Static task
static1
Behavioral task
behavioral1
Sample
a724ae516a4be79918ea83b2d9c1ebee1e50e3c02d26f5cae15f00761a1aaeee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a724ae516a4be79918ea83b2d9c1ebee1e50e3c02d26f5cae15f00761a1aaeee.exe
Resource
win10v2004-20220812-en
General
-
Target
a724ae516a4be79918ea83b2d9c1ebee1e50e3c02d26f5cae15f00761a1aaeee
-
Size
422KB
-
MD5
c4dc0f0b14e83ba4745aa71c2e93aaed
-
SHA1
35022e23253cc4d9a586600d458ffa466a129484
-
SHA256
a724ae516a4be79918ea83b2d9c1ebee1e50e3c02d26f5cae15f00761a1aaeee
-
SHA512
0d215aa36af521fa02da3dc936871c2e8ee0709464187a2b7027ea2809204fd5c4867f794e6733f463cba54aaa10fdcb5c934f86546ec0455433ba7e80b841f5
-
SSDEEP
6144:6eZ6Y/acAb3tsOHesPSpXuBMCl/IyMulqUpV:6ecb3tsSesPSp7Cl/IyMLIV
Malware Config
Signatures
Files
-
a724ae516a4be79918ea83b2d9c1ebee1e50e3c02d26f5cae15f00761a1aaeee.exe windows x86
4d807358d65fbfa1180a120ca0ef15de
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapAlloc
HeapReAlloc
HeapSize
GetCurrentThreadId
GetCurrentThread
SetThreadPriority
Sleep
LoadLibraryW
GetProcAddress
FreeLibrary
VirtualAlloc
VirtualFree
GetSystemInfo
GetLastError
ReadFile
SetFilePointer
CloseHandle
GetFileSize
WriteFile
CreateFileW
CreateFileA
SetFileAttributesW
SetFileAttributesA
CopyFileW
CopyFileA
DeleteFileW
DeleteFileA
MoveFileW
MoveFileA
GetFileAttributesExW
GetFileAttributesExA
CreateDirectoryW
CreateDirectoryA
RemoveDirectoryW
RemoveDirectoryA
FindFirstFileW
FindNextFileW
FindFirstFileA
FindNextFileA
FindClose
SetCurrentDirectoryW
SetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentDirectoryA
GetStartupInfoA
GetProcessHeap
GetVersionExA
HeapFree
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetModuleFileNameA
GetStdHandle
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileType
SetHandleCount
HeapCreate
HeapDestroy
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
SetStdHandle
LoadLibraryA
MultiByteToWideChar
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
GetFileAttributesA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
SetEndOfFile
GetLocaleInfoA
CompareStringW
CompareStringA
SetEnvironmentVariableA
RtlUnwind
GetSystemDirectoryA
GetWindowsDirectoryA
GetSystemDirectoryW
GetWindowsDirectoryW
GetModuleFileNameW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
GlobalMemoryStatus
GetCommandLineW
CreateMutexW
CreateMutexA
GetSystemDefaultLCID
RaiseException
CreateThread
window
??1WObjectProperties@@UAE@XZ
??1WConfigProperties@@UAE@XZ
?MaybeDestroy@WWindow@@QAEXXZ
??1WLabel@@UAE@XZ
??1WWizardDialog@@UAE@XZ
??0WWizardDialog@@QAE@XZ
??0WLabel@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@Z@Z
?OnInitDialog@WWizardDialog@@UAEXXZ
?LoadFile@FWindowsBitmap@@QAEHPB_W@Z
?GetBitmapHandle@FWindowsBitmap@@QAEPAUHBITMAP__@@XZ
??1WButton@@UAE@XZ
??1WWizardPage@@UAE@XZ
??0WWizardPage@@QAE@PB_WHPAVWWizardDialog@@@Z
??_7FDelegate@@6B@
??0WButton@@QAE@PAVWWindow@@HUFDelegate@@P6GJPAUHWND__@@IIJ@Z@Z
?OnInitDialog@WDialog@@UAEXXZ
?EndDialog@WDialog@@QAEXH@Z
??1WCoolButton@@UAE@XZ
??0WCoolButton@@QAE@PAVWWindow@@HUFDelegate@@K@Z
?GLogWindow@@3PAVWLog@@A
?ScrollCaret@WEdit@@QAEXXZ
??0WObjectProperties@@QAE@VFName@@KPB_WPAVWWindow@@H@Z
?OpenWindow@WProperties@@QAEXPAUHWND__@@@Z
??0WConfigProperties@@QAE@VFName@@PB_W@Z
?SetNotifyHook@WWindow@@QAEXPAVFNotifyHook@@@Z
?SetExec@WTerminal@@QAEXPAVFExec@@@Z
??0WCrashBoxDialog@@QAE@PB_W0@Z
?hInstanceWindow@@3PAUHINSTANCE__@@A
?DoModal@WDialog@@UAEHPAUHINSTANCE__@@@Z
??1WCrashBoxDialog@@UAE@XZ
?OnDestroy@WWindow@@UAEXXZ
?OnCut@WWindow@@UAEXXZ
?OnClose@WWindow@@UAEHXZ
?OnKeyDown@WWindow@@UAEX_W@Z
?LocalizeText@WDialog@@UAEXPB_W0@Z
?OnCancel@WWizardPage@@UAEXXZ
?OnSetCursor@WWindow@@UAEHXZ
?OnChar@WWindow@@UAEX_W@Z
?GetShow@WWizardPage@@UAEHXZ
?OnFinishSplitterDrag@WWindow@@UAEXPAVWDragInterceptor@@H@Z
?OnActivate@WWindow@@UAEXH@Z
?CallDefaultProc@WDialog@@UAEHIIJ@Z
?GetCancelText@WWizardPage@@UAEPB_WXZ
?GetPackageName@WBitmapButton@@UAEPB_WXZ
?OnRightButtonUp@WWindow@@UAEXXZ
?OnSysCommand@WWindow@@UAEHH@Z
?GetFinishText@WWizardPage@@UAEPB_WXZ
?OnClose@WWizardDialog@@UAEHXZ
?OnLeftButtonUp@WWindow@@UAEXXZ
?OnCommand@WWindow@@UAEXH@Z
?GetBackText@WWizardPage@@UAEPB_WXZ
?OnCancel@WWizardDialog@@UAEXXZ
?ExpandAll@WProperties@@UAEXXZ
?GetWindowClassName@WConfigProperties@@UAEXPA_W@Z
?OnRightButtonDown@WWindow@@UAEXXZ
?OnMove@WWindow@@UAEXHH@Z
?GetNext@WWizardPage@@UAEPAV1@XZ
?OnFinish@WWizardDialog@@UAEXXZ
?ForceRefresh@WProperties@@UAEXXZ
?OnRightButtonDoubleClick@WWindow@@UAEXXZ
?OnWindowPosChanging@WWindow@@UAEXPAH000@Z
?OnCurrent@WWizardPage@@UAEXXZ
?OnNext@WWizardDialog@@UAEXXZ
?ResizeList@WProperties@@UAEXXZ
?OnMiddleButtonDoubleClick@WWindow@@UAEXXZ
?OnSize@WWindow@@UAEXKHH@Z
?GetRoot@WConfigProperties@@UAEPAVFTreeItem@@XZ
?OnBack@WWizardDialog@@UAEXXZ
?SetItemFocus@WProperties@@UAEXH@Z
?OnLeftButtonDoubleClick@WWindow@@UAEXXZ
?OnKillFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnDestroy@WWizardDialog@@UAEXXZ
?SetValue@WProperties@@UAEXPB_W@Z
?OnLeftButtonDown@WWindow@@UAEXXZ
?OnSetFocus@WWindow@@UAEXPAUHWND__@@@Z
?RefreshPage@WWizardDialog@@UAEXXZ
?OnFinishSplitterDrag@WProperties@@UAEXPAVWDragInterceptor@@H@Z
?OnMouseMove@WWindow@@UAEXKUFPoint@@@Z
?OnCopyData@WWindow@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?Advance@WWizardDialog@@UAEXPAVWWizardPage@@@Z
?BeginSplitterDrag@WProperties@@UAEXXZ
?OnMdiActivate@WWindow@@UAEXH@Z
?GetDividerWidth@WProperties@@UAEHXZ
?OnReleaseCapture@WWindow@@UAEXXZ
?GetLength@WWindow@@UAEHXZ
?OnTimer@WWindow@@UAEXXZ
?SetText@WWindow@@UAEXPB_W@Z
?OnMouseHover@WWindow@@UAEXXZ
?GetText@WWindow@@UAE?AVFString@@XZ
?OnPaint@WProperties@@UAEXXZ
?OnMouseLeave@WWindow@@UAEXXZ
?InterceptControlCommand@WWindow@@UAEHIIJ@Z
?OnSize@WProperties@@UAEXKHH@Z
?OnMouseEnter@WWindow@@UAEXXZ
?CallDefaultProc@WWindow@@UAEHIIJ@Z
??1FWindowAnchor@@QAE@XZ
?OnActivate@WProperties@@UAEXH@Z
?OnEnterIdle@WWindow@@UAEXXZ
?WndProc@WWindow@@UAEJIIJ@Z
?OnInitDialog@WWindow@@UAEXXZ
?DoDestroy@WWindow@@UAEXXZ
?OnDestroy@WProperties@@UAEXXZ
?OnMeasureItem@WWindow@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?Serialize@WWindow@@UAEXAAVFArchive@@@Z
?OnSetCursor@WProperties@@UAEHXZ
?GetWindowClassName@WObjectProperties@@UAEXPA_W@Z
?Show@WObjectProperties@@UAEXH@Z
?OnDrawItem@WWindow@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?Show@WWindow@@UAEXH@Z
?DoDestroy@WProperties@@UAEXXZ
?GetRoot@WObjectProperties@@UAEPAVFTreeItem@@XZ
?OnCreate@WWindow@@UAEXXZ
?Serialize@WProperties@@UAEXAAVFArchive@@@Z
?OnPaint@WWindow@@UAEXXZ
?OnKeyUp@WWindow@@UAEXIJ@Z
?OnHScroll@WWindow@@UAEXIJ@Z
?OnVScroll@WWindow@@UAEXIJ@Z
?OnEraseBkgnd@WWindow@@UAEHXZ
?OnUndo@WWindow@@UAEXXZ
?Show@WDialog@@UAEXH@Z
?OnShowWindow@WWindow@@UAEXH@Z
?MyDrawEdge@WWindow@@UAEXPAUHDC__@@PAUtagRECT@@H@Z
?OnPaste@WWindow@@UAEXXZ
?OnCopy@WWindow@@UAEXXZ
?InitWindowing@@YAXXZ
??1FWindowsBitmap@@QAE@XZ
core
?GMalloc@@3PAVFMalloc@@A
?appBaseDir@@YAPB_WXZ
?GCRCTable@@3PAKA
??0FString@@QAE@PB_W@Z
??YFString@@QAEAAV0@PB_W@Z
?GObjObjects@UObject@@1V?$TArray@PAVUObject@@@@A
?appSqrt@@YANN@Z
?appPackage@@YAPB_WXZ
?appSprintf@@YAHPA_WPB_WZZ
?appUnwindf@@YAXPB_WZZ
??1FArray@@QAE@XZ
??1FString@@QAE@XZ
?Empty@FArray@@QAEXHH@Z
?appFailAssert@@YAXPBD0H@Z
?Remove@FArray@@QAEXHHH@Z
??DFString@@QBEPB_WXZ
?Add@FArray@@QAEHHH@Z
??0FString@@QAE@XZ
?GUnicodeOS@@3HA
?LocalizeGeneral@@YAPB_WPB_W00@Z
??HFString@@QAE?AV0@PB_W@Z
?GFileManager@@3PAVFFileManager@@A
?winGetSizeANSI@@YAHPB_W@Z
?winToANSI@@YAPADPADPB_WH@Z
?ParseCommand@@YAHPAPB_WPB_W@Z
?GIsEditor@@3HA
?GLog@@3PAVFOutputDevice@@A
?GetDefaultActor@UClass@@QAEPAVAActor@@XZ
??0FName@@QAE@PB_WW4EFindName@@@Z
?Logf@FOutputDevice@@QAAXPB_WZZ
?GetDefaultObject@UClass@@QAEPAVUObject@@XZ
?Parse@@YAHPB_W0AAVFName@@@Z
?GetName@UObject@@QBEPB_WXZ
??DFName@@QBEPB_WXZ
?ExportToOutputDevice@UExporter@@SAXPAVUObject@@PAV1@AAVFOutputDevice@@PB_WH@Z
?appClipboardCopy@@YAXPB_W@Z
?LocalizeGeneral@@YAPB_WPBDPB_W1@Z
?GIsRunning@@3HA
?appSecondsQPC@@YANXZ
?appCmdLine@@YAPB_WXZ
?Parse@@YAHPB_W0AAH@Z
?appCyclesQPC@@YA_KXZ
?GIsBenchmarking@@3HA
?appRandInit@@YAXH@Z
?ParseParam@@YAHPB_W0@Z
?GetObj@?$TSingleton@VL2ThreadUtil@@@@SAAAVL2ThreadUtil@@XZ
?Clear@L2ThreadStats@@QAEXXZ
?GL2UseReplayManager@@3HA
?GL2ReplayMode@@3HA
?GWindowManager@@3PAVUSubsystem@@A
?appSleep@@YAXM@Z
?GIsRequestingExit@@3HA
?GScriptCycles@@3HA
?GSecondsPerCycleQPF@@3NA
?GExec@@3PAVFExec@@A
?GLanguageType@@3HA
?GError@@3PAVFOutputDeviceError@@A
?GPageSize@@3KA
?GFullCheckMsg@@3PA_WA
?debugf@@YAXPB_WZZ
?appTimestamp@@YAPB_WXZ
?Logf@FOutputDevice@@QAAXW4EName@@PB_WZZ
?GIsCriticalError@@3HA
?SafeSuppressed@FName@@SAHW4EName@@@Z
?GL2SaveLog@@3HA
?appStrcpy@@YAPA_WPA_WPB_W@Z
?appStrlen@@YAHPB_W@Z
?Parse@@YAHPB_W0PA_WHH@Z
?appStrcat@@YAPA_WPA_WPB_W@Z
?GL2ClientOrder@@3HA
?appStrncpy@@YAPA_WPA_WPB_WH@Z
?GNull@@3PAVFOutputDevice@@A
?appSystemTime@@YAXAAH0000000@Z
?SafeString@FName@@SAPB_WW4EName@@@Z
?GLogHook@@3PAVFOutputDevice@@A
?GLogHook2@@3PAVFOutputDevice@@A
?debugf@@YAXW4EName@@PB_WZZ
?appGetSystemErrorMessage@@YAPB_WH@Z
?StaticShutdownAfterError@UObject@@SAXXZ
?GErrorHist@@3PA_WA
?appStrncat@@YAPA_WPA_WPB_WH@Z
?GIsGuarded@@3HA
?LocalizeError@@YAPB_WPBDPB_W1@Z
?appRequestExit@@YAXH@Z
?GIsClient@@3HA
?GIsStarted@@3HA
?GConfig@@3PAVFConfigCache@@A
?LocalizeError@@YAPB_WPB_W00@Z
?appGetVarArgs@@YAHPA_WHAAPB_W@Z
??4FString@@QAEAAV0@PB_W@Z
?GIsSlowTask@@3HA
??4FString@@QAEAAV0@ABV0@@Z
??DFString@@QBE?AV0@PB_W@Z
??DFString@@QBE?AV0@ABV0@@Z
?appStricmp@@YAHPB_W0@Z
?appStrchr@@YAPA_WPB_WH@Z
??0FArchive@@QAE@XZ
??_7FArchive@@6B@
?ByteOrderSerialize@FArchive@@QAEAAV1@PAXH@Z
?appAtoi@@YAHPB_W@Z
?GL2DESCodec@@3PAVFCodec@@A
?GIsUCC@@3HA
?appMsgf@@YA?BHHPB_WZZ
?appStristr@@YAPA_WPB_W0@Z
?GL2ReplayLoadResource@@3HA
?winGetSizeUNICODE@@YAHPBD@Z
?winToUNICODE@@YAPA_WPA_WPBDH@Z
?appFromAnsi@@YAPB_WPBDPA_W@Z
?appLoadFileToString@@YAHAAVFString@@PB_WPAVFFileManager@@@Z
?appStrstr@@YAPA_WPB_W0@Z
?Printf@FString@@SA?AV1@PB_WZZ
??YFString@@QAEAAV0@ABV0@@Z
?appSaveStringToFile@@YAHABVFString@@PB_WPAVFFileManager@@@Z
??8FString@@QBEHABV0@@Z
??8FString@@QBEHPB_W@Z
?appStrcmp@@YAHPB_W0@Z
?Log@FOutputDevice@@QAEXPB_W@Z
?appStaticString1024@@YAPA_WXZ
?appAtof@@YAMPB_W@Z
??0FString@@QAE@ABV0@@Z
??0FArray@@IAE@HH@Z
?PrivateStaticClass@UClass@@0V1@A
?ParseObject@@YAHPB_W0PAVUClass@@AAPAVUObject@@PAV2@@Z
?GetTransientPackage@UObject@@SAPAVUPackage@@XZ
?StaticConstructObject@UObject@@SAPAV1@PAVUClass@@PAV1@VFName@@K1PAVFOutputDevice@@1@Z
?GetCriticalSection@FArchive@@UAEPAVFCriticalSection@@XZ
?GetError@FArchive@@UAEHXZ
??1FFileStream@@AAE@XZ
?AttachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?SetDepth@L2Configuration@@QAEXH@Z
?AtStopper@FArchive@@UAEHXZ
?AtEnd@FArchive@@UAEHXZ
?Tell@FArchive@@UAEHXZ
?MapName@FArchive@@UAEHPAVFName@@@Z
??0FArray@@QAE@W4ENoInit@@@Z
?CountBytes@FArchive@@UAEXKK@Z
?SerializeInt@FArchive@@UAEXAAKK@Z
?SerializeBits@FArchive@@UAEXPAXH@Z
?GSecondsPerCycle@@3NA
?GetObj@?$TSingleton@VL2UserHardWareInformation@@@@SAAAVL2UserHardWareInformation@@XZ
?GL2IsFirstRun@@3HA
?GL2TextureDetail@@3HA
?GSEKScreenX@@3HA
?GSEKScreenY@@3HA
?GColorBits@@3HA
?GIsL2Projector@@3HA
?GL2RenderDeco@@3HA
?GL2TerrainCR@@3MA
?GetObj@?$TSingleton@VL2Configuration@@@@SAAAVL2Configuration@@XZ
?SetStaticMeshCR@L2Configuration@@QAEXM@Z
?SetActorCR@L2Configuration@@QAEXM@Z
?SetStaticMeshLodCR@L2Configuration@@QAEXM@Z
?GL2OriginPawnCR@@3MA
?PrivateStaticClass@UPackage@@0VUClass@@A
?appLoadFileToArray@@YAHAAV?$TArray@E@@PB_WPAVFFileManager@@@Z
?Parse@@YAHPB_W0AAVFString@@H@Z
?StaticLoadClass@UObject@@SAPAVUClass@@PAV2@PAV1@PB_W2KPAVUPackageMap@@@Z
?appStrfind@@YAPB_WPB_W0@Z
?GL2CheckResource@@3HA
?GL2NPGEPacking@@3HA
?GRunningOS@@3W4ERunningOS@@A
?GL2RunningFirstHandle@@3PAXA
?appInit@@YAXPB_W0PAVFMalloc@@PAVFOutputDevice@@PAVFOutputDeviceError@@PAVFFeedbackContext@@PAVFFileManager@@P6APAVFConfigCache@@XZHPAVFCodec@@@Z
?GNetworkLog@@3PAVFOutputDevice@@A
?GCheckGrpLog@@3PAVFOutputDevice@@A
?GIsServer@@3HA
?GIsScriptable@@3HA
?GLazyLoad@@3HA
?appRand@@YAHXZ
?appPreExit@@YAXXZ
?appExit@@YAXXZ
?GIni@@3PA_WA
?GUserIni@@3PA_WA
?GIsL2NetLogin@@3HA
?GIsL2NetLog@@3HA
?Log@FOutputDevice@@QAEXW4EName@@PB_W@Z
??HFString@@QAE?AV0@ABV0@@Z
?GL2ShowCMViewer@@3HA
??1FArchive@@UAE@XZ
?CountBytes@FArray@@QAEXAAVFArchive@@H@Z
user32
LoadIconW
SendMessageW
LoadIconA
SendMessageA
SetForegroundWindow
SetFocus
PeekMessageW
PeekMessageA
TranslateMessage
DispatchMessageW
DispatchMessageA
GetForegroundWindow
GetWindowThreadProcessId
MessageBoxW
ShowWindow
UpdateWindow
DestroyWindow
BeginPaint
EndPaint
SetRect
GetDesktopWindow
GetWindowDC
GetDC
ReleaseDC
CreateDialogParamW
CreateDialogParamA
SetWindowRgn
GetDlgItem
GetSystemMetrics
SetWindowPos
RemovePropW
RemovePropA
wsprintfA
gdi32
DeleteObject
ExtCreateRegion
CombineRgn
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
GetDIBits
CreateDIBitmap
DeleteDC
advapi32
RegDeleteValueA
shell32
ShellExecuteW
ShellExecuteA
ole32
CoUninitialize
CoInitialize
engine
?GStats@@3VFStats@@A
?Clear@FStats@@QAEXXZ
?GetPlaySpeed@FL2ReplayManager@@QAEMXZ
?GEngineStats@@3VFEngineStats@@A
?IsDiscardedBM@FL2ReplayManager@@QAEHXZ
?UpdateBMFrameTime@FL2ReplayManager@@QAEXN@Z
?PrivateStaticClass@UEngine@@0VUClass@@A
?PrivateStaticClass@AActor@@0VUClass@@A
?PrivateStaticClass@URenderDevice@@0VUClass@@A
??0?$TArray@E@@QAE@XZ
??1?$TArray@E@@QAE@XZ
?PrivateStaticClass@UGameEngine@@0VUClass@@A
?Release@FStats@@QAEXXZ
ws2_32
WSAStartup
WSACleanup
comdlg32
GetSaveFileNameA
d3d9
Direct3DCreate9
ddraw
DirectDrawCreate
dsetup
DirectXSetupGetVersion
Sections
.text Size: 396KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE