Static task
static1
Behavioral task
behavioral1
Sample
a8d55b5308c6a4f7e99767eba536d035dc02a49964ceeb7bd915c3b194f35f6c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a8d55b5308c6a4f7e99767eba536d035dc02a49964ceeb7bd915c3b194f35f6c.exe
Resource
win10v2004-20230915-en
General
-
Target
a8d55b5308c6a4f7e99767eba536d035dc02a49964ceeb7bd915c3b194f35f6c
-
Size
1.8MB
-
MD5
db815104ee13a2d936a716f8622fa51f
-
SHA1
dc88051838934380876f1a0de610810d0110d0e7
-
SHA256
a8d55b5308c6a4f7e99767eba536d035dc02a49964ceeb7bd915c3b194f35f6c
-
SHA512
b36ffa501468e95ca0a490d9b23292755cc75fd26956e60482a01107695f4871106f1dcfb22772f9ae6760808523beef0f773b120abc8fdfae09d4dc07f727ad
-
SSDEEP
24576:NPmOQdP7v+Ijj55gegEXhPuSw1+nuCD+N5znZxL40DRk70DRk8u+bwXZZvd0q:NJUhPuSw1+cN5znru+bSl0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8d55b5308c6a4f7e99767eba536d035dc02a49964ceeb7bd915c3b194f35f6c
Files
-
a8d55b5308c6a4f7e99767eba536d035dc02a49964ceeb7bd915c3b194f35f6c.exe windows:6 windows x86
e82903e3bcf421e2fdaf86596d220692
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
cximagecrt
?Draw@CxImage@@QAEHPAUHDC__@@ABUtagRECT@@PAU3@_N3@Z
?AlphaCopy@CxImage@@QAE_NAAV1@@Z
?Resample2@CxImage@@QAE_NHHW4InterpolationMethod@1@W4OverflowMethod@1@QAV1@_N@Z
?Crop@CxImage@@QAE_NABUtagRECT@@PAV1@@Z
?GetHeight@CxImage@@QBEIXZ
?GetWidth@CxImage@@QBEIXZ
??0CxImage@@QAE@I@Z
libcurl
curl_global_init
curl_global_cleanup
curl_easy_init
curl_easy_setopt
curl_easy_cleanup
curl_easy_strerror
curl_easy_perform
kernel32
SetFilePointer
TerminateProcess
GetFileSize
CopyFileW
DeleteFileW
RemoveDirectoryW
TerminateThread
ExitProcess
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceW
MulDiv
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
GetVersionExW
WriteFile
GetTickCount
GetLastError
CreateFileW
CloseHandle
GetPrivateProfileStringW
MultiByteToWideChar
GetLocalTime
GetUserDefaultUILanguage
LoadLibraryW
GetProcAddress
GetModuleFileNameW
FreeLibrary
FindClose
WideCharToMultiByte
Sleep
GetFileTime
WritePrivateProfileStringW
OpenMutexW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventW
WaitForSingleObject
GetCurrentProcessId
GetSystemInfo
GetModuleHandleW
GlobalMemoryStatusEx
GetSystemDirectoryW
CreatePipe
GetStartupInfoW
CreateProcessW
ReadFile
GetExitCodeProcess
OpenProcess
K32EnumProcessModules
K32GetModuleFileNameExW
GetWindowsDirectoryW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetCurrentThreadId
CreateSemaphoreW
ReleaseSemaphore
CreateThread
CreateMutexW
SetEvent
GetSystemTimeAsFileTime
FindFirstFileW
FindNextFileW
user32
ShowWindow
GetPropW
GetDC
ReleaseDC
MoveWindow
EnableWindow
GetMonitorInfoW
SetPropW
GetWindowRect
SetTimer
KillTimer
EnumDisplaySettingsW
ClientToScreen
MapVirtualKeyW
IsWindow
RegisterClassW
GetWindowLongW
DestroyWindow
SetWindowLongW
GetKeyState
wsprintfW
SetWindowTextW
IsIconic
SendMessageW
SetForegroundWindow
BringWindowToTop
SetWindowPos
GetSystemMetrics
SystemParametersInfoW
EnumDisplayMonitors
GetDesktopWindow
PostQuitMessage
CreateWindowExW
PostMessageW
DefWindowProcW
EnumWindows
GetClassNameW
FindWindowExW
GetWindowThreadProcessId
DispatchMessageW
TranslateMessage
MonitorFromWindow
LoadCursorW
GetGUIThreadInfo
InvalidateRgn
CreateAcceleratorTableW
GetSysColor
SetCaretPos
ShowCaret
HideCaret
CreateCaret
SetRect
FillRect
DrawTextW
CharPrevW
GetCaretPos
GetCaretBlinkTime
GetWindowTextLengthW
GetWindowTextW
LoadImageW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
GetWindow
GetParent
IsRectEmpty
IntersectRect
MapWindowPoints
InvalidateRect
GetUpdateRect
EndPaint
BeginPaint
ReleaseCapture
SetCapture
GetFocus
GetActiveWindow
SetFocus
CharNextW
IsWindowVisible
OffsetRect
UnionRect
SetCursor
wvsprintfW
ScreenToClient
MessageBoxW
GetClientRect
SetWindowRgn
IsZoomed
PtInRect
GetCursorPos
GetMessageW
gdi32
GdiFlush
ExtTextOutW
TextOutW
MoveToEx
CreateDIBSection
SetStretchBltMode
StretchBlt
SetBkColor
ExtSelectClipRgn
SelectClipRgn
RoundRect
LineTo
GetTextExtentPoint32W
GetClipBox
GetCharABCWidthsW
CreateRectRgnIndirect
CreatePenIndirect
CombineRgn
SetTextColor
SetBkMode
CreateSolidBrush
CreatePatternBrush
GetObjectA
SetWindowOrgEx
GetTextMetricsW
SaveDC
RestoreDC
Rectangle
CreatePen
CreateFontIndirectW
CreateRoundRectRgn
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
GetObjectW
DeleteDC
GetDeviceCaps
DeleteObject
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegQueryValueExW
RegSetValueExW
RegCloseKey
DuplicateTokenEx
OpenProcessToken
RegOpenKeyW
RegOpenKeyExW
shell32
ShellExecuteW
ShellExecuteExW
ord165
SHGetFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ole32
CreateStreamOnHGlobal
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoCreateInstance
CoUninitialize
OleUninitialize
CoInitializeSecurity
OleInitialize
CoInitialize
oleaut32
VariantClear
VariantInit
SysFreeString
SysAllocString
msvcp120
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_BADOFF@std@@3_JB
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Statvfs@sys@tr2@std@@YA?AUspace_info@123@PB_W@Z
_Mtx_lock
_Mtx_unlock
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_Future_error_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Unlink@sys@tr2@std@@YAHPB_W@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?width@ios_base@std@@QAE_J_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Open_dir@sys@tr2@std@@YAPAXAAY0BAE@_WPB_WAAHAAW4file_type@123@@Z
?_Close_dir@sys@tr2@std@@YAXPAX@Z
?_Read_dir@sys@tr2@std@@YAPA_WAAY0BAE@_WPAXAAW4file_type@123@@Z
?_Make_dir@sys@tr2@std@@YAHPB_W@Z
?_Stat@sys@tr2@std@@YA?AW4file_type@123@PB_WAAH@Z
?_Remove_dir@sys@tr2@std@@YA_NPB_W@Z
?_Copy_file@sys@tr2@std@@YAHPB_W0_N@Z
_Xtime_get_ticks
?_2@placeholders@std@@3V?$_Ph@$01@2@A
?_1@placeholders@std@@3V?$_Ph@$00@2@A
_Call_onceEx
_Do_call
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
_Thrd_join
_Cnd_timedwait
_Mtx_current_owns
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_current
_Thrd_equal
??Bios_base@std@@QBE_NXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Launch@_Pad@std@@QAEXPAU_Thrd_imp_t@@@Z
??1_Pad@std@@QAE@XZ
?_Release@_Pad@std@@QAEXXZ
??0_Pad@std@@QAE@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?_Winerror_map@std@@YAPBDH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
_Cnd_wait
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
_Cnd_register_at_thread_exit
_Cnd_broadcast
_Cnd_unregister_at_thread_exit
_Cnd_destroy
_Cnd_init
?_Throw_C_error@std@@YAXH@Z
_Mtx_init
_Mtx_destroy
?_Xinvalid_argument@std@@YAXPBD@Z
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
_Wcscoll
?id@?$collate@_W@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0facet@locale@std@@IAE@I@Z
??_7facet@locale@std@@6B@
??1facet@locale@std@@MAE@XZ
??0_Lockit@std@@QAE@H@Z
??0_Locinfo@std@@QAE@PBD@Z
??1_Lockit@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Incref@facet@locale@std@@UAEXXZ
_Wcsxfrm
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
??_7_Facet_base@std@@6B@
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
gdiplus
GdipImageGetFrameDimensionsList
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipGraphicsClear
GdipDrawImage
GdipDrawImageRectI
GdipDeleteFontFamily
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipGetFamily
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushI
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDrawString
GdipCreateStringFormat
GdipCreateBitmapFromScan0
GdipCreateFromHDC
GdipDeleteGraphics
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipSetCompositingQuality
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipGetImageWidth
GdipLoadImageFromStream
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
msvcr120
??0exception@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
_snwprintf_s
_snprintf_s
?terminate@@YAXXZ
sprintf_s
_wtoi
_time64
_errno
_setjmp3
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
??_V@YAXPAX@Z
rand
?wait@event@Concurrency@@QAEII@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?_GetCurrentInlineDepth@_StackGuard@details@Concurrency@@CAAAIXZ
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?_Oversubscribe@_Context@details@Concurrency@@SAX_N@Z
?set@event@Concurrency@@QAEXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
??0exception@std@@QAE@ABQBDH@Z
??1scoped_lock@critical_section@Concurrency@@QAE@XZ
??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z
?Free@Concurrency@@YAXPAX@Z
?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_NewCollection@_AsyncTaskCollection@details@Concurrency@@SAPAV123@PAV_CancellationTokenState@23@@Z
?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPAX@Z0@Z
?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ
??1event@Concurrency@@QAE@XZ
??1critical_section@Concurrency@@QAE@XZ
??0event@Concurrency@@QAE@XZ
??0critical_section@Concurrency@@QAE@XZ
?Alloc@Concurrency@@YAPAXI@Z
longjmp
_snwprintf
fclose
fwrite
fputc
fflush
setvbuf
fgetpos
_fseeki64
fsetpos
memcpy_s
ungetc
fgetc
_unlock_file
_lock_file
??0exception@std@@QAE@ABQBD@Z
wcsrchr
_vswprintf
_wcslwr
vswprintf_s
??8type_info@@QBE_NABV0@@Z
srand
sscanf_s
wcscpy_s
isalnum
sprintf
atoi
wcschr
tolower
_wcsnicmp
_wcsicmp
toupper
_vswprintf_c_l
isdigit
_beginthreadex
vsprintf_s
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
wcsncpy
wcsstr
_vsnwprintf
_itow
wcstod
_wtof
iswalnum
wcsncmp
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__wgetmainargs
__set_app_type
exit
_exit
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_wcmdln
_fmode
_commode
_except1
_except_handler4_common
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
strchr
swscanf_s
malloc
realloc
wcstol
iswdigit
swprintf_s
wcstoul
mbstowcs_s
free
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
iphlpapi
GetAdaptersInfo
version
GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoSizeW
shlwapi
PathFileExistsW
wininet
InternetCrackUrlW
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetReadFile
HttpQueryInfoW
InternetCloseHandle
msi
ord173
ord217
comctl32
_TrackMouseEvent
ord17
imm32
ImmGetVirtualKey
ImmGetContext
ImmReleaseContext
ImmSetCompositionFontW
ImmSetCompositionWindow
Sections
.text Size: 873KB - Virtual size: 873KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 220KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 35KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 460KB - Virtual size: 656KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ