General

Malware Config

Signatures

Files

• LDPlayer9_es_com.projz.z.android_3210_ld.exe

  .exe windows x86

  d4760bd429d30c812f7b07bc64aa8d77

  
  

  Code Sign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  21-09-2022 00:00

  Not After

  21-11-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0d:65:08:23:68:f9:43:30:12:3c:9a:85:3a:2f:de:bf

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  24-11-2021 00:00

  Not After

  26-11-2024 23:59

  Subject

  SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Chang Zhi Network Technology Co\,. Ltd.,O=Shanghai Chang Zhi Network Technology Co\,. Ltd.,ST=上海市,C=CN,1.3.6.1.4.1.311.60.2.1.1=#0c09e59889e5ae9ae58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0d:65:08:23:68:f9:43:30:12:3c:9a:85:3a:2f:de:bf

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  24-11-2021 00:00

  Not After

  26-11-2024 23:59

  Subject

  SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Chang Zhi Network Technology Co\,. Ltd.,O=Shanghai Chang Zhi Network Technology Co\,. Ltd.,ST=上海市,C=CN,1.3.6.1.4.1.311.60.2.1.1=#0c09e59889e5ae9ae58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

  Certificate

  Issuer

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Not Before

  21-09-2022 00:00

  Not After

  21-11-2033 23:59

  Subject

  CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  23-03-2022 00:00

  Not After

  22-03-2037 23:59

  Subject

  CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01-08-2022 00:00

  Not After

  09-11-2031 23:59

  Subject

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  fd:ec:16:5d:a6:a3:84:d2:3a:40:09:88:5d:eb:62:03:2e:20:d4:53:41:6f:da:64:de:0d:85:2c:40:aa:54:2d

  Signer

  Actual PE Digest

  fd:ec:16:5d:a6:a3:84:d2:3a:40:09:88:5d:eb:62:03:2e:20:d4:53:41:6f:da:64:de:0d:85:2c:40:aa:54:2d

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Chang Zhi Network Technology Co\,. Ltd.,O=Shanghai Chang Zhi Network Technology Co\,. Ltd.,ST=上海市,C=CN,1.3.6.1.4.1.311.60.2.1.1=#0c09e59889e5ae9ae58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  20-04-2023 04:21

  Valid: true

  Chain 1

  SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Chang Zhi Network Technology Co\,. Ltd.,O=Shanghai Chang Zhi Network Technology Co\,. Ltd.,ST=上海市,C=CN,1.3.6.1.4.1.311.60.2.1.1=#0c09e59889e5ae9ae58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Chain 2

  SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Chang Zhi Network Technology Co\,. Ltd.,O=Shanghai Chang Zhi Network Technology Co\,. Ltd.,ST=上海市,C=CN,1.3.6.1.4.1.311.60.2.1.1=#0c09e59889e5ae9ae58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  90:2b:33:5b:21:fc:e7:69:bc:06:6d:61:f3:8b:20:f0:0a:14:8e:fb

  Signer

  Actual PE Digest

  90:2b:33:5b:21:fc:e7:69:bc:06:6d:61:f3:8b:20:f0:0a:14:8e:fb

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  true

  Verification

  Signing Certificate

  SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Chang Zhi Network Technology Co\,. Ltd.,O=Shanghai Chang Zhi Network Technology Co\,. Ltd.,ST=上海市,C=CN,1.3.6.1.4.1.311.60.2.1.1=#0c09e59889e5ae9ae58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  20-04-2023 04:21

  Valid: true

  Chain 1

  SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Chang Zhi Network Technology Co\,. Ltd.,O=Shanghai Chang Zhi Network Technology Co\,. Ltd.,ST=上海市,C=CN,1.3.6.1.4.1.311.60.2.1.1=#0c09e59889e5ae9ae58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Chain 2

  SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Chang Zhi Network Technology Co\,. Ltd.,O=Shanghai Chang Zhi Network Technology Co\,. Ltd.,ST=上海市,C=CN,1.3.6.1.4.1.311.60.2.1.1=#0c09e59889e5ae9ae58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  advapi32

  RegCloseKey

  RegQueryValueExW

  RegDeleteValueW

  OpenProcessToken

  DuplicateTokenEx

  RegCreateKeyW

  CryptImportKey

  RegOpenKeyW

  CryptGetHashParam

  CryptGenRandom

  CryptAcquireContextA

  CryptDestroyKey

  CryptEncrypt

  CryptDestroyHash

  CryptHashData

  CryptReleaseContext

  CryptCreateHash

  ws2_32

  htonl

  ntohl

  gethostname

  sendto

  recvfrom

  WSAStartup

  freeaddrinfo

  getaddrinfo

  WSAIoctl

  htons

  getsockopt

  getsockname

  getpeername

  WSASetLastError

  select

  __WSAFDIsSet

  WSAGetLastError

  accept

  listen

  closesocket

  shutdown

  recv

  send

  connect

  bind

  ioctlsocket

  setsockopt

  socket

  WSACleanup

  gethostbyname

  inet_addr

  ntohs

  crypt32

  CertFreeCertificateContext

  wldap32

  ord32

  ord46

  ord211

  ord301

  ord200

  ord30

  ord79

  ord35

  ord33

  ord143

  ord27

  ord26

  ord22

  ord41

  ord50

  ord45

  kernel32

  GetFileSizeEx

  GetFileSize

  MoveFileExW

  FindFirstFileW

  FindNextFileW

  DeleteFileW

  FindClose

  RemoveDirectoryW

  GetModuleFileNameW

  ReadFile

  WriteFile

  SetFilePointer

  GetExitCodeProcess

  GetStdHandle

  CreateProcessW

  OpenProcess

  TerminateProcess

  GetModuleHandleW

  GetProcAddress

  Sleep

  GetStartupInfoW

  CreateToolhelp32Snapshot

  Process32FirstW

  Process32NextW

  K32EnumProcessModules

  K32GetModuleFileNameExW

  GetWindowsDirectoryW

  LoadLibraryW

  MultiByteToWideChar

  WideCharToMultiByte

  GetVersionExW

  CreateMutexW

  GetLocalTime

  GlobalLock

  GlobalUnlock

  GlobalAlloc

  GlobalFree

  GetProcessHeap

  HeapAlloc

  HeapFree

  GetCurrentProcess

  GetDiskFreeSpaceExW

  GetVolumeInformationW

  InitializeCriticalSection

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  GetCurrentThreadId

  GetTickCount

  FindResourceW

  LoadResource

  FreeResource

  SizeofResource

  LockResource

  WritePrivateProfileStringW

  WritePrivateProfileStringA

  RaiseException

  InitializeCriticalSectionAndSpinCount

  FindResourceExW

  DecodePointer

  HeapDestroy

  HeapReAlloc

  HeapSize

  SetLastError

  GetLogicalDriveStringsW

  GetDriveTypeW

  DeviceIoControl

  DuplicateHandle

  FreeLibrary

  CreateDirectoryW

  FormatMessageA

  GetTickCount64

  InitializeCriticalSectionEx

  SleepEx

  VerSetConditionMask

  GetSystemDirectoryA

  GetModuleHandleA

  LoadLibraryA

  VerifyVersionInfoA

  WaitForSingleObjectEx

  GetFileType

  PeekNamedPipe

  CreateFileW

  GetFileAttributesExW

  SetEndOfFile

  GetFullPathNameW

  SetEnvironmentVariableA

  WriteConsoleW

  GetTimeZoneInformation

  SystemTimeToTzSpecificLocalTime

  FindFirstFileExW

  SetStdHandle

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  QueryPerformanceCounter

  ReadConsoleW

  FlushFileBuffers

  GetConsoleMode

  GetConsoleCP

  UnregisterWaitEx

  InitializeSListHead

  ReleaseSemaphore

  VirtualProtect

  VirtualFree

  VirtualAlloc

  FreeLibraryAndExitThread

  GetThreadTimes

  OutputDebugStringW

  GetOEMCP

  IsValidCodePage

  AreFileApisANSI

  GetModuleHandleExW

  EnumSystemLocalesW

  GetUserDefaultLCID

  IsValidLocale

  GetLocaleInfoW

  LCMapStringW

  CompareStringW

  CreateSemaphoreW

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCPInfo

  FileTimeToSystemTime

  GetFileInformationByHandle

  FileTimeToLocalFileTime

  SetFilePointerEx

  GetCommandLineW

  UnregisterWait

  RegisterWaitForSingleObject

  SetThreadAffinityMask

  GetProcessAffinityMask

  SetEvent

  CloseHandle

  GetNumaHighestNodeNumber

  DeleteTimerQueueTimer

  ChangeTimerQueueTimer

  CreateTimerQueueTimer

  GetLogicalProcessorInformation

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  GetThreadPriority

  SetThreadPriority

  SwitchToThread

  SignalObjectAndWait

  QueryDepthSList

  InterlockedFlushSList

  InterlockedPushEntrySList

  InterlockedPopEntrySList

  CreateTimerQueue

  RtlUnwind

  IsProcessorFeaturePresent

  IsDebuggerPresent

  LoadLibraryExW

  ExitThread

  CreateThread

  GetCurrentProcessId

  GetUserDefaultUILanguage

  MulDiv

  ExitProcess

  GetCurrentDirectoryW

  GetACP

  GetStringTypeW

  EncodePointer

  GetSystemTimeAsFileTime

  GetCurrentThread

  TerminateThread

  WaitForSingleObject

  CreateEventW

  GetLastError

  WaitForMultipleObjects

  user32

  SetFocus

  GetWindow

  IsWindowVisible

  GetGUIThreadInfo

  InvalidateRgn

  CreateAcceleratorTableW

  MoveWindow

  MonitorFromWindow

  GetMonitorInfoW

  EnableWindow

  CharNextW

  GetActiveWindow

  GetFocus

  GetKeyState

  SetCapture

  ReleaseCapture

  GetUpdateRect

  RegisterClassExW

  GetSysColor

  ClientToScreen

  SetCaretPos

  ShowCaret

  HideCaret

  CreateCaret

  SetRect

  FillRect

  CharPrevW

  GetCaretPos

  GetCaretBlinkTime

  GetWindowTextLengthW

  GetWindowTextW

  SetWindowRgn

  IsZoomed

  IsRectEmpty

  IntersectRect

  MapWindowPoints

  ScreenToClient

  LoadCursorW

  EndPaint

  BeginPaint

  LoadBitmapW

  GetParent

  DrawTextW

  GetClientRect

  GetPropW

  SetPropW

  FindWindowExW

  RegisterClassW

  wsprintfW

  SetWindowTextW

  PostQuitMessage

  CloseWindow

  MessageBoxW

  DestroyWindow

  SetWindowLongW

  CreateWindowExW

  PostMessageW

  DefWindowProcW

  PtInRect

  GetCursorPos

  ReleaseDC

  GetDC

  SetWindowPos

  BringWindowToTop

  SetForegroundWindow

  ShowWindow

  GetWindowLongW

  SendMessageW

  IsIconic

  KillTimer

  SetTimer

  GetWindowRect

  wvsprintfW

  SetCursor

  UnionRect

  OffsetRect

  GetMessageW

  TranslateMessage

  DispatchMessageW

  CallWindowProcW

  IsWindow

  GetClassInfoExW

  InvalidateRect

  gdi32

  SetBkColor

  StretchBlt

  SetStretchBltMode

  CreateDIBSection

  CreatePenIndirect

  CombineRgn

  CreatePatternBrush

  GetObjectA

  CreateRoundRectRgn

  ExtSelectClipRgn

  GetTextMetricsW

  SaveDC

  RestoreDC

  Rectangle

  CreatePen

  CreateFontIndirectW

  MoveToEx

  TextOutW

  SelectClipRgn

  ExtTextOutW

  RoundRect

  LineTo

  GetTextExtentPoint32W

  GetClipBox

  GetCharABCWidthsW

  SetWindowOrgEx

  CreateSolidBrush

  SetBkMode

  SetTextColor

  CreateFontW

  DeleteObject

  BitBlt

  SelectObject

  CreateCompatibleBitmap

  CreateCompatibleDC

  GetStockObject

  GdiFlush

  GetObjectW

  CreateRectRgnIndirect

  DeleteDC

  GetDeviceCaps

  shell32

  SHBrowseForFolderW

  SHGetPathFromIDListW

  SHGetSpecialFolderLocation

  ShellExecuteExW

  ShellExecuteW

  SHGetFolderPathW

  SHGetMalloc

  ord165

  ole32

  CoCreateInstance

  CoTaskMemFree

  CreateStreamOnHGlobal

  OleLockRunning

  CoInitialize

  CLSIDFromString

  CoUninitialize

  CLSIDFromProgID

  oleaut32

  SysFreeString

  SysAllocString

  VariantClear

  VariantInit

  shlwapi

  PathFileExistsW

  StrStrIA

  PathIsRootW

  wininet

  InternetCloseHandle

  InternetOpenW

  InternetConnectW

  HttpOpenRequestW

  HttpSendRequestExW

  HttpEndRequestW

  HttpQueryInfoW

  InternetReadFile

  HttpSendRequestW

  iphlpapi

  GetAdaptersInfo

  comctl32

  _TrackMouseEvent

  ord17

  imm32

  ImmReleaseContext

  ImmSetCompositionFontW

  ImmSetCompositionWindow

  ImmGetVirtualKey

  ImmGetContext

  gdiplus

  GdipDrawImage

  GdipImageGetFrameDimensionsCount

  GdipGetImageHeight

  GdipGetPropertyItem

  GdipGetPropertyItemSize

  GdipImageSelectActiveFrame

  GdipImageGetFrameCount

  GdipAlloc

  GdipFree

  GdiplusStartup

  GdiplusShutdown

  GdipCloneBrush

  GdipDeleteBrush

  GdipCreateLineBrushI

  GdipCloneImage

  GdipDisposeImage

  GdipGetImageGraphicsContext

  GdipCreateBitmapFromScan0

  GdipCreateFromHDC

  GdipDeleteGraphics

  GdipSetCompositingQuality

  GdipSetSmoothingMode

  GdipSetPixelOffsetMode

  GdipSetTextRenderingHint

  GdipSetInterpolationMode

  GdipGraphicsClear

  GdipGetImageWidth

  GdipDrawImageRectI

  GdipDeleteFontFamily

  GdipCreateFontFromDC

  GdipCreateFontFromLogfontA

  GdipDeleteFont

  GdipGetFamily

  GdipDrawString

  GdipCreateStringFormat

  GdipDeleteStringFormat

  GdipSetStringFormatAlign

  GdipSetStringFormatLineAlign

  GdipLoadImageFromStream

  GdipImageGetFrameDimensionsList

  Sections

  .text

  Size: 1.0MB - Virtual size: 1.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 271KB - Virtual size: 270KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 23KB - Virtual size: 59KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2.2MB - Virtual size: 2.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 59KB - Virtual size: 59KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ