GPackage
Resubmissions
16-08-2023 18:21
230816-wzq5zseg5v 3Static task
static1
Behavioral task
behavioral1
Sample
SplinterCell2.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SplinterCell2.exe
Resource
win10v2004-20230703-en
General
-
Target
SplinterCell2.exe
-
Size
164KB
-
MD5
652ea9627adc3571420445ac1634f17b
-
SHA1
fcd498c4741c2892bf6f47d0631072ea67c2fd55
-
SHA256
d6245e0f90b66b67d7735fcab81f421d0aec927cbef99cb63ab1ffda1ae92bf6
-
SHA512
1904f41bb02ff13d78e20b224aa0641726adf0a2f8e739cd697ff7f64028a7acdaf52f100d36636ebf120f5121fd1b7c6c2f4d29847fe5642aa8b5956d87b7d7
-
SSDEEP
1536:RvKzj8HcTKu9FKT7UvRUvAg38HzJnGY9KNWdK8SgOsYPRedX:RvKHnTKuvE7iR3+KRH6WdK8SgO1PRel
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SplinterCell2.exe
Files
-
SplinterCell2.exe.exe windows x86
4ce391797687068a8ea391367e46a4ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
GetSaveFileNameA
kernel32
GetCommandLineW
SetErrorMode
CreateMutexW
CreateMutexA
FindNextFileW
FindNextFileA
RemoveDirectoryW
RemoveDirectoryA
GetCurrentThreadId
GetCurrentThread
SetThreadPriority
Sleep
MultiByteToWideChar
CreateDirectoryW
CreateDirectoryA
CopyFileW
CopyFileA
ReadFile
GetFileAttributesW
CreateProcessW
GetExitCodeProcess
GetCurrentDirectoryW
SetCurrentDirectoryW
SetCurrentDirectoryA
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindFirstFileA
FindClose
GetFileTime
MoveFileW
MoveFileA
DeleteFileW
DeleteFileA
SetEndOfFile
WriteFile
SetFileAttributesW
SetFileAttributesA
CloseHandle
SetFilePointer
CreateFileW
CreateFileA
GetFileSize
VirtualFree
EnterCriticalSection
VirtualAlloc
LeaveCriticalSection
GetDriveTypeW
GetStartupInfoA
GetDriveTypeA
GetLastError
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
GetSystemDirectoryW
GetWindowsDirectoryW
GetModuleFileNameW
CreateThread
GetSystemInfo
InitializeCriticalSection
GetModuleHandleA
GetCurrentDirectoryA
user32
FindWindowExA
GetPropW
GetPropA
GetDesktopWindow
GetDC
SetPropW
SetPropA
RemovePropW
RemovePropA
PeekMessageA
GetForegroundWindow
GetWindowThreadProcessId
SetFocus
EndDialog
GetWindowRect
ShowWindow
PeekMessageW
TranslateMessage
MessageBoxW
LoadIconW
LoadIconA
SetForegroundWindow
PostQuitMessage
DispatchMessageA
DispatchMessageW
GetMessageA
GetMessageW
UpdateWindow
SendMessageA
SendMessageW
SetWindowPos
GetSystemMetrics
GetDlgItem
CreateDialogParamA
CreateDialogParamW
PostThreadMessageA
FindWindowExW
PostThreadMessageW
gdi32
GetDeviceCaps
DeleteObject
advapi32
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
shell32
ShellExecuteW
ShellExecuteA
core
?GWindowManager@@3PAVUSubsystem@@A
?appSleep@@YAXM@Z
?GExec@@3PAVFExec@@A
?GetOuter@UObject@@QBEPAV1@XZ
?appStrcmp@@YAHPBG0@Z
?appMsgf@@YA?BHHPBGZZ
?GLog@@3PAVFOutputDevice@@A
?StaticClass@UClass@@SAPAV1@XZ
?ParseObject@@YAHPBG0PAVUClass@@AAPAVUObject@@PAV2@@Z
?ParseCommand@@YAHPAPBGPBG@Z
?GetDefaultObject@UClass@@QAEPAVUObject@@XZ
??0FName@@QAE@XZ
?Parse@@YAHPBG0AAVFName@@@Z
?GetName@UObject@@QBEPBGXZ
??DFName@@QBEPBGXZ
??0FName@@QAE@PBGW4EFindName@@@Z
??8FName@@QBEHABV0@@Z
?ExportToOutputDevice@UExporter@@SAXPAVUObject@@PAV1@AAVFOutputDevice@@PBGH@Z
?appClipboardCopy@@YAXPBG@Z
?LocalizeGeneral@@YAPBGPBDPBG1@Z
?appLaunchURL@@YAXPBG0PAVFString@@@Z
?StaticClass@UPackage@@SAPAVUClass@@XZ
??1FArray@@QAE@XZ
??0FString@@QAE@ABV0@@Z
?Split@FString@@QBEHABV1@PAV1@1H@Z
?Localize@@YAPBGPBG000H@Z
??8FString@@QBEHPBG@Z
?Remove@FArray@@QAEXHHH@Z
?Empty@FArray@@QAEXHH@Z
?appFromAnsi@@YAPBGPBD@Z
?Printf@FString@@SA?AV1@PBGZZ
??4FString@@QAEAAV0@ABV0@@Z
?TotalSize@FArchive@@UAEHXZ
?Precache@FArchive@@UAEXH@Z
?Logf@FOutputDevice@@QAAXPBGZZ
??0FArchive@@QAE@XZ
??1FArchive@@UAE@XZ
?SerializeBits@FArchive@@UAEXPAXH@Z
?SerializeInt@FArchive@@UAEXAAKK@Z
?Preload@FArchive@@UAEXPAVUObject@@@Z
?CountBytes@FArchive@@UAEXKK@Z
??6FArchive@@UAEAAV0@AAPAVUObject@@@Z
??6FArchive@@UAEAAV0@AAVFName@@@Z
?MapName@FArchive@@UAEHPAVFName@@@Z
?MapObject@FArchive@@UAEHPAVUObject@@@Z
?SetMinSize@FArchive@@UAEXK@Z
?AtEnd@FArchive@@UAEHXZ
?AtStopper@FArchive@@UAEHXZ
?SetStopper@FArchive@@UAEXH@Z
?GFixedDeltaTime@@3MA
?DetachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?Flush@FArchive@@UAEXXZ
?GetError@FArchive@@UAEHXZ
?appStrchr@@YAPAGPBGH@Z
?IsError@FArchive@@QAEHXZ
??4FString@@QAEAAV0@PBG@Z
?IsA@UObject@@QBEHPAVUClass@@@Z
?GetTransientPackage@UObject@@SAPAVUPackage@@XZ
?GError@@3PAVFOutputDeviceError@@A
?StaticConstructObject@UObject@@SAPAV1@PAVUClass@@PAV1@VFName@@K1PAVFOutputDevice@@H@Z
?StaticLoadClass@UObject@@SAPAVUClass@@PAV2@PAV1@PBG2KPAX@Z
??1FRegistryObjectInfo@@QAE@XZ
??0FArray@@QAE@XZ
?GPlatform@@3HA
??0FFileManager@@QAE@XZ
?Init@FFileManager@@UAEXH@Z
?szGetGlobalTime@FFileManager@@UAE_JPBGAAVFString@@@Z
?ExecuteCommandLine@FFileManager@@UAEXPBG@Z
?IsFileReadOnly@FFileManager@@UAEHPBG@Z
??1FFeedbackContext@@UAE@XZ
?GIsSlowTask@@3HA
?GStackBase@@3PAKA
?GCdPath@@3PAGA
?appStrstr@@YAPAGPBG0@Z
?Factory@FConfigCacheIni@@SAPAVFConfigCache@@XZ
?appInit@@YAXPBG0PAVFMalloc@@PAVFOutputDevice@@PAVFOutputDeviceError@@PAVFFeedbackContext@@PAVFFileManager@@P6APAVFConfigCache@@XZH@Z
?appPreExit@@YAXXZ
?GMemoryReporter@@3PAVFOutputDevice@@A
?Log@FOutputDevice@@QAEXPBG@Z
?GIsServer@@3HA
?GIsBinarySound@@3HA
?GIsScriptable@@3HA
?GLazyLoad@@3HA
?appINTCTNOTF@@YAHXZ
??HFString@@QAE?AV0@ABV0@@Z
?Log@FOutputDevice@@QAEXW4EName@@PBG@Z
?appExit@@YAXXZ
?appAtoi@@YAHPBG@Z
?Parse@@YAHPBG0AAVFString@@@Z
??0FName@@QAE@W4EName@@@Z
?appStrfind@@YAPBGPBG0@Z
?ParseParam@@YAHPBG0@Z
GIsMMX
?GPhysicalMemory@@3KA
GIsPentiumPro
?appGetVarArgs@@YAHPAGHAAPBG@Z
??0FFeedbackContext@@QAE@XZ
??1FOutputDeviceError@@UAE@XZ
?GIsFixedDeltaTime@@3HA
?GIsRequestingExit@@3HA
??DFString@@QBE?AV0@ABV0@@Z
??DFString@@QBE?AV0@PBG@Z
?AttachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?appSqrt@@YANN@Z
?GetRegistryObjects@UObject@@SAXAAV?$TArray@VFRegistryObjectInfo@@$0A@@@PAVUClass@@1H@Z
??9FString@@QBEHPBG@Z
??0FArray@@IAE@HH@Z
?GSecondsPerCycle@@3NA
?GMalloc@@3PAVFMalloc@@A
?Num@FArray@@QBEHXZ
?GObjObjects@UObject@@0V?$TArray@PAVUObject@@$0A@@@A
?appUnwindf@@YAXPBGZZ
?appSprintf@@YAHPAGPBGZZ
?appPackage@@YAPBGXZ
??0FMalloc@@QAE@XZ
?GPageSize@@3KA
?GUnicodeOS@@3HA
?appStricmp@@YAHPBG0@Z
?appStrlen@@YAHPBG@Z
?appStrcpy@@YAPAGPAGPBG@Z
?winToUNICODE@@YAPAGPAGPBDH@Z
?winGetSizeUNICODE@@YAHPBD@Z
??1FString@@QAE@XZ
??0FString@@QAE@XZ
??DFString@@QBEPBGXZ
?LocalizeGeneral@@YAPBGPBG00@Z
?winToANSI@@YAPADPADPBGH@Z
?winGetSizeANSI@@YAHPBG@Z
?appBaseDir@@YAPBGXZ
?GFileManager@@3PAVFFileManager@@A
??HFString@@QAE?AV0@PBG@Z
??0FString@@QAE@PBG@Z
??YFString@@QAEAAV0@PBG@Z
?NotifyExec@FNotifyHook@@UAEXPAXPBG@Z
?NotifyPostChange@FNotifyHook@@UAEXPAX@Z
?NotifyPreChange@FNotifyHook@@UAEXPAX@Z
??0FNotifyHook@@QAE@XZ
??0FExec@@QAE@XZ
??0FOutputDevice@@QAE@XZ
??1FOutputDevice@@UAE@XZ
?Logf@FOutputDevice@@QAAXW4EName@@PBGZZ
?appTimestamp@@YAPBGXZ
?GLogHook@@3PAVFOutputDevice@@A
?SafeString@FName@@SAPBGW4EName@@@Z
?GNull@@3PAVFOutputDevice@@A
?appStrcat@@YAPAGPAGPBG@Z
?Parse@@YAHPBG0PAGH@Z
?appCmdLine@@YAPBGXZ
?SafeSuppressed@FName@@SAHW4EName@@@Z
?GIsCriticalError@@3HA
??0FOutputDeviceError@@QAE@XZ
?appRequestExit@@YAXH@Z
?LocalizeError@@YAPBGPBDPBG1@Z
?GIsGuarded@@3HA
?appStrncat@@YAPAGPAGPBGH@Z
?appStrncpy@@YAPAGPAGPBGH@Z
?GErrorHist@@3PAGA
?StaticShutdownAfterError@UObject@@SAXXZ
?appGetSystemErrorMessage@@YAPBGH@Z
?LocalizeError@@YAPBGPBG00@Z
?GConfig@@3PAVFConfigCache@@A
?GIsStarted@@3HA
?GIsEditor@@3HA
?GIsClient@@3HA
?GIsRunning@@3HA
?Add@FArray@@QAEHHH@Z
window
?OnCopy@WWindow@@UAEXXZ
?OnCut@WWindow@@UAEXXZ
?OnKeyDown@WWindow@@UAEXG@Z
?OnChar@WWindow@@UAEXG@Z
?OnActivate@WWindow@@UAEXH@Z
?OnSysCommand@WWindow@@UAEHH@Z
?OnCommand@WWindow@@UAEXH@Z
?OnMove@WWindow@@UAEXHH@Z
?OnWindowPosChanging@WWindow@@UAEXPAH000@Z
?OnSize@WWindow@@UAEXKHH@Z
?OnKillFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnSetFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnCopyData@WWindow@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?GetLength@WWindow@@UAEHXZ
?SetText@WWindow@@UAEXPBG@Z
?GetText@WWindow@@UAE?AVFString@@XZ
?InterceptControlCommand@WWindow@@UAEHIIJ@Z
?CallDefaultProc@WDialog@@UAEHIIJ@Z
?WndProc@WWindow@@UAEJIIJ@Z
?DoDestroy@WWindow@@UAEXXZ
?Serialize@WWindow@@UAEXAAVFArchive@@@Z
?Show@WWindow@@UAEXH@Z
?Unused@FCommandTarget@@UAEXXZ
??1WWizardDialog@@UAE@XZ
??1WLabel@@UAE@XZ
?MaybeDestroy@WWindow@@QAEXXZ
??0WLabel@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@Z@Z
??0WWizardDialog@@QAE@XZ
??BWWindow@@QBEPAUHWND__@@XZ
?OnInitDialog@WWizardDialog@@UAEXXZ
?OnCancel@WWizardPage@@UAEXXZ
?GetShow@WWizardPage@@UAEHXZ
?GetCancelText@WWizardPage@@UAEPBGXZ
?GetFinishText@WWizardPage@@UAEPBGXZ
?GetBackText@WWizardPage@@UAEPBGXZ
?OnCurrent@WWizardPage@@UAEXXZ
?OnDestroy@WWindow@@UAEXXZ
?OnClose@WWindow@@UAEXXZ
??1WButton@@UAE@XZ
??1WWizardPage@@UAE@XZ
??0WButton@@QAE@PAVWWindow@@HUFDelegate@@P6GJPAUHWND__@@IIJ@Z@Z
??0FDelegate@@QAE@PAVFCommandTarget@@P81@AEXXZ@Z
??0WWizardPage@@QAE@PBGHPAVWWizardDialog@@@Z
?OnInitDialog@WDialog@@UAEXXZ
?OnPaste@WWindow@@UAEXXZ
??1WCrashBoxDialog@@UAE@XZ
?hInstanceWindow@@3PAUHINSTANCE__@@A
??0WCrashBoxDialog@@QAE@PBG0@Z
?GetString@WListBox@@QAE?AVFString@@H@Z
?GetCurrent@WListBox@@QAEHXZ
?GetRoot@WConfigProperties@@UAEPAVFTreeItem@@XZ
?GetWindowClassName@WConfigProperties@@UAEXPAG@Z
?GetPackageName@WConfigProperties@@UAEPBGXZ
?SetValue@WProperties@@UAEXPBG@Z
?GetListItem@WPropertiesBase@@UAEPAVFTreeItem@@H@Z
?BeginSplitterDrag@WProperties@@UAEXXZ
?ForceRefresh@WProperties@@UAEXXZ
?OnShowWindow@WWindow@@UAEXH@Z
?ResizeList@WProperties@@UAEXXZ
?GetDividerWidth@WProperties@@UAEHXZ
?GetRoot@WObjectProperties@@UAEPAVFTreeItem@@XZ
?OnDestroy@WProperties@@UAEXXZ
?OnSetCursor@WProperties@@UAEHXZ
?OnFinishSplitterDrag@WProperties@@UAEXPAVWDragInterceptor@@H@Z
?OnInitDialog@WWindow@@UAEXXZ
?OnPaint@WProperties@@UAEXXZ
?OnActivate@WProperties@@UAEXH@Z
?OnSize@WProperties@@UAEXKHH@Z
?CallDefaultProc@WWindow@@UAEHIIJ@Z
?GetWindowClassName@WObjectProperties@@UAEXPAG@Z
?DoDestroy@WProperties@@UAEXXZ
?GetPackageName@WObjectProperties@@UAEPBGXZ
?Serialize@WProperties@@UAEXAAVFArchive@@@Z
?SetNotifyHook@WWindow@@QAEXPAVFNotifyHook@@@Z
??0WConfigProperties@@QAE@VFName@@PBG@Z
?OpenWindow@WProperties@@QAEXPAUHWND__@@@Z
??0WObjectProperties@@QAE@VFName@@KPBGPAVWWindow@@H@Z
?ScrollCaret@WEdit@@QAEXXZ
?GLogWindow@@3PAVWLog@@A
??1WObjectProperties@@UAE@XZ
??1WConfigProperties@@UAE@XZ
?SetExec@WTerminal@@QAEXPAVFExec@@@Z
?SetCurrent@WListBox@@QAEHHH@Z
?FindStringChecked@WListBox@@QAEHPBG@Z
?AddString@WListBox@@QAEHPBG@Z
?Empty@WListBox@@QAEXXZ
?GetNextText@WWizardPage@@UAEPBGXZ
??1WListBox@@UAE@XZ
??0WListBox@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@Z@Z
??0WEdit@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@Z@Z
??1WEdit@@UAE@XZ
??1WUrlButton@@UAE@XZ
??0WUrlButton@@QAE@PAVWWindow@@PBGH@Z
??4FDelegate@@QAEAAU0@ABU0@@Z
?GetNext@WWizardPage@@UAEPAV1@XZ
??1WCoolButton@@UAE@XZ
??0WCoolButton@@QAE@PAVWWindow@@HUFDelegate@@K@Z
?Serialize@WTerminal@@UAEXPBGW4EName@@@Z
?Paste@WTerminal@@UAEXXZ
?TypeChar@WTerminal@@UAEXG@Z
?OnDestroy@WLog@@UAEXXZ
?OnClose@WLog@@UAEXXZ
?OnCreate@WLog@@UAEXXZ
?OnShowWindow@WLog@@UAEXH@Z
?OnCommand@WLog@@UAEXH@Z
?OnSize@WTerminal@@UAEXKHH@Z
?OnSetFocus@WTerminal@@UAEXPAUHWND__@@@Z
?OnCopyData@WLog@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?SetText@WLog@@UAEXPBG@Z
?WndProc@WLog@@UAEJIIJ@Z
?GetWindowClassName@WLog@@UAEXPAG@Z
?GetPackageName@WLog@@UAEPBGXZ
?OpenWindow@WLog@@QAEXHH@Z
??0WLog@@QAE@PBGAAPAVFArchive@@VFName@@PAVWWindow@@@Z
?InitWindowing@@YAXXZ
??1WLog@@UAE@XZ
?OnUndo@WWindow@@UAEXXZ
?OnVScroll@WWindow@@UAEXIJ@Z
?OnHScroll@WWindow@@UAEXIJ@Z
?OnKeyUp@WWindow@@UAEXIJ@Z
?OnPaint@WWindow@@UAEXXZ
?OnCreate@WWindow@@UAEXXZ
?OnDrawItem@WWindow@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?OnMeasureItem@WWindow@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?OnEnterIdle@WWindow@@UAEXXZ
?OnMouseEnter@WWindow@@UAEXXZ
?OnMouseLeave@WWindow@@UAEXXZ
?OnMouseHover@WWindow@@UAEXXZ
?OnTimer@WWindow@@UAEXXZ
?OnReleaseCapture@WWindow@@UAEXXZ
?OnMdiActivate@WWindow@@UAEXH@Z
?OnMouseMove@WWindow@@UAEXKUFPoint@@@Z
?OnLeftButtonDown@WWindow@@UAEXXZ
?OnLeftButtonDoubleClick@WWindow@@UAEXXZ
?OnMiddleButtonDoubleClick@WWindow@@UAEXXZ
?OnRightButtonDoubleClick@WWindow@@UAEXXZ
?OnRightButtonDown@WWindow@@UAEXXZ
?OnLeftButtonUp@WWindow@@UAEXXZ
?OnRightButtonUp@WWindow@@UAEXXZ
?OnFinishSplitterDrag@WWindow@@UAEXPAVWDragInterceptor@@H@Z
?OnSetCursor@WWindow@@UAEHXZ
?OnClose@WWizardDialog@@UAEXXZ
?OnDestroy@WWizardDialog@@UAEXXZ
?MyDrawEdge@WWindow@@UAEXPAUHDC__@@PAUtagRECT@@H@Z
?DoModal@WDialog@@UAEHPAUHINSTANCE__@@@Z
?LocalizeText@WDialog@@UAEXPBG0@Z
?Advance@WWizardDialog@@UAEXPAVWWizardPage@@@Z
?RefreshPage@WWizardDialog@@UAEXXZ
?OnBack@WWizardDialog@@UAEXXZ
?OnNext@WWizardDialog@@UAEXXZ
?OnFinish@WWizardDialog@@UAEXXZ
?OnCancel@WWizardDialog@@UAEXXZ
?SetItemFocus@WProperties@@UAEXH@Z
?LoadFileToBitmap@@YAPAUHBITMAP__@@PBGAAH1@Z
?EndDialog@WDialog@@QAEXH@Z
engine
?GameMapExt@FURL@@2VFString@@A
?GGameOptions@@3PAVUEPCGameOptions@@A
?StaticClass@URenderDevice@@SAPAVUClass@@XZ
?GetLevel@AActor@@QBEPAVULevel@@XZ
?StaticClass@AActor@@SAPAVUClass@@XZ
?StaticClass@UEngine@@SAPAVUClass@@XZ
?SaveLIPSincDBToDisk@TLIPSincDB@@QAEXXZ
?IsDirty@TLIPSincDB@@QAE_NXZ
?GLIPSincDB@@3VTLIPSincDB@@A
?AVITakeShot@@YAXPAVUEngine@@@Z
?AVIRecording@@3HA
?g_pEngine@@3PAVUEngine@@A
?StaticClass@UGameEngine@@SAPAVUClass@@XZ
msvcr71
_controlfp
_CxxThrowException
_purecall
?terminate@@YAXXZ
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
__CxxFrameHandler
Exports
Exports
Sections
.text Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ