zynova-110.zip
- SHA256 1414bd17d5503b52aded84c3d510a5de67c483cf7c41b9d49079040bea0fd8ae
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Injector.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Injector.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Zynova.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
Zynova.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
ZynovaModule.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
ZynovaModule.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target zynova-110.zip
- Size 58.1MB
- Sample261023-qdpgdad14m
- SHA256 1414bd17d5503b52aded84c3d510a5de67c483cf7c41b9d49079040bea0fd8ae
- MD5 4a5dff977fa7239290cf2e47e1b980d6
- SHA1 b49670d35c9d7dd4f84b4d3f01f1b9704f6eeee3
- SHA512 2ea29d6c2d90d025929e44370fe8ab256aba78fd1e64dd8f4874c20912ff42ee5c68f59569d37777761f5f3bd1c4053a70d96eb1e234669f9eb7a8ae23bdf307
- SSDEEP 1572864:CFtWlQQMvChMs/cfrFR5YYawjyiLqYpWDEKU3Z9g5E:at+MMMsyr15m8vpcbUJ9GE
- TLSH T184D733C598B166E92C4710252DB7F4C83534B13FF51A2B1A90377ABD38AD2E58BF085B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Injector.exe unpack001/Zynova.exe unpack001/ZynovaModule.dll
File Explorer
-
zynova-110.zip.zip 58.1MB
-
Injector.exe.exe 31.7MB
-
Zynova.exe.exe 34.6MB
-
ZynovaModule.dll.dll 3.2MB
Injector.exe
- IMPHASH 01047cadc5d88a4ff2e9fe46db5e1f54
- SHA256 7d6901e66b8ea1c1ec6ce63d4c00a243b28d5eee575f30e60d51096f6e3910b8
- MD5 515593f12761e3111faeb8eda64aa80a
- SHA1 db8232ee57655ad3129a211057cbe4027eafa6c4
- SHA512 1757988548d952a8df77eec2a8bdc237191375c8fd40c6b566ef8bb19836e5f2a942a012d61bba49daef17a05a05c849159b670df2eaf9e44da309f990409e97
- SSDEEP 393216:LOUX5FVbZY7JO24n5v11r9/W75qRFwAZ/2eSHaizJAWiA3eKyadbD0HdC21:Lr5nuJOFh11YOq4LSHaWJG0yadeC21
- TLSH T17C7723E766E5B2D4D7C24984638D61DE12C2A4BBC9EE943D3AC71C036534CEB8588DB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
38843814
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
ntdll
NtQueryObject
kernel32
SetConsoleTitleA
advapi32
SetNamedSecurityInfoW
msvcp140
?_Xout_of_range@std@@YAXPEBD@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcpy
api-ms-win-crt-heap-l1-1-0
malloc
api-ms-win-crt-stdio-l1-1-0
fflush
api-ms-win-crt-string-l1-1-0
_stricmp
api-ms-win-crt-runtime-l1-1-0
_register_thread_local_exe_atexit_callback
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
Name
.text
Size
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
912B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.%k(
Size
Virtual Size
19.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.mCL
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.`!i
Size
31.7MB
Virtual Size
31.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
673B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
268B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Zynova.exe
- IMPHASH 6afa3edf31c10731c3b40634992779a0
- SHA256 2f6a9e8fbe60add2ce15b42a806397c1826769f9d820f96a5d22157d6cee3666
- MD5 19f974f7f6d4728d2434a9f78ce10dbc
- SHA1 f0bc05a0982b4db85625d5ff693ff5e5429e4406
- SHA512 87c7f19968f4311b3eb21cc54dd625bff8bad1ff1845e5f095d4cf84d52f7561aa18438416265cdffffb7fe073d75c3eeb1880aa35cb58237079eed533fdab1c
- SSDEEP 786432:hi6/2MY1az2rQPdSddIHcNvVJaQWpo9IuNfnAbgWmnk77D+Z:uMYcz2c12KHsvmQv1nDzO7
- TLSH T18E87238758D463D4C7C34504628F43DB21D1AD7A86FA88192EC73C036A25EEB568DFBB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
26215577
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
bcryptprimitives
ProcessPrng
ntdll
NtCreateNamedPipeFile
kernel32
GetProcessHeap
RtlUnwindEx
user32
GetMessageA
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
shell32
SHGetStockIconInfo
combase
CoCreateFreeThreadedMarshaler
comctl32
RemoveWindowSubclass
gdi32
DeleteDC
oleaut32
GetErrorInfo
imm32
ImmGetContext
ole32
RevokeDragDrop
advapi32
RegQueryValueExW
EventWriteTransfer
dwmapi
DwmEnableBlurBehindWindow
shlwapi
SHCreateMemStream
api-ms-win-core-winrt-error-l1-1-0
RoOriginateErrorW
ws2_32
WSACleanup
api-ms-win-crt-math-l1-1-0
floor
api-ms-win-crt-string-l1-1-0
strcpy_s
api-ms-win-crt-convert-l1-1-0
_ultow_s
api-ms-win-crt-runtime-l1-1-0
_register_thread_local_exe_atexit_callback
api-ms-win-crt-stdio-l1-1-0
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Name
.text
Size
Virtual Size
3.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
743KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
55KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.z,c
Size
Virtual Size
20.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.:ss
Size
1024B
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.:D(
Size
34.6MB
Virtual Size
34.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
276B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
ZynovaModule.dll
- IMPHASH 52a7571a041eace14cea3e3c75ce79de
- SHA256 3550d9c2360d0278173d4e69dd38a04376d566e51307221ab91a04669f5f9b03
- MD5 9253386f4271e97315de2054a08f42fb
- SHA1 59c4bb83f96c0e6941718af75dfab22465b110cf
- SHA512 9e058a2232eb55dc1e1f6124313dbb9c62546bc4851f82b35d634bb78227a3991cf461411e6e16ff19a57544a82b596d86b342cf2b9a0952d01b0ab3d56185fa
- SSDEEP 49152:jIQcD0gwi8jM1qIQQ7V+PJVHIvKS8bp4jGFb5KXI+qs977Fsg5ghAobxJ8LwOF:j9rPcpgHzbgYQJoxJ8Lv
- TLSH T10DF59E76A6A800ECD077C1BCCA979A17F7B2B4490320A7DF16E446651F67BE04B7E312
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1971784
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\seif9\Downloads\zynova exex\zynova executor\build\ZynovaModule.pdb
ws2_32
inet_pton
WSASocketW
shutdown
getpeername
getsockname
ntohs
getsockopt
WSAPoll
ioctlsocket
getnameinfo
WSAGetLastError
accept
bind
closesocket
ntohl
listen
getaddrinfo
inet_addr
send
socket
connect
recv
htons
freeaddrinfo
setsockopt
WSACleanup
WSAStartup
crypt32
CertFreeCertificateContext
CertGetCertificateChain
CryptBinaryToStringA
CertOpenSystemStoreW
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertCloseStore
CertEnumCertificatesInStore
CertCreateCertificateContext
winhttp
WinHttpSetTimeouts
WinHttpSendRequest
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpReadData
WinHttpConnect
WinHttpOpen
WinHttpReceiveResponse
WinHttpQueryDataAvailable
WinHttpWebSocketCompleteUpgrade
WinHttpWebSocketClose
WinHttpWebSocketReceive
WinHttpWebSocketSend
WinHttpQueryHeaders
kernel32
RtlLookupFunctionEntry
RtlCaptureContext
WakeAllConditionVariable
RtlVirtualUnwind
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
UnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
MoveFileExA
InitOnceBeginInitialize
InitOnceComplete
GetFileInformationByHandleEx
AreFileApisANSI
CreateDirectoryW
GetModuleFileNameA
GetCurrentProcess
ExpandEnvironmentStringsW
OutputDebugStringA
TerminateProcess
InitializeCriticalSection
SetFilePointer
GetCurrentThreadId
GetModuleHandleA
Sleep
GetModuleHandleExA
CreateFileA
DisableThreadLibraryCalls
AddVectoredExceptionHandler
ExitProcess
GetCurrentProcessId
SetUnhandledExceptionFilter
VirtualQuery
ReadFile
FindFirstFileW
GetFileSizeEx
HeapFree
GetFullPathNameW
FindNextFileW
WriteFile
RemoveDirectoryW
FindClose
CreateFileW
GetFileAttributesW
SetFileAttributesW
MultiByteToWideChar
GetTickCount64
GetLastError
DeleteFileW
CloseHandle
HeapAlloc
MoveFileExW
GetProcessHeap
CopyFileW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
GetVolumeInformationA
GetComputerNameA
FlushFileBuffers
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
IsBadReadPtr
GetModuleHandleExW
GetModuleFileNameW
CreateProcessW
VirtualFree
VirtualAlloc
FillConsoleOutputCharacterA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
SetConsoleTitleA
GetStdHandle
WriteConsoleA
SetConsoleMode
ReadConsoleA
GetConsoleMode
FreeConsole
FillConsoleOutputAttribute
GetConsoleWindow
SetConsoleOutputCP
SetConsoleCursorPosition
AllocConsole
FormatMessageA
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
VerSetConditionMask
GetModuleHandleW
QueryPerformanceCounter
GetFileInformationByHandle
GetFileAttributesExW
SleepConditionVariableSRW
GetLocaleInfoEx
GetLocalTime
LocalFree
InitializeSListHead
user32
GetWindowLongW
DefWindowProcW
AdjustWindowRectEx
GetKeyState
DestroyWindow
MonitorFromWindow
EnumDisplayMonitors
CreateWindowExW
ScreenToClient
SetWindowTextW
RegisterClassExW
WindowFromPoint
GetCapture
GetMonitorInfoW
ClientToScreen
IsChild
TrackMouseEvent
SetLayeredWindowAttributes
SetFocus
BringWindowToTop
LoadCursorW
SetCapture
SetCursor
SetWindowLongW
GetClientRect
ReleaseCapture
SetForegroundWindow
IsIconic
SetCursorPos
GetCursorPos
SetWindowPos
ShowWindow
GetWindowThreadProcessId
keybd_event
GetSystemMetrics
OpenClipboard
CloseClipboard
EmptyClipboard
MessageBoxA
GetForegroundWindow
GetClipboardData
mouse_event
SetClipboardData
FindWindowA
CallWindowProcW
GetDC
SetWindowLongPtrW
ReleaseDC
MessageBoxW
gdi32
GetDeviceCaps
comdlg32
GetSaveFileNameA
GetOpenFileNameA
advapi32
CryptAcquireContextW
GetCurrentHwProfileW
CryptDestroyKey
CryptEncrypt
CryptGenRandom
CryptReleaseContext
CryptGetHashParam
CryptImportKey
CryptSetKeyParam
CryptDecrypt
CryptDestroyHash
CryptHashData
CryptCreateHash
shell32
SHGetFolderPathW
SHBrowseForFolderA
ShellExecuteA
SHGetPathFromIDListA
ole32
CoTaskMemFree
msvcp140
_Xtime_get_ticks
_Thrd_join
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
_Thrd_id
?_Random_device@std@@YAIXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
_Cnd_signal
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Throw_Cpp_error@std@@YAXH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Winerror_map@std@@YAHH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
_Mtx_lock
_Cnd_do_broadcast_at_thread_exit
_Thrd_detach
_Mtx_unlock
?_Xbad_function_call@std@@YAXXZ
_Query_perf_frequency
_Query_perf_counter
??_7_Facet_base@std@@6B@
_Strxfrm
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Id_cnt@id@locale@std@@0HA
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
??_7facet@locale@std@@6B@
_Strcoll
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Facet_base@std@@UEAA@XZ
?uncaught_exceptions@std@@YAHXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
bcrypt
BCryptGetProperty
BCryptHashData
BCryptOpenAlgorithmProvider
BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptFinishHash
BCryptGenRandom
BCryptCreateHash
d3dcompiler_47
D3DCompile
imm32
ImmReleaseContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmAssociateContextEx
ImmGetContext
vcruntime140_1
__CxxFrameHandler4
vcruntime140
_set_purecall_handler
__std_exception_copy
__std_exception_destroy
__C_specific_handler
_purecall
strchr
wcsrchr
strstr
memcpy
__std_type_info_destroy_list
memmove
memset
memcmp
memchr
__current_exception
__C_specific_handler_noexcept
__current_exception_context
strrchr
_CxxThrowException
api-ms-win-crt-runtime-l1-1-0
signal
abort
_errno
exit
_beginthreadex
_invoke_watson
set_terminate
_resetstkoflw
_set_invalid_parameter_handler
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
terminate
api-ms-win-crt-heap-l1-1-0
calloc
free
malloc
_callnewh
realloc
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsnprintf_s
__stdio_common_vsscanf
setbuf
fopen
__acrt_iob_func
ftell
_fseeki64
fread
fseek
__stdio_common_vswprintf_s
fsetpos
ungetc
_wfopen_s
fflush
_wfopen
fputc
setvbuf
fgetpos
fwrite
fgetc
__stdio_common_vsprintf
_get_stream_buffer_pointers
__stdio_common_vfprintf
__stdio_common_vsprintf_s
__stdio_common_vfwprintf
fclose
api-ms-win-crt-string-l1-1-0
isgraph
strspn
strcmp
isupper
isxdigit
iscntrl
strcspn
ispunct
isdigit
islower
strnlen
_stricmp
_wcsicmp
wcscpy_s
strcpy_s
_wcsnicmp
tolower
wcscat_s
strncmp
isalnum
strncat
strncpy_s
isalpha
isblank
toupper
isspace
strncpy
strpbrk
api-ms-win-crt-math-l1-1-0
cosh
floor
cosf
floorf
llround
fmod
cos
fmodf
ceil
atan2f
atan2
atan
log
asin
acosf
acos
_dclass
log10
log2
logf
_dsign
pow
powf
sin
ldexp
round
modf
frexp
exp
sinf
sinh
sqrt
sqrtf
tanh
tan
ceilf
api-ms-win-crt-convert-l1-1-0
strtoul
atoi
strtol
strtoll
atof
strtod
strtoull
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
remove
api-ms-win-crt-locale-l1-1-0
localeconv
___lc_codepage_func
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-time-l1-1-0
_difftime64
clock
_time64
_localtime64_s
strftime
_gmtime64_s
Name
.text
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
674KB
Virtual Size
674KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
47KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
98KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=77, id=260, version=34809,
count=8, id=260, version=35207,
count=35, id=261, version=35207,
count=6, id=259, version=35207,
count=6, id=257, version=35207,
count=12, id=260, version=34120,
count=588, id=1, productName=Unmarked objects,
count=29, id=257, version=33145,
count=138, id=265, version=35228,
count=1, id=255, version=35228,
count=1, id=258, version=35228,