GUgd
Behavioral task
behavioral1
Sample
Jzg9QJ/2SLFlf.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Jzg9QJ/2SLFlf.exe
Resource
win10v2004-20230703-en
Behavioral task
behavioral3
Sample
s.exe
Resource
win7-20230712-en
General
-
Target
etvc.7z
-
Size
845KB
-
MD5
a141f52c4db63dbad7cd74bcdeb44e48
-
SHA1
460811c69e3064e4084c1984ff82f83101321b2d
-
SHA256
583d4fa37dec3b838b5edde09483bbc33cd3cc29862ec9c53ddb1b4c4ba66570
-
SHA512
d3062344a3bc6ae770be5e5243037d408a82e44d121477527a4b0b3b20d19c6bca63f47daeedf211d1e881b0dfebeb716509deb101f8496940e3cd8c1346e50e
-
SSDEEP
12288:eremow4TvJ3P5Si/81ryAwryZTFtWuFl7xw7lC+Y4z51UnwpuST/GNmYfI365:eruTvJ3P5SiUQA6wGurVw724ay7T/OA2
Malware Config
Signatures
-
resource yara_rule static1/unpack001/s.exe vmprotect -
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Jzg9QJ/2SLFlf.exe unpack001/Jzg9QJ/MFC30.dll unpack001/s.exe
Files
-
etvc.7z.7z
-
Jzg9QJ/2SLFlf.exe.exe windows x86
a26ef61b8f62e78405c8b8c8f5013061
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
lz32
LZSeek
LZOpenFileA
LZClose
LZRead
version
VerQueryValueA
kernel32
lstrcpyA
_lread
_lclose
GetFullPathNameA
lstrcmpA
WideCharToMultiByte
GetLastError
IsDBCSLeadByte
LocalAlloc
lstrcatA
LocalFree
LoadResource
LockResource
FreeResource
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
lstrlenA
MulDiv
Sleep
GetVersion
GetModuleHandleA
GetStartupInfoA
OpenFile
_llseek
user32
SendMessageA
ScrollWindow
GetClientRect
PostMessageA
GetWindowPlacement
SetScrollInfo
InvalidateRect
LoadCursorA
SetCursor
ShowWindow
UpdateWindow
LoadStringA
GetWindowDC
ReleaseDC
GetDesktopWindow
wsprintfA
GetSysColor
FillRect
SetWindowTextA
DestroyIcon
MoveWindow
GetDlgItem
LoadIconA
gdi32
GetDeviceCaps
SetTextColor
CreateSolidBrush
EndDoc
EndPage
AddFontResourceA
StartPage
StartDocA
CreateFontA
DeleteObject
SelectObject
GetTextMetricsA
CreateRectRgn
LineTo
MoveToEx
CreatePen
GetTextExtentPointA
TextOutA
GetTextExtentPoint32A
SetTextAlign
CreateFontIndirectA
SetMapMode
RemoveFontResourceA
GetFontData
EnumFontFamiliesA
mfc30
ord1977
ord467
ord1138
ord1567
ord1516
ord1069
ord341
ord913
ord1038
ord598
ord474
ord824
ord1604
ord1877
ord1645
ord288
ord389
ord348
ord802
ord447
ord470
ord405
ord1254
ord1569
ord821
ord893
ord1806
ord2146
ord1832
ord369
ord1222
ord1174
ord1202
ord636
ord973
ord579
ord597
ord642
ord1235
ord1198
ord460
ord366
ord881
ord1368
ord1941
ord2058
ord1986
ord468
ord367
ord385
ord1041
ord571
ord1251
ord2128
ord1257
ord928
ord908
ord1920
ord1299
ord550
ord1781
ord1345
ord1837
ord874
ord1111
ord1828
ord331
ord982
ord1599
ord1821
ord1915
ord1102
ord1506
ord1103
ord1078
ord1704
ord866
ord1478
ord2129
ord656
ord384
ord2003
ord1413
ord1392
ord438
ord1183
ord399
ord280
ord2037
ord1488
ord1471
ord910
ord1814
ord1479
ord869
ord1344
ord1796
ord1272
ord2127
ord1823
ord1656
msvcrt20
_controlfp
__p__fmode
__p__commode
_except_handler3
__getmainargs
_initterm
__p__acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
?terminate@@YAXXZ
_CxxThrowException
_strdup
free
_strnicmp
??2@YAPAXI@Z
??3@YAXPAX@Z
_stat
sprintf
__CxxFrameHandler
Sections
.text Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Jzg9QJ/MFC30.dll.dll windows x86
1ae05c41c34f23ffa63680799974736f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
GlobalSize
CopyFileA
RtlUnwind
HeapReAlloc
FindNextFileA
RaiseException
GetCommandLineA
ExitThread
TerminateProcess
HeapSize
GetACP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
FatalAppExitA
IsBadWritePtr
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
SetUnhandledExceptionFilter
GetFileSize
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
IsBadCodePtr
SetStdHandle
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileAttributesA
GetProfileStringA
InterlockedExchange
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetCurrentDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
LocalAlloc
SizeofResource
GlobalFlags
GetLastError
GlobalAlloc
lstrcmpA
GetCurrentThread
CreateEventA
SuspendThread
SetThreadPriority
ResumeThread
SetEvent
CloseHandle
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
lstrcpynA
MulDiv
InterlockedDecrement
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
InitializeCriticalSection
ExitProcess
CreateThread
CreateProcessA
WaitForSingleObject
CreateDirectoryA
GetSystemTimeAsFileTime
GetTickCount
Sleep
GetShortPathNameA
GetModuleFileNameA
lstrlenA
GetThreadLocale
HeapFree
IsBadReadPtr
VirtualProtect
GetSystemInfo
GetProcessHeap
HeapAlloc
SetLastError
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualFree
SetHandleCount
VirtualAlloc
user32
GetNextDlgGroupItem
MessageBeep
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
CharUpperA
RegisterClipboardFormatA
RemoveMenu
PostThreadMessageA
DestroyIcon
GetDlgItemInt
CheckRadioButton
CheckDlgButton
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
CopyAcceleratorTableA
GetDialogBaseUnits
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetSysColorBrush
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
wsprintfA
MessageBoxA
GetParent
ScreenToClient
LoadMenuA
GetSubMenu
WindowFromPoint
SetCapture
GetCapture
ClientToScreen
ReleaseCapture
GetMenu
CheckMenuItem
EnableWindow
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
LoadIconA
KillTimer
IsWindowVisible
InvalidateRect
PtInRect
ReleaseDC
GetDC
IsIconic
DrawIcon
GetSystemMetrics
SendMessageA
SetTimer
GetClientRect
GetWindowRect
CharNextA
GetMenuStringA
DeleteMenu
InsertMenuA
GetWindowThreadProcessId
GetPropA
WaitMessage
GetSystemMenu
AppendMenuA
SetRect
GetDesktopWindow
GetClassNameA
MapDialogRect
SetWindowContextHelpId
SetCursor
ShowOwnedPopups
PostQuitMessage
GetMessageA
TranslateMessage
ValidateRect
DestroyMenu
LoadStringA
OemToCharA
CharToOemA
InflateRect
wvsprintfA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetCursorPos
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
EnableMenuItem
ShowWindow
GetDlgItemTextA
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
GetActiveWindow
LoadCursorA
IsDlgButtonChecked
SetDlgItemTextA
CallWindowProcA
SetDlgItemInt
MoveWindow
gdi32
StartDocA
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
DeleteDC
CreateRectRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
ExtCreatePen
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
CreateFontIndirectA
DPtoLP
CreateCompatibleDC
GetTextExtentPoint32A
GetTextMetricsA
GetTextColor
GetBkColor
LPtoDP
CopyMetaFileA
CreateDCA
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
BitBlt
SetPixelV
SelectObject
CreateCompatibleBitmap
CreatePen
GetStockObject
DeleteObject
GetClipRgn
CreateDIBitmap
GetTextExtentPointA
CreateSolidBrush
comdlg32
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegDeleteKeyA
RegCreateKeyA
RegEnumKeyA
RegQueryValueA
RegSetValueA
RegOpenKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
shell32
SHGetFileInfoA
DragFinish
DragAcceptFiles
DragQueryFileA
ExtractAssociatedIconA
ExtractIconA
comctl32
ord17
oledlg
ord8
ole32
OleDuplicateData
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoDisconnectObject
OleRun
CoCreateInstance
CreateBindCtx
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
ReleaseStgMedium
CLSIDFromProgID
CoRegisterMessageFilter
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
CoTaskMemAlloc
olepro32
ord253
oleaut32
SysFreeString
VariantCopy
VariantChangeType
SysReAllocStringLen
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
SysAllocStringByteLen
SysStringByteLen
VarCyFromStr
SysAllocStringLen
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysStringLen
LoadTypeLi
VarBstrFromCy
VariantTimeToSystemTime
VariantClear
winmm
mixerGetLineInfoA
mixerGetDevCapsA
mixerOpen
mixerGetNumDevs
mixerSetControlDetails
mixerGetControlDetailsA
mixerClose
mixerGetLineControlsA
msvfw32
MCIWndCreateA
Exports
Exports
Sections
.text Size: 644KB - Virtual size: 642KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Jzg9QJ/info.txt
-
Jzg9QJ/out.gin
-
s.exe.exe windows x86
2690ae4a939ac6b4e454fafb0a0e0f52
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFlags
GetVersionExA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GetLocaleInfoA
GetCPInfo
GetOEMCP
FlushFileBuffers
SetEndOfFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
RaiseException
RtlUnwind
GetCommandLineA
GetStartupInfoA
HeapSize
ExitProcess
HeapDestroy
HeapCreate
GetStdHandle
SetHandleCount
GetFileType
GetConsoleCP
GetConsoleMode
GetACP
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
GetCurrentThreadId
lstrcmpA
GlobalGetAtomNameA
InterlockedIncrement
InterlockedDecrement
GetModuleHandleA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
GetCurrentProcess
SetFileAttributesA
TerminateProcess
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetFileInformationByHandle
GetFileSize
GetLocalTime
FileTimeToSystemTime
WriteFile
SetFileTime
LocalFileTimeToFileTime
GetCurrentDirectoryA
CreateDirectoryA
ReadFile
CloseHandle
CreateFileA
SystemTimeToFileTime
SetFilePointer
GetTickCount
Sleep
GetSystemTimeAsFileTime
GetSystemInfo
HeapAlloc
GetThreadLocale
GetProcessHeap
HeapFree
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualFree
VirtualAlloc
IsBadReadPtr
SetLastError
VirtualProtect
MoveFileA
GetModuleFileNameA
DeleteFileA
RemoveDirectoryA
GetFileAttributesA
CopyFileA
FindFirstFileA
FindNextFileA
FindClose
CreateFileW
GetEnvironmentVariableA
lstrlenA
CompareStringA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
GetClientRect
GetMenu
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
SetWindowPos
SetWindowLongA
IsWindow
GetDlgItem
GetFocus
GetWindow
GetDlgCtrlID
GetClassNameA
PtInRect
SetWindowTextA
UnregisterClassA
SetWindowsHookExA
CallNextHookEx
DispatchMessageA
GetKeyState
PeekMessageA
ValidateRect
GetWindowTextA
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
PostQuitMessage
DestroyMenu
MessageBoxA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDesktopWindow
GetWindowRect
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ClientToScreen
SetForegroundWindow
MessageBoxA
gdi32
SetMapMode
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
DeleteObject
SetViewportExtEx
GetDeviceCaps
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
wininet
InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionA
InternetOpenA
ole32
CoUninitialize
CoCreateInstance
CoInitialize
oleaut32
VariantClear
VariantChangeType
VariantInit
Exports
Exports
�Dю��~x�zp�XQ� y�����)&G�*̘@l%����豉L�8ރ�@3'��Y��~������g�?�������y����r{�6n��Y��j�FDȿ�M@�0�M���s2�Tgs˿��{�\�_��nJ�1V@8+io..�R�{ߧ�Z,K�\��`Ww��m�����(��䤪���ýb�ǫ-(6��ڜ�4#1�L���^b,#����� �� �8��eV�[���s`����>>�ڗ��1~��g���`*We:1p��i%D�����F_[�������5�IjԔ��A�.�Z��O.r}(����w�C�ޏ5�G!� ��uT�\��i�ٻ�E��>�`zQ���vj�^�䥳� n�\�9�H�����p� ���4%A y�`zt-�=�LR?u���S���Ѧ�ló4z)������I,�8 �����? ����y�]߀������40c/�?��[4�C��B3��&G�K2c�~��Y�8���#�6=�fO���ahr(z����s�7fW����IbP�e�ӍI��u\Q�@�4�?�φE�E�]�m��V\��pϙ���'�knن����oD�'�৵����h+�N}y��$��ڌ&E����dF��k�6p��̩��^l������|�xPnvl�G�O��]�f?�}QGo���j�����;=���ۀ�AMhGrJ0�����q!��4Y�ډ�m�E�5Y��K�z�����T������o� s�B���y��Y��b*��&T����'S�kA/,U���ba��{P�X�O|��o���u�پ#fhn73��sob�N �)���<�]��1���F̲~�Q6t����{� �n�� ��R`J�]���*�j�����8{@��66�� �<tm+� �8��\E�n\�������"�H�|�^�Ed����kp�Lolb�y>5��d�� ��K̺Bޘfij/?��3s�!�MA�8m�I���x��:�A[���5���:���v��s��#�Ys}lDT��.����1��&��Jx-=���i��4���y��s��9�]��=%%�f�9� �C�8�� 9��$"(?t��Wf.B���_It���� lT�)��#�]�����*<(I�LX��:X��W[�ٕB-p3��}�Y�P�����8*#�P&8p�/۷��i��c�I�q�D�c?�W?�iH,���f�P`�~�F-ȒP%<n�}����yT���V�fl0zk� -�:5N�Yx<9Z�?(0��X��$n2���E��8Yy\�sv����sd ;��]����h��ݳΣ�GdEh�~#~�q��u?]�i�x�_�����]P���� ���&snA�F�f���h��FL���*�����i��˳Ӏ�0�n��Im�A�U�A0���5�Ģ�5���k_l�0��|��/P1�mҸ�T�"����Y�s��9'�/�!��n[���r(ޖ���&��5HA��\B\��F�I' �U�(0r���F��r2 !R���g�.�����8E�e4?��:�u� 0-z}^)�fi�pf�s+^���,�������Y{�P����XF�����i+���HP�Φ��3 QgTʆ�b�l�HA9U�Y�.�~d�Y��ZWhM���O��?H;p,8�6_�����wS��FSIQ��Lj�`ߏf�cn��"3�}�<�7�F ,`|�z5�PT��.B<Q��|��N5:=���\���^���~Ȭ���&�/:]� �%Ԙ�'��#����#����"��C��f������D��dU����3b�j"���@=�2&ʄ����0$�c.��!�\�=Ȅ���S{C��0�x�s���B�:'���%?�熪U����J^&%�m�!�w�H9�0텕��,7�$<p����Ӥ�@�4�X�(�2�;�g��#�p�c��ov~�C|�8۠��n �X �� ���U2���6���;O�!�ܱ�$eV �ʔ�ӝ�d+�ݸfI^\9 �D����W��J���#��I��R���;>X�a�H9o�k�dJ<��Ƃ��۲$5_Ķ,Gh�3��M҈������ι����Bm���P��gc�c����.�X��s���x�s�� \�cgY�u͈*�qL y�Lw�J�dE �r�8X�D#��ْ��������d����1?-(���������ab�]Ϭ�d:��D�@���VR�N�'8��V��C|�����6��pY�O������jp��z��*Y8=����5�(p���]��[@����<x�piTw��|z���|�Y�c�5���bp�ӨAY��f��L���u�bt�����֜�[=�[Ȱ�]�� ]F��H��è�/�0��i�;��ld��x��+j[+D[Js����g�̳��L>}����n�{���;."���B�1�误��+*��+��� �͖-�ܨ|W�a� �_3w�Ť0 XZ�O�zA�IK���R`�fn���_w�rI��X>}���U�}~�C������{VX��n����^6���U�{!�Ki������؊]��ɝ��c*eVy�;�{���ڡǯ���Pk�n>?ޠKF�s@�.�R�H���F��:�vq\�ŕJ�wJ'ňu�뫔�� w����T�s{�ڽ��>�ES~.Ȭo��*A[Rn����l�+��fkAf�k��s]8:��$Z�P�x@"�ӛR�O�ՃD�� ���� �O�0Sp;D���,Uc��WC����(E� A$xЃM|A&�Gqgy�-'d:� �v�\����=�������S��5��>N4!^� ��;qŷp�����TwW�*[W���ƀ�|T�d��vX,s�9�0����1�6� =���TSW:,b?�2�S�_����S�_5�{]��Fk,�l}s�U!U�5��������(\?ꤾ@*���>um���f����`�k�}IV�뻫���t"ÊJ�2�2sb�<U8~��lH[���fwk�����{�%� �;(��N�g���o��V�>����V��.|����k����9�+� �s�"����9�)D��K<"�q�6ǿo�7k
Sections
.text Size: 308KB - Virtual size: 304KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.tls Size: 4KB - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ