nl jealous.zip
- SHA256 dd71f962933d8e51e3f1548a99ba53770e608506b4b957f3c6dff4f34bb7255b
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
neverlose crack/injector.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
neverlose crack/injector.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
neverlose crack/neverlose.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
neverlose crack/neverlose.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target nl jealous.zip
- Size 28.1MB
- Sample260916-yzlllsvfpc
- SHA256 dd71f962933d8e51e3f1548a99ba53770e608506b4b957f3c6dff4f34bb7255b
- MD5 c56b8a6c028c0c0babfaf9aa50a82b2e
- SHA1 233761497dcb4cb39f47593215ff1f805ae340bb
- SHA512 0d3d7b1cd80846c2632c2818ad19aadc325f78738c7948edca323746fcfd68c427f59184971eb41d38d1919bd35048dbcf9b7228ba133292d5fd178114f1f707
- SSDEEP 786432:ft2SUWqWRpk+sA1CdMbszSvDcO6msMQ182p4/EcL1:F2SUYjbbs4Afmmm2pOE2
- TLSH T19A57330D74B51EAAE27EB173AFCABA80E364101B497C9FFF171D1481759AB19A1120CF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/neverlose crack/injector.exe unpack001/neverlose crack/neverlose.dll
File Explorer
-
nl jealous.zip.zip 28.1MB
-
neverlose crack/injector.exe.exe 12KB
-
neverlose crack/neverlose.dll.dll 59.3MB
neverlose crack/injector.exe
- IMPHASH 2159f0f5a82ac16520e0f15d7e78c545
- SHA256 9b4badc12f63e1f550c0c53151a23d0f9f304ce66852ffe6a1e55957f5c85ccf
- MD5 195474af78ce805335bda519e689d4e3
- SHA1 6b5d5b67b9862d6b7026f35a8257c2fe58fb975e
- SHA512 66f78d5a0fa2cdd0d3a103eddb4caef5cf981413e4f4710e19167cdd6d915d58d6e699746292b27aeb47aee6efbbc409adf4896e57f2c1ba7b8f7a6a177dd96d
- SSDEEP 192:qZsD/tW9u0QY21aoliz9pU28Rjk4SWtrXsqD7JN4v37E5pz6MiFGEa:qaBW0Y2UoUzJ8Rjk4SRqUv37NIR
- TLSH T11A423C46FF444EA2DFA44331183B9425C6FBE9112F15CE637BA9E44D0DB59E0E42E09B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6642
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
WriteProcessMemory
SetConsoleTitleA
GetProcessId
GetFullPathNameA
WaitForSingleObject
GetSystemDirectoryW
GetModuleHandleA
OpenProcess
CreateToolhelp32Snapshot
GetExitCodeThread
Sleep
CloseHandle
LoadLibraryW
Module32FirstW
VirtualProtectEx
GetProcAddress
VirtualAllocEx
GetModuleHandleW
FreeLibrary
CreateRemoteThread
Module32NextW
VirtualFreeEx
LoadLibraryExW
SetUnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentThreadId
IsProcessorFeaturePresent
user32
GetWindowThreadProcessId
FindWindowA
msvcp140
_Query_perf_counter
_Query_perf_frequency
vcruntime140
__current_exception
_except_handler4_common
memset
__current_exception_context
api-ms-win-crt-heap-l1-1-0
_set_new_mode
api-ms-win-crt-stdio-l1-1-0
puts
__p__commode
_set_fmode
__acrt_iob_func
__stdio_common_vfprintf
api-ms-win-crt-string-l1-1-0
_wcsicmp
wcscat_s
api-ms-win-crt-runtime-l1-1-0
__p___argc
_initterm
_initialize_onexit_table
_register_onexit_function
_initterm_e
_crt_atexit
_controlfp_s
terminate
_cexit
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_register_thread_local_exe_atexit_callback
exit
__p___argv
_set_app_type
_exit
_c_exit
_seh_filter_exe
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
200B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
512B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35403,
count=12, id=260, version=35403,
count=20, id=261, version=35403,
count=4, id=257, version=35403,
count=5, id=257, version=33145,
count=87, id=1, productName=Unmarked objects,
count=1, id=265, version=35729,
count=1, id=255, version=35729,
count=1, id=258, version=35729,
neverlose crack/neverlose.dll
- IMPHASH ff87dd86c15946a655cccfad650f5841
- SHA256 2da52afd9ec2811d5d164ef700260aeaa7c4545138f524936290142bac8f0064
- MD5 518996c773913099e05373c3f8e95b1b
- SHA1 4b3f0bed5a806697455aaa57a8c3853bcb1e0729
- SHA512 c2ce4edb24189e3a1e065d33f9386f8e8a8b349e711d28334e981db1c2f70daa4e40e3cb331866c272a38be7ffcf470b1f1fe64ca689861eb14767cb701908be
- SSDEEP 786432:p7eWa4i70hmKLMHvX2jT2O7je28p3TIrgcvY:LaIMHvm+Ee28
- TLSH T15BD7F103F682D0FBC58213F1E15E9F7E5D28865697204CD7E7849FA98AF52D4203AB2D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
3158487
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
ntdll
NtClose
NtSuspendProcess
NtResumeThread
NtWaitForSingleObject
NtQueryInformationThread
NtProtectVirtualMemory
NtFlushInstructionCache
RtlPcToFileHeader
NtTerminateProcess
NtWriteVirtualMemory
NtAllocateVirtualMemory
NtCreateThreadEx
kernel32
SleepConditionVariableSRW
WakeAllConditionVariable
InitializeSRWLock
SetWaitableTimer
SetLastError
EnterCriticalSection
CreateWaitableTimerW
WaitForMultipleObjects
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetQueuedCompletionStatus
CreateMutexW
WaitForSingleObject
ReleaseMutex
PostQueuedCompletionStatus
CreateEventW
MultiByteToWideChar
Sleep
FormatMessageW
GetLastError
ReleaseSRWLockExclusive
SetEvent
AcquireSRWLockExclusive
TerminateThread
CloseHandle
CancelIoEx
QueueUserAPC
LocalFree
GetCurrentProcessId
WideCharToMultiByte
SleepEx
FormatMessageA
CreateIoCompletionPort
OutputDebugStringA
DisableThreadLibraryCalls
GetModuleHandleW
VirtualFree
VirtualAlloc
VirtualQuery
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
HeapReAlloc
SetUnhandledExceptionFilter
GetProcAddress
FlushInstructionCache
SetThreadContext
OpenThread
SizeofResource
LockResource
LoadResource
FindResourceW
GetModuleHandleA
LoadLibraryW
K32GetModuleInformation
AddVectoredExceptionHandler
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
SwitchToFiber
DeleteFiber
CreateFiber
GetFileType
GetSystemTime
SystemTimeToFileTime
FindClose
FindFirstFileW
FindNextFileW
GetSystemDirectoryA
FreeLibrary
LoadLibraryA
InitializeCriticalSection
ReleaseSemaphore
GetExitCodeThread
CreateSemaphoreA
GetEnvironmentVariableW
GetACP
GetStdHandle
WriteFile
ConvertFiberToThread
ConvertThreadToFiber
GetSystemTimeAsFileTime
TerminateProcess
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
GetLocaleInfoEx
GetThreadContext
HeapAlloc
InitializeSListHead
GetFileInformationByHandleEx
MoveFileExW
AreFileApisANSI
SetFileInformationByHandle
GetFileAttributesExW
FindFirstFileExW
CreateFileW
CreateDirectoryW
QueryPerformanceCounter
user32
GetUserObjectInformationW
MessageBoxA
MessageBoxW
GetProcessWindowStation
advapi32
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptGenRandom
msvcp140
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Xinvalid_argument@std@@YAXPBD@Z
?_Winerror_map@std@@YAHH@Z
?_Xbad_function_call@std@@YAXXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Syserror_map@std@@YAPBDH@Z
_Xtime_get_ticks
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
_Query_perf_frequency
?_Throw_Cpp_error@std@@YAXH@Z
?_Random_device@std@@YAIXZ
_Mtx_lock
_Cnd_do_broadcast_at_thread_exit
_Query_perf_counter
_Thrd_detach
_Mtx_unlock
?id@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBUtm@@PB_W4@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?pbackfail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGG@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?underflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?seekoff@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
??_D?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?id@?$ctype@_W@std@@2V0locale@2@A
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??_7facet@locale@std@@6B@
??_7codecvt_base@std@@6B@
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Xout_of_range@std@@YAXPBD@Z
?_Id_cnt@id@locale@std@@0HA
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??_7_Facet_base@std@@6B@
??_7?$codecvt@_WDU_Mbstatet@@@std@@6B@
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?xalloc@ios_base@std@@SAHXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
ws2_32
inet_addr
socket
sendto
recvfrom
getservbyname
getservbyport
getsockopt
gethostbyname
getpeername
gethostbyaddr
WSASocketA
inet_ntoa
WSAGetLastError
setsockopt
send
recv
WSAIoctl
ioctlsocket
WSACleanup
__WSAFDIsSet
accept
bind
closesocket
WSASend
select
htons
ntohl
shutdown
htonl
listen
WSASetLastError
WSAStringToAddressW
WSASocketW
WSAStartup
getsockname
ntohs
connect
WSAAddressToStringW
WSARecv
mswsock
AcceptEx
GetAcceptExSockaddrs
vcruntime140
_except_handler3
__std_exception_destroy
__std_exception_copy
_purecall
__std_type_info_compare
memchr
memcpy
memset
strchr
memmove
strrchr
strstr
wcsstr
__CxxFrameHandler3
_except_handler4_common
_CxxThrowException
__std_type_info_destroy_list
__std_terminate
api-ms-win-crt-runtime-l1-1-0
_beginthreadex
terminate
signal
strerror
strerror_s
_errno
_invoke_watson
abort
raise
_exit
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
api-ms-win-crt-heap-l1-1-0
malloc
calloc
_aligned_malloc
realloc
_callnewh
_aligned_free
free
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsscanf
__stdio_common_vsprintf_s
fgetpos
setvbuf
ungetc
fsetpos
fread
__stdio_common_vfprintf
fputs
fputc
_fseeki64
_setmode
_get_osfhandle
ftell
fseek
_fileno
fgets
ferror
feof
__acrt_iob_func
_get_stream_buffer_pointers
__stdio_common_vsprintf
__stdio_common_vswprintf_s
fflush
_wfopen
fwrite
fclose
fopen
fgetc
__stdio_common_vswprintf
api-ms-win-crt-math-l1-1-0
ceil
_dclass
_dsign
api-ms-win-crt-convert-l1-1-0
wcstol
strtol
atoi
strtoul
strtoull
strtod
strtoll
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
_stat32
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
localeconv
api-ms-win-crt-string-l1-1-0
strncmp
isspace
strncpy
strspn
strcmp
strpbrk
strcpy_s
strcat_s
strncpy_s
isdigit
wcscpy_s
tolower
strcspn
api-ms-win-crt-time-l1-1-0
_time32
_localtime64_s
_time64
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-environment-l1-1-0
getenv
crypt32
CertCloseStore
CertOpenSystemStoreW
CertFreeCertificateContext
CertFindCertificateInStore
Name
.text
Size
3.0MB
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
53.0MB
Virtual Size
53.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
149KB
Virtual Size
148KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=261, version=35223,
count=14, id=259, version=35207,
count=10, id=260, version=35207,
count=26, id=261, version=35207,
count=4, id=257, version=35207,
count=19, productName=Unmarked objects (old),
count=852, id=260, version=35729,
count=15, id=257, version=30795,
count=488, id=1, productName=Unmarked objects,
count=30, id=265, version=35220,
count=1, id=255, version=35220,
count=1, id=151,
count=1, id=258, version=35220,