Static task
static1
Behavioral task
behavioral1
Sample
af2bbe156f2cafef0da21e9a8b706dc482bd1abf39d61c705c8b8383c56b4d7c.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
af2bbe156f2cafef0da21e9a8b706dc482bd1abf39d61c705c8b8383c56b4d7c.exe
Resource
win10v2004-20231020-en
General
-
Target
af2bbe156f2cafef0da21e9a8b706dc482bd1abf39d61c705c8b8383c56b4d7c
-
Size
2.2MB
-
MD5
01afa090949e5dcc7fe0e720c96c282e
-
SHA1
1a849478a2f560f733cdf77c06ebcb5d19acf517
-
SHA256
af2bbe156f2cafef0da21e9a8b706dc482bd1abf39d61c705c8b8383c56b4d7c
-
SHA512
02036fae043d77e39e5100003c6367b5e4795efd35340190300541855c9975a1b9be6d1b0425884ce6ac41b3b650a3d61469474ac56b1f9d20dbbcb200996f35
-
SSDEEP
49152:fBRrmPNRJ6qKjcdMerX9kUDaLNiXicJFFRGNzj3:f72J6qKodm7wRGpj3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af2bbe156f2cafef0da21e9a8b706dc482bd1abf39d61c705c8b8383c56b4d7c
Files
-
af2bbe156f2cafef0da21e9a8b706dc482bd1abf39d61c705c8b8383c56b4d7c.exe windows:6 windows x86
d5800a58950ebbf5c922482c3ec08e3c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
cximagecrt
?Draw@CxImage@@QAEHPAUHDC__@@ABUtagRECT@@PAU3@_N3@Z
?AlphaCopy@CxImage@@QAE_NAAV1@@Z
?Resample2@CxImage@@QAE_NHHW4InterpolationMethod@1@W4OverflowMethod@1@QAV1@_N@Z
?Crop@CxImage@@QAE_NABUtagRECT@@PAV1@@Z
?GetHeight@CxImage@@QBEIXZ
?GetWidth@CxImage@@QBEIXZ
??0CxImage@@QAE@I@Z
libcurl
curl_easy_cleanup
curl_global_init
curl_global_cleanup
curl_easy_init
curl_easy_setopt
curl_easy_strerror
curl_easy_perform
curl_slist_append
kernel32
SetFilePointer
TerminateProcess
GetFileSize
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
CopyFileW
RemoveDirectoryW
TerminateThread
ExitProcess
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceW
MulDiv
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
DeleteFileW
GlobalAlloc
GlobalFree
GetVersionExW
WriteFile
GetTickCount
GetLastError
CreateFileW
CloseHandle
GetPrivateProfileStringW
MultiByteToWideChar
GetLocalTime
GetUserDefaultUILanguage
GetProcAddress
LoadLibraryW
GetModuleFileNameW
FreeLibrary
WideCharToMultiByte
Sleep
GetFileTime
WritePrivateProfileStringW
OpenMutexW
GetSystemInfo
GetModuleHandleW
GlobalMemoryStatusEx
GetSystemDirectoryW
CreatePipe
GetStartupInfoW
CreateProcessW
ReadFile
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventW
WaitForSingleObject
GetCurrentProcessId
GetExitCodeProcess
OpenProcess
K32EnumProcessModules
K32GetModuleFileNameExW
GetWindowsDirectoryW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetCurrentThreadId
CreateSemaphoreW
ReleaseSemaphore
CreateThread
CreateMutexW
SetEvent
FindFirstFileW
FindNextFileW
FindClose
GetSystemTimeAsFileTime
GlobalLock
GlobalUnlock
user32
DefWindowProcW
EnumWindows
GetClassNameW
FindWindowExW
GetWindowThreadProcessId
DispatchMessageW
TranslateMessage
CreateWindowExW
SetWindowLongW
DestroyWindow
GetWindowLongW
GetSystemMetrics
GetMonitorInfoW
MonitorFromWindow
GetMessageW
MoveWindow
EnableWindow
GetWindowRect
SetTimer
KillTimer
EnumDisplaySettingsW
PostQuitMessage
EnumDisplayMonitors
SystemParametersInfoW
ReleaseDC
GetWindowDC
ClientToScreen
MapVirtualKeyW
GetKeyState
wsprintfW
IsZoomed
IsIconic
SendMessageW
IsWindowVisible
ShowWindow
PostMessageW
SetParent
SetWindowTextW
GetDC
GetDesktopWindow
BringWindowToTop
SetForegroundWindow
SetWindowPos
LoadCursorW
GetCursorInfo
GetClientRect
ScreenToClient
GetParent
wvsprintfW
GetGUIThreadInfo
InvalidateRgn
CreateAcceleratorTableW
GetSysColor
SetCaretPos
ShowCaret
HideCaret
CreateCaret
SetRect
FillRect
DrawTextW
CharPrevW
GetCaretPos
GetCaretBlinkTime
GetWindowTextLengthW
GetWindowTextW
LoadImageW
AdjustWindowRectEx
GetMenu
GetClassInfoExW
RegisterClassExW
CallWindowProcW
GetWindow
IsRectEmpty
IntersectRect
MapWindowPoints
InvalidateRect
GetUpdateRect
EndPaint
BeginPaint
ReleaseCapture
SetCapture
GetFocus
GetActiveWindow
SetFocus
CharNextW
OffsetRect
UnionRect
SetCursor
RegisterClassW
MessageBoxW
SetWindowRgn
PtInRect
GetPropW
SetPropW
IsWindow
GetCursorPos
gdi32
GdiFlush
ExtTextOutW
TextOutW
MoveToEx
CreateDIBSection
SetStretchBltMode
StretchBlt
SetBkColor
ExtSelectClipRgn
SelectClipRgn
RoundRect
LineTo
GetTextExtentPoint32W
GetClipBox
GetCharABCWidthsW
CreateRectRgnIndirect
CreatePenIndirect
CombineRgn
SetTextColor
SetBkMode
CreateSolidBrush
CreatePatternBrush
GetObjectA
SetWindowOrgEx
GetTextMetricsW
SaveDC
RestoreDC
Rectangle
CreatePen
CreateFontIndirectW
CreateRoundRectRgn
DeleteObject
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
GetObjectW
DeleteDC
RemoveFontResourceW
AddFontResourceExW
GetDeviceCaps
SelectObject
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
DuplicateTokenEx
OpenProcessToken
RegOpenKeyW
RegCloseKey
shell32
ShellExecuteW
ShellExecuteExW
ord165
SHGetFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ole32
CreateStreamOnHGlobal
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoCreateInstance
CoUninitialize
OleUninitialize
CoInitializeSecurity
OleInitialize
CoInitialize
oleaut32
VariantClear
VariantInit
SysFreeString
SysAllocString
msvcp120
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_BADOFF@std@@3_JB
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Statvfs@sys@tr2@std@@YA?AUspace_info@123@PB_W@Z
_Mtx_lock
_Mtx_unlock
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_Future_error_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
_Cnd_wait
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
_Cnd_register_at_thread_exit
_Cnd_broadcast
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Unlink@sys@tr2@std@@YAHPB_W@Z
?_Winerror_map@std@@YAPBDH@Z
?_Stat@sys@tr2@std@@YA?AW4file_type@123@PB_WAAH@Z
??0_Lockit@std@@QAE@H@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?width@ios_base@std@@QAE_J_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Make_dir@sys@tr2@std@@YAHPB_W@Z
?_Copy_file@sys@tr2@std@@YAHPB_W0_N@Z
?_Open_dir@sys@tr2@std@@YAPAXAAY0BAE@_WPB_WAAHAAW4file_type@123@@Z
?_Close_dir@sys@tr2@std@@YAXPAX@Z
?_Remove_dir@sys@tr2@std@@YA_NPB_W@Z
?_Read_dir@sys@tr2@std@@YAPA_WAAY0BAE@_WPAXAAW4file_type@123@@Z
_Xtime_get_ticks
?_2@placeholders@std@@3V?$_Ph@$01@2@A
?_1@placeholders@std@@3V?$_Ph@$00@2@A
_Call_onceEx
_Do_call
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
_Thrd_join
_Cnd_timedwait
_Mtx_current_owns
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_current
_Thrd_equal
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??Bios_base@std@@QBE_NXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Launch@_Pad@std@@QAEXPAU_Thrd_imp_t@@@Z
??1_Pad@std@@QAE@XZ
?_Release@_Pad@std@@QAEXXZ
??0_Pad@std@@QAE@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
_Cnd_unregister_at_thread_exit
_Cnd_destroy
_Cnd_init
?_Throw_C_error@std@@YAXH@Z
_Mtx_init
_Mtx_destroy
?_Xinvalid_argument@std@@YAXPBD@Z
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
_Wcscoll
?id@?$collate@_W@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0facet@locale@std@@IAE@I@Z
??_7facet@locale@std@@6B@
??1facet@locale@std@@MAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
??1_Lockit@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Incref@facet@locale@std@@UAEXXZ
_Wcsxfrm
?is@?$ctype@_W@std@@QBE_NF_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
??_7_Facet_base@std@@6B@
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
gdiplus
GdipCreateBitmapFromScan0
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetCompositingQuality
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipGraphicsClear
GdipDrawImage
GdipDrawImageRectI
GdipDeleteFontFamily
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushI
GdipCloneImage
GdipDisposeImage
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipLoadImageFromStream
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDrawString
GdipGetFamily
GdipDeleteFont
msvcr120
realloc
malloc
swscanf_s
strchr
??0exception@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
_snwprintf_s
_snprintf_s
_setjmp3
?terminate@@YAXXZ
sprintf_s
_wtoi
_time64
_errno
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
??_V@YAXPAX@Z
rand
?wait@event@Concurrency@@QAEII@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?_GetCurrentInlineDepth@_StackGuard@details@Concurrency@@CAAAIXZ
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?_Oversubscribe@_Context@details@Concurrency@@SAX_N@Z
?set@event@Concurrency@@QAEXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
??0exception@std@@QAE@ABQBDH@Z
??1scoped_lock@critical_section@Concurrency@@QAE@XZ
??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z
?Free@Concurrency@@YAXPAX@Z
?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_NewCollection@_AsyncTaskCollection@details@Concurrency@@SAPAV123@PAV_CancellationTokenState@23@@Z
?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPAX@Z0@Z
?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ
??1event@Concurrency@@QAE@XZ
??1critical_section@Concurrency@@QAE@XZ
??0event@Concurrency@@QAE@XZ
??0critical_section@Concurrency@@QAE@XZ
?Alloc@Concurrency@@YAPAXI@Z
_wcsicmp
longjmp
_snwprintf
fclose
fwrite
fputc
fflush
setvbuf
fgetpos
_fseeki64
fsetpos
memcpy_s
ungetc
fgetc
_unlock_file
_lock_file
atoi
srand
vswprintf_s
??0exception@std@@QAE@ABQBD@Z
sscanf_s
??8type_info@@QBE_NABV0@@Z
wcsrchr
_vswprintf
_wcslwr
wcscpy_s
isalnum
sprintf
wcschr
tolower
memchr
_wcsnicmp
toupper
isdigit
vsprintf_s
_beginthreadex
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
wcsncpy
wcsstr
_vsnwprintf
_itow
wcstod
_wtof
iswalnum
wcsncmp
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__wgetmainargs
__set_app_type
exit
_exit
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_wcmdln
_fmode
_commode
_except1
_except_handler4_common
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
wcstol
iswdigit
swprintf_s
free
wcstoul
mbstowcs_s
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
iphlpapi
GetAdaptersInfo
version
GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoSizeW
shlwapi
PathFileExistsW
wininet
InternetCrackUrlW
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetReadFile
HttpQueryInfoW
InternetCloseHandle
msi
ord173
ord217
comctl32
_TrackMouseEvent
ord17
imm32
ImmGetVirtualKey
ImmGetContext
ImmReleaseContext
ImmSetCompositionFontW
ImmSetCompositionWindow
Sections
.text Size: 1023KB - Virtual size: 1023KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 250KB - Virtual size: 249KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 636KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE