| Architecture |
IMAGE_FILE_MACHINE_AMD64
|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| Compilation Date |
2026-Feb-18 17:50:37
|
| TLS Callbacks |
2 callback(s) detected.
|
| Debug artifacts |
Embedded COFF debugging symbols
|
| Suspicious |
Strings found in the binary may indicate undesirable behavior: |
Contains references to system / monitoring tools:
Miscellaneous malware strings:
|
| Suspicious |
The PE is possibly packed. |
Unusual section name found: .xdata
Unusual section name found: /4
Unusual section name found: /19
Unusual section name found: /31
Unusual section name found: /45
Unusual section name found: /57
Unusual section name found: /70
Unusual section name found: /81
Unusual section name found: /97
Unusual section name found: /113
|
| Malicious |
The PE contains functions mostly used by malware. |
Functions which can be used for anti-debugging purposes:
Possibly launches other programs:
Memory manipulation functions often used by packers:
- VirtualAlloc
- VirtualProtect
Functions related to the privilege level:
- AdjustTokenPrivileges
- OpenProcessToken
Manipulates other processes:
- OpenProcess
- ReadProcessMemory
|
| Suspicious |
The file contains overlay data. |
97073 bytes of data starting at offset 0xffe00.
|
| Suspicious |
No VirusTotal score. |
This file has never been scanned on VirusTotal.
|
| MD5 |
3fff4f3634f037ae8ffc7885a94bd934
|
| SHA1 |
218630b1ce16e5c133892f240ed00e611d50aa28
|
| SHA256 |
4e15d8c3d614a9cd370e86680c2184b24d1a7b932abb280434802ae6b236140a
|
| SHA3 |
70e3ca766e5b5c0ee2939eb62c9c3fc4f183ebf2a3caf46388805093d317df1d
|
| SSDeep |
24576:jxku1gbOukCI3fLBviELhpMN4Qo9XMHrGg6jPzK:jx91gbfgPL5VtpMN4BE6jPzK
|
| Imports Hash |
2e3ebb253333e0a22559704d2f52b64c
|
| e_magic |
MZ
|
| e_cblp |
0x90
|
| e_cp |
0x3
|
| e_crlc |
0
|
| e_cparhdr |
0x4
|
| e_minalloc |
0
|
| e_maxalloc |
0xffff
|
| e_ss |
0
|
| e_sp |
0xb8
|
| e_csum |
0
|
| e_ip |
0
|
| e_cs |
0
|
| e_ovno |
0
|
| e_oemid |
0
|
| e_oeminfo |
0
|
| e_lfanew |
0x80
|
| Signature |
PE
|
| Machine |
IMAGE_FILE_MACHINE_AMD64
|
| NumberofSections |
19
|
| TimeDateStamp |
2026-Feb-18 17:50:37
|
| PointerToSymbolTable |
0xffe00
|
| NumberOfSymbols |
3881
|
| SizeOfOptionalHeader |
0xf0
|
| Characteristics |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_LINE_NUMS_STRIPPED
|
| Magic |
PE32+
|
| LinkerVersion |
2.0
|
| SizeOfCode |
0x1cc00
|
| SizeOfInitializedData |
0xcda00
|
| SizeOfUninitializedData |
0xe00
|
| AddressOfEntryPoint |
0x00000000000014D0 (Section: .text)
|
| BaseOfCode |
0x1000
|
| ImageBase |
0x140000000
|
| SectionAlignment |
0x1000
|
| FileAlignment |
0x200
|
| OperatingSystemVersion |
4.0
|
| ImageVersion |
0.0
|
| SubsystemVersion |
5.2
|
| Win32VersionValue |
0
|
| SizeOfImage |
0x10b000
|
| SizeOfHeaders |
0x600
|
| Checksum |
0x11ca42
|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_CUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
|
| SizeofStackReserve |
0x200000
|
| SizeofStackCommit |
0x1000
|
| SizeofHeapReserve |
0x100000
|
| SizeofHeapCommit |
0x1000
|
| LoaderFlags |
0
|
| NumberOfRvaAndSizes |
16
|
| MD5 |
20eae758bb8f457e948a8ed562a90520
|
| SHA1 |
9ad80d65c71a32b40138b782931243ad9c940d41
|
| SHA256 |
a69a769352544c9533f8078714443dc64d629d264a868990f65bd0aa89c8e55e
|
| SHA3 |
9441e92c2fa7c461a7af1d1b55417292e6fab90b638830f887ba81c09aaca052
|
| VirtualSize |
0x1ca30
|
| VirtualAddress |
0x1000
|
| SizeOfRawData |
0x1cc00
|
| PointerToRawData |
0x600
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
|
| Entropy |
6.14332
|
| MD5 |
df2b6ad8a7d7c6fef7b5b9895e373b61
|
| SHA1 |
b7dbad63eb482b442652df693ee83c88914c88c6
|
| SHA256 |
3b8eb37dc74d71d50969ad6abb2b7dac1faf0a63cc3e096d2c0f78cfecd63ab8
|
| SHA3 |
c03be70a720b4396da4575bc12e5cf8226c73871350c3532da5d0985fbea1c9a
|
| VirtualSize |
0x610e0
|
| VirtualAddress |
0x1e000
|
| SizeOfRawData |
0x61200
|
| PointerToRawData |
0x1d200
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
7.99889
|
| MD5 |
ec2fbff7059b3008bc064faee88cf48c
|
| SHA1 |
5624bcd8a95d799678feb859991daba448ee24f8
|
| SHA256 |
686f942c8baed4b613fdbca4c65a9c02fa481a5f3e46e16c51323f7086da68c3
|
| SHA3 |
99e158238e25ce5bb0e15192a07725f2a4b2e4115ea7753875b9c0d285c2a5d8
|
| VirtualSize |
0x4b820
|
| VirtualAddress |
0x80000
|
| SizeOfRawData |
0x4ba00
|
| PointerToRawData |
0x7e400
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
7.891
|
| MD5 |
7c5bdd6e1fc7fe560fc3e4a759b46394
|
| SHA1 |
a2a7a89faacde6212cc8aafe4f5cf74a9e287ce5
|
| SHA256 |
2a6f50c3a0e1f4efe7803aa7e9f1c994266c7d0c57f9ec9983ce4c032ba747cc
|
| SHA3 |
5b87d38bb5ffc505668e7dd2f2a4fbeb9d2aa02c62ebfdbd35ad0ea0b2042821
|
| VirtualSize |
0x114c
|
| VirtualAddress |
0xcc000
|
| SizeOfRawData |
0x1200
|
| PointerToRawData |
0xc9e00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
5.14556
|
| MD5 |
712ad1cf46296adf2629edc1c7e1a5dd
|
| SHA1 |
b1f1c8c2b3869d779bae80c30f768f0eecf239b7
|
| SHA256 |
dfac90f27c7c7fa7c8bd41272e0b609bc3d4d2a44f71938fc9e1970ac59b4391
|
| SHA3 |
e385d3ff09f4c53ebe318b0cb72c25a2834aeb49125d7478ff523e0cf37d878f
|
| VirtualSize |
0x1060
|
| VirtualAddress |
0xce000
|
| SizeOfRawData |
0x1200
|
| PointerToRawData |
0xcb000
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
|
| Entropy |
4.12919
|
| MD5 |
d41d8cd98f00b204e9800998ecf8427e
|
| SHA1 |
da39a3ee5e6b4b0d3255bfef95601890afd80709
|
| SHA256 |
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
|
| SHA3 |
a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a
|
| VirtualSize |
0xc80
|
| VirtualAddress |
0xd0000
|
| SizeOfRawData |
0
|
| PointerToRawData |
0
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| MD5 |
6959c9f2fff3a766afcbeb80bac5acbb
|
| SHA1 |
62e1d06bcba28bff9dcc9ad9e2bc9ca0ddd023ef
|
| SHA256 |
89c5669a21bfa453f78f20aedf273df08e17d7a92aad7c588f86a67eb24ce232
|
| SHA3 |
906b5914e27410239a4927eaf3e67d968028c8755da3bdc9855f005ab17a751e
|
| VirtualSize |
0x1454
|
| VirtualAddress |
0xd1000
|
| SizeOfRawData |
0x1600
|
| PointerToRawData |
0xcc200
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
4.3947
|
| MD5 |
933d7b803344b358bfe746f95db86025
|
| SHA1 |
79266554c41fbbdb40c86331b86bd6ca9c6dbd04
|
| SHA256 |
d2df8be9b687dee8d53adcdf914877d98e1a767f07120f1f777c33793772cc0f
|
| SHA3 |
531374dcce65e4dcecf033523e2bc41edaeff264d61b8a1bcd65a73fc91288a2
|
| VirtualSize |
0x60
|
| VirtualAddress |
0xd3000
|
| SizeOfRawData |
0x200
|
| PointerToRawData |
0xcd800
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
0.308588
|
| MD5 |
bf619eac0cdf3f68d496ea9344137e8b
|
| SHA1 |
5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5
|
| SHA256 |
076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560
|
| SHA3 |
622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59
|
| VirtualSize |
0x10
|
| VirtualAddress |
0xd4000
|
| SizeOfRawData |
0x200
|
| PointerToRawData |
0xcda00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
|
| Entropy |
0
|
| MD5 |
4ef56c67fc8e3a27d7f27b96939e6bd3
|
| SHA1 |
99219dbae49c1ebe93f5206578372cc3f125c4ad
|
| SHA256 |
220f0c854baa4976dc976ff74ffa79d76f72c425457903cb28b7149f6e0011e9
|
| SHA3 |
ecf248141a7b894609e0ef400be2dbe85276e8927a6c13ebab92fecbe5416e9d
|
| VirtualSize |
0x314
|
| VirtualAddress |
0xd5000
|
| SizeOfRawData |
0x400
|
| PointerToRawData |
0xcdc00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
4.68809
|
| MD5 |
776a1cde1382634b4e46959f865c3401
|
| SHA1 |
d54361a4bdd079ac1ea290f1306c37a9285645a7
|
| SHA256 |
f9553128d2b373794be91c511439bf712520324e63e2ef1abc52c05ddcf99088
|
| SHA3 |
65d8bfececa365299012ed9d1601e487ef67b6a18c09649afb2428cdff16e496
|
| VirtualSize |
0x740
|
| VirtualAddress |
0xd6000
|
| SizeOfRawData |
0x800
|
| PointerToRawData |
0xce000
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
1.76537
|
| MD5 |
bc7cde6c1ca03a5b03315df72be36815
|
| SHA1 |
b4ef231a7156d5a140076b7213f672d3543094d6
|
| SHA256 |
3de8f01cee984dfc0f7817acc11239fd3c7d991df40d6ae79e72f1c9de845f5e
|
| SHA3 |
c06306326cf4033d8e5d97123c3ae9975cfe4d7cd729863caa6446307f63a294
|
| VirtualSize |
0x157e3
|
| VirtualAddress |
0xd7000
|
| SizeOfRawData |
0x15800
|
| PointerToRawData |
0xce800
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
5.80349
|
| MD5 |
56f609cfc86610a83d5953b1dfc81e54
|
| SHA1 |
749cca7e2990949e6002c0fa11d0ddeaa4e1c500
|
| SHA256 |
3ea3dd5ad15675081dd9a3a28edbfc83a7e275c3ec01048affa69acac5bfdcda
|
| SHA3 |
dfd3b4cd85ffd98bad65fa030fe3a66dbb5733da8c975042980173831c2f4398
|
| VirtualSize |
0x3a94
|
| VirtualAddress |
0xed000
|
| SizeOfRawData |
0x3c00
|
| PointerToRawData |
0xe4000
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
4.80252
|
| MD5 |
98bd7e47f6c23571c99f5d557116e263
|
| SHA1 |
93c1c34b231e6cd08d7b060d3850f011e4d114e6
|
| SHA256 |
90743fcb561fa6f4d9b85b60cad045780be8bac11f91a369cbeeae09122f8009
|
| SHA3 |
9bc707bf46eb32e54c3c46cee4e959ff1eef2ff1e490449fc0b588d6856dc5d1
|
| VirtualSize |
0x8d0c
|
| VirtualAddress |
0xf1000
|
| SizeOfRawData |
0x8e00
|
| PointerToRawData |
0xe7c00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
5.11662
|
| MD5 |
c7392457b350ce46e0dd69577d259680
|
| SHA1 |
0514eac80b522a6a788d91631cd6626ec50047a3
|
| SHA256 |
ab7390565fea73467f836da2e85bcb236c5c4d3912361be46e7f9baa39032de4
|
| SHA3 |
5978e7c1ae00de318fa785f8db8f8145d948d0b660a57dad019b9f4d0e9cb94f
|
| VirtualSize |
0x2a98
|
| VirtualAddress |
0xfa000
|
| SizeOfRawData |
0x2c00
|
| PointerToRawData |
0xf0a00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
3.59332
|
| MD5 |
72b4fcbae4e99ec13a0fc074457d0e40
|
| SHA1 |
373e16bdeefd84c12721c6d40222263a9136283e
|
| SHA256 |
8dd11469fb3fcc7ccf2e912d9474d8983d03d4e0a41c3c92b59913b519754dcc
|
| SHA3 |
608e5d52942ef98888e26c360b90a34252e57b41929cee601d7f157b34a5df43
|
| VirtualSize |
0x425
|
| VirtualAddress |
0xfd000
|
| SizeOfRawData |
0x600
|
| PointerToRawData |
0xf3600
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
3.98054
|
| MD5 |
2f0599c5c8e97310e356c6cbddff4cce
|
| SHA1 |
40df4f81239dcca793e58cbd4ce86d8d6337e4bd
|
| SHA256 |
d09793408040fe178078d0dab078580e88edb0094a550f82db6fd7b5cfbab92d
|
| SHA3 |
6190ffa2c30d45028cdbb92f5c454ca874cd4bddecb767669399943b602b7ee1
|
| VirtualSize |
0x1a0a
|
| VirtualAddress |
0xfe000
|
| SizeOfRawData |
0x1c00
|
| PointerToRawData |
0xf3c00
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
4.60549
|
| MD5 |
1ec7766ca4a31023bacf2332b6044101
|
| SHA1 |
00d9b58b5d92e6a7db94824d50e1ae36031acecb
|
| SHA256 |
98d37b2bbf539473895057ac5519872c597dfd5b9b357fc2d96ed18dde2793e0
|
| SHA3 |
109cd551a7220246a22ffa191cfb75f37674be3390f69e7269e31498544bc626
|
| VirtualSize |
0x9c76
|
| VirtualAddress |
0x100000
|
| SizeOfRawData |
0x9e00
|
| PointerToRawData |
0xf5800
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
5.88611
|
| MD5 |
6f82ee1fdbceb41980fefd9942bb61b9
|
| SHA1 |
12585e98eb3d2b07b690f877ff97f03128c20860
|
| SHA256 |
541d4938bc3fb8209a630f41371114378e79987cf8e5666ebc0eda3c9172604d
|
| SHA3 |
4307f9a7eaae93a487c345cde31118893b1284bf8ba9e49b4b298498ef224145
|
| VirtualSize |
0x732
|
| VirtualAddress |
0x10a000
|
| SizeOfRawData |
0x800
|
| PointerToRawData |
0xff600
|
| PointerToRelocations |
0
|
| PointerToLineNumbers |
0
|
| NumberOfLineNumbers |
0
|
| NumberOfRelocations |
0
|
| Characteristics |
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
|
| Entropy |
5.69644
|
| ADVAPI32.dll |
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
|
| KERNEL32.dll |
CloseHandle
ConvertThreadToFiber
CreateEventA
CreateFiber
CreateFileTransactedW
CreateFileW
CreateProcessA
CreateSemaphoreW
CreateThread
CreateThreadpoolWait
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileA
DeleteFileW
EnterCriticalSection
ExitProcess
ExitThread
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetSystemDirectoryW
GetSystemTime
GetThreadContext
HeapAlloc
HeapFree
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
OpenProcess
OpenThread
RaiseException
ReadFile
ReadProcessMemory
ReleaseSemaphore
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetFileInformationByHandle
SetLastError
SetThreadContext
SetThreadpoolWait
SetUnhandledExceptionFilter
Sleep
SuspendThread
SwitchToFiber
TerminateThread
Thread32First
Thread32Next
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualProtect
VirtualQuery
VirtualQueryEx
WaitForSingleObject
WaitForSingleObjectEx
WaitForThreadpoolWaitCallbacks
WideCharToMultiByte
|
| msvcrt.dll |
__C_specific_handler
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_ctime64
_errno
_fmode
_initterm
_lock
_onexit
_strcmpi
fwprintf
_time64
_unlock
abort
atoi
calloc
exit
fclose
fopen
fprintf
fputc
fputs
fputwc
free
fwrite
getchar
localeconv
malloc
memcmp
memcpy
memset
rand
realloc
signal
srand
strcmp
strerror
strlen
strncmp
strstr
swprintf_s
vfprintf
wcscpy_s
wcslen
wcsncpy_s
wcsrchr
|
| ole32.dll |
CoTaskMemAlloc
CoTaskMemFree
|
| StartAddressOfRawData |
0x1400d4000
|
| EndAddressOfRawData |
0x1400d4008
|
| AddressOfIndex |
0x1400d015c
|
| AddressOfCallbacks |
0x1400d3038
|
| SizeOfZeroFill |
0
|
| Characteristics |
IMAGE_SCN_TYPE_REG
|
| Callbacks |
0x0000000140011D60
0x0000000140011D30
|
[*] Warning: Tried to read outside the COFF string table to get the name of section /4!
[*] Warning: Tried to read outside the COFF string table to get the name of section /19!
[*] Warning: Tried to read outside the COFF string table to get the name of section /31!
[*] Warning: Tried to read outside the COFF string table to get the name of section /45!
[*] Warning: Tried to read outside the COFF string table to get the name of section /57!
[*] Warning: Tried to read outside the COFF string table to get the name of section /70!
[*] Warning: Tried to read outside the COFF string table to get the name of section /81!
[*] Warning: Tried to read outside the COFF string table to get the name of section /97!
[*] Warning: Tried to read outside the COFF string table to get the name of section /113!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF String Table's reported size is bigger than the remaining bytes!
[*] Warning: Section .bss has a size of 0!