2026-08-24_ad1ca90e287c08aaf450ba9255540992_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos_virut

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-24_ad1ca90e287c08aaf450ba9255540992_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos_virut
Size 4.1MB
Sample260825-e3be9sel41
SHA256 e80c00142c7283899e342b032fe582d9af4946c274f090551f340c1ff5ebf1cb
MD5 ad1ca90e287c08aaf450ba9255540992
SHA1 a28898ee370bc32ab7f5fd4a8954eb0407ce0987
SHA512 9245397b120914bf657f049dcac08736cbd7e2debb4546571a38849f74e37c79e0aac4d42452d85a255fbbdc59cd2998712cefe6ef86e73681cfe003170b8c0f
SSDEEP 49152:b0sPKGSzlemGN+3iqovuy28er1t6gSzMt1qg28w4w5qUmNsdYJg2baZQhQYYux3D:bdUz9GNaR8epnZsU9f3xtuVtZbU
TLSH
T1C9168E21BA458036E6F202B1A5BC6F7E843EB920072954D7D3D40E9D6974ED32F36B1B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-08-24_ad1ca90e287c08aaf450ba9255540992_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos_virut

File Explorer

2026-08-24_ad1ca90e287c08aaf450ba9255540992_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos_virut

.exe 4.1MB

2026-08-24_ad1ca90e287c08aaf450ba9255540992_darkgate_elex_glassworm_luca-stealer_medusalocker_njrat_remcos_virut

IMPHASH 4cbe9f68360c8ae65eddf9f78f95d469
SHA256 e80c00142c7283899e342b032fe582d9af4946c274f090551f340c1ff5ebf1cb
MD5 ad1ca90e287c08aaf450ba9255540992
SHA1 a28898ee370bc32ab7f5fd4a8954eb0407ce0987
SHA512 9245397b120914bf657f049dcac08736cbd7e2debb4546571a38849f74e37c79e0aac4d42452d85a255fbbdc59cd2998712cefe6ef86e73681cfe003170b8c0f
SSDEEP 49152:b0sPKGSzlemGN+3iqovuy28er1t6gSzMt1qg28w4w5qUmNsdYJg2baZQhQYYux3D:bdUz9GNaR8epnZsU9f3xtuVtZbU
TLSH
T1C9168E21BA458036E6F202B1A5BC6F7E843EB920072954D7D3D40E9D6974ED32F36B1B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

ae:67:94:db:ee:98:8d:bb:27:a8:b0:43:a4:d9:94:3c:39:65:2b:92:bb:b3:18:c1:a8:51:55:1f:db:b4:b3:19

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Chains

Nov 10, 2020

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

PE Signature issue

Digest

a1:7a:8f:0e:f1:2e:5f:de:9b:4c:a7:62:f6:9d:5d:86:32:d7:96:38

Digest Algorithm

sha1

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Chains

Nov 10, 2020

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Serial Number

01:ea:62:e4:43:cb:22:50:c8:70:ff:6b:b1:3b:a9:8e

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 14, 2020 - Jan 20, 2021

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Serial Number

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 22, 2014 - Oct 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning, ExtKeyUsageEmailProtection, ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 10, 2006 - Nov 10, 2021

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong,C=CN

Serial Number

04:6e:de:36:46:25:fc:c0:ef:95:5e:52:d2:f2:d2:b2

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 13, 2020 - Jan 20, 2021

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Serial Number

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 1, 2019 - Oct 17, 2030

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

Major OS version

Entry point

4324986

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\WorkPlace\AndroidEmulator\7KMarket\Basic\Client\Output\Binfinal\Update2\TUpdate.pdb

comctl32

_TrackMouseEvent InitCommonControlsEx

ws2_32

recv WSAGetLastError send setsockopt ioctlsocket select freeaddrinfo closesocket connect socket getaddrinfo getsockopt getsockname getpeername WSASetLastError bind __WSAFDIsSet listen gethostname shutdown gethostbyname accept htons inet_addr inet_ntoa WSAStartup WSACreateEvent WSAEventSelect WSACleanup sendto WSAWaitForMultipleEvents WSAEnumNetworkEvents recvfrom ntohl ntohs

kernel32

Sleep SizeofResource LockResource LoadResource FindResourceW FindResourceExW DeleteCriticalSection SetEvent CreateMutexW ReleaseMutex WaitForSingleObjectEx CreateFileMappingW WaitForSingleObject MapViewOfFile UnmapViewOfFile UnhandledExceptionFilter LoadLibraryW FreeLibrary DeviceIoControl CreateFileW GetDriveTypeW GetPrivateProfileStringW GetPrivateProfileIntW GetPrivateProfileSectionW GetFileAttributesExA DeleteFileA CreateToolhelp32Snapshot Process32FirstW Process32NextW GetExitCodeProcess DeleteFileW WideCharToMultiByte GetLocaleInfoW GetEnvironmentVariableW GetSystemDirectoryW MultiByteToWideChar GetLocalTime GetFileAttributesExW GetTickCount InterlockedExchangeAdd MoveFileW SetFilePointer WriteFile FormatMessageW GetSystemInfo GlobalMemoryStatusEx OutputDebugStringW GetFileAttributesW FindFirstFileW RemoveDirectoryW MoveFileExW FindNextFileW FindClose CopyFileW VirtualAlloc VirtualFree ExpandEnvironmentStringsW GetLongPathNameW CreateDirectoryW GetFileSize ReadFile GetUserDefaultUILanguage lstrcmpW SystemTimeToFileTime GetCurrentDirectoryW LocalFileTimeToFileTime SetFileTime FileTimeToSystemTime GetTempPathW SetCurrentDirectoryW GetVersionExW SetLastError OutputDebugStringA GetACP RaiseException DecodePointer GetSystemTime FreeResource PeekNamedPipe LocalFree GlobalFree LoadLibraryA TlsAlloc TlsFree TlsGetValue TlsSetValue GlobalAlloc GlobalLock GlobalUnlock GlobalReAlloc OpenEventW OpenFileMappingW GetSystemDefaultLangID SwitchToThread InterlockedExchange FormatMessageA SleepEx ExpandEnvironmentStringsA GetStdHandle GetFileType GetFullPathNameW SetEndOfFile GetPrivateProfileIntA GetPrivateProfileStringA CreateDirectoryA CreateFileA FlushFileBuffers QueryPerformanceCounter GetSystemTimeAsFileTime LockFileEx CreateFileMappingA UnlockFile HeapCompact GetVersionExA FlushViewOfFile GetFileAttributesA GetDiskFreeSpaceA GetTempPathA HeapValidate UnlockFileEx GetFullPathNameA LockFile GetDiskFreeSpaceW HeapCreate AreFileApisANSI TryEnterCriticalSection FlushInstructionCache SetThreadContext GetThreadContext WriteConsoleW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP IsValidCodePage GetTimeZoneInformation SetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetTimeFormatW GetDateFormatW GetConsoleCP ReadConsoleW GetConsoleMode ExitProcess SetEnvironmentVariableA SystemTimeToTzSpecificLocalTime GetModuleHandleExW ResumeThread ExitThread RtlUnwind UnregisterWaitEx QueryDepthSList InterlockedFlushSList InterlockedPushEntrySList InterlockedPopEntrySList ReleaseSemaphore LoadLibraryExW GetModuleHandleA FreeLibraryAndExitThread GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation GetThreadPriority SetThreadPriority CreateThread SignalObjectAndWait CreateTimerQueue InitializeSListHead GetStartupInfoW ResetEvent IsDebuggerPresent LCMapStringW CompareStringW GetCPInfo QueryPerformanceFrequency EncodePointer IsProcessorFeaturePresent QueueUserWorkItem GetNativeSystemInfo GetExitCodeThread GetCurrentThread DuplicateHandle SetFilePointerEx FindFirstFileExW GetStringTypeW InterlockedCompareExchange HeapReAlloc VirtualQuery HeapSize GetProcAddress GetModuleHandleW VirtualProtect WriteProcessMemory GetCurrentProcess GetModuleFileNameW HeapAlloc GetProcessHeap GetCurrentProcessId GetCurrentThreadId SetErrorMode InitializeCriticalSection HeapFree EnterCriticalSection LeaveCriticalSection CreateEventW SearchPathW OpenProcess HeapDestroy InitializeCriticalSectionAndSpinCount InterlockedDecrement InterlockedIncrement GetLastError OpenMutexW GetCommandLineW lstrcpynW VirtualAllocEx SetUnhandledExceptionFilter TerminateProcess CloseHandle WaitForMultipleObjects CreateProcessW

user32

wsprintfW GetSystemMetrics GetDC ReleaseDC DestroyWindow DefWindowProcW GetParent GetWindow MapWindowPoints FillRect DrawTextW FindWindowA EndPaint GetWindowRect IsWindowVisible FindWindowExW UpdateLayeredWindow BeginPaint IsRectEmpty InvalidateRect SetWindowPos SetFocus ClientToScreen PostMessageW SetWindowRgn GetActiveWindow GetWindowTextW GetSystemMenu GetMenuState DrawIconEx GetClassInfoExW GetClassNameW GetCursorPos ScreenToClient FindWindowW IsWindowUnicode SetPropW GetPropW RemovePropW WindowFromPoint UnionRect RegisterWindowMessageW EqualRect CopyRect GetClientRect KillTimer SetTimer GetKeyState GetCapture ReleaseCapture SetCapture IntersectRect OffsetRect SetCursor PtInRect RegisterClassExW LoadCursorW SetWindowLongW UnhookWindowsHookEx CreateWindowExW SetWindowsHookExW GetClassInfoW CallNextHookEx IsWindow GetWindowLongW LoadImageW SendMessageW PostQuitMessage SetForegroundWindow SetRect UpdateWindow SystemParametersInfoW IsZoomed EnumDisplayDevicesW GetMessageW TranslateMessage DispatchMessageW SendMessageTimeoutW CallWindowProcW ShowWindow

gdi32

SetTextColor CreateSolidBrush GetObjectA CombineRgn ExtCreateRegion GetObjectW Rectangle CreateRectRgn ExcludeClipRect BitBlt CreateCompatibleBitmap CreatePen GetTextExtentPoint32W SetBkMode GetStockObject DeleteDC SelectObject CreateDIBSection CreateCompatibleDC DeleteObject CreateFontIndirectW GetDeviceCaps

advapi32

ControlService RegOpenKeyExW RegQueryValueExW RegOpenKeyExA CryptAcquireContextW CryptCreateHash CryptHashData CryptDestroyHash CryptGetHashParam CryptReleaseContext CloseServiceHandle DeleteService RegCloseKey OpenServiceW OpenSCManagerW RegCreateKeyExW RegSetValueExW RegQueryValueExA AdjustTokenPrivileges LookupPrivilegeValueW LookupPrivilegeNameW GetTokenInformation OpenProcessToken RegEnumKeyExW

shell32

SHGetSpecialFolderPathW ShellExecuteW SHGetFolderPathA SHCreateDirectoryExW SHFileOperationW CommandLineToArgvW ShellExecuteExW

ole32

CoTaskMemAlloc CreateStreamOnHGlobal OleInitialize OleUninitialize CoUninitialize CoInitialize CoCreateInstance CoCreateGuid

oleaut32

VariantClear SysStringLen SysAllocString SysFreeString VariantInit

shlwapi

PathFileExistsW StrStrIW PathFindFileNameW PathAddBackslashW PathIsDirectoryW SHGetValueW SHDeleteKeyW wnsprintfW PathAppendW SHSetValueW SHDeleteValueW StrStrIA PathRemoveFileSpecW

d3d9

Direct3DCreate9

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

wininet

InternetSetOptionW InternetQueryOptionW HttpSendRequestW HttpOpenRequestW InternetConnectW InternetOpenW InternetCrackUrlW InternetReadFile InternetCloseHandle HttpQueryInfoW

winhttp

WinHttpQueryHeaders WinHttpReceiveResponse WinHttpWriteData WinHttpGetProxyForUrl WinHttpGetIEProxyConfigForCurrentUser WinHttpSendRequest WinHttpQueryDataAvailable WinHttpSetOption WinHttpOpenRequest WinHttpConnect WinHttpCrackUrl WinHttpSetTimeouts WinHttpOpen WinHttpCloseHandle WinHttpReadData WinHttpAddRequestHeaders

iphlpapi

IcmpCreateFile IcmpCloseHandle IcmpSendEcho

gdiplus

GdipDeleteFont GdipCreateFontFromLogfontA GdipCreateFontFromDC GdipMeasureString GdipDrawString GdipSetTextRenderingHint GdipSetStringFormatTrimming GdipSetStringFormatLineAlign GdipSetStringFormatAlign GdipSetStringFormatFlags GdipDeleteStringFormat GdipCreateStringFormat GdipCreateSolidFill GdipDeleteBrush GdipBitmapUnlockBits GdipBitmapLockBits GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromScan0 GdipCreateBitmapFromStream GdipCreateBitmapFromFile GdipGetImagePixelFormat GdipCloneImage GdipDrawImageRectRectI GdipDrawImageRectI GdipGraphicsClear GdipSetWorldTransform GdipDeleteGraphics GdipGetImageGraphicsContext GdipCreateFromHDC GdipRotateMatrix GdipTranslateMatrix GdipDeleteMatrix GdipCreateMatrix GdipGetImageHeight GdipGetImageWidth GdipAlloc GdipFree GdiplusShutdown GdiplusStartup GdipCloneBitmapAreaI GdipDisposeImage

msimg32

AlphaBlend

psapi

GetModuleFileNameExW GetModuleFileNameExA

netapi32

Netbios

wldap32

ord145 ord118 ord216 ord142 ord41 ord14 ord147 ord79 ord27 ord26 ord127 ord46 ord301 ord133 ord208 ord167

??4BeaconClient@@QAEAAV0@$$QAV0@@Z ??4BeaconClient@@QAEAAV0@ABV0@@Z ?GetCommParamGetter@BeaconClient@@SAABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@2@@std@@@2@@std@@XZ ?GetCommcomParams@BeaconClient@@SAABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@XZ ?GetConfig@BeaconClient@@SAABUBeaconConfig@@XZ ?InitSDK@BeaconClient@@SAXABUBeaconConfig@@@Z ?PrepareParams@BeaconClient@@SA?AV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@ABV23@_J@Z ?Quit@BeaconClient@@SAXXZ ?Report@BeaconClient@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@3@W4RequestPriority@Beacon@@@Z ?SetCommParamGetter@BeaconClient@@SAXABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@2@@std@@@2@@std@@@Z ?SetCommonParams@BeaconClient@@SAXABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z

Name

.text

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

559KB

Virtual Size

559KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

34KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Shared

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.QMGuid

Size

512B

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

21B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

828KB

Virtual Size

827KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

360KB

Virtual Size

360KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

generic

count=21, id=241, version=40116,

count=203, id=243, version=40116,

count=31, id=242, version=40116,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=8, id=199, version=41118,

count=26, id=259, version=24123,

count=2, id=261, version=23013,

count=127, id=261, version=24123,

count=39, id=260, version=24123,

count=9, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=9, id=260, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=22, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=1, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=28, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

count=2, id=203, version=65501,

count=41, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=609, id=1, productName=Unmarked objects,

count=169, id=265, version=24210,

count=1, id=256, productName=VS2015 Update 3 [14.0] build 24210, version=24210,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=1, id=151,

count=1, id=258, productName=VS2015 Update 3 [14.0] build 24210, version=24210,