2026-11-01_ea996264cbcbf8c46747c81d8c9b0375_amadey_darkgate_elex_glassworm_luca-stealer_magniber_njrat_qakbot_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-01_ea996264cbcbf8c46747c81d8c9b0375_amadey_darkgate_elex_glassworm_luca-stealer_magniber_njrat_qakbot_smoke-loader
Size 9.1MB
Sample261102-e51g6sey71
SHA256 53ff9ebd40c1b1d1c23313576f7a27ff71c1101e1f7678c7ed48dd9e3c4d59cf
MD5 ea996264cbcbf8c46747c81d8c9b0375
SHA1 da198e48717292962d70b51e99e05ee32aa3953e
SHA512 809a57a12d37f6b6c57f93d889b26d23162b70e778cf6f4cc97dafa9c8d0376d770656673fdb4cc125bfe42cf2b3f1654770d32c2f76700505ce3296c92f5052
SSDEEP 196608:QqJVnaMXXCFsdHQgClwYAwqtGYAUt4BjvjujH2j:xyMSgzYAwqSBjuq
TLSH
T16DA6D0207912C072E99110F4997CFFEF516CA5340FA564D7E3C81E6EDA70AC22B36A97
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
2026-11-01_ea996264cbcbf8c46747c81d8c9b0375_amadey_darkgate_elex_glassworm_luca-stealer_magniber_njrat_qakbot_smoke-loader

File Explorer

2026-11-01_ea996264cbcbf8c46747c81d8c9b0375_amadey_darkgate_elex_glassworm_luca-stealer_magniber_njrat_qakbot_smoke-loader

.exe 9.1MB

2026-11-01_ea996264cbcbf8c46747c81d8c9b0375_amadey_darkgate_elex_glassworm_luca-stealer_magniber_njrat_qakbot_smoke-loader

IMPHASH 72ca02f81609022a49b8091936b99889
SHA256 53ff9ebd40c1b1d1c23313576f7a27ff71c1101e1f7678c7ed48dd9e3c4d59cf
MD5 ea996264cbcbf8c46747c81d8c9b0375
SHA1 da198e48717292962d70b51e99e05ee32aa3953e
SHA512 809a57a12d37f6b6c57f93d889b26d23162b70e778cf6f4cc97dafa9c8d0376d770656673fdb4cc125bfe42cf2b3f1654770d32c2f76700505ce3296c92f5052
SSDEEP 196608:QqJVnaMXXCFsdHQgClwYAwqtGYAUt4BjvjujH2j:xyMSgzYAwqSBjuq
TLSH
T16DA6D0207912C072E99110F4997CFFEF516CA5340FA564D7E3C81E6EDA70AC22B36A97
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

79:a2:21:18:3c:19:24:13:61:08:02:5e:23:66:e8:6c:9c:2a:79:9a:73:21:e5:8c:f9:fb:4d:4f:a4:dc:ec:3f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

NO CERTIFICATE

Chains

Jan 1, 0001

Minor OS version

Major OS version

Entry point

3285545

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Osilix2-Buyuk-Deneme\istemci-final-2910\client\files\bin\osi2client.pdb

kernel32

InitializeSListHead InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList GetProcessTimes GetExitCodeProcess GetCurrentThread GetCurrentThreadId SetThreadPriority GlobalMemoryStatusEx GetTickCount64 IsWow64Process GetModuleHandleW GetProcAddress QueryUnbiasedInterruptTime MoveFileExW GetUserDefaultLocaleName K32GetProcessMemoryInfo ExitProcess LocalFree GetStdHandle CreateDirectoryA CreatePipe QueryPerformanceCounter QueryPerformanceFrequency CreateMutexA GetModuleHandleA SetFileAttributesA FindFirstFileA FindNextFileA QueryFullProcessImageNameA GetStartupInfoA Process32First Process32Next RtlCaptureStackBackTrace lstrlenA GetPrivateProfileStringA FindClose DeleteFileW CreateFileW CreateDirectoryW Process32NextW TryEnterCriticalSection Process32FirstW CreateToolhelp32Snapshot CompareStringOrdinal GetModuleFileNameW SetLastError GetTempPathW GetLongPathNameW GetFileAttributesW GetCurrentDirectoryW GetEnvironmentVariableW GetModuleFileNameA VirtualQuery GetTickCount GetLocalTime OpenProcess CreateThread WriteConsoleW SetEndOfFile OutputDebugStringW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage FindFirstFileExW SetFileAttributesW CreateProcessW GetFileAttributesExW SetStdHandle SetCurrentDirectoryW GetTimeZoneInformation FlushFileBuffers HeapQueryInformation HeapSize HeapReAlloc GetConsoleOutputCP ReadConsoleW TerminateProcess GetCurrentProcessId Sleep WaitForSingleObject GetLastError SetUnhandledExceptionFilter SetEnvironmentVariableA GetEnvironmentVariableA GetConsoleMode EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect IsThreadAFiber FlsFree FlsSetValue FlsGetValue FlsAlloc GetCommandLineW GetFullPathNameW InitializeCriticalSectionAndSpinCount SystemTimeToTzSpecificLocalTime GetFileType CreateEventW GetDriveTypeW FreeLibraryAndExitThread ExitThread SetConsoleCtrlHandler GetModuleHandleExW LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc RtlUnwind RaiseException WaitNamedPipeW PeekNamedPipe GetThreadTimes OutputDebugStringA DebugBreak FindFirstFileExA GetStartupInfoW IsDebuggerPresent UnhandledExceptionFilter Thread32Next Thread32First GetThreadContext ResumeThread SuspendThread OpenThread GetCPInfo CompareStringEx GetStringTypeW CreateSymbolicLinkW GetFileInformationByHandleEx CloseThreadpoolWait SetThreadpoolWait CreateThreadpoolWait CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks SetThreadpoolTimer CreateThreadpoolTimer FreeLibraryWhenCallbackReturns GetSystemTimeAsFileTime GetCurrentProcessorNumber FlushProcessWriteBuffers CreateSemaphoreExW CreateEventExW InitOnceExecuteOnce SetFileInformationByHandle LCMapStringEx DecodePointer EncodePointer GetLocaleInfoEx DeleteCriticalSection InitializeCriticalSectionEx SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive GetNativeSystemInfo GetExitCodeThread SwitchToThread WaitForSingleObjectEx SetFilePointer GetFileSize CreateFileMappingA UnmapViewOfFile MapViewOfFile GetLocaleInfoA CompareStringA lstrlenW GlobalLock GlobalUnlock FreeLibrary GetSystemDirectoryA FormatMessageA LocalAlloc LoadLibraryA GlobalAlloc GetTempFileNameA GetTempPathA RemoveDirectoryA DeleteFileA AllocConsole GetCommandLineA GetProcessAffinityMask GetSystemFirmwareTable GetCurrentProcess CreateProcessA GetCurrentDirectoryA GetLogicalDriveStringsA GetSystemInfo IsProcessorFeaturePresent GetVolumeInformationA GetDriveTypeA MultiByteToWideChar GetProcessHeap HeapFree HeapAlloc WideCharToMultiByte DeviceIoControl CloseHandle CreateFileA GetComputerNameA CreateMutexW LeaveCriticalSection EnterCriticalSection WriteFile SetFilePointerEx ReadFile ReleaseMutex GetFileInformationByHandle SetEvent GetFileTime GetFileSizeEx GetFileAttributesA GetDiskFreeSpaceExW FindNextFileW FileTimeToSystemTime FindFirstFileW

user32

LoadIconA ShowCursor FindWindowA DestroyCursor LoadImageA SetCursorPos ClientToScreen GetCapture SetCapture ReleaseCapture ChangeDisplaySettingsA LoadStringA GetMessageA TranslateMessage DispatchMessageA MessageBoxA ScreenToClient GetCursorPos GetKeyState IsWindow CreateWindowExA SetWindowPos GetDC ReleaseDC CharNextExA CharPrevExA RegisterClassExA UnregisterClassA DefWindowProcA RegisterClassA GetMenu InvalidateRect SetWindowTextA GetWindowRect AdjustWindowRectEx SetRect GetWindowLongA SetWindowLongA LoadCursorA PeekMessageA GetKeyboardLayoutNameA GetKeyboardLayout OpenClipboard CloseClipboard SetClipboardData GetClipboardData EmptyClipboard CharNextW PostThreadMessageA FlashWindowEx SendMessageA SystemParametersInfoA GetSystemMetrics GetGUIThreadInfo EnumDisplayDevicesW GetWindowThreadProcessId GetForegroundWindow MessageBoxW PostQuitMessage GetClientRect UpdateWindow SetFocus MoveWindow ShowWindow SetCursor DestroyWindow

advapi32

RegCloseKey RegCreateKeyExW CryptGenRandom CryptReleaseContext CryptAcquireContextA GetUserNameA RegOpenKeyExW RegQueryValueExW RegOpenKeyExA RegQueryValueExA ConvertStringSecurityDescriptorToSecurityDescriptorA RegSetValueExW

shell32

SHGetSpecialFolderPathA ShellExecuteA

ole32

CoCreateInstance CoInitializeEx CoUninitialize

winmm

timeGetDevCaps timeBeginPeriod timeEndPeriod timeGetTime

d3d9

Direct3DCreate9

d3dx9_43

D3DXVec3TransformCoord D3DXMatrixRotationZ D3DXMatrixScaling D3DXVec3Normalize D3DXMatrixMultiply D3DXMatrixTranslation D3DXMatrixRotationQuaternion D3DXQuaternionRotationAxis D3DXQuaternionMultiply D3DXMatrixRotationYawPitchRoll D3DXMatrixInverse D3DXMatrixRotationX D3DXMatrixTransformation D3DXVec3TransformNormal D3DXMatrixRotationAxis D3DXVec4Transform D3DXGetFVFVertexSize D3DXVec3Project D3DXVec3Unproject D3DXQuaternionRotationYawPitchRoll D3DXVec2Normalize D3DXMatrixDeterminant D3DXMatrixLookAtRH D3DXMatrixPerspectiveFovRH D3DXMatrixOrthoRH D3DXMatrixOrthoOffCenterRH D3DXCreateMatrixStack D3DXCreateCylinder D3DXCreateSphere D3DXMatrixRotationY D3DXLoadSurfaceFromSurface D3DXCreateTexture D3DXCreateTextureFromFileInMemoryEx D3DXSaveSurfaceToFileA D3DXPlaneNormalize D3DXMatrixTranspose D3DXAssembleShader

python27

PyCode_Type PyUnicodeUCS2_DecodeUTF8 PyInt_FromLong Py_OptimizeFlag PyImport_GetMagicNumber Py_FlushLine PyEval_SetTrace PyRun_StringFlags Py_Finalize Py_Initialize Py_SetProgramName PyModule_GetDict _Py_NoneStruct PyNumber_Check PyObject_CallObject _PyLong_FromByteArray PyErr_Print PyErr_BadArgument PyFloat_AsDouble PyLong_AsUnsignedLongLong PyLong_AsLongLong PyCallable_Check PyObject_GetAttr PyString_InternFromString PyTuple_SetItem PyTuple_New PyEval_EvalCode PyErr_Restore PyErr_Fetch PyTuple_GetItem PyExc_RuntimeError PyInstance_Type PyObject_CallMethod PyImport_ImportModule PyRun_SimpleStringFlags PyErr_Clear PyErr_SetString PyString_AsString PyObject_GetAttrString PyObject_CallFunction PyDict_SetItemString PyDict_GetItemString PyString_FromString PyDict_Size PyDict_Next PyLong_FromLongLong PyInt_AsLong PyTuple_Size Py_IncRef PyList_Append PyCode_Addr2Line PyObject_AsCharBuffer PyList_New PyArg_ParseTuple Py_InitModule4 PyModule_AddIntConstant Py_BuildValue PyModule_AddStringConstant PyFloat_FromDouble PyComplex_FromCComplex PyString_FromStringAndSize PyList_SetItem PyDict_New PyDict_SetItem PyErr_Occurred PyErr_NoMemory PyEval_GetRestricted PyCode_New PyMarshal_ReadObjectFromString _PyLong_New _Py_EllipsisObject PyExc_StopIteration PyExc_EOFError PyExc_ValueError PyImport_AddModule

libcef

cef_post_delayed_task cef_post_task cef_currently_on cef_string_list_free cef_string_list_alloc cef_string_userfree_utf16_free cef_string_utf16_set cef_command_line_get_global cef_browser_host_create_browser cef_browser_host_create_browser_sync cef_binary_value_create cef_value_create cef_string_list_size cef_string_list_value cef_string_list_append cef_shutdown cef_quit_message_loop cef_set_osmodal_loop cef_string_utf16_to_utf8 cef_enable_highdpi_support cef_crash_reporting_enabled cef_set_crash_key_value cef_create_directory cef_get_temp_directory cef_create_new_temp_directory cef_create_temp_directory_in_directory cef_directory_exists cef_delete_file cef_zip_directory cef_load_crlsets_file cef_add_cross_origin_whitelist_entry cef_remove_cross_origin_whitelist_entry cef_clear_cross_origin_whitelist cef_parse_url cef_create_url cef_format_url_for_security_display cef_get_mime_type cef_get_extensions_for_mime_type cef_base64encode cef_base64decode cef_uriencode cef_uridecode cef_parse_json cef_parse_jsonand_return_error cef_write_json cef_get_path cef_launch_process cef_is_cert_status_error cef_begin_tracing cef_end_tracing cef_command_line_create cef_register_scheme_handler_factory cef_string_map_alloc cef_v8context_in_context cef_v8context_get_entered_context cef_string_map_size cef_string_map_key cef_string_map_value cef_string_map_append cef_string_multimap_size cef_string_multimap_key cef_string_multimap_value cef_string_multimap_append cef_task_runner_get_for_current_thread cef_task_runner_get_for_thread cef_v8value_create_undefined cef_v8value_create_null cef_v8value_create_bool cef_v8value_create_int cef_v8value_create_uint cef_v8value_create_double cef_v8value_create_date cef_v8value_create_string cef_v8value_create_object cef_v8value_create_array cef_v8value_create_array_buffer cef_v8value_create_function cef_dictionary_value_create cef_drag_data_create cef_request_context_get_global_context cef_request_context_create_context cef_create_context_shared cef_log cef_string_wide_to_utf8 cef_string_multimap_alloc cef_string_multimap_free cef_request_create cef_process_message_create cef_urlrequest_create cef_list_value_create cef_image_create cef_stream_writer_create_for_file cef_stream_writer_create_for_handler cef_cookie_manager_get_global_manager cef_media_router_get_global cef_v8stack_trace_get_current cef_response_create cef_post_data_create cef_menu_model_create cef_print_settings_create cef_post_data_element_create cef_stream_reader_create_for_file cef_stream_reader_create_for_data cef_register_extension cef_clear_scheme_handler_factories cef_execute_process cef_do_message_loop_work cef_initialize cef_stream_reader_create_for_handler cef_string_map_free cef_run_message_loop cef_v8context_get_current_context cef_api_hash cef_execute_java_script_with_user_gesture_for_tests cef_register_widevine_cdm cef_is_web_plugin_unstable cef_register_web_plugin_crash cef_unregister_internal_web_plugin cef_refresh_web_plugins cef_visit_web_plugin_info cef_string_utf16_clear cef_string_utf8_to_utf16 cef_string_utf8_clear cef_string_utf16_cmp cef_now_from_system_trace_time

iphlpapi

GetAdaptersInfo GetPerAdapterInfo

imm32

ImmAssociateContext ImmReleaseContext ImmGetContext ImmIsIME ImmGetIMEFileNameA ImmGetCandidateListW ImmGetConversionStatus ImmSetConversionStatus ImmGetOpenStatus ImmNotifyIME ImmGetCompositionStringW ImmSetCompositionStringW

winhttp

WinHttpReadData WinHttpSetOption WinHttpSetTimeouts WinHttpConnect WinHttpSendRequest WinHttpReceiveResponse WinHttpQueryHeaders WinHttpCloseHandle WinHttpOpen WinHttpOpenRequest WinHttpCrackUrl

bcrypt

BCryptOpenAlgorithmProvider BCryptGetProperty BCryptCloseAlgorithmProvider BCryptCreateHash BCryptHashData BCryptFinishHash BCryptDestroyHash BCryptGenRandom

crypt32

CryptProtectData CryptUnprotectData

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

imagehlp

StackWalk64 SymGetModuleBase64 SymInitialize SymFunctionTableAccess64

devil

ilTexImage ilInit ilSetPixels ilCopyPixels ilConvertImage ilLoad ilGetInteger ilGenImages ilOriginFunc ilDeleteImages ilSave ilBindImage ilEnable

mss32

_AIL_set_3D_sample_loop_count@8 _AIL_mem_free_lock@4 _AIL_file_read@8 _AIL_set_file_callbacks@16 _AIL_WAV_info@8 _AIL_decompress_ASI@24 _AIL_decompress_ADPCM@12 _AIL_file_type@8 _AIL_open_digital_driver@16 _AIL_open_stream@12 _AIL_close_digital_driver@4 _AIL_enumerate_3D_providers@12 _AIL_open_3D_provider@4 _AIL_close_3D_provider@4 _AIL_open_3D_listener@4 _AIL_close_3D_listener@4 _AIL_set_3D_position@16 _AIL_set_3D_velocity@20 _AIL_set_3D_orientation@28 _AIL_startup@0 _AIL_shutdown@0 _AIL_set_redist_directory@4 _AIL_close_stream@4 _AIL_start_stream@4 _AIL_pause_stream@8 _AIL_set_stream_volume_levels@12 _AIL_stream_volume_levels@12 _AIL_set_stream_loop_count@8 _AIL_stream_status@4 _AIL_last_error@0 _AIL_allocate_sample_handle@4 _AIL_release_sample_handle@4 _AIL_init_sample@4 _AIL_set_sample_file@12 _AIL_start_sample@4 _AIL_stop_sample@4 _AIL_resume_sample@4 _AIL_end_sample@4 _AIL_set_sample_volume_pan@12 _AIL_set_sample_loop_count@8 _AIL_sample_status@4 _AIL_sample_volume_pan@12 _AIL_allocate_3D_sample_handle@4 _AIL_start_3D_sample@4 _AIL_stop_3D_sample@4 _AIL_resume_3D_sample@4 _AIL_end_3D_sample@4 _AIL_set_3D_sample_file@8 _AIL_set_3D_sample_volume@8 _AIL_release_3D_sample_handle@4 _AIL_3D_sample_status@4 _AIL_3D_sample_volume@4 _AIL_update_3D_position@8 _AIL_auto_update_3D_position@8

speedtreert

?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z ?GetCurrentError@CSpeedTreeRT@@SAPBDXZ ?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z ?GetLeafLodSizeAdjustments@CSpeedTreeRT@@QAEPBMXZ ?GetLeafBillboardTable@CSpeedTreeRT@@QBEPBMAAI@Z ?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ ??0SGeometry@CSpeedTreeRT@@QAE@XZ ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z ?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z ?SetTime@CSpeedTreeRT@@SAXM@Z ??3CSpeedTreeRT@@SAXPAX@Z ??2CSpeedTreeRT@@SAPAXI@Z ?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z ?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z ?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?SetLodLevel@CSpeedTreeRT@@QAEXM@Z ?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ ?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetStaticLightingStyle@CSpeedTreeRT@@QAEXW4EStaticLightingStyle@1@@Z ?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ ?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ??1CSpeedTreeRT@@QAE@XZ ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?DeleteTransientData@CSpeedTreeRT@@QAEXXZ ?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z ??0CSpeedTreeRT@@QAE@XZ ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z

dinput8

DirectInput8Create

ws2_32

WSAGetLastError sendto gethostname gethostbyname ntohs ntohl inet_addr htons htonl WSACleanup WSAStartup socket send select recv __WSAFDIsSet closesocket connect ioctlsocket

gdi32

GetCharABCWidthsFloatW GetTextExtentPoint32W SelectObject SetBkColor SetTextColor TextOutW CreateCompatibleDC DeleteDC SetBkMode SetDIBitsToDevice CreateDIBSection TextOutA GetStockObject EnumFontFamiliesExA GetTextExtentPoint32A DeleteObject CreateFontIndirectA

oleaut32

VariantClear SysFreeString

discord_game_sdk

DiscordCreate

Name

.text

Size

4.9MB

Virtual Size

4.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

981KB

Virtual Size

981KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

169KB

Virtual Size

694KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdataa0

Size

2.7MB

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

281KB

Virtual Size

281KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

43KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=50, id=259, version=33145,

count=214, id=261, version=33145,

count=4, id=170, productName=VS2010 build 30319, version=30319,

count=11, id=261, version=32824,

count=5, id=261, productName=VS2019 v16.11.1 build 30133, version=30133,

count=2, id=257, version=27045,

count=56, id=261, version=24247,

count=1, id=171, productName=VS2010 build 30319, version=30319,

count=1, id=29, version=9178,

count=1, id=262, version=33145,

count=58, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=48, version=9044,

count=7, id=206, productName=VS2012 UPD3 build 60610, version=60610,

count=125, id=207, productName=VS2012 UPD3 build 60610, version=60610,

count=2, id=257, productName=VS2015 [14.0] build 23026, version=23026,

count=117, id=261, productName=VS2019 v16.4.4 build 28316, version=28316,

count=2, productName=Unmarked objects (old),

count=1, id=253, version=35207,

count=32, id=259, version=35207,

count=19, id=260, version=35207,

count=7, id=261, version=35222,

count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=156, version=21202,

count=2, id=123, productName=VS2005 build 50727, version=50727,

count=1, id=260, version=35228,

count=45, id=260, version=33145,

count=35, id=257, version=33145,

count=703, id=1, productName=Unmarked objects,

count=104, id=261, version=35207,

count=318, id=261, version=35228,

count=1, id=255, version=35228,

count=1, id=151,

count=1, id=258, version=35228,