SQLite[.]Interop[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

SQLite.Interop.dll
Size

1.4MB
MD5

ceed3cda0c43576081e38f66c2f51d59
SHA1

5ab8ab73a56a6a842409773018a84ac9de7bd2db
SHA256

63ca148b0bd3d85a732e9bf828af76d4922778a196cad3cb2aa5fd66df4d7470
SHA512

5fc082c3d391a5897182e1a4972cb953c648ace3a6e1f368a5c4f544424b8dbb1931c13e49da249142fcee244b76501399b41759eb7fca57d4ceebaf15b925f2
SSDEEP

24576:/WQ50WRuemz4KJkEhV1QgS860T/EVb70J4WwXIXX/7gXpG/9sA9lJrWN3/V12taF:OfDeokPsQ0mWwi/UXpG/9sA9lJrWN3tB

Score

1^/10

Malware Config

Signatures

Files

SQLite.Interop.dll
.dll windows:6 windows x86 arch:x86

1753b0cfa82433c7f2c0ab3bc29d1301

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

01/10/2021, 00:00

Not After

12/12/2024, 23:59

Subject

SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

01/10/2021, 00:00

Not After

12/12/2024, 23:59

Subject

SERIALNUMBER=364617-96,CN=Mistachkin Systems (Joseph Mistachkin),O=Mistachkin Systems (Joseph Mistachkin),L=Beaverton,ST=Oregon,C=US,1.3.6.1.4.1.311.60.2.1.2=#13064f7265676f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#130f427573696e65737320456e74697479

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b5:ab:4a:50:08:84:66:3f:ec:89:3a:cd:71:e9:a3:02:93:14:cd:ec:05:d0:d5:f0:bb:25:d2:3a:90:a1:d9:dc:b8:e7:83:89:ba:6c:ca:da:08:b6:20:d0:c1:79:11:0a:91:4d:4e:f2:a1:fc:0a:8b:a7:c1:2b:0f:32:0f:d2:8a
Signer

Actual PE Digest

b5:ab:4a:50:08:84:66:3f:ec:89:3a:cd:71:e9:a3:02:93:14:cd:ec:05:d0:d5:f0:bb:25:d2:3a:90:a1:d9:dc:b8:e7:83:89:ba:6c:ca:da:08:b6:20:d0:c1:79:11:0a:91:4d:4e:f2:a1:fc:0a:8b:a7:c1:2b:0f:32:0f:d2:8a

Digest Algorithm

sha512

PE Digest Matches

true

f0:7f:7e:ba:ac:3c:9e:24:f8:f2:a0:11:9d:06:f0:08:dc:cb:e5:a7
Signer

Actual PE Digest

f0:7f:7e:ba:ac:3c:9e:24:f8:f2:a0:11:9d:06:f0:08:dc:cb:e5:a7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

CorBindToRuntimeEx

wintrust

WinVerifyTrust

kernel32

CreateMutexW
HeapCompact
lstrcmpA
SetFilePointer
TryEnterCriticalSection
lstrlenA
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
FreeLibrary
HeapAlloc
SystemTimeToFileTime
SetEnvironmentVariableW
QueryPerformanceCounter
HeapFree
WaitForSingleObject
UnlockFile
FlushViewOfFile
LockFile
WaitForSingleObjectEx
OutputDebugStringW
GetModuleHandleW
GetTickCount
UnlockFileEx
GetProcessHeap
GetSystemTimeAsFileTime
FormatMessageA
WriteFile
InitializeCriticalSection
WideCharToMultiByte
LoadLibraryW
Sleep
FormatMessageW
HeapDestroy
GetFileAttributesA
LeaveCriticalSection
HeapCreate
HeapValidate
GetFileSize
ReadFile
GetModuleFileNameW
CreateFileW
lstrcatA
GetEnvironmentVariableA
MultiByteToWideChar
lstrlenW
FlushFileBuffers
GetTempPathW
GetLastError
GetProcAddress
HeapSize
LockFileEx
EnterCriticalSection
DisableThreadLibraryCalls
GetDiskFreeSpaceW
LoadLibraryA
CreateFileMappingA
CreateFileMappingW
GetDiskFreeSpaceA
GetSystemInfo
lstrcmpiW
lstrcatW
GetFileAttributesExW
DeleteCriticalSection
OutputDebugStringA
SetEnvironmentVariableA
CloseHandle
DeleteFileW
GetCurrentProcessId
GetTempPathA
LocalFree
GetSystemTime
AreFileApisANSI
DeleteFileA
RtlUnwind
SetFilePointerEx
CreateFileA
HeapReAlloc
GetEnvironmentVariableW
GetFullPathNameA
GetFullPathNameW
RaiseException
SetStdHandle
WriteConsoleW
GetFileAttributesW
GetCurrentThreadId
EncodePointer
DecodePointer
CreateThread
ExitThread
LoadLibraryExW
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
GetTimeZoneInformation
SetLastError
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
ExitProcess
GetModuleHandleExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetStdHandle
GetFileType
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
CompareStringW
LCMapStringW
GetConsoleCP
GetConsoleMode

user32

wsprintfA
wsprintfW

advapi32

CryptDestroyHash
CryptDecrypt
CryptDestroyKey
CryptCreateHash
CryptEncrypt
CryptReleaseContext
CryptDeriveKey
CryptAcquireContextW
CryptHashData

Exports

Exports

SI02ba66995d97a90f
SI03287dbc8723fdd9
SI04ce52527311d73d
SI0504e2b10fc984a6
SI08e1b81c309b0697
SI093ec945feac7a9f
SI0a5994a5732236aa
SI0a5abed06696b608
SI0b7b29d9f4d9e9cd
SI0baa26a8603fbeaa
SI0ea978ea1c0d405a
SI106a696fe4411f05
SI11c76cd24cbc4f5a
SI143d3c343ba8f025
SI14b078570350825e
SI14f276d110ea07d2
SI1698350d8fe62095
SI19682c472152ed2e
SI1b5f3547d13ba432
SI1b7dde7e97584ae2
SI2443a50be142b79d
SI24b9ac65c591ee78
SI257c42d028c92062
SI26bead82d146f523
SI26ecabef7303a42d
SI26f15d49d07fe93a
SI279a729adc1377d7
SI2836277b871ce8fa
SI28cd73ca34f8fb73
SI2a15a1761404662d
SI2a54b637f740510b
SI2f17e57366f2805e
SI3145812b5ff77358
SI3455a1cea238c256
SI350ef657c32efd79
SI352a26dec0656975
SI35b071367928739e
SI371968036eb4539a
SI3721ad633fe2573d
SI37ce1131ccb4e11f
SI38b2a832762db8ac
SI3c382270243917a2
SI3c49f645ceb670cc
SI3cbdfafed17209a8
SI3d4a59f30e3066e7
SI3eeccb23f013126d
SI45c0ebd9695268ad
SI45fe92a006b7a736
SI467bb3798f593774
SI4919ea51262dac3c
SI4a17a8a321d6ec6a
SI4bab566a390e239c
SI4d728c49baeb336f
SI4de37165831bc271
SI523067e3e1269727
SI53b960648e352398
SI5460c9874d9a9c36
SI55523c66e4a81c11
SI565732004973ce4e
SI56805d3cb6ea5260
SI5c09368f04cf7aa2
SI5cff166c599de746
SI5d045c2b9d9b73fa
SI5ea70b9767a9e9ce
SI606edd9d386f5df5
SI60bfb2a7e6c9c0e3
SI6187cc864ff10c8f
SI61c731d3f0a5a8a6
SI63f918e55acf1c40
SI66be4ec506ed664f
SI698058cf78c6a869
SI6a086e2f49de7e85
SI72535cfc141a05c2
SI73e26334041d137d
SI747f3b763c8524f5
SI75e0cee60392beec
SI7742db5e5c879069
SI77d1487d2c16c856
SI78561b4f7190c8dd
SI785b181261fdc0bd
SI7991725b877e4051
SI7af3787a4ab6b5b0
SI7d9178711dcd6811
SI7da1c71ef2b6697a
SI7e5af6a8bfaa1747
SI7f2136bd3d2988aa
SI81dd6ea067523204
SI837eea5ba53f61b3
SI83f01e67cc2cc9a2
SI85018aaa81082789
SI853298524d63488b
SI8554a644a22f6f20
SI8668b1fc92c22ce1
SI87ee2ec0596a27ef
SI8b1f1431e854f393
SI8b6fe1d4af2fdb27
SI8bd848f76b779693
SI8c91429ec00ce6ea
SI8f46df6c19cb419c
SI9006fa68bc924c6f
SI96e96b93e3971a75
SI9ced4623ecd3a3df
SI9e7440e5cce5dc43
SI9edfb98001bcad06
SIa0b934f9dd65efc0
SIa129aff02640c9fe
SIa25f4de441a18204
SIa2c646e1460e3d6a
SIa5013de19e424d00
SIa9bfcac726a70265
SIa9d260dfe73149da
SIaa3fada7ca685a32
SIaa8f19242494c08c
SIabcd6360beb68a2a
SIabe868fb63f052f8
SIac677082e755b84d
SIae3be833182ff91d
SIb21b3064163c0cda
SIb22cf6c68ac1220a
SIb2d853f1157189a5
SIb30987ff703d6e36
SIb41581ca1b61ed15
SIb57167164aea0161
SIb7b5b2f8e5976737
SIb8a2357403777398
SIb99186e559a4aff6
SIba36cbed52191512
SIbae13b5cc010bd67
SIc0ea1e3857b0ec43
SIc0f7fc1c96c2f62b
SIc4f8bd1f4b581f4f
SIc5e3cd0a498a1779
SIc63f2c66e9fadd2d
SIc6b2972f1a2dc615
SIc7e5bd609ce4c68a
SIc9a5f32c73143c77
SIc9f2182c4a948277
SIca49018e24ca57ec
SIcb4a928df499bdf6
SId08a69e2f8f143ba
SId290cb03f3dc3f61
SId59e1d487aca89f9
SId5fff727332fb0f9
SIdb6bf1b7b5944bb6
SIdbad5a35d7a3205c
SIde1622bcd84f5091
SIdfd4204af97948d5
SIe47e4c5201c5334a
SIed7328d4da7ea496
SIefa0b6ff8825450f
SIf2f03057a674dd64
SIf44cd2b5614ea7da
SIf61494071db20f41
SIf67c886bb709cc2f
SIfe86240eeda8764b
SIfeac64b03115a142
_SI0019486164d7bf44@12
_SI04b638e115f7beb4@20
_SI04fc6f8a1e017f73@20
_SI140dacdec9d5041b@12
_SI1d073d65c838cf5f@12
_SI1d2e911ac01d0e2a@4
_SI1da0a0558762261c@8
_SI25e7ed432da5abe2@0
_SI2de6c00a59e7266e@4
_SI2f719ae9d2d6fe5e@8
_SI36d903e8ae1034f7@12
_SI3862a1ce27ef5703@4
_SI3a79cd3b97e12d27@8
_SI3b5b10d9ddfee5ca@4
_SI3d262250f51c6b05@32
_SI4004f11c66fafdc3@4
_SI419eb095ca17491d@12
_SI4dfb599f3fd3e023@12
_SI5012edaf9a9b576b@12
_SI58ae048217841433@12
_SI59ef51e4227a1e60@40
_SI5b8b7f6e43119418@0
_SI611d33161126275a@24
_SI613bc819b96e1775@8
_SI7f3350ed5ca228bf@112
_SI810facc01c4e99e6@12
_SI8b4ecf9e9b46e30b@12
_SI947263e5a132a998@36
_SI965595dac5504b14@12
_SI971aea6e1a3ae173@12
_SIa0da56ff87b86dd4@12
_SIa0e5ab23d1190dca@8
_SIa48df0905a06105d@4
_SIaa3c70b5d386c1fa@4
_SIaebfdeab19641351@12
_SIaf4898799c5c5ab8@44
_SIafa80a0dba5e3a76@12
_SIb369846d768c8d78@4
_SIb3941677af59e24d@12
_SIc0f749663083c28a@8
_SIc2aaa7918e50464c@4
_SIc8e3ed89cf504a6c@8
_SId56a8ebc35663981@12
_SId65d58073bd498dc@12
_SId7d7db98a12d19ea@8
_SIda2943ab88fe2b4e@20
_SIe0b31ba0fca9dfae@4
_SIeb85fb6ed1178f6e@16
_SIf39369f79e9f653d@8
_SIf5c71e022d4e16c5@12
_SIf6ca1239c6e3c3e4@8
sqlite3_cryptoapi_init
sqlite3_fts5_init
sqlite3_fts_init
sqlite3_percentile_init
sqlite3_regexp_init
sqlite3_sha_init
sqlite3_shathree_init
sqlite3_totype_init
sqlite3_vtshim_init

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1753b0cfa82433c7f2c0ab3bc29d1301

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

b5:ab:4a:50:08:84:66:3f:ec:89:3a:cd:71:e9:a3:02:93:14:cd:ec:05:d0:d5:f0:bb:25:d2:3a:90:a1:d9:dc:b8:e7:83:89:ba:6c:ca:da:08:b6:20:d0:c1:79:11:0a:91:4d:4e:f2:a1:fc:0a:8b:a7:c1:2b:0f:32:0f:d2:8aSigner

f0:7f:7e:ba:ac:3c:9e:24:f8:f2:a0:11:9d:06:f0:08:dc:cb:e5:a7Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

wintrust

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 208KB - Virtual size: 207KB

.data Size: 14KB - Virtual size: 22KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 36KB - Virtual size: 35KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

05:0c:c7:2c:cf:31:ae:9b:2e:36:41:0a:d0:ee:98:92
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

b5:ab:4a:50:08:84:66:3f:ec:89:3a:cd:71:e9:a3:02:93:14:cd:ec:05:d0:d5:f0:bb:25:d2:3a:90:a1:d9:dc:b8:e7:83:89:ba:6c:ca:da:08:b6:20:d0:c1:79:11:0a:91:4d:4e:f2:a1:fc:0a:8b:a7:c1:2b:0f:32:0f:d2:8a
Signer

f0:7f:7e:ba:ac:3c:9e:24:f8:f2:a0:11:9d:06:f0:08:dc:cb:e5:a7
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 208KB - Virtual size: 207KB

.data
Size: 14KB - Virtual size: 22KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 36KB - Virtual size: 35KB