62f05749eb41e9b1251b87d55d79bc4b3fe2cfb8ad95c14938d3e477aa7ba6fe

Sharing

Copy URL

Twitter E-mail

General

Target

62f05749eb41e9b1251b87d55d79bc4b3fe2cfb8ad95c14938d3e477aa7ba6fe
Size

2.8MB
MD5

35de05128a62b73e731dabd8bf4aef20
SHA1

56e6cb4195897a93a5effa19175188aedd77f220
SHA256

62f05749eb41e9b1251b87d55d79bc4b3fe2cfb8ad95c14938d3e477aa7ba6fe
SHA512

df0d1014807486128dd43e54bee7a8fea7a082575cb0cfaa8b20d4f7d0372adbd39c9678748e5ac3cc28b545937393416e848d9e5c3d8d46ee0a765f47479bc4
SSDEEP

49152:1ubG2Wj/tIGQxHwF37fQru7eUDL1Bt64H0nCZCvNuggAH6/vc8ThjyY3ASvH9:1uq2yIGWHc37oru7eUDL1H64H0nCZCvS

Score

1^/10

Malware Config

Signatures

Files

62f05749eb41e9b1251b87d55d79bc4b3fe2cfb8ad95c14938d3e477aa7ba6fe
.exe windows:6 windows x86

180f1ab55ed8525c3011d938ed051dfd

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

36:71:30:54:c9:85:bc:6f:42:63:91:07:08:cc:8a:87:03:53:6f:3e:a5:c1:df:25:7e:95:08:5e:88:7f:3b:9c
Signer

Actual PE Digest

36:71:30:54:c9:85:bc:6f:42:63:91:07:08:cc:8a:87:03:53:6f:3e:a5:c1:df:25:7e:95:08:5e:88:7f:3b:9c

Digest Algorithm

sha256

PE Digest Matches

true

e0:cb:1e:2f:7a:58:9a:8c:75:d3:fd:b6:f4:71:26:cc:ce:d0:b4:9b
Signer

Actual PE Digest

e0:cb:1e:2f:7a:58:9a:8c:75:d3:fd:b6:f4:71:26:cc:ce:d0:b4:9b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoW
LeaveCriticalSection
GlobalDeleteAtom
TlsSetValue
WaitForSingleObject
GetCPInfo
ExpandEnvironmentStringsA
GetSystemTimeAsFileTime
ResetEvent
LockResource
GetUILanguageInfo
WideCharToMultiByte
GetFullPathNameW
MoveFileWithProgressA
MulDiv
GetEnvironmentVariableA
HeapSize
Sleep
QueryPerformanceCounter
GetFileInformationByHandle
GetConsoleMode
VerSetConditionMask
GetConsoleAliasesLengthW
UnlockFile
FindNextFileW
NeedCurrentDirectoryForExePathA
CompareStringA
LocalAlloc
ReadConsoleW
SystemTimeToTzSpecificLocalTime
HeapFree
LoadResource
GlobalAddAtomW
GetSystemInfo
CreateThread
VerifyVersionInfoA
DuplicateHandle
SetNamedPipeHandleState
lstrcpyW
InitializeSListHead
WaitForMultipleObjects
GetVolumeInformationW
GetPrivateProfileStringW
WriteFile
GetSystemDefaultUILanguage
RaiseException
GetFileSize
TlsFree
GlobalUnlock
FlushInstructionCache
EnumLanguageGroupLocalesW
EnterCriticalSection
GetConsoleScreenBufferInfo
GetTempPathW
GlobalGetAtomNameW
GetCurrentProcess
LocalFree
CreateToolhelp32Snapshot
OpenProcess
LoadLibraryA
CreateFileW
FindFirstFileW
GetVersionExW
LocalReAlloc
GetCalendarInfoEx
VirtualAllocEx
CreateWaitableTimerExW
GetEnvironmentStringsW
GlobalLock
DeleteFileW
FindResourceExW
GetFileAttributesW
GetCommandLineA
GlobalFlags
VirtualAlloc
GetSystemDirectoryW
GetCurrentDirectoryW
FindFirstFileExW
GetTimeFormatA
GetProfileIntW
VirtualProtect
WriteConsoleW
SearchPathW
lstrcmpW
SetEvent
WritePrivateProfileSectionW
GetSystemDirectoryA
GetModuleHandleA
SleepEx
Process32FirstW
GetEnvironmentVariableW
SetEnvironmentVariableW
IsDebuggerPresent
GetLastError
EncodePointer
GetTickCount
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
GlobalFindAtomW
CompareStringW
HeapReAlloc
OutputDebugStringW
GetPrivateProfileIntW
OpenJobObjectW
FindClose
GlobalFree
GetStartupInfoW
FindResourceW
SetUnhandledExceptionFilter
FreeLibraryAndExitThread
ExitThread
GetCurrentProcessId
GetTempFileNameW
Process32NextW
GetStringTypeW
GetDriveTypeW
HeapQueryInformation
InitializeCriticalSection
SetFileTime
GetNumaProcessorNode
GetConsoleAliasExesLengthW
GetFileSizeEx
ReadFile
GetFileType
SetFilePointerEx
QueryPerformanceFrequency
GetProcAddress
DecodePointer
TerminateProcess
TlsGetValue
GetOEMCP
FreeEnvironmentStringsW
lstrcmpA
QueryFullProcessImageNameW
GlobalHandle
DeleteCriticalSection
ExitProcess
SetFirmwareEnvironmentVariableA
OutputDebugStringA
GetCurrentThread
CopyFileW
MultiByteToWideChar
RtlUnwind
GetFileAttributesExW
lstrcmpiW
GlobalGetAtomNameA
FileTimeToSystemTime
GetStdHandle
SetThreadPriority
GetWindowsDirectoryW
GetFileTime
HeapAlloc
SetEndOfFile
TlsAlloc
GetUserDefaultUILanguage
CreateDirectoryW
GetCommandLineW
UnhandledExceptionFilter
CloseHandle
CreateMutexW
GlobalAlloc
WritePrivateProfileStringW
WritePrivateProfileStructW
FlushFileBuffers
FreeLibrary
LoadLibraryExW
GlobalSize
GetModuleHandleExW
ResumeThread
GetTickCount64
GetModuleHandleW
VerifyVersionInfoW
SetThreadUILanguage
GetDurationFormat
FileTimeToLocalFileTime
FormatMessageW
SizeofResource
VirtualQuery
CreateProcessW
InitializeCriticalSectionEx
LockFile
FormatMessageA
IsValidCodePage
PeekNamedPipe
GetProcessHeap
GetACP
SetStdHandle
SetLastError
GetCurrentThreadId
GetConsoleCP
WriteProfileStringW
LoadLibraryW
GetModuleFileNameW
SetErrorMode
IsProcessorFeaturePresent
CreateEventW
LCMapStringW
GetTimeZoneInformation
GlobalReAlloc
SetFilePointer

user32

SetMenu
BeginPaint
InsertMenuW
CopyRect
CreateMenu
DeleteMenu
SetMenuItemInfoW
PtInRect
DrawStateW
TranslateMessage
DrawTextW
LockWindowUpdate
GetCursorPos
GetMenuItemID
DestroyMenu
GetClassNameW
RemovePropW
SubtractRect
SetWindowPos
GetClassInfoExW
SetCursorPos
TabbedTextOutW
TrackMouseEvent
GetSystemMenu
WindowFromPoint
GetWindowDC
GetClassLongW
DestroyCursor
UnpackDDElParam
SetDlgItemTextW
ToUnicodeEx
CallNextHookEx
GetWindowThreadProcessId
GetMenuStringW
MapVirtualKeyW
SendMessageW
GetWindowRgn
GetNextDlgTabItem
IsChild
GetSysColor
IsDialogMessageW
GetNextDlgGroupItem
GetParent
LoadIconW
PostThreadMessageW
OemToCharA
InvalidateRect
CheckDlgButton
GetWindowTextW
GetKeyNameTextW
CopyIcon
GetDoubleClickTime
DrawMenuBar
GetSysColorBrush
RedrawWindow
OffsetRect
IntersectRect
GetKeyState
GetClientRect
GetWindowLongW
CheckMenuItem
SetWindowsHookExW
SetScrollInfo
TrackPopupMenu
GetDC
GetMenuCheckMarkDimensions
FillRect
DrawFrameControl
SetPropW
DrawEdge
GetMenuDefaultItem
BringWindowToTop
PostQuitMessage
DefWindowProcA
UnhookWindowsHookEx
UnregisterClassW
MapDialogRect
LoadBitmapW
EnableWindow
SetWindowRgn
GetIconInfo
GetDesktopWindow
LoadImageW
GetScrollInfo
ValidateRect
GetForegroundWindow
DrawIconEx
GetSystemMetrics
SetMenuItemBitmaps
DrawFocusRect
UpdateWindow
GetKeyboardLayout
ModifyMenuW
GetCapture
InflateRect
GetWindowRect
WinHelpW
IsWindowEnabled
IsCharLowerW
GetSubMenu
LoadAcceleratorsW
GetMenuItemInfoW
ShowOwnedPopups
GetTopWindow
DestroyWindow
MapVirtualKeyExW
SetWindowLongW
MapWindowPoints
IsMenu
SetForegroundWindow
GetClassInfoW
SendDlgItemMessageA
SetMenuDefaultItem
GetMessageA
SetActiveWindow
GetWindowTextLengthW
IsWindow
GetMessageW
DeferWindowPos
GetKeyboardState
SetTimer
GetLastActivePopup
DispatchMessageW
SetCursor
MonitorFromWindow
SetClipboardData
MoveWindow
ReleaseDC
EnumChildWindows
GetMonitorInfoW
GetScrollRange
AdjustWindowRectEx
CharUpperW
GetWindow
UpdateLayeredWindow
RegisterClipboardFormatW
BeginDeferWindowPos
FindWindowExW
GetDlgCtrlID
ReuseDDElParam
EnumDisplayMonitors
PostMessageW
MessageBeep
TranslateAcceleratorW
CallWindowProcW
OpenClipboard
SetScrollRange
SetRectEmpty
MonitorFromPoint
SetFocus
DestroyIcon
SetParent
DrawIcon
CreatePopupMenu
ShowWindow
IsClipboardFormatAvailable
GetMenuState
CreateDialogIndirectParamW
SystemParametersInfoW
GetFocus
SetLayeredWindowAttributes
DestroyAcceleratorTable
GetDlgItem
CreateWindowExW
EndDeferWindowPos
GetComboBoxInfo
EnableScrollBar
PeekMessageW
GetMessagePos
DrawTextExW
GetWindowPlacement
EmptyClipboard
DefWindowProcW
RealChildWindowFromPoint
TranslateMDISysAccel
IsIconic
RegisterWindowMessageW
EnableMenuItem
IsZoomed
InvertRect
EndDialog
GetUpdateRect
IsRectEmpty
IsWindowVisible
ScreenToClient
ShowScrollBar
GetMenuItemCount
InsertMenuItemW
MessageBoxW
EqualRect
CopyAcceleratorTableW
GetMenu
GetScrollPos
GetUserObjectInformationW
HideCaret
SetClassLongW
EndPaint
RemoveMenu
DefMDIChildProcW
ScrollWindowEx
SetScrollPos
KillTimer
CharUpperBuffW
DefFrameProcW
GetActiveWindow
SetRect
UnionRect
GrayStringW
WaitMessage
SetCapture
CloseClipboard
NotifyWinEvent
AppendMenuW
ClientToScreen
GetAsyncKeyState
LoadCursorW
GetMessageTime
FrameRect
CopyImage
SetWindowPlacement
ScrollWindow
SetWindowTextW
RegisterClassW
CreateAcceleratorTableW
GetPropW
LoadMenuW
ReleaseCapture

gdi32

GetDeviceCaps
SetMapMode
EnumFontFamiliesW
PatBlt
SelectPalette
RealizePalette
Polyline
EnumFontFamiliesExW
SetViewportOrgEx
BitBlt
GetRgnBox
CreateCompatibleBitmap
CreateDIBSection
CreateDIBitmap
SetRectRgn
SelectObject
ExcludeClipRect
GetClipBox
SetWindowExtEx
Rectangle
FrameRgn
CreatePolygonRgn
GetViewportExtEx
ExtSelectClipRgn
RectVisible
GetPixel
Ellipse
SetDIBColorTable
GetNearestPaletteIndex
OffsetViewportOrgEx
PtInRegion
FillRgn
CreateRoundRectRgn
DPtoLP
CreateEllipticRgn
SetTextAlign
GetObjectW
SetPixelV
ExtTextOutW
StretchBlt
CreateRectRgnIndirect
SetROP2
DeleteDC
CreatePen
CreatePatternBrush
SetPolyFillMode
GetTextFaceW
GetTextMetricsW
CreateCompatibleDC
CreateRectRgn
GetWindowOrgEx
SetViewportExtEx
Polygon
CreateBitmap
SetPixel
CreateHatchBrush
ScaleViewportExtEx
GetTextColor
GetTextCharsetInfo
CreatePalette
GetViewportOrgEx
GetObjectType
GetSystemPaletteEntries
SetBkMode
IntersectClipRect
SetTextColor
SelectClipRgn
GetBoundsRect
Escape
OffsetWindowOrgEx
GetBkColor
CreateFontIndirectW
LineTo
GetDIBits
OffsetRgn
GetLayout
SaveDC
SetLayout
ScaleWindowExtEx
SetBkColor
GetTextExtentPoint32W
CombineRgn
RestoreDC
PtVisible
MoveToEx
TextOutW
RoundRect
SetWindowOrgEx
ExtFloodFill
SetPaletteEntries
CreateSolidBrush
GetStockObject
GetWindowExtEx
LPtoDP
GetPaletteEntries
CopyMetaFileW
CreateDCW
DeleteObject

msimg32

AlphaBlend
TransparentBlt

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

LookupPrivilegeValueW
RegCloseKey
LookupAccountSidA
RegGetValueW
RegConnectRegistryExW
CreateProcessWithTokenW
RegQueryValueW
CryptAcquireContextA
RegSetValueExW
CredWriteW
FreeEncryptionCertificateHashList
RegQueryValueExW
CredDeleteA
CryptDestroyKey
FreeSid
RegEnumKeyW
RegOpenKeyExA
AllocateAndInitializeSid
NotifyChangeEventLog
OpenProcessToken
RegDeleteKeyW
CryptCreateHash
ObjectOpenAuditAlarmW
CryptImportKey
RegOpenKeyExW
RegCreateKeyExW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyExW
CryptEncrypt
RegCreateKeyTransactedA
CryptReleaseContext
GetSecurityDescriptorOwner
CryptGenRandom
EqualSid
RegDeleteValueW
AdjustTokenPrivileges
GetMultipleTrusteeOperationW
RegSetValueExA
CryptDestroyHash
CryptGetHashParam
RegSetValueW
DeleteAce
CryptHashData
GetTrusteeTypeW

shell32

SHAppBarMessage
SHGetMalloc
SHGetFileInfoW
CommandLineToArgvW
DragFinish
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
DragQueryFileW
ShellExecuteW
SHBrowseForFolderW
ord171
ord190
ord196
SHGetPathFromIDListW
ord232
SHQueryRecycleBinA
SHGetDesktopFolder

comctl32

InitCommonControlsEx

shlwapi

StrFormatKBSizeW
ColorRGBToHLS
PathIsSystemFolderA
SHCopyKeyA
PathStripToRootW
PathFindFileNameW
PathFileExistsW
PathRemoveFileSpecW
ord276
ord8
ord346
PathIsFileSpecW
StrDupA
PathSetDlgItemPathW
PathIsUNCW
SHRegGetBoolUSValueA
PathAppendW
PathFindExtensionW

uxtheme

IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
GetThemePartSize
IsAppThemed
GetCurrentThemeName
GetWindowTheme
GetThemeSysColor
DrawThemeParentBackground
DrawThemeText
OpenThemeData
CloseThemeData
GetThemeColor

ole32

CreateStreamOnHGlobal
CoTaskMemFree
CoInitialize
CoLockObjectExternal
OleGetClipboard
CoTaskMemAlloc
IsAccelerator
OleCreateMenuDescriptor
CoInitializeSecurity
OleLockRunning
RegisterDragDrop
DoDragDrop
RevokeDragDrop
ReleaseStgMedium
OleDuplicateData
OleTranslateAccelerator
OleDestroyMenuDescriptor
CoInitializeEx
CoCreateInstance
CoCreateGuid
CoUninitialize
CoDisconnectObject

oleaut32

SysFreeString
SysAllocString
CreateDispTypeInfo
CreateTypeLi
VarTokenizeFormatString
VarUI8FromDec
VarUI4FromI1
VarBstrFromUI4
VarDateFromUI1
VarR8FromCy
VarI2FromI1
VarUI1FromUI8
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
VariantCopy
VarBstrFromDate
VariantInit
VariantClear
VariantChangeType
SysStringLen
LoadTypeLi

gdiplus

GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdiplusShutdown
GdipDisposeImage
GdipGetImagePalette
GdipSetInterpolationMode
GdipCloneImage
GdipBitmapLockBits
GdipGetImageHeight
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipGetImagePixelFormat
GdiplusStartup
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipFree
GdipCreateBitmapFromScan0
GdipCreateFromHDC
GdipBitmapUnlockBits
GdipAlloc
GdipDrawImageRectI
GdipDeleteGraphics

ws2_32

sendto
listen
accept
htonl
ntohl
gethostname
recvfrom
WSAIoctl
getaddrinfo
freeaddrinfo
socket
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
WSAStartup
WSACleanup
WSAGetLastError
__WSAFDIsSet
select
WSASetLastError
recv
send
bind
closesocket
ioctlsocket

crypt32

CertFreeCertificateContext

wldap32

ord30
ord79
ord35
ord200
ord32
ord27
ord26
ord22
ord33
ord301
ord41
ord50
ord45
ord60
ord211
ord46
ord143

normaliz

IdnToAscii

wtsapi32

WTSSetUserConfigA
WTSQueryUserConfigA
WTSEnumerateSessionsW
WTSFreeMemory
WTSEnumerateServersA

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

winmm

PlaySoundW

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.mdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.fdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 426KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

180f1ab55ed8525c3011d938ed051dfd

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

36:71:30:54:c9:85:bc:6f:42:63:91:07:08:cc:8a:87:03:53:6f:3e:a5:c1:df:25:7e:95:08:5e:88:7f:3b:9cSigner

e0:cb:1e:2f:7a:58:9a:8c:75:d3:fd:b6:f4:71:26:cc:ce:d0:b4:9bSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

ws2_32

crypt32

wldap32

normaliz

wtsapi32

oleacc

imm32

winmm

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.text1 Size: 3KB - Virtual size: 2KB

.text2 Size: 6KB - Virtual size: 5KB

.mdata Size: 5KB - Virtual size: 4KB

.fdata Size: 4KB - Virtual size: 3KB

.rdata Size: 426KB - Virtual size: 425KB

.data Size: 21KB - Virtual size: 39KB

.rsrc Size: 348KB - Virtual size: 348KB

.reloc Size: 151KB - Virtual size: 151KB

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

36:71:30:54:c9:85:bc:6f:42:63:91:07:08:cc:8a:87:03:53:6f:3e:a5:c1:df:25:7e:95:08:5e:88:7f:3b:9c
Signer

e0:cb:1e:2f:7a:58:9a:8c:75:d3:fd:b6:f4:71:26:cc:ce:d0:b4:9b
Signer

.text
Size: 1.8MB - Virtual size: 1.8MB

.text1
Size: 3KB - Virtual size: 2KB

.text2
Size: 6KB - Virtual size: 5KB

.mdata
Size: 5KB - Virtual size: 4KB

.fdata
Size: 4KB - Virtual size: 3KB

.rdata
Size: 426KB - Virtual size: 425KB

.data
Size: 21KB - Virtual size: 39KB

.rsrc
Size: 348KB - Virtual size: 348KB

.reloc
Size: 151KB - Virtual size: 151KB