NEAS[.]ea183c51573f5c4e9d3907532e73fd10[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ea183c51573f5c4e9d3907532e73fd10.exe
Size

2.2MB
MD5

ea183c51573f5c4e9d3907532e73fd10
SHA1

0287728907468d417b32d89824fb818b006e2193
SHA256

b2b05c1e6142d003d957bb61c74d8538043fa12d132fe79c9badbd371da758d5
SHA512

289d115a35a148bdbf27e458f73654266103e126ecc72789f22ad4f4ea371a9f9d6f4c594eba94252a0e1a84ba720aff50e9a01ba17d6b672e3dc24edaab9f0d
SSDEEP

24576:iIwpWf1hyq9P3+GY9cJUf7LX/MNmO0tZEqYh4grMgkRNyrna6gfqFAzTI9CpTzsA:32T6Y7LvM4y7ovT5GhdHu

Score

1^/10

Malware Config

Signatures

Files

NEAS.ea183c51573f5c4e9d3907532e73fd10.exe
.exe windows:5 windows x86

76e5b6f071cb1baba7994ef7d150dc63

Code Sign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

73:93:ad:65:df:71:bf:83:c8:88:24:20:f2:fe:0a:56
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

19/05/2009, 00:00

Not After

02/07/2011, 23:59

Subject

CN=W3i\, LLC,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=W3i\, LLC,L=Sartell,ST=Minnesota,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

77:79:a2:47:f0:83:3f:29:95:42:f6:85:90:7f:21:85:5a:0c:02:72
Signer

Actual PE Digest

77:79:a2:47:f0:83:3f:29:95:42:f6:85:90:7f:21:85:5a:0c:02:72

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

psapi

GetModuleFileNameExA
EnumProcesses

userenv

ExpandEnvironmentStringsForUserA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

wininet

InternetCrackUrlA
InternetCombineUrlA
InternetGetCookieA
InternetSetCookieA
DeleteUrlCacheEntry
InternetCloseHandle
InternetOpenA
InternetSetStatusCallback
InternetSetOptionA
InternetConnectA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
HttpQueryInfoA
InternetErrorDlg
InternetReadFileExA

kernel32

LoadLibraryW
FormatMessageW
GetFileAttributesW
CreateFileW
FlushFileBuffers
GetTempPathW
LockFileEx
GetDiskFreeSpaceW
CreateFileMappingA
GetDiskFreeSpaceA
GetFileAttributesExW
DeleteFileW
AreFileApisANSI
WaitForMultipleObjects
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
SetLastError
FreeResource
lstrcmpW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcmpA
InterlockedExchange
GetLocaleInfoA
ConvertDefaultLocale
GetCurrentThread
SetThreadPriority
SetEvent
SuspendThread
CreateEventA
GetModuleFileNameW
InterlockedDecrement
RaiseException
GetThreadLocale
GetSystemTimeAsFileTime
InterlockedIncrement
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
DuplicateHandle
GetVolumeInformationA
SetErrorMode
GetFileSizeEx
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
GetTimeFormatA
GetDateFormatA
HeapReAlloc
RtlUnwind
VirtualProtect
VirtualAlloc
VirtualQuery
ExitThread
CreateThread
HeapSize
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStdHandle
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
UnlockFileEx
LockFile
UnlockFile
InterlockedCompareExchange
QueryPerformanceCounter
SetEndOfFile
UnmapViewOfFile
MapViewOfFile
GetFullPathNameW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GlobalMemoryStatus
SetFilePointer
WriteFile
ReadFile
GetFileSize
ExpandEnvironmentStringsA
GetSystemDirectoryA
GetWindowsDirectoryA
GetSystemInfo
GetVersionExA
ResumeThread
Sleep
GetCurrentProcess
FileTimeToLocalFileTime
GetFileTime
CreateFileA
GetTimeZoneInformation
FileTimeToSystemTime
GetCurrentProcessId
GetProcAddress
Module32Next
Module32First
GetExitCodeProcess
TerminateProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
OpenProcess
WaitForSingleObject
CreateProcessA
CloseHandle
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetCurrentThreadId
GetLongPathNameA
MultiByteToWideChar
GetFullPathNameA
GetCurrentDirectoryA
GetModuleFileNameA
MoveFileA
GetFileAttributesA
SetFileAttributesA
RemoveDirectoryA
DeleteFileA
GetTempFileNameA
GetSystemTime
CreateDirectoryA
FindClose
FindNextFileA
FindFirstFileA
LocalFree
lstrlenA
LocalAlloc
GetModuleHandleA
FormatMessageA
GetUserDefaultUILanguage
FindResourceExA
LoadLibraryExA
FreeLibrary
EnumResourceLanguagesA
EnumResourceNamesA
LoadLibraryA
EndUpdateResourceA
HeapFree
UpdateResourceA
GetProcessHeap
HeapAlloc
BeginUpdateResourceA
WritePrivateProfileStringA
CreateMutexA
ReleaseMutex
GetTempPathA
GetPrivateProfileStringA
GetPrivateProfileIntA
CopyFileA
SystemTimeToFileTime
GetLocalTime
GetTickCount
GetLastError
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
ResetEvent
GetModuleHandleW

user32

PostThreadMessageA
LoadCursorA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
DestroyMenu
SetCursor
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
ReleaseDC
GetDC
RegisterWindowMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
TrackPopupMenu
GetKeyState
SetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
EqualRect
CopyRect
PtInRect
DefWindowProcA
CallWindowProcA
GetMenu
IntersectRect
GetWindowPlacement
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetNextDlgTabItem
GetWindowTextLengthA
GetWindowTextA
GetFocus
SetWindowPos
SetFocus
ShowWindow
MoveWindow
GetKeyboardState
IsWindow
SendMessageA
EnableWindow
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
GetWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetDlgItem
SetWindowTextA
SetWindowLongA
EndDialog
GetSysColorBrush
GetSysColor
GetDlgCtrlID
GetWindowLongA
DialogBoxParamA
GetClientRect
IsIconic
SetClassLongA
AppendMenuA
CreatePopupMenu
GetCursorPos
MessageBeep
GetNextDlgGroupItem
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
CharNextA
ReleaseCapture
SetCapture
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
UnregisterClassA
CharUpperA
UpdateWindow
MessageBoxA
MessageBoxExA
PostMessageA
LoadIconA
IsWindowVisible
SetForegroundWindow
SetTimer
KillTimer
LoadStringA
EnumWindows
IsWindowEnabled
GetWindowThreadProcessId
GetClassNameA
EnumChildWindows
GetShellWindow
GetSystemMetrics
SystemParametersInfoA
EnumDisplaySettingsA
FindWindowA
GetDesktopWindow
GetWindowRect
WaitForInputIdle
GetParent
AdjustWindowRectEx
OffsetRect

gdi32

DeleteDC
GetStockObject
ExtSelectClipRgn
GetMapMode
GetRgnBox
GetBkColor
GetTextColor
ScaleWindowExtEx
SetWindowExtEx
SetMapMode
RestoreDC
SaveDC
ExtTextOutA
CreateBitmap
CreateRectRgnIndirect
GetObjectA
SetTextColor
GetClipBox
GetDeviceCaps
SetBkColor
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegOpenKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
GetSidIdentifierAuthority
IsValidSid
RegEnumValueA
RegEnumKeyExA
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RevertToSelf
RegCreateKeyExA
RegCloseKey
RegOpenCurrentUser
AdjustTokenPrivileges
GetLengthSid
ImpersonateLoggedOnUser
DuplicateTokenEx
LookupPrivilegeValueA
SetTokenInformation
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken

shell32

Shell_NotifyIconA
SHGetSpecialFolderPathA
ShellExecuteExA

comctl32

InitCommonControlsEx

shlwapi

PathCombineA
PathFindExtensionA
PathStripPathA
PathRemoveFileSpecA
PathIsDirectoryEmptyA
SHDeleteKeyA
UrlEscapeA
SHDeleteEmptyKeyA
PathFindFileNameA
PathRemoveFileSpecW
PathStripToRootA
PathRenameExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoInitialize
StringFromGUID2
CoFreeUnusedLibraries
CoTaskMemFree
OleUninitialize
CoInitializeSecurity
OleInitialize
CLSIDFromProgID
CoTaskMemAlloc
CoUninitialize
CoInitializeEx
CLSIDFromString
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CreateILockBytesOnHGlobal
CoCreateInstance
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoCreateGuid
CoGetClassObject

oleaut32

SysAllocStringByteLen
VariantChangeType
VariantInit
SysAllocStringLen
VariantCopy
DispCallFunc
SysAllocString
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayCreate
SysStringLen
SafeArrayCreateVector
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
VariantClear
SysFreeString

urlmon

IsValidURL

oleacc

CreateStdAccessibleObject
LresultFromObject

Sections

.text
Size: 533KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-ti
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-fr
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-fr
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 512B - Virtual size: 183B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 417KB - Virtual size: 417KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-fr
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-fr
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-ti
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 410KB - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

76e5b6f071cb1baba7994ef7d150dc63

Code Sign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

73:93:ad:65:df:71:bf:83:c8:88:24:20:f2:fe:0a:56Certificate

Extended Key Usages

Key Usages

77:79:a2:47:f0:83:3f:29:95:42:f6:85:90:7f:21:85:5a:0c:02:72Signer

Headers

DLL Characteristics

File Characteristics

Imports

psapi

userenv

version

wininet

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

oleacc

Sections

.text Size: 533KB - Virtual size: 532KB

.text-co Size: 97KB - Virtual size: 96KB

.text-co Size: 31KB - Virtual size: 31KB

.text-co Size: 29KB - Virtual size: 29KB

.text-co Size: 13KB - Virtual size: 12KB

.text-co Size: 165KB - Virtual size: 164KB

.text-co Size: 93KB - Virtual size: 92KB

.text-co Size: 49KB - Virtual size: 48KB

.text-co Size: 20KB - Virtual size: 20KB

.text-co Size: 16KB - Virtual size: 15KB

.text-co Size: 25KB - Virtual size: 25KB

.text-ti Size: 28KB - Virtual size: 27KB

.text-co Size: 17KB - Virtual size: 16KB

.text-fr Size: 129KB - Virtual size: 129KB

.text-co Size: 54KB - Virtual size: 53KB

.text-fr Size: 85KB - Virtual size: 85KB

.text-co Size: 512B - Virtual size: 183B

.rdata Size: 417KB - Virtual size: 417KB

.data Size: 25KB - Virtual size: 46KB

.data-fr Size: 512B - Virtual size: 60B

.data-co Size: 512B - Virtual size: 160B

.data-co Size: 512B - Virtual size: 48B

.data-co Size: 512B - Virtual size: 52B

.data-fr Size: 512B - Virtual size: 44B

.data-co Size: 512B - Virtual size: 44B

.data-ti Size: 1024B - Virtual size: 1024B

.data-co Size: 512B - Virtual size: 68B

.data-co Size: 512B - Virtual size: 44B

.data-co Size: 512B - Virtual size: 44B

.data-co Size: 512B - Virtual size: 44B

.data-co Size: 512B - Virtual size: 44B

.data-co Size: 512B - Virtual size: 44B

.data-co Size: 512B - Virtual size: 44B

.data-co Size: 512B - Virtual size: 44B

.data-co Size: 512B - Virtual size: 20B

.rsrc Size: 410KB - Virtual size: 409KB

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

73:93:ad:65:df:71:bf:83:c8:88:24:20:f2:fe:0a:56
Certificate

77:79:a2:47:f0:83:3f:29:95:42:f6:85:90:7f:21:85:5a:0c:02:72
Signer

.text
Size: 533KB - Virtual size: 532KB

.text-co
Size: 97KB - Virtual size: 96KB

.text-co
Size: 31KB - Virtual size: 31KB

.text-co
Size: 29KB - Virtual size: 29KB

.text-co
Size: 13KB - Virtual size: 12KB

.text-co
Size: 165KB - Virtual size: 164KB

.text-co
Size: 93KB - Virtual size: 92KB

.text-co
Size: 49KB - Virtual size: 48KB

.text-co
Size: 20KB - Virtual size: 20KB

.text-co
Size: 16KB - Virtual size: 15KB

.text-co
Size: 25KB - Virtual size: 25KB

.text-ti
Size: 28KB - Virtual size: 27KB

.text-co
Size: 17KB - Virtual size: 16KB

.text-fr
Size: 129KB - Virtual size: 129KB

.text-co
Size: 54KB - Virtual size: 53KB

.text-fr
Size: 85KB - Virtual size: 85KB

.text-co
Size: 512B - Virtual size: 183B

.rdata
Size: 417KB - Virtual size: 417KB

.data
Size: 25KB - Virtual size: 46KB

.data-fr
Size: 512B - Virtual size: 60B

.data-co
Size: 512B - Virtual size: 160B

.data-co
Size: 512B - Virtual size: 48B

.data-co
Size: 512B - Virtual size: 52B

.data-fr
Size: 512B - Virtual size: 44B

.data-co
Size: 512B - Virtual size: 44B

.data-ti
Size: 1024B - Virtual size: 1024B

.data-co
Size: 512B - Virtual size: 68B

.data-co
Size: 512B - Virtual size: 44B

.data-co
Size: 512B - Virtual size: 44B

.data-co
Size: 512B - Virtual size: 44B

.data-co
Size: 512B - Virtual size: 44B

.data-co
Size: 512B - Virtual size: 44B

.data-co
Size: 512B - Virtual size: 44B

.data-co
Size: 512B - Virtual size: 44B

.data-co
Size: 512B - Virtual size: 20B

.rsrc
Size: 410KB - Virtual size: 409KB