Static task
static1
Behavioral task
behavioral1
Sample
bab81d683932895700b2c4230e051fd5013649d9676ba3a7203ed22a6a92a2fd.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
bab81d683932895700b2c4230e051fd5013649d9676ba3a7203ed22a6a92a2fd.exe
Resource
win10v2004-20230915-en
General
-
Target
bab81d683932895700b2c4230e051fd5013649d9676ba3a7203ed22a6a92a2fd
-
Size
5.2MB
-
MD5
78f390d9a26bc8644dbd7b1922032ef2
-
SHA1
e7c27d4c1412fc687545d9d35cd7708cc2eaba5a
-
SHA256
bab81d683932895700b2c4230e051fd5013649d9676ba3a7203ed22a6a92a2fd
-
SHA512
a0c83eb3ddc8e03c85179f4bfe53d8635564da104cd19af205a6d44e686334cc9ff533f1d2d6607d1b4ab54b93ebd6f2e3e480b7cdd566d2e80a709a4cdac03c
-
SSDEEP
49152:TR5BpxTF0iLhg1rMEJzv3tqiQ01FpVk8u2ALFIufvLmYadGwyTSFnV:JgJMAbAjDw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bab81d683932895700b2c4230e051fd5013649d9676ba3a7203ed22a6a92a2fd
Files
-
bab81d683932895700b2c4230e051fd5013649d9676ba3a7203ed22a6a92a2fd.exe windows:5 windows x64
4e3fc7e38dfa920fde885853b0ca5fe3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
msvcp140
?id@?$ctype@_W@std@@2V0locale@2@A
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?is@?$ctype@_W@std@@QEBA_NF_W@Z
_Wcsxfrm
_Wcscoll
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Xbad_function_call@std@@YAXXZ
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Cnd_signal
_Cnd_wait
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Thrd_id
_Thrd_hardware_concurrency
_Thrd_join
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?swap@?$basic_istream@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?exceptions@ios_base@std@@QEAAXH@Z
?good@ios_base@std@@QEBA_NXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?id@?$collate@_W@std@@2V0locale@2@A
_Query_perf_frequency
_Query_perf_counter
_Xtime_get_ticks
?id@?$collate@D@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
??Bid@locale@std@@QEAA_KXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Strxfrm
_Strcoll
_Mbrtowc
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
??1_Lockit@std@@QEAA@XZ
_Thrd_sleep
??0_Lockit@std@@QEAA@H@Z
mfc140u
ord9946
ord7913
ord2698
ord14360
ord9976
ord9978
ord9977
ord9975
ord9979
ord5451
ord11414
ord11415
ord8830
ord11771
ord3718
ord3713
ord11625
ord14209
ord8656
ord11902
ord6729
ord10691
ord8947
ord3173
ord13513
ord11944
ord11940
ord1700
ord1722
ord1748
ord1734
ord1755
ord4776
ord4843
ord4788
ord4806
ord4800
ord4794
ord4853
ord4837
ord4782
ord4859
ord4814
ord4752
ord4767
ord4828
ord4360
ord2212
ord9384
ord4352
ord2967
ord14211
ord7651
ord14217
ord6631
ord13199
ord11406
ord13864
ord8507
ord13354
ord5723
ord7551
ord13767
ord2629
ord11806
ord3812
ord3278
ord3279
ord6320
ord3756
ord6250
ord528
ord3089
ord4724
ord1149
ord6361
ord3803
ord4725
ord2479
ord13999
ord4086
ord8441
ord13955
ord9159
ord11081
ord3071
ord3308
ord3307
ord3951
ord3209
ord11085
ord10704
ord8731
ord1089
ord8901
ord2697
ord13397
ord6000
ord11813
ord2187
ord2270
ord6906
ord6343
ord13300
ord5641
ord13309
ord5007
ord7619
ord7775
ord4084
ord7780
ord1158
ord8823
ord7249
ord5771
ord1091
ord6850
ord450
ord11855
ord8926
ord9109
ord7235
ord2370
ord5757
ord7394
ord2536
ord6669
ord8072
ord1377
ord889
ord5379
ord6090
ord3952
ord1121
ord489
ord7245
ord9683
ord11229
ord8866
ord9114
ord8468
ord3172
ord11850
ord4726
ord990
ord5080
ord5363
ord5552
ord9041
ord5339
ord5083
ord5229
ord5062
ord7460
ord7461
ord7450
ord5227
ord7922
ord8900
ord4656
ord4511
ord1033
ord10093
ord11184
ord11763
ord8928
ord11784
ord4443
ord3723
ord296
ord7893
ord1504
ord11859
ord5189
ord11484
ord11489
ord290
ord8904
ord7912
ord3212
ord13401
ord6002
ord6303
ord3078
ord6605
ord5643
ord13301
ord7785
ord1442
ord5909
ord7387
ord1129
ord9043
ord3726
ord7745
ord10163
ord8452
ord1641
ord2350
ord2346
ord8521
ord5743
ord11119
ord4353
ord2510
ord5726
ord13358
ord5727
ord13360
ord13351
ord5722
ord1766
ord12142
ord5917
ord4873
ord4872
ord8095
ord3081
ord502
ord6879
ord2316
ord5742
ord4499
ord3828
ord1501
ord6717
ord12264
ord13937
ord8176
ord8899
ord8665
ord13846
ord11582
ord12685
ord2725
ord8158
ord1451
ord984
ord6615
ord6287
ord8167
ord7393
ord8084
ord11929
ord10124
ord12544
ord4445
ord7716
ord8023
ord5183
ord2439
ord12223
ord12222
ord14210
ord7650
ord14216
ord9089
ord4011
ord3949
ord12625
ord7668
ord2011
ord11665
ord11664
ord14088
ord12212
ord5916
ord14219
ord7719
ord14288
ord6121
ord14290
ord6123
ord14289
ord6122
ord12923
ord3731
ord5706
ord11921
ord7920
ord11933
ord11901
ord4343
ord2238
ord8449
ord13136
ord5240
ord5555
ord9941
ord12443
ord5709
ord285
ord2921
ord13949
ord13570
ord1111
ord12967
ord286
ord5674
ord5904
ord7382
ord8829
ord1432
ord4098
ord7783
ord3273
ord3167
ord6596
ord7159
ord13956
ord14220
ord1438
ord12988
ord12962
ord13601
ord972
ord8817
ord1053
ord4078
ord3056
ord6251
ord6814
ord12473
ord13761
ord6247
ord2475
ord2903
ord4335
ord6313
ord1454
ord8471
ord7182
ord1369
ord878
ord8063
ord8501
ord357
ord886
ord6549
ord2351
ord452
ord6728
ord13307
ord5582
ord12706
ord8993
kernel32
Sleep
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleFileNameW
LocalFree
DeviceIoControl
CloseHandle
FormatMessageW
GetDriveTypeW
CreateFileW
GetProcessAffinityMask
GetProcessTimes
GetCurrentProcess
GetCurrentThread
SetThreadAffinityMask
GetSystemTimes
SetFileAttributesW
GetFileAttributesW
DeleteFileW
MoveFileExW
GetFileType
GetFileSizeEx
WriteFile
SetFilePointerEx
GetFileTime
GetTickCount
GetFileSize
CreateFileA
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObject
CreateEventA
CreateSemaphoreA
SetLastError
FlushFileBuffers
SetEndOfFile
SetFileTime
SetConsoleCtrlHandler
FreeLibrary
GetProcAddress
GetCurrentProcessId
GetSystemTime
GetVersion
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
FileTimeToSystemTime
GetCurrentDirectoryW
GetFullPathNameW
FoldStringW
CompareStringA
GetVersionExW
GetDiskFreeSpaceExW
CreateDirectoryW
RemoveDirectoryW
MoveFileW
GetVolumeInformationW
SetThreadPriority
SetThreadExecutionState
CreateEventW
LoadLibraryW
GetSystemDirectoryW
SetPriorityClass
GetCPInfo
IsDBCSLeadByte
CompareStringW
GetConsoleMode
SetConsoleMode
ReadConsoleW
WriteConsoleW
CreateThread
CreateSemaphoreW
FindClose
FindFirstFileW
FindNextFileW
GetShortPathNameW
GetLongPathNameW
CreateHardLinkW
ExpandEnvironmentStringsW
FormatMessageA
SetCurrentDirectoryW
FindFirstFileExW
GetFileAttributesExW
GetFileInformationByHandle
GetFinalPathNameByHandleW
SetFileInformationByHandle
MultiByteToWideChar
FreeConsole
AllocConsole
SetConsoleTextAttribute
GetStdHandle
WideCharToMultiByte
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleHandleW
SetFilePointer
ReadFile
VirtualProtect
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetLastError
RaiseException
GetProcessHeap
HeapSize
HeapFree
InitializeCriticalSection
HeapReAlloc
HeapAlloc
HeapDestroy
SystemTimeToTzSpecificLocalTime
OutputDebugStringW
GetTempPathW
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GetModuleHandleExW
OutputDebugStringA
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
CreateSymbolicLinkW
GetFileInformationByHandleEx
CopyFileW
CreateDirectoryExW
AreFileApisANSI
DecodePointer
user32
wsprintfW
LoadMenuW
GetSubMenu
ScreenToClient
LoadIconW
SetTimer
GetWindowRect
DefWindowProcW
RegisterClassExW
GetClassInfoExW
GetSysColorBrush
LoadCursorW
SetCapture
ReleaseCapture
InvalidateRect
SetCursor
PtInRect
LoadImageW
DrawIconEx
IsWindowVisible
GetFocus
EnumChildWindows
LoadBitmapW
MapWindowPoints
SetParent
CreateCaret
DestroyCaret
HideCaret
ShowCaret
CloseClipboard
GetKeyState
PostQuitMessage
UpdateWindow
TranslateMessage
DispatchMessageW
IsZoomed
KillTimer
LoadAcceleratorsW
TranslateAcceleratorW
GetSystemMetrics
GetMenuState
DrawMenuBar
CheckMenuItem
EnableMenuItem
GetMenuItemCount
AppendMenuW
ModifyMenuW
DeleteMenu
SetWindowLongW
CheckMenuRadioItem
OemToCharA
OemToCharBuffA
CharUpperA
CharLowerA
ExitWindowsEx
MessageBeep
CharUpperW
CharLowerW
CharToOemA
CharToOemBuffW
OpenClipboard
GetParent
GetClientRect
EnableWindow
SendMessageW
MessageBoxW
GetClipboardData
EmptyClipboard
PeekMessageW
SetClipboardData
SetCaretPos
UnregisterClassW
gdi32
CreateFontW
SelectObject
DeleteDC
GetTextMetricsW
Rectangle
advapi32
CheckTokenMembership
SetFileSecurityW
CryptGenRandom
CryptReleaseContext
GetSecurityInfo
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
OpenProcessToken
AdjustTokenPrivileges
AllocateAndInitializeSid
FreeSid
LookupPrivilegeValueW
CryptAcquireContextW
shell32
SHGetPathFromIDListW
SHGetMalloc
DragAcceptFiles
DragFinish
DragQueryFileW
SHGetSpecialFolderLocation
comctl32
ImageList_ReplaceIcon
InitCommonControlsEx
uxtheme
SetWindowTheme
ole32
CoUninitialize
CoInitializeEx
oleaut32
SysFreeString
gdiplus
GdipDrawImageRectI
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipImageRotateFlip
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
powrprof
SetSuspendState
d3d9
Direct3DCreate9
d3dx9_43
D3DXCreateFontIndirectW
dinput8
DirectInput8Create
dsound
ord11
winmm
timeBeginPeriod
timeGetDevCaps
timeEndPeriod
vcruntime140
__std_terminate
strchr
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memchr
memcmp
memcpy
memmove
memset
_purecall
__RTDynamicCast
strrchr
__C_specific_handler
wcschr
wcsrchr
wcsstr
__current_exception
__current_exception_context
__std_type_info_destroy_list
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_crt_at_quick_exit
_invalid_parameter_noinfo
_beginthreadex
terminate
_invalid_parameter_noinfo_noreturn
_register_thread_local_exe_atexit_callback
_errno
_c_exit
_execute_onexit_table
_cexit
_exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_wassert
_register_onexit_function
exit
api-ms-win-crt-heap-l1-1-0
_recalloc
_aligned_free
malloc
_callnewh
_aligned_malloc
calloc
free
realloc
_set_new_mode
api-ms-win-crt-stdio-l1-1-0
_ftelli64
fsetpos
_fseeki64
_fileno
setbuf
_setmode
fputc
fgetpos
fgetc
fflush
fwrite
fread
fclose
setvbuf
ungetc
__acrt_iob_func
__stdio_common_vswscanf
_open_osfhandle
freopen
_set_fmode
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
fopen
__stdio_common_vswprintf
__p__commode
_get_stream_buffer_pointers
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_findclose
_findfirst64i32
_mkdir
remove
_unlock_file
_wchdir
_stat64i32
_findnext64i32
api-ms-win-crt-string-l1-1-0
wcspbrk
toupper
_wcsdup
strncmp
tolower
wcsncpy
strnlen
wcsncmp
_stricmp
strncpy
strcmp
api-ms-win-crt-convert-l1-1-0
strtoll
strtoul
strtol
mbstowcs_s
wcstol
strtoull
strtod
api-ms-win-crt-math-l1-1-0
pow
sqrt
round
ceilf
cos
_dclass
__setusermatherr
log10
api-ms-win-crt-time-l1-1-0
_time64
_mktime64
clock
_localtime64
asctime
api-ms-win-crt-utility-l1-1-0
qsort
srand
rand
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
___lc_codepage_func
localeconv
api-ms-win-crt-environment-l1-1-0
getenv
Sections
.text Size: 4.0MB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 661KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 777B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 337B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ