compiled.zip
- SHA256 0d797cdea22b0bbc5e88504dc9785fe574f3b6b2d9eb467f60c954a0e9063215
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Tuff.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
600 seconds
Behavioral task
behavioral2
Sample
Tuff.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
10 signatures
600 seconds
General
- Target compiled.zip
- Size 859KB
- Sample260724-e7yflagk6w
- SHA256 0d797cdea22b0bbc5e88504dc9785fe574f3b6b2d9eb467f60c954a0e9063215
- MD5 d62ce72a1bfe135076c616e71f838521
- SHA1 30ef3be79e93093868d1d4779524139bba4e3ded
- SHA512 3fbd20601bae26f001b79127f6dbafff06bbee9508b518d996b64ab4c95002ea1e54d1fba4174a3fccf89da184ff44624f2a89351300ffe564391c25e38a31c8
- SSDEEP 24576:ngLJYyHrdOV0jorq11epaYDeilHZMGexI:ngLJzLToq11epJDecHZMGexI
- TLSH T13A1533FD5F714EFCB75D792EAA9E89C14329781B4AB4C84C134479834AF893E58F8290
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Tuff.dll unpack001/Tuff.exe
File Explorer
-
compiled.zip.zip 859KB
-
Tuff.dll.dll 1.3MB
-
Tuff.exe.exe 418KB
Tuff.dll
- IMPHASH 71c8f42beb226c1b688328ebb7f3e688
- SHA256 d24beb7aec355d8ec98d4e1080fce5dec7220e4479dd8c239de0fe7cf2fe76d1
- MD5 a29815cfd4f008e1924ddb929b37eab9
- SHA1 98a62290c3d603a9f4572e5047e3c452363b977a
- SHA512 918450440a2dfad94aa183c33286046ee1cd31478e98ab44d6160ac822d9666d9463332cfc6bad03fb18a6b1e4119483fd95f309145630f5fb6256f569a25755
- SSDEEP 24576:wPw0ul1UeqFb4p+syxhxWDjdDCGrWL9SI7NLOPb3YAMeuMzYLsDtnsbfLixnw/p1:wYDtqF4C2ndNnMhM8wDG2xnw7
- TLSH T142558D66A1A800FCD5BFD079829B6A07E7B63405036096EB13EC46653F67BE11FBE311
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1046276
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
d3d11
D3D11CreateDeviceAndSwapChain
d3d12
ord101
dxgi
CreateDXGIFactory1
kernel32
CreateThread
VirtualProtect
OpenFileMappingW
MapViewOfFile
DisableThreadLibraryCalls
GetModuleHandleW
GetProcAddress
LoadLibraryW
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
GetEnvironmentVariableA
CreateDirectoryA
DeleteFileA
GetCurrentProcess
GetTickCount64
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
GetLastError
LocalFree
FormatMessageA
GetSystemInfo
VirtualQueryEx
ReadProcessMemory
WriteProcessMemory
OutputDebugStringA
MultiByteToWideChar
WideCharToMultiByte
TerminateProcess
Sleep
GetLocaleInfoA
IsDBCSLeadByte
WaitForSingleObject
CreateEventW
GetLocalTime
HeapCreate
HeapAlloc
HeapReAlloc
HeapFree
GetCurrentThreadId
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
Thread32First
Thread32Next
VirtualAlloc
VirtualFree
VirtualQuery
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
IsDebuggerPresent
GetCurrentProcessId
QueryPerformanceFrequency
QueryPerformanceCounter
LoadLibraryA
CloseHandle
GetSystemTimeAsFileTime
GetModuleHandleA
InitializeSListHead
user32
LoadCursorW
ClientToScreen
SetCursor
SetCursorPos
RegisterClassExW
ReleaseCapture
SetCapture
GetCapture
GetKeyState
GetMessageExtraInfo
TrackMouseEvent
GetKeyboardLayout
GetClipboardData
ScreenToClient
IsWindowUnicode
GetCursorPos
GetClientRect
EmptyClipboard
SetClipboardData
CloseClipboard
GetAsyncKeyState
GetForegroundWindow
GetWindowThreadProcessId
DefWindowProcW
OpenClipboard
SetWindowLongPtrW
CreateWindowExW
DestroyWindow
CallWindowProcW
UnregisterClassW
shell32
ShellExecuteW
msvcp140
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Xbad_function_call@std@@YAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
_Thrd_hardware_concurrency
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Id_cnt@id@locale@std@@0HA
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Thrd_join
_Thrd_id
_Mtx_lock
_Mtx_unlock
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??Bios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?setf@ios_base@std@@QEAAHHH@Z
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
imm32
ImmGetContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmReleaseContext
d3dcompiler_47
D3DCompile
vcruntime140
_CxxThrowException
__std_terminate
memchr
memcmp
memcpy
memmove
strchr
_purecall
__current_exception
__current_exception_context
__std_type_info_destroy_list
memset
__std_exception_copy
__std_exception_destroy
__C_specific_handler
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-string-l1-1-0
strpbrk
iscntrl
strspn
isgraph
ispunct
isdigit
islower
isupper
isalpha
_stricmp
strncpy
isalnum
tolower
strcmp
isxdigit
strncmp
strcspn
isspace
toupper
strncat
api-ms-win-crt-runtime-l1-1-0
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initterm_e
_configure_narrow_argv
terminate
_seh_filter_dll
_beginthreadex
_errno
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
api-ms-win-crt-convert-l1-1-0
strtof
atof
strtoul
strtoull
atoi
strtod
api-ms-win-crt-heap-l1-1-0
free
realloc
malloc
_callnewh
api-ms-win-crt-stdio-l1-1-0
fopen
__stdio_common_vfprintf
ftell
fflush
_wfopen
__acrt_iob_func
_get_stream_buffer_pointers
fclose
fseek
__stdio_common_vsprintf
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
fread
fputc
fgetpos
__stdio_common_vsscanf
fgetc
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-math-l1-1-0
floor
cosh
cos
ceil
ceilf
cosf
sinf
sqrtf
tanf
atan2
fmod
asin
acos
_dsign
round
modf
log10
log2
sin
fmodf
ldexp
sinh
exp
floorf
powf
acosf
atan2f
log
logf
pow
frexp
sqrt
atan
tanh
tan
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-time-l1-1-0
_difftime64
_gmtime64_s
_time64
clock
_localtime64_s
strftime
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
220KB
Virtual Size
220KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=34321,
count=3, id=259, version=34321,
count=8, id=260, version=34321,
count=26, id=261, version=34321,
count=21, id=257, version=30795,
count=343, id=1, productName=Unmarked objects,
count=4, id=260, version=34810,
count=67, id=261, version=34810,
count=1, id=255, version=34810,
count=1, id=258, version=34810,
Tuff.exe
- IMPHASH 022356fd02cd42ce3e7a7de38d95e978
- SHA256 6ae54a64ce0f6e1103c5befe2118de9f28e72f1ff84f081f0fa5b9a50281323a
- MD5 542a3dfdb0ea8d36a1949731c3114e2c
- SHA1 d0f057d2adf96cf35bda87be6aecebad117be5e6
- SHA512 81b288bec283a4d8bd391294e080765db663c50bbd3107cda7dd50db5d41e62e2cae15d04183b9a0d65891e00cb012abda2d73cd860a19d74b3dadbb268f8911
- SSDEEP 12288:YL75lT6oHlmRnKuNs4msbT0pBentabnbvg/ZUsZQ4/QBbAQxbDvbBbCbe8bxmb4Q:275hdH8KuNs4msbT0pBen7hYOZu
- TLSH T175947C26B69001BDD17B92BC4B5BAA05F636B44B4351CACF3BDC49A11F87AD09E7F210
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
168436
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
dwmapi
DwmSetWindowAttribute
shlwapi
PathFindFileNameW
ole32
CoUninitialize
CoInitializeEx
CoTaskMemFree
advapi32
EventUnregister
EventRegister
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
EventSetInformation
EventWriteTransfer
RegGetValueW
shell32
SHCreateDirectoryExW
user32
SetWindowPos
GetMessageW
TranslateMessage
SetProcessDPIAware
LoadIconW
LoadCursorW
GetWindow
GetWindowThreadProcessId
EnumWindows
SetWindowLongPtrW
GetWindowLongPtrW
ClientToScreen
MessageBoxW
GetWindowRect
DispatchMessageW
GetForegroundWindow
UpdateWindow
GetSystemMetrics
KillTimer
SetTimer
ReleaseCapture
IsIconic
IsWindowVisible
GetClientRect
SetLayeredWindowAttributes
ShowWindow
DestroyWindow
IsWindow
CreateWindowExW
RegisterClassExW
PostQuitMessage
DefWindowProcW
PostMessageW
UnregisterHotKey
SendMessageW
gdi32
GetStockObject
winmm
timeEndPeriod
timeBeginPeriod
comdlg32
GetOpenFileNameW
GetSaveFileNameW
winhttp
WinHttpOpen
WinHttpCloseHandle
WinHttpConnect
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpOpenRequest
WinHttpSendRequest
WinHttpReadData
bcrypt
BCryptCreateHash
BCryptGetProperty
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
BCryptHashData
BCryptFinishHash
BCryptDestroyHash
kernel32
SleepConditionVariableSRW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
ReleaseSRWLockExclusive
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
FreeLibrary
LoadLibraryW
LoadLibraryExW
HeapFree
InitializeSListHead
OutputDebugStringW
OutputDebugStringA
GetFileAttributesW
VirtualFreeEx
WakeAllConditionVariable
GetExitCodeThread
CreateRemoteThread
WaitForSingleObject
WriteProcessMemory
ReadProcessMemory
VirtualQueryEx
GetSystemInfo
Module32FirstW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
OpenProcess
GetCurrentProcess
FormatMessageA
LocalFree
GetLastError
GetComputerNameW
GetWindowsDirectoryW
GetVolumeInformationW
CreateDirectoryW
VirtualAllocEx
AcquireSRWLockExclusive
WideCharToMultiByte
MultiByteToWideChar
MoveFileExW
IsDebuggerPresent
GetProcessHeap
Module32NextW
MulDiv
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
SetThreadPriority
GetCurrentThread
Sleep
QueryPerformanceFrequency
QueryPerformanceCounter
CloseHandle
GetTempPathW
WriteFile
ReadFile
DeleteFileW
GetEnvironmentVariableW
CreateFileW
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
_Query_perf_counter
_Thrd_hardware_concurrency
?_Xbad_function_call@std@@YAXXZ
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Mtx_unlock
_Mtx_lock
_Thrd_id
_Thrd_join
_Query_perf_frequency
vcruntime140
__current_exception
__current_exception_context
memset
memmove
memcpy
memcmp
wcsrchr
_CxxThrowException
memchr
_purecall
__std_terminate
__std_exception_copy
__std_exception_destroy
__C_specific_handler
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_seh_filter_exe
_initterm_e
exit
_exit
_crt_atexit
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_invalid_parameter_noinfo_noreturn
_beginthreadex
terminate
_set_app_type
_initialize_onexit_table
_register_onexit_function
_initterm
api-ms-win-crt-convert-l1-1-0
strtof
strtod
strtol
strtoull
atoi
wcstol
_ultow_s
_wtoi
api-ms-win-crt-stdio-l1-1-0
__p__commode
__stdio_common_vsprintf
_set_fmode
api-ms-win-crt-string-l1-1-0
wcslen
isdigit
towlower
isspace
_wcsicmp
wcscmp
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
_callnewh
malloc
free
Name
.text
Size
174KB
Virtual Size
173KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
147KB
Virtual Size
147KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
540B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=34321,
count=10, id=260, version=34321,
count=35, id=261, version=34321,
count=6, id=257, version=34321,
count=25, id=257, version=30795,
count=219, id=1, productName=Unmarked objects,
count=6, productName=Unmarked objects (old),
count=11, id=261, version=34810,
count=1, id=255, version=34810,
count=1, id=151,
count=1, id=258, version=34810,