Static task
static1
Behavioral task
behavioral1
Sample
5be9abec9c8bf4a7cae8cb842fbbe916.exe
Resource
win7-20231215-en
windows7-x64
Behavioral task
behavioral2
Sample
5be9abec9c8bf4a7cae8cb842fbbe916.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
General
-
Target
5be9abec9c8bf4a7cae8cb842fbbe916
-
Size
469KB
-
MD5
5be9abec9c8bf4a7cae8cb842fbbe916
-
SHA1
a72602b3ae581243c92d06cbeed52cec59b59ad1
-
SHA256
e7a0c81e3cdabcb10c63d66a29d71e942bf8a200d46b137c4eeb4a60ceb7a7ed
-
SHA512
361893e7011da578078715ce45478d2c6808855a1fdf87cc94b6609e3f1e784abd3254d86e70dabd98766128b209222bc1bba374e978e95c13aca50d5d9230f2
-
SSDEEP
12288:EN27HtTc6SUfJGxhU/roth8daBK+hNZXNwFXoKg9lZ08FRiNPzouUTtnW0:E07HtTc6SUfJ4UvdaA+NZXNwFXoKgx0Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5be9abec9c8bf4a7cae8cb842fbbe916
Files
-
5be9abec9c8bf4a7cae8cb842fbbe916.exe windows:4 windows x86 arch:x86
31fface1eab203ac2c56c56b484dee18
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateSemaphoreA
ExitProcess
GetCommandLineA
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetStartupInfoA
GetVersion
GetVersionExA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
ReleaseSemaphore
SetCurrentDirectoryA
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
lstrcmpA
bonkenc
ENCODER_BLADEENC
ENCODER_BONKENC
ENCODER_FAAC
ENCODER_FLAC
ENCODER_LAMEENC
ENCODER_TVQ
ENCODER_VORBISENC
ENCODER_WAVE
_ZN7BonkEnc10CDDBRemote6SubmitERKNS_8CDDBInfoE
_ZN7BonkEnc10CDDBRemoteC1EPNS_6ConfigE
_ZN7BonkEnc10CDDBRemoteD1Ev
_ZN7BonkEnc11CDPlayerIni10ReadCDInfoEv
_ZN7BonkEnc11CDPlayerIni9GetCDInfoEv
_ZN7BonkEnc11CDPlayerIniC1Ev
_ZN7BonkEnc11CDPlayerIniD1Ev
_ZN7BonkEnc13DLLInterfaces17winamp_in_modulesE
_ZN7BonkEnc13DLLInterfaces18winamp_out_modulesE
_ZN7BonkEnc13FilterInCDRip8SetTrackEl
_ZN7BonkEnc13FilterInCDRipC1EPNS_6ConfigEPNS_5TrackE
_ZN7BonkEnc4CDDB13ComputeDiscIDEv
_ZN7BonkEnc4CDDB14DiscIDToStringEl
_ZN7BonkEnc4CDDB14SetActiveDriveEl
_ZN7BonkEnc4CDDB14StringToDiscIDERKN6smooth6StringE
_ZN7BonkEnc4CDDB15ParseCDDBRecordERKN6smooth6StringERNS_8CDDBInfoE
_ZN7BonkEnc4CDDB18GetCDDBQueryStringEv
_ZN7BonkEnc4CDDBC2EPNS_6ConfigE
_ZN7BonkEnc4CDDBD2Ev
_ZN7BonkEnc5Debug10OutputLineERKN6smooth6StringE
_ZN7BonkEnc5Debug11EnterMethodERKN6smooth6StringE
_ZN7BonkEnc5Debug11LeaveMethodEv
_ZN7BonkEnc5DebugC1ERKN6smooth6StringE
_ZN7BonkEnc5DebugD1Ev
_ZN7BonkEnc6CDText10ReadCDTextEv
_ZN7BonkEnc6CDText9GetCDTextEv
_ZN7BonkEnc6CDTextC1Ev
_ZN7BonkEnc6CDTextD1Ev
_ZN7BonkEnc6Config12SaveSettingsEv
_ZN7BonkEnc7BonkEnc10updatePathE
_ZN7BonkEnc7BonkEnc12StopEncodingEv
_ZN7BonkEnc7BonkEnc12shortVersionE
_ZN7BonkEnc7BonkEnc13PauseEncodingEv
_ZN7BonkEnc7BonkEnc13currentConfigE
_ZN7BonkEnc7BonkEnc4i18nE
_ZN7BonkEnc7BonkEnc6EncodeEb
_ZN7BonkEnc7BonkEnc6ReadCDEv
_ZN7BonkEnc7BonkEnc7versionE
_ZN7BonkEnc7BonkEnc9InitCDRipEv
_ZN7BonkEnc7BonkEncC2Ev
_ZN7BonkEnc7BonkEncD2Ev
_ZN7BonkEnc7JobList10SelectNoneEv
_ZN7BonkEnc7JobList11GetNthTrackEl
_ZN7BonkEnc7JobList12GetNOfTracksEv
_ZN7BonkEnc7JobList15RemoveAllTracksEv
_ZN7BonkEnc7JobList15ToggleSelectionEv
_ZN7BonkEnc7JobList16AddTrackByDialogEv
_ZN7BonkEnc7JobList16GetSelectedTrackEv
_ZN7BonkEnc7JobList18AddTracksByPatternERKN6smooth6StringES4_
_ZN7BonkEnc7JobList19RemoveSelectedTrackEv
_ZN7BonkEnc7JobList21AddTrackByDragAndDropERKN6smooth6StringE
_ZN7BonkEnc7JobList8LoadListEv
_ZN7BonkEnc7JobList8SaveListEv
_ZN7BonkEnc7JobList9SelectAllEv
_ZN7BonkEnc7JobListC1ERKN6smooth3GUI5PointERKNS2_4SizeE
_ZN7BonkEnc8CDDBInfoC1ERKS0_
_ZN7BonkEnc8CDDBInfoC1Ei
_ZN7BonkEnc8CDDBInfoC1Ev
_ZN7BonkEnc8CDDBInfoaSERKS0_
_ZN7BonkEnc8CDDBInfoaSEi
_ZN7BonkEnc9CDDBCache13AddCacheEntryERKNS_8CDDBInfoE
_ZN7BonkEnc9CDDBCache13GetCacheEntryEl
_ZN7BonkEnc9CDDBCache14RemoveNthEntryEl
_ZN7BonkEnc9CDDBLocal6SubmitERKNS_8CDDBInfoE
_ZN7BonkEnc9CDDBLocalC1EPNS_6ConfigE
_ZN7BonkEnc9CDDBLocalD1Ev
_ZN7BonkEnc9Utilities12ErrorMessageERKN6smooth6StringES4_
_ZN7BonkEnc9Utilities13FillGenreListEPN6smooth3GUI4ListE
_ZN7BonkEnc9Utilities15GetInstallDriveEv
_ZN7BonkEnc9Utilities17CreateInputFilterERKN6smooth6StringEPNS_5TrackE
_ZN7BonkEnc9debug_outE
_ZNK7BonkEnc8CDDBInfo14DiscIDToStringEv
_ZNK7BonkEnc8CDDBInfoeqERKS0_
_ZNK7BonkEnc8CDDBInfoeqEi
_ZNK7BonkEnc8CDDBInfoneEi
ex_CR_EjectCD
ex_CR_GetNumTocEntries
ex_CR_GetTocEntry
ex_CR_ReadToc
ex_CR_SetActiveCDROM
ex_FLAC__VERSION_STRING
ex_TvqGetVersionID
ex_beVersion
ex_bonk_get_version_string
ex_eUpdate_AutomaticUpdate
ex_eUpdate_CheckForNewUpdates
ex_eUpdate_CreateUpdateContext
ex_eUpdate_FreeUpdateContext
ex_eUpdate_SetConfigFile
ex_eUpdate_SetConfigFileW
ex_eUpdate_SetLanguage
ex_faacEncClose
ex_faacEncGetCurrentConfiguration
ex_faacEncOpen
ex_get_lame_short_version
gdi32
DeleteObject
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fputc
fputs
free
fwrite
malloc
memcpy
memmove
memset
realloc
signal
strcat
strcmp
strcpy
strlen
_write
shell32
ShellExecuteA
smooth
_ZN6smooth13hPrevInstanceE
_ZN6smooth2IO10DriverZeroC1Ev
_ZN6smooth2IO8InStream11InputNumberEl
_ZN6smooth2IO8InStream11InputStringEl
_ZN6smooth2IO8InStream14InputNumberRawEl
_ZN6smooth2IO8InStream14SetPackageSizeEl
_ZN6smooth2IO8InStream4SeekEx
_ZN6smooth2IO8InStream9AddFilterEPNS0_6FilterE
_ZN6smooth2IO8InStreamC1ElPNS0_6DriverE
_ZN6smooth2IO8InStreamC1ElRKNS_6StringEl
_ZN6smooth2IO8InStreamD1Ev
_ZN6smooth3GUI11Application19GetStartupDirectoryEv
_ZN6smooth3GUI11Application23GetApplicationDirectoryEv
_ZN6smooth3GUI11Application4LoopEv
_ZN6smooth3GUI11ImageLoader4LoadERKNS_6StringE
_ZN6smooth3GUI11Progressbar8SetValueEl
_ZN6smooth3GUI11ProgressbarC1ERKNS0_5PointERKNS0_4SizeElllll
_ZN6smooth3GUI13ListBoxHeader6AddTabERKNS_6StringEll
_ZN6smooth3GUI4Font8SetColorERKNS0_5ColorE
_ZN6smooth3GUI4FontC1ERKS1_
_ZN6smooth3GUI4FontD1Ev
_ZN6smooth3GUI4Form4DrawEPNS0_7SurfaceE
_ZN6smooth3GUI4List11SelectEntryEPNS0_9ListEntryE
_ZN6smooth3GUI4List14SelectNthEntryEl
_ZN6smooth3GUI4List16RemoveAllEntriesEv
_ZN6smooth3GUI4List8AddEntryERKNS_6StringE
_ZN6smooth3GUI4ListC1Ev
_ZN6smooth3GUI4TextC1ERKNS_6StringERKNS0_5PointE
_ZN6smooth3GUI5Layer10SetMetricsERKNS0_5PointERKNS0_4SizeE
_ZN6smooth3GUI5Layer4HideEv
_ZN6smooth3GUI5Layer4ShowEv
_ZN6smooth3GUI5Layer5PaintEl
_ZN6smooth3GUI5LayerC1ERKNS_6StringE
_ZN6smooth3GUI5LayerC2ERKNS_6StringE
_ZN6smooth3GUI5LayerD2Ev
_ZN6smooth3GUI6BitmapC1Ei
_ZN6smooth3GUI6BitmapD1Ev
_ZN6smooth3GUI6ButtonC1ERKNS_6StringERKNS0_6BitmapERKNS0_5PointERKNS0_4SizeE
_ZN6smooth3GUI6Slider8SetRangeEll
_ZN6smooth3GUI6Slider8SetValueEl
_ZN6smooth3GUI6SliderC1ERKNS0_5PointERKNS0_4SizeElPlll
_ZN6smooth3GUI6Widget10DeactivateEv
_ZN6smooth3GUI6Widget10SetMetricsERKNS0_5PointERKNS0_4SizeE
_ZN6smooth3GUI6Widget13SetStatusTextERKNS_6StringE
_ZN6smooth3GUI6Widget14SetOrientationEl
_ZN6smooth3GUI6Widget14SetTooltipTextERKNS_6StringE
_ZN6smooth3GUI6Widget18GetContainerWindowEv
_ZN6smooth3GUI6Widget18SetBackgroundColorERKNS0_5ColorE
_ZN6smooth3GUI6Widget3AddEPS1_
_ZN6smooth3GUI6Widget4HideEv
_ZN6smooth3GUI6Widget4ShowEv
_ZN6smooth3GUI6Widget5PaintEl
_ZN6smooth3GUI6Widget6RemoveEPS1_
_ZN6smooth3GUI6Widget7ProcessElll
_ZN6smooth3GUI6Widget7SetFontERKNS0_4FontE
_ZN6smooth3GUI6Widget7SetTextERKNS_6StringE
_ZN6smooth3GUI6Widget8ActivateEv
_ZN6smooth3GUI6Window13SetUpdateRectERKNS0_4RectE
_ZN6smooth3GUI6Window14SetMinimumSizeERKNS0_4SizeE
_ZN6smooth3GUI6Window14SetRightToLeftEb
_ZN6smooth3GUI6Window4StayEv
_ZN6smooth3GUI6Window5CloseEv
_ZN6smooth3GUI6Window7SetIconERKNS0_6BitmapE
_ZN6smooth3GUI6Window8MaximizeEv
_ZN6smooth3GUI6WindowC1ERKNS_6StringERKNS0_5PointERKNS0_4SizeEPv
_ZN6smooth3GUI7Dialogs10MessageDlg13GetButtonCodeEv
_ZN6smooth3GUI7Dialogs10MessageDlgC1ERKNS_6StringES5_lPwS5_Pb
_ZN6smooth3GUI7Dialogs11TipOfTheDay6AddTipERKNS_6StringE
_ZN6smooth3GUI7Dialogs11TipOfTheDay7SetModeEllb
_ZN6smooth3GUI7Dialogs11TipOfTheDay9GetOffsetEv
_ZN6smooth3GUI7Dialogs11TipOfTheDayC1EPb
_ZN6smooth3GUI7Dialogs12DirSelection10GetDirNameEv
_ZN6smooth3GUI7Dialogs12DirSelection10SetDirNameERKNS_6StringE
_ZN6smooth3GUI7Dialogs12DirSelectionC1Ev
_ZN6smooth3GUI7Dialogs12QuickMessageERKNS_6StringES4_lPw
_ZN6smooth3GUI7Dialogs6Dialog10SetCaptionERKNS_6StringE
_ZN6smooth3GUI7Dialogs6Dialog15SetParentWindowEPNS0_6WindowE
_ZN6smooth3GUI7Dialogs6DialogC2Ev
_ZN6smooth3GUI7Dialogs6DialogD2Ev
_ZN6smooth3GUI7Divider6GetPosEv
_ZN6smooth3GUI7Divider6SetPosEl
_ZN6smooth3GUI7DividerC1Ell
_ZN6smooth3GUI7EditBox15SetDropDownListEPNS0_4ListE
_ZN6smooth3GUI7EditBox7MarkAllEv
_ZN6smooth3GUI7EditBoxC1ERKNS_6StringERKNS0_5PointERKNS0_4SizeEl
_ZN6smooth3GUI7HotspotC1ERKNS0_5PointERKNS0_4SizeE
_ZN6smooth3GUI7ListBoxC1ERKNS0_5PointERKNS0_4SizeE
_ZN6smooth3GUI7MenubarC1Ev
_ZN6smooth3GUI8CheckBox19internalCheckValuesE
_ZN6smooth3GUI8CheckBoxC1ERKNS_6StringERKNS0_5PointERKNS0_4SizeEPb
_ZN6smooth3GUI8ComboBoxC1ERKNS0_5PointERKNS0_4SizeE
_ZN6smooth3GUI8GroupBoxC1ERKNS_6StringERKNS0_5PointERKNS0_4SizeE
_ZN6smooth3GUI8TitlebarC1El
_ZN6smooth3GUI9Hyperlink6SetURLERKNS_6StringE
_ZN6smooth3GUI9HyperlinkC1ERKNS_6StringERKNS0_6BitmapES4_RKNS0_5PointERKNS0_4SizeE
_ZN6smooth3GUI9ListEntry10IsSelectedEv
_ZN6smooth3GUI9ListEntry7SetMarkEb
_ZN6smooth3GUI9ListEntry8IsMarkedEv
_ZN6smooth3GUI9MenuEntry11SetShortcutEllPNS0_6WindowE
_ZN6smooth3GUI9MicroMenuC1ERKNS0_5PointERKNS0_4SizeEl
_ZN6smooth3GUI9MultiEditC1ERKNS_6StringERKNS0_5PointERKNS0_4SizeEl
_ZN6smooth3GUI9OptionBox19internalCheckValuesE
_ZN6smooth3GUI9OptionBoxC1ERKNS_6StringERKNS0_5PointERKNS0_4SizeEPll
_ZN6smooth3GUI9PopupMenuC1Ev
_ZN6smooth3GUI9StatusbarC1ERKNS_6StringE
_ZN6smooth3GUI9TabWidget9SelectTabEl
_ZN6smooth3GUI9TabWidgetC1ERKNS0_5PointERKNS0_4SizeE
_ZN6smooth3XML4Node12SetAttributeERKNS_6StringES4_
_ZN6smooth3XML4Node7AddNodeERKNS_6StringES4_
_ZN6smooth3XML4NodeC1ERKNS_6StringES4_
_ZN6smooth3XML4NodeD1Ev
_ZN6smooth3XML8Document11SetRootNodeEPNS0_4NodeE
_ZN6smooth3XML8Document8LoadFileERKNS_6StringE
_ZN6smooth3XML8Document8SaveFileERKNS_6StringE
_ZN6smooth3XML8DocumentC1Ev
_ZN6smooth3XML8DocumentD1Ev
_ZN6smooth4File6DeleteEv
_ZN6smooth4FileC1ERKNS_6StringES3_
_ZN6smooth4FileD1Ev
_ZN6smooth4FreeEv
_ZN6smooth4I18n10Translator15TranslateStringERKNS_6StringE
_ZN6smooth4I18n10Translator16ActivateLanguageERKNS_6StringE
_ZN6smooth4InitEv
_ZN6smooth4Math3MaxEll
_ZN6smooth4Math3MaxExx
_ZN6smooth4Math3MinEll
_ZN6smooth4Math3MinExx
_ZN6smooth5Setup13enableUnicodeE
_ZN6smooth5Setup15BackgroundColorE
_ZN6smooth5Setup15ClientTextColorE
_ZN6smooth6Memory6ResizeEl
_ZN6smooth6MemoryC1El
_ZN6smooth6MemoryD1Ev
_ZN6smooth6Object12DeleteObjectEPS0_
_ZN6smooth6Object7classIDE
_ZN6smooth6String10ImportFromEPKcS2_
_ZN6smooth6String14SetInputFormatEPKc
_ZN6smooth6String15SetOutputFormatEPKc
_ZN6smooth6String6AppendEPKc
_ZN6smooth6String6AppendERKS0_
_ZN6smooth6String7FromIntEx
_ZN6smooth6String7ReplaceEPKcRKS0_
_ZN6smooth6String7ReplaceEPKcS2_
_ZN6smooth6String9FromFloatEd
_ZN6smooth6StringC1EPKc
_ZN6smooth6StringC1ERKS0_
_ZN6smooth6StringC1Ei
_ZN6smooth6StringD1Ev
_ZN6smooth6StringaSEPKc
_ZN6smooth6StringaSERKS0_
_ZN6smooth6StringaSEi
_ZN6smooth6StringixEi
_ZN6smooth6StringixEl
_ZN6smooth6System12MultiMonitor23GetVirtualScreenMetricsEv
_ZN6smooth6System6System13GetAPIVersionEv
_ZN6smooth7Threads6RWLock11LockForReadEv
_ZN6smooth7Threads6RWLock12LockForWriteEv
_ZN6smooth7Threads6RWLock7ReleaseEv
_ZN6smooth7Threads6RWLockC1Ev
_ZN6smooth7Threads6RWLockD1Ev
_ZN6smooth7Threads6Thread4StopEv
_ZN6smooth7Threads6Thread5StartEv
_ZN6smooth7Threads6ThreadC1EPv
_ZN6smooth8iCmdShowE
_ZN6smooth9Directory6CreateEv
_ZN6smooth9DirectoryC1ERKNS_6StringES3_
_ZN6smooth9DirectoryD1Ev
_ZN6smooth9hInstanceE
_ZN6smooth9szCmdLineE
_ZNK6smooth3GUI13ListBoxHeader14GetNthTabWidthEl
_ZNK6smooth3GUI4List11GetNthEntryEl
_ZNK6smooth3GUI4List16GetSelectedEntryEv
_ZNK6smooth3GUI4List22GetSelectedEntryNumberEv
_ZNK6smooth3GUI4List6LengthEv
_ZNK6smooth3GUI4SizeplERKS1_
_ZNK6smooth3GUI5PointplERKS1_
_ZNK6smooth3GUI6Widget10IsAffectedERKNS0_4RectE
_ZNK6smooth3GUI6Widget13GetStatusTextEv
_ZNK6smooth3GUI6Widget13IsRightToLeftEv
_ZNK6smooth3GUI6Widget14GetDrawSurfaceEv
_ZNK6smooth3GUI6Widget14GetOrientationEv
_ZNK6smooth3GUI6Widget14GetTooltipTextEv
_ZNK6smooth3GUI6Widget15GetRealPositionEv
_ZNK6smooth3GUI6Widget7GetFontEv
_ZNK6smooth3GUI6Widget7GetTextEv
_ZNK6smooth3GUI6Window13GetClientRectEv
_ZNK6smooth3GUI6Window15GetSystemWindowEv
_ZNK6smooth3GUI6Window21GetRestoredWindowRectEv
_ZNK6smooth3XML4Node10GetContentEv
_ZNK6smooth3XML4Node10GetNthNodeEl
_ZNK6smooth3XML4Node11GetNOfNodesEv
_ZNK6smooth3XML4Node18GetAttributeByNameERKNS_6StringE
_ZNK6smooth3XML4Node7GetNameEv
_ZNK6smooth3XML8Document11GetRootNodeEv
_ZNK6smooth3XML9Attribute10GetContentEv
_ZNK6smooth4File6ExistsEv
_ZNK6smooth4I18n10Translator15GetNOfLanguagesEv
_ZNK6smooth4I18n10Translator16GetNthLanguageIDEl
_ZNK6smooth4I18n10Translator17GetNthLanguageURLEl
_ZNK6smooth4I18n10Translator18GetNthLanguageNameEl
_ZNK6smooth4I18n10Translator20GetNthLanguageAuthorEl
_ZNK6smooth4I18n10Translator22GetNthLanguageEncodingEl
_ZNK6smooth4I18n10Translator23GetActiveLanguageAuthorEv
_ZNK6smooth4I18n10Translator27IsActiveLanguageRightToLeftEv
_ZNK6smooth6MemorycvPvEv
_ZNK6smooth6String10StartsWithEPKc
_ZNK6smooth6String5ToIntEv
_ZNK6smooth6String6LengthEv
_ZNK6smooth6String7ToFloatEv
_ZNK6smooth6String7ToLowerEv
_ZNK6smooth6String7ToUpperEv
_ZNK6smooth6String9ConvertToEPKc
_ZNK6smooth6StringcvPcEv
_ZNK6smooth6StringcvPwEv
_ZNK6smooth6StringeqEPKc
_ZNK6smooth6StringeqERKS0_
_ZNK6smooth6StringeqEi
_ZNK6smooth6StringixEl
_ZNK6smooth6StringneEPKc
_ZNK6smooth6StringneERKS0_
_ZNK6smooth6StringneEi
_ZNK6smooth9Directory6ExistsEv
_ZNK6smooth9DirectorycvNS_6StringEEv
_ZTVN6smooth3GUI4FormE
_ZTVN6smooth6Errors5ErrorE
_ZTVN6smooth6Errors7SuccessE
user32
MessageBoxA
Sections
.text Size: 411KB - Virtual size: 410KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 336B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE