2026-09-29_2d7af81f54bbbe63351b6f857e76880f_coinminer_darkgate_elex_glassworm_mespinoza_remcos_revil

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-29_2d7af81f54bbbe63351b6f857e76880f_coinminer_darkgate_elex_glassworm_mespinoza_remcos_revil
Size 7.5MB
Sample260930-eajk6szx6n
SHA256 c40b90b82c750ff1c5426e70e7415166f80d76627a551f74b9c5cd47c599649f
MD5 2d7af81f54bbbe63351b6f857e76880f
SHA1 ec9edba09b41cd8efccb220ad08e85c950fa1fad
SHA512 8b439144e8db79b0fd7b548c7f6e39ca8d494d276785cde0da1a1125565583739ea25a929ad5a67e9e9e52af8df95e906182e52f8de90d4b37f947da18ab0ce2
SSDEEP 98304:KFhdA6DGcXdvDbpfKoqIuoPEDSjQspyrqElDltEZ7lg3Xr1GINT1G:CmC1fKo1PEWM2ElDQ7W7YET1
TLSH
T1E886CF01A7D14475F8B3097659BD853E8D3DBD210B24ECDBA3C4345E0AB5AE26A32F36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-29_2d7af81f54bbbe63351b6f857e76880f_coinminer_darkgate_elex_glassworm_mespinoza_remcos_revil

File Explorer

2026-09-29_2d7af81f54bbbe63351b6f857e76880f_coinminer_darkgate_elex_glassworm_mespinoza_remcos_revil

.exe 7.5MB

2026-09-29_2d7af81f54bbbe63351b6f857e76880f_coinminer_darkgate_elex_glassworm_mespinoza_remcos_revil

IMPHASH 6fd5f50707e1dd4c5b02c561261f3053
SHA256 c40b90b82c750ff1c5426e70e7415166f80d76627a551f74b9c5cd47c599649f
MD5 2d7af81f54bbbe63351b6f857e76880f
SHA1 ec9edba09b41cd8efccb220ad08e85c950fa1fad
SHA512 8b439144e8db79b0fd7b548c7f6e39ca8d494d276785cde0da1a1125565583739ea25a929ad5a67e9e9e52af8df95e906182e52f8de90d4b37f947da18ab0ce2
SSDEEP 98304:KFhdA6DGcXdvDbpfKoqIuoPEDSjQspyrqElDltEZ7lg3Xr1GINT1G:CmC1fKo1PEWM2ElDQ7W7YET1
TLSH
T1E886CF01A7D14475F8B3097659BD853E8D3DBD210B24ECDBA3C4345E0AB5AE26A32F36
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1905070

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

G:\jekins_work\workspace\wmastercleanup_build\product\win32\dbginfo\wmvipmain.pdb

qr

qrSymbolToBMP qrInit qrFinalize qrAddData

crypt32

CertOpenStore CertEnumCertificatesInStore CertFindCertificateInStore CertDuplicateCertificateContext CertFreeCertificateContext CertGetCertificateContextProperty CertCloseStore

kernel32

Sleep TerminateThread CreateThread SetFilePointer LocalAlloc GetFileSizeEx SetLastError CreateMutexW ReleaseMutex FormatMessageW GetCurrentProcessId GetTickCount InterlockedIncrement InterlockedExchange lstrcmpW MulDiv IsBadWritePtr OpenMutexW GetLocaleInfoW GetUserDefaultLCID GetWindowsDirectoryW lstrcmpiW GetLocalTime lstrlenW OutputDebugStringW GetStdHandle GetEnvironmentVariableW GetFileType TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleExW SwitchToFiber DeleteFiber CreateFiber QueryPerformanceCounter GetSystemTimeAsFileTime ConvertFiberToThread ConvertThreadToFiber LoadLibraryA GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW FlushInstructionCache VerifyVersionInfoA ExpandEnvironmentStringsA SetEndOfFile InterlockedDecrement InterlockedCompareExchange GetSystemDirectoryW PeekNamedPipe FormatMessageA GetSystemTime GetSystemDirectoryA GetModuleHandleA VerSetConditionMask SleepEx GetStartupInfoW GetVersionExW CreateProcessW ReadProcessMemory OpenProcess TerminateProcess QueryPerformanceFrequency GetCurrentProcess GetPrivateProfileStringW GetPrivateProfileIntW GetFileSize CreateFileW WriteFile ReadFile SystemTimeToFileTime DeleteFileW GetFileAttributesW FindClose InitializeCriticalSection LeaveCriticalSection GetModuleFileNameW FindNextFileW EnterCriticalSection FindFirstFileW CreateDirectoryW ResetEvent WaitForMultipleObjects GetModuleFileNameA WideCharToMultiByte OutputDebugStringA LocalFree CloseHandle SetEvent CreateEventW WaitForSingleObject GlobalUnlock GlobalLock GlobalFree GlobalAlloc FreeResource GetCurrentThreadId MultiByteToWideChar GetCommandLineW FreeLibrary GetModuleHandleW GetProcessHeap DeleteCriticalSection GetProcAddress HeapDestroy DecodePointer HeapAlloc FindResourceW LoadResource FindResourceExW LoadLibraryW RaiseException HeapReAlloc LockResource GetLastError HeapSize InitializeCriticalSectionAndSpinCount HeapFree SizeofResource InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead EncodePointer LoadLibraryExW IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter WaitForSingleObjectEx IsProcessorFeaturePresent VirtualAlloc VirtualFree LoadLibraryExA

user32

IntersectRect DrawIconEx IsIconic GetCursorPos GetNextDlgTabItem SetCursor SetRectEmpty DrawTextW SetRect PtInRect LoadBitmapW LoadImageW InflateRect MapWindowPoints CopyRect SystemParametersInfoW EnableWindow IsWindowEnabled GetActiveWindow OpenClipboard CloseClipboard EmptyClipboard SetClipboardData GetWindowTextLengthW CallWindowProcW GetWindow GetFocus GetDC ScreenToClient SendMessageW SetWindowTextW InvalidateRgn GetDlgCtrlID ClientToScreen DestroyAcceleratorTable IsChild GetSysColor GetProcessWindowStation CreateAcceleratorTableW SetFocus CharNextW FindWindowW IsRectEmpty SetCapture GetDlgItem GetDesktopWindow GetClassInfoExW GetParent ReleaseCapture InvalidateRect ReleaseDC GetWindowTextW PeekMessageW PostThreadMessageW GetWindowRect GetUserObjectInformationW MonitorFromWindow SetTimer RedrawWindow GetMonitorInfoW LoadIconW LoadCursorW UpdateLayeredWindow KillTimer BeginPaint EndPaint GetWindowLongW DefWindowProcW PostMessageW SendMessageTimeoutW DestroyWindow CreateWindowExW RegisterClassExW IsWindow SetWindowLongW FillRect GetClientRect GetWindowThreadProcessId SetWindowPos SetActiveWindow ShowWindow AttachThreadInput MessageBoxA GetForegroundWindow BringWindowToTop DestroyIcon IsDialogMessageW SetWindowRgn EqualRect IsWindowVisible MessageBeep GetClipboardData GetClassNameW IsClipboardFormatAvailable PostQuitMessage SetForegroundWindow GetMessageW DispatchMessageW TranslateMessage UnregisterClassW RegisterWindowMessageW MessageBoxW MoveWindow OffsetRect

gdi32

GetClipRgn CombineRgn RoundRect GetViewportOrgEx SetBkMode GetTextColor RectInRegion CreateEllipticRgn GetCurrentObject CreatePen CreateBitmap StretchBlt CreateRectRgn CreateRectRgnIndirect SelectClipRgn RestoreDC GetStretchBltMode SetStretchBltMode ExtTextOutW Rectangle SetTextColor SetBkColor CreateFontIndirectW GetStockObject GetDeviceCaps GetObjectW CreateDIBSection BitBlt CreateRoundRectRgn OffsetRgn ExtSelectClipRgn GetTextExtentPoint32W LineTo SetViewportOrgEx SaveDC MoveToEx CreateCompatibleBitmap SelectObject CreateCompatibleDC DeleteDC TextOutW CreateSolidBrush DeleteObject

advapi32

RegQueryInfoKeyW InitializeSecurityDescriptor SetSecurityDescriptorSacl CryptEnumProvidersW CryptSignHashW CryptDestroyHash CryptCreateHash CryptDecrypt CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey CryptReleaseContext CryptAcquireContextW ReportEventW RegisterEventSourceW DeregisterEventSource RegEnumKeyExW ConvertStringSecurityDescriptorToSecurityDescriptorW RegDeleteKeyW RegDeleteValueW RegSetValueExW LookupPrivilegeValueW AdjustTokenPrivileges OpenProcessToken RegCloseKey RegCreateKeyExW RegOpenKeyExW RegOpenKeyW RegQueryValueExW GetSecurityDescriptorSacl SetSecurityDescriptorDacl

shell32

SHCreateDirectoryExW ShellExecuteW

ole32

CoGetClassObject CoInitialize CoInitializeEx CoInitializeSecurity CoSetProxyBlanket CoCreateInstance CoUninitialize CreateStreamOnHGlobal CoTaskMemRealloc OleLockRunning CLSIDFromString OleUninitialize CoTaskMemAlloc StringFromGUID2 CLSIDFromProgID CoTaskMemFree OleInitialize

oleaut32

LoadTypeLi OleCreateFontIndirect DispCallFunc SysStringLen SysAllocStringLen VarUI4FromStr LoadRegTypeLi SysFreeString SysAllocString VariantClear VariantInit

msvcp140

?_Xlength_error@std@@YAXPBD@Z ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?uncaught_exception@std@@YA_NXZ ?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ ?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z ?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WXZ ?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z ?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z ?width@ios_base@std@@QAE_J_J@Z ?width@ios_base@std@@QBE_JXZ ?flags@ios_base@std@@QBEHXZ ?good@ios_base@std@@QBE_NXZ ?_BADOFF@std@@3_JB ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE_W_W@Z ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ ?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z ?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z ?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ ?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z ?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z ?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z ?_Xout_of_range@std@@YAXPBD@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z ?setf@ios_base@std@@QAEHHH@Z ??1_Lockit@std@@QAE@XZ ??0_Lockit@std@@QAE@H@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ ?always_noconv@codecvt_base@std@@QBE_NXZ ??Bid@locale@std@@QAEIXZ _Mtx_destroy_in_situ _Mtx_init_in_situ ?_Throw_C_error@std@@YAXH@Z _Mtx_lock _Mtx_unlock ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ ?_Xbad_alloc@std@@YAXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ

shlwapi

PathAddBackslashW PathAppendW PathRemoveFileSpecW PathFindFileNameW PathIsDirectoryW PathFileExistsW StrToIntW StrToIntA

comctl32

DrawShadowText InitCommonControlsEx _TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipFillRectangleI GdipMeasureString GdipDrawImageRectRect GdipCreateFontFromDC GdipClosePathFigure GdipCreateFontFromLogfontW GdipCreateBitmapFromStreamICM GdipSetStringFormatTrimming GdipSetSmoothingMode GdipDeleteFont GdipDeleteStringFormat GdipDeleteGraphics GdipCloneBrush GdipSetTextRenderingHint GdipCreateFromHDC GdipSetStringFormatFlags GdipLoadImageFromStreamICM GdipCreateSolidFill GdipCreateFont GdipSetStringFormatLineAlign GdipDisposeImage GdipAlloc GdipDeleteBrush GdipCloneImage GdipCreateFontFamilyFromName GdipGetImageHeight GdipCreateStringFormat GdiplusShutdown GdiplusStartup GdipCreateBitmapFromScan0 GdipGetImageGraphicsContext GdipDrawString GdipDrawImagePointsRectI GdipAddPathRectangleI GdipAddPathPieI GdipCreateLineBrushFromRectWithAngleI GdipCreatePen1 GdipDrawImageI GdipCreateBitmapFromStream GdipSetInterpolationMode GdipDeletePen GdipSetPenMode GdipTranslateWorldTransform GdipGetFontSize GdipStartPathFigure GdipRotateWorldTransform GdipSetPenEndCap GdipAddPathRectangle GdipResetWorldTransform GdipDrawPath GdipGetImagePixelFormat GdipCreateHBITMAPFromBitmap GdipDrawLinesI GdipCreatePath GdipScaleWorldTransform GdipFillRectangle GdipSetPixelOffsetMode GdipAddPathLineI GdipGraphicsClear GdipDrawImageRectI GdipCloneBitmapArea GdipImageRotateFlip GdipCreateImageAttributes GdipDisposeImageAttributes GdipSetImageAttributesColorMatrix GdipNewPrivateFontCollection GdipDeletePrivateFontCollection GdipPrivateAddFontFile GdipGetFontCollectionFamilyCount GdipGetFontCollectionFamilyList GdipCloneFontFamily GdipLoadImageFromFile GdipLoadImageFromFileICM GdipAddPathEllipseI GdipDeletePath GdipSetClipPath GdipGetImageWidth GdipSetStringFormatAlign GdipDrawImageRectRectI GdipLoadImageFromStream GdipDeleteFontFamily GdipFree GdipDrawLine GdipSetPenDashStyle GdipAddPathStringI GdipFillPath GdipSetPenStartCap GdipAddPathArcI GdipDrawRectangleI GdipGetFamily GdipSetCompositingQuality

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

ws2_32

ioctlsocket getsockname getsockopt ntohs WSAStartup WSACleanup WSAGetLastError getaddrinfo freeaddrinfo getnameinfo recv gethostname sendto recvfrom WSAIoctl htons getpeername select __WSAFDIsSet socket setsockopt listen connect closesocket bind accept WSASetLastError send shutdown

bcrypt

BCryptGenRandom

vcruntime140

__RTDynamicCast _except_handler4_common _CxxThrowException __vcrt_InitializeCriticalSectionEx __CxxFrameHandler3 strstr strrchr memchr strchr memcmp wcsrchr wcschr wcsstr __std_exception_copy __std_exception_destroy _purecall memset memcpy memmove

api-ms-win-crt-string-l1-1-0

wcsncpy_s isspace tolower isalpha isalnum strncmp wcsspn wcscspn strncpy_s wcsncmp __isascii isprint toupper isgraph isupper strnlen strcmp isxdigit iscntrl ispunct isdigit islower _stricmp wcscat wcscat_s _wcsupr_s _strnicmp _wcsnicmp wcscpy _strdup wcsncpy wcscpy_s strncpy strspn iswspace wcsnlen _wcslwr_s strcat wcscmp strlen wcslen _wcsicmp wmemcpy_s strcspn

api-ms-win-crt-stdio-l1-1-0

fgetpos fwrite __stdio_common_vswprintf ungetc __stdio_common_vswprintf_s fgetc fflush fsetpos _set_fmode fputs __p__commode fread _lseeki64 fopen _wfopen _fseeki64 _get_stream_buffer_pointers _open _close _write _read __acrt_iob_func setbuf __stdio_common_vsprintf clearerr __stdio_common_vsprintf_s setvbuf __stdio_common_vsscanf _setmode feof ftell fputc ferror fclose fseek __stdio_common_vfprintf __stdio_common_vsnprintf_s _fileno fgets

api-ms-win-crt-runtime-l1-1-0

_c_exit signal exit _initterm_e _initterm _get_wide_winmain_command_line _initialize_wide_environment _configure_wide_argv _set_app_type _seh_filter_exe _cexit _crt_atexit _register_onexit_function _initialize_onexit_table strerror_s raise _controlfp_s _getpid _invalid_parameter_noinfo _beginthreadex _errno strerror __sys_nerr _invalid_parameter_noinfo_noreturn _register_thread_local_exe_atexit_callback terminate _exit

api-ms-win-crt-heap-l1-1-0

_callnewh _recalloc malloc _set_new_mode realloc calloc free

api-ms-win-crt-convert-l1-1-0

wcstoul _wcstoui64 _wtof atoi strtol _wtoi64 strtoul strtoll _wtoi

api-ms-win-crt-time-l1-1-0

_gmtime64 _time64 _localtime64_s _time32 _gmtime32_s _mktime64

api-ms-win-crt-filesystem-l1-1-0

_fstat32 _waccess _access _unlock_file _stat64 _stat32 _fstat64 _lock_file

api-ms-win-crt-utility-l1-1-0

srand labs qsort abs rand

api-ms-win-crt-multibyte-l1-1-0

_mbspbrk _mbschr _mbsicmp _mbscmp

api-ms-win-crt-math-l1-1-0

ceil floor _except1 __setusermatherr

api-ms-win-crt-locale-l1-1-0

setlocale _configthreadlocale

api-ms-win-crt-environment-l1-1-0

getenv

wldap32

ord30 ord79 ord35 ord33 ord32 ord27 ord26 ord200 ord41 ord50 ord60 ord211 ord46 ord217 ord143 ord301 ord22

Name

.text

Size

2.8MB

Virtual Size

2.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

44KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

116B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2.6MB

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

890KB

Virtual Size

892KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=93, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=8, id=199, version=41118,

count=15, id=259, version=24123,

count=13, id=260, version=24123,

count=4, id=261, version=23013,

count=4, id=257, version=24123,

count=42, id=261, version=24123,

count=6, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=23, productName=Unmarked objects (old),

count=558, id=260, productName=VS2017 v15.8.0 build 26726, version=26726,

count=58, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=3, id=257, productName=VS2015 UPD3.1 build 24215, version=24215,

count=828, id=1, productName=Unmarked objects,

count=87, id=265, version=24215,

count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=2, id=151,

count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,