d1467ef6c1d555bfb407cf32fb035cc3959cb5d51d573ba093352a9b05bf200b

Sharing

Copy URL Twitter E-mail

General

Target
d1467ef6c1d555bfb407cf32fb035cc3959cb5d51d573ba093352a9b05bf200b
Size 5.7MB
Sample260925-kw5nescf42
SHA256 d1467ef6c1d555bfb407cf32fb035cc3959cb5d51d573ba093352a9b05bf200b
MD5 d273535626639cb2564c925313a69493
SHA1 94cabca293510723a616ed05a4d08ce6ff06f2ee
SHA512 7f09385a0219df913325c54ec960d247300662ebaef2d97cc983c6a0f792e955a432b771cc3bb25af6fbaf23ecc02c91067b75deb52ab98f1ea31ed6a1e233ce
SSDEEP 98304:z5wf064zlXVIz4pUAzsuhvn2WrxJ1O4WOdNG1gDmfEpXH+7dq:zQ06utV44pIuLXOhq
TLSH
T1CE56AE30B906D071D98211B1D93CBFEF46ADAA240B6D55D3A3C82E6E9E702D33B3155E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1467ef6c1d555bfb407cf32fb035cc3959cb5d51d573ba093352a9b05bf200b

File Explorer

d1467ef6c1d555bfb407cf32fb035cc3959cb5d51d573ba093352a9b05bf200b

.exe 5.7MB

d1467ef6c1d555bfb407cf32fb035cc3959cb5d51d573ba093352a9b05bf200b

IMPHASH 041d5c7311cd6ea4eb8d25618fcd91d3
SHA256 d1467ef6c1d555bfb407cf32fb035cc3959cb5d51d573ba093352a9b05bf200b
MD5 d273535626639cb2564c925313a69493
SHA1 94cabca293510723a616ed05a4d08ce6ff06f2ee
SHA512 7f09385a0219df913325c54ec960d247300662ebaef2d97cc983c6a0f792e955a432b771cc3bb25af6fbaf23ecc02c91067b75deb52ab98f1ea31ed6a1e233ce
SSDEEP 98304:z5wf064zlXVIz4pUAzsuhvn2WrxJ1O4WOdNG1gDmfEpXH+7dq:zQ06utV44pIuLXOhq
TLSH
T1CE56AE30B906D071D98211B1D93CBFEF46ADAA240B6D55D3A3C82E6E9E702D33B3155E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3127698

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\Esat\Desktop\METIN2\RONIN2_V2_GAME\ClientSRC\Client\bin\ronin2dist.pdb

libcef

cef_string_map_append cef_string_multimap_size cef_string_multimap_key cef_string_multimap_value cef_string_multimap_append cef_task_runner_get_for_current_thread cef_task_runner_get_for_thread cef_v8value_create_undefined cef_v8value_create_null cef_v8value_create_bool cef_v8value_create_int cef_v8value_create_uint cef_v8value_create_double cef_v8value_create_date cef_v8value_create_string cef_v8value_create_object cef_v8value_create_array cef_v8value_create_array_buffer cef_v8value_create_function cef_string_map_value cef_drag_data_create cef_request_context_get_global_context cef_request_context_create_context cef_create_context_shared cef_string_multimap_alloc cef_string_multimap_free cef_request_create cef_process_message_create cef_urlrequest_create cef_list_value_create cef_string_utf16_clear cef_string_wide_to_utf8 cef_image_create cef_stream_writer_create_for_file cef_stream_writer_create_for_handler cef_cookie_manager_get_global_manager cef_media_router_get_global cef_v8stack_trace_get_current cef_response_create cef_post_data_create cef_menu_model_create cef_print_settings_create cef_post_data_element_create cef_stream_reader_create_for_file cef_stream_reader_create_for_data cef_stream_reader_create_for_handler cef_string_map_key cef_string_map_size cef_string_list_append cef_string_list_value cef_string_list_size cef_value_create cef_binary_value_create cef_command_line_get_global cef_command_line_create cef_string_map_free cef_string_map_alloc cef_browser_host_create_browser_sync cef_browser_host_create_browser cef_v8context_in_context cef_v8context_get_entered_context cef_v8context_get_current_context cef_api_hash cef_execute_java_script_with_user_gesture_for_tests cef_now_from_system_trace_time cef_end_tracing cef_begin_tracing cef_launch_process cef_get_path cef_write_json cef_parse_jsonand_return_error cef_parse_json_buffer cef_parse_json cef_uridecode cef_uriencode cef_base64decode cef_base64encode cef_get_extensions_for_mime_type cef_get_mime_type cef_format_url_for_security_display cef_create_url cef_parse_url cef_remove_cross_origin_whitelist_entry cef_add_cross_origin_whitelist_entry cef_is_rtl cef_load_crlsets_file cef_zip_directory cef_delete_file cef_directory_exists cef_create_temp_directory_in_directory cef_create_new_temp_directory cef_get_temp_directory cef_create_directory cef_set_crash_key_value cef_crash_reporting_enabled cef_enable_highdpi_support cef_set_osmodal_loop cef_quit_message_loop cef_run_message_loop cef_do_message_loop_work cef_shutdown cef_initialize cef_execute_process cef_clear_scheme_handler_factories cef_register_scheme_handler_factory cef_register_extension cef_post_delayed_task cef_post_task cef_currently_on cef_is_cert_status_error cef_string_list_free cef_string_list_alloc cef_string_userfree_utf16_free cef_string_utf16_set cef_dictionary_value_create cef_string_utf16_to_utf8 cef_string_utf16_cmp cef_string_utf8_clear cef_string_utf8_to_utf16 cef_clear_cross_origin_whitelist cef_log

kernel32

TryAcquireSRWLockExclusive GetNativeSystemInfo GetExitCodeThread SwitchToThread WaitForSingleObjectEx WakeConditionVariable GetFileInformationByHandleEx CloseThreadpoolWait AllocConsole CreateDirectoryA RemoveDirectoryA GetPrivateProfileStringA lstrlenA GlobalFree CreateMutexA ReleaseMutex ReadFile GetFileAttributesA DeleteFileA CreateFileA GetCurrentDirectoryA GetTickCount GetCurrentDirectoryW TerminateThread K32GetModuleInformation GetModuleHandleA TerminateProcess ReadProcessMemory GetCurrentProcessId GetCurrentProcess GetLastError FindNextFileA FindFirstFileA FindClose SetFileAttributesA WriteConsoleW HeapQueryInformation HeapSize SetEndOfFile OutputDebugStringW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP GetModuleFileNameA Module32Next Module32First Process32Next InitOnceExecuteOnce Process32First CreateToolhelp32Snapshot GetSystemInfo OpenProcess SetThreadPriority Sleep CreateEventA IsValidCodePage FindNextFileW FindFirstFileExW DeleteFileW HeapReAlloc SetFileAttributesW CreateProcessW GetExitCodeProcess SetStdHandle SetCurrentDirectoryW CreateDirectoryW SetFileInformationByHandle SetConsoleCtrlHandler WaitForSingleObject GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetTimeZoneInformation GetFileAttributesExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect IsThreadAFiber FlsFree FlsSetValue FlsGetValue FlsAlloc GetTempPathW HeapAlloc HeapFree GetStdHandle GetFullPathNameW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetFileType GetFileInformationByHandle GetDriveTypeW FreeLibraryAndExitThread ResumeThread ExitThread CreateThread GetModuleHandleExW ExitProcess LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount InterlockedFlushSList InterlockedPushEntrySList RaiseException RtlUnwind GetThreadTimes GetCurrentThread QueryPerformanceFrequency SetFilePointerEx GetComputerNameA WaitNamedPipeW PeekNamedPipe GetModuleFileNameW GetSystemTimeAsFileTime GetModuleHandleW GetStartupInfoW IsDebuggerPresent InitializeSListHead UnhandledExceptionFilter SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive FindResourceW FindResourceA SizeofResource LoadResource LockResource CreateFileW IsProcessorFeaturePresent InterlockedDecrement CreateEventExW CreateSemaphoreExW FlushProcessWriteBuffers GetCurrentProcessorNumber GetTickCount64 FreeLibraryWhenCallbackReturns CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateSymbolicLinkW FormatMessageA SetLastError GetFileSizeEx MoveFileA GetProcessHeap HeapValidate InterlockedIncrement GetCPInfo CompareStringEx LCMapStringEx DecodePointer EncodePointer InitializeCriticalSectionEx GetLocaleInfoEx LocalFree GetStringTypeW QueryPerformanceCounter CopyFileA CreateSemaphoreA ReleaseSemaphore GetLocaleInfoA CompareStringA WideCharToMultiByte lstrlenW GlobalLock GlobalUnlock SetEvent DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle Beep MultiByteToWideChar VerifyVersionInfoA LoadLibraryA GetProcAddress FreeLibrary VerSetConditionMask CreateThreadpoolWait SetThreadpoolWait GetVersionExA GetSystemDirectoryA WriteFile SetFilePointer GetCurrentThreadId SetUnhandledExceptionFilter GetFileSize CreateFileMappingA UnmapViewOfFile MapViewOfFile OutputDebugStringA GlobalAlloc GetTempFileNameA GetTempPathA ReadConsoleW

user32

InvalidateRect SendMessageW UnregisterClassW RegisterClassExW GetAsyncKeyState GetClientRect MessageBoxA ClientToScreen OffsetRect DefWindowProcA UnregisterClassA RegisterClassExA CreateWindowExA IsWindow DestroyWindow ShowWindow MoveWindow SetFocus UpdateWindow PostQuitMessage SetWindowPos GetCursorPos LoadIconW ScreenToClient FindWindowA LoadIconA SystemParametersInfoA GetKeyState ShowCursor SetCursor DestroyCursor LoadImageA SetCursorPos GetCapture SetCapture ReleaseCapture ChangeDisplaySettingsA GetSystemMetrics wvsprintfA LoadStringW GetMessageA TranslateMessage DispatchMessageA PeekMessageA SendMessageA PostThreadMessageA RegisterClassA CreateWindowExW SetTimer KillTimer ValidateRect GetWindowLongA SetWindowLongA DefWindowProcW LoadImageW CharNextW LoadStringA SetRect FillRect GetClipboardData EndPaint BeginPaint ReleaseDC GetDC GetMonitorInfoA MonitorFromPoint LoadCursorA GetMenu SetWindowTextA GetWindowRect AdjustWindowRectEx CharNextExA CharPrevExA GetKeyboardLayoutNameA GetKeyboardLayout OpenClipboard CloseClipboard

gdi32

GetTextExtentPoint32W GetCharABCWidthsFloatW SetBkColor SetTextColor TextOutW CreateCompatibleDC DeleteDC SetBkMode SetDIBitsToDevice CreateDIBSection TextOutA CreateFontIndirectA EnumFontFamiliesExA GetStockObject CreateSolidBrush DeleteObject PatBlt SelectObject GetTextExtentPoint32A StretchBlt

advapi32

CryptGenRandom RegSetValueExW CryptDestroyHash CryptHashData RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegCloseKey CryptCreateHash CryptAcquireContextA CryptReleaseContext CryptGetHashParam

ole32

CoCreateInstance CoInitialize CoUninitialize CoInitializeEx

winmm

timeEndPeriod timeBeginPeriod timeGetTime timeGetDevCaps

d3d8

Direct3DCreate8

python27

_PyLong_FromByteArray PyFloat_FromDouble PyComplex_FromCComplex PyString_FromStringAndSize PyDict_New PyImport_AddModule PyErr_Occurred PyErr_NoMemory PyEval_GetRestricted PyCode_New PyMarshal_ReadObjectFromString _PyLong_New PyCode_Type PyExc_StopIteration PyExc_EOFError PyExc_ValueError PyImport_GetMagicNumber Py_FlushLine PyEval_SetTrace Py_CompileStringFlags PyRun_StringFlags Py_OptimizeFlag PyEval_EvalCode PyCode_Addr2Line PyUnicodeUCS2_DecodeUTF8 Py_Finalize Py_Initialize Py_SetProgramName PyErr_Fetch PyModule_GetDict _Py_EllipsisObject PyDict_SetItemString _Py_NoneStruct Py_InitModule4 Py_BuildValue PyModule_AddIntConstant PyLong_AsLong PyTuple_Size PyTuple_GetItem PyDict_GetItemString PyInt_FromLong PyLong_FromLongLong PyList_New PyList_Append PyObject_AsCharBuffer PyModule_AddObject PyTuple_New PyTuple_SetItem PyInt_AsLong PyDict_Next PyDict_Size PyString_AsString PyErr_SetString PyFrame_GetLineNumber PyExc_RuntimeError _PyThreadState_Current PyString_FromString PyArg_ParseTuple PyList_SetItem PyModule_AddStringConstant PyImport_ImportModule PyString_InternFromString PyObject_GetAttrString PyObject_GetAttr PyCallable_Check PyLong_AsLongLong PyFloat_AsDouble PyErr_Clear PyErr_BadArgument PyErr_Print PyObject_CallObject PyDict_SetItem PyNumber_Check

imm32

ImmGetIMEFileNameA ImmNotifyIME ImmGetOpenStatus ImmSetConversionStatus ImmGetConversionStatus ImmGetCandidateListW ImmSetCompositionStringW ImmIsIME ImmAssociateContext ImmReleaseContext ImmGetContext ImmGetCompositionStringW

iphlpapi

GetIpNetTable GetAdaptersInfo

gdiplus

GdipCloneBrush GdipDrawString GdipDeleteFont GdipCreateFont GdipGetGenericFontFamilySansSerif GdipDeleteFontFamily GdipCreateFontFamilyFromName GdipDrawImageRectI GdipDeleteGraphics GdipCreateFromHWNDICM GdipCreateFromHWND GdipGetImageHeight GdipGetImageWidth GdipCreateSolidFill GdipDeleteBrush GdipFree GdipAlloc

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

devil

ilBindImage ilDeleteImages ilGenImages ilGetInteger ilLoad ilConvertImage ilCopyPixels ilEnable ilInit ilTexImage ilSetPixels ilSave ilShutDown ilOriginFunc

granny2

_GrannyGetControlRawLocalClock@4 _GrannySetControlEaseOutCurve@28 _GrannySetControlEaseOut@8 _GrannySetControlEaseInCurve@28 _GrannySetControlEaseIn@8 _GrannyGetControlLocalDuration@4 _GrannySetControlSpeed@8 _GrannyGetControlSpeed@4 _GrannySetControlLoopCount@8 _GrannySetControlRawLocalClock@8 _GrannyFreeControlIfComplete@4 _GrannyControlIsComplete@4 _GrannyCompleteControlAt@8 _GrannyFreeControlOnceUnused@4 _GrannyFreeControl@4 _GrannyGetMeshIndexCount@4 _GrannyMeshIsRigid@4 _GrannyPlayControlledAnimation@12 _GrannyGetMeshTriangleGroupCount@4 _GrannyFreeModelInstance@4 _GrannyFreeWorldPose@4 _GrannyGetMeshTriangleGroups@4 _GrannyGetMeshVertexType@4 _GrannyCopyMeshVertices@12 _GrannyGetMeshVertices@4 _GrannyCopyMeshIndices@12 _GrannyNewMeshDeformer@16 _GrannyFreeMeshDeformer@4 _GrannyDeformVertices@24 GrannyPNT332VertexType _GrannyNewWorldPose@4 _GrannyFindBoneByName@12 _GrannyGetMeshBindingToBoneIndices@4 _GrannyFreeMeshBinding@4 _GrannyNewMeshBinding@12 _GrannyGetControlLoopCount@4 _GrannyGetMeshVertexCount@4 _GrannyGetTotalTypeSize@4 _GrannyGetWorldPoseComposite4x4@8 _GrannyGetWorldPose4x4@8 _GrannySetLogCallback@4 _GrannyGetMaterialTextureByType@8 _GrannyFindMatchingMember@16 _GrannyConvertSingleObject@20 _GrannyReadEntireFileFromMemory@8 _GrannyFreeFileSection@8 _GrannyFreeFile@4 _GrannyGetFileInfo@4 _GrannyGetSourceSkeleton@4 _GrannySetModelClock@8 _GrannyFreeCompletedModelControls@4 _GrannySampleModelAnimationsAccelerated@20 _GrannyUpdateModelMatrix@20 _GrannyNewLocalPose@4 _GrannyFreeLocalPose@4 _GrannyGetWorldPoseComposite4x4Array@4 _GrannyInstantiateModel@4

mss32

_AIL_set_3D_orientation@28 _AIL_set_3D_velocity@20 _AIL_open_3D_listener@4 _AIL_startup@0 _AIL_shutdown@0 _AIL_set_redist_directory@4 _AIL_close_stream@4 _AIL_start_stream@4 _AIL_pause_stream@8 _AIL_set_stream_volume_levels@12 _AIL_stream_volume_levels@12 _AIL_set_stream_loop_count@8 _AIL_stream_status@4 _AIL_last_error@0 _AIL_allocate_sample_handle@4 _AIL_release_sample_handle@4 _AIL_init_sample@4 _AIL_set_sample_file@12 _AIL_start_sample@4 _AIL_stop_sample@4 _AIL_resume_sample@4 _AIL_end_sample@4 _AIL_set_sample_volume_pan@12 _AIL_set_sample_loop_count@8 _AIL_sample_status@4 _AIL_sample_volume_pan@12 _AIL_allocate_3D_sample_handle@4 _AIL_release_3D_sample_handle@4 _AIL_start_3D_sample@4 _AIL_stop_3D_sample@4 _AIL_resume_3D_sample@4 _AIL_end_3D_sample@4 _AIL_set_3D_sample_file@8 _AIL_set_3D_sample_volume@8 _AIL_set_3D_sample_loop_count@8 _AIL_3D_sample_status@4 _AIL_3D_sample_volume@4 _AIL_update_3D_position@8 _AIL_auto_update_3D_position@8 _AIL_close_3D_provider@4 _AIL_open_3D_provider@4 _AIL_enumerate_3D_providers@12 _AIL_close_digital_driver@4 _AIL_open_stream@12 _AIL_open_digital_driver@16 _AIL_file_type@8 _AIL_decompress_ADPCM@12 _AIL_decompress_ASI@24 _AIL_WAV_info@8 _AIL_set_file_callbacks@16 _AIL_file_read@8 _AIL_mem_free_lock@4 _AIL_close_3D_listener@4 _AIL_set_3D_position@16

speedtreert

?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z ?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z ?GetCurrentError@CSpeedTreeRT@@SAPBDXZ ?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z ?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z ?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?SetLodLevel@CSpeedTreeRT@@QAEXM@Z ?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ ?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z ?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z ?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z ?DeleteTransientData@CSpeedTreeRT@@QAEXXZ ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ??3CSpeedTreeRT@@SAXPAX@Z ??2CSpeedTreeRT@@SAPAXI@Z ??1CSpeedTreeRT@@QAE@XZ ??0CSpeedTreeRT@@QAE@XZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ ??0SGeometry@CSpeedTreeRT@@QAE@XZ ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z ?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z ?SetTime@CSpeedTreeRT@@SAXM@Z

dinput8

DirectInput8Create

ws2_32

gethostname gethostbyname ntohs htons setsockopt ntohl htonl closesocket send inet_addr sendto socket WSAStartup WSACleanup __WSAFDIsSet connect ioctlsocket recv select WSAGetLastError

ddraw

DirectDrawCreate

bcrypt

BCryptDestroyHash BCryptGenRandom BCryptOpenAlgorithmProvider BCryptGetProperty BCryptCloseAlgorithmProvider BCryptFinishHash BCryptHashData BCryptCreateHash

shell32

SHGetSpecialFolderPathA

oleaut32

VariantClear SysFreeString

Name

.text

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

772KB

Virtual Size

772KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

196KB

Virtual Size

692KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

46KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

220KB

Virtual Size

220KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=49, id=259, version=33145,

count=221, id=261, version=33145,

count=4, id=170, productName=VS2010 build 30319, version=30319,

count=62, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,

count=46, id=265, version=35228,

count=2, id=260, productName=VS2019 v16.9.4 build 29914, version=29914,

count=2, id=262, version=33145,

count=58, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=48, version=9044,

count=2, id=203, productName=VS2012 UPD3 build 60610, version=60610,

count=2, id=257, productName=VS2015 [14.0] build 23026, version=23026,

count=4, id=260, version=32822,

count=5, id=261, productName=VS2019 v16.9.4 build 29914, version=29914,

count=1, id=253, version=35207,

count=29, id=259, version=35207,

count=20, id=260, version=35207,

count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=28, version=9178,

count=76, id=29, version=9178,

count=1, id=18, version=8444,

count=4, id=25, version=9210,

count=39, id=260, version=33145,

count=30, id=257, version=33145,

count=116, id=261, version=35215,

count=11, productName=Unmarked objects (old),

count=714, id=1, productName=Unmarked objects,

count=102, id=261, version=35207,

count=323, id=261, version=35228,

count=1, id=255, version=35228,

count=1, id=151,

count=1, id=258, version=35228,