�� [����6s��M�$z�j3FD$e�^V�-tX���~�x���w�5�4Ԗ\�q�C%��xYQ�깗[z��}uK���A�����9^�U�K-]��ƶ�����蘉��'c z` ����If�f��+;0�u�)��8����N�ʬ�B*��y>a�������k ! �m���D��l��LO4���XO����/���_���@4�{�O�'�G���r�+��������FU�7Y��ws˅`��O���t���/�Dn%!],�7���Te�f�#GT���7�n;+��!3bt�c�>p�E����\���xyl!�2zt��Qk�Np�W�����8KU�C���$~���VKp>���d�i�ӱc���Ըa�Vqˇ����aG=Œ=A�7kl��J7t�d��td<�+�*�07Kκ�)x���'�.��%m+�����-�����E����|\��!ξ����+,2^�i[�굸5}�r�7�=f��{O�*sCIt����6�Ҧ�]P;�s���{������,�w���Ȯ,d����M��☺����nq�vlYF�C������?S2���ej�xH����WF;�>/a�7Ê�ݘ��*��/���m��z(�w�hzŜk�r#_eX��{���dv��� �{ǰk~Q��mq�Q&Wu"u~:���O����2j����.�߭���s���0b,��D��� ��@ʃa�axʨ��R/A+U�Nm�4Y�I��3=��8YP�V��N'r)�T��5'�S���T��Hp�pğWl�[�.~���:PvBvX�e�� ZDҧA��Ѻ��O�O�Soy2��]�_�r��V�O���^�e�|�w��2��n��p?��wm�;|fi>�*�!���S4i�Z�����ϗ&� p_��(�0�?��n���vB�Uи8w�u5�+���Z�_6U�S���a�Q$8&�����J��ct���(M�T͖X!\��Eݻlq�1��(I`���2 �f$م�@��k1FGf���L4,.7=�@;���H��E5MLDkC����I� ���W"LA�P΅ a�����ђ�u3�x$�VRf]�����]ldC�-���YDco���� +�Υ�{6��2��Ltf.e����+jI��6m_ڂܬe�x���7���]��������IOm^K��ȗC�4P�:Q#ף���,�������f��1,��?���Z�o�da���Y�2�\�F���މ����~��m���d,�oIS[��g|��,4T�]$�s(6����Oj2y�7yo�a�],�'Wi�F�ۆ� �e�%��?R'A�5���ߤ^/Fq�0����N�{Į���p���ְ��K�9���#�늃�)��.��"gSˤ��eb�]����<��퉧�c7�o%"-$הG���]͞"�i%>Nr#Ҝ�����Uk����1�xh�c��h��Xtڔ� �'��$�v��Y��#�MoC����I.8�*5���{�+$�--s1X<���ӆ���p�%a�e�:@Y<Ƃ"b����`O?�*D��P�}���ȃm���@1k�;#��%:?i�iUB����=�D�~V��3�%�l=��SYJ$'l��tX�h��p7�w",G�f;���7�/W�P�Z�Y���z�2��Lɦ���� h�Nzw^�t��KrQ�)�F��h��&y����3�0����4�!퀭L75{�BKƔ��F;y~���w�8C�| �\�T��Vu���bf�k;�wH%�n�����p���Ǹ�,Щsl@s�y����;�cc��dE����5�2���Ë�K3 Z|:�V���� Z��'�.p��l��f�l�S�)f��ƼzUq���?�젼���A�xM�r{l�����M��Ť��u�/�r~Lp�R&�I��� >����Q7D���F 7���ʭ��$����<����NdDnO&3P%�&O����`�Ӻ��fQ�ʟ����~pƒ�C���b�c@�$��NR�aؿ�J`=���^����?��;g[��G�a�?)H-��ur����H��E-Z�Dl����5Ԩ�l���jM��R�F%^��a-x�d0p����P���*^4�K�-��_��rуo�_$*,A*�*�X����sE@����.\;R���,?�P1�EhЩ�4m�9R��1��HxA�Śk��7�ۣ��@��Y8��VjшF��N�4Mo�^�2 A\���1�O؏t˘ס ����E�)�p�p�x��Oe�- ����%И���5�M��8q�������5`�6~��I��6�9���#ݡ}2�� p|9��|�� �h�����t6�m�=a��D���,_sz���JftEP���uCJ܉�C�,���I^K�,������-���J;@D���%h���?dJ�n~އ����C־\<�N���Xws� K�����L\)T;�:��a�YĔ�z>h"��_`�K�,&S�<kc�1�><2R������F�>N�TO��U��@�r�o킋���2)<KYzWRc��@Dc:�r�P�dR��`��q.��'��ș�6�v���˓����F�cV��Ȥ������|�'W �2����\�&2I����G=g}{}>���w�Bl4x9C���� +�[�> �F���Ӕ� /�z���n5W����ӝ� X~^:�T�B�Yl�����w�k��s�C�c��$���'9�ն�b����!�ׇM8�����Ӽͯ*�0�Q"���`��U'��ˇ�P�W;���V_��Ok��*���>�,\���I(��i���n&ﱸ ��c'�g��Vh3Q�I��&TG��R��Z�|c�;S~:��7���}������u��Uq�������5�&�P0��Ҋ*i�Q����5;RIʄ��#��JSxa��h5��m�b=��g�$JB��'���s�䘑$���>3-B����������N�ʺZģ���4h�_��~��`���ok��?�ZI��SW|[� L^�����'A���0`u+J����W��KŠK�����'l�������Q-���}�>�W��u��M<>2�
Behavioral task
behavioral1
Sample
NEAS.a546f11a6ad9834ea31deaacbba49300.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.a546f11a6ad9834ea31deaacbba49300.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.a546f11a6ad9834ea31deaacbba49300.exe
-
Size
9.7MB
-
MD5
a546f11a6ad9834ea31deaacbba49300
-
SHA1
6dc3eaf21db8b58d5f79f131849c6b3c29c7c524
-
SHA256
9d7535518d04a188a3ff493f964be56336f8ae83be3d603dce95a26b6fc798a1
-
SHA512
efc00c48a9ad0a29444c35b013991049d8ec34dd03d893d17c1d1c019caf24b5d6909be5db04bba8243a5a5957b1a492c1127414b414ed476cac34f11edc22b8
-
SSDEEP
196608:EiqeGKW0KB/89BpsFHwBND1H/1jRyWyVHA263cbZolJUWppIXQ6EGrm:E1kLDsFHwBFl10WcN6wM7PIXQ6y
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.a546f11a6ad9834ea31deaacbba49300.exe
Files
-
NEAS.a546f11a6ad9834ea31deaacbba49300.exe.exe windows:5 windows x86
0920d1c6c8148a4e8c5a61bf3d4c62fd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
DragFinish
DragQueryFileA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetFileInfoA
SHAppBarMessage
ShellExecuteA
SHBrowseForFolderA
SHCreateDirectoryExA
shlwapi
PathRemoveFileSpecW
PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFindExtensionA
PathFileExistsA
StrFormatKBSizeA
user32
LoadCursorW
InvertRect
HideCaret
EnableScrollBar
MessageBeep
GetIconInfo
DrawIconEx
LoadImageA
IsRectEmpty
DrawFocusRect
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
LoadImageW
TrackMouseEvent
InvalidateRect
KillTimer
SetTimer
DeleteMenu
SetCursor
ShowOwnedPopups
MapDialogRect
GetAsyncKeyState
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
OffsetRect
SetRectEmpty
CopyImage
SystemParametersInfoA
GetMenuItemInfoA
DestroyMenu
IntersectRect
InflateRect
PostQuitMessage
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
GetTopWindow
GetClassLongA
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetClientRect
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
RedrawWindow
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
NotifyWinEvent
CallWindowProcA
DefWindowProcA
PostMessageA
OpenClipboard
GetMessagePos
RegisterWindowMessageA
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
FillRect
ScreenToClient
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
IsDialogMessageA
SetWindowLongA
SendDlgItemMessageA
CheckDlgButton
GetDlgItem
SetWindowPos
MoveWindow
ShowWindow
IsWindow
GetScrollPos
SetScrollPos
SetFocus
RealChildWindowFromPoint
GetWindow
GetClassNameA
PtInRect
ClientToScreen
GetWindowRect
SetWindowTextA
GetFocus
GetDlgCtrlID
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateA
DrawEdge
DrawFrameControl
IsZoomed
LoadMenuW
CharUpperA
DestroyIcon
CallNextHookEx
SetWindowsHookExA
GetCursorPos
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
GetWindowTextLengthA
GetWindowTextA
GetLastActivePopup
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
UnionRect
UpdateLayeredWindow
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyA
GetKeyNameTextA
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongA
SetWindowRgn
RegisterClassA
SetParent
GetDesktopWindow
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
AppendMenuA
RemoveMenu
UnhookWindowsHookEx
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
LoadCursorA
SendMessageA
EnableWindow
IsWindowEnabled
MessageBoxA
GetWindowLongA
GetParent
GetWindowThreadProcessId
MonitorFromPoint
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageA
WaitMessage
GetKeyboardLayout
IsCharLowerA
MapVirtualKeyExA
GetKeyboardState
ToAsciiEx
LoadAcceleratorsW
CreateAcceleratorTableA
DestroyAcceleratorTable
CopyAcceleratorTableA
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuA
RegisterClipboardFormatA
CharUpperBuffA
IsClipboardFormatAvailable
GetUpdateRect
DrawMenuBar
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
GetMessageTime
GetUserObjectInformationW
CharUpperBuffW
MessageBoxW
GetProcessWindowStation
kernel32
RtlUnwind
GetSystemInfo
VirtualAlloc
VirtualQuery
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
HeapQueryInformation
GetCommandLineA
GetCommandLineW
QueryPerformanceFrequency
SetStdHandle
GetFileType
ExitProcess
GetStdHandle
GetStringTypeW
GetFileAttributesExW
CreateDirectoryW
CompareStringW
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FindFirstFileExA
IsValidCodePage
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
VerifyVersionInfoA
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
GetTempFileNameA
SearchPathA
GetProfileIntA
GetTempPathA
CreateFileW
VerSetConditionMask
GetWindowsDirectoryA
FindResourceExW
GetACP
GetCPInfo
GetOEMCP
VirtualProtect
GetUserDefaultUILanguage
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
FileTimeToLocalFileTime
OutputDebugStringW
GlobalFindAtomA
FindResourceA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeResource
GetSystemDirectoryW
EncodePointer
GlobalFlags
FreeLibrary
GetVolumeInformationA
lstrcmpiA
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameA
FlushFileBuffers
GetModuleFileNameA
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceW
CreateMutexA
GetLastError
Sleep
OpenProcess
TerminateProcess
CloseHandle
MoveFileA
DeleteFileA
GetPrivateProfileStringA
HeapFree
InitializeCriticalSectionAndSpinCount
HeapSize
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
GetProcAddress
GetCurrentProcess
SetUnhandledExceptionFilter
WriteProcessMemory
WaitForSingleObject
OpenMutexA
LoadLibraryA
CreateProcessA
CreateToolhelp32Snapshot
Process32First
Process32Next
Module32First
Module32Next
FindClose
GetCurrentDirectoryA
RemoveDirectoryA
SetFileAttributesA
FindFirstFileA
FindNextFileA
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
WriteFile
ReadFile
SetFilePointer
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
lstrcpyA
CreateDirectoryA
CreateFileA
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetLocalTime
FileTimeToSystemTime
GetTickCount
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
GlobalFree
LocalFree
MulDiv
FormatMessageA
CopyFileA
SetLastError
OutputDebugStringA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
LoadLibraryW
CompareStringA
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GetCurrentProcessId
lstrcmpA
GlobalGetAtomNameA
SetEvent
GetCurrentThreadId
SetThreadPriority
ResumeThread
GlobalAddAtomA
GetVersionExA
VirtualQuery
GetSystemTimeAsFileTime
GetModuleHandleA
CreateEventA
GetModuleFileNameW
LoadLibraryA
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
FreeLibrary
GetTickCount
GlobalFree
GetProcAddress
LocalAlloc
LocalFree
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
LoadResource
MultiByteToWideChar
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetCommandLineA
RaiseException
RtlUnwind
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapReAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
gdi32
GetClipBox
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
Escape
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
ExcludeClipRect
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
CreateBitmap
BitBlt
DeleteObject
GetDeviceCaps
CreateDCA
CopyMetaFileA
SaveDC
CreatePolygonRgn
SetTextAlign
GetTextFaceA
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
OffsetRgn
GetRgnBox
Rectangle
LPtoDP
CreateRoundRectRgn
Polyline
Polygon
DeleteDC
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
StretchBlt
SetPixel
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
CreateCompatibleBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExA
GetTextMetricsA
GetTextExtentPoint32A
DPtoLP
SetRectRgn
PatBlt
CreateRectRgnIndirect
CreateFontIndirectA
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutA
TextOutA
MoveToEx
GetObjectA
msimg32
TransparentBlt
AlphaBlend
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegDeleteValueA
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
uxtheme
GetThemePartSize
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
GetWindowTheme
DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
ole32
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CreateStreamOnHGlobal
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateInstance
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
oleaut32
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
VariantClear
VariantCopy
VariantChangeType
VarBstrFromDate
VariantInit
SysAllocString
SysAllocStringByteLen
SysStringLen
LoadTypeLi
SysFreeString
gdiplus
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
ws2_32
bind
WSAGetLastError
socket
setsockopt
inet_addr
htons
closesocket
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundA
wtsapi32
WTSSendMessageW
Exports
Exports
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.l1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE