GetModuleObject
Static task
static1
Behavioral task
behavioral1
Sample
452449e6fd3342aa236828ae668cb16a9a477e9c1cd9f16d8f209f5f91813102.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
452449e6fd3342aa236828ae668cb16a9a477e9c1cd9f16d8f209f5f91813102.dll
Resource
win10v2004-20230915-en
General
-
Target
452449e6fd3342aa236828ae668cb16a9a477e9c1cd9f16d8f209f5f91813102
-
Size
4.2MB
-
MD5
302990359988768962ecd96f09cb0fb2
-
SHA1
c027035058ee32512ffb176c5417b3ab57f50bea
-
SHA256
452449e6fd3342aa236828ae668cb16a9a477e9c1cd9f16d8f209f5f91813102
-
SHA512
c4a8c1736c0f56508f462833b2f43938366fee4aa008008d92e87b407d7fe13c44a9e5025a79a952bbb1b0e9dcbf2a2ad862a1783a547fc8939e0491e30bc448
-
SSDEEP
98304:YWEUetRLgzpguA7I3x6iGRDu8aqNWHDwEKzD0jnunL0S6uy:RegJ3afHzD0jnuL0S6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 452449e6fd3342aa236828ae668cb16a9a477e9c1cd9f16d8f209f5f91813102
Files
-
452449e6fd3342aa236828ae668cb16a9a477e9c1cd9f16d8f209f5f91813102.dll windows:6 windows x86
1eb95e412612df6d12947ce1d3d4dce2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ws2_32
WSAStartup
gethostbyaddr
socket
connect
getsockname
htons
recvfrom
sendto
WSASocketW
__WSAFDIsSet
select
ioctlsocket
freeaddrinfo
getaddrinfo
setsockopt
htonl
gethostbyname
inet_ntoa
send
recv
accept
listen
bind
WSACleanup
inet_addr
WSAGetLastError
closesocket
crypt32
CertCloseStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore
CertEnumCertificatesInStore
sangfordll
QueryL3vpnServiceStatus
LogoutSslVpn
duilib_u
??8CDuiString@DuiLib@@QBE_NPB_W@Z
??BCDuiString@DuiLib@@QBEPB_WXZ
?messageMap@WindowImplBase@DuiLib@@1UDUI_MSGMAP@2@B
?GetClassStyle@WindowImplBase@DuiLib@@UBEIXZ
?HandleMessage@WindowImplBase@DuiLib@@UAEJIIJ@Z
?OnFinalMessage@WindowImplBase@DuiLib@@UAEXPAUHWND__@@@Z
?GetResourceID@WindowImplBase@DuiLib@@UBEPB_WXZ
?OnClose@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnDestroy@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcPaint@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcHitTest@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseWheel@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseHover@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnChar@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSysCommand@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnCreate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKillFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSetFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonUp@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseMove@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?GetStyle@WindowImplBase@DuiLib@@UAEJXZ
?MessageHandler@WindowImplBase@DuiLib@@UAEJIIJAA_N@Z
?CreateControl@WindowImplBase@DuiLib@@UAEPAVCControlUI@2@PB_W@Z
?SetMinValue@CProgressUI@DuiLib@@QAEXH@Z
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?SetHomePage@CWebBrowserUI@DuiLib@@QAEXPB_W@Z
?SetAutoNavigation@CWebBrowserUI@DuiLib@@QAEX_N@Z
??0CWndShadow@@QAE@XZ
?SetPosition@CWndShadow@@QAE_NHH@Z
?SetSize@CWndShadow@@QAE_NH@Z
?Initialize@CWndShadow@@SA_NPAUHINSTANCE__@@@Z
?GetInstance@CPaintManagerUI@DuiLib@@SAPAUHINSTANCE__@@XZ
?Create@CWndShadow@@QAEXPAUHWND__@@@Z
?GetHWND@CWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?GetMessageMap@WindowImplBase@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ
?Notify@WindowImplBase@DuiLib@@UAEXAAUtagTNotifyUI@2@@Z
?InitWindow@WindowImplBase@DuiLib@@UAEXXZ
??0WindowImplBase@DuiLib@@QAE@XZ
?FindSubControlByName@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PAV32@PB_W@Z
?SetTextStyle@CLabelUI@DuiLib@@QAEXI@Z
?SetTextColor@CLabelUI@DuiLib@@QAEXK@Z
?SetBkColor@CControlUI@DuiLib@@QAEXK@Z
??0CDuiString@DuiLib@@QAE@XZ
??4CDuiString@DuiLib@@QAEABV01@PB_W@Z
?SetBkImage@CControlUI@DuiLib@@QAEXPB_W@Z
??0CDuiString@DuiLib@@QAE@ABV01@@Z
??0CDialogBuilder@DuiLib@@QAE@XZ
?Create@CDialogBuilder@DuiLib@@QAEPAVCControlUI@2@VSTRINGorID@2@PB_WPAVIDialogBuilderCallback@2@PAVCPaintManagerUI@2@PAV32@@Z
??0STRINGorID@DuiLib@@QAE@PB_W@Z
??1CDialogBuilder@DuiLib@@QAE@XZ
?SetMaxValue@CProgressUI@DuiLib@@QAEXH@Z
??1CWndShadow@@UAE@XZ
?SetValue@CProgressUI@DuiLib@@QAEXH@Z
?SendMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z
?SetTipValue@CEditUI@DuiLib@@QAEXPB_W@Z
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
??1CDuiString@DuiLib@@QAE@XZ
??1WindowImplBase@DuiLib@@UAE@XZ
??0CDuiString@DuiLib@@QAE@PB_WH@Z
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
kernel32
SetFilePointer
UnlockFile
OutputDebugStringA
GetModuleHandleA
lstrcmpiW
FileTimeToLocalFileTime
GlobalSize
SuspendThread
EncodePointer
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetFileAttributesExW
GetFileSizeEx
LocalAlloc
GlobalReAlloc
GlobalHandle
LocalReAlloc
LockFile
GlobalGetAtomNameW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
VirtualProtect
lstrcpyW
GetCurrentDirectoryW
FindResourceExW
GetWindowsDirectoryW
GetTempPathW
GetProfileIntW
SearchPathW
lstrcmpA
GetUserDefaultLCID
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
WriteConsoleW
SetEnvironmentVariableW
SetEndOfFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
SetErrorMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetConsoleOutputCP
SetFilePointerEx
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
VirtualAlloc
HeapQueryInformation
SetStdHandle
GetFileInformationByHandle
GetDriveTypeW
SetConsoleCtrlHandler
ExitProcess
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
InterlockedFlushSList
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringEx
FlushFileBuffers
MulDiv
GlobalLock
GetTempFileNameW
SizeofResource
LockResource
GetSystemTime
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
GetEnvironmentVariableW
FindNextFileW
LoadLibraryA
ConvertThreadToFiber
ConvertFiberToThread
CreateFiber
DeleteFiber
SwitchToFiber
GetSystemTimeAsFileTime
GetModuleHandleExW
TlsFree
SetLastError
GetFileType
GetStdHandle
GetComputerNameA
CreateFileA
FileTimeToSystemTime
SystemTimeToFileTime
OpenFileMappingW
UnmapViewOfFile
MapViewOfFile
InitializeCriticalSectionEx
VirtualAllocEx
VirtualFreeEx
ReadProcessMemory
ResetEvent
ExpandEnvironmentStringsW
GetUserDefaultLangID
VirtualQuery
GetFileTime
CreateDirectoryW
FindClose
FindFirstFileW
GetLogicalDrives
DuplicateHandle
PeekNamedPipe
CreateProcessW
GetStartupInfoW
CreatePipe
TerminateProcess
LoadResource
FindResourceW
MultiByteToWideChar
GlobalUnlock
GetExitCodeProcess
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetTimeZoneInformation
GetSystemPowerStatus
LoadLibraryW
LoadLibraryExW
GetComputerNameW
WTSGetActiveConsoleSessionId
DeviceIoControl
CreateFileW
GlobalFree
GlobalAlloc
GetSystemInfo
GetCurrentProcess
VerifyVersionInfoW
VerSetConditionMask
FormatMessageW
LocalFree
DeleteFileA
MoveFileA
GetModuleFileNameA
GetCurrentThread
SetThreadPriority
GetProcessHeap
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
HeapFree
OutputDebugStringW
MoveFileW
GetOverlappedResult
WriteFile
ReadFile
DisconnectNamedPipe
ConnectNamedPipe
CreateNamedPipeW
GetLocalTime
GetCurrentProcessId
ProcessIdToSessionId
GetSystemDefaultLangID
TlsGetValue
TlsSetValue
TlsAlloc
GetCurrentThreadId
WaitForMultipleObjects
SetEvent
CreateEventW
QueryPerformanceCounter
QueryPerformanceFrequency
CloseHandle
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetVersionExW
FreeLibrary
GetModuleHandleW
GetProcAddress
ResumeThread
TerminateThread
WaitForSingleObject
MoveFileExW
Sleep
CopyFileW
WinExec
DeleteFileW
GetTickCount
GetFileAttributesW
GetModuleFileNameW
GetSystemDirectoryW
WideCharToMultiByte
lstrlenW
lstrlenA
GetLastError
SystemTimeToTzSpecificLocalTime
user32
DrawEdge
SetClassLongW
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
GetKeyNameTextW
MapVirtualKeyW
NotifyWinEvent
InvertRect
HideCaret
EnableScrollBar
GetIconInfo
DrawIconEx
IsRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
GetMenuDefaultItem
CreatePopupMenu
SetRect
MessageBeep
IsClipboardFormatAvailable
DeleteMenu
TrackMouseEvent
MapDialogRect
GetAsyncKeyState
RealChildWindowFromPoint
CopyImage
GetSysColorBrush
SetCursor
ShowOwnedPopups
PostQuitMessage
DestroyMenu
IntersectRect
InflateRect
FillRect
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
OffsetRect
SetRectEmpty
SendDlgItemMessageA
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetLastActivePopup
GetTopWindow
GetClassLongW
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
DrawFrameControl
SetPropW
ShowScrollBar
TranslateMDISysAccel
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
EndPaint
BeginPaint
SetMenu
GetMenu
GetCapture
IsIconic
IsZoomed
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
GetMessageTime
GetMessagePos
UnhookWindowsHookEx
IsDialogMessageW
GetWindow
GetWindowTextLengthW
GetWindowTextW
IsWindowEnabled
GetFocus
SetFocus
CheckDlgButton
GetDlgItem
CallNextHookEx
SetWindowsHookExW
ValidateRect
GetKeyState
GetActiveWindow
GetMessageW
CharUpperW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuState
GetMenuStringW
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
SetActiveWindow
SetParent
GetClassNameW
GetMenuItemID
TrackPopupMenu
GetCursorPos
SetMenuDefaultItem
GetSubMenu
LoadMenuW
DestroyIcon
LoadImageW
RegisterWindowMessageW
GetWindowThreadProcessId
FrameRect
DrawIcon
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
LockWindowUpdate
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
GetUpdateRect
DrawMenuBar
DefFrameProcW
RemovePropW
SubtractRect
CreateMenu
GetSystemMetrics
GetWindowRect
DefWindowProcW
IsWindow
CreateWindowExW
SetWindowLongW
PostMessageW
DefMDIChildProcW
DestroyCursor
GetScrollRange
UnionRect
GetDesktopWindow
SetTimer
KillTimer
SendMessageW
IsWindowVisible
UpdateWindow
GetForegroundWindow
EnableWindow
LoadIconW
SetWindowRgn
GetDC
ReleaseDC
InvalidateRect
UnregisterClassW
SystemParametersInfoW
GetClientRect
PtInRect
FindWindowA
GetDlgCtrlID
SetWindowTextW
GetMenuItemCount
GetMenuItemInfoW
SetMenuItemInfoW
FindWindowW
GetWindowLongW
DestroyWindow
GetParent
LoadCursorW
RegisterClassExW
ShowWindow
SetWindowPos
GetPropW
MoveWindow
GetWindowRgn
SetForegroundWindow
FindWindowExW
PeekMessageW
TranslateMessage
DispatchMessageW
GetShellWindow
gdi32
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectW
CreateRectRgnIndirect
SetRectRgn
DPtoLP
GetTextExtentPoint32W
GetTextMetricsW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
GetTextCharsetInfo
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
CreatePatternBrush
CreatePen
CreateHatchBrush
BitBlt
GetObjectW
SetTextColor
SetBkColor
GetDeviceCaps
CreateDCW
CopyMetaFileW
PtInRegion
CreateRectRgn
DeleteDC
SelectObject
DeleteObject
CreateDIBSection
EnumFontFamiliesW
FrameRgn
CreateRoundRectRgn
GetStockObject
CreateBitmap
CreateCompatibleDC
PatBlt
SetPixel
StretchBlt
msimg32
TransparentBlt
AlphaBlend
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
InitializeSecurityDescriptor
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
LookupAccountSidW
GetTokenInformation
OpenProcessToken
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
GetUserNameW
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
shell32
ShellExecuteW
SHGetSpecialFolderPathW
Shell_NotifyIconW
SHAppBarMessage
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragFinish
DragQueryFileW
SHBrowseForFolderW
shlwapi
PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
UrlUnescapeW
StrFormatKBSizeW
PathRemoveFileSpecW
uxtheme
DrawThemeBackground
OpenThemeData
DrawThemeParentBackground
DrawThemeText
CloseThemeData
GetThemeColor
GetThemePartSize
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
GetWindowTheme
GetCurrentThemeName
ole32
CoInitializeSecurity
CoInitialize
CoCreateInstance
CoSetProxyBlanket
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
OleDuplicateData
ReleaseStgMedium
CoCreateGuid
CoDisconnectObject
CreateStreamOnHGlobal
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoUninitialize
oleaut32
VarUdateFromDate
SysAllocString
SysFreeString
VariantClear
VariantInit
SysAllocStringLen
VariantChangeType
SysStringLen
VariantCopy
VarBstrFromDate
LoadTypeLi
VariantTimeToSystemTime
SystemTimeToVariantTime
gdiplus
GdiplusStartup
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipFree
GdipCloneImage
GdipDisposeImage
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdiplusShutdown
GdipAlloc
GdipDrawImageI
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
wsock32
WSASetLastError
bcrypt
BCryptGenRandom
oleacc
AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject
wininet
InternetCloseHandle
InternetOpenW
InternetReadFile
InternetSetFilePointer
InternetWriteFile
InternetQueryDataAvailable
InternetCanonicalizeUrlW
InternetGetLastResponseInfoW
InternetSetStatusCallbackW
InternetCrackUrlW
InternetSetOptionW
InternetConnectW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundW
Exports
Exports
Sections
.text Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 846KB - Virtual size: 845KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 218KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ