17a3c8d822309ce792bcfaac2f1b52eda4974ebfce17a5a7c9821daf6b5fc61f

Sharing

Copy URL

Twitter E-mail

General

Target

17a3c8d822309ce792bcfaac2f1b52eda4974ebfce17a5a7c9821daf6b5fc61f
Size

10.6MB
MD5

d069812aa63b631897498621de353519
SHA1

6b0cd7ae05f88d474c361fab658bf4b70c434cd4
SHA256

17a3c8d822309ce792bcfaac2f1b52eda4974ebfce17a5a7c9821daf6b5fc61f
SHA512

6dbee994501a4179e7cbbde3a46d26701f046f806b124c671284b8ac12abcfb428816eea4980c807e7588e5fa0005f9a585f23501eb5494e43049dc35602e27b
SSDEEP

196608:liNPuXPM0cjq/RLx5xsDT/wY//Z/V4On1OFn:sJuXPM0aqFxO9H13o

Score

N/A

Malware Config

Signatures

Files

17a3c8d822309ce792bcfaac2f1b52eda4974ebfce17a5a7c9821daf6b5fc61f
.iso
WerFault.exe
.exe windows x64

d50c87d8e7d63062a03c4ecd33530fd6

Code Sign

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

Issuer

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/05/2022, 19:23

Not After

04/05/2023, 19:23

Subject

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:07:76:56:00:00:00:00:00:08
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2011, 18:41

Not After

19/10/2026, 18:51

Subject

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

27:9c:68:eb:8f:d5:32:54:95:9d:5c:a2:bd:cc:66:28:b2:69:c3:fa:78:20:c2:33:67:c1:ea:a5:05:c5:a1:27
Signer

Actual PE Digest

27:9c:68:eb:8f:d5:32:54:95:9d:5c:a2:bd:cc:66:28:b2:69:c3:fa:78:20:c2:33:67:c1:ea:a5:05:c5:a1:27

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

15/12/2022, 14:00
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

isspace
tolower
_wtoi64
wcsstr
wcsncmp
toupper
_wcstoui64
malloc
_purecall
memmove_s
_snwscanf_s
wcsrchr
_wtoi
wcspbrk
towlower
wcschr
iswspace
_wcsicmp
_wcsnicmp
_vscwprintf
wcscpy_s
wcscmp
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
_onexit
__dllonexit
_unlock
_lock
_commode
_fmode
_initterm
__setusermatherr
_cexit
_exit
exit
memset
_callnewh
__set_app_type
__wgetmainargs
_amsg_exit
_XcptFilter
free
__C_specific_handler
swprintf_s
wcscat_s
_vsnprintf_s
??0exception@@QEAA@AEBV0@@Z
wcsncpy_s
realloc
_CxxThrowException
memcmp
memcpy
??0exception@@QEAA@XZ
memmove
??1exception@@UEAA@XZ
memcpy_s
_vsnwprintf
__CxxFrameHandler3

cryptsp

CryptAcquireContextW
CryptReleaseContext

api-ms-win-core-libraryloader-l1-2-0

FreeLibraryAndExitThread
GetProcAddress
LoadStringW
GetModuleHandleW
LoadLibraryExW
FreeLibrary
GetModuleHandleExW
GetModuleFileNameA

api-ms-win-core-synch-l1-1-0

AcquireSRWLockExclusive
LeaveCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
SetEvent
CreateEventW
ResetEvent
CreateMutexExW
OpenSemaphoreW
WaitForSingleObjectEx
ReleaseMutex
WaitForSingleObject
OpenEventW
CreateMutexW
ReleaseSemaphore
CreateSemaphoreExW
InitializeCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
OpenMutexW
EnterCriticalSection
InitializeCriticalSectionEx
InitializeSRWLock

api-ms-win-core-heap-l1-1-0

HeapFree
HeapAlloc
GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

GetLastError
SetUnhandledExceptionFilter
SetLastError
UnhandledExceptionFilter
SetErrorMode

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId
SetThreadPriority
CreateProcessW
GetExitCodeThread
CreateThread
GetCurrentProcessId
GetThreadId
GetThreadPriority
GetCurrentThread
GetProcessTimes
SetPriorityClass
GetPriorityClass
GetCurrentProcess
OpenProcessToken
TerminateProcess
GetProcessId
OpenThread

api-ms-win-core-localization-l1-2-0

FormatMessageW
GetUserGeoID
LCMapStringW
GetThreadUILanguage
GetSystemDefaultLangID

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
DebugBreak
OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle
DuplicateHandle

api-ms-win-eventing-provider-l1-1-0

EventRegister
EventSetInformation
EventUnregister
EventWriteTransfer
EventProviderEnabled
EventWrite

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle
Sleep
WaitOnAddress

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCompareMemory

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-sysinfo-l1-1-0

GlobalMemoryStatusEx
GetWindowsDirectoryW
GetTickCount
GetVersionExW
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemDirectoryW
GetTickCount64

api-ms-win-core-string-l1-1-0

CompareStringW
MultiByteToWideChar
GetStringTypeExW

api-ms-win-core-heap-l2-1-0

LocalFree
LocalAlloc

api-ms-win-core-wow64-l1-1-1

IsWow64Process2
GetSystemWow64DirectoryW

api-ms-win-core-com-l1-1-0

CoTaskMemFree
ProgIDFromCLSID
CoUninitialize
CoInitializeEx
CoSetProxyBlanket
CoUnmarshalInterface
CLSIDFromString
CoCreateInstance
CoTaskMemAlloc

oleaut32

SysAllocStringLen
SysFreeString

api-ms-win-security-base-l1-1-0

GetTokenInformation
CreateWellKnownSid
SetKernelObjectSecurity
SetSecurityDescriptorDacl
GetSidSubAuthority
FreeSid
InitializeSecurityDescriptor
GetSidSubAuthorityCount
IsValidSid
GetLengthSid
CopySid
EqualSid
AllocateAndInitializeSid
GetKernelObjectSecurity
GetSecurityDescriptorDacl
CheckTokenMembership

api-ms-win-core-version-l1-1-0

VerQueryValueW
GetFileVersionInfoSizeExW
GetFileVersionInfoExW

api-ms-win-core-file-l1-1-0

GetDriveTypeW
QueryDosDeviceW
GetLongPathNameW
GetFileAttributesW
GetLogicalDriveStringsW
GetDiskFreeSpaceExW
CreateDirectoryW
GetTempFileNameW
CompareFileTime
FindNextFileW
SetFileAttributesW
GetFinalPathNameByHandleW
SetFileInformationByHandle
CreateFileW
DeleteFileW
GetFileSize
FindFirstFileW
WriteFile
ReadFile
FindClose
GetFileAttributesExW
FileTimeToLocalFileTime

api-ms-win-core-memory-l1-1-0

OpenFileMappingW
VirtualFree
VirtualAlloc
VirtualQuery
UnmapViewOfFile
MapViewOfFile
ReadProcessMemory
CreateFileMappingW
VirtualQueryEx

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegCloseKey
RegSetKeySecurity
RegCreateKeyExW
RegDeleteTreeW
RegQueryValueExW
RegQueryInfoKeyW
RegSetValueExW
RegEnumValueW
RegGetValueW
RegDeleteValueW
RegGetKeySecurity
RegEnumKeyExW

api-ms-win-core-psapi-l1-1-0

K32GetModuleFileNameExW
QueryFullProcessImageNameW
K32EnumProcessModules

api-ms-win-core-sysinfo-l1-2-0

GetNativeSystemInfo
GetProductInfo

api-ms-win-core-processthreads-l1-1-1

OpenProcess
GetThreadTimes
GetThreadContext

api-ms-win-service-management-l1-1-0

OpenSCManagerW
StartServiceW
CloseServiceHandle
OpenServiceW

api-ms-win-service-management-l2-1-0

QueryServiceConfigW

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer
WaitForThreadpoolWaitCallbacks
CreateThreadpoolTimer
CreateThreadpoolWait
CloseThreadpoolWait
WaitForThreadpoolTimerCallbacks
SetThreadpoolWait
CloseThreadpoolTimer

api-ms-win-core-processenvironment-l1-1-0

GetCommandLineW
GetEnvironmentVariableW
SearchPathW
SetEnvironmentVariableW
ExpandEnvironmentStringsW

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-eventlog-legacy-l1-1-0

DeregisterEventSource
RegisterEventSourceW
ReportEventW

api-ms-win-security-provider-l1-1-0

SetEntriesInAclW

api-ms-win-core-localization-obsolete-l1-2-0

GetUserDefaultUILanguage

ntdll

EtwTraceMessage
EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel
EtwGetTraceEnableFlags
EtwRegisterTraceGuidsW
RtlSecondsSince1970ToTime
EtwUnregisterTraceGuids
NtQueryInformationToken
NtQueryInformationThread
NtQueryInformationProcess
RtlInitUnicodeString
RtlNtStatusToDosError
RtlImageNtHeaderEx
RtlGetVersion
NtOpenEvent
NtQueryEvent
NtClose
NtQueryLicenseValue
RtlNtStatusToDosErrorNoTeb
RtlCompareUnicodeString
NtDeviceIoControlFile
NtAllocateVirtualMemory
NtFreeVirtualMemory
NtSetSystemInformation
RtlAdjustPrivilege
RtlGetUnloadEventTraceEx
RtlSetThreadErrorMode
PssNtCaptureSnapshot
DbgPrint
ZwQueryInformationThread
NtQueryObject
RtlAllocateHeap
DbgPrintEx
ZwQueryWnfStateNameInformation
ZwUpdateWnfStateData
EtwEventWriteNoRegistration
NtWaitForSingleObject
RtlAllocateAndInitializeSid
NtAlpcConnectPort
NtCreateFile
NtQuerySystemInformation
NtSuspendProcess
NtResumeProcess
RtlCreateProcessReflection
NtSystemDebugControl
NtPowerInformation
RtlFreeHeap
NtAlpcSendWaitReceivePort
RtlFreeSid

wer

WerpSetExitListeners
WerpCreateMachineStore
WerpAddTerminationReason
WerpValidateReportKey
WerpGetStorePath
RegisterWaitChainCOMCallback
OpenThreadWaitChainSession
GetThreadWaitChain
CloseThreadWaitChainSession
WerpAuxmdFree
WerpFreeUnmappedVaRanges
WerpFlushImageCache
WerpForceDeferredCollection
WerpTraceSnapshotStatistics
WerpTraceAuxMemDumpStatistics
WerpTraceUnmappedVaRangesStatistics
WerpTraceImageCacheStatistics
WerpResetTransientImageCacheStatistics
WerpStitchedMinidumpVmQueryCallback
WerpStitchedMinidumpVmPreReadCallback
WerpStitchedMinidumpVmPostReadCallback
WerpGetReportFlags
WerpSetReportFlags
WerReportSetUIOption
WerpIsTransportAvailable
WerpRestartApplication
WerpAuxmdInitialize
WerpAuxmdDumpProcessImages
WerpAuxmdDumpRegisteredBlocks
WerpAuxmdFreeCopyBuffer
WerpAuxmdHashVaRanges
WerpAuxmdMapFile
WerpInitializeImageCache
WerpUnmapProcessViews
WerpAddFile
WerpSetReportNamespaceParameter
WerpReportCancel
WerpCreateIntegratorReportId
WerpSetIntegratorReportId
WerpFreeString
WerpSetProcessTimelines
WerReportCreate
WerpReportSprintfParameter
WerpSetTelemetryKernelParams
WerpSetIptEnabled
WerpPromptUser
WerpSetTtdStatus
WerReportAddFile
WerpReserveMachineQueueReportDir
WerpGetReportId
WerpSetCallBack
WerpSetReportIsFatal
WerReportSubmit
WerpGetNumFiles
WerpGetFileByIndex
WerpAddAppCompatData
WerReportAddDump
WerpAddRegisteredDataToReport
WerpGetExtendedDiagData
WerpAddMemoryBlock
WerReportCloseHandle
WerpSetDynamicParameter
WerReportSetParameter
WerpSetEventName
WerpHashApplicationParameters
WerpSetReportApplicationIdentity
WerpSetTelemetryAppParams

api-ms-win-downlevel-shlwapi-l2-1-0

IsOS

dbghelp

SymInitialize
MiniDumpWriteDump
StackWalk64
SymFunctionTableAccess64
SymGetModuleBase64
SymCleanup
SymGetModuleInfoW64

api-ms-win-core-com-private-l1-1-0

CoGetActivationState
CoGetCallState

api-ms-win-core-windowserrorreporting-l1-1-0

WerGetFlags
GetApplicationRestartSettings

api-ms-win-service-private-l1-1-0

I_QueryTagInformation

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW

api-ms-win-core-wow64-l1-1-0

IsWow64Process

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-debug-l1-1-1

CheckRemoteDebuggerPresent

api-ms-win-core-realtime-l1-1-0

QueryUnbiasedInterruptTime

api-ms-win-core-processsnapshot-l1-1-0

PssQuerySnapshot
PssWalkMarkerFree
PssWalkMarkerCreate
PssDuplicateSnapshot

api-ms-win-power-setting-l1-1-0

PowerSettingUnregisterNotification
PowerSettingRegisterNotification

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-eventing-controller-l1-1-0

StopTraceW
StartTraceW

bcrypt

BCryptDestroyHash
BCryptFinishHash
BCryptHashData
BCryptCreateHash

rpcrt4

UuidToStringW
UuidCreate
RpcStringFreeW

api-ms-win-core-file-l2-1-0

MoveFileExW

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

api-ms-win-eventing-legacy-l1-1-0

QueryTraceW
EnableTrace

api-ms-win-core-registry-l2-1-0

RegOpenKeyW
RegDeleteKeyW
RegDeleteKeyA

api-ms-win-core-toolhelp-l1-1-0

Thread32Next
Thread32First
CreateToolhelp32Snapshot
Process32FirstW
Module32FirstW
Module32NextW
Process32NextW

api-ms-win-core-processtopology-obsolete-l1-1-0

GetProcessIoCounters

api-ms-win-shcore-obsolete-l1-1-0

CommandLineToArgvW

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrStrIW

api-ms-win-security-trustee-l1-1-0

BuildSecurityDescriptorW

faultrep

WerpInitiateCrashReporting

Sections

.text
Size: 335KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.imrsiv
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
faultrep.dll
.dll windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Exports

Exports

WerpInitiateCrashReporting

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
file.xls
.xls windows office2003
recent inventory& our specialties.lnk
.lnk

Sharing

General

Malware Config

Signatures

Files

d50c87d8e7d63062a03c4ecd33530fd6

Code Sign

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8dCertificate

Extended Key Usages

61:07:76:56:00:00:00:00:00:08Certificate

Key Usages

27:9c:68:eb:8f:d5:32:54:95:9d:5c:a2:bd:cc:66:28:b2:69:c3:fa:78:20:c2:33:67:c1:ea:a5:05:c5:a1:27Signer

Signature Validations

Verification

15/12/2022, 14:00 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

cryptsp

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-wow64-l1-1-1

api-ms-win-core-com-l1-1-0

oleaut32

api-ms-win-security-base-l1-1-0

api-ms-win-core-version-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-memory-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-psapi-l1-1-0

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-service-management-l1-1-0

api-ms-win-service-management-l2-1-0

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-threadpool-l1-2-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-file-l1-2-0

api-ms-win-eventlog-legacy-l1-1-0

api-ms-win-security-provider-l1-1-0

api-ms-win-core-localization-obsolete-l1-2-0

ntdll

wer

api-ms-win-downlevel-shlwapi-l2-1-0

dbghelp

api-ms-win-core-com-private-l1-1-0

api-ms-win-core-windowserrorreporting-l1-1-0

api-ms-win-service-private-l1-1-0

api-ms-win-core-apiquery-l1-1-0

api-ms-win-core-delayload-l1-1-1

api-ms-win-core-delayload-l1-1-0

api-ms-win-security-sddl-l1-1-0

api-ms-win-core-wow64-l1-1-0

api-ms-win-core-synch-l1-2-1

api-ms-win-core-debug-l1-1-1

api-ms-win-core-realtime-l1-1-0

api-ms-win-core-processsnapshot-l1-1-0

api-ms-win-power-setting-l1-1-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-eventing-controller-l1-1-0

bcrypt

rpcrt4

api-ms-win-core-file-l2-1-0

api-ms-win-core-registry-l1-1-1

api-ms-win-eventing-legacy-l1-1-0

33:00:00:03:8d:b0:bf:e1:b0:ca:33:b3:d4:00:00:00:00:03:8d
Certificate

61:07:76:56:00:00:00:00:00:08
Certificate

27:9c:68:eb:8f:d5:32:54:95:9d:5c:a2:bd:cc:66:28:b2:69:c3:fa:78:20:c2:33:67:c1:ea:a5:05:c5:a1:27
Signer

15/12/2022, 14:00
Valid: false

.text
Size: 335KB - Virtual size: 335KB

.imrsiv
Size: - Virtual size: 4B

.rdata
Size: 103KB - Virtual size: 103KB

.data
Size: 5KB - Virtual size: 7KB

.pdata
Size: 10KB - Virtual size: 9KB

.didat
Size: 1024B - Virtual size: 536B

.rsrc
Size: 90KB - Virtual size: 90KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 512B - Virtual size: 16B

.edata
Size: 512B - Virtual size: 90B

.idata
Size: 512B - Virtual size: 20B