f248615b68d020ea09878ddfad64d514d4729a303484a3ac44be2db020b68f32

Sharing

Copy URL Twitter E-mail

General

Target
f248615b68d020ea09878ddfad64d514d4729a303484a3ac44be2db020b68f32
Size 5.7MB
Sample260810-ypaflagm4x
SHA256 f248615b68d020ea09878ddfad64d514d4729a303484a3ac44be2db020b68f32
MD5 d1e66d00e6fa2cc5689957eb02501af2
SHA1 65ab861f5220f1a0c5e86444da5b4888134e364c
SHA512 f12c3417aee647014be2b41120323e0d1f8b72b0772eaef12a8e59f7301f93b82932f9d3ae9f8887074ef62d5f7e9275e8a8c25956c44e65c481cac1cfd06c43
SSDEEP 98304:lzUPV5zPHnZqLp9E9eonnxrCa0OObWKFD3C//rbeECDesT3dsJa9Saa:l+V5zHZqLpYeM//CeSs7a
TLSH
T1E156AE207905C075DA8211B1997CBFFF86ADAA600B6555C3E3C81E6F9E706C33B3649B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f248615b68d020ea09878ddfad64d514d4729a303484a3ac44be2db020b68f32

File Explorer

f248615b68d020ea09878ddfad64d514d4729a303484a3ac44be2db020b68f32

.exe 5.7MB

f248615b68d020ea09878ddfad64d514d4729a303484a3ac44be2db020b68f32

IMPHASH 4a7fa432a099d4e7ce51e80b2568945a
SHA256 f248615b68d020ea09878ddfad64d514d4729a303484a3ac44be2db020b68f32
MD5 d1e66d00e6fa2cc5689957eb02501af2
SHA1 65ab861f5220f1a0c5e86444da5b4888134e364c
SHA512 f12c3417aee647014be2b41120323e0d1f8b72b0772eaef12a8e59f7301f93b82932f9d3ae9f8887074ef62d5f7e9275e8a8c25956c44e65c481cac1cfd06c43
SSDEEP 98304:lzUPV5zPHnZqLp9E9eonnxrCa0OObWKFD3C//rbeECDesT3dsJa9Saa:l+V5zHZqLpYeM//CeSs7a
TLSH
T1E156AE207905C075DA8211B1997CBFFF86ADAA600B6555C3E3C81E6F9E706C33B3649B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3153602

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\user\Desktop\METIN2\RONIN2_V2_GAME\ClientSRC\Client\bin\ronin2dist.pdb

libcef

cef_task_runner_get_for_current_thread cef_task_runner_get_for_thread cef_v8value_create_undefined cef_v8value_create_null cef_v8value_create_bool cef_v8value_create_int cef_v8value_create_uint cef_v8value_create_double cef_v8value_create_date cef_v8value_create_string cef_v8value_create_object cef_v8value_create_array cef_v8value_create_array_buffer cef_v8value_create_function cef_dictionary_value_create cef_drag_data_create cef_request_context_get_global_context cef_string_map_value cef_create_context_shared cef_string_multimap_alloc cef_string_multimap_free cef_request_create cef_process_message_create cef_urlrequest_create cef_list_value_create cef_log cef_string_wide_to_utf8 cef_string_utf16_clear cef_string_multimap_value cef_stream_writer_create_for_handler cef_cookie_manager_get_global_manager cef_media_router_get_global cef_v8stack_trace_get_current cef_response_create cef_post_data_create cef_menu_model_create cef_print_settings_create cef_post_data_element_create cef_stream_reader_create_for_file cef_stream_reader_create_for_data cef_stream_reader_create_for_handler cef_string_map_key cef_string_map_size cef_string_list_append cef_string_list_value cef_string_list_size cef_value_create cef_binary_value_create cef_command_line_get_global cef_command_line_create cef_string_map_free cef_string_map_alloc cef_browser_host_create_browser_sync cef_browser_host_create_browser cef_v8context_in_context cef_v8context_get_entered_context cef_v8context_get_current_context cef_api_hash cef_string_multimap_append cef_string_multimap_key cef_string_multimap_size cef_stream_writer_create_for_file cef_string_map_append cef_execute_java_script_with_user_gesture_for_tests cef_now_from_system_trace_time cef_end_tracing cef_begin_tracing cef_launch_process cef_get_path cef_write_json cef_parse_jsonand_return_error cef_parse_json_buffer cef_parse_json cef_uridecode cef_uriencode cef_base64decode cef_base64encode cef_get_extensions_for_mime_type cef_get_mime_type cef_format_url_for_security_display cef_parse_url cef_clear_cross_origin_whitelist cef_remove_cross_origin_whitelist_entry cef_add_cross_origin_whitelist_entry cef_is_rtl cef_load_crlsets_file cef_zip_directory cef_delete_file cef_directory_exists cef_create_temp_directory_in_directory cef_create_new_temp_directory cef_get_temp_directory cef_create_directory cef_set_crash_key_value cef_crash_reporting_enabled cef_enable_highdpi_support cef_set_osmodal_loop cef_quit_message_loop cef_run_message_loop cef_do_message_loop_work cef_shutdown cef_initialize cef_execute_process cef_clear_scheme_handler_factories cef_register_scheme_handler_factory cef_register_extension cef_post_delayed_task cef_post_task cef_currently_on cef_is_cert_status_error cef_string_list_free cef_string_list_alloc cef_string_userfree_utf16_free cef_string_utf16_set cef_request_context_create_context cef_string_utf16_to_utf8 cef_string_utf16_cmp cef_string_utf8_clear cef_string_utf8_to_utf16 cef_create_url cef_image_create

kernel32

InitOnceExecuteOnce WakeConditionVariable TryAcquireSRWLockExclusive GetNativeSystemInfo SwitchToThread WaitForSingleObjectEx SetFileInformationByHandle GetFileInformationByHandleEx CloseThreadpoolWait AllocConsole CreateDirectoryA RemoveDirectoryA lstrlenA GlobalFree CreateMutexA ReleaseMutex ReadFile GetFileAttributesA DeleteFileA CreateFileA GetCurrentDirectoryA GetTickCount GetCurrentDirectoryW TerminateThread K32GetModuleInformation GetModuleHandleA TerminateProcess RtlCaptureStackBackTrace ReadProcessMemory GetCurrentProcessId GetCurrentProcess GetLastError FindNextFileA FindFirstFileA FindClose SetFileAttributesA WriteConsoleW HeapQueryInformation HeapSize SetEndOfFile OutputDebugStringW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW GetModuleFileNameA Module32Next Module32First Process32Next CreateEventExW Process32First CreateToolhelp32Snapshot GetSystemInfo OpenProcess SetThreadPriority Sleep CreateEventA DeleteFileW HeapReAlloc SetFileAttributesW CreateProcessW GetExitCodeProcess SetStdHandle SetCurrentDirectoryW CreateDirectoryW GetFileSizeEx SetConsoleCtrlHandler CreateSemaphoreExW GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetTimeZoneInformation WaitForSingleObject EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect IsThreadAFiber FlsFree FlsSetValue FlsGetValue FlsAlloc GetTempPathW HeapAlloc HeapFree GetStdHandle GetCommandLineW GetCommandLineA GetFullPathNameW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetFileType GetFileInformationByHandle GetDriveTypeW FreeLibraryAndExitThread ExitThread CreateThread GetModuleHandleExW ExitProcess LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount InterlockedFlushSList InterlockedPushEntrySList RaiseException RtlUnwind GetThreadTimes GetCurrentThread QueryPerformanceFrequency SetFilePointerEx GetComputerNameA WaitNamedPipeW PeekNamedPipe GetModuleFileNameW GetSystemTimeAsFileTime GetModuleHandleW GetStartupInfoW IsDebuggerPresent InitializeSListHead UnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive Thread32Next Thread32First GetThreadContext ResumeThread SuspendThread GetExitCodeThread OpenThread FindResourceW FindResourceA SizeofResource FlushProcessWriteBuffers GetCurrentProcessorNumber GetTickCount64 FreeLibraryWhenCallbackReturns CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateSymbolicLinkW FormatMessageA SetLastError MoveFileA GetPrivateProfileStringA ReadConsoleW OpenMutexA LoadResource LockResource CreateFileW IsProcessorFeaturePresent InterlockedDecrement GetProcessHeap HeapValidate InterlockedIncrement GetCPInfo CompareStringEx LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx GetLocaleInfoEx LocalFree GetStringTypeW QueryPerformanceCounter CopyFileA CreateSemaphoreA ReleaseSemaphore GetLocaleInfoA CompareStringA WideCharToMultiByte lstrlenW GlobalLock GlobalUnlock SetEvent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle Beep MultiByteToWideChar VerifyVersionInfoA LoadLibraryA GetProcAddress FreeLibrary VerSetConditionMask CreateThreadpoolWait SetThreadpoolWait GetVersionExA GetSystemDirectoryA WriteFile SetFilePointer GetCurrentThreadId SetUnhandledExceptionFilter GetFileSize CreateFileMappingA UnmapViewOfFile MapViewOfFile OutputDebugStringA GlobalAlloc GetTempFileNameA GetTempPathA GetFileAttributesExW

user32

InvalidateRect UnregisterClassW RegisterClassExW LoadIconW GetAsyncKeyState GetClientRect MessageBoxA ClientToScreen OffsetRect DefWindowProcA UnregisterClassA RegisterClassExA CreateWindowExA IsWindow DestroyWindow ShowWindow MoveWindow SetFocus UpdateWindow PostQuitMessage SetWindowPos LoadImageW GetCursorPos ScreenToClient FindWindowA LoadIconA SystemParametersInfoA GetKeyState ShowCursor SetCursor DestroyCursor LoadImageA SetCursorPos GetCapture SetCapture ReleaseCapture ChangeDisplaySettingsA GetSystemMetrics wvsprintfA LoadStringW GetMessageA TranslateMessage DispatchMessageA PeekMessageA SendMessageA PostThreadMessageA RegisterClassA CreateWindowExW SetTimer KillTimer ValidateRect GetWindowLongA DefWindowProcW SendMessageW CharNextW GetClipboardData LoadStringA SetRect FillRect CloseClipboard EndPaint BeginPaint ReleaseDC GetDC GetMonitorInfoA MonitorFromPoint LoadCursorA SetWindowLongA GetMenu SetWindowTextA GetWindowRect AdjustWindowRectEx CharNextExA CharPrevExA GetKeyboardLayoutNameA GetKeyboardLayout OpenClipboard

gdi32

GetTextExtentPoint32W GetCharABCWidthsFloatW SetBkColor SetTextColor TextOutW CreateCompatibleDC DeleteDC SetBkMode SetDIBitsToDevice CreateDIBSection TextOutA CreateFontIndirectA EnumFontFamiliesExA GetStockObject CreateSolidBrush DeleteObject PatBlt SelectObject GetTextExtentPoint32A StretchBlt

advapi32

CryptGenRandom RegSetValueExW CryptDestroyHash CryptHashData RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegCloseKey CryptCreateHash CryptAcquireContextA CryptReleaseContext CryptGetHashParam

ole32

CoCreateInstance CoInitialize CoUninitialize CoInitializeEx

winmm

timeEndPeriod timeBeginPeriod timeGetTime timeGetDevCaps

d3d8

Direct3DCreate8

python27

_PyLong_FromByteArray PyFloat_FromDouble PyComplex_FromCComplex PyString_FromStringAndSize PyDict_New PyImport_AddModule PyErr_Occurred PyErr_NoMemory PyEval_GetRestricted PyCode_New PyMarshal_ReadObjectFromString _PyLong_New PyCode_Type PyExc_StopIteration PyExc_EOFError PyExc_ValueError PyImport_GetMagicNumber Py_FlushLine PyEval_SetTrace Py_CompileStringFlags PyRun_StringFlags Py_OptimizeFlag PyEval_EvalCode PyCode_Addr2Line PyUnicodeUCS2_DecodeUTF8 Py_Finalize Py_Initialize Py_SetProgramName PyErr_Fetch PyModule_GetDict _Py_EllipsisObject PyDict_SetItemString _Py_NoneStruct Py_InitModule4 Py_BuildValue PyModule_AddIntConstant PyLong_AsLong PyTuple_Size PyTuple_GetItem PyDict_GetItemString PyInt_FromLong PyLong_FromLongLong PyList_New PyList_Append PyModule_AddObject PyObject_AsCharBuffer PyTuple_New PyTuple_SetItem PyInt_AsLong PyDict_Next PyDict_Size PyString_AsString PyErr_SetString PyFrame_GetLineNumber PyExc_RuntimeError _PyThreadState_Current PyString_FromString PyArg_ParseTuple PyList_SetItem PyModule_AddStringConstant PyImport_ImportModule PyString_InternFromString PyObject_GetAttrString PyObject_GetAttr PyCallable_Check PyLong_AsLongLong PyFloat_AsDouble PyErr_Clear PyErr_BadArgument PyErr_Print PyObject_CallObject PyDict_SetItem PyNumber_Check

imm32

ImmGetIMEFileNameA ImmNotifyIME ImmGetOpenStatus ImmSetConversionStatus ImmGetConversionStatus ImmGetCandidateListW ImmSetCompositionStringW ImmIsIME ImmAssociateContext ImmReleaseContext ImmGetContext ImmGetCompositionStringW

iphlpapi

GetIpNetTable GetAdaptersInfo

gdiplus

GdipCloneBrush GdipDrawString GdipDeleteFont GdipCreateFont GdipGetGenericFontFamilySansSerif GdipDeleteFontFamily GdipCreateFontFamilyFromName GdipDrawImageRectI GdipDeleteGraphics GdipCreateFromHWNDICM GdipCreateFromHWND GdipGetImageHeight GdipGetImageWidth GdipCreateSolidFill GdipDeleteBrush GdipFree GdipAlloc

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

imagehlp

StackWalk64 SymGetModuleBase64 SymInitialize SymFunctionTableAccess64

devil

ilBindImage ilDeleteImages ilGenImages ilGetInteger ilLoad ilConvertImage ilCopyPixels ilEnable ilInit ilTexImage ilSetPixels ilSave ilShutDown ilOriginFunc

granny2

_GrannyGetControlRawLocalClock@4 _GrannySetControlEaseOutCurve@28 _GrannySetControlEaseOut@8 _GrannySetControlEaseInCurve@28 _GrannySetControlEaseIn@8 _GrannyGetControlLocalDuration@4 _GrannySetControlSpeed@8 _GrannyGetControlSpeed@4 _GrannySetControlLoopCount@8 _GrannySetControlRawLocalClock@8 _GrannyFreeControlIfComplete@4 _GrannyControlIsComplete@4 _GrannyCompleteControlAt@8 _GrannyFreeControlOnceUnused@4 _GrannyFreeControl@4 _GrannyGetMeshIndexCount@4 _GrannyMeshIsRigid@4 _GrannyPlayControlledAnimation@12 _GrannyGetMeshTriangleGroupCount@4 _GrannyFreeModelInstance@4 _GrannyGetMeshTriangleGroups@4 _GrannyGetMeshVertexType@4 _GrannyFreeWorldPose@4 _GrannyCopyMeshVertices@12 _GrannyGetMeshVertices@4 _GrannyCopyMeshIndices@12 _GrannyNewMeshDeformer@16 _GrannyFreeMeshDeformer@4 _GrannyDeformVertices@24 GrannyPNT332VertexType _GrannyNewWorldPose@4 _GrannyFindBoneByName@12 _GrannyGetMeshBindingToBoneIndices@4 _GrannyFreeMeshBinding@4 _GrannyNewMeshBinding@12 _GrannyGetControlLoopCount@4 _GrannyGetMeshVertexCount@4 _GrannyGetTotalTypeSize@4 _GrannyGetWorldPoseComposite4x4@8 _GrannyGetWorldPose4x4@8 _GrannySetLogCallback@4 _GrannyGetMaterialTextureByType@8 _GrannyFindMatchingMember@16 _GrannyConvertSingleObject@20 _GrannyReadEntireFileFromMemory@8 _GrannyFreeFileSection@8 _GrannyFreeFile@4 _GrannyGetFileInfo@4 _GrannyGetSourceSkeleton@4 _GrannySetModelClock@8 _GrannyFreeCompletedModelControls@4 _GrannySampleModelAnimationsAccelerated@20 _GrannyUpdateModelMatrix@20 _GrannyNewLocalPose@4 _GrannyFreeLocalPose@4 _GrannyGetWorldPoseComposite4x4Array@4 _GrannyInstantiateModel@4

mss32

_AIL_set_3D_orientation@28 _AIL_set_3D_velocity@20 _AIL_open_3D_listener@4 _AIL_startup@0 _AIL_shutdown@0 _AIL_set_redist_directory@4 _AIL_close_stream@4 _AIL_start_stream@4 _AIL_pause_stream@8 _AIL_set_stream_volume_levels@12 _AIL_stream_volume_levels@12 _AIL_set_stream_loop_count@8 _AIL_stream_status@4 _AIL_last_error@0 _AIL_allocate_sample_handle@4 _AIL_release_sample_handle@4 _AIL_init_sample@4 _AIL_set_sample_file@12 _AIL_start_sample@4 _AIL_stop_sample@4 _AIL_resume_sample@4 _AIL_end_sample@4 _AIL_set_sample_volume_pan@12 _AIL_set_sample_loop_count@8 _AIL_sample_status@4 _AIL_sample_volume_pan@12 _AIL_allocate_3D_sample_handle@4 _AIL_release_3D_sample_handle@4 _AIL_start_3D_sample@4 _AIL_stop_3D_sample@4 _AIL_resume_3D_sample@4 _AIL_end_3D_sample@4 _AIL_set_3D_sample_file@8 _AIL_set_3D_sample_volume@8 _AIL_set_3D_sample_loop_count@8 _AIL_3D_sample_status@4 _AIL_3D_sample_volume@4 _AIL_update_3D_position@8 _AIL_auto_update_3D_position@8 _AIL_close_3D_provider@4 _AIL_open_3D_provider@4 _AIL_enumerate_3D_providers@12 _AIL_close_digital_driver@4 _AIL_open_stream@12 _AIL_open_digital_driver@16 _AIL_file_type@8 _AIL_decompress_ADPCM@12 _AIL_decompress_ASI@24 _AIL_WAV_info@8 _AIL_set_file_callbacks@16 _AIL_file_read@8 _AIL_mem_free_lock@4 _AIL_close_3D_listener@4 _AIL_set_3D_position@16

speedtreert

?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z ?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z ?GetCurrentError@CSpeedTreeRT@@SAPBDXZ ?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z ?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z ?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?SetLodLevel@CSpeedTreeRT@@QAEXM@Z ?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ ?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z ?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z ?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z ?DeleteTransientData@CSpeedTreeRT@@QAEXXZ ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ??3CSpeedTreeRT@@SAXPAX@Z ??2CSpeedTreeRT@@SAPAXI@Z ??1CSpeedTreeRT@@QAE@XZ ??0CSpeedTreeRT@@QAE@XZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ ??0SGeometry@CSpeedTreeRT@@QAE@XZ ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z ?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z ?SetTime@CSpeedTreeRT@@SAXM@Z

dinput8

DirectInput8Create

ws2_32

gethostname gethostbyname ntohs htons setsockopt ntohl htonl closesocket send inet_addr sendto socket WSAStartup WSACleanup __WSAFDIsSet connect ioctlsocket recv select WSAGetLastError

ddraw

DirectDrawCreate

bcrypt

BCryptDestroyHash BCryptGenRandom BCryptOpenAlgorithmProvider BCryptGetProperty BCryptCloseAlgorithmProvider BCryptFinishHash BCryptHashData BCryptCreateHash

shell32

SHGetSpecialFolderPathA

oleaut32

VariantClear SysFreeString

Name

.text

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

776KB

Virtual Size

776KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

196KB

Virtual Size

693KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

46KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

222KB

Virtual Size

221KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=49, id=259, version=33145,

count=222, id=261, version=33145,

count=4, id=170, productName=VS2010 build 30319, version=30319,

count=62, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,

count=46, id=265, version=35226,

count=2, id=260, productName=VS2019 v16.9.4 build 29914, version=29914,

count=2, id=262, version=33145,

count=58, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=48, version=9044,

count=2, id=203, productName=VS2012 UPD3 build 60610, version=60610,

count=2, id=257, productName=VS2015 [14.0] build 23026, version=23026,

count=4, id=260, version=32822,

count=5, id=261, productName=VS2019 v16.9.4 build 29914, version=29914,

count=1, id=253, version=35207,

count=29, id=259, version=35207,

count=20, id=260, version=35207,

count=7, id=261, version=35222,

count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=28, version=9178,

count=76, id=29, version=9178,

count=1, id=18, version=8444,

count=4, id=25, version=9210,

count=39, id=260, version=33145,

count=32, id=257, version=33145,

count=116, id=261, version=35215,

count=11, productName=Unmarked objects (old),

count=725, id=1, productName=Unmarked objects,

count=102, id=261, version=35207,

count=323, id=261, version=35226,

count=1, id=255, version=35226,

count=1, id=151,

count=1, id=258, version=35226,