2026-07-19_0be33c3c2ce906342cb8c8be32016139_amadey_darkgate_elex_glassworm_luca-stealer_njrat_qakbot_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-07-19_0be33c3c2ce906342cb8c8be32016139_amadey_darkgate_elex_glassworm_luca-stealer_njrat_qakbot_smoke-loader
Size 8.4MB
Sample260720-cbc4nsew5x
SHA256 608147cce8adf72292a7ff829ee774b44accc9e24f7c577cee2e4c7300a94405
MD5 0be33c3c2ce906342cb8c8be32016139
SHA1 0fb90a089579ed713a77b709856e88c7251f8d60
SHA512 f3e45ff3835397a2333ef9e32ad00b12fe586585df45628da0cadeb10f16f0ddc0520f01695059446131ecb6b95ec507d1d9f6aed485f9b869410e36ddb2efa9
SSDEEP 196608:W1dZ8uwtfIDKXNHr7DDMaQ17DYApARlNSI:UoBTr/DMaQ1tqlNSI
TLSH
T10496D020BA06C072DA8110B5993DBFEF646CA5740B6455C3F3C82E6EDDB05D22F3699B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-07-19_0be33c3c2ce906342cb8c8be32016139_amadey_darkgate_elex_glassworm_luca-stealer_njrat_qakbot_smoke-loader

File Explorer

2026-07-19_0be33c3c2ce906342cb8c8be32016139_amadey_darkgate_elex_glassworm_luca-stealer_njrat_qakbot_smoke-loader

.exe 8.4MB

2026-07-19_0be33c3c2ce906342cb8c8be32016139_amadey_darkgate_elex_glassworm_luca-stealer_njrat_qakbot_smoke-loader

IMPHASH 448c20e1ce1ba7249af673cfdaef969e
SHA256 608147cce8adf72292a7ff829ee774b44accc9e24f7c577cee2e4c7300a94405
MD5 0be33c3c2ce906342cb8c8be32016139
SHA1 0fb90a089579ed713a77b709856e88c7251f8d60
SHA512 f3e45ff3835397a2333ef9e32ad00b12fe586585df45628da0cadeb10f16f0ddc0520f01695059446131ecb6b95ec507d1d9f6aed485f9b869410e36ddb2efa9
SSDEEP 196608:W1dZ8uwtfIDKXNHr7DDMaQ17DYApARlNSI:UoBTr/DMaQ1tqlNSI
TLSH
T10496D020BA06C072DA8110B5993DBFEF646CA5740B6455C3F3C82E6EDDB05D22F3699B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

5c:70:89:5a:c4:f5:38:4f:46:33:15:93:67:fe:dd:11:3c:5f:9b:1f:cc:7f:6f:9b:c4:41:5b:9c:13:c4:8e:c4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

NO CERTIFICATE

Chains

Jan 1, 0001

Minor OS version

Major OS version

Entry point

3109772

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\Msp2Global\worktree\client\files\bin\msp2client_dev.pdb

kernel32

QueryFullProcessImageNameA OpenProcess GetLastError FindNextFileA FindFirstFileA FindClose GetCommandLineA WriteConsoleW SetEndOfFile HeapQueryInformation HeapSize OutputDebugStringW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW HeapReAlloc SetFileAttributesW GetTimeZoneInformation SetFileAttributesA Process32Next Process32First CreateToolhelp32Snapshot GetModuleFileNameA Sleep ExitProcess CreateProcessW GetExitCodeProcess CreateDirectoryW GetFileAttributesExW SetStdHandle GetCurrentDirectoryW SetCurrentDirectoryW DeleteFileW FlushFileBuffers SetFilePointerEx GetFileSizeEx GetConsoleOutputCP ReadConsoleW GetConsoleMode EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect IsThreadAFiber FlsFree FlsSetValue FlsGetValue FlsAlloc GetStdHandle GetFullPathNameW FreeLibraryAndExitThread ExitThread FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetFileType GetFileInformationByHandle GetDriveTypeW GetCurrentProcessId GetModuleHandleExW LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount InterlockedFlushSList InterlockedPushEntrySList RtlUnwind RaiseException WaitNamedPipeW PeekNamedPipe GetStartupInfoA GetModuleFileNameW GetThreadTimes GetCurrentThread OutputDebugStringA DebugBreak CreateThread WaitForSingleObject FindFirstFileExA SetLastError GetStartupInfoW IsDebuggerPresent TerminateProcess UnhandledExceptionFilter InitializeSListHead GetCPInfo CompareStringEx CreateSymbolicLinkW GetFileInformationByHandleEx GetModuleHandleW CloseThreadpoolWait SetThreadpoolWait CreateThreadpoolWait CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks SetThreadpoolTimer CreateThreadpoolTimer FreeLibraryWhenCallbackReturns GetTickCount64 GetSystemTimeAsFileTime GetCurrentProcessorNumber FlushProcessWriteBuffers CreateSemaphoreExW CreateEventExW InitOnceExecuteOnce GetTempPathW SetFileInformationByHandle GetStringTypeW QueryPerformanceFrequency QueryPerformanceCounter SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive LCMapStringEx DecodePointer EncodePointer GetLocaleInfoEx DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection GetNativeSystemInfo SwitchToThread WaitForSingleObjectEx WriteFile SetFilePointer ReadFile GetFileSize CreateFileMappingA UnmapViewOfFile MapViewOfFile GetLocaleInfoA CompareStringA lstrlenW GlobalLock GlobalUnlock FreeLibrary GetSystemDirectoryA GetExitCodeThread MultiByteToWideChar FormatMessageA LocalFree LocalAlloc SetUnhandledExceptionFilter GlobalAlloc GetTempFileNameA GetTempPathA RemoveDirectoryA DeleteFileA CreateDirectoryA AllocConsole GetCurrentProcess OpenThread GetCurrentThreadId SuspendThread ResumeThread GetThreadContext GetModuleHandleA Thread32First Thread32Next RtlCaptureStackBackTrace GetProcAddress GetTickCount LoadLibraryA GetPrivateProfileStringA CreateFileW lstrlenA CreateProcessA GetCurrentDirectoryA GetSystemFirmwareTable GetLogicalDriveStringsA GetSystemInfo IsProcessorFeaturePresent GetVolumeInformationA GetDriveTypeA GetProcessHeap HeapFree HeapAlloc WideCharToMultiByte DeviceIoControl CloseHandle CreateFileA GetComputerNameA SetConsoleCtrlHandler

user32

SetCapture ClientToScreen SetCursorPos LoadImageA DestroyCursor SetCursor ShowCursor GetKeyState GetDC ReleaseDC CharNextExA CharPrevExA RegisterClassA GetMenu InvalidateRect SetWindowTextA GetWindowRect AdjustWindowRectEx SetRect GetWindowLongA SetWindowLongA LoadCursorA PeekMessageA PostThreadMessageA GetKeyboardLayoutNameA GetKeyboardLayout OpenClipboard CloseClipboard SetClipboardData GetClipboardData EmptyClipboard CharNextW GetForegroundWindow LoadIconA FindWindowA ScreenToClient GetCursorPos SetWindowPos FlashWindowEx SendMessageA MessageBoxA SystemParametersInfoA GetSystemMetrics PostQuitMessage GetClientRect UpdateWindow SetFocus MoveWindow ShowWindow DestroyWindow IsWindow CreateWindowExA RegisterClassExA UnregisterClassA GetCapture DefWindowProcA DispatchMessageA TranslateMessage GetMessageA LoadStringA ChangeDisplaySettingsA ReleaseCapture

advapi32

RegCloseKey RegCreateKeyExW CryptGenRandom CryptReleaseContext CryptAcquireContextA GetUserNameA RegSetValueExW RegOpenKeyExW RegQueryValueExW RegOpenKeyExA RegQueryValueExA

shell32

SHGetSpecialFolderPathA ShellExecuteA

ole32

CoInitializeEx CoUninitialize CoCreateInstance

winmm

timeGetDevCaps timeBeginPeriod timeEndPeriod timeGetTime

d3d9

Direct3DCreate9

d3dx9_43

D3DXVec3Normalize D3DXVec3TransformCoord D3DXMatrixRotationZ D3DXMatrixMultiply D3DXMatrixTranslation D3DXMatrixRotationQuaternion D3DXQuaternionRotationAxis D3DXQuaternionMultiply D3DXMatrixRotationYawPitchRoll D3DXMatrixInverse D3DXMatrixRotationX D3DXMatrixTransformation D3DXVec3TransformNormal D3DXMatrixRotationAxis D3DXVec4Transform D3DXVec3Project D3DXVec3Unproject D3DXMatrixScaling D3DXVec2Normalize D3DXMatrixDeterminant D3DXMatrixLookAtRH D3DXMatrixPerspectiveFovRH D3DXMatrixOrthoRH D3DXMatrixOrthoOffCenterRH D3DXGetFVFVertexSize D3DXCreateMatrixStack D3DXCreateCylinder D3DXCreateSphere D3DXMatrixRotationY D3DXLoadSurfaceFromSurface D3DXCreateTexture D3DXCreateTextureFromFileInMemoryEx D3DXSaveSurfaceToFileA D3DXPlaneNormalize D3DXQuaternionRotationYawPitchRoll D3DXMatrixTranspose D3DXAssembleShader

python27

PyLong_AsLongLong PyString_AsString PyFloat_AsDouble PyLong_AsUnsignedLongLong PyCallable_Check PyObject_GetAttr PyObject_GetAttrString PyString_InternFromString PyImport_ImportModule PyExc_ValueError PyExc_EOFError PyExc_StopIteration _Py_EllipsisObject _PyLong_New PyMarshal_ReadObjectFromString PyCode_New PyEval_GetRestricted PyErr_NoMemory PyErr_Occurred PyDict_SetItem PyDict_New PyList_SetItem PyString_FromStringAndSize PyComplex_FromCComplex PyFloat_FromDouble _PyLong_FromByteArray PyInt_FromLong PyUnicodeUCS2_DecodeUTF8 PyCode_Type Py_OptimizeFlag PyEval_EvalCode PyCode_Addr2Line PyObject_AsCharBuffer PyImport_AddModule PyImport_GetMagicNumber Py_FlushLine PyEval_SetTrace PyRun_StringFlags Py_Finalize Py_Initialize Py_SetProgramName PyErr_Fetch PyModule_GetDict _Py_NoneStruct PyNumber_Check PyObject_CallObject PyErr_Print PyErr_BadArgument Py_BuildValue PyModule_AddIntConstant Py_InitModule4 PyArg_ParseTuple Py_IncRef PyTuple_Size PyInt_AsLong PyLong_FromLongLong PyDict_Next PyDict_Size PyList_New PyList_Append PyString_FromString PyDict_GetItemString PyDict_SetItemString PyObject_CallFunction PyErr_SetString PyExc_RuntimeError PyTuple_GetItem PyModule_AddStringConstant PyTuple_New PyTuple_SetItem PyErr_Clear

rascal

GetRascalThreadID WLog RascalProtectRTypes getunknown RascalCallback InitializeRascal FunctionProtect

libcef

cef_post_data_create cef_response_create cef_v8stack_trace_get_current cef_media_router_get_global cef_cookie_manager_get_global_manager cef_stream_writer_create_for_handler cef_stream_writer_create_for_file cef_image_create cef_list_value_create cef_urlrequest_create cef_process_message_create cef_request_create cef_string_multimap_free cef_string_multimap_alloc cef_string_wide_to_utf8 cef_log cef_create_context_shared cef_request_context_create_context cef_request_context_get_global_context cef_drag_data_create cef_dictionary_value_create cef_v8value_create_function cef_v8value_create_array_buffer cef_menu_model_create cef_v8value_create_array cef_v8value_create_object cef_v8value_create_string cef_v8value_create_date cef_v8value_create_double cef_v8value_create_uint cef_v8value_create_int cef_v8value_create_bool cef_v8value_create_null cef_v8value_create_undefined cef_task_runner_get_for_thread cef_task_runner_get_for_current_thread cef_string_multimap_append cef_string_multimap_value cef_string_multimap_key cef_string_multimap_size cef_string_map_append cef_string_map_value cef_string_map_key cef_string_map_size cef_string_list_append cef_string_list_value cef_string_list_size cef_value_create cef_binary_value_create cef_browser_host_create_browser_sync cef_browser_host_create_browser cef_command_line_get_global cef_command_line_create cef_string_map_free cef_string_map_alloc cef_v8context_in_context cef_v8context_get_entered_context cef_v8context_get_current_context cef_print_settings_create cef_execute_java_script_with_user_gesture_for_tests cef_register_widevine_cdm cef_is_web_plugin_unstable cef_register_web_plugin_crash cef_unregister_internal_web_plugin cef_refresh_web_plugins cef_visit_web_plugin_info cef_now_from_system_trace_time cef_end_tracing cef_begin_tracing cef_is_cert_status_error cef_launch_process cef_get_path cef_write_json cef_parse_jsonand_return_error cef_string_utf16_clear cef_string_utf8_to_utf16 cef_string_utf8_clear cef_string_utf16_cmp cef_string_utf16_to_utf8 cef_base64encode cef_parse_json cef_get_extensions_for_mime_type cef_get_mime_type cef_format_url_for_security_display cef_create_url cef_base64decode cef_parse_url cef_clear_cross_origin_whitelist cef_remove_cross_origin_whitelist_entry cef_add_cross_origin_whitelist_entry cef_load_crlsets_file cef_zip_directory cef_delete_file cef_directory_exists cef_create_temp_directory_in_directory cef_create_new_temp_directory cef_get_temp_directory cef_create_directory cef_set_crash_key_value cef_crash_reporting_enabled cef_enable_highdpi_support cef_set_osmodal_loop cef_quit_message_loop cef_run_message_loop cef_do_message_loop_work cef_shutdown cef_initialize cef_execute_process cef_clear_scheme_handler_factories cef_register_scheme_handler_factory cef_register_extension cef_post_delayed_task cef_post_task cef_currently_on cef_string_list_free cef_string_list_alloc cef_string_userfree_utf16_free cef_string_utf16_set cef_post_data_element_create cef_stream_reader_create_for_file cef_stream_reader_create_for_data cef_uriencode cef_uridecode cef_stream_reader_create_for_handler cef_api_hash

iphlpapi

GetAdaptersInfo GetPerAdapterInfo

imm32

ImmSetConversionStatus ImmGetConversionStatus ImmGetCandidateListW ImmSetCompositionStringW ImmGetCompositionStringW ImmGetOpenStatus ImmNotifyIME ImmAssociateContext ImmReleaseContext ImmGetContext ImmIsIME ImmGetIMEFileNameA

shlwapi

PathFindFileNameA

version

GetFileVersionInfoSizeA VerQueryValueA GetFileVersionInfoA

imagehlp

SymFunctionTableAccess64 SymGetModuleBase64 SymInitialize ImageDirectoryEntryToDataEx StackWalk64

devil

ilGetInteger ilGenImages ilInit ilTexImage ilSetPixels ilSave ilOriginFunc ilEnable ilCopyPixels ilConvertImage ilDeleteImages ilBindImage ilLoad

mss32

_AIL_open_stream@12 _AIL_open_digital_driver@16 _AIL_file_type@8 _AIL_decompress_ADPCM@12 _AIL_decompress_ASI@24 _AIL_WAV_info@8 _AIL_set_file_callbacks@16 _AIL_file_read@8 _AIL_mem_free_lock@4 _AIL_enumerate_3D_providers@12 _AIL_open_3D_provider@4 _AIL_close_3D_provider@4 _AIL_open_3D_listener@4 _AIL_close_3D_listener@4 _AIL_set_3D_position@16 _AIL_set_3D_velocity@20 _AIL_set_3D_orientation@28 _AIL_startup@0 _AIL_shutdown@0 _AIL_set_redist_directory@4 _AIL_close_stream@4 _AIL_start_stream@4 _AIL_pause_stream@8 _AIL_set_stream_volume_levels@12 _AIL_stream_volume_levels@12 _AIL_set_stream_loop_count@8 _AIL_stream_status@4 _AIL_last_error@0 _AIL_allocate_sample_handle@4 _AIL_release_sample_handle@4 _AIL_init_sample@4 _AIL_set_sample_file@12 _AIL_start_sample@4 _AIL_stop_sample@4 _AIL_resume_sample@4 _AIL_end_sample@4 _AIL_set_sample_volume_pan@12 _AIL_set_sample_loop_count@8 _AIL_sample_status@4 _AIL_sample_volume_pan@12 _AIL_allocate_3D_sample_handle@4 _AIL_release_3D_sample_handle@4 _AIL_start_3D_sample@4 _AIL_stop_3D_sample@4 _AIL_resume_3D_sample@4 _AIL_end_3D_sample@4 _AIL_set_3D_sample_file@8 _AIL_set_3D_sample_volume@8 _AIL_3D_sample_status@4 _AIL_3D_sample_volume@4 _AIL_update_3D_position@8 _AIL_auto_update_3D_position@8 _AIL_close_digital_driver@4 _AIL_set_3D_sample_loop_count@8

speedtreert

?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z ?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z ?GetCurrentError@CSpeedTreeRT@@SAPBDXZ ?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z ?GetLeafLodSizeAdjustments@CSpeedTreeRT@@QAEPBMXZ ?GetLeafBillboardTable@CSpeedTreeRT@@QBEPBMAAI@Z ?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z ?SetLodLevel@CSpeedTreeRT@@QAEXM@Z ?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ ?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z ?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ ?SetStaticLightingStyle@CSpeedTreeRT@@QAEXW4EStaticLightingStyle@1@@Z ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z ?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z ?DeleteTransientData@CSpeedTreeRT@@QAEXXZ ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ??1CSpeedTreeRT@@QAE@XZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ ??0SGeometry@CSpeedTreeRT@@QAE@XZ ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z ?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z ?SetTime@CSpeedTreeRT@@SAXM@Z ??3CSpeedTreeRT@@SAXPAX@Z ??2CSpeedTreeRT@@SAPAXI@Z ??0CSpeedTreeRT@@QAE@XZ

dinput8

DirectInput8Create

ws2_32

ntohs gethostbyname gethostname sendto ntohl recv ioctlsocket connect closesocket __WSAFDIsSet inet_addr htons htonl WSACleanup WSAStartup WSAGetLastError socket send select

gdi32

CreateFontIndirectA GetTextExtentPoint32W SelectObject SetBkColor SetTextColor TextOutW CreateCompatibleDC DeleteDC SetBkMode SetDIBitsToDevice CreateDIBSection TextOutA GetStockObject EnumFontFamiliesExA GetTextExtentPoint32A DeleteObject GetCharABCWidthsFloatW

oleaut32

VariantClear SysFreeString

discord_game_sdk

DiscordCreate

Name

.text

Size

4.7MB

Virtual Size

4.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

952KB

Virtual Size

952KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

167KB

Virtual Size

691KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdataa0

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

270KB

Virtual Size

270KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=50, id=259, version=33145,

count=213, id=261, version=33145,

count=4, id=170, productName=VS2010 build 30319, version=30319,

count=11, id=261, version=32824,

count=5, id=261, productName=VS2019 v16.11.1 build 30133, version=30133,

count=2, id=257, version=27045,

count=56, id=261, version=24247,

count=1, id=171, productName=VS2010 build 30319, version=30319,

count=1, id=29, version=9178,

count=1, id=262, version=33145,

count=58, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=48, version=9044,

count=7, id=206, productName=VS2012 UPD3 build 60610, version=60610,

count=125, id=207, productName=VS2012 UPD3 build 60610, version=60610,

count=2, id=257, productName=VS2015 [14.0] build 23026, version=23026,

count=117, id=261, productName=VS2019 v16.4.4 build 28316, version=28316,

count=2, productName=Unmarked objects (old),

count=1, id=253, version=35207,

count=32, id=259, version=35207,

count=19, id=260, version=35207,

count=2, id=257, version=33811,

count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=156, version=21202,

count=2, id=123, productName=VS2005 build 50727, version=50727,

count=1, id=260, version=35228,

count=45, id=260, version=33145,

count=31, id=257, version=33145,

count=651, id=1, productName=Unmarked objects,

count=103, id=261, version=35207,

count=316, id=261, version=35228,

count=1, id=255, version=35228,

count=1, id=151,

count=1, id=258, version=35228,