Static task
static1
Behavioral task
behavioral1
Sample
ade9c6b1ad810780c61815f6538ff8632ef316d2eca3d738304dbf726bc76683.exe
Resource
win7-20220901-en
windows7-x64
Behavioral task
behavioral2
Sample
ade9c6b1ad810780c61815f6538ff8632ef316d2eca3d738304dbf726bc76683.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
General
-
Target
ade9c6b1ad810780c61815f6538ff8632ef316d2eca3d738304dbf726bc76683
-
Size
923KB
-
MD5
6e5080905cca3eb0dd6d325b593d2ca0
-
SHA1
7a85d4d4576269b80b2fa285522090c7c292cec9
-
SHA256
ade9c6b1ad810780c61815f6538ff8632ef316d2eca3d738304dbf726bc76683
-
SHA512
88a3afda576bd3cbc2932d3d7689f74275271a489e0d3f8e7590d16017ebbafc92b68a5339b3d4f1ecf37bb451d69a4d04b92baac6d89aa4e97df47927d5fe7c
-
SSDEEP
24576:8l9rH7AF7cX5oICBTPRMqiDam/A0/RWbUd:8l9rH7AF4kPpIrA0/RWY
Malware Config
Signatures
Files
-
ade9c6b1ad810780c61815f6538ff8632ef316d2eca3d738304dbf726bc76683.exe windows x86
4fe1ef5627d2396fc3a5962133a28620
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
AllocateAndInitializeSid
DuplicateTokenEx
FreeSid
GetSecurityInfo
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
OpenProcessToken
SetEntriesInAclW
SetSecurityInfo
kernel32
CloseHandle
ConvertDefaultLocale
CreateFileW
CreateProcessW
CreateSemaphoreA
CreateToolhelp32Snapshot
ExitProcess
FreeEnvironmentStringsW
GetCommandLineA
GetCommandLineW
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetLastError
GetLocaleInfoW
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetUserDefaultUILanguage
HeapAlloc
HeapFree
InterlockedDecrement
InterlockedIncrement
LocalFree
OpenProcess
Process32FirstW
Process32NextW
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
mingwm10
__mingwthr_key_dtor
msvcrt
_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
exit
fclose
fopen
fputc
fputs
fread
free
fseek
ftell
fwrite
malloc
memchr
memmove
pow
rand
realloc
signal
sin
sprintf
srand
strcmp
strcpy
strerror
time
wcslen
shell32
SHChangeNotify
SHGetFolderPathW
ShellExecuteW
user32
FindWindowA
GetWindowThreadProcessId
libgcc_s_dw2-1
_Unwind_DeleteException
_Unwind_GetDataRelBase
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_RaiseException
_Unwind_Resume
_Unwind_Resume_or_Rethrow
_Unwind_SetGR
_Unwind_SetIP
__deregister_frame_info
__divdi3
__emutls_get_address
__register_frame_info
qtcore4
_Z17qt_message_output9QtMsgTypePKc
_Z21qRegisterResourceDataiPKhS0_S0_
_Z23qUnregisterResourceDataiPKhS0_S0_
_Z4endlR11QTextStream
_Z5qFreePv
_Z7qMemSetPvij
_Z8qWarningPKcz
_Z8qWinMainP11HINSTANCE__S0_PciRiR7QVectorIS1_E
_Z9qBadAllocv
_ZN10QByteArray11shared_nullE
_ZN10QByteArray6resizeEi
_ZN10QByteArray7reallocEi
_ZN10QByteArrayC1EPKc
_ZN10QByteArrayC1Eic
_ZN10QByteArrayaSERKS_
_ZN10QTextCodec12codecForNameERK10QByteArray
_ZN10QTextCodec14codecForLocaleEv
_ZN11QMetaObject18connectSlotsByNameEP7QObject
_ZN11QMetaObject8activateEP7QObjectPKS_iPPv
_ZN11QTextStream8setCodecEPKc
_ZN11QTextStreamC1EP7QString6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN11QTextStreamC1EP9QIODevice
_ZN11QTextStreamD1Ev
_ZN11QTextStreamlsEPKc
_ZN11QTextStreamlsERK10QByteArray
_ZN11QTextStreamlsERK7QString
_ZN11QTextStreamlsEc
_ZN11QTextStreamlsEi
_ZN11QVectorData10reallocateEPS_iii
_ZN11QVectorData4freeEPS_i
_ZN11QVectorData8allocateEii
_ZN16QCoreApplication18applicationDirPathEv
_ZN16QCoreApplication9argumentsEv
_ZN16QCoreApplication9translateEPKcS1_S1_NS_8EncodingE
_ZN18QCryptographicHash4hashERK10QByteArrayNS_9AlgorithmE
_ZN4QDir10setCurrentERK7QString
_ZN4QDirC1ERK7QString
_ZN4QDirD1Ev
_ZN4QUrlC1ERK7QString
_ZN4QUrlC1Ev
_ZN4QUrlD1Ev
_ZN5QDateC1Eiii
_ZN5QFile10encodeNameERK7QString
_ZN5QFile11setFileNameERK7QString
_ZN5QFile4copyERK7QStringS2_
_ZN5QFile4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN5QFile5closeEv
_ZN5QFile5flushEv
_ZN5QFile6existsERK7QString
_ZN5QFile6removeERK7QString
_ZN5QFile6removeEv
_ZN5QFileC1ERK7QString
_ZN5QFileC1Ev
_ZN5QFileD1Ev
_ZN5QTimeC1Eiiii
_ZN6QTimer11setIntervalEi
_ZN6QTimer4stopEv
_ZN6QTimer5startEi
_ZN6QTimer5startEv
_ZN6QTimerC1EP7QObject
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QObject11qt_metacastEPKc
_ZN7QObject13connectNotifyEPKc
_ZN7QObject13setObjectNameERK7QString
_ZN7QObject16disconnectNotifyEPKc
_ZN7QObject16staticMetaObjectE
_ZN7QObject5eventEP6QEvent
_ZN7QObject7connectEPKS_PKcS1_S3_N2Qt14ConnectionTypeE
_ZN7QObjectC2EPS_
_ZN7QObjectD2Ev
_ZN7QString11shared_nullE
_ZN7QString14fromWCharArrayEPKwi
_ZN7QString16codecForCStringsE
_ZN7QString16fromAscii_helperEPKci
_ZN7QString4freeEPNS_4DataE
_ZN7QString6appendERKS_
_ZN7QString6numberEii
_ZN7QString6numberExi
_ZN7QString7replaceERKS_S1_N2Qt15CaseSensitivityE
_ZN7QString8fromUtf8EPKci
_ZN7QString9fromAsciiEPKci
_ZN7QString9fromUtf16EPKti
_ZN7QStringaSERKS_
_ZN8QMapData10createDataEi
_ZN8QMapData11node_createEPPNS_4NodeEii
_ZN8QMapData11node_deleteEPPNS_4NodeEiS1_
_ZN8QMapData11shared_nullE
_ZN8QMapData16continueFreeDataEi
_ZN8QProcess13startDetachedERK7QString
_ZN8QProcess5startERK7QStringRK11QStringList6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN8QProcessC1EP7QObject
_ZN8QVariantC1EPKc
_ZN8QVariantC1ERK7QString
_ZN8QVariantC1ERKS_
_ZN8QVariantC1Ei
_ZN8QVariantD1Ev
_ZN9QDateTime15currentDateTimeEv
_ZN9QDateTimeC1ERK5QDateRK5QTimeN2Qt8TimeSpecE
_ZN9QDateTimeC1Ev
_ZN9QDateTimeD1Ev
_ZN9QDateTimeaSERKS_
_ZN9QFileInfoC1ERK7QString
_ZN9QFileInfoC1ERKS_
_ZN9QFileInfoD1Ev
_ZN9QIODevice11qt_metacallEN11QMetaObject4CallEiPPv
_ZN9QIODevice11qt_metacastEPKc
_ZN9QIODevice11setOpenModeE6QFlagsINS_12OpenModeFlagEE
_ZN9QIODevice12readLineDataEPcx
_ZN9QIODevice14setErrorStringERK7QString
_ZN9QIODevice16staticMetaObjectE
_ZN9QIODevice16waitForReadyReadEi
_ZN9QIODevice19waitForBytesWrittenEi
_ZN9QIODevice4seekEx
_ZN9QIODevice5resetEv
_ZN9QIODevice5writeEPKcx
_ZN9QIODevice7getCharEPc
_ZN9QIODevice7putCharEc
_ZN9QIODevice7readAllEv
_ZN9QIODeviceC2EP7QObject
_ZN9QIODeviceC2Ev
_ZN9QIODeviceD2Ev
_ZN9QListData11detach_growEPii
_ZN9QListData11shared_nullE
_ZN9QListData6appendEv
_ZN9QListData6detachEi
_ZN9QSettings8setValueERK7QStringRK8QVariant
_ZN9QSettingsC1ERK7QStringNS_6FormatEP7QObject
_ZN9QSettingsD1Ev
_ZN9QtPrivate20QStringList_containsEPK11QStringListRK7QStringN2Qt15CaseSensitivityE
_ZNK10QByteArray5toHexEv
_ZNK10QByteArray7toUpperEv
_ZNK10QByteArray7trimmedEv
_ZNK10QTextCodec11fromUnicodeERK7QString
_ZNK10QTextCodec9toUnicodeEPKc
_ZNK10QTextCodec9toUnicodeERK10QByteArray
_ZNK11QMetaObject2trEPKcS1_
_ZNK4QDir13entryInfoListE6QFlagsINS_6FilterEES0_INS_8SortFlagEE
_ZNK4QDir5mkdirERK7QString
_ZNK4QDir5rmdirERK7QString
_ZNK4QDir6existsERK7QString
_ZNK4QDir6existsEv
_ZNK4QDir6mkpathERK7QString
_ZNK5QDate3dayEv
_ZNK5QDate4yearEv
_ZNK5QDate5monthEv
_ZNK5QFile6existsEv
_ZNK5QTime4hourEv
_ZNK5QTime6minuteEv
_ZNK5QTime6secondEv
_ZNK7QObject10objectNameEv
_ZNK7QString11toLocal8BitEv
_ZNK7QString3argERKS_iRK5QChar
_ZNK7QString3argExiiRK5QChar
_ZNK7QString3midEii
_ZNK7QString5rightEi
_ZNK7QString5splitERKS_NS_13SplitBehaviorEN2Qt15CaseSensitivityE
_ZNK7QString5toIntEPbi
_ZNK7QString5utf16Ev
_ZNK7QString6toUtf8Ev
_ZNK7QString7indexOfERKS_iN2Qt15CaseSensitivityE
_ZNK7QString7sectionERKS_ii6QFlagsINS_11SectionFlagEE
_ZNK7QString7toAsciiEv
_ZNK7QString7toLowerEv
_ZNK7QString7toUpperEv
_ZNK7QString7trimmedEv
_ZNK7QStringeqERK13QLatin1String
_ZNK7QStringeqERKS_
_ZNK7QStringltERKS_
_ZNK8QVariant5toMapEv
_ZNK8QVariant6toBoolEv
_ZNK8QVariant6toListEv
_ZNK8QVariant8toStringEv
_ZNK9QDateTime4dateEv
_ZNK9QDateTime4timeEv
_ZNK9QFileInfo12lastModifiedEv
_ZNK9QFileInfo16absoluteFilePathEv
_ZNK9QFileInfo6existsEv
_ZNK9QFileInfo8fileNameEv
_ZNK9QIODevice11canReadLineEv
_ZNK9QIODevice12bytesToWriteEv
_ZNK9QIODevice14bytesAvailableEv
_ZNK9QIODevice6isOpenEv
_ZNK9QIODevice8openModeEv
_ZNK9QSettings11childGroupsEv
_ZNK9QSettings5valueERK7QStringRK8QVariant
_Zls6QDebugRK4QUrl
crc32
deflate
deflateEnd
deflateInit2_
get_crc_table
inflate
inflateEnd
inflateInit2_
qtgui4
_ZN10QBoxLayout10addStretchEi
_ZN10QBoxLayout10setSpacingEi
_ZN10QBoxLayout9addWidgetEP7QWidgeti6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayout10setSpacingEi
_ZN11QGridLayout9addLayoutEP7QLayoutiiii6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayout9addWidgetEP7QWidgetiiii6QFlagsIN2Qt13AlignmentFlagEE
_ZN11QGridLayoutC1EP7QWidget
_ZN11QHBoxLayoutC1EP7QWidget
_ZN11QHBoxLayoutC1Ev
_ZN11QMainWindow11qt_metacallEN11QMetaObject4CallEiPPv
_ZN11QMainWindow11qt_metacastEPKc
_ZN11QMainWindow15createPopupMenuEv
_ZN11QMainWindow16contextMenuEventEP17QContextMenuEvent
_ZN11QMainWindow16setCentralWidgetEP7QWidget
_ZN11QMainWindow16staticMetaObjectE
_ZN11QMainWindow5eventEP6QEvent
_ZN11QMainWindowC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN11QMainWindowD2Ev
_ZN11QMessageBox8criticalEP7QWidgetRK7QStringS4_6QFlagsINS_14StandardButtonEES6_
_ZN11QMessageBox8questionEP7QWidgetRK7QStringS4_6QFlagsINS_14StandardButtonEES6_
_ZN11QPushButtonC1EP7QWidget
_ZN11QVBoxLayoutC1Ev
_ZN12QApplication4execEv
_ZN12QApplication7desktopEv
_ZN12QApplicationC1ERiPPci
_ZN12QApplicationD1Ev
_ZN12QProgressBar12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE
_ZN12QProgressBar14setOrientationEN2Qt11OrientationE
_ZN12QProgressBar14setTextVisibleEb
_ZN12QProgressBar16setTextDirectionENS_9DirectionE
_ZN12QProgressBar21setInvertedAppearanceEb
_ZN12QProgressBar8setValueEi
_ZN12QProgressBarC1EP7QWidget
_ZN15QAbstractButton7setTextERK7QString
_ZN16QDesktopServices15storageLocationENS_16StandardLocationE
_ZN5QFont12setPointSizeEi
_ZN5QFont12setUnderlineEb
_ZN5QFont9setFamilyERK7QString
_ZN5QFont9setWeightEi
_ZN5QFontC1ERK7QStringiib
_ZN5QFontC1Ev
_ZN5QFontD1Ev
_ZN5QIcon7addFileERK7QStringRK5QSizeNS_4ModeENS_5StateE
_ZN5QIconC1Ev
_ZN5QIconD1Ev
_ZN6QBrush8setStyleEN2Qt10BrushStyleE
_ZN6QBrushC1ERK6QColorN2Qt10BrushStyleE
_ZN6QBrushD1Ev
_ZN6QColor6setRgbEiiii
_ZN6QLabel10paintEventEP11QPaintEvent
_ZN6QLabel11changeEventEP6QEvent
_ZN6QLabel11qt_metacallEN11QMetaObject4CallEiPPv
_ZN6QLabel11qt_metacastEPKc
_ZN6QLabel11setWordWrapEb
_ZN6QLabel12focusInEventEP11QFocusEvent
_ZN6QLabel12setAlignmentE6QFlagsIN2Qt13AlignmentFlagEE
_ZN6QLabel13focusOutEventEP11QFocusEvent
_ZN6QLabel13keyPressEventEP9QKeyEvent
_ZN6QLabel14mouseMoveEventEP11QMouseEvent
_ZN6QLabel15mousePressEventEP11QMouseEvent
_ZN6QLabel16contextMenuEventEP17QContextMenuEvent
_ZN6QLabel16staticMetaObjectE
_ZN6QLabel17mouseReleaseEventEP11QMouseEvent
_ZN6QLabel17setScaledContentsEb
_ZN6QLabel18focusNextPrevChildEb
_ZN6QLabel5eventEP6QEvent
_ZN6QLabel7setTextERK7QString
_ZN6QLabel9setPixmapERK7QPixmap
_ZN6QLabelC1EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN6QLabelC2EP7QWidget6QFlagsIN2Qt10WindowTypeEE
_ZN6QLabelD2Ev
_ZN7QCursorC1EN2Qt11CursorShapeE
_ZN7QCursorD1Ev
_ZN7QLayout17setSizeConstraintENS_14SizeConstraintE
_ZN7QLayout18setContentsMarginsEiiii
_ZN7QPixmapC1ERK7QStringPKc6QFlagsIN2Qt19ImageConversionFlagEE
_ZN7QPixmapC1Ev
_ZN7QPixmapD1Ev
_ZN7QPixmapaSERKS_
_ZN7QWidget10closeEventEP11QCloseEvent
_ZN7QWidget10enterEventEP6QEvent
_ZN7QWidget10fontChangeERK5QFont
_ZN7QWidget10leaveEventEP6QEvent
_ZN7QWidget10paintEventEP11QPaintEvent
_ZN7QWidget10setEnabledEb
_ZN7QWidget10setPaletteERK8QPalette
_ZN7QWidget10setVisibleEb
_ZN7QWidget10wheelEventEP11QWheelEvent
_ZN7QWidget11actionEventEP12QActionEvent
_ZN7QWidget11changeEventEP6QEvent
_ZN7QWidget11resizeEventEP12QResizeEvent
_ZN7QWidget11setGeometryERK5QRect
_ZN7QWidget11styleChangeER6QStyle
_ZN7QWidget11tabletEventEP12QTabletEvent
_ZN7QWidget12focusInEventEP11QFocusEvent
_ZN7QWidget12setAttributeEN2Qt15WidgetAttributeEb
_ZN7QWidget13dragMoveEventEP14QDragMoveEvent
_ZN7QWidget13enabledChangeEb
_ZN7QWidget13focusOutEventEP11QFocusEvent
_ZN7QWidget13keyPressEventEP9QKeyEvent
_ZN7QWidget13paletteChangeERK8QPalette
_ZN7QWidget13setStyleSheetERK7QString
_ZN7QWidget13setWindowIconERK5QIcon
_ZN7QWidget14dragEnterEventEP15QDragEnterEvent
_ZN7QWidget14dragLeaveEventEP15QDragLeaveEvent
_ZN7QWidget14languageChangeEv
_ZN7QWidget14mouseMoveEventEP11QMouseEvent
_ZN7QWidget14setMinimumSizeEii
_ZN7QWidget14setWindowFlagsE6QFlagsIN2Qt10WindowTypeEE
_ZN7QWidget14setWindowStateE6QFlagsIN2Qt11WindowStateEE
_ZN7QWidget14setWindowTitleERK7QString
_ZN7QWidget15keyReleaseEventEP9QKeyEvent
_ZN7QWidget15mousePressEventEP11QMouseEvent
_ZN7QWidget16inputMethodEventEP17QInputMethodEvent
_ZN7QWidget16setWindowOpacityEd
_ZN7QWidget17mouseReleaseEventEP11QMouseEvent
_ZN7QWidget18focusNextPrevChildEb
_ZN7QWidget21mouseDoubleClickEventEP11QMouseEvent
_ZN7QWidget21setAutoFillBackgroundEb
_ZN7QWidget22windowActivationChangeEb
_ZN7QWidget4moveERK6QPoint
_ZN7QWidget5raiseEv
_ZN7QWidget6resizeERK5QSize
_ZN7QWidget7repaintEv
_ZN7QWidget7setFontERK5QFont
_ZN7QWidget8winEventEP6tagMSGPl
_ZN7QWidget9dropEventEP10QDropEvent
_ZN7QWidget9hideEventEP10QHideEvent
_ZN7QWidget9moveEventEP10QMoveEvent
_ZN7QWidget9setCursorERK7QCursor
_ZN7QWidget9showEventEP10QShowEvent
_ZN7QWidgetC1EPS_6QFlagsIN2Qt10WindowTypeEE
_ZN8QPalette8setBrushENS_10ColorGroupENS_9ColorRoleERK6QBrush
_ZN8QPaletteC1Ev
_ZN8QPaletteD1Ev
_ZN9QCheckBoxC1EP7QWidget
_ZNK12QProgressBar5valueEv
_ZNK14QDesktopWidget17availableGeometryEi
_ZNK6QLabel14heightForWidthEi
_ZNK6QLabel15minimumSizeHintEv
_ZNK6QLabel8sizeHintEv
_ZNK7QWidget11paintEngineEv
_ZNK7QWidget14heightForWidthEi
_ZNK7QWidget15minimumSizeHintEv
_ZNK7QWidget16inputMethodQueryEN2Qt16InputMethodQueryE
_ZNK7QWidget3posEv
_ZNK7QWidget5getDCEv
_ZNK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZNK7QWidget7devTypeEv
_ZNK7QWidget8sizeHintEv
_ZNK7QWidget9releaseDCEP5HDC__
_ZTV11QSpacerItem
_ZThn8_NK7QWidget11paintEngineEv
_ZThn8_NK7QWidget5getDCEv
_ZThn8_NK7QWidget6metricEN12QPaintDevice17PaintDeviceMetricE
_ZThn8_NK7QWidget7devTypeEv
_ZThn8_NK7QWidget9releaseDCEP5HDC__
qtnetwork4
_ZN15QNetworkRequest12setRawHeaderERK10QByteArrayS2_
_ZN15QNetworkRequest19setSslConfigurationERK17QSslConfiguration
_ZN15QNetworkRequest6setUrlERK4QUrl
_ZN15QNetworkRequestC1ERK4QUrl
_ZN15QNetworkRequestD1Ev
_ZN15QSslCertificateC1EP9QIODeviceN4QSsl14EncodingFormatE
_ZN15QSslCertificateD1Ev
_ZN17QSslConfiguration17setPeerVerifyModeEN10QSslSocket14PeerVerifyModeE
_ZN17QSslConfiguration19setLocalCertificateERK15QSslCertificate
_ZN17QSslConfigurationD1Ev
_ZN21QNetworkAccessManager3getERK15QNetworkRequest
_ZN21QNetworkAccessManager4postERK15QNetworkRequestRK10QByteArray
_ZN21QNetworkAccessManagerC1EP7QObject
_ZNK15QNetworkRequest16sslConfigurationEv
_ZNK15QNetworkRequest3urlEv
qtscript4
_ZN12QScriptValueD1Ev
_ZN13QScriptEngine8evaluateERK7QStringS2_i
_ZN13QScriptEngineC1Ev
_ZN13QScriptEngineD1Ev
_ZNK12QScriptValue9toVariantEv
Sections
.text Size: 330KB - Virtual size: 330KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 191KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 351KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE