Norecoil_RUST.zip
- SHA256 c59df398d7ed03499931b6251f3e1a0359de08f669eb85a70f9403cc71d56030
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
rust cracked/config.ini
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
rust cracked/config.ini
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
rust cracked/dx.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
rust cracked/dx.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
rust cracked/rust.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral6
Sample
rust cracked/rust.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
General
- Target Norecoil_RUST.zip
- Size 568KB
- Sample260804-ttdllavbpd
- SHA256 c59df398d7ed03499931b6251f3e1a0359de08f669eb85a70f9403cc71d56030
- MD5 35051810d6c08fd01a53be1794a81cc2
- SHA1 326035a66aa2e4a176a25eea90e3357a08fca4ed
- SHA512 2e3b593bb3dcc888be13d2f2b2159fb8f5cd5c9d28a7fa32d7f64a43f739afc86e6968162ab78e22ef691014fd286cf63da80fc45f60b9c91e2672ac5acf616e
- SSDEEP 12288:pv05HjCHSDJckSkf75i6DYoyZoOedn7Q6ptjLkxppi/TQB:pM8SW0dyw7DptQxB
- TLSH T1CAC42393C40B57D3E39F14E4BB04B2C7A1F50BBAEF7AB5C10D4DA5453DA0B2D9829149
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/rust cracked/dx.bin unpack001/rust cracked/rust.exe
File Explorer
-
Norecoil_RUST.zip.zip 568KB
-
rust cracked/config.ini159B
-
rust cracked/dx.bin.exe 537KB
-
rust cracked/rust.exe.exe 538KB
rust cracked/config.ini
- SHA256 b3721657d29536e65c8fef8cf1a71b0c04d8c030c92be067659c7cd3b3e19522
- MD5 c5b48699442f0d06be2d366d150568d5
- SHA1 8a8cd59afa6765bfb31a35a552f99d7b7db975d9
- SHA512 eca87693940a89e70b35f53e3083d94b95d8302442b10956687da58adf7af3302026af0fd642ed47f8e6181595b6b1fc007f232f27d33c1e758a82e8579f2f43
- TLSH T199C09BD9836DD941C69637C4F5B9448691C619CC11E4951D47FCF0145D86543014D37E
- MD5 SHA1 SHA512 TLSH
rust cracked/dx.bin
- IMPHASH 0d9235ffc4d7dfcc97cef393d987847a
- SHA256 cb793f5ef284567f68534a2b9f03ac715aa16f1b2107241a247e4bc3f7c6955e
- MD5 dbf8d659bacabd2f21e960b402d10476
- SHA1 529811f188c7b72028cf15d4304e9f07cecd0fe8
- SHA512 f740d6f8d83002fa787e81f3fb8a3571e2cc27e7d8443c0377ca3b097e2b4baa43e9306c23f60e843ca8acabf645e53da14194f9cdf623224f35581fc2c1eb39
- SSDEEP 6144:+tiVozVxcueTEUEnKReszpQE92ZUoipJhJDaCmvXq1nMhKXhaWd/TZP7S+VoZLT3:odTXZUoiUGnMhKXM+1P7Hs9h
- TLSH T1E2C4AD46F36186DAC4AB947891A7A327F7713C5C0714C6CFB7F89E186BA72D02CA9341
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
306076
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\ZIP\Desktop\งาน imgui\ชมพู\x64\Release\imgui dx11 3.pdb
kernel32
LoadLibraryA
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleW
IsDebuggerPresent
IsProcessorFeaturePresent
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GlobalUnlock
WideCharToMultiByte
Beep
QueryPerformanceCounter
FreeLibrary
GetProcAddress
GetCurrentProcess
GlobalLock
CreateThread
QueryPerformanceFrequency
GlobalFree
GlobalAlloc
GetTempPathA
TerminateProcess
MultiByteToWideChar
user32
DispatchMessageA
GetWindowRect
DestroyWindow
keybd_event
CreateWindowExW
GetSystemMetrics
UnregisterClassW
ShowWindow
GetAsyncKeyState
SetWindowLongA
GetWindowLongA
SetWindowDisplayAffinity
MoveWindow
DefWindowProcA
SetLayeredWindowAttributes
TranslateMessage
RegisterClassExW
ScreenToClient
GetCapture
mouse_event
LoadIconA
PeekMessageA
PostQuitMessage
UpdateWindow
GetKeyState
LoadCursorA
ClientToScreen
TrackMouseEvent
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetForegroundWindow
SetCapture
SetCursor
GetClientRect
ReleaseCapture
SetCursorPos
GetCursorPos
shell32
ShellExecuteA
msvcp140
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?good@ios_base@std@@QEBA_NXZ
??Bios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
urlmon
URLDownloadToFileA
imm32
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmAssociateContextEx
d3dcompiler_43
D3DCompile
dwmapi
DwmExtendFrameIntoClientArea
d3d11
D3D11CreateDeviceAndSwapChain
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memset
_CxxThrowException
memmove
__current_exception_context
__current_exception
__C_specific_handler
strstr
__std_terminate
__std_exception_copy
__std_exception_destroy
memcpy
memchr
memcmp
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_cexit
terminate
_seh_filter_exe
_set_app_type
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
_configure_narrow_argv
__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
_register_onexit_function
_errno
_crt_atexit
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-stdio-l1-1-0
_set_fmode
_get_stream_buffer_pointers
fread
_fseeki64
fsetpos
ungetc
setvbuf
__stdio_common_vsprintf
_wfopen
__p__commode
fgetpos
__stdio_common_vsscanf
__stdio_common_vfprintf
fseek
fclose
fflush
__acrt_iob_func
fgetc
ftell
fwrite
fputc
api-ms-win-crt-string-l1-1-0
strcpy_s
strncmp
strncpy
strcmp
api-ms-win-crt-utility-l1-1-0
qsort
rand
api-ms-win-crt-heap-l1-1-0
malloc
_set_new_mode
free
_callnewh
api-ms-win-crt-convert-l1-1-0
strtof
strtol
atof
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-math-l1-1-0
powf
cosf
sinf
sqrtf
fmodf
acosf
__setusermatherr
ceilf
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
301KB
Virtual Size
300KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
160KB
Virtual Size
164KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
668B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=156, version=21202,
count=4, id=259, version=33731,
count=10, id=260, version=33731,
count=32, id=261, version=33731,
count=6, id=257, version=33731,
count=17, id=257, version=30795,
count=266, id=1, productName=Unmarked objects,
count=9, id=265, version=33811,
count=1, id=255, version=33811,
count=1, id=258, version=33811,
rust cracked/rust.exe
- IMPHASH 3c2681753a5df73e21d300fc94722235
- SHA256 8a2ddd4ae0019bb18d8b37af8a013a159c9d6510012158969ed681db431919ae
- MD5 528b9090abc968587a4d47512f6c9bbe
- SHA1 d2d9e598bcfd13d9ecdf3f1da5aa776e49881eaa
- SHA512 6bb2d8f39619c1655240e8af01d672d72a5fbfac409396797011eea6e74fd257aaf049384d53daa6d49137482d48b48aa6f33a63658490bf524a619b0aa48c41
- SSDEEP 6144:PXD3TCUQqT8nDEYhYYfBQdMs6YFdOovWX6J0JkkwdQRq1n/hXjfWd/TZP7S+VoZd:PIegsOovWasGn/hXjf+1P7Hsd
- TLSH T18EC4AD46F36186DAD4AB947891A3E327F7713C5C0714C6CBB7F89E186BA72D02CA9341
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
306556
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\ZIP\Desktop\งาน imgui\ชมพู\x64\Release\imgui dx11 3.pdb
kernel32
GetConsoleWindow
LoadLibraryA
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleW
IsDebuggerPresent
TerminateProcess
Sleep
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GlobalUnlock
WideCharToMultiByte
Beep
QueryPerformanceCounter
FreeLibrary
GetProcAddress
GetCurrentProcess
GlobalLock
CreateThread
QueryPerformanceFrequency
GlobalFree
GlobalAlloc
GetTempPathA
IsProcessorFeaturePresent
MultiByteToWideChar
user32
DispatchMessageA
GetWindowRect
DestroyWindow
keybd_event
CreateWindowExW
GetSystemMetrics
UnregisterClassW
ShowWindow
GetAsyncKeyState
SetWindowLongA
GetWindowLongA
SetWindowDisplayAffinity
MoveWindow
DefWindowProcA
SetLayeredWindowAttributes
TranslateMessage
RegisterClassExW
ScreenToClient
GetCapture
mouse_event
LoadIconA
PeekMessageA
PostQuitMessage
UpdateWindow
GetKeyState
LoadCursorA
ClientToScreen
TrackMouseEvent
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetForegroundWindow
SetCapture
SetCursor
GetClientRect
ReleaseCapture
SetCursorPos
GetCursorPos
shell32
ShellExecuteA
msvcp140
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?good@ios_base@std@@QEBA_NXZ
??Bios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
urlmon
URLDownloadToFileA
imm32
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmAssociateContextEx
d3dcompiler_43
D3DCompile
dwmapi
DwmExtendFrameIntoClientArea
d3d11
D3D11CreateDeviceAndSwapChain
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memset
_CxxThrowException
memmove
__current_exception_context
__current_exception
__C_specific_handler
strstr
__std_terminate
__std_exception_copy
__std_exception_destroy
memcpy
memchr
memcmp
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_cexit
terminate
_seh_filter_exe
_set_app_type
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
_configure_narrow_argv
__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
_register_onexit_function
_errno
_crt_atexit
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-stdio-l1-1-0
_set_fmode
_get_stream_buffer_pointers
fread
_fseeki64
fsetpos
ungetc
setvbuf
__stdio_common_vsprintf
_wfopen
__p__commode
fgetpos
__stdio_common_vsscanf
__stdio_common_vfprintf
fseek
fclose
fflush
__acrt_iob_func
fgetc
ftell
fwrite
fputc
api-ms-win-crt-string-l1-1-0
strcpy_s
strncmp
strncpy
strcmp
api-ms-win-crt-utility-l1-1-0
qsort
rand
api-ms-win-crt-heap-l1-1-0
malloc
_set_new_mode
free
_callnewh
api-ms-win-crt-convert-l1-1-0
strtof
strtol
atof
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-math-l1-1-0
powf
cosf
sinf
sqrtf
fmodf
acosf
__setusermatherr
ceilf
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
301KB
Virtual Size
301KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
160KB
Virtual Size
164KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
668B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=156, version=21202,
count=4, id=259, version=33731,
count=10, id=260, version=33731,
count=32, id=261, version=33731,
count=6, id=257, version=33731,
count=17, id=257, version=30795,
count=267, id=1, productName=Unmarked objects,
count=9, id=265, version=33811,
count=1, id=255, version=33811,
count=1, id=258, version=33811,