Static task
static1
Behavioral task
behavioral1
Sample
SSCNCSrv.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
SSCNCSrv.exe
Resource
win10v2004-20221111-en
General
-
Target
SSCNCSrv.exe
-
Size
3.2MB
-
MD5
84d58939386a6b4d88f6fd0495435d3b
-
SHA1
e496cdfd638a55aca2f5bb8cb1e88089797d890b
-
SHA256
b0864c3a609d6c6c94e46fa18bb3b8766098c5f1c6c12d72e60fc2dba20c15bf
-
SHA512
042743841942ab475993f584cd0227a3ed05bd86b331f9ed49d3414022859cd0ef6f83ba37fc37a9c89ae8ef3a8fbefffe29f276382de6722c5083cccb322abe
-
SSDEEP
98304:pDQOMPXtLmJ6TSx/KoZoAuOkFZLzyaOkJ95ERMe7WdFF+g9:psOMfhmJ6maLxJ9KMe7WdO
Malware Config
Signatures
Files
-
SSCNCSrv.exe.exe windows x86
beab477e50899713fd75995e4c10b51d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glGenLists
glNewList
glEndList
glNormal3dv
glFinish
wglGetCurrentDC
wglUseFontBitmapsA
glClearDepth
glDepthFunc
glCallList
wglCreateContext
glRotatef
glClearColor
glClear
wglMakeCurrent
glTranslated
glGetBooleanv
glShadeModel
glColor3ub
glVertex3f
glGetIntegerv
glRotated
glMultMatrixd
glGetDoublev
glNormal3d
glIsList
glDeleteLists
wglDeleteContext
glPushMatrix
glViewport
glMatrixMode
glLoadIdentity
glOrtho
glNormal3f
glRasterPos3d
glListBase
glCallLists
glFlush
glPopMatrix
glLightModelf
glLightfv
glMaterialfv
glDisable
glColor3f
glEnable
glPolygonMode
glVertex3d
glVertex3dv
glEnd
glBegin
glu32
gluTessEndPolygon
gluTessVertex
gluTessBeginContour
gluTessBeginPolygon
gluTessCallback
gluNewTess
gluDeleteQuadric
gluSphere
gluNewQuadric
gluProject
gluTessEndContour
sssd
DummyCheckDLL700
GetSSCNCSys
GetDongleID
GetMachineSerial
AddNewRegisterToServer
IsValidateTime
SetSSSDLanguage
CheckSoftDogPassword
CheckSoftDog
IsDemoSoftDog
GetHostSerial
GetMachineSerial2
vcncdll
?GetValueRGB@CIniFile@@QAEKV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
WPGradeStdSet
?GetValueF@CIniFile@@QAENV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
OnCncAbout
DecryptSSCNCStringReturnKey
?GetValueNoMark@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
??1CIniFile@@UAE@XZ
?GetValue@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
?SetValueF@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0N_N@Z
?SetValueRGB@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0K_N@Z
?GetName@CIniFile@@QAE?AV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@V23@0@Z
SetOperationTestParam
EncryptSSCNCStringWithKey
GetFtpFile
SetVCNCDllLanguage
??0CPicture@@QAE@XZ
?GetValueI@CIniFile@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0@Z
?ReadFile@CIniFile@@QAE_NXZ
?SetPath@CIniFile@@QAEXV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
??0CIniFile@@QAE@XZ
?WriteFile@CIniFile@@QAEXXZ
?SetValueI@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@0H_N@Z
CheckAnnualLicense
GetLangFileName
DummyCheckVCNCDLL702
SetLanIniPath
?Load@CPicture@@QAEHV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?Load@CPicture@@QAEHPAEH@Z
?SetValue@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@00_N@Z
?DeleteKey@CIniFile@@QAE_NV?$CStringT@DV?$StrTraitMFC@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@@Z
?PicSetShowPartArea@CPicture@@QAEXVCRect@@HH@Z
?Show@CPicture@@QAEHPAVCDC@@VCRect@@@Z
?UpdateSizeOnDC@CPicture@@QAEHPAVCDC@@@Z
?FreePictureData@CPicture@@QAEXXZ
??1CPicture@@UAE@XZ
sqlite3
sqlite3_open
sqlite3_free_table
sqlite3_close
sqlite3_errmsg
sqlite3_exec
sqlite3_get_table
kernel32
LocalAlloc
ExitProcess
GetVersionExA
InterlockedExchange
InitializeCriticalSection
EncodePointer
DecodePointer
QueryPerformanceCounter
QueryPerformanceFrequency
HeapFree
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
GetTimeFormatA
GetDateFormatA
MoveFileA
GetModuleHandleW
GetCommandLineA
HeapSetInformation
GetStartupInfoW
LCMapStringW
GetCPInfo
IsProcessorFeaturePresent
HeapCreate
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
GetCurrentThread
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
GetModuleFileNameW
GetStringTypeW
SetStdHandle
GetLocaleInfoW
LoadLibraryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
SetEndOfFile
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
lstrlenW
FormatMessageA
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GlobalFree
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpA
LoadLibraryExA
ConvertDefaultLocale
WaitForSingleObject
GetStringTypeExA
GetThreadLocale
lstrcmpiA
GetSystemDirectoryA
UnlockFile
GetFileSize
DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
FindNextFileA
SetThreadPriority
ResumeThread
CreateActCtxW
ReleaseActCtx
GlobalReAlloc
SystemTimeToFileTime
GetFileAttributesA
ReplaceFileA
SetFileTime
GetFileTime
GetTempFileNameA
GetDiskFreeSpaceA
LocalUnlock
LocalLock
GlobalHandle
LocalReAlloc
GetSystemDirectoryW
lstrcpyA
GlobalFlags
GetCurrentDirectoryA
SetErrorMode
GetFileAttributesExA
LocalFileTimeToFileTime
GetFileSizeEx
GetTempPathA
GetNumberFormatA
GetProfileIntA
SearchPathA
VirtualProtect
FindResourceExW
InitializeCriticalSectionAndSpinCount
FileTimeToLocalFileTime
FileTimeToSystemTime
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
OutputDebugStringA
lstrlenA
GetTickCount
CopyFileA
MultiByteToWideChar
FreeLibrary
Sleep
FindFirstFileA
FindClose
RemoveDirectoryA
CreateDirectoryA
ActivateActCtx
DeactivateActCtx
SetLastError
GetProcAddress
GetModuleHandleA
LoadLibraryA
CreateMutexA
GetLastError
CreateProcessA
GetLocalTime
GetWindowsDirectoryA
GetSystemDefaultUILanguage
GetModuleFileNameA
TerminateThread
TerminateProcess
lstrcpynA
WideCharToMultiByte
FindResourceW
SizeofResource
FindResourceA
LoadResource
LockResource
FreeResource
CreateFileW
GetUserDefaultUILanguage
SetFilePointer
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitThread
CreateThread
HeapQueryInformation
GetDriveTypeW
GetCurrentDirectoryW
MulDiv
CreateFileA
ReadFile
CloseHandle
GetVersion
GetPrivateProfileIntA
WritePrivateProfileStringA
DeleteFileA
GetPrivateProfileStringA
InterlockedDecrement
InterlockedIncrement
LockFile
GetUserDefaultLangID
LocalFree
user32
ToAsciiEx
DrawIconEx
SetClassLongA
GetAsyncKeyState
NotifyWinEvent
DestroyAcceleratorTable
GetTabbedTextExtentW
PostThreadMessageA
CreateMenu
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
GetDCEx
UnregisterClassA
LoadAcceleratorsW
CopyImage
RealChildWindowFromPoint
SetLayeredWindowAttributes
EnumDisplayMonitors
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
GetTabbedTextExtentA
IsClipboardFormatAvailable
DeleteMenu
IsRectEmpty
SystemParametersInfoA
GetMenuItemInfoA
WindowFromPoint
LoadCursorW
DestroyCursor
SetCursorPos
IsZoomed
MapVirtualKeyA
GetKeyNameTextA
GetWindowDC
GrayStringA
DrawTextExA
TabbedTextOutA
WaitMessage
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
DestroyIcon
LoadAcceleratorsA
IsIconic
InsertMenuItemA
IntersectRect
SetRectEmpty
BringWindowToTop
TranslateAcceleratorA
GetWindowThreadProcessId
ShowOwnedPopups
SetCursor
CharUpperA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CheckRadioButton
CheckDlgButton
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
MapVirtualKeyExA
GetClassLongA
GetKeyboardLayout
GetPropA
RemovePropA
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
UnhookWindowsHookEx
GetMessageTime
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
SetMenu
SetScrollRange
GetScrollRange
ShowScrollBar
ValidateRect
GetClassInfoExA
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
CallWindowProcA
GetMenu
SetWindowPos
IsWindowEnabled
RegisterWindowMessageA
GetMenuState
GetMenuStringA
InsertMenuA
GetMenuItemCount
RemoveMenu
CreateWindowExA
PostQuitMessage
DestroyWindow
GetMessageA
MessageBoxA
GetMessagePos
AppendMenuA
CreatePopupMenu
DrawFrameControl
DrawEdge
UnionRect
MessageBoxExA
DrawTextA
IsCharLowerA
GetDoubleClickTime
CharUpperBuffA
CopyIcon
LoadImageW
SetMenuDefaultItem
TrackPopupMenu
LoadIconA
SetForegroundWindow
LoadMenuW
GetMenuItemID
GetCursorPos
SetFocus
SetParent
GetTopWindow
SetWindowLongA
IsWindow
SetScrollPos
GetScrollPos
LoadBitmapA
GetClassNameA
GetKeyboardState
CreateAcceleratorTableA
GetMenuDefaultItem
InvertRect
HideCaret
EnableScrollBar
RegisterClipboardFormatA
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
MonitorFromPoint
UpdateLayeredWindow
IsMenu
FrameRect
ReleaseDC
GetWindowTextA
SetWindowRgn
DrawStateA
SetRect
PeekMessageA
ReleaseCapture
ClipCursor
GetDC
SetCapture
InflateRect
RegisterClassA
GetUpdateRect
OpenClipboard
SetClipboardData
GetWindowRgn
SetPropA
SubtractRect
EmptyClipboard
CallNextHookEx
CloseClipboard
GetDlgCtrlID
GetWindow
SendMessageA
MoveWindow
AdjustWindowRectEx
ClientToScreen
GetClientRect
EndPaint
BeginPaint
EnableWindow
InvalidateRect
wsprintfA
GetSystemMenu
WaitForInputIdle
DrawMenuBar
GetSystemMetrics
CopyRect
FillRect
DrawFocusRect
RedrawWindow
GetSysColor
PtInRect
GetFocus
GetParent
GetWindowLongA
GetKeyState
SetTimer
KillTimer
OffsetRect
GetWindowRect
LoadIconW
LoadBitmapW
DispatchMessageA
TranslateMessage
PostMessageA
MessageBeep
GetIconInfo
DrawIcon
LoadCursorA
DefWindowProcA
GetClassInfoA
ScreenToClient
EnumChildWindows
UpdateWindow
ShowWindow
FindWindowA
GetSubMenu
ModifyMenuA
IsWindowVisible
LoadImageA
LockWindowUpdate
gdi32
EndDoc
CreateRoundRectRgn
RoundRect
GetTextExtentPoint32A
GetBkColor
GetTextColor
CreatePalette
CreateRectRgnIndirect
GetCurrentObject
DeleteDC
CreateDIBSection
GetPaletteEntries
RealizePalette
SelectPalette
SetPaletteEntries
CopyMetaFileA
CreateDCA
SetTextColor
SetBkColor
CreateBitmap
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
EndPage
StartPage
StartDocA
DPtoLP
GetDeviceCaps
SwapBuffers
CreateFontA
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
FloodFill
GetPixel
Rectangle
Ellipse
GetStockObject
CreateSolidBrush
GetCharWidthA
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontIndirectA
CreatePen
GetObjectA
AbortDoc
DeleteObject
SelectObject
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
GetObjectType
CreateHatchBrush
PatBlt
SetRectRgn
CombineRgn
GetMapMode
StretchDIBits
GetTextMetricsA
CreateFontW
SetAbortProc
SetPixelV
ExtFloodFill
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
EnumFontFamiliesExA
SetPixel
StretchBlt
SetDIBColorTable
OffsetRgn
GetSystemPaletteEntries
GetNearestPaletteIndex
Polygon
Polyline
CreatePolygonRgn
GetWindowOrgEx
GetTextExtentPoint32W
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
GetRgnBox
LPtoDP
CreateEllipticRgn
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
GetViewportOrgEx
GetTextExtentPointA
msimg32
AlphaBlend
TransparentBlt
GradientFill
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
GetJobA
DocumentPropertiesA
ClosePrinter
advapi32
SetFileSecurityA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueA
RegOpenKeyExW
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegEnumKeyExA
GetFileSecurityA
shell32
SHGetSpecialFolderLocation
SHBrowseForFolderA
ShellExecuteA
Shell_NotifyIconA
SHGetFileInfoA
DragFinish
SHAppBarMessage
SHGetPathFromIDListA
SHGetDesktopFolder
ExtractIconA
SHAddToRecentDocs
DragQueryFileA
comctl32
ImageList_GetIconSize
shlwapi
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathRemoveFileSpecW
PathIsUNCA
ole32
CoTaskMemFree
StringFromCLSID
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoUninitialize
CoCreateInstance
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
CoInitialize
CreateStreamOnHGlobal
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoRegisterMessageFilter
CoRevokeClassObject
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
CoLockObjectExternal
CoInitializeEx
oleaut32
SysAllocString
OleCreateFontIndirect
VarBstrFromDate
SafeArrayDestroy
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringByteLen
SysFreeString
VarUdateFromDate
SystemTimeToVariantTime
VariantCopy
VariantTimeToSystemTime
ws2_32
WSAStartup
WSASetLastError
WSACleanup
oledlg
ord8
odbc32
ord9
ord41
ord10
ord61
ord3
ord16
ord2
ord1
ord15
ord11
ord14
ord5
ord51
ord50
ord45
ord13
ord18
winmm
PlaySoundA
lacewing
?Initialise@Lacewing@@YA_N_N@Z
?SetWelcomeMessage@Server@Lacewing@@QAEXPBD@Z
?RegisterHandlerConnect@Server@Lacewing@@QAEXP6A?AW4Type@Control@2@AAV12@AAUClient@12@W43DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerDisconnect@Server@Lacewing@@QAEXP6AXAAV12@AAUClient@12@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerError@Server@Lacewing@@QAEXP6AXAAV12@AAVError@2@@ZW4Type@HandlerMode@2@@Z
?RegisterHandlerServerMessage@Server@Lacewing@@QAEXP6AXAAV12@AAUClient@12@W4Type@TransmissionMode@2@HPADHH@ZW44HandlerMode@2@@Z
?RegisterHandlerChannelMessage@Server@Lacewing@@QAEXP6A?AW4Type@Control@2@AAV12@AAUClient@12@AAUChannel@12@W43TransmissionMode@2@HPADHH@ZW43HandlerMode@2@@Z
?RegisterHandlerPeerMessage@Server@Lacewing@@QAEXP6A?AW4Type@Control@2@AAV12@AAUClient@12@AAUChannel@12@1W43TransmissionMode@2@HPADHH@ZW43HandlerMode@2@@Z
?RegisterHandlerJoinChannel@Server@Lacewing@@QAEXP6A?AW4Type@Control@2@AAV12@AAUClient@12@PADW43DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerLeaveChannel@Server@Lacewing@@QAEXP6A?AW4Type@Control@2@AAV12@AAUClient@12@AAUChannel@12@W43DenyStatus@2@@ZW43HandlerMode@2@@Z
?RegisterHandlerSetName@Server@Lacewing@@QAEXP6A?AW4Type@Control@2@AAV12@AAUClient@12@PADW43DenyStatus@2@@ZW43HandlerMode@2@@Z
?Host@Server@Lacewing@@QAEXH_N@Z
??0Server@Lacewing@@QAE@XZ
??1Server@Lacewing@@QAE@XZ
?EndClientLoop@Server@Lacewing@@QAEXH@Z
?Disconnect@Client@Server@Lacewing@@QAEXXZ
?ClientLoop@Server@Lacewing@@QAEHH@Z
?ClientLoopIndex@Server@Lacewing@@QAEAAUClient@12@H@Z
?Send@Client@Server@Lacewing@@QAEXHPBDHH@Z
?Free@Lacewing@@YAXXZ
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
gdiplus
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusShutdown
GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipDrawImageI
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 479KB - Virtual size: 478KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 211KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ