273401fff3380e8d51c17474b073460a

Sharing

Copy URL

Twitter E-mail

General

Target

273401fff3380e8d51c17474b073460a
Size

488KB
MD5

273401fff3380e8d51c17474b073460a
SHA1

7ad45180f20469040a3dabf8473d6f03e8c55383
SHA256

78c6567201eeeaa1a359ab8929325de30abf18c22993de371a08b7c9bc0af04c
SHA512

1dd6ea8902a5ec10276509a4c7481ae742e5f3f0a7d655a6af4cd5397b351dbd26de18f43aa5bdceb64bf0ca3a335ed1481222317a07e6711381a50f67642ba7
SSDEEP

12288:VYPVoOow9L1t1wcPObu9+bVwMvz+gI85rL2zYSBs8:CNofw9L1Hw6iu9+bVwMvzNI85rLuYSL

Score

1^/10

Malware Config

Signatures

Files

273401fff3380e8d51c17474b073460a
.dll regsvr32 windows:4 windows x86 arch:x86

Code Sign

47:97:d7:b2:79:be:40:de:07:1a:6d:59:b2:d7:b8:d4
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

09-10-2020 00:00

Not After

09-10-2021 23:59

Subject

CN=NALA LIMITED,O=NALA LIMITED,POSTALCODE=N17 0RE,STREET=Unit 8 41 West Road\,,L=London,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-11-2018 00:00

Not After

31-12-2030 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:fd:6d:30:fc:a3:ca:51:a8:1b:bc:64:0e:35:03:2d
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

01-02-2010 00:00

Not After

18-01-2038 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

bb:8f:05:61:73:8c:5b:a3:d9:78:49:90:16:1e:24:5b:20:f9:2d:b9:56:1b:6d:04:2d:20:45:b1:29:53:3f:ce
Signer

Actual PE Digest

bb:8f:05:61:73:8c:5b:a3:d9:78:49:90:16:1e:24:5b:20:f9:2d:b9:56:1b:6d:04:2d:20:45:b1:29:53:3f:ce

Digest Algorithm

sha256

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllUnregisterServer
DllGetClassObject
DllRegisterServer
DllCanUnloadNow

Sections

.novcic
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.phene
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mannide
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.paratol
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.endothe
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pseudoc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.unprote
Size: 4KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.caustif
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.overpas
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.visionm
Size: 3KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.garlick
Size: 5KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.unsuffi
Size: 3KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.hematop
Size: 512B - Virtual size: 1B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.unplaus
Size: 512B - Virtual size: 3B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.epipubi
Size: 512B - Virtual size: 6B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.primly
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rhomboq
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uninhal
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jesting
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.prefere
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.toothdr
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.b
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.conchal
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.me
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fortune
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ophioni
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.unsegme
Size: 218KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.monarde
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.palau
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trepidn
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fogdom
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.predefi
Size: 512B - Virtual size: 5B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.finjan
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.antefle
Size: 512B - Virtual size: 6B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.choate
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.azulmi
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zogan
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.linolen
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.delight
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.champio
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bedfell
Size: 512B - Virtual size: 6B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.f
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bignou
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reve
Size: 512B - Virtual size: 3B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nonnego
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wellmak
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.iatrali
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.unblind
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.carotin
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.daintin
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.seceder
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.modulat
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aneup
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

47:97:d7:b2:79:be:40:de:07:1a:6d:59:b2:d7:b8:d4Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

01:fd:6d:30:fc:a3:ca:51:a8:1b:bc:64:0e:35:03:2dCertificate

Key Usages

bb:8f:05:61:73:8c:5b:a3:d9:78:49:90:16:1e:24:5b:20:f9:2d:b9:56:1b:6d:04:2d:20:45:b1:29:53:3f:ceSigner

Headers

File Characteristics

Exports

Exports

Sections

.novcic Size: 5KB - Virtual size: 33KB

.phene Size: 5KB - Virtual size: 33KB

.mannide Size: 3KB - Virtual size: 3KB

.paratol Size: 5KB - Virtual size: 5KB

.endothe Size: 4KB - Virtual size: 32KB

.pseudoc Size: 5KB - Virtual size: 5KB

.unprote Size: 4KB - Virtual size: 33KB

.caustif Size: 5KB - Virtual size: 5KB

.overpas Size: 4KB - Virtual size: 3KB

.visionm Size: 3KB - Virtual size: 32KB

.garlick Size: 5KB - Virtual size: 34KB

.unsuffi Size: 3KB - Virtual size: 32KB

.text Size: 127KB - Virtual size: 126KB

.hematop Size: 512B - Virtual size: 1B

.unplaus Size: 512B - Virtual size: 3B

.epipubi Size: 512B - Virtual size: 6B

.primly Size: 512B - Virtual size: 29KB

.rhomboq Size: 512B - Virtual size: 29KB

.uninhal Size: 512B - Virtual size: 29KB

.jesting Size: 512B - Virtual size: 29KB

.prefere Size: 512B - Virtual size: 29KB

.toothdr Size: 512B - Virtual size: 4B

.b Size: 512B - Virtual size: 29KB

.conchal Size: 512B - Virtual size: 29KB

.me Size: 512B - Virtual size: 1B

.fortune Size: 512B - Virtual size: 29KB

.ophioni Size: 512B - Virtual size: 1B

.unsegme Size: 218KB - Virtual size: 246KB

.monarde Size: 512B - Virtual size: 1B

.palau Size: 512B - Virtual size: 29KB

.trepidn Size: 512B - Virtual size: 1B

.fogdom Size: 512B - Virtual size: 29KB

.predefi Size: 512B - Virtual size: 5B

.finjan Size: 512B - Virtual size: 1B

.antefle Size: 512B - Virtual size: 6B

.choate Size: 512B - Virtual size: 3B

.azulmi Size: 512B - Virtual size: 1B

.zogan Size: 512B - Virtual size: 29KB

.linolen Size: 512B - Virtual size: 4B

.delight Size: 512B - Virtual size: 29KB

.champio Size: 512B - Virtual size: 29KB

.bedfell Size: 512B - Virtual size: 6B

.f Size: 512B - Virtual size: 1B

.bignou Size: 512B - Virtual size: 29KB

.reve Size: 512B - Virtual size: 3B

.nonnego Size: 512B - Virtual size: 1B

.data Size: 1KB - Virtual size: 30KB

.rsrc Size: 49KB - Virtual size: 49KB

.wellmak Size: 512B - Virtual size: 29KB

.iatrali Size: 512B - Virtual size: 29KB

.unblind Size: 512B - Virtual size: 2B

.carotin Size: 512B - Virtual size: 4B

.daintin Size: 512B - Virtual size: 29KB

.seceder Size: 512B - Virtual size: 29KB

.modulat Size: 512B - Virtual size: 29KB

.aneup Size: 512B - Virtual size: 1B

.reloc Size: 8KB - Virtual size: 7KB

47:97:d7:b2:79:be:40:de:07:1a:6d:59:b2:d7:b8:d4
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

01:fd:6d:30:fc:a3:ca:51:a8:1b:bc:64:0e:35:03:2d
Certificate

bb:8f:05:61:73:8c:5b:a3:d9:78:49:90:16:1e:24:5b:20:f9:2d:b9:56:1b:6d:04:2d:20:45:b1:29:53:3f:ce
Signer

.novcic
Size: 5KB - Virtual size: 33KB

.phene
Size: 5KB - Virtual size: 33KB

.mannide
Size: 3KB - Virtual size: 3KB

.paratol
Size: 5KB - Virtual size: 5KB

.endothe
Size: 4KB - Virtual size: 32KB

.pseudoc
Size: 5KB - Virtual size: 5KB

.unprote
Size: 4KB - Virtual size: 33KB

.caustif
Size: 5KB - Virtual size: 5KB

.overpas
Size: 4KB - Virtual size: 3KB

.visionm
Size: 3KB - Virtual size: 32KB

.garlick
Size: 5KB - Virtual size: 34KB

.unsuffi
Size: 3KB - Virtual size: 32KB

.text
Size: 127KB - Virtual size: 126KB

.hematop
Size: 512B - Virtual size: 1B

.unplaus
Size: 512B - Virtual size: 3B

.epipubi
Size: 512B - Virtual size: 6B

.primly
Size: 512B - Virtual size: 29KB

.rhomboq
Size: 512B - Virtual size: 29KB

.uninhal
Size: 512B - Virtual size: 29KB

.jesting
Size: 512B - Virtual size: 29KB

.prefere
Size: 512B - Virtual size: 29KB

.toothdr
Size: 512B - Virtual size: 4B

.b
Size: 512B - Virtual size: 29KB

.conchal
Size: 512B - Virtual size: 29KB

.me
Size: 512B - Virtual size: 1B

.fortune
Size: 512B - Virtual size: 29KB

.ophioni
Size: 512B - Virtual size: 1B

.unsegme
Size: 218KB - Virtual size: 246KB

.monarde
Size: 512B - Virtual size: 1B

.palau
Size: 512B - Virtual size: 29KB

.trepidn
Size: 512B - Virtual size: 1B

.fogdom
Size: 512B - Virtual size: 29KB

.predefi
Size: 512B - Virtual size: 5B

.finjan
Size: 512B - Virtual size: 1B

.antefle
Size: 512B - Virtual size: 6B

.choate
Size: 512B - Virtual size: 3B

.azulmi
Size: 512B - Virtual size: 1B

.zogan
Size: 512B - Virtual size: 29KB

.linolen
Size: 512B - Virtual size: 4B

.delight
Size: 512B - Virtual size: 29KB

.champio
Size: 512B - Virtual size: 29KB

.bedfell
Size: 512B - Virtual size: 6B

.f
Size: 512B - Virtual size: 1B

.bignou
Size: 512B - Virtual size: 29KB

.reve
Size: 512B - Virtual size: 3B

.nonnego
Size: 512B - Virtual size: 1B

.data
Size: 1KB - Virtual size: 30KB

.rsrc
Size: 49KB - Virtual size: 49KB

.wellmak
Size: 512B - Virtual size: 29KB

.iatrali
Size: 512B - Virtual size: 29KB

.unblind
Size: 512B - Virtual size: 2B

.carotin
Size: 512B - Virtual size: 4B

.daintin
Size: 512B - Virtual size: 29KB

.seceder
Size: 512B - Virtual size: 29KB

.modulat
Size: 512B - Virtual size: 29KB

.aneup
Size: 512B - Virtual size: 1B

.reloc
Size: 8KB - Virtual size: 7KB