e56ffc1665f8fe47ca8e98085fb5c7499403e77cc4469378293ad30b59241065

Sharing

Copy URL Twitter E-mail

General

Target
e56ffc1665f8fe47ca8e98085fb5c7499403e77cc4469378293ad30b59241065
Size 6.0MB
Sample261030-v2ts8afa92
SHA256 e56ffc1665f8fe47ca8e98085fb5c7499403e77cc4469378293ad30b59241065
MD5 0425dfbf2204b6b527646f449bcacef4
SHA1 b93b647024e97e5fe94232a7253f4df32becf269
SHA512 a53d5bfc067d6e4ee31dfc8fcbea2874eb88bde4353856fcfb9a0cb8fbf5669edb8f2cd6f7ae5e3faf4326129f8e365b19ff48f376e6d46571077082ed0579c9
SSDEEP 98304:BZW1f0wqmnW3dIq2+dARI/S8ZTSyJxhd1jpzbDbDr/T7A+I0:BsrJ1q2YJDH
TLSH
T1D0569E207906C176D99121B2D97CBFFE856D9D248B2019D793C83E2EF9702D23B3256B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e56ffc1665f8fe47ca8e98085fb5c7499403e77cc4469378293ad30b59241065

File Explorer

e56ffc1665f8fe47ca8e98085fb5c7499403e77cc4469378293ad30b59241065

.exe 6.0MB

e56ffc1665f8fe47ca8e98085fb5c7499403e77cc4469378293ad30b59241065

IMPHASH d373f358a80804cf698c582460ec18d8
SHA256 e56ffc1665f8fe47ca8e98085fb5c7499403e77cc4469378293ad30b59241065
MD5 0425dfbf2204b6b527646f449bcacef4
SHA1 b93b647024e97e5fe94232a7253f4df32becf269
SHA512 a53d5bfc067d6e4ee31dfc8fcbea2874eb88bde4353856fcfb9a0cb8fbf5669edb8f2cd6f7ae5e3faf4326129f8e365b19ff48f376e6d46571077082ed0579c9
SSDEEP 98304:BZW1f0wqmnW3dIq2+dARI/S8ZTSyJxhd1jpzbDbDr/T7A+I0:BsrJ1q2YJDH
TLSH
T1D0569E207906C176D99121B2D97CBFFE856D9D248B2019D793C83E2EF9702D23B3256B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2718223

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Projeler\corepanel\native-client-svside\Client\bin\metin2client.pdb

kernel32

TerminateThread K32GetModuleInformation TerminateProcess ReadProcessMemory GetModuleHandleA GetLastError FindNextFileA FindFirstFileA FindClose WriteConsoleW HeapQueryInformation HeapSize SetEndOfFile OutputDebugStringW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW DeleteFileW HeapReAlloc SetFileAttributesW CreateProcessW GetExitCodeProcess SetStdHandle SetCurrentDirectoryW CreateDirectoryW GetFileSizeEx SetConsoleCtrlHandler ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetTimeZoneInformation GetFileAttributesExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect IsThreadAFiber SetFileAttributesA Module32Next Module32First Process32Next GetCurrentDirectoryW Process32First CreateToolhelp32Snapshot GetSystemInfo OpenProcess SetThreadPriority Sleep CreateEventA WaitForSingleObject SetEvent DeleteCriticalSection GetTempPathW HeapAlloc HeapFree GetStdHandle GetFullPathNameW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetFileType GetFileInformationByHandle GetDriveTypeW LeaveCriticalSection ResumeThread ExitThread CreateThread GetModuleHandleExW LoadLibraryExW GetTickCount TlsSetValue TlsGetValue TlsAlloc InterlockedFlushSList InterlockedPushEntrySList RaiseException RtlUnwind GetThreadTimes GetCurrentThread SetFilePointerEx GetComputerNameA WaitNamedPipeW PeekNamedPipe GetModuleFileNameW SetLastError GetStartupInfoW IsDebuggerPresent InitializeSListHead UnhandledExceptionFilter CreateEventW ResetEvent InitializeCriticalSectionAndSpinCount FindResourceW FindResourceA SizeofResource LoadResource LockResource CreateFileW IsProcessorFeaturePresent InterlockedDecrement GetProcessHeap HeapValidate InterlockedIncrement GetLocaleInfoEx CreateSymbolicLinkW GetFileInformationByHandleEx GetModuleHandleW CloseThreadpoolWait SetThreadpoolWait CreateThreadpoolWait CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks SetThreadpoolTimer CreateThreadpoolTimer CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns GetTickCount64 GetSystemTimeAsFileTime GetCurrentProcessorNumber FlushProcessWriteBuffers CreateSemaphoreExW CreateEventExW InitOnceExecuteOnce FlsFree FlsSetValue FlsGetValue FlsAlloc SetFileInformationByHandle GetCPInfo CompareStringEx LCMapStringEx DecodePointer EncodePointer LocalFree SleepConditionVariableSRW SleepConditionVariableCS WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable TryEnterCriticalSection GetCurrentDirectoryA DeleteFileA GetFileAttributesA GetFileSize ReadFile ReleaseMutex CreateMutexA ExitProcess GetModuleFileNameA GlobalFree MoveFileA GetPrivateProfileStringA OpenMutexA InitializeCriticalSectionEx AcquireSRWLockExclusive ReleaseSRWLockExclusive InitializeSRWLock QueryPerformanceFrequency GetStringTypeW FormatMessageA GetNativeSystemInfo GetExitCodeThread SwitchToThread WaitForSingleObjectEx TlsFree lstrlenA QueryPerformanceCounter CopyFileA CreateSemaphoreA ReleaseSemaphore GetLocaleInfoA CompareStringA WideCharToMultiByte lstrlenW GlobalLock GlobalUnlock GetVersionExA GetSystemDirectoryA WriteFile SetFilePointer CreateFileMappingA UnmapViewOfFile MapViewOfFile OutputDebugStringA GlobalAlloc GetTempFileNameA GetTempPathA RemoveDirectoryA EnterCriticalSection InitializeCriticalSection lstrcatA GetLocalTime GetCurrentThreadId GetCurrentProcessId GetCurrentProcess AddVectoredExceptionHandler SetUnhandledExceptionFilter CloseHandle CreateFileA CreateDirectoryA Beep MultiByteToWideChar VerifyVersionInfoA AllocConsole LoadLibraryA GetProcAddress FreeLibrary FreeLibraryAndExitThread VerSetConditionMask

user32

MessageBoxA ClientToScreen OffsetRect DefWindowProcA UnregisterClassA RegisterClassExA CreateWindowExA IsWindow DestroyWindow ShowWindow MoveWindow SetFocus UpdateWindow wsprintfA PostQuitMessage SetWindowPos GetCursorPos ScreenToClient LoadImageW RegisterClassExW UnregisterClassW DefWindowProcW SendMessageW CharNextW GetClipboardData CloseClipboard OpenClipboard GetKeyboardLayout GetKeyboardLayoutNameA CharPrevExA CharNextExA AdjustWindowRectEx GetWindowRect SetWindowTextA GetMenu FindWindowA LoadIconA SystemParametersInfoA GetKeyState ShowCursor SetCursor DestroyCursor LoadImageA SetCursorPos GetCapture SetCapture ReleaseCapture ChangeDisplaySettingsA GetAsyncKeyState GetClientRect GetSystemMetrics wvsprintfA LoadStringW GetMessageA TranslateMessage DispatchMessageA PeekMessageA LoadStringA SetRect FillRect InvalidateRect EndPaint BeginPaint ReleaseDC GetDC GetMonitorInfoA MonitorFromPoint LoadCursorA SetWindowLongA GetWindowLongA ValidateRect KillTimer SetTimer CreateWindowExW RegisterClassA PostThreadMessageA SendMessageA

gdi32

CreateSolidBrush CreateFontIndirectA GetCharABCWidthsFloatW GetTextExtentPoint32W SelectObject SetBkColor SetTextColor TextOutW CreateCompatibleDC DeleteDC SetBkMode SetDIBitsToDevice CreateDIBSection TextOutA DeleteObject GetStockObject PatBlt StretchBlt GetTextExtentPoint32A EnumFontFamiliesExA

advapi32

RegQueryValueExA RegSetValueExW RegQueryValueExW RegOpenKeyExW RegCreateKeyExW RegOpenKeyA RegCloseKey RegOpenKeyExA CryptGenRandom CryptAcquireContextA CryptReleaseContext CryptGetHashParam CryptCreateHash CryptHashData CryptDestroyHash

shell32

SHGetFolderPathA ShellExecuteA SHGetSpecialFolderPathA

ole32

CoInitializeEx CoCreateInstance CoInitialize CoUninitialize

winmm

timeGetTime timeBeginPeriod timeGetDevCaps timeEndPeriod

d3d8

Direct3DCreate8

python27

PyMarshal_ReadObjectFromString PyCode_New PyEval_GetRestricted PyErr_NoMemory PyErr_Occurred PyDict_SetItem PyDict_New PyString_FromStringAndSize PyComplex_FromCComplex PyFloat_FromDouble _PyLong_FromByteArray PyUnicodeUCS2_DecodeUTF8 PyCode_Type Py_OptimizeFlag PyEval_EvalCode PyCode_Addr2Line PyObject_AsCharBuffer PyImport_AddModule PyImport_GetMagicNumber Py_FlushLine _Py_EllipsisObject PyExc_StopIteration PyExc_EOFError _PyLong_New PyEval_SetTrace Py_CompileStringFlags PyRun_StringFlags Py_Finalize Py_Initialize Py_SetProgramName PyErr_Fetch Py_InitModule4 PyObject_GetAttrString PyDict_SetItemString PyTuple_Size PyTuple_GetItem PyErr_Clear PyImport_ImportModule Py_BuildValue PyModule_AddIntConstant PyLong_AsLong PyDict_GetItemString PyInt_FromLong PyLong_FromLongLong PyTuple_New PyTuple_SetItem PyList_New PyList_SetItem PyList_Append PyModule_AddObject PyDict_Next PyDict_Size PyString_AsString PyErr_SetString PyFrame_GetLineNumber PyExc_RuntimeError _PyThreadState_Current PyString_FromString PyArg_ParseTuple _Py_NoneStruct PyExc_ValueError PyLong_FromLong PyModule_AddStringConstant PyString_InternFromString PyObject_GetAttr PyCallable_Check PyModule_GetDict PyFloat_AsDouble PyErr_BadArgument PyErr_Print PyObject_CallObject PyNumber_Check PyInt_AsLong PyLong_AsLongLong

imm32

ImmGetIMEFileNameA ImmNotifyIME ImmGetOpenStatus ImmSetConversionStatus ImmGetConversionStatus ImmGetCandidateListW ImmSetCompositionStringW ImmGetCompositionStringW ImmAssociateContext ImmReleaseContext ImmGetContext ImmIsIME

libcef

cef_stream_reader_create_for_data cef_stream_reader_create_for_file cef_post_data_element_create cef_print_settings_create cef_menu_model_create cef_post_data_create cef_response_create cef_v8stack_trace_get_current cef_media_router_get_global cef_cookie_manager_get_global_manager cef_stream_writer_create_for_handler cef_stream_writer_create_for_file cef_image_create cef_list_value_create cef_urlrequest_create cef_process_message_create cef_request_create cef_string_multimap_free cef_string_multimap_alloc cef_string_wide_to_utf8 cef_log cef_create_context_shared cef_request_context_create_context cef_request_context_get_global_context cef_drag_data_create cef_dictionary_value_create cef_v8value_create_function cef_v8value_create_array_buffer cef_v8value_create_array cef_v8value_create_object cef_v8value_create_string cef_v8value_create_date cef_v8value_create_double cef_v8value_create_uint cef_v8value_create_int cef_v8value_create_bool cef_v8value_create_null cef_v8value_create_undefined cef_task_runner_get_for_thread cef_task_runner_get_for_current_thread cef_string_multimap_append cef_string_multimap_value cef_string_multimap_key cef_string_multimap_size cef_string_map_append cef_string_map_value cef_string_map_key cef_string_map_size cef_string_list_append cef_string_list_value cef_string_list_size cef_value_create cef_binary_value_create cef_browser_host_create_browser_sync cef_browser_host_create_browser cef_command_line_get_global cef_command_line_create cef_string_map_free cef_string_map_alloc cef_v8context_in_context cef_v8context_get_entered_context cef_v8context_get_current_context cef_api_hash cef_execute_java_script_with_user_gesture_for_tests cef_register_widevine_cdm cef_is_web_plugin_unstable cef_register_web_plugin_crash cef_unregister_internal_web_plugin cef_refresh_web_plugins cef_visit_web_plugin_info cef_now_from_system_trace_time cef_end_tracing cef_begin_tracing cef_is_cert_status_error cef_launch_process cef_get_path cef_stream_reader_create_for_handler cef_string_utf16_clear cef_string_utf8_to_utf16 cef_string_utf8_clear cef_string_utf16_cmp cef_string_utf16_to_utf8 cef_uriencode cef_write_json cef_base64decode cef_base64encode cef_get_extensions_for_mime_type cef_get_mime_type cef_format_url_for_security_display cef_uridecode cef_create_url cef_parse_url cef_clear_cross_origin_whitelist cef_remove_cross_origin_whitelist_entry cef_add_cross_origin_whitelist_entry cef_load_crlsets_file cef_zip_directory cef_delete_file cef_directory_exists cef_create_temp_directory_in_directory cef_create_new_temp_directory cef_get_temp_directory cef_create_directory cef_set_crash_key_value cef_crash_reporting_enabled cef_enable_highdpi_support cef_set_osmodal_loop cef_quit_message_loop cef_run_message_loop cef_do_message_loop_work cef_shutdown cef_initialize cef_execute_process cef_clear_scheme_handler_factories cef_register_scheme_handler_factory cef_register_extension cef_post_delayed_task cef_post_task cef_currently_on cef_string_list_free cef_string_list_alloc cef_string_userfree_utf16_free cef_string_utf16_set cef_parse_json cef_parse_jsonand_return_error

wininet

InternetReadFile InternetCloseHandle InternetOpenA InternetOpenUrlA

iphlpapi

GetIpNetTable

gdiplus

GdipDeleteFont GdipFree GdipCloneBrush GdipDeleteBrush GdipCreateSolidFill GdipGetImageWidth GdipGetImageHeight GdipCreateFromHWND GdipCreateFromHWNDICM GdipDeleteGraphics GdipDrawImageRectI GdipCreateFontFamilyFromName GdipDeleteFontFamily GdipGetGenericFontFamilySansSerif GdipDrawString GdipAlloc GdipCreateFont

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

devil

ilBindImage ilLoad ilConvertImage ilDeleteImages ilEnable ilOriginFunc ilShutDown ilSave ilSetPixels ilTexImage ilGenImages ilCopyPixels ilInit ilGetInteger

granny2

_GrannyNewMeshBinding@12 _GrannyFreeModelInstance@4 _GrannyInstantiateModel@4 _GrannyGetWorldPoseComposite4x4Array@4 _GrannySetLogCallback@4 _GrannyGetMaterialTextureByType@8 _GrannyFindMatchingMember@16 _GrannyFreeLocalPose@4 _GrannyUpdateModelMatrix@20 _GrannySampleModelAnimationsAccelerated@20 _GrannyFreeCompletedModelControls@4 _GrannyReadEntireFileFromMemory@8 _GrannyConvertSingleObject@20 _GrannyFreeMeshBinding@4 _GrannyGetMeshBindingToBoneIndices@4 _GrannyFindBoneByName@12 _GrannyNewWorldPose@4 _GrannyFreeWorldPose@4 _GrannyGetWorldPose4x4@8 _GrannyGetWorldPoseComposite4x4@8 _GrannyGetTotalTypeSize@4 _GrannyGetMeshVertexCount@4 _GrannyMeshIsRigid@4 _GrannyGetMeshIndexCount@4 _GrannyFreeControl@4 _GrannyFreeControlOnceUnused@4 _GrannyCompleteControlAt@8 _GrannyControlIsComplete@4 _GrannyFreeControlIfComplete@4 _GrannyGetControlLoopCount@4 _GrannySetControlLoopCount@8 _GrannyGetControlSpeed@4 _GrannySetControlSpeed@8 _GrannyGetControlLocalDuration@4 _GrannySetControlEaseIn@8 _GrannySetControlEaseInCurve@28 _GrannySetControlEaseOut@8 _GrannySetControlEaseOutCurve@28 _GrannyGetControlRawLocalClock@4 _GrannySetControlRawLocalClock@8 _GrannyPlayControlledAnimation@12 _GrannyGetMeshTriangleGroupCount@4 _GrannyGetMeshTriangleGroups@4 _GrannyGetMeshVertexType@4 _GrannyCopyMeshVertices@12 _GrannyGetMeshVertices@4 _GrannySetModelClock@8 _GrannyGetSourceSkeleton@4 _GrannyGetFileInfo@4 _GrannyCopyMeshIndices@12 _GrannyNewMeshDeformer@16 _GrannyFreeMeshDeformer@4 _GrannyDeformVertices@24 GrannyPNT332VertexType _GrannyFreeFileSection@8 _GrannyNewLocalPose@4 _GrannyFreeFile@4

mss32

_AIL_open_3D_provider@4 _AIL_enumerate_3D_providers@12 _AIL_close_digital_driver@4 _AIL_open_stream@12 _AIL_open_3D_listener@4 _AIL_file_type@8 _AIL_decompress_ADPCM@12 _AIL_decompress_ASI@24 _AIL_WAV_info@8 _AIL_close_3D_listener@4 _AIL_set_file_callbacks@16 _AIL_file_read@8 _AIL_mem_free_lock@4 _AIL_set_3D_position@16 _AIL_set_3D_velocity@20 _AIL_set_3D_orientation@28 _AIL_startup@0 _AIL_shutdown@0 _AIL_set_redist_directory@4 _AIL_close_stream@4 _AIL_start_stream@4 _AIL_pause_stream@8 _AIL_set_stream_volume_levels@12 _AIL_stream_volume_levels@12 _AIL_set_stream_loop_count@8 _AIL_stream_status@4 _AIL_last_error@0 _AIL_allocate_sample_handle@4 _AIL_release_sample_handle@4 _AIL_init_sample@4 _AIL_set_sample_file@12 _AIL_start_sample@4 _AIL_stop_sample@4 _AIL_resume_sample@4 _AIL_end_sample@4 _AIL_set_sample_volume_pan@12 _AIL_set_sample_loop_count@8 _AIL_sample_status@4 _AIL_sample_volume_pan@12 _AIL_allocate_3D_sample_handle@4 _AIL_release_3D_sample_handle@4 _AIL_start_3D_sample@4 _AIL_stop_3D_sample@4 _AIL_resume_3D_sample@4 _AIL_end_3D_sample@4 _AIL_set_3D_sample_file@8 _AIL_set_3D_sample_loop_count@8 _AIL_3D_sample_status@4 _AIL_3D_sample_volume@4 _AIL_update_3D_position@8 _AIL_auto_update_3D_position@8 _AIL_close_3D_provider@4 _AIL_set_3D_sample_volume@8 _AIL_open_digital_driver@16

speedtreert

?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z ?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z ?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?SetLodLevel@CSpeedTreeRT@@QAEXM@Z ?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ ?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z ?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z ?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z ?DeleteTransientData@CSpeedTreeRT@@QAEXXZ ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ??3CSpeedTreeRT@@SAXPAX@Z ??2CSpeedTreeRT@@SAPAXI@Z ??1CSpeedTreeRT@@QAE@XZ ??0CSpeedTreeRT@@QAE@XZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ ??0SGeometry@CSpeedTreeRT@@QAE@XZ ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z ?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z ?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ ?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z ?GetCurrentError@CSpeedTreeRT@@SAPBDXZ ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z ?SetTime@CSpeedTreeRT@@SAXM@Z

dinput8

DirectInput8Create

ws2_32

setsockopt send select gethostname gethostbyname ntohs recv ntohl htonl closesocket htons inet_addr sendto socket WSAStartup WSACleanup __WSAFDIsSet connect ioctlsocket WSAGetLastError

ddraw

DirectDrawCreate

oleaut32

VariantClear SysFreeString

Name

.text

Size

4.3MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

719KB

Virtual Size

719KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

176KB

Virtual Size

673KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

616KB

Virtual Size

616KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

210KB

Virtual Size

210KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=43, id=264, version=30153,

count=49, id=259, version=33145,

count=221, id=261, version=33145,

count=4, id=170, productName=VS2010 build 30319, version=30319,

count=46, id=261, productName=VS2019 v16.6.2 build 28806, version=28806,

count=2, id=260, productName=VS2019 v16.9.4 build 29914, version=29914,

count=2, id=262, version=33145,

count=58, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=48, version=9044,

count=2, id=203, productName=VS2012 UPD3 build 60610, version=60610,

count=2, id=257, productName=VS2015 [14.0] build 23026, version=23026,

count=4, id=260, version=32822,

count=8, id=261, productName=VS2019 v16.9.4 build 29914, version=29914,

count=117, id=261, productName=VS2019 v16.4.4 build 28316, version=28316,

count=1, id=253, version=28518,

count=20, id=260, version=30034,

count=29, id=259, version=30034,

count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=28, version=9178,

count=76, id=29, version=9178,

count=1, id=18, version=8444,

count=10, productName=Unmarked objects (old),

count=4, id=25, version=9210,

count=39, id=260, version=33145,

count=31, id=257, version=33145,

count=728, id=1, productName=Unmarked objects,

count=101, id=261, version=30034,

count=325, id=261, version=30153,

count=1, id=255, version=30153,

count=1, id=151,

count=1, id=258, version=30153,