Virtual Free.rar
- SHA256 4481ec190476e57633e0220d3129858d370c0aefb56a46b40bc94def9968602c
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Virtual Free.rar
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Virtual Free/VMProtectSDK64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Virtual Free/Virtual External.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Virtual Free.rar
- Size 1.1MB
- Sample260804-xv4e7awtct
- SHA256 4481ec190476e57633e0220d3129858d370c0aefb56a46b40bc94def9968602c
- MD5 51ad18798af02a43b0332a9d8de921b4
- SHA1 70f6af79c25053818392cddf3b12f638c3c6eaf6
- SHA512 9922312da0a327c0eb7bc1b93de02623f996477939654d63f0e5ee1081d876e80a5081f9d773bec9fb19efcd0b80454bf1775a90bde83847c81c24202bb37158
- SSDEEP 24576:2VDNSUD3MIuELJy0LmEvg1GYPgyzXUrGTfVk5TVGWLTrzxdFLRywItg3gbs:2VDNVM8LQ03v2GlefGd9DF4wItgB
- TLSH T1EA35335DA3365F009809C016A8F93D8D5981D2E55FC3EA229BE75B7DB432EFB0A712C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Virtual Free/VMProtectSDK64.dll unpack001/Virtual Free/Virtual External.exe
File Explorer
-
Virtual Free.rar.rar 1.1MB
-
Virtual Free/VMProtectSDK64.dll.dll 116KB
-
Virtual Free/Virtual External.exe.exe 2.4MB
Virtual Free/VMProtectSDK64.dll
- IMPHASH 1851ff453adce0cef5274e320d5bed3c
- SHA256 af82c309ace1ce81c23aa190c65f4eaa4e2e668e227175e66b0637b56f546796
- MD5 724d8234d574846b6ee2262a2977650d
- SHA1 b3fb659ddb3306e23342a0232b9b85e924ae36d5
- SHA512 3ea5ed4fb38986098d19221e5dbf4f48a0ccf5c912235bfdc160bb949721c298e904bbaa1070beb67cb9cfdabb0163a7a51e593f37e2bc03c69b7200c3967e83
- SSDEEP 3072:xmcqYHq7Aiytzg2ScpvgJcG5sqYX6UmHRlBS:80Hq7AiyegZgJZSX+xH
- TLSH T1F6C36C57B3E540BBE1B6C679C8634A55D3B678150B24DBAF07A402162F233D18E3AF72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
8864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=241, version=40116,
count=124, id=243, version=40116,
count=14, id=242, version=40116,
count=7, id=259, version=24123,
count=20, id=261, version=24123,
count=17, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=90, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Virtual Free/Virtual External.exe
- IMPHASH aca20abbdbe3cb5e28f35e4d87dbabfa
- SHA256 8fb88380ef33cee79f517ac0c2d5d97447b0d6fec889fe8b54fd5ad706c5c796
- MD5 8ba5d0abad1dd310db2acefdfdfcf36b
- SHA1 f8062aa52fc729b29afc518ed48bb18737f1e56f
- SHA512 43d9330eb43b18ff2710b50e194f6ad7b62f3341bdc82aedaaf699752cc0713afb7502dddf374217aeb4f85d7df261dd194174031304380f0b7ed53e87c463c1
- SSDEEP 49152:n/dBEv6Rnzbt2L79MoERmjqvanlj2VvTwjrt3f3KlUMe1lyDZPOZPdAKkd8BnQyK:fWyPwC2jrV3yDZPOZPdAKkd8z
- TLSH T14BB5AE4AA7F401E8C57BD17CC64A960BE7713448073097EB17F04AA62FA3BE15B7AB11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1881936
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d3d11
D3D11CreateDeviceAndSwapChain
winhttp
WinHttpQueryDataAvailable
WinHttpConnect
WinHttpSetTimeouts
WinHttpSendRequest
WinHttpCloseHandle
WinHttpReadData
WinHttpOpenRequest
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpOpen
WinHttpAddRequestHeaders
kernel32
GetTickCount
VirtualQuery
IsDebuggerPresent
CheckRemoteDebuggerPresent
SetThreadAffinityMask
SetThreadPriority
SwitchToThread
GetProcessId
DuplicateHandle
GetProcAddress
CreateFileA
GetFileSizeEx
ReadFile
HeapAlloc
HeapFree
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
CreateFileW
InitializeCriticalSectionEx
DeleteCriticalSection
GetModuleHandleW
SetLastError
FormatMessageW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalFree
GetSystemDirectoryW
LoadLibraryW
SleepEx
MoveFileExW
GetConsoleWindow
GetEnvironmentVariableA
GetFileType
PeekNamedPipe
WaitForMultipleObjects
CloseHandle
WakeAllConditionVariable
SleepConditionVariableSRW
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
InitializeSListHead
ReleaseSRWLockShared
AcquireSRWLockShared
FormatMessageA
GetLocaleInfoEx
Process32Next
GetCurrentThread
GetLastError
VirtualAlloc
SetConsoleMode
GetStdHandle
GetCurrentProcess
VirtualFree
SetConsoleTextAttribute
CreateDirectoryW
FindClose
GetConsoleMode
Sleep
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetFileInformationByHandle
CreateFile2
GetCurrentProcessId
FlushConsoleInputBuffer
GetThreadContext
GetSystemInfo
WaitForSingleObjectEx
AreFileApisANSI
GetFileInformationByHandleEx
OutputDebugStringW
QueryPerformanceFrequency
LoadLibraryA
MultiByteToWideChar
GetLocaleInfoA
GetModuleHandleA
FreeConsole
CreateToolhelp32Snapshot
OpenProcess
GetCurrentThreadId
Module32First
CreateMutexA
Module32Next
GetModuleFileNameW
VerifyVersionInfoW
TerminateProcess
FreeLibrary
QueryPerformanceCounter
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
VirtualProtect
WriteProcessMemory
GetTempPathA
GetTickCount64
VirtualProtectEx
ReadProcessMemory
VirtualQueryEx
Process32First
GetConsoleScreenBufferInfo
VerSetConditionMask
user32
GetClientRect
SetCursor
SetCapture
GetKeyboardLayout
TrackMouseEvent
ClientToScreen
GetAsyncKeyState
GetForegroundWindow
IsWindowUnicode
GetCapture
ScreenToClient
MonitorFromWindow
GetDC
LoadCursorA
GetMessageExtraInfo
GetKeyState
ReleaseCapture
GetClipboardData
SetCursorPos
ReleaseDC
ShowWindow
RegisterClassExW
UnregisterClassW
GetSystemMetrics
CreateWindowExW
SetWindowPos
DestroyWindow
GetWindowRect
DispatchMessageA
DefWindowProcW
GetWindowLongA
SetWindowTextW
SendInput
GetWindowTextA
mouse_event
ShowCursor
GetWindowThreadProcessId
GetCursorPos
SetClipboardData
SetWindowDisplayAffinity
GetMonitorInfoA
MoveWindow
SetLayeredWindowAttributes
BringWindowToTop
TranslateMessage
PeekMessageA
PostQuitMessage
SetWindowLongA
EmptyClipboard
CloseClipboard
OpenClipboard
UpdateWindow
FindWindowA
gdi32
GetDeviceCaps
advapi32
CryptDestroyKey
SystemFunction036
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
CryptImportKey
CryptEncrypt
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
shell32
ShellExecuteA
d3dcompiler_43
D3DCompile
vmprotectsdk64
VMProtectBeginVirtualizationLockByKey
VMProtectBeginUltraLockByKey
VMProtectBeginMutation
VMProtectFreeString
VMProtectIsDebuggerPresent
VMProtectEnd
VMProtectDecryptStringA
VMProtectIsValidImageCRC
dwmapi
DwmExtendFrameIntoClientArea
imm32
ImmReleaseContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetContext
msvcp140
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?good@ios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
_Query_perf_frequency
_Query_perf_counter
?_Winerror_map@std@@YAHH@Z
?_Random_device@std@@YAIXZ
?_Syserror_map@std@@YAPEBDH@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAK@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??Bios_base@std@@QEBA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
_Thrd_id
_Thrd_join
_Cnd_broadcast
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
_Xtime_get_ticks
?_Xbad_alloc@std@@YAXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Throw_Cpp_error@std@@YAXH@Z
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Id_cnt@id@locale@std@@0HA
?_Xout_of_range@std@@YAXPEBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xbad_function_call@std@@YAXXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Xlength_error@std@@YAXPEBD@Z
_Mtx_lock
_Cnd_do_broadcast_at_thread_exit
_Thrd_detach
_Mtx_unlock
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
winmm
timeGetTime
timeBeginPeriod
crypt32
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryW
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CertFindExtension
CertGetNameStringW
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertFreeCertificateChain
CertGetCertificateChain
ws2_32
getsockopt
send
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
closesocket
WSAGetLastError
inet_pton
ntohs
WSASetLastError
inet_ntop
bind
connect
getpeername
getsockname
htons
gethostname
ioctlsocket
sendto
recvfrom
freeaddrinfo
getaddrinfo
listen
htonl
accept
select
__WSAFDIsSet
recv
socket
setsockopt
WSAIoctl
WSACloseEvent
bcrypt
BCryptGenRandom
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memset
__intrinsic_setjmp
__current_exception_context
__std_terminate
__current_exception
wcschr
memmove
strstr
memcpy
strchr
__std_exception_destroy
__std_exception_copy
__C_specific_handler
wcsrchr
_CxxThrowException
memchr
memcmp
strrchr
longjmp
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__p__commode
_read
_get_stream_buffer_pointers
_fseeki64
fsetpos
_write
ungetc
_fileno
setvbuf
fgetpos
feof
_close
ftell
__acrt_iob_func
fflush
fgets
fgetc
fclose
fseek
__stdio_common_vfprintf
fputs
fputc
_set_fmode
fwrite
_wopen
_wfopen
__stdio_common_vsprintf
_lseeki64
__stdio_common_vsscanf
fread
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-heap-l1-1-0
_callnewh
_set_new_mode
calloc
free
realloc
malloc
api-ms-win-crt-convert-l1-1-0
atof
strtoull
strtol
strtoul
strtod
wcstombs
atoi
strtoll
api-ms-win-crt-runtime-l1-1-0
exit
abort
_beginthreadex
_exit
__sys_nerr
__sys_errlist
_c_exit
_register_thread_local_exe_atexit_callback
__p___argc
_initterm
terminate
_get_initial_narrow_environment
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_configure_narrow_argv
_set_app_type
_seh_filter_exe
_initialize_narrow_environment
_errno
_initterm_e
_cexit
_crt_atexit
_initialize_onexit_table
system
__p___argv
api-ms-win-crt-time-l1-1-0
_localtime64_s
strftime
_gmtime64
_gmtime64_s
_time64
api-ms-win-crt-math-l1-1-0
cos
ldexp
_fdopen
__setusermatherr
cosf
powf
sin
sinf
sqrt
logf
atan2f
acosf
sqrtf
fmodf
_dsign
expf
ceilf
api-ms-win-crt-string-l1-1-0
strpbrk
wcsncmp
isdigit
wcspbrk
strcspn
tolower
strcmp
strncpy
strcpy_s
wcsncpy
isalnum
_stricmp
wcslen
isspace
_strdup
_wcsicmp
strspn
strlen
strncmp
api-ms-win-crt-filesystem-l1-1-0
_wstat64
_fstat64
_lock_file
_unlock_file
_unlink
api-ms-win-crt-locale-l1-1-0
localeconv
___lc_codepage_func
_configthreadlocale
api-ms-win-crt-environment-l1-1-0
_dupenv_s
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
453KB
Virtual Size
452KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
77KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=257, version=35721,
count=8, id=253, version=35721,
count=6, id=259, version=35721,
count=10, id=260, version=35721,
count=40, id=261, version=35721,
count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=43, id=260, version=33523,
count=129, id=260, version=32535,
count=5, id=261, version=34436,
count=2, id=156, version=21202,
count=27, id=260, version=32822,
count=35, id=257, version=33145,
count=637, id=1, productName=Unmarked objects,
count=44, id=265, version=36252,
count=1, id=255, version=36252,
count=1, id=258, version=36252,