spynote | SpyNote_6[.]4[.]7z

Sharing

Copy URL

Twitter E-mail

General

Target

SpyNote_6.4.7z
Size

34.5MB
MD5

32d06298f234500359e6619ecaeebf50
SHA1

82ad1788141370c7e849321070b65a9e3319a5dc
SHA256

f7b7b60e1af0c608e5e95f45e63efd24a34227811eefa77871505ff0d0208cda
SHA512

3488d0a798a2d76463edd29a5848c3e548d22018262aae32a99db5402def5587ba59a3bfaee50f35abb589876ae61d8e1343813c07f588423af96a739a2f21bb
SSDEEP

786432:rhwCspfUanXJLBfE6e05ij0VdxJh5FqUpyQ2g0s/LpV7/Y3coFo/w3:9YUaXJL6p0IjExfXpD7Lpt/Y3nFoo

Score

10^/10

spynote

Malware Config

Signatures

Spynote family
spynote
Spynote payload 1 IoCs

Processes:

resource yara_rule

sample family_spynote

resource	yara_rule
sample	family_spynote

Requests dangerous framework permissions 17 IoCs

Processes:

description	ioc
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write (but not read) the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Required to be able to access the camera device.	android.permission.CAMERA
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS

Files

SpyNote_6.4.7z
.7z
CoreAudioApi.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Resources/Audio/c.wav
Resources/Audio/v.wav
Resources/Icons/AccountManager/account.png
.png
Resources/Icons/AccountManager/com.android.email.png
.png
Resources/Icons/AccountManager/com.bbm.account.png
.png
Resources/Icons/AccountManager/com.bbm.contacts.png
.png
Resources/Icons/AccountManager/com.dropbox.android.account.png
.png
Resources/Icons/AccountManager/com.facebook.messenger.png
.png
Resources/Icons/AccountManager/com.google.png
.png
Resources/Icons/AccountManager/com.sec.android.app.sns3.twitter.png
.png
Resources/Icons/AccountManager/com.twitter.android.auth.login.png
.png
Resources/Icons/AccountManager/com.whatsapp.png
.png
Resources/Icons/AccountManager/org.telegram.messenger.png
.png
Resources/Icons/AccountManager/org.telegram.plus.png
.png
Resources/Icons/AppProperties/Activities.png
.png
Resources/Icons/AppProperties/Permissions.png
.png
Resources/Icons/AppProperties/Receivers.png
.png
Resources/Icons/Bar/bluetooth.png
.png
Resources/Icons/Bar/gps.png
.png
Resources/Icons/Bar/mobile_data.png
.png
Resources/Icons/Bar/normal.png
.png
Resources/Icons/Bar/silent.png
.png
Resources/Icons/Bar/vibrate.png
.png
Resources/Icons/Bar/wifi_connected.png
.png
Resources/Icons/Bar/wifi_disconnected.png
.png
Resources/Icons/Bar/wifi_rest.png
.png
Resources/Icons/Battery/b0false.png
.png
Resources/Icons/Battery/b0true.png
.png
Resources/Icons/Battery/b100false.png
.png
Resources/Icons/Battery/b100true.png
.png
Resources/Icons/Battery/b10false.png
.png
Resources/Icons/Battery/b10true.png
.png
Resources/Icons/Battery/b20false.png
.png
Resources/Icons/Battery/b20true.png
.png
Resources/Icons/Battery/b30false.png
.png
Resources/Icons/Battery/b30true.png
.png
Resources/Icons/Battery/b40false.png
.png
Resources/Icons/Battery/b40true.png
.png
Resources/Icons/Battery/b50false.png
.png
Resources/Icons/Battery/b50true.png
.png
Resources/Icons/Battery/b60false.png
.png
Resources/Icons/Battery/b60true.png
.png
Resources/Icons/Battery/b70false.png
.png
Resources/Icons/Battery/b70true.png
.png
Resources/Icons/Battery/b80false.png
.png
Resources/Icons/Battery/b80true.png
.png
Resources/Icons/Battery/b90false.png
.png
Resources/Icons/Battery/b90true.png
.png
Resources/Icons/CallsManager/Incoming.png
.png
Resources/Icons/CallsManager/Missed.png
.png
Resources/Icons/CallsManager/Outgoing.png
.png
Resources/Icons/CallsManager/null.png
.png
Resources/Icons/Camera/Flash.png
.png
Resources/Icons/Camera/Foces.png
.png
Resources/Icons/Camera/Multi-Capture.png
.png
Resources/Icons/Camera/Quality.png
.png
Resources/Icons/Camera/SelectCamera.png
.png
Resources/Icons/Camera/Sizes.png
.png
Resources/Icons/Camera/Zoom0.png
.png
Resources/Icons/Camera/Zoom1.png
.png
Resources/Icons/Chat/Cdown.png
.png
Resources/Icons/Chat/c0.png
.png
Resources/Icons/Chat/c1.png
.png
Resources/Icons/Chat/lap.png
.png
Resources/Icons/DPM/f.png
.png
Resources/Icons/DPM/l.png
.png
Resources/Icons/DPM/p.png
.png
Resources/Icons/FileBox/Camera.png
.png
Resources/Icons/FileBox/DCIM.png
.png
Resources/Icons/FileBox/Desktop.png
.png
Resources/Icons/FileBox/Documents.png
.png
Resources/Icons/FileBox/Download.png
.png
Resources/Icons/FileBox/Drive.png
.png
Resources/Icons/FileBox/Left.png
.png
Resources/Icons/FileBox/Pictures.png
.png
Resources/Icons/FileBox/Right.png
.png
Resources/Icons/FileBox/Screenshot.png
.png
Resources/Icons/FileBox/Storage.png
.png
Resources/Icons/FileBox/UserProfile.png
.png
Resources/Icons/FileBox/Videos.png
.png
Resources/Icons/FileBox/folder.png
.png
Resources/Icons/FileManager/-1.png
.png
Resources/Icons/FileManager/.3gp.png
.png
Resources/Icons/FileManager/.aac.png
.png
Resources/Icons/FileManager/.avi.png
.png
Resources/Icons/FileManager/.bmp.png
.png
Resources/Icons/FileManager/.css.png
.png
Resources/Icons/FileManager/.doc.png
.png
Resources/Icons/FileManager/.flac.png
.png
Resources/Icons/FileManager/.flv.png
.png
Resources/Icons/FileManager/.gif.png
.png
Resources/Icons/FileManager/.htm.png
.png
Resources/Icons/FileManager/.html.png
.png
Resources/Icons/FileManager/.ico.png
.png
Resources/Icons/FileManager/.imy.png
.png
Resources/Icons/FileManager/.jpeg.png
.png
Resources/Icons/FileManager/.jpg.png
.png
Resources/Icons/FileManager/.js.png
.png
Resources/Icons/FileManager/.m4a.png
.png
Resources/Icons/FileManager/.mid.png
.png
Resources/Icons/FileManager/.mkv.png
.png
Resources/Icons/FileManager/.mov.png
.png
Resources/Icons/FileManager/.mp3.png
.png
Resources/Icons/FileManager/.mp4.png
.png
Resources/Icons/FileManager/.mxmf.png
.png
Resources/Icons/FileManager/.ogg.png
.png
Resources/Icons/FileManager/.ota.png
.png
Resources/Icons/FileManager/.pdf.png
.png
Resources/Icons/FileManager/.php.png
.png
Resources/Icons/FileManager/.png.png
.png
Resources/Icons/FileManager/.rar.png
.png
Resources/Icons/FileManager/.rtttl.png
.png
Resources/Icons/FileManager/.rtx.png
.png
Resources/Icons/FileManager/.ts.png
.png
Resources/Icons/FileManager/.txt.png
.png
Resources/Icons/FileManager/.wav.png
.png
Resources/Icons/FileManager/.webp.png
.png
Resources/Icons/FileManager/.wmv.png
.png
Resources/Icons/FileManager/.xmf.png
.png
Resources/Icons/FileManager/.xml.png
.png
Resources/Icons/FileManager/.zip.png
.png
Resources/Icons/FileManager/Folder Files.png
.png
Resources/Icons/Flags/-1.png
.png
Resources/Icons/Flags/ad.png
.png
Resources/Icons/Flags/ae.png
.png
Resources/Icons/Flags/af.png
.png
Resources/Icons/Flags/ag.png
.png
Resources/Icons/Flags/ai.png
.png
Resources/Icons/Flags/al.png
.png
Resources/Icons/Flags/am.png
.png
Resources/Icons/Flags/an.png
.png
Resources/Icons/Flags/ao.png
.png
Resources/Icons/Flags/ar.png
.png
Resources/Icons/Flags/as.png
.png
Resources/Icons/Flags/at.png
.png
Resources/Icons/Flags/au.png
.png
Resources/Icons/Flags/aw.png
.png
Resources/Icons/Flags/ax.png
.png
Resources/Icons/Flags/az.png
.png
Resources/Icons/Flags/ba.png
.png
Resources/Icons/Flags/bb.png
.png
Resources/Icons/Flags/bd.png
.png
Resources/Icons/Flags/be.png
.png
Resources/Icons/Flags/bf.png
.png
Resources/Icons/Flags/bg.png
.png
Resources/Icons/Flags/bh.png
.png
Resources/Icons/Flags/bi.png
.png
Resources/Icons/Flags/bj.png
.png
Resources/Icons/Flags/bm.png
.png
Resources/Icons/Flags/bn.png
.png
Resources/Icons/Flags/bo.png
.png
Resources/Icons/Flags/br.png
.png
Resources/Icons/Flags/bs.png
.png
Resources/Icons/Flags/bt.png
.png
Resources/Icons/Flags/bv.png
.png
Resources/Icons/Flags/bw.png
.png
Resources/Icons/Flags/by.png
.png
Resources/Icons/Flags/bz.png
.png
Resources/Icons/Flags/ca.png
.png
Resources/Icons/Flags/catalonia.png
.png
Resources/Icons/Flags/cc.png
.png
Resources/Icons/Flags/cd.png
.png
Resources/Icons/Flags/cf.png
.png
Resources/Icons/Flags/cg.png
.png
Resources/Icons/Flags/ch.png
.png
Resources/Icons/Flags/ci.png
.png
Resources/Icons/Flags/ck.png
.png
Resources/Icons/Flags/cl.png
.png
Resources/Icons/Flags/cm.png
.png
Resources/Icons/Flags/cn.png
.png
Resources/Icons/Flags/co.png
.png
Resources/Icons/Flags/cr.png
.png
Resources/Icons/Flags/cs.png
.png
Resources/Icons/Flags/cu.png
.png
Resources/Icons/Flags/cv.png
.png
Resources/Icons/Flags/cx.png
.png
Resources/Icons/Flags/cy.png
.png
Resources/Icons/Flags/cz.png
.png
Resources/Icons/Flags/de.png
.png
Resources/Icons/Flags/dj.png
.png
Resources/Icons/Flags/dk.png
.png
Resources/Icons/Flags/dm.png
.png
Resources/Icons/Flags/do.png
.png
Resources/Icons/Flags/dz.png
.png
Resources/Icons/Flags/ec.png
.png
Resources/Icons/Flags/ee.png
.png
Resources/Icons/Flags/eg.png
.png
Resources/Icons/Flags/eh.png
.png
Resources/Icons/Flags/england.png
.png
Resources/Icons/Flags/er.png
.png
Resources/Icons/Flags/es.png
.png
Resources/Icons/Flags/et.png
.png
Resources/Icons/Flags/europeanunion.png
.png
Resources/Icons/Flags/fam.png
.png
Resources/Icons/Flags/fi.png
.png
Resources/Icons/Flags/fj.png
.png
Resources/Icons/Flags/fk.png
.png
Resources/Icons/Flags/fm.png
.png
Resources/Icons/Flags/fo.png
.png
Resources/Icons/Flags/fr.png
.png
Resources/Icons/Flags/ga.png
.png
Resources/Icons/Flags/gb.png
.png
Resources/Icons/Flags/gd.png
.png
Resources/Icons/Flags/ge.png
.png
Resources/Icons/Flags/gf.png
.png
Resources/Icons/Flags/gh.png
.png
Resources/Icons/Flags/gi.png
.png
Resources/Icons/Flags/gl.png
.png
Resources/Icons/Flags/gm.png
.png
Resources/Icons/Flags/gn.png
.png
Resources/Icons/Flags/gp.png
.png
Resources/Icons/Flags/gq.png
.png
Resources/Icons/Flags/gr.png
.png
Resources/Icons/Flags/gs.png
.png
Resources/Icons/Flags/gt.png
.png
Resources/Icons/Flags/gu.png
.png
Resources/Icons/Flags/gw.png
.png
Resources/Icons/Flags/gy.png
.png
Resources/Icons/Flags/hk.png
.png
Resources/Icons/Flags/hm.png
.png
Resources/Icons/Flags/hn.png
.png
Resources/Icons/Flags/hr.png
.png
Resources/Icons/Flags/ht.png
.png
Resources/Icons/Flags/hu.png
.png
Resources/Icons/Flags/id.png
.png
Resources/Icons/Flags/ie.png
.png
Resources/Icons/Flags/il.png
.png
Resources/Icons/Flags/in.png
.png
Resources/Icons/Flags/io.png
.png
Resources/Icons/Flags/iq.png
.png
Resources/Icons/Flags/ir.png
.png
Resources/Icons/Flags/is.png
.png
Resources/Icons/Flags/it.png
.png
Resources/Icons/Flags/jm.png
.png
Resources/Icons/Flags/jo.png
.png
Resources/Icons/Flags/jp.png
.png
Resources/Icons/Flags/ke.png
.png
Resources/Icons/Flags/kg.png
.png
Resources/Icons/Flags/kh.png
.png
Resources/Icons/Flags/ki.png
.png
Resources/Icons/Flags/km.png
.png
Resources/Icons/Flags/kn.png
.png
Resources/Icons/Flags/kp.png
.png
Resources/Icons/Flags/kr.png
.png
Resources/Icons/Flags/kw.png
.png
Resources/Icons/Flags/ky.png
.png
Resources/Icons/Flags/kz.png
.png
Resources/Icons/Flags/la.png
.png
Resources/Icons/Flags/lb.png
.png
Resources/Icons/Flags/lc.png
.png
Resources/Icons/Flags/li.png
.png
Resources/Icons/Flags/lk.png
.png
Resources/Icons/Flags/lr.png
.png
Resources/Icons/Flags/ls.png
.png
Resources/Icons/Flags/lt.png
.png
Resources/Icons/Flags/lu.png
.png
Resources/Icons/Flags/lv.png
.png
Resources/Icons/Flags/ly.png
.png
Resources/Icons/Flags/ma.png
.png
Resources/Icons/Flags/mc.png
.png
Resources/Icons/Flags/md.png
.png
Resources/Icons/Flags/me.png
.png
Resources/Icons/Flags/mg.png
.png
Resources/Icons/Flags/mh.png
.png
Resources/Icons/Flags/mk.png
.png
Resources/Icons/Flags/ml.png
.png
Resources/Icons/Flags/mm.png
.png
Resources/Icons/Flags/mn.png
.png
Resources/Icons/Flags/mo.png
.png
Resources/Icons/Flags/mp.png
.png
Resources/Icons/Flags/mq.png
.png
Resources/Icons/Flags/mr.png
.png
Resources/Icons/Flags/ms.png
.png
Resources/Icons/Flags/mt.png
.png
Resources/Icons/Flags/mu.png
.png
Resources/Icons/Flags/mv.png
.png
Resources/Icons/Flags/mw.png
.png
Resources/Icons/Flags/mx.png
.png
Resources/Icons/Flags/my.png
.png
Resources/Icons/Flags/mz.png
.png
Resources/Icons/Flags/na.png
.png
Resources/Icons/Flags/nc.png
.png
Resources/Icons/Flags/ne.png
.png
Resources/Icons/Flags/nf.png
.png
Resources/Icons/Flags/ng.png
.png
Resources/Icons/Flags/ni.png
.png
Resources/Icons/Flags/nl.png
.png
Resources/Icons/Flags/no.png
.png
Resources/Icons/Flags/np.png
.png
Resources/Icons/Flags/nr.png
.png
Resources/Icons/Flags/nu.png
.png
Resources/Icons/Flags/nz.png
.png
Resources/Icons/Flags/om.png
.png
Resources/Icons/Flags/pa.png
.png
Resources/Icons/Flags/pe.png
.png
Resources/Icons/Flags/pf.png
.png
Resources/Icons/Flags/pg.png
.png
Resources/Icons/Flags/ph.png
.png
Resources/Icons/Flags/pk.png
.png
Resources/Icons/Flags/pl.png
.png
Resources/Icons/Flags/pm.png
.png
Resources/Icons/Flags/pn.png
.png
Resources/Icons/Flags/pr.png
.png
Resources/Icons/Flags/ps.png
.png
Resources/Icons/Flags/pt.png
.png
Resources/Icons/Flags/pw.png
.png
Resources/Icons/Flags/py.png
.png
Resources/Icons/Flags/qa.png
.png
Resources/Icons/Flags/re.png
.png
Resources/Icons/Flags/ro.png
.png
Resources/Icons/Flags/rs.png
.png
Resources/Icons/Flags/ru.png
.png
Resources/Icons/Flags/rw.png
.png
Resources/Icons/Flags/sa.png
.png
Resources/Icons/Flags/sb.png
.png
Resources/Icons/Flags/sc.png
.png
Resources/Icons/Flags/scotland.png
.png
Resources/Icons/Flags/sd.png
.png
Resources/Icons/Flags/se.png
.png
Resources/Icons/Flags/sg.png
.png
Resources/Icons/Flags/sh.png
.png
Resources/Icons/Flags/si.png
.png
Resources/Icons/Flags/sj.png
.png
Resources/Icons/Flags/sk.png
.png
Resources/Icons/Flags/sl.png
.png
Resources/Icons/Flags/sm.png
.png
Resources/Icons/Flags/sn.png
.png
Resources/Icons/Flags/so.png
.png
Resources/Icons/Flags/sr.png
.png
Resources/Icons/Flags/st.png
.png
Resources/Icons/Flags/sv.png
.png
Resources/Icons/Flags/sy.png
.png
Resources/Icons/Flags/sz.png
.png
Resources/Icons/Flags/tc.png
.png
Resources/Icons/Flags/td.png
.png
Resources/Icons/Flags/tf.png
.png
Resources/Icons/Flags/tg.png
.png
Resources/Icons/Flags/th.png
.png
Resources/Icons/Flags/tj.png
.png
Resources/Icons/Flags/tk.png
.png
Resources/Icons/Flags/tl.png
.png
Resources/Icons/Flags/tm.png
.png
Resources/Icons/Flags/tn.png
.png
Resources/Icons/Flags/to.png
.png
Resources/Icons/Flags/tr.png
.png
Resources/Icons/Flags/tt.png
.png
Resources/Icons/Flags/tv.png
.png
Resources/Icons/Flags/tw.png
.png
Resources/Icons/Flags/tz.png
.png
Resources/Icons/Flags/ua.png
.png
Resources/Icons/Flags/ug.png
.png
Resources/Icons/Flags/um.png
.png
Resources/Icons/Flags/us.png
.png
Resources/Icons/Flags/uy.png
.png
Resources/Icons/Flags/uz.png
.png
Resources/Icons/Flags/va.png
.png
Resources/Icons/Flags/vc.png
.png
Resources/Icons/Flags/ve.png
.png
Resources/Icons/Flags/vg.png
.png
Resources/Icons/Flags/vi.png
.png
Resources/Icons/Flags/vn.png
.png
Resources/Icons/Flags/vu.png
.png
Resources/Icons/Flags/wales.png
.png
Resources/Icons/Flags/wf.png
.png
Resources/Icons/Flags/ws.png
.png
Resources/Icons/Flags/ye.png
.png
Resources/Icons/Flags/yt.png
.png
Resources/Icons/Flags/za.png
.png
Resources/Icons/Flags/zm.png
.png
Resources/Icons/Flags/zw.png
.png
Resources/Icons/Location/ErrorImage.png
.png
Resources/Icons/Location/InitialImage.png
.png
Resources/Icons/Location/Zoom0.png
.png
Resources/Icons/Location/Zoom1.png
.png
Resources/Icons/Location/roadmap.png
.png
Resources/Icons/Location/satellite.png
.png
Resources/Icons/Logo/Logo.png
.jpg
Resources/Icons/Microphone/1SoundTemplate/Template.png
.png
Resources/Icons/Microphone/AudioSource.png
.png
Resources/Icons/Microphone/SampleRate.png
.png
Resources/Icons/NFD/nf.png
.png
Resources/Icons/NetworkStatus/MD2G.png
.png
Resources/Icons/NetworkStatus/MD3G.png
.png
Resources/Icons/NetworkStatus/MD4G.png
.png
Resources/Icons/NetworkStatus/w0.png
.png
Resources/Icons/NetworkStatus/w1.png
.png
Resources/Icons/NetworkStatus/w2.png
.png
Resources/Icons/NetworkStatus/w3.png
.png
Resources/Icons/NetworkStatus/w4.png
.png
Resources/Icons/Note/Ndown.png
.png
Resources/Icons/Note/Nup.png
.png
Resources/Icons/Payload/Bi.png
.png
Resources/Icons/Payload/b0.png
.png
Resources/Icons/Payload/b1.png
.png
Resources/Icons/Phone/0.png
.png
Resources/Icons/Phone/1.png
.png
Resources/Icons/Phone/2.png
.png
Resources/Icons/Phone/3.png
.png
Resources/Icons/Phone/4.png
.png
Resources/Icons/Phone/5.png
.png
Resources/Icons/Phone/6.png
.png
Resources/Icons/Phone/7.png
.png
Resources/Icons/Phone/8.png
.png
Resources/Icons/Phone/9.png
.png
Resources/Icons/Phone/a.png
.png
Resources/Icons/Phone/b.png
.png
Resources/Icons/Phone/c.png
.png
Resources/Icons/Phone/rem.png
.png
Resources/Icons/RE/c.png
.png
Resources/Icons/SMS/all.png
.png
Resources/Icons/SMS/failed.png
.png
Resources/Icons/SMS/inbox.png
.png
Resources/Icons/SMS/l.png
.png
Resources/Icons/SMS/outbox.png
.png
Resources/Icons/SMS/queued.png
.png
Resources/Icons/SMS/r.png
.png
Resources/Icons/SMS/sent.png
.png
Resources/Icons/Screen/Key&ScreenOff.png
.png
Resources/Icons/Screen/Key&ScreenOn.png
.png
Resources/Icons/Screen/ScreenOff.png
.png
Resources/Icons/Screen/ScreenOn.png
.png
Resources/Icons/Screen/null.png
.png
Resources/Icons/ScrollBar/bottom-right.png
.png
Resources/Icons/ScrollBar/dfsdf.png
.png
Resources/Icons/Skulls/Attacks.png
.png
Resources/Icons/Skulls/Block.png
.png
Resources/Icons/Skulls/Disconnect.png
.png
Resources/Icons/Skulls/NotReady.png
.png
Resources/Icons/Skulls/Ready.png
.png
Resources/Icons/Skulls/TimeOut.png
.png
Resources/Icons/Skulls/UE.png
.png
Resources/Icons/ToolStrip/0/FolderDownloads.png
.png
Resources/Icons/ToolStrip/0/cmd.png
.png
Resources/Icons/ToolStrip/0/com.png
.png
Resources/Icons/ToolStrip/0/d.png
.png
Resources/Icons/ToolStrip/0/f2.png
.png
Resources/Icons/ToolStrip/0/fir.png
.png
Resources/Icons/ToolStrip/0/folder.png
.png
Resources/Icons/ToolStrip/0/p.png
.png
Resources/Icons/ToolStrip/0/po.png
.png
Resources/Icons/ToolStrip/0/pow.png
.png
Resources/Icons/ToolStrip/0/rDNS.png
.png
Resources/Icons/ToolStrip/0/v.png
.png
Resources/Icons/ToolStrip/Add.png
.png
Resources/Icons/ToolStrip/AddList.png
.png
Resources/Icons/ToolStrip/AutoDelete.png
.png
Resources/Icons/ToolStrip/Check.png
.png
Resources/Icons/ToolStrip/Check1.png
.png
Resources/Icons/ToolStrip/Delete.png
.png
Resources/Icons/ToolStrip/DeleteAll.png
.png
Resources/Icons/ToolStrip/Down.png
.png
Resources/Icons/ToolStrip/Refresh.png
.png
Resources/Icons/ctx_menu/acc.png
.png
Resources/Icons/ctx_menu/ad.png
.png
Resources/Icons/ctx_menu/b.png
.png
Resources/Icons/ctx_menu/c.png
.png
Resources/Icons/ctx_menu/ca.png
.png
Resources/Icons/ctx_menu/cat.png
.png
Resources/Icons/ctx_menu/ch.png
.png
Resources/Icons/ctx_menu/clo.png
.png
Resources/Icons/ctx_menu/cp.png
.png
Resources/Icons/ctx_menu/d.png
.png
Resources/Icons/ctx_menu/del.png
.png
Resources/Icons/ctx_menu/dn.png
.png
Resources/Icons/ctx_menu/ed.png
.png
Resources/Icons/ctx_menu/eff.png
.png
Resources/Icons/ctx_menu/f.png
.png
Resources/Icons/ctx_menu/fd.png
.png
Resources/Icons/ctx_menu/flash.png
.png
Resources/Icons/ctx_menu/foc.png
.png
Resources/Icons/ctx_menu/fun.png
.png
Resources/Icons/ctx_menu/inf.png
.png
Resources/Icons/ctx_menu/k.png
.png
Resources/Icons/ctx_menu/lgs.png
.png
Resources/Icons/ctx_menu/loc.png
.png
Resources/Icons/ctx_menu/ma.png
.png
Resources/Icons/ctx_menu/mc.png
.png
Resources/Icons/ctx_menu/op_app.png
.png
Resources/Icons/ctx_menu/oppf.png
.png
Resources/Icons/ctx_menu/pack.png
.png
Resources/Icons/ctx_menu/pas.png
.png
Resources/Icons/ctx_menu/ph.png
.png
Resources/Icons/ctx_menu/play.png
.png
Resources/Icons/ctx_menu/play_s.png
.png
Resources/Icons/ctx_menu/prg.png
.png
Resources/Icons/ctx_menu/re.png
.png
Resources/Icons/ctx_menu/rec_au.png
.png
Resources/Icons/ctx_menu/ren.png
.png
Resources/Icons/ctx_menu/s.png
.png
Resources/Icons/ctx_menu/sce.png
.png
Resources/Icons/ctx_menu/set.png
.png
Resources/Icons/ctx_menu/setw.png
.png
Resources/Icons/ctx_menu/stop_s.png
.png
Resources/Icons/ctx_menu/t.png
.png
Resources/Icons/ctx_menu/u.png
.png
Resources/Icons/ctx_menu/v.png
.png
Resources/Icons/ctx_menu/zipF.png
.png
Resources/Icons/devico/gp.png
.png
Resources/Icons/pinf/battery.png
.png
Resources/Icons/pinf/device.png
.png
Resources/Icons/pinf/sim.png
.png
Resources/Icons/pinf/system.png
.png
Resources/Icons/pinf/wifi.png
.png
Resources/Icons/terminal/c.png
.png
Resources/Icons/terminal/su.png
.png
Resources/Icons/window/w0.png
.png
Resources/Icons/window/w1.png
.png
Resources/Icons/window/w2.png
.png
Resources/Icons/window/win/0.ico
Resources/Icons/window/win/1.ico
Resources/Icons/window/win/10.ico
Resources/Icons/window/win/11.ico
Resources/Icons/window/win/12.ico
Resources/Icons/window/win/13.ico
Resources/Icons/window/win/14.ico
Resources/Icons/window/win/15.ico
Resources/Icons/window/win/16.ico
Resources/Icons/window/win/17.ico
Resources/Icons/window/win/18.ico
Resources/Icons/window/win/19.ico
Resources/Icons/window/win/2.ico
Resources/Icons/window/win/20.ico
Resources/Icons/window/win/21.ico
Resources/Icons/window/win/22.ico
Resources/Icons/window/win/23.ico
Resources/Icons/window/win/24.ico
Resources/Icons/window/win/25.ico
Resources/Icons/window/win/26.ico
Resources/Icons/window/win/3.ico
Resources/Icons/window/win/4.ico
Resources/Icons/window/win/5.ico
Resources/Icons/window/win/6.ico
Resources/Icons/window/win/7.ico
Resources/Icons/window/win/8.ico
Resources/Icons/window/win/9.ico
Resources/Icons/window/ww0.png
.png
Resources/Icons/window/ww1.png
.png
Resources/Icons/window/ww2.png
.png
Resources/Imports/GeoIP/GeoIP.dat
Resources/Imports/Gsm/GSM.dll
.dll windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Resources/Imports/OBU.inf
Resources/Imports/Payload/SL.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Resources/Imports/Payload/apktool.ascii
Resources/Imports/Payload/apktool.zip
.zip
Resources/Imports/Payload/s.inf
Resources/Imports/Payload/stub.apk
.apk android

cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch.C7

Activities

cmf0.c3b5bm90zq.patch.C7

android.intent.action.MAIN

Permissions

android.permission.FLASHLIGHT
android.permission.CAMERA
android.permission.BLUETOOTH
android.permission.READ_EXTERNAL_STORAGE
android.permission.WRITE_CALL_LOG
com.android.browser.permission.READ_HISTORY_BOOKMARKS
android.permission.SYSTEM_ALERT_WINDOW
android.permission.WRITE_EXTERNAL_STORAGE
android.permission.SET_WALLPAPER
android.permission.SET_WALLPAPER_HINTS
android.permission.RECEIVE_BOOT_COMPLETED
android.permission.KILL_BACKGROUND_PROCESSES
android.permission.VIBRATE
android.permission.CAMERA
android.permission.GET_ACCOUNTS
android.permission.WAKE_LOCK
android.permission.ACCESS_NETWORK_STATE
android.permission.WRITE_CONTACTS
android.permission.READ_CONTACTS
android.permission.RECORD_AUDIO
android.permission.READ_SMS
android.permission.ACCESS_WIFI_STATE
android.permission.CHANGE_WIFI_STATE
android.permission.READ_CALL_LOG
android.permission.INTERNET
android.permission.READ_PHONE_STATE
android.permission.CALL_PHONE
android.permission.ACCESS_COARSE_LOCATION
android.permission.ACCESS_FINE_LOCATION
android.permission.RECEIVE_SMS
android.permission.GET_TASKS
android.permission.PROCESS_OUTGOING_CALLS
android.permission.BROADCAST_PACKAGE_ADDED
android.permission.BROADCAST_PACKAGE_CHANGED
android.permission.BROADCAST_PACKAGE_INSTALL
android.permission.BROADCAST_PACKAGE_REPLACED
com.sec.android.provider.badge.permission.READ
com.sec.android.provider.badge.permission.WRITE
com.htc.launcher.permission.READ_SETTINGS
com.htc.launcher.permission.UPDATE_SHORTCUT
com.sonyericsson.home.permission.BROADCAST_BADGE
com.sonymobile.home.permission.PROVIDER_INSERT_BADGE
com.anddoes.launcher.permission.UPDATE_COUNT
com.majeur.launcher.permission.UPDATE_BADGE
com.huawei.android.launcher.permission.CHANGE_BADGE
com.huawei.android.launcher.permission.READ_SETTINGS
com.huawei.android.launcher.permission.WRITE_SETTINGS
android.permission.READ_APP_BADGE
com.oppo.launcher.permission.READ_SETTINGS
com.oppo.launcher.permission.WRITE_SETTINGS
me.everything.badger.permission.BADGE_COUNT_READ
me.everything.badger.permission.BADGE_COUNT_WRITE

Receivers

cmf0.c3b5bm90zq.patch.C10

android.provider.Telephony.SMS_RECEIVED

cmf0.c3b5bm90zq.patch.C9

android.intent.action.PHONE_STATE
android.intent.action.NEW_OUTGOING_CALL

cmf0.c3b5bm90zq.patch.C13

android.intent.action.BOOT_COMPLETED

cmf0.c3b5bm90zq.patch.C4

android.intent.action.BOOT_COMPLETED

cmf0.c3b5bm90zq.patch.C2

android.app.action.DEVICE_ADMIN_ENABLED
android.app.action.DEVICE_ADMIN_DISABLE_REQUESTED
android.app.action.DEVICE_ADMIN_DISABLED

cmf0.c3b5bm90zq.patch.C3

android.intent.action.PACKAGE_ADDED
android.intent.action.PACKAGE_CHANGED
android.intent.action.PACKAGE_REMOVED
android.intent.action.PACKAGE_INSTALL

cmf0.c3b5bm90zq.patch.C8

android.intent.action.ACTION_POWER_CONNECTED
android.intent.action.ACTION_POWER_DISCONNECTED

Services

cmf0.c3b5bm90zq.patch.C1

android.accessibilityservice.AccessibilityService
Resources/Imports/PlayerJava/PlayerJava.jar
.jar
Resources/Imports/T/sS.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Resources/Imports/Xml/Settings/SpyNote.xml
Resources/Imports/opt.inf
Resources/Imports/platform-tools/pack.inf
Resources/Imports/platform-tools/platform-tools-windows.zip
.zip
Resources/Imports/platform-tools/plwin.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Resources/Imports/terminal/tr.inf
SpyNote_6.4.exe
.exe windows x86

12e12319f1029ec4f8fcbed7e82df162

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
SetLastError
FormatMessageW
GetCurrentProcess
DeviceIoControl
SetFileTime
CloseHandle
CreateDirectoryW
RemoveDirectoryW
CreateFileW
DeleteFileW
CreateHardLinkW
GetShortPathNameW
GetLongPathNameW
MoveFileW
GetFileType
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileAttributesW
GetFileAttributesW
FindClose
FindFirstFileW
FindNextFileW
InterlockedDecrement
GetVersionExW
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
GetModuleFileNameW
GetModuleHandleW
FindResourceW
FreeLibrary
GetProcAddress
GetCurrentProcessId
ExitProcess
SetThreadExecutionState
Sleep
LoadLibraryW
GetSystemDirectoryW
CompareStringW
AllocConsole
FreeConsole
AttachConsole
WriteConsoleW
GetProcessAffinityMask
CreateThread
SetThreadPriority
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventW
CreateSemaphoreW
GetSystemTime
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCPInfo
IsDBCSLeadByte
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
LockResource
GlobalLock
GlobalUnlock
GlobalFree
LoadResource
SizeofResource
SetCurrentDirectoryW
GetExitCodeProcess
GetLocalTime
GetTickCount
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetCommandLineW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
MoveFileExW
GetLocaleInfoW
GetTimeFormatW
GetDateFormatW
GetNumberFormatW
DecodePointer
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
RaiseException
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
LocalFree
RtlUnwind
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
QueryPerformanceFrequency
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
GetStringTypeW
LCMapStringW
FindFirstFileExA
FindNextFileA
IsValidCodePage

oleaut32

SysAllocString
SysFreeString
VariantClear

gdiplus

GdipAlloc
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdiplusShutdown
GdipFree

Sections

.text
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didat
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 22KB - Virtual size: 22KB

.rsrc Size: 1024B - Virtual size: 848B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 736B

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

cmf0.c3b5bm90zq.patch

cmf0.c3b5bm90zq.patch.C7

Activities

cmf0.c3b5bm90zq.patch.C7

Permissions

Receivers

cmf0.c3b5bm90zq.patch.C10

cmf0.c3b5bm90zq.patch.C9

cmf0.c3b5bm90zq.patch.C13

cmf0.c3b5bm90zq.patch.C4

cmf0.c3b5bm90zq.patch.C2

cmf0.c3b5bm90zq.patch.C3

cmf0.c3b5bm90zq.patch.C8

Services

cmf0.c3b5bm90zq.patch.C1

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 18KB - Virtual size: 17KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 20KB - Virtual size: 20KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 12B

12e12319f1029ec4f8fcbed7e82df162

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

oleaut32

gdiplus

Sections

.text Size: 199KB - Virtual size: 198KB

.text
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 1024B - Virtual size: 848B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 736B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 1.5MB - Virtual size: 1.5MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 18KB - Virtual size: 17KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 199KB - Virtual size: 198KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 4KB - Virtual size: 145KB

.didat
Size: 512B - Virtual size: 400B

.rsrc
Size: 120KB - Virtual size: 120KB

.reloc
Size: 9KB - Virtual size: 8KB