09[.]gif[.]dll

Resubmissions

13/02/2023, 15:47

230213-s8dz8sec55 10

13/02/2023, 15:43

230213-s5xceaec35 3

Sharing

Copy URL Twitter E-mail

General

Target

09.gif.dll
Size

525KB
MD5

5aeb6e164f5c212e21d629c0ea46f48f
SHA1

06a1743819db332d3c196a6960b90301c638171e
SHA256

7272f3b71091a0188f10030287ca1e2b6689b6cfd7c91d400bd7d1a4d55213e5
SHA512

d17af00dfa92745e41ad39567fc63bd8d1bec29f5ef856dab9aee317017e09fe565c99fb675999fc7ac9ddea48ff72c87d802c2b34e29fb7a390b49fc493fc47
SSDEEP

12288:XPkOXczzPUMZClzjzbumfoEG1Tn2AK2Y0yC7+:XOnfClzjnum/G1TnVek

Score

1^/10

Malware Config

Signatures

Files

09.gif.dll
.dll windows x86

5684749ec732d84594f077726c28f1da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

_amsg_exit
_initterm
_iob
_lock
_unlock
abort
calloc
free
fwrite
memcmp
memcpy
realloc
strcmp
strlen
strncmp
vfprintf

Exports

Exports

RZ16KCONFIG_CORE_LOGv
RZ16convertToOptions6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZ21perThreadGlobalStaticI22GlobalSharedConfigListEPT_v
RZ23_k_globalMainConfigSyncv
RZ25loadUrlActionRestrictionsRK12KConfigGroup
RZ5qHashN17KConfigIniBackend14BufferFragmentE
RZGVZN9QtPrivate19ValueTypeIsMetaTypeI5QListI4QUrlELb1EE17registerConverterEiE1f
RZGVZN9QtPrivate19ValueTypeIsMetaTypeI5QListIiELb1EE17registerConverterEiE1f
RZN10QByteArrayD1Ev
RZN11KAuthorized15authorizeActionERK7QString
RZN11KAuthorized16authorizeKActionERK7QString
RZN11KAuthorized22allowUrlActionInternalERK7QStringRK4QUrlS5_
RZN11KAuthorized22authorizeControlModuleERK7QString
RZN11KAuthorized23authorizeControlModulesERK11QStringList
RZN11KAuthorized26authorizeUrlActionInternalERK7QStringRK4QUrlS5_S2_S2_
RZN11KAuthorized9authorizeERK7QString
RZN11KConfigBase11deleteGroupEPKc6QFlagsINS_15WriteConfigFlagEE
RZN11KConfigBase11deleteGroupERK10QByteArray6QFlagsINS_15WriteConfigFlagEE
RZN11KConfigBase11deleteGroupERK7QString6QFlagsINS_15WriteConfigFlagEE
RZN11KConfigBase12virtual_hookEiPv
RZN11KConfigBase5groupEPKc
RZN11KConfigBase5groupERK10QByteArray
RZN11KConfigBase5groupERK7QString
RZN11KConfigBaseC1Ev
RZN11KConfigBaseC2Ev
RZN11KConfigBaseD0Ev
RZN11KConfigBaseD1Ev
RZN11KConfigBaseD2Ev
RZN11QMetaTypeIdI5QListI4QUrlEE14qt_metatype_idEv
RZN11QMetaTypeIdI5QListIiEE14qt_metatype_idEv
RZN11QMetaTypeIdIN17QtMetaTypePrivate23QSequentialIterableImplEE14qt_metatype_idEv
RZN12KConfigGroup10writeEntryEPKcRK10QByteArray6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup10writeEntryEPKcRK11QStringList6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup10writeEntryEPKcRK5QListI8QVariantE6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup10writeEntryEPKcRK7QString6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup10writeEntryEPKcRK8QVariant6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup10writeEntryEPKcS1_6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup10writeEntryERK7QStringPKc6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup10writeEntryERK7QStringRK10QByteArray6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup10writeEntryERK7QStringRK11QStringList6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup10writeEntryERK7QStringRK5QListI8QVariantE6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup10writeEntryERK7QStringRK8QVariant6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup10writeEntryERK7QStringS2_6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup11changeGroupEPKc
RZN12KConfigGroup11changeGroupERK7QString
RZN12KConfigGroup11deleteEntryEPKc6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup11deleteEntryERK7QString6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup11deleteGroupE6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup11markAsCleanEv
RZN12KConfigGroup14writePathEntryEPKcRK11QStringList6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup14writePathEntryEPKcRK7QString6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup14writePathEntryERK7QStringRK11QStringList6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup14writePathEntryERK7QStringS2_6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup15deleteGroupImplERK10QByteArray6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup15revertToDefaultEPKc
RZN12KConfigGroup15revertToDefaultEPKc6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup15revertToDefaultERK7QString
RZN12KConfigGroup15revertToDefaultERK7QString6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup17convertToQVariantEPKcRK10QByteArrayRK8QVariant
RZN12KConfigGroup17writeXdgListEntryEPKcRK11QStringList6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup17writeXdgListEntryERK7QStringRK11QStringList6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN12KConfigGroup4syncEv
RZN12KConfigGroup6configEv
RZN12KConfigGroup8reparentEP11KConfigBase6QFlagsINS0_15WriteConfigFlagEE
RZN12KConfigGroup9groupImplERK10QByteArray
RZN12KConfigGroupC1EP11KConfigBasePKc
RZN12KConfigGroupC1EP11KConfigBaseRK7QString
RZN12KConfigGroupC1EPK11KConfigBasePKc
RZN12KConfigGroupC1EPK11KConfigBaseRK7QString
RZN12KConfigGroupC1ERK28QExplicitlySharedDataPointerI13KSharedConfigEPKc
RZN12KConfigGroupC1ERK28QExplicitlySharedDataPointerI13KSharedConfigERK7QString
RZN12KConfigGroupC1ERKS_
RZN12KConfigGroupC1Ev
RZN12KConfigGroupC2EP11KConfigBasePKc
RZN12KConfigGroupC2EP11KConfigBaseRK7QString
RZN12KConfigGroupC2EPK11KConfigBasePKc
RZN12KConfigGroupC2EPK11KConfigBaseRK7QString
RZN12KConfigGroupC2ERK28QExplicitlySharedDataPointerI13KSharedConfigEPKc
RZN12KConfigGroupC2ERK28QExplicitlySharedDataPointerI13KSharedConfigERK7QString
RZN12KConfigGroupC2ERKS_
RZN12KConfigGroupC2Ev
RZN12KConfigGroupD0Ev
RZN12KConfigGroupD1Ev
RZN12KConfigGroupD2Ev
RZN12KConfigGroupaSERKS_
RZN12KDesktopFile11actionGroupERK7QString
RZN12KDesktopFile11locateLocalERK7QString
RZN12KDesktopFile13isDesktopFileERK7QString
RZN12KDesktopFile23isAuthorizedDesktopFileERK7QString
RZN12KDesktopFileC1EN14QStandardPaths16StandardLocationERK7QString
RZN12KDesktopFileC1ERK7QString
RZN12KDesktopFileC2EN14QStandardPaths16StandardLocationERK7QString
RZN12KDesktopFileC2ERK7QString
RZN12KDesktopFileD0Ev
RZN12KDesktopFileD1Ev
RZN12KDesktopFileD2Ev
RZN13KSharedConfig10openConfigERK7QString6QFlagsIN7KConfig8OpenFlagEEN14QStandardPaths16StandardLocationE
RZN13KSharedConfig15openStateConfigERK7QString
RZN13KSharedConfig9groupImplERK10QByteArray
RZN13KSharedConfigC1ERK7QString6QFlagsIN7KConfig8OpenFlagEEN14QStandardPaths16StandardLocationE
RZN13KSharedConfigC2ERK7QString6QFlagsIN7KConfig8OpenFlagEEN14QStandardPaths16StandardLocationE
RZN13KSharedConfigD0Ev
RZN13KSharedConfigD1Ev
RZN13KSharedConfigD2Ev
RZN13URLActionRuleC1ERK10QByteArrayRK7QStringS5_S5_S5_S5_S5_b
RZN13URLActionRuleD1Ev
RZN14KConfigBackend11qt_metacallEN11QMetaObject4CallEiPPv
RZN14KConfigBackend11qt_metacastEPKc
RZN14KConfigBackend16registerMappingsERK9KEntryMap
RZN14KConfigBackend16setLocalFilePathERK7QString
RZN14KConfigBackend16staticMetaObjectE
RZN14KConfigBackend18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
RZN14KConfigBackend6createERK7QStringS2_
RZN14KConfigBackendC1Ev
RZN14KConfigBackendC2Ev
RZN14KConfigBackendD0Ev
RZN14KConfigBackendD1Ev
RZN14KConfigBackendD2Ev
RZN14KConfigPrivate11revertEntryERK10QByteArrayPKc6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN14KConfigPrivate12expandStringERK7QString
RZN14KConfigPrivate13notifyClientsERK5QHashI7QString5QListI10QByteArrayEERKS1_
RZN14KConfigPrivate14changeFileNameERK7QString
RZN14KConfigPrivate16parseConfigFilesEv
RZN14KConfigPrivate16parseGlobalFilesEv
RZN14KConfigPrivate18mappingsRegisteredE
RZN14KConfigPrivate7putDataERK10QByteArrayPKcS2_6QFlagsIN11KConfigBase15WriteConfigFlagEEb
RZN14KConfigPrivate9lockLocalEv
RZN14KConfigPrivate9setLocaleERK7QString
RZN14KConfigPrivateC1E6QFlagsIN7KConfig8OpenFlagEEN14QStandardPaths16StandardLocationE
RZN14KConfigPrivateC2E6QFlagsIN7KConfig8OpenFlagEEN14QStandardPaths16StandardLocationE
RZN14KConfigPrivateD0Ev
RZN14KConfigPrivateD1Ev
RZN14KConfigWatcher11qt_metacallEN11QMetaObject4CallEiPPv
RZN14KConfigWatcher11qt_metacastEPKc
RZN14KConfigWatcher13configChangedERK12KConfigGroupRK5QListI10QByteArrayE
RZN14KConfigWatcher16staticMetaObjectE
RZN14KConfigWatcher18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
RZN14KConfigWatcher26onConfigChangeNotificationERK5QHashI7QString5QListI10QByteArrayEE
RZN14KConfigWatcher6createERK28QExplicitlySharedDataPointerI13KSharedConfigE
RZN14KConfigWatcherC1ERK28QExplicitlySharedDataPointerI13KSharedConfigE
RZN14KConfigWatcherC2ERK28QExplicitlySharedDataPointerI13KSharedConfigE
RZN14KConfigWatcherD0Ev
RZN14KConfigWatcherD1Ev
RZN14KConfigWatcherD2Ev
RZN14KEMailSettings10setDefaultERK7QString
RZN14KEMailSettings10setProfileERK7QString
RZN14KEMailSettings10setSettingENS_7SettingERK7QString
RZN14KEMailSettingsC1Ev
RZN14KEMailSettingsC2Ev
RZN14KEMailSettingsD1Ev
RZN14KEMailSettingsD2Ev
RZN14QThreadStorageI5QHashIP13KSharedConfig12QWeakPointerI14KConfigWatcherEEE10deleteDataEPv
RZN14QThreadStorageIP22GlobalSharedConfigListE10deleteDataEPv
RZN15QtSharedPointer33ExternalRefCountWithCustomDeleterI14KConfigWatcherNS_13NormalDeleterEE7deleterEPNS_20ExternalRefCountDataE
RZN17KConfigIniBackend11charFromHexEPKcRK5QFilei
RZN17KConfigIniBackend11parseConfigERK10QByteArrayR9KEntryMap6QFlagsIN14KConfigBackend11ParseOptionEE
RZN17KConfigIniBackend11parseConfigERK10QByteArrayR9KEntryMap6QFlagsIN14KConfigBackend11ParseOptionEEb
RZN17KConfigIniBackend11qt_metacallEN11QMetaObject4CallEiPPv
RZN17KConfigIniBackend11qt_metacastEPKc
RZN17KConfigIniBackend11setFilePathERK7QString
RZN17KConfigIniBackend11writeConfigERK10QByteArrayR9KEntryMap6QFlagsIN14KConfigBackend11WriteOptionEE
RZN17KConfigIniBackend12writeEntriesERK10QByteArrayR9QIODeviceRK9KEntryMap
RZN17KConfigIniBackend12writeEntriesERK10QByteArrayR9QIODeviceRK9KEntryMapbRb
RZN17KConfigIniBackend13warningPrologERK5QFilei
RZN17KConfigIniBackend15createEnclosingEv
RZN17KConfigIniBackend16staticMetaObjectE
RZN17KConfigIniBackend17printableToStringEPNS_14BufferFragmentERK5QFilei
RZN17KConfigIniBackend17stringToPrintableERK10QByteArrayNS_10StringTypeE
RZN17KConfigIniBackend18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
RZN17KConfigIniBackend4lockEv
RZN17KConfigIniBackend6unlockEv
RZN17KConfigIniBackendC1Ev
RZN17KConfigIniBackendC2Ev
RZN17KConfigIniBackendD0Ev
RZN17KConfigIniBackendD1Ev
RZN17KConfigIniBackendD2Ev
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListI10QByteArrayE14const_iteratorEE5equalEPKPvS8_
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListI10QByteArrayE14const_iteratorEE6assignEPPvPKS6_
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListI10QByteArrayE14const_iteratorEE7advanceEPPvi
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListI10QByteArrayE14const_iteratorEE7destroyEPPv
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListI4QUrlE14const_iteratorEE5equalEPKPvS8_
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListI4QUrlE14const_iteratorEE6assignEPPvPKS6_
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListI4QUrlE14const_iteratorEE7advanceEPPvi
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListI4QUrlE14const_iteratorEE7destroyEPPv
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListI7QStringE14const_iteratorEE5equalEPKPvS8_
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListI7QStringE14const_iteratorEE6assignEPPvPKS6_
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListI7QStringE14const_iteratorEE7advanceEPPvi
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListI7QStringE14const_iteratorEE7destroyEPPv
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListI8QVariantE14const_iteratorEE5equalEPKPvS8_
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListI8QVariantE14const_iteratorEE6assignEPPvPKS6_
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListI8QVariantE14const_iteratorEE7advanceEPPvi
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListI8QVariantE14const_iteratorEE7destroyEPPv
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListIiE14const_iteratorEE5equalEPKPvS7_
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListIiE14const_iteratorEE6assignEPPvPKS5_
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListIiE14const_iteratorEE7advanceEPPvi
RZN17QtMetaTypePrivate19IteratorOwnerCommonIN5QListIiE14const_iteratorEE7destroyEPPv
RZN17QtMetaTypePrivate23QMetaTypeFunctionHelperI5QListI4QUrlELb1EE8DestructEPv
RZN17QtMetaTypePrivate23QMetaTypeFunctionHelperI5QListI4QUrlELb1EE9ConstructEPvPKv
RZN17QtMetaTypePrivate23QMetaTypeFunctionHelperI5QListIiELb1EE8DestructEPv
RZN17QtMetaTypePrivate23QMetaTypeFunctionHelperI5QListIiELb1EE9ConstructEPvPKv
RZN17QtMetaTypePrivate23QMetaTypeFunctionHelperINS_23QSequentialIterableImplELb1EE8DestructEPv
RZN17QtMetaTypePrivate23QMetaTypeFunctionHelperINS_23QSequentialIterableImplELb1EE9ConstructEPvPKv
RZN17QtMetaTypePrivate23QSequentialIterableImpl10moveToImplI11QStringListEEvPKvPPvNS0_8PositionE
RZN17QtMetaTypePrivate23QSequentialIterableImpl10moveToImplI5QListI10QByteArrayEEEvPKvPPvNS0_8PositionE
RZN17QtMetaTypePrivate23QSequentialIterableImpl10moveToImplI5QListI4QUrlEEEvPKvPPvNS0_8PositionE
RZN17QtMetaTypePrivate23QSequentialIterableImpl10moveToImplI5QListI8QVariantEEEvPKvPPvNS0_8PositionE
RZN17QtMetaTypePrivate23QSequentialIterableImpl10moveToImplI5QListIiEEEvPKvPPvNS0_8PositionE
RZN17QtMetaTypePrivate23QSequentialIterableImpl6atImplI11QStringListEEPKvS4_i
RZN17QtMetaTypePrivate23QSequentialIterableImpl6atImplI5QListI10QByteArrayEEEPKvS6_i
RZN17QtMetaTypePrivate23QSequentialIterableImpl6atImplI5QListI4QUrlEEEPKvS6_i
RZN17QtMetaTypePrivate23QSequentialIterableImpl6atImplI5QListI8QVariantEEEPKvS6_i
RZN17QtMetaTypePrivate23QSequentialIterableImpl6atImplI5QListIiEEEPKvS5_i
RZN17QtMetaTypePrivate23QSequentialIterableImpl7getImplI11QStringListEENS_11VariantDataEPKPvij
RZN17QtMetaTypePrivate23QSequentialIterableImpl7getImplI5QListI10QByteArrayEEENS_11VariantDataEPKPvij
RZN17QtMetaTypePrivate23QSequentialIterableImpl7getImplI5QListI4QUrlEEENS_11VariantDataEPKPvij
RZN17QtMetaTypePrivate23QSequentialIterableImpl7getImplI5QListI8QVariantEEENS_11VariantDataEPKPvij
RZN17QtMetaTypePrivate23QSequentialIterableImpl7getImplI5QListIiEEENS_11VariantDataEPKPvij
RZN17QtMetaTypePrivate23QSequentialIterableImpl8sizeImplI11QStringListEEiPKv
RZN17QtMetaTypePrivate23QSequentialIterableImpl8sizeImplI5QListI10QByteArrayEEEiPKv
RZN17QtMetaTypePrivate23QSequentialIterableImpl8sizeImplI5QListI4QUrlEEEiPKv
RZN17QtMetaTypePrivate23QSequentialIterableImpl8sizeImplI5QListI8QVariantEEEiPKv
RZN17QtMetaTypePrivate23QSequentialIterableImpl8sizeImplI5QListIiEEEiPKv
RZN17QtMetaTypePrivate25ContainerCapabilitiesImplI11QStringListvE10appendImplEPKvS4_
RZN17QtMetaTypePrivate25ContainerCapabilitiesImplI5QListI10QByteArrayEvE10appendImplEPKvS6_
RZN17QtMetaTypePrivate25ContainerCapabilitiesImplI5QListI4QUrlEvE10appendImplEPKvS6_
RZN17QtMetaTypePrivate25ContainerCapabilitiesImplI5QListI8QVariantEvE10appendImplEPKvS6_
RZN17QtMetaTypePrivate25ContainerCapabilitiesImplI5QListIiEvE10appendImplEPKvS5_
RZN19KConfigGroupPrivate13serializeListERK5QListI10QByteArrayE
RZN19KConfigGroupPrivate15deserializeListERK7QString
RZN19KConfigGroupPrivate6createEP11KConfigBaseRK10QByteArraybb
RZN19KConfigGroupPrivateD1Ev
RZN19KConfigSkeletonItem10setToolTipERK7QString
RZN19KConfigSkeletonItem12setWhatsThisERK7QString
RZN19KConfigSkeletonItem13setWriteFlagsE6QFlagsIN11KConfigBase15WriteConfigFlagEE
RZN19KConfigSkeletonItem16readImmutabilityERK12KConfigGroup
RZN19KConfigSkeletonItem16setIsDefaultImplERKSt8functionIFbvEE
RZN19KConfigSkeletonItem17setGetDefaultImplERKSt8functionIF8QVariantvEE
RZN19KConfigSkeletonItem19setIsSaveNeededImplERKSt8functionIFbvEE
RZN19KConfigSkeletonItem6setKeyERK7QString
RZN19KConfigSkeletonItem7setNameERK7QString
RZN19KConfigSkeletonItem8setGroupERK12KConfigGroup
RZN19KConfigSkeletonItem8setGroupERK7QString
RZN19KConfigSkeletonItem8setLabelERK7QString
RZN19KConfigSkeletonItemC1ER26KConfigSkeletonItemPrivateRK7QStringS4_
RZN19KConfigSkeletonItemC1ERK7QStringS2_
RZN19KConfigSkeletonItemC2ER26KConfigSkeletonItemPrivateRK7QStringS4_
RZN19KConfigSkeletonItemC2ERK7QStringS2_
RZN19KConfigSkeletonItemD0Ev
RZN19KConfigSkeletonItemD1Ev
RZN19KConfigSkeletonItemD2Ev
RZN19KCoreConfigSkeleton10ItemDouble10readConfigEP7KConfig
RZN19KCoreConfigSkeleton10ItemDouble11setMaxValueEd
RZN19KCoreConfigSkeleton10ItemDouble11setMinValueEd
RZN19KCoreConfigSkeleton10ItemDouble11setPropertyERK8QVariant
RZN19KCoreConfigSkeleton10ItemDoubleC1ERK7QStringS3_Rdd
RZN19KCoreConfigSkeleton10ItemDoubleC2ERK7QStringS3_Rdd
RZN19KCoreConfigSkeleton10ItemDoubleD0Ev
RZN19KCoreConfigSkeleton10ItemDoubleD1Ev
RZN19KCoreConfigSkeleton10ItemString10readConfigEP7KConfig
RZN19KCoreConfigSkeleton10ItemString11setPropertyERK8QVariant
RZN19KCoreConfigSkeleton10ItemString11writeConfigEP7KConfig
RZN19KCoreConfigSkeleton10ItemStringC1ERK7QStringS3_RS1_S3_NS0_4TypeE
RZN19KCoreConfigSkeleton10ItemStringC2ERK7QStringS3_RS1_S3_NS0_4TypeE
RZN19KCoreConfigSkeleton10ItemStringD0Ev
RZN19KCoreConfigSkeleton10ItemStringD1Ev
RZN19KCoreConfigSkeleton10addItemIntERK7QStringRiiS2_
RZN19KCoreConfigSkeleton10clearItemsEv
RZN19KCoreConfigSkeleton10removeItemERK7QString
RZN19KCoreConfigSkeleton11ItemIntList10readConfigEP7KConfig
RZN19KCoreConfigSkeleton11ItemIntList11setPropertyERK8QVariant
RZN19KCoreConfigSkeleton11ItemIntListC1ERK7QStringS3_R5QListIiERKS5_
RZN19KCoreConfigSkeleton11ItemIntListC2ERK7QStringS3_R5QListIiERKS5_
RZN19KCoreConfigSkeleton11ItemIntListD0Ev
RZN19KCoreConfigSkeleton11ItemIntListD1Ev
RZN19KCoreConfigSkeleton11ItemUrlList10readConfigEP7KConfig
RZN19KCoreConfigSkeleton11ItemUrlList11setPropertyERK8QVariant
RZN19KCoreConfigSkeleton11ItemUrlList11writeConfigEP7KConfig
RZN19KCoreConfigSkeleton11ItemUrlListC1ERK7QStringS3_R5QListI4QUrlERKS6_
RZN19KCoreConfigSkeleton11ItemUrlListC2ERK7QStringS3_R5QListI4QUrlERKS6_
RZN19KCoreConfigSkeleton11ItemUrlListD0Ev
RZN19KCoreConfigSkeleton11ItemUrlListD1Ev
RZN19KCoreConfigSkeleton11addItemBoolERK7QStringRbbS2_
RZN19KCoreConfigSkeleton11addItemPathERK7QStringRS0_S2_S2_
RZN19KCoreConfigSkeleton11addItemRectERK7QStringR5QRectRKS3_S2_
RZN19KCoreConfigSkeleton11addItemSizeERK7QStringR5QSizeRKS3_S2_
RZN19KCoreConfigSkeleton11addItemUIntERK7QStringRjjS2_
RZN19KCoreConfigSkeleton11qt_metacallEN11QMetaObject4CallEiPPv
RZN19KCoreConfigSkeleton11qt_metacastEPKc
RZN19KCoreConfigSkeleton11setDefaultsEv
RZN19KCoreConfigSkeleton11useDefaultsEb
RZN19KCoreConfigSkeleton12ItemDateTime10readConfigEP7KConfig
RZN19KCoreConfigSkeleton12ItemDateTime11setPropertyERK8QVariant
RZN19KCoreConfigSkeleton12ItemDateTimeC1ERK7QStringS3_R9QDateTimeRKS4_
RZN19KCoreConfigSkeleton12ItemDateTimeC2ERK7QStringS3_R9QDateTimeRKS4_
RZN19KCoreConfigSkeleton12ItemDateTimeD0Ev
RZN19KCoreConfigSkeleton12ItemDateTimeD1Ev
RZN19KCoreConfigSkeleton12ItemLongLong10readConfigEP7KConfig
RZN19KCoreConfigSkeleton12ItemLongLong11setMaxValueEx
RZN19KCoreConfigSkeleton12ItemLongLong11setMinValueEx
RZN19KCoreConfigSkeleton12ItemLongLong11setPropertyERK8QVariant
RZN19KCoreConfigSkeleton12ItemLongLongC1ERK7QStringS3_Rxx
RZN19KCoreConfigSkeleton12ItemLongLongC2ERK7QStringS3_Rxx
RZN19KCoreConfigSkeleton12ItemLongLongD0Ev
RZN19KCoreConfigSkeleton12ItemLongLongD1Ev
RZN19KCoreConfigSkeleton12ItemPasswordC1ERK7QStringS3_RS1_S3_
RZN19KCoreConfigSkeleton12ItemPasswordC2ERK7QStringS3_RS1_S3_
RZN19KCoreConfigSkeleton12ItemPasswordD0Ev
RZN19KCoreConfigSkeleton12ItemPasswordD1Ev
RZN19KCoreConfigSkeleton12ItemPathList10readConfigEP7KConfig
RZN19KCoreConfigSkeleton12ItemPathList11writeConfigEP7KConfig
RZN19KCoreConfigSkeleton12ItemPathListC1ERK7QStringS3_R11QStringListRKS4_
RZN19KCoreConfigSkeleton12ItemPathListC2ERK7QStringS3_R11QStringListRKS4_
RZN19KCoreConfigSkeleton12ItemPathListD0Ev
RZN19KCoreConfigSkeleton12ItemPathListD1Ev
RZN19KCoreConfigSkeleton12ItemProperty10readConfigEP7KConfig
RZN19KCoreConfigSkeleton12ItemProperty11setPropertyERK8QVariant
RZN19KCoreConfigSkeleton12ItemPropertyC1ERK7QStringS3_R8QVariantRKS4_
RZN19KCoreConfigSkeleton12ItemPropertyC2ERK7QStringS3_R8QVariantRKS4_
RZN19KCoreConfigSkeleton12ItemPropertyD0Ev
RZN19KCoreConfigSkeleton12ItemPropertyD1Ev
RZN19KCoreConfigSkeleton12addItemInt64ERK7QStringRxxS2_
RZN19KCoreConfigSkeleton12addItemPointERK7QStringR6QPointRKS3_S2_
RZN19KCoreConfigSkeleton13ItemULongLong10readConfigEP7KConfig
RZN19KCoreConfigSkeleton13ItemULongLong11setMaxValueEy
RZN19KCoreConfigSkeleton13ItemULongLong11setMinValueEy
RZN19KCoreConfigSkeleton13ItemULongLong11setPropertyERK8QVariant
RZN19KCoreConfigSkeleton13ItemULongLongC1ERK7QStringS3_Ryy
RZN19KCoreConfigSkeleton13ItemULongLongC2ERK7QStringS3_Ryy
RZN19KCoreConfigSkeleton13ItemULongLongD0Ev
RZN19KCoreConfigSkeleton13ItemULongLongD1Ev
RZN19KCoreConfigSkeleton13addItemDoubleERK7QStringRddS2_
RZN19KCoreConfigSkeleton13addItemStringERK7QStringRS0_S2_S2_
RZN19KCoreConfigSkeleton13addItemUInt64ERK7QStringRyyS2_
RZN19KCoreConfigSkeleton13configChangedEv
RZN19KCoreConfigSkeleton13usrReadConfigEv
RZN19KCoreConfigSkeleton14ItemStringList10readConfigEP7KConfig
RZN19KCoreConfigSkeleton14ItemStringList11setPropertyERK8QVariant
RZN19KCoreConfigSkeleton14ItemStringListC1ERK7QStringS3_R11QStringListRKS4_
RZN19KCoreConfigSkeleton14ItemStringListC2ERK7QStringS3_R11QStringListRKS4_
RZN19KCoreConfigSkeleton14ItemStringListD0Ev
RZN19KCoreConfigSkeleton14ItemStringListD1Ev
RZN19KCoreConfigSkeleton14addItemIntListERK7QStringR5QListIiERKS4_S2_
RZN19KCoreConfigSkeleton14usrSetDefaultsEv
RZN19KCoreConfigSkeleton14usrUseDefaultsEb
RZN19KCoreConfigSkeleton14usrWriteConfigEv
RZN19KCoreConfigSkeleton15addItemDateTimeERK7QStringR9QDateTimeRKS3_S2_
RZN19KCoreConfigSkeleton15addItemLongLongERK7QStringRxxS2_
RZN19KCoreConfigSkeleton15addItemPasswordERK7QStringRS0_S2_S2_
RZN19KCoreConfigSkeleton15addItemPropertyERK7QStringR8QVariantRKS3_S2_
RZN19KCoreConfigSkeleton15setCurrentGroupERK7QString
RZN19KCoreConfigSkeleton15setSharedConfigE28QExplicitlySharedDataPointerI13KSharedConfigE
RZN19KCoreConfigSkeleton16addItemULongLongERK7QStringRyyS2_
RZN19KCoreConfigSkeleton16staticMetaObjectE
RZN19KCoreConfigSkeleton17addItemStringListERK7QStringR11QStringListRKS3_S2_
RZN19KCoreConfigSkeleton18qt_static_metacallEP7QObjectN11QMetaObject4CallEiPPv
RZN19KCoreConfigSkeleton4loadEv
RZN19KCoreConfigSkeleton4readEv
RZN19KCoreConfigSkeleton4saveEv
RZN19KCoreConfigSkeleton6configEv
RZN19KCoreConfigSkeleton7ItemInt10readConfigEP7KConfig
RZN19KCoreConfigSkeleton7ItemInt11setMaxValueEi
RZN19KCoreConfigSkeleton7ItemInt11setMinValueEi
RZN19KCoreConfigSkeleton7ItemInt11setPropertyERK8QVariant
RZN19KCoreConfigSkeleton7ItemIntC1ERK7QStringS3_Rii
RZN19KCoreConfigSkeleton7ItemIntC2ERK7QStringS3_Rii
RZN19KCoreConfigSkeleton7ItemIntD0Ev
RZN19KCoreConfigSkeleton7ItemIntD1Ev
RZN19KCoreConfigSkeleton7ItemUrl10readConfigEP7KConfig
RZN19KCoreConfigSkeleton7ItemUrl11setPropertyERK8QVariant
RZN19KCoreConfigSkeleton7ItemUrl11writeConfigEP7KConfig
RZN19KCoreConfigSkeleton7ItemUrlC1ERK7QStringS3_R4QUrlRKS4_
RZN19KCoreConfigSkeleton7ItemUrlC2ERK7QStringS3_R4QUrlRKS4_
RZN19KCoreConfigSkeleton7ItemUrlD0Ev
RZN19KCoreConfigSkeleton7ItemUrlD1Ev
RZN19KCoreConfigSkeleton7addItemEP19KConfigSkeletonItemRK7QString
RZN19KCoreConfigSkeleton7usrReadEv
RZN19KCoreConfigSkeleton7usrSaveEv
RZN19KCoreConfigSkeleton8ItemBool10readConfigEP7KConfig
RZN19KCoreConfigSkeleton8ItemBool11setPropertyERK8QVariant
RZN19KCoreConfigSkeleton8ItemBoolC1ERK7QStringS3_Rbb
RZN19KCoreConfigSkeleton8ItemBoolC2ERK7QStringS3_Rbb
RZN19KCoreConfigSkeleton8ItemBoolD0Ev
RZN19KCoreConfigSkeleton8ItemBoolD1Ev
RZN19KCoreConfigSkeleton8ItemEnum10readConfigEP7KConfig
RZN19KCoreConfigSkeleton8ItemEnum11writeConfigEP7KConfig
RZN19KCoreConfigSkeleton8ItemEnum17setValueForChoiceERK7QStringS3_
RZN19KCoreConfigSkeleton8ItemEnumC1ERK7QStringS3_RiRK5QListINS0_6ChoiceEEi
RZN19KCoreConfigSkeleton8ItemEnumC2ERK7QStringS3_RiRK5QListINS0_6ChoiceEEi
RZN19KCoreConfigSkeleton8ItemEnumD0Ev
RZN19KCoreConfigSkeleton8ItemEnumD1Ev
RZN19KCoreConfigSkeleton8ItemPathC1ERK7QStringS3_RS1_S3_
RZN19KCoreConfigSkeleton8ItemPathC2ERK7QStringS3_RS1_S3_
RZN19KCoreConfigSkeleton8ItemPathD0Ev
RZN19KCoreConfigSkeleton8ItemPathD1Ev
RZN19KCoreConfigSkeleton8ItemRect10readConfigEP7KConfig
RZN19KCoreConfigSkeleton8ItemRect11setPropertyERK8QVariant
RZN19KCoreConfigSkeleton8ItemRectC1ERK7QStringS3_R5QRectRKS4_
RZN19KCoreConfigSkeleton8ItemRectC2ERK7QStringS3_R5QRectRKS4_
RZN19KCoreConfigSkeleton8ItemRectD0Ev
RZN19KCoreConfigSkeleton8ItemRectD1Ev
RZN19KCoreConfigSkeleton8ItemSize10readConfigEP7KConfig
RZN19KCoreConfigSkeleton8ItemSize11setPropertyERK8QVariant
RZN19KCoreConfigSkeleton8ItemSizeC1ERK7QStringS3_R5QSizeRKS4_
RZN19KCoreConfigSkeleton8ItemSizeC2ERK7QStringS3_R5QSizeRKS4_
RZN19KCoreConfigSkeleton8ItemSizeD0Ev
RZN19KCoreConfigSkeleton8ItemSizeD1Ev
RZN19KCoreConfigSkeleton8ItemUInt10readConfigEP7KConfig
RZN19KCoreConfigSkeleton8ItemUInt11setMaxValueEj
RZN19KCoreConfigSkeleton8ItemUInt11setMinValueEj
RZN19KCoreConfigSkeleton8ItemUInt11setPropertyERK8QVariant
RZN19KCoreConfigSkeleton8ItemUIntC1ERK7QStringS3_Rjj
RZN19KCoreConfigSkeleton8ItemUIntC2ERK7QStringS3_Rjj
RZN19KCoreConfigSkeleton8ItemUIntD0Ev
RZN19KCoreConfigSkeleton8ItemUIntD1Ev
RZN19KCoreConfigSkeleton9ItemPoint10readConfigEP7KConfig
RZN19KCoreConfigSkeleton9ItemPoint11setPropertyERK8QVariant
RZN19KCoreConfigSkeleton9ItemPointC1ERK7QStringS3_R6QPointRKS4_
RZN19KCoreConfigSkeleton9ItemPointC2ERK7QStringS3_R6QPointRKS4_
RZN19KCoreConfigSkeleton9ItemPointD0Ev
RZN19KCoreConfigSkeleton9ItemPointD1Ev
RZN19KCoreConfigSkeletonC1E28QExplicitlySharedDataPointerI13KSharedConfigEP7QObject
RZN19KCoreConfigSkeletonC1ERK7QStringP7QObject
RZN19KCoreConfigSkeletonC2E28QExplicitlySharedDataPointerI13KSharedConfigEP7QObject
RZN19KCoreConfigSkeletonC2ERK7QStringP7QObject
RZN19KCoreConfigSkeletonD0Ev
RZN19KCoreConfigSkeletonD1Ev
RZN19KCoreConfigSkeletonD2Ev
RZN19KDesktopFilePrivateC1EN14QStandardPaths16StandardLocationERK7QString
RZN19KDesktopFilePrivateC2EN14QStandardPaths16StandardLocationERK7QString
RZN19KDesktopFilePrivateD0Ev
RZN19KDesktopFilePrivateD1Ev
RZN21KPropertySkeletonItem10readConfigEP7KConfig
RZN21KPropertySkeletonItem10setDefaultEv
RZN21KPropertySkeletonItem11readDefaultEP7KConfig
RZN21KPropertySkeletonItem11setPropertyERK8QVariant
RZN21KPropertySkeletonItem11swapDefaultEv
RZN21KPropertySkeletonItem11writeConfigEP7KConfig
RZN21KPropertySkeletonItem17setNotifyFunctionERKSt8functionIFvvEE
RZN21KPropertySkeletonItemC1EP7QObjectRK10QByteArrayRK8QVariant
RZN21KPropertySkeletonItemC2EP7QObjectRK10QByteArrayRK8QVariant
RZN21KPropertySkeletonItemD0Ev
RZN21KPropertySkeletonItemD1Ev
RZN26KConfigSkeletonGenericItemI11QStringListE10setDefaultEv
RZN26KConfigSkeletonGenericItemI11QStringListE11readDefaultEP7KConfig
RZN26KConfigSkeletonGenericItemI11QStringListE11swapDefaultEv
RZN26KConfigSkeletonGenericItemI11QStringListE11writeConfigEP7KConfig
RZN26KConfigSkeletonGenericItemI11QStringListE15setDefaultValueERKS0_
RZN26KConfigSkeletonGenericItemI4QUrlE10setDefaultEv
RZN26KConfigSkeletonGenericItemI4QUrlE11readDefaultEP7KConfig
RZN26KConfigSkeletonGenericItemI4QUrlE11swapDefaultEv
RZN26KConfigSkeletonGenericItemI4QUrlE11writeConfigEP7KConfig
RZN26KConfigSkeletonGenericItemI4QUrlE15setDefaultValueERKS0_
RZN26KConfigSkeletonGenericItemI5QListI4QUrlEE10setDefaultEv
RZN26KConfigSkeletonGenericItemI5QListI4QUrlEE11readDefaultEP7KConfig
RZN26KConfigSkeletonGenericItemI5QListI4QUrlEE11swapDefaultEv
RZN26KConfigSkeletonGenericItemI5QListI4QUrlEE11writeConfigEP7KConfig
RZN26KConfigSkeletonGenericItemI5QListI4QUrlEE15setDefaultValueERKS2_
RZN26KConfigSkeletonGenericItemI5QListIiEE10setDefaultEv
RZN26KConfigSkeletonGenericItemI5QListIiEE11readDefaultEP7KConfig
RZN26KConfigSkeletonGenericItemI5QListIiEE11swapDefaultEv
RZN26KConfigSkeletonGenericItemI5QListIiEE11writeConfigEP7KConfig
RZN26KConfigSkeletonGenericItemI5QListIiEE15setDefaultValueERKS1_
RZN26KConfigSkeletonGenericItemI5QRectE10setDefaultEv
RZN26KConfigSkeletonGenericItemI5QRectE11readDefaultEP7KConfig
RZN26KConfigSkeletonGenericItemI5QRectE11swapDefaultEv
RZN26KConfigSkeletonGenericItemI5QRectE11writeConfigEP7KConfig
RZN26KConfigSkeletonGenericItemI5QRectE15setDefaultValueERKS0_
RZN26KConfigSkeletonGenericItemI5QSizeE10setDefaultEv
RZN26KConfigSkeletonGenericItemI5QSizeE11readDefaultEP7KConfig
RZN26KConfigSkeletonGenericItemI5QSizeE11swapDefaultEv
RZN26KConfigSkeletonGenericItemI5QSizeE11writeConfigEP7KConfig
RZN26KConfigSkeletonGenericItemI5QSizeE15setDefaultValueERKS0_
RZN26KConfigSkeletonGenericItemI6QPointE10setDefaultEv
RZN26KConfigSkeletonGenericItemI6QPointE11readDefaultEP7KConfig
RZN26KConfigSkeletonGenericItemI6QPointE11swapDefaultEv
RZN26KConfigSkeletonGenericItemI6QPointE11writeConfigEP7KConfig
RZN26KConfigSkeletonGenericItemI6QPointE15setDefaultValueERKS0_
RZN26KConfigSkeletonGenericItemI7QStringE10setDefaultEv
RZN26KConfigSkeletonGenericItemI7QStringE11readDefaultEP7KConfig
RZN26KConfigSkeletonGenericItemI7QStringE11swapDefaultEv
RZN26KConfigSkeletonGenericItemI7QStringE11writeConfigEP7KConfig
RZN26KConfigSkeletonGenericItemI7QStringE15setDefaultValueERKS0_
RZN26KConfigSkeletonGenericItemI8QVariantE10setDefaultEv
RZN26KConfigSkeletonGenericItemI8QVariantE11readDefaultEP7KConfig
RZN26KConfigSkeletonGenericItemI8QVariantE11swapDefaultEv
RZN26KConfigSkeletonGenericItemI8QVariantE11writeConfigEP7KConfig
RZN26KConfigSkeletonGenericItemI8QVariantE15setDefaultValueERKS0_
RZN26KConfigSkeletonGenericItemI9QDateTimeE10setDefaultEv
RZN26KConfigSkeletonGenericItemI9QDateTimeE11readDefaultEP7KConfig
RZN26KConfigSkeletonGenericItemI9QDateTimeE11swapDefaultEv
RZN26KConfigSkeletonGenericItemI9QDateTimeE11writeConfigEP7KConfig
RZN26KConfigSkeletonGenericItemI9QDateTimeE15setDefaultValueERKS0_
RZN26KConfigSkeletonGenericItemIbE10setDefaultEv
RZN26KConfigSkeletonGenericItemIbE11readDefaultEP7KConfig
RZN26KConfigSkeletonGenericItemIbE11swapDefaultEv
RZN26KConfigSkeletonGenericItemIbE11writeConfigEP7KConfig
RZN26KConfigSkeletonGenericItemIbE15setDefaultValueERKb
RZN26KConfigSkeletonGenericItemIdE10setDefaultEv
RZN26KConfigSkeletonGenericItemIdE11readDefaultEP7KConfig
RZN26KConfigSkeletonGenericItemIdE11swapDefaultEv

Sections

.text
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

5684749ec732d84594f077726c28f1da

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 265KB - Virtual size: 265KB

.data Size: 512B - Virtual size: 164B

.rdata Size: 20KB - Virtual size: 20KB

.bss Size: - Virtual size: 1KB

.edata Size: 82KB - Virtual size: 82KB

.idata Size: 15KB - Virtual size: 15KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 108KB - Virtual size: 106KB

.reloc Size: 11KB - Virtual size: 11KB

.text
Size: 265KB - Virtual size: 265KB

.data
Size: 512B - Virtual size: 164B

.rdata
Size: 20KB - Virtual size: 20KB

.bss
Size: - Virtual size: 1KB

.edata
Size: 82KB - Virtual size: 82KB

.idata
Size: 15KB - Virtual size: 15KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 108KB - Virtual size: 106KB

.reloc
Size: 11KB - Virtual size: 11KB