NEAS[.]6e7e2c2169fa168385c508d1a9264e60[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.6e7e2c2169fa168385c508d1a9264e60.exe
Size

122KB
MD5

6e7e2c2169fa168385c508d1a9264e60
SHA1

065aebf6df01d35e5bf0af799c627340b2a6a15b
SHA256

c2759f9f361475f2a5e170d2105e13afd4713548f2a8a9256c688d1b439753a2
SHA512

32a9823a9cec4c92a387c40b4c4ff77e5bee60a11ebee3dbc40b885df9ef963bb72221b1cee062f9660921592babfc9b267da68710e3050ef304b5421eed3e42
SSDEEP

3072:HgP1Qc5hprXTB6MLV9uEe+R7vDsDzO9caMFHt1BWg9RkkBz:Hi1JVBvDsPRZUmR/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6e7e2c2169fa168385c508d1a9264e60.exe

Files

NEAS.6e7e2c2169fa168385c508d1a9264e60.exe
.dll windows:6 windows x64

ae1ced166f9bdeba1cdd94d5064b30e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

unrealserver-core

?Malloc@FMemory@@SAPEAX_KI@Z
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?OnInvalidArrayNum@UE4Array_Private@@YAXPEB_W_K@Z
??0FString@@QEAA@XZ
??4FString@@QEAAAEAV0@$$QEAV0@@Z
??4FString@@QEAAAEAV0@AEBV0@@Z
??0FString@@QEAA@PEB_W@Z
??1FString@@QEAA@XZ
?LowLevelFatalErrorHandler@@YAXPEBDHPEAXPEB_WZZ
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?BasicLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
?IsInGameThread@@YA_NXZ
?IsInParallelGameThread@@YA_NXZ
?IsInActualRenderingThread@@YA_NXZ
?GenerateNewID@FDelegateHandle@@CA_KXZ
?SetupSingleton@IConsoleManager@@CAXXZ
??0FAutoConsoleObject@@IEAA@PEAVIConsoleObject@@@Z
??1FAutoConsoleObject@@UEAA@XZ
?OptionallyLogFormattedEnsureMessageReturningFalseImpl@FDebug@@CA_N_NPEBD1HPEAXPEB_WZZ
?CheckVerifyFailedImpl@FDebug@@SAXPEBD0HPEAXPEB_WZZ
?ProcessFatalError@FDebug@@SAXPEAX@Z
?PromptForRemoteDebugging@FWindowsPlatformMisc@@SAX_N@Z
?IsDebuggerPresent@FWindowsPlatformMisc@@SA_NXZ
?Stricmp@FGenericPlatformStricmp@@SAHPEB_W0@Z
?IsEnsureAllowed@FGenericPlatformMisc@@SA_NXZ
?Singleton@IConsoleManager@@0PEAU1@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPath@Private@CoreUObject@UE@@EA
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GIgnoreDebugger@@3_NA
??1FLogCategoryBase@@QEAA@XZ
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??0FName@@QEAA@PEBDW4EFindName@@@Z
??0FName@@QEAA@PEB_WW4EFindName@@@Z
?FromValidEName@FNameEntryId@@CA?AU1@W4EName@@@Z
?Free@FMemory@@SAXPEAX@Z

unrealserver-coreuobject

?GetPrivateStaticClassBody@@YAXPEB_W0AEAPEAVUClass@@P6AXXZIIW4EClassFlags@@W4EClassCastFlags@@0P6AXAEBVFObjectInitializer@@@ZP6APEAVUObject@@AEAVFVTableHelper@@@Z$$QEAUFUObjectCppClassStaticFunctions@@P6APEAV1@XZP6APEAV1@XZ@Z
?Z_Construct_UClass_UObject@@YAPEAVUClass@@XZ
?GetNetPushIdDynamic@UObject@@UEBA_KXZ
?SetNetPushIdDynamic@UObject@@EEAAX_K@Z
?ValidateGeneratedRepEnums@UObject@@UEBAXAEBV?$TArray@UFRepRecord@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?CheckDefaultSubobjectsInternal@UObject@@MEBA_NXZ
?MarkAsEditorOnlySubobject@UObject@@UEAAXXZ
?RegenerateClass@UObject@@UEAAPEAVUClass@@PEAV2@PEAV1@@Z
?ProcessConsoleExec@UObject@@UEAA_NPEB_WAEAVFOutputDevice@@PEAV1@@Z
?CallRemoteFunction@UObject@@UEAA_NPEAVUFunction@@PEAXPEAUFOutParmRec@@PEAUFFrame@@@Z
?GetFunctionCallspace@UObject@@UEAAHPEAVUFunction@@PEAUFFrame@@@Z
?ProcessEvent@UObject@@UEAAXPEAVUFunction@@PEAX@Z
?OverridePerObjectConfigSection@UObject@@UEAAXAEAVFString@@@Z
?OverrideConfigSection@UObject@@UEAAXAEAVFString@@@Z
?GetConfigOverridePlatform@UObject@@UEBAPEB_WXZ
?BuildSubobjectMapping@UObject@@UEBAXPEAV1@AEAV?$TMap@PEAVUObject@@PEAV1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@PEAVUObject@@PEAV1@$0A@@@@@@Z
?PreDestroyFromReplication@UObject@@UEAAXXZ
?PostRepNotifies@UObject@@UEAAXXZ
?PostNetReceive@UObject@@UEAAXXZ
?PreNetReceive@UObject@@UEAAXXZ
?GetSubobjectsWithStableNamesForNetworking@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?IsSupportedForNetworking@UObject@@UEBA_NXZ
?IsFullNameStableForNetworking@UObject@@UEBA_NXZ
?IsNameStableForNetworking@UObject@@UEBA_NXZ
?RegisterReplicationFragments@UObject@@UEAAXAEAVFFragmentRegistrationContext@Net@UE@@W4EFragmentRegistrationFlags@34@@Z
?GetReplicatedCustomConditionState@UObject@@UEBAXAEAVFCustomPropertyConditionState@@@Z
?GetLifetimeReplicatedProps@UObject@@UEBAXAEAV?$TArray@VFLifetimeProperty@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?TagSubobjects@UObject@@UEAAXW4EObjectFlags@@@Z
?IsSafeForRootSet@UObject@@UEBA_NXZ
?IsLocalizedResource@UObject@@UEBA_NXZ
?GetPrimaryAssetId@UObject@@UEBA?AUFPrimaryAssetId@@XZ
?IsAsset@UObject@@UEBA_NXZ
?GetExternalActorExtendedAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?AreNativePropertiesIdenticalTo@UObject@@UEBA_NPEAV1@@Z
?GetRestoreForUObjectOverwrite@UObject@@UEAAPEAVFRestoreForUObjectOverwrite@@XZ
?GetExporterName@UObject@@UEAA?AVFName@@XZ
?GetResourceSizeEx@UObject@@UEAAXAEAUFResourceSizeEx@@@Z
?GetNativePropertyValues@UObject@@UEBA_NAEAV?$TMap@VFString@@V1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@VFString@@V1@$0A@@@@@I@Z
?GetDesc@UObject@@UEAA?AVFString@@XZ
?Rename@UObject@@UEAA_NPEB_WPEAV1@I@Z
?PostReloadConfig@UObject@@UEAAXPEAVFProperty@@@Z
?PostEditImport@UObject@@UEAAXXZ
?ImportCustomProperties@UObject@@UEAAXPEB_WPEAVFFeedbackContext@@@Z
?ExportCustomProperties@UObject@@UEAAXAEAVFOutputDevice@@I@Z
?Get@FWeakObjectPtr@@QEBAPEAVUObject@@_N@Z
?GetPreloadDependencies@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?IsDestructionThreadSafe@UObject@@UEBA_NXZ
?IsPostLoadThreadSafe@UObject@@UEBA_NXZ
?HasNonEditorOnlyReferences@UObject@@UEBA_NXZ
?IsEditorOnly@UObject@@UEBA_NXZ
?NeedsLoadForEditorGame@UObject@@UEBA_NXZ
?NeedsLoadForTargetPlatform@UObject@@UEBA_NPEBVITargetPlatform@@@Z
?NeedsLoadForServer@UObject@@UEBA_NXZ
?NeedsLoadForClient@UObject@@UEBA_NXZ
?PostDuplicate@UObject@@UEAAX_N@Z
?PostDuplicate@UObject@@UEAAXW4Type@EDuplicateMode@@@Z
?PreDuplicate@UObject@@UEAAXAEAUFObjectDuplicationParameters@@@Z
?PostRename@UObject@@UEAAXPEAV1@VFName@@@Z
?PostInterpChange@UObject@@UEAAXPEAVFProperty@@@Z
?ShutdownAfterError@UObject@@UEAAXXZ
?Serialize@UObject@@UEAAXAEAVFArchive@@@Z
?Serialize@UObject@@UEAAXVFStructuredArchiveRecord@@@Z
?FinishDestroy@UObject@@UEAAXXZ
?IsReadyForFinishDestroy@UObject@@UEAA_NXZ
?BeginDestroy@UObject@@UEAAXXZ
?PostLoadSubobjects@UObject@@UEAAXPEAUFObjectInstancingGraph@@@Z
?PostLoad@UObject@@UEAAXXZ
?IsReadyForAsyncPostLoad@UObject@@UEBA_NXZ
?ResolveSubobject@UObject@@UEAA_NPEB_WAEAPEAV1@_N@Z
?PreSave@UObject@@UEAAXPEBVITargetPlatform@@@Z
?PreSave@UObject@@UEAAXVFObjectPreSaveContext@@@Z
?PostSaveRoot@UObject@@UEAAX_N@Z
?PostSaveRoot@UObject@@UEAAXVFObjectPostSaveRootContext@@@Z
?PreSaveRoot@UObject@@UEAA_NPEB_W@Z
?PreSaveRoot@UObject@@UEAAXVFObjectPreSaveRootContext@@@Z
?PostCDOContruct@UObject@@UEAAXXZ
?PostReinitProperties@UObject@@UEAAXXZ
?PostInitProperties@UObject@@UEAAXXZ
?GetDetailedInfoInternal@UObject@@MEBA?AVFString@@XZ
?OnClusterMarkedAsPendingKill@UObjectBaseUtility@@UEAAXXZ
?CreateCluster@UObjectBaseUtility@@UEAAXXZ
?CanBeInCluster@UObjectBaseUtility@@UEBA_NXZ
?CanBeClusterRoot@UObjectBaseUtility@@UEBA_NXZ
?GetFNameForStatID@UObjectBase@@UEBA?AVFName@@XZ
?DeferredRegister@UObjectBase@@MEAAXPEAVUClass@@PEB_W1@Z
?RegisterDependencies@UObjectBase@@MEAAXXZ
?Get@FWeakObjectPtr@@QEBAPEAVUObject@@XZ
?GetTransientPackage@@YAPEAVUPackage@@XZ
?StaticAllocateObject@@YAPEAVUObject@@PEBVUClass@@PEAV1@VFName@@W4EObjectFlags@@W4EInternalObjectFlags@@_NPEA_NPEAVUPackage@@@Z
?ConstructUEnum@UECodeGen_Private@@YAXAEAPEAVUEnum@@AEBUFEnumParams@1@@Z
?ConstructUPackage@UECodeGen_Private@@YAXAEAPEAVUPackage@@AEBUFPackageParams@1@@Z
?ConstructUClass@UECodeGen_Private@@YAXAEAPEAVUClass@@AEBUFClassParams@1@@Z
??1UObjectBase@@UEAA@XZ
?GetStaticEnum@@YAPEAVUEnum@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
?RegisterCompiledInInfo@@YAXP6APEAVUPackage@@XZPEB_WAEAU?$TRegistrationInfo@VUPackage@@UFPackageReloadVersionInfo@@@@AEBUFPackageReloadVersionInfo@@@Z
?RegisterCompiledInInfo@@YAXPEB_WPEBUFClassRegisterCompiledInInfo@@_KPEBUFStructRegisterCompiledInInfo@@2PEBUFEnumRegisterCompiledInInfo@@2@Z
?GetTypedOuter@UObjectBaseUtility@@QEBAPEAVUObject@@PEAVUClass@@@Z
?StaticClass@UObject@@SAPEAVUClass@@XZ
?StaticConfigName@UObject@@SAPEB_WXZ
??0UObject@@QEAA@XZ
??0UObject@@QEAA@AEAVFVTableHelper@@@Z
?AddReferencedObjects@UObject@@SAXPEAV1@AEAVFReferenceCollector@@@Z
??4FWeakObjectPtr@@QEAAXPEBVUObject@@@Z
?GetPrestreamPackages@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z

unrealserver-engine

?GetTimerManager@UWorld@@QEBAAEAVFTimerManager@@XZ
?GetPrivateStaticClass@UGameInstance@@CAPEAVUClass@@XZ
?GetWorld@UGameInstance@@UEBAPEAVUWorld@@XZ
?FindLocalPlayerFromUniqueNetId@UGameInstance@@QEBAPEAVULocalPlayer@@AEBUFUniqueNetIdRepl@@@Z
?GetPrimaryPlayerUniqueIdRepl@UGameInstance@@QEBA?AUFUniqueNetIdRepl@@XZ
?GetFirstGamePlayer@UEngine@@QEAAPEAVULocalPlayer@@PEAVUWorld@@@Z
?FindTimer@FTimerManager@@IEAAPEAUFTimerData@@AEBUFTimerHandle@@@Z
?InternalSetTimer@FTimerManager@@AEAAXAEAUFTimerHandle@@$$QEAUFTimerUnifiedDelegate@@M_NM@Z
?InternalClearTimer@FTimerManager@@AEAAXUFTimerHandle@@@Z
?GEngine@@3PEAVUEngine@@EA

unrealserver-onlinesubsystem

??0FOnlineSessionSettings@@QEAA@XZ
??1FOnlineSessionSettings@@UEAA@XZ
??4FOnlineSessionSettings@@QEAAAEAV0@$$QEAV0@@Z
??4FOnlineSessionSettings@@QEAAAEAV0@AEBV0@@Z
?Get@IOnlineSubsystem@@SAPEAV1@AEBVFName@@@Z
?LogOnline@@3UFLogCategoryLogOnline@@A

vcruntime140

memcpy
__C_specific_handler
__std_type_info_destroy_list
__current_exception
_purecall
__current_exception_context
memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_crt_at_quick_exit
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
terminate
_initterm_e
_crt_atexit
_cexit
_seh_filter_dll
_initterm

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead

Exports

Exports

??$StaticClass@VURejoinCheck@@@@YAPEAVUClass@@XZ
??$StaticEnum@W4ERejoinStatus@@@@YAPEAVUEnum@@XZ
??0URejoinCheck@@QEAA@AEAVFVTableHelper@@@Z
??0URejoinCheck@@QEAA@XZ
??1URejoinCheck@@UEAA@XZ
??2URejoinCheck@@SAPEAX_KPEAW4EInternal@@@Z
??2URejoinCheck@@SAPEAX_KW4EInternal@@PEAVUObject@@VFName@@W4EObjectFlags@@@Z
??3URejoinCheck@@SAXPEAX@Z
??_7URejoinCheck@@6B@
?Analytics_RecordRejoinAttempt@URejoinCheck@@EEBAXAEBVFOnlineSessionSearchResult@@W4ERejoinAttemptResult@@@Z
?Analytics_RecordRejoinDetected@URejoinCheck@@EEBAXAEBVFOnlineSessionSearchResult@@@Z
?CheckRejoinStatus@URejoinCheck@@UEAAXAEBV?$TDelegate@$$A6AXW4ERejoinStatus@@@ZUFDefaultDelegateUserPolicy@@@@@Z
?ClearTimers@URejoinCheck@@IEAAXXZ
?GetPrivateStaticClass@URejoinCheck@@CAPEAVUClass@@XZ
?GetRejoinStateFromSearchResult@URejoinCheck@@EEBA?AW4ERejoinStatus@@AEBVFOnlineSessionSearchResult@@@Z
?GetSearchResult@URejoinCheck@@IEBAAEBVFOnlineSessionSearchResult@@XZ
?GetStatus@URejoinCheck@@QEBA?AW4ERejoinStatus@@XZ
?GetWorld@URejoinCheck@@MEBAPEAVUWorld@@XZ
?HasCompletedCheck@URejoinCheck@@QEBA_NXZ
?IsAttemptingRejoin@URejoinCheck@@IEBA_NXZ
?IsRejoinAvailable@URejoinCheck@@QEBA_NXZ
?IsRejoinCheckEnabled@URejoinCheck@@UEBA_NXZ
?OnCheckRejoinComplete@URejoinCheck@@AEAAXH_NAEBV?$TArray@VFOnlineSessionSearchResult@@V?$TSizedDefaultAllocator@$0CA@@@@@V?$TDelegate@$$A6AXW4ERejoinStatus@@@ZUFDefaultDelegateUserPolicy@@@@@Z
?OnFinalRejoinCheckComplete@URejoinCheck@@AEAAXW4ERejoinStatus@@@Z
?OnRejoinCheckStatusChanged@URejoinCheck@@QEAAAEAV?$TMulticastDelegate@$$A6AXW4ERejoinStatus@@@ZUFDefaultDelegateUserPolicy@@@@XZ
?OnRejoinFailure@URejoinCheck@@MEAAXW4ERejoinAttemptResult@@@Z
?OnRejoinLastSessionComplete@URejoinCheck@@AEAAAEAV?$TDelegate@$$A6AXW4ERejoinAttemptResult@@@ZUFDefaultDelegateUserPolicy@@@@XZ
?ProcessRejoinCheck@URejoinCheck@@AEAAX_NAEBV?$TArray@VFOnlineSessionSearchResult@@V?$TSizedDefaultAllocator@$0CA@@@@@AEBV?$TDelegate@$$A6AXW4ERejoinStatus@@@ZUFDefaultDelegateUserPolicy@@@@@Z
?RejoinCheckTimer@URejoinCheck@@AEAAXXZ
?RejoinLastSession@URejoinCheck@@QEAAXAEBV?$TDelegate@$$A6AXW4ERejoinAttemptResult@@@ZUFDefaultDelegateUserPolicy@@@@@Z
?RejoinViaSession@URejoinCheck@@EEAAXXZ
?Reset@URejoinCheck@@UEAAXXZ
?SetStatus@URejoinCheck@@QEAAXW4ERejoinStatus@@@Z
?StartRejoinChecks@URejoinCheck@@AEAAXXZ
?StaticClass@URejoinCheck@@SAPEAVUClass@@XZ
?StaticClassCastFlags@URejoinCheck@@SA?AW4EClassCastFlags@@XZ
?StaticClassFlags@URejoinCheck@@2W4EClassFlags@@B
?StaticPackage@URejoinCheck@@SAPEB_WXZ
?StaticRegisterNativesURejoinCheck@URejoinCheck@@CAXXZ
?TravelToSession@URejoinCheck@@IEAAXXZ
?Z_Construct_UClass_URejoinCheck@@YAPEAVUClass@@XZ
?Z_Construct_UClass_URejoinCheck_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UEnum_Rejoin_ERejoinStatus@@YAPEAVUEnum@@XZ
?__DefaultConstructor@URejoinCheck@@SAXAEBVFObjectInitializer@@@Z
?__VTableCtorCaller@URejoinCheck@@SAPEAVUObject@@AEAVFVTableHelper@@@Z
InitializeModule

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uedbg
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae1ced166f9bdeba1cdd94d5064b30e0

Headers

DLL Characteristics

File Characteristics

Imports

unrealserver-core

unrealserver-coreuobject

unrealserver-engine

unrealserver-onlinesubsystem

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 25KB

.uedbg Size: 2KB - Virtual size: 2KB

.rdata Size: 29KB - Virtual size: 29KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 59KB - Virtual size: 58KB

.reloc Size: 1024B - Virtual size: 752B

.text
Size: 25KB - Virtual size: 25KB

.uedbg
Size: 2KB - Virtual size: 2KB

.rdata
Size: 29KB - Virtual size: 29KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 59KB - Virtual size: 58KB

.reloc
Size: 1024B - Virtual size: 752B