Torix Tools[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Torix Tools.exe
Size 9.2MB
Sample260718-vg29vsbv7t
SHA256 c80bd45ff8b68ac28f62f67a01bbc12dfc61da50746a0adf3d02c06a86da33f7
MD5 8b6fadb0f35ad69fce7cd1253c082ac0
SHA1 075868b53486acc08d61820a5654f9f177a0eb39
SHA512 a592c08f007f3c32e56389a3a93d7929a71e78a80cc057f963065166b7c6096b7ed20c70f73913fdd7124c285cfd3b8087519915bc25364f61e9a043b860ec70
SSDEEP 98304:pBKd/8lvpWHyy4hU4oJarM0/IWb7SJqshzKa18VoDLS51DQbD8q8eIb:pEV8lvpoypO4A0IA7DsHCCDSEng
TLSH
T113A6AD1BA66901F4D0A6D138DA838C13F671748A473197EB3B9C46161FE7BE0BE39B11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Torix Tools.exe

File Explorer

Torix Tools.exe

.exe 9.2MB

Torix Tools.exe

IMPHASH 445866f264d12cc72b199d0fb6f07670
SHA256 c80bd45ff8b68ac28f62f67a01bbc12dfc61da50746a0adf3d02c06a86da33f7
MD5 8b6fadb0f35ad69fce7cd1253c082ac0
SHA1 075868b53486acc08d61820a5654f9f177a0eb39
SHA512 a592c08f007f3c32e56389a3a93d7929a71e78a80cc057f963065166b7c6096b7ed20c70f73913fdd7124c285cfd3b8087519915bc25364f61e9a043b860ec70
SSDEEP 98304:pBKd/8lvpWHyy4hU4oJarM0/IWb7SJqshzKa18VoDLS51DQbD8q8eIb:pEV8lvpoypO4A0IA7DsHCCDSEng
TLSH
T113A6AD1BA66901F4D0A6D138DA838C13F671748A473197EB3B9C46161FE7BE0BE39B11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8567938

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\source\repos\Unbanned-newui\x64\Release\LoaderNeon.pdb

winhttp

WinHttpOpenRequest WinHttpSetOption WinHttpCloseHandle WinHttpSendRequest WinHttpOpen WinHttpReceiveResponse WinHttpQueryDataAvailable WinHttpCrackUrl WinHttpSetTimeouts WinHttpReadData WinHttpQueryHeaders WinHttpConnect

kernel32

VirtualQuery OpenThread VirtualQueryEx CheckRemoteDebuggerPresent SetFileAttributesW K32EnumProcessModules GetTickCount VirtualProtect FlushInstructionCache LocalAlloc LocalFree K32GetModuleInformation GetThreadId GetVolumeInformationW GetCommandLineA ReadFile GetFileSizeEx GetVersionExW K32GetProcessMemoryInfo GetNativeSystemInfo GlobalMemoryStatusEx SetUnhandledExceptionFilter FindFirstFileA FindNextFileA FindClose GetSystemTimeAsFileTime GetProcessTimes WriteFile GetFileAttributesExW GetDiskFreeSpaceExW OutputDebugStringA LoadLibraryExW LoadLibraryW FreeLibrary RtlCaptureContext SuspendThread LoadLibraryA SwitchToFiber DeleteFiber CreateFiber ConvertThreadToFiber GetQueuedCompletionStatusEx GetQueuedCompletionStatus CreateIoCompletionPort WriteConsoleW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage HeapQueryInformation HeapSize GetTimeZoneInformation SetEnvironmentVariableW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc FlushFileBuffers GetFileType ReadConsoleW GetConsoleOutputCP FreeLibraryAndExitThread ExitThread TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount RtlUnwindEx InitializeSListHead MapViewOfFile UnhandledExceptionFilter GetCPInfo CompareStringEx LCMapStringEx DecodePointer EncodePointer CreateFileMappingW Module32NextW ReadProcessMemory DuplicateHandle UnmapViewOfFile ResumeThread GetSystemDirectoryW Thread32First GetEnvironmentVariableW InitializeCriticalSection LeaveCriticalSection Thread32Next K32GetModuleFileNameExW GetProcessId EnterCriticalSection SetConsoleTitleW AllocConsole QueryFullProcessImageNameW MoveFileExW SetStdHandle CreateThread SetEvent CreateEventW GetFileAttributesW VirtualAlloc GetCurrentProcess GetCommandLineW VirtualFree DeleteFileW CreateFileW InitializeCriticalSectionEx WakeAllConditionVariable CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns IsProcessorFeaturePresent RaiseException GetStringTypeW TryAcquireSRWLockExclusive GetFileInformationByHandleEx CopyFileW AreFileApisANSI SetFileInformationByHandle GetFileInformationByHandle GetTempPathW CreateDirectoryW FindResourceW LoadResource LockResource CreateMutexW SizeofResource GetExitCodeProcess IsDebuggerPresent DebugBreak CreateProcessA WideCharToMultiByte GetModuleHandleW CreateProcessW GetProcessHeap GetCurrentProcessId DeleteCriticalSection GetWindowsDirectoryW GetThreadContext Module32FirstW TerminateThread GetCurrentThread K32EnumProcessModulesEx GetStartupInfoW GetModuleHandleA FindFirstFileExW GetLocaleInfoEx ExitProcess CreateMutexExW GetProcAddress HeapAlloc CloseHandle Process32FirstW OpenSemaphoreW FormatMessageA GetSystemTime EnumSystemFirmwareTables DeviceIoControl GetSystemFirmwareTable ExpandEnvironmentStringsW DeleteFileA WaitForSingleObjectEx OutputDebugStringW Process32NextW GetLastError GetTickCount64 FormatMessageW GetTempPathA SystemTimeToFileTime Sleep MultiByteToWideChar CreateToolhelp32Snapshot OpenProcess ReleaseMutex GetCurrentThreadId WaitForSingleObject GetModuleFileNameW TerminateProcess GetModuleHandleExW ReleaseSemaphore SetLastError HeapFree CreateSemaphoreExW GetModuleFileNameA RtlUnwind GetConsoleMode WriteConsoleA GetStdHandle SetConsoleTextAttribute GetConsoleScreenBufferInfo GetThreadTimes IsWow64Process GetExitCodeThread ResetEvent GetCurrentDirectoryW GetSystemWow64DirectoryW DeactivateActCtx ActivateActCtx ReleaseActCtx GetTempFileNameW CreateActCtxW SetFilePointerEx SetEndOfFile Wow64RevertWow64FsRedirection Wow64DisableWow64FsRedirection GetComputerNameA GetFileTime CancelIoEx MoveFileW InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared InitOnceBeginInitialize InitOnceComplete InitializeConditionVariable WakeConditionVariable SleepConditionVariableSRW QueryPerformanceCounter QueryPerformanceFrequency HeapCreate HeapDestroy HeapReAlloc SetThreadContext GetSystemInfo GetLogicalDrives FindFirstFileW WriteProcessMemory FindNextFileW SetFilePointer SetCurrentDirectoryA GlobalAddAtomA CreateFileA FileTimeToSystemTime lstrcatW VirtualProtectEx VirtualLock VirtualAllocEx lstrcpyW CreateRemoteThread VerifyVersionInfoW GlobalFindAtomA VirtualFreeEx PostQueuedCompletionStatus GetSystemTimeAsFileTime CreateEventA GetModuleHandleA TerminateProcess GetCurrentProcess CreateToolhelp32Snapshot Thread32First GetCurrentProcessId GetCurrentThreadId OpenThread Thread32Next CloseHandle SuspendThread ResumeThread WriteProcessMemory GetSystemInfo VirtualAlloc VirtualProtect VirtualFree GetProcessAffinityMask SetProcessAffinityMask GetCurrentThread SetThreadAffinityMask Sleep LoadLibraryA FreeLibrary GetTickCount SystemTimeToFileTime FileTimeToSystemTime GlobalFree HeapAlloc HeapFree GetProcAddress ExitProcess EnterCriticalSection LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection MultiByteToWideChar GetModuleHandleW LoadResource FindResourceExW FindResourceExA WideCharToMultiByte GetThreadLocale GetUserDefaultLCID GetSystemDefaultLCID EnumResourceNamesA EnumResourceNamesW EnumResourceLanguagesA EnumResourceLanguagesW EnumResourceTypesA EnumResourceTypesW CreateFileW LoadLibraryW GetLastError FlushFileBuffers FlsSetValue GetCommandLineA GetCPInfo GetACP GetOEMCP IsValidCodePage EncodePointer DecodePointer FlsGetValue FlsFree SetLastError FlsAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RaiseException RtlPcToFileHeader RtlUnwindEx LCMapStringA LCMapStringW SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapSetInformation HeapCreate HeapDestroy QueryPerformanceCounter GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize WriteFile SetFilePointer GetConsoleCP GetConsoleMode HeapReAlloc InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA

user32

SetForegroundWindow UpdateWindow PostQuitMessage KillTimer GetCursorPos wsprintfW LoadCursorW TranslateMessage SetLayeredWindowAttributes EnumWindows MessageBoxA PeekMessageW GetMonitorInfoW SetTimer DispatchMessageW IsWindow ShowWindow GetClientRect RegisterClassExW GetSystemMetrics SendMessageW ScreenToClient CreateWindowExW MessageBoxW CharLowerW SetWindowPos CreatePopupMenu TrackPopupMenu DestroyMenu AppendMenuA DestroyWindow SetWindowLongPtrW GetWindowLongPtrW LoadIconW ExitWindowsEx ReleaseCapture InvalidateRect GetAsyncKeyState GetClassNameW SetWindowLongW GetDC MonitorFromWindow GetDesktopWindow SystemParametersInfoW SetProcessDPIAware ReleaseDC GetWindowLongW GetWindowThreadProcessId GetMessageW DefWindowProcW PostMessageW MonitorFromPoint GetWindowRect IsWindowVisible

gdi32

GetDeviceCaps GetStockObject

comdlg32

GetOpenFileNameW

advapi32

RegSetKeyValueW GetTokenInformation RegEnumValueW RegDeleteValueW RegCreateKeyW RegCopyTreeW RegSetValueExA RegSetValueExW SetNamedSecurityInfoW RegCreateKeyExW GetUserNameA RegCreateKeyExA SetEntriesInAclW CloseServiceHandle ConvertSidToStringSidA RegQueryInfoKeyW RegDeleteKeyExW RegOpenKeyA MakeAbsoluteSD GetNamedSecurityInfoW BuildExplicitAccessWithNameW SetSecurityDescriptorDacl RegOpenKeyW ConvertStringSecurityDescriptorToSecurityDescriptorW OpenThreadToken RegDeleteTreeW CryptGenRandom ConvertSidToStringSidW OpenServiceA ControlService DeleteService OpenSCManagerA QueryServiceStatus LsaNtStatusToWinError RegCloseKey CryptReleaseContext CryptGetHashParam CryptDestroyHash CryptHashData CryptCreateHash CryptAcquireContextW GetUserNameW RegQueryValueExW RegOpenKeyExW CheckTokenMembership FreeSid OpenProcessToken AdjustTokenPrivileges RegGetValueW EventUnregister EventWriteTransfer EventSetInformation EventRegister RegEnumKeyExW LookupPrivilegeValueW AllocateAndInitializeSid

shell32

SHGetKnownFolderPath ShellExecuteA ShellExecuteExW SHGetFolderPathW ShellExecuteW Shell_NotifyIconW SHFileOperationW

ole32

CoTaskMemAlloc CoInitializeEx CoTaskMemFree CoInitialize CoInitializeSecurity CoSetProxyBlanket CoCreateInstance CoUninitialize StringFromGUID2

api-ms-win-shcore-scaling-l1-1-1

SetProcessDpiAwareness GetDpiForMonitor

wintrust

WinVerifyTrust

crypt32

CryptMsgClose CertFreeCertificateContext CryptQueryObject CertCloseStore CryptMsgGetParam CertFindCertificateInStore CertGetNameStringA CryptEncodeObjectEx CertCreateCertificateContext CryptStringToBinaryA CertGetCertificateContextProperty

iphlpapi

GetBestRoute GetIfTable GetAdaptersInfo SendARP

ws2_32

getsockopt getsockname listen ntohs htonl htons inet_addr freeaddrinfo WSAIoctl WSARecv WSASend WSASocketA inet_pton inet_ntop WSAStartup getaddrinfo WSACleanup WSAGetLastError WSASetLastError socket shutdown accept getpeername connect closesocket bind setsockopt

dwmapi

DwmExtendFrameIntoClientArea DwmSetWindowAttribute

shlwapi

PathFileExistsW SHDeleteValueW StrStrW SHDeleteKeyW

ntdll

VerSetConditionMask NtQueryInformationProcess NtAllocateUuids RtlPcToFileHeader RtlVirtualUnwind RtlAdjustPrivilege NtUnloadDriver NtLoadDriver RtlInitUnicodeString RtlAddFunctionTable NtQuerySystemInformation RtlLookupFunctionEntry

bcrypt

BCryptCloseAlgorithmProvider BCryptOpenAlgorithmProvider BCryptGenRandom BCryptCreateHash BCryptFinishHash BCryptDestroyHash BCryptHashData BCryptGetProperty

dbghelp

SymFromAddr SymSetOptions MiniDumpWriteDump SymCleanup SymGetModuleBase64 SymGetLineFromAddr64 SymFunctionTableAccess64 SymInitialize StackWalk64

setupapi

SetupDiGetDeviceInterfaceDetailW SetupDiGetDeviceRegistryPropertyA SetupDiOpenDevRegKey SetupDiGetDeviceInterfaceDetailA SetupDiGetClassDevsA SetupDiEnumDeviceInterfaces SetupDiDestroyDeviceInfoList SetupDiGetClassDevsW

tbs

Tbsi_Context_Create Tbsip_Submit_Command Tbsip_Context_Close

ncrypt

NCryptGetProperty NCryptOpenStorageProvider NCryptFreeObject

oleaut32

SysAllocString SysFreeString VariantInit SafeArrayAccessData SafeArrayUnaccessData SafeArrayGetLBound SafeArrayGetUBound VariantClear

??0Assembler@asmjit@@QEAA@PEAURuntime@1@@Z ??0CodeGen@asmjit@@QEAA@PEAURuntime@1@@Z ??0HostRuntime@asmjit@@QEAA@XZ ??0JitRuntime@asmjit@@QEAA@XZ ??0Runtime@asmjit@@QEAA@XZ ??0StaticRuntime@asmjit@@QEAA@PEAX_K@Z ??0VMemMgr@asmjit@@QEAA@PEAX@Z ??0X86Assembler@asmjit@@QEAA@PEAURuntime@1@I@Z ??0Zone@asmjit@@QEAA@_K@Z ??1Assembler@asmjit@@UEAA@XZ ??1CodeGen@asmjit@@UEAA@XZ ??1HostRuntime@asmjit@@UEAA@XZ ??1JitRuntime@asmjit@@UEAA@XZ ??1Runtime@asmjit@@UEAA@XZ ??1StaticRuntime@asmjit@@UEAA@XZ ??1VMemMgr@asmjit@@QEAA@XZ ??1X86Assembler@asmjit@@UEAA@XZ ??1Zone@asmjit@@QEAA@XZ ??_FVMemMgr@asmjit@@QEAAXXZ ?_alloc@Zone@asmjit@@QEAAPEAX_K@Z ?_emit@X86Assembler@asmjit@@UEAAIIAEBUOperand@2@000@Z ?_grow@Assembler@asmjit@@QEAAI_K@Z ?_grow@PodVectorBase@asmjit@@IEAAI_K0@Z ?_newLabel@Assembler@asmjit@@QEAAIPEAULabel@2@@Z ?_newLabelLink@Assembler@asmjit@@QEAAPEAULabelLink@2@XZ ?_nullData@PodVectorBase@asmjit@@2UPodVectorData@2@B ?_registerIndexedLabels@Assembler@asmjit@@QEAAI_K@Z ?_relocCode@X86Assembler@asmjit@@UEBA_KPEAX_K@Z ?_reserve@Assembler@asmjit@@QEAAI_K@Z ?_reserve@PodVectorBase@asmjit@@IEAAI_K0@Z ?_x86CondToCmovcc@asmjit@@3QBIB ?_x86CondToJcc@asmjit@@3QBIB ?_x86CondToSetcc@asmjit@@3QBIB ?_x86InstExtendedInfo@asmjit@@3QBUX86InstExtendedInfo@1@B ?_x86InstInfo@asmjit@@3QBUX86InstInfo@1@B ?_x86ReverseCond@asmjit@@3QBIB ?add@JitRuntime@asmjit@@UEAAIPEAPEAXPEAUAssembler@2@@Z ?add@StaticRuntime@asmjit@@UEAAIPEAPEAXPEAUAssembler@2@@Z ?align@X86Assembler@asmjit@@UEAAIII@Z ?alloc@VMemMgr@asmjit@@QEAAPEAX_KI@Z ?alloc@VMemUtil@asmjit@@SAPEAX_KPEA_KI@Z ?allocProcessMemory@VMemUtil@asmjit@@SAPEAXPEAX_KPEA_KI@Z ?allocZeroed@Zone@asmjit@@QEAAPEAX_K@Z ?bind@Assembler@asmjit@@UEAAIAEBULabel@2@@Z ?callCpuId@X86CpuUtil@asmjit@@SAXIIPEATX86CpuId@2@@Z ?detect@X86CpuUtil@asmjit@@SAXPEAUX86CpuInfo@2@@Z ?detectHwThreadsCount@CpuInfo@asmjit@@SAIXZ ?dup@Zone@asmjit@@QEAAPEAXPEBX_K@Z ?embed@Assembler@asmjit@@UEAAIPEBXI@Z ?embedLabel@X86Assembler@asmjit@@QEAAIAEBULabel@2@@Z ?emit@Assembler@asmjit@@QEAAII@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@00@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@00H@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@00_K@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@0@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@0H@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@0_K@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@H@Z ?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@_K@Z ?emit@Assembler@asmjit@@QEAAIIH@Z ?emit@Assembler@asmjit@@QEAAII_K@Z ?flush@HostRuntime@asmjit@@UEAAXPEAX_K@Z ?getCpuInfo@HostRuntime@asmjit@@UEAAPEBUCpuInfo@2@XZ ?getHost@CpuInfo@asmjit@@SAPEBU12@XZ ?getPageGranularity@VMemUtil@asmjit@@SA_KXZ ?getPageSize@VMemUtil@asmjit@@SA_KXZ ?getStackAlignment@HostRuntime@asmjit@@UEAAIXZ ?make@Assembler@asmjit@@UEAAPEAXXZ ?noOperand@asmjit@@3UOperand@1@B ?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KAEBUX86Reg@2@IHI@Z ?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KHI@Z ?release@JitRuntime@asmjit@@UEAAIPEAX@Z ?release@StaticRuntime@asmjit@@UEAAIPEAX@Z ?release@VMemMgr@asmjit@@QEAAIPEAX@Z ?release@VMemUtil@asmjit@@SAIPEAX_K@Z ?releaseProcessMemory@VMemUtil@asmjit@@SAIPEAX0_K@Z ?relocCode@Assembler@asmjit@@QEBA_KPEAX_K@Z ?reset@Assembler@asmjit@@QEAAX_N@Z ?reset@PodVectorBase@asmjit@@QEAAX_N@Z ?reset@VMemMgr@asmjit@@QEAAXXZ ?reset@Zone@asmjit@@QEAAX_N@Z ?sdup@Zone@asmjit@@QEAAPEADPEBD@Z ?setArch@X86Assembler@asmjit@@QEAAII@Z ?setError@CodeGen@asmjit@@QEAAIIPEBD@Z ?setErrorHandler@CodeGen@asmjit@@QEAAIPEAUErrorHandler@2@@Z ?sformat@Zone@asmjit@@QEAAPEADPEBDZZ ?shrink@VMemMgr@asmjit@@QEAAIPEAX_K@Z ?x86RegData@asmjit@@3UX86RegData@1@B

Name

.text

Size

3.5MB

Virtual Size

3.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

284KB

Virtual Size

313KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

145KB

Virtual Size

144KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.iseeyou

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.iseeyou

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.iseeyou

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

27KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

107KB

Virtual Size

106KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=203, id=261, version=33145,

count=17, id=260, version=35207,

count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=10, id=259, version=35207,

count=118, id=261, version=35207,

count=1, id=259, version=35222,

count=2, id=257, productName=VS2015 UPD3.1 build 24215, version=24215,

count=1, id=260, version=26706,

count=7, id=261, version=32216,

count=4, id=260, version=35222,

count=13, id=259, version=33145,

count=29, id=260, version=33145,

count=1, id=262, version=33145,

count=45, id=257, version=33145,

count=580, id=1, productName=Unmarked objects,

count=40, id=261, version=35222,

count=6, productName=Unmarked objects (old),

count=130, id=265, version=35222,

count=1, id=256, version=35222,

count=1, id=255, version=35222,

count=1, id=151,

count=1, id=258, version=35222,