriticalSection
MulDiv
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
ReadFile
GetOverlappedResult
LoadLibraryA
SetFilePointer
SetEndOfFile
CreateEventW
SetEvent
GetFileSize
GlobalAlloc
GlobalLock
lstrcpyW
GlobalUnlock
GetTimeFormatEx
GetLocaleInfoEx
GetDateFormatEx
EnumSystemLocalesEx
SetFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
GetCommandLineW
CreateMutexW
ReleaseMutex
OpenProcess
SetCurrentDirectoryW
MultiByteToWideChar
WideCharToMultiByte
GetUserDefaultUILanguage
VerSetConditionMask
VerifyVersionInfoW
SizeofResource
LockResource
GetFinalPathNameByHandleW
FindResourceW
DeleteFileW
LoadLibraryExW
QueryPerformanceFrequency
QueryPerformanceCounter
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
ReleaseSRWLockExclusive
LoadResource
user32
LoadStringW
GetCursorPos
MsgWaitForMultipleObjects
GetQueueStatus
PostThreadMessageW
LoadIconW
FlashWindowEx
IntersectRect
SetForegroundWindow
OpenClipboard
CloseClipboard
EmptyClipboard
FindWindowW
SetClipboardData
GetKeyState
GetWindowLongW
CreateDialogParamW
CheckMenuRadioItem
GetMenu
GetSystemMetrics
MoveWindow
SetFocus
EndDialog
SetTimer
DestroyIcon
SetDlgItemTextW
SendDlgItemMessageW
GetDlgItem
KillTimer
DialogBoxParamW
EnableWindow
GetMessageW
DefWindowProcW
AdjustWindowRectEx
MonitorFromPoint
GetWindowRect
DestroyWindow
GetDC
SetWindowPos
MessageBoxW
SetActiveWindow
CreateWindowExW
SetCursorPos
SetWindowTextW
RegisterClassExW
GetWindowPlacement
LoadAcceleratorsW
SendMessageW
ShowWindow
DispatchMessageW
GetMonitorInfoW
PeekMessageW
ValidateRect
LockWindowUpdate
TranslateAcceleratorW
TranslateMessage
SetCapture
wsprintfW
SetWindowLongW
GetClientRect
PostQuitMessage
SystemParametersInfoW
RegisterWindowMessageW
UpdateWindow
ReleaseCapture
ShowCursor
IsIconic
ReleaseDC
PostMessageW
CopyIcon
ScreenToClient
DestroyCursor
ClientToScreen
LoadCursorW
SetCursor
LoadImageW
gdi32
DeleteDC
GetStockObject
CreateFontIndirectW
CreateDCW
GetDeviceCaps
SetTextColor
SetBkMode
CreateSolidBrush
GetTextCharset
EnumFontFamiliesExW
DeleteObject
GetGlyphOutlineW
GetTextMetricsW
AddFontMemResourceEx
SelectObject
advapi32
CryptGetHashParam
CryptDestroyHash
CryptHashData
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
CryptReleaseContext
CryptAcquireContextW
CryptCreateHash
shell32
SHGetSpecialFolderPathW
ShellExecuteW
CommandLineToArgvW
SHGetFolderPathW
ole32
CoInitializeEx
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoInitialize
CoFreeUnusedLibraries
oleaut32
SysAllocString
VariantCopy
VariantInit
VariantChangeType
VariantClear
msvcp140
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?fail@ios_base@std@@QBE_NXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
_Wcscoll
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$collate@_W@std@@2V0locale@2@A
_Wcsxfrm
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??Bid@locale@std@@QAEIXZ
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?good@ios_base@std@@QBE_NXZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??Bios_base@std@@QBE_NXZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
?_Random_device@std@@YAIXZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@F@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?_Xbad_function_call@std@@YAXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
?_Xinvalid_argument@std@@YAXPBD@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_init_in_situ
_Mtx_unlock
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
?_Xruntime_error@std@@YAXPBD@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?global@locale@std@@SA?AV12@ABV12@@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_Getname@_Locinfo@std@@QBEPBDXZ
??0_Locinfo@std@@QAE@HPBD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
shlwapi
StrStrIW
PathFileExistsW
vcomp140
_vcomp_fork
_vcomp_for_static_simple_init
omp_set_num_threads
omp_get_max_threads
_vcomp_for_static_end
crypt32
CryptUnprotectData
CryptProtectData
CryptBinaryToStringW
emotedriver
?EmoteCreate@@YAPAVIEmoteDevice@@ABUInitParam@1@@Z
dwmapi
DwmSetWindowAttribute
vcruntime140
_CxxThrowException
memset
_except_handler4_common
__current_exception_context
__current_exception
wcsstr
strstr
strchr
_purecall
__std_exception_copy
__std_exception_destroy
__std_terminate
__CxxFrameHandler3
memcpy
longjmp
_setjmp3
strrchr
memmove
memchr
__std_type_info_compare
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf
fclose
_read
_close
_write
_pipe
fread
__stdio_common_vfprintf
_fseeki64
ferror
tmpnam
feof
getc
fgets
__stdio_common_vswprintf_s
fread_s
__stdio_common_vsprintf_s
tmpfile
_wfopen_s
_get_stream_buffer_pointers
fsetpos
ungetc
setvbuf
fgetpos
ftell
fwrite
fseek
_popen
fgetc
fflush
fputc
__stdio_common_vsprintf
__stdio_common_vsnprintf_s
_set_fmode
clearerr
_pclose
__p__commode
_ftelli64
freopen
fopen
__stdio_common_vswscanf
__acrt_iob_func
api-ms-win-crt-heap-l1-1-0
free
_aligned_malloc
_aligned_free
_set_new_mode
realloc
calloc
_callnewh
malloc
api-ms-win-crt-runtime-l1-1-0
_controlfp_s
_register_thread_local_exe_atexit_callback
_c_exit
_exit
_errno
_endthreadex
_beginthreadex
_initterm_e
_initterm
_get_narrow_winmain_command_line
exit
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
abort
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
terminate
system
_invalid_parameter_noinfo
strerror
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
_wfindfirst64i32
remove
_findclose
_wsplitpath_s
rename
_wmkdir
_wremove
api-ms-win-crt-string-l1-1-0
strncat
isgraph
_wcsnicmp
strncmp
ispunct
isalnum
strpbrk
strspn
towupper
isprint
strncpy_s
wcsncmp
strcoll
isdigit
islower
isxdigit
isspace
tolower
iscntrl
wcscpy_s
iswprint
_wcsicmp
isupper
isalpha
toupper
api-ms-win-crt-math-l1-1-0
_libm_sse2_log_precise
_libm_sse2_log10_precise
_CIatan2
_CIfmod
_libm_sse2_sqrt_precise
_libm_sse2_cos_precise
__setusermatherr
_libm_sse2_pow_precise
_libm_sse2_tan_precise
_libm_sse2_sin_precise
_libm_sse2_atan_precise
_libm_sse2_exp_precise
_libm_sse2_asin_precise
ceil
frexp
modf
ldexp
_libm_sse2_acos_precise
floor
api-ms-win-crt-convert-l1-1-0
wcstol
_wtoi
strtod
atoi
api-ms-win-crt-locale-l1-1-0
setlocale
localeconv
_configthreadlocale
api-ms-win-crt-utility-l1-1-0
rand
qsort
srand
api-ms-win-crt-time-l1-1-0
_mktime64
strftime
_difftime64
_time64
_localtime64
_gmtime64
clock
api-ms-win-crt-environment-l1-1-0
getenv
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 230KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ