CometSploit.zip
- SHA256 053e0ea2ecbec6faadcfd80b8facf9775a11f4aeef90ec4c37ae6be5bdcc4133
Behavioral task
behavioral1
Sample
CometSploit.exe
Resource
win11-20260513-en
windows11-21h2-x64
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
bin/Loader.exe
Resource
win11-20260513-en
windows11-21h2-x64
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
bin/Module.dll
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
bin/decompiler.exe
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
General
- Target CometSploit.zip
- Size 24.4MB
- Sample260724-afrfradm7t
- SHA256 053e0ea2ecbec6faadcfd80b8facf9775a11f4aeef90ec4c37ae6be5bdcc4133
- MD5 95c0637ca9a41b04714aa5405fc89646
- SHA1 778078218e3484744349fe1de6190a3fdfa72a45
- SHA512 523edeac2cd2d648a82b2f8d0af6a95ae255e187832bef88aa394a9e2a2b1fab71d034e11b8dba74a21fcc9278a2fac870ebc6b1d40366f751274e25ab1af82d
- SSDEEP 393216:ZR1YqDtgKki5fvDLiWI3g2yYqW42e7MUceyQ+L8hhels1/oMnFGbQpsUCg:ZomgKki5HHTOKDcQE8iihNnkbQpgg
- TLSH T1DD4733DC46DFC1DF2C19B9A70BE09281A1F3582B8DA6E157803EC1E73CACF0694A7655
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/bin/Loader.exe themida - Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/CometSploit.exe unpack001/bin/Loader.exe unpack001/bin/Module.dll unpack001/bin/decompiler.exe
File Explorer
-
CometSploit.zip.zip 24.4MB
-
CometSploit.exe.exe 52.2MB
-
bin/Loader.exe.exe 3.4MB
-
bin/Module.dll.dll 2.6MB
-
bin/decompiler.exe.exe 2.6MB
CometSploit.exe
- IMPHASH 4e2bd2c481372f7ab13b83b63b424e97
- SHA256 5645d099e8a49e6ed3a8c61511f9ee0f0fda3c71d18de54a242b86115e38fd98
- MD5 5a58d69d1b568fd8d9b9e533dd17605e
- SHA1 3231440cf79abc64518f6b658589da565ae9014c
- SHA512 62b9af507ed0e40f4062d23203b458d5749a2f73b57bbdcef34821dd6cfb816a310ecf7a572ee371bc27a997ff8714d846f7a72f1e42c3fe939e82855c9fd945
- SSDEEP 393216:8+AEGHdPInqftRnGg9pH07xLfUxf7T6ZUrxy:8+AExqftRbpH0BfUxf7Ti
- TLSH T13FC7BE13F6821166C2975075CD768342F3343C22BB2582DBBA6C6AE85F5B5E01AF27F4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
576160
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
QueryPerformanceCounter
PostQueuedCompletionStatus
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
GetProcAddress
LoadLibraryExW
Name
.text
Size
4.6MB
Virtual Size
4.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
46.6MB
Virtual Size
46.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
808KB
Virtual Size
33.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
123KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
110KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
bin/Loader.exe
- SHA256 60e2c058f255aa271553496a292549c13ae5bdff55a9696d6b70282a813df45f
- MD5 00ee414d5165744b3c519d31c66e17af
- SHA1 4966ee8df2cc42c6fa32d071628bb7d3b7ab3040
- SHA512 18b157fc0872111593940169aa25f9a32d32fe88753277600678c589035396b962f7114fc88684bdff592020900b4a18d6d7e813e30a29aabfd76aa347489de2
- SSDEEP 98304:76vjI0Yr6rttYIzEcNZQd33W/xSWGpyt9G:Who6rttYIfNZUyxMQG
- TLSH T139F5334F90388677EEDCE0B157BDA96101BB99787ED3BBE5D620029E9815C40CC352FA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6053976
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
Size
24KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
Size
6KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
219B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
1KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
267B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
181B
Virtual Size
196B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.imports
Size
1KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.themida
Size
Virtual Size
5.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.boot
Size
3.4MB
Virtual Size
3.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16B
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35207,
count=10, id=260, version=35207,
count=31, id=261, version=35207,
count=6, id=257, version=35207,
count=9, id=257, version=35222,
count=197, id=1, productName=Unmarked objects,
count=1, id=265, version=35228,
count=1, id=255, version=35228,
count=1, id=258, version=35228,
bin/Module.dll
- IMPHASH f6c488c3b43bba37c9234fdd9d6f796b
- SHA256 591af247ab7556919df65e9e30ffaa62f79801b2ca835864b276da986b3b55db
- MD5 3327c6266cb816c7a9a9419a4b245c09
- SHA1 ac1e5e233e9207f89fae0a780433536e911129fa
- SHA512 e18f106d41371cf403e4328f782454d2cacca7f18df67ada032d4609ef4d46563f79acc27822a0b57c0fc2c4069fb7280b787503cf43d1a7452170a9a828c12d
- SSDEEP 49152:Pbr7Lbr7Lbr7Lbr7pxDqLFeZi5XA/aP68ufi1dmaJbp33f408x0zXBJe3c6LPUV:VxQo6681x3f408x0zXBJG
- TLSH T15AC55BBB65E500EEC465F0F8B6970907D7B2F4E0036097FB01A456699F57BE04A3A2E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1591088
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Ttv26\Documents\projs\Human\comet\Module-Dev\version-ddf02245bdbb428c\2\bin\Intermediate\Release\Module.pdb
ws2_32
socket
ntohs
inet_ntoa
htons
getaddrinfo
inet_pton
closesocket
gethostname
ioctlsocket
getpeername
recvfrom
freeaddrinfo
sendto
recv
listen
htonl
getsockname
connect
bind
accept
select
__WSAFDIsSet
WSAIoctl
setsockopt
WSACleanup
WSAStartup
WSAGetLastError
WSASetLastError
WSAWaitForMultipleEvents
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
send
getsockopt
wldap32
ord46
ord211
ord60
ord45
ord217
ord33
ord50
ord301
ord200
ord30
ord79
ord35
ord143
ord32
ord27
ord26
ord22
ord41
normaliz
IdnToUnicode
IdnToAscii
crypt32
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertFindExtension
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
kernel32
CreateThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
CreateNamedPipeA
WriteFile
GetModuleHandleA
DisconnectNamedPipe
CreateFileA
CloseHandle
CreateFileMappingA
GetCurrentProcessId
MapViewOfFile
ConnectNamedPipe
QueryPerformanceFrequency
QueryPerformanceCounter
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
LoadLibraryA
GetProcAddress
VerSetConditionMask
GetModuleHandleW
FreeLibrary
GetModuleFileNameA
GetCurrentProcess
GetEnvironmentVariableA
GetModuleHandleExA
DisableThreadLibraryCalls
K32GetModuleInformation
AddVectoredExceptionHandler
CreateProcessA
CreateDirectoryW
FindFirstFileW
GetFileSizeEx
VirtualProtect
HeapFree
HeapReAlloc
FindNextFileW
VirtualAlloc
RemoveDirectoryW
SetFilePointer
FindClose
CreateFileW
GetFileAttributesW
SetFileAttributesW
Sleep
GetLastError
DeleteFileW
HeapAlloc
GetProcessHeap
IsBadReadPtr
VirtualQuery
ReleaseSRWLockExclusive
ExitThread
GetTickCount
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
SetEvent
WaitForSingleObject
CreateEventA
GetSystemDirectoryA
SetLastError
FormatMessageW
MoveFileExA
WaitForSingleObjectEx
GetStdHandle
GetFileType
PeekNamedPipe
WaitForMultipleObjects
SleepEx
VerifyVersionInfoW
GetSystemTimeAsFileTime
GetCPInfo
CompareStringEx
LCMapStringEx
DecodePointer
EncodePointer
WakeAllConditionVariable
SleepConditionVariableSRW
GetFileInformationByHandleEx
CopyFileW
AreFileApisANSI
GetFileInformationByHandle
GetFileAttributesExW
FindFirstFileExW
GetCurrentDirectoryW
GetLocaleInfoEx
LocalFree
FormatMessageA
InitializeSListHead
FreeLibraryAndExitThread
GetModuleHandleExW
GetDriveTypeW
GetTimeZoneInformation
FlushFileBuffers
SetStdHandle
SetEndOfFile
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
HeapSize
WriteConsoleW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetFilePointerEx
ExitProcess
AcquireSRWLockExclusive
GetModuleFileNameW
GetFullPathNameW
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TryAcquireSRWLockExclusive
GetCurrentThreadId
RtlVirtualUnwind
user32
FindWindowA
wsprintfA
MessageBoxA
GetForegroundWindow
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
GetSystemMetrics
mouse_event
keybd_event
GetWindowThreadProcessId
advapi32
CryptGenRandom
CryptGetHashParam
CryptAcquireContextA
CryptDestroyKey
GetCurrentHwProfileW
CryptAcquireContextW
GetCurrentHwProfileA
CryptEncrypt
CryptReleaseContext
CryptDecrypt
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptSetKeyParam
CryptImportKey
bcrypt
BCryptGenRandom
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
536KB
Virtual Size
535KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
25KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
74KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
40KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=199, id=261, version=35222,
count=52, id=260, version=35222,
count=24, id=259, version=35222,
count=12, id=260, version=34120,
count=7, id=253, version=35207,
count=10, id=259, version=35207,
count=16, id=260, version=35207,
count=86, id=261, version=35207,
count=344, id=1, productName=Unmarked objects,
count=25, id=257, version=35222,
count=125, id=260, version=33519,
count=84, id=265, version=35228,
count=1, id=255, version=35228,
count=1, id=258, version=35228,
bin/decompiler.exe
- IMPHASH c74cd4d387061a9fa73578a0a860a2a6
- SHA256 3d1775cfc009c33a04f0b6d93998e3101112f80d2005a01167394e5c3020524c
- MD5 7679e2a5ac580198fed42357d0b05f2d
- SHA1 9a8c38032782af12e468e4e549079070e4645a65
- SHA512 01fc63cc4471795f23126db196611b71f9286901613c9e5f64cf2c22c9cc9ba8da5517be18f8f217014a7eac50e1e52d828049b99607d8472ad99fb57150b463
- SSDEEP 49152:nptYuLamcGVxrpzbKm69GhyNaRfwkGFPjW5RGjcR40PZ:n8ultKrWPGS4
- TLSH T189C508656A5B99BCD15AC87083068A775A2174DF0B36B8FF45C886393FADFB41B38304
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
2030144
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
decompiler.pdb
kernel32
GetProcessHeap
HeapFree
HeapReAlloc
FreeConsole
SwitchToThread
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetCurrentThread
GetSystemTimePreciseAsFileTime
CloseHandle
GetQueuedCompletionStatusEx
GetLastError
CreateIoCompletionPort
SetFileCompletionNotificationModes
SetLastError
GetFinalPathNameByHandleW
Sleep
GetModuleHandleA
GetProcAddress
GetCurrentThreadId
GetCurrentDirectoryW
RtlCaptureContext
GetCurrentProcess
RtlLookupFunctionEntry
WaitForSingleObjectEx
LoadLibraryA
lstrlenW
GetCurrentProcessId
CreateMutexA
ReleaseMutex
RtlVirtualUnwind
WideCharToMultiByte
GetModuleHandleW
FormatMessageW
GetStdHandle
GetConsoleMode
GetConsoleOutputCP
WaitForSingleObject
MultiByteToWideChar
WriteConsoleW
FlsAlloc
GetModuleHandleExW
FlsFree
FlsSetValue
HeapAlloc
IsThreadAFiber
GetEnvironmentVariableW
QueryPerformanceFrequency
QueryPerformanceCounter
SetHandleInformation
PostQueuedCompletionStatus
GetSystemInfo
CreateThread
SetUnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
ws2_32
send
listen
ioctlsocket
getaddrinfo
freeaddrinfo
WSASocketW
WSACleanup
WSAStartup
WSAIoctl
bind
recv
setsockopt
accept
WSASend
shutdown
closesocket
WSAGetLastError
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
WakeByAddressAll
WaitOnAddress
ntdll
NtCreateFile
NtDeviceIoControlFile
NtWriteFile
RtlNtStatusToDosError
NtCancelIoFileEx
bcryptprimitives
ProcessPrng
vcruntime140
memcpy
__current_exception_context
__current_exception
__C_specific_handler
_CxxThrowException
memmove
memset
memcmp
__CxxFrameHandler3
api-ms-win-crt-math-l1-1-0
__setusermatherr
pow
api-ms-win-crt-runtime-l1-1-0
_register_thread_local_exe_atexit_callback
_c_exit
_crt_atexit
_register_onexit_function
_cexit
__p___argv
__p___argc
_exit
exit
terminate
_initterm_e
_initterm
_get_initial_narrow_environment
_seh_filter_exe
_set_app_type
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
477KB
Virtual Size
476KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
880B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
92KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35721,
count=3, id=259, version=35721,
count=9, id=260, version=35721,
count=23, id=261, version=35721,
count=3, id=257, version=35222,
count=121, id=1, productName=Unmarked objects,
count=14, productName=Unmarked objects (old),
count=1, id=258, version=36248,