Static task
static1
Behavioral task
behavioral1
Sample
2b84c12b1afe676e3816d13c89338dd60146d4056d733c8a8e6a49c0c3a9340c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2b84c12b1afe676e3816d13c89338dd60146d4056d733c8a8e6a49c0c3a9340c.exe
Resource
win10v2004-20231215-en
General
-
Target
2b84c12b1afe676e3816d13c89338dd60146d4056d733c8a8e6a49c0c3a9340c
-
Size
4.6MB
-
MD5
8e6f770c3ed184fee7479c656138d1a1
-
SHA1
32333c3bf8d7bfa83ff8516dc1fd79648bcc6e6a
-
SHA256
2b84c12b1afe676e3816d13c89338dd60146d4056d733c8a8e6a49c0c3a9340c
-
SHA512
29133a345695c20052d7536ae35c3efb792e67315e067818d130837ff0c94ba883e471f4860618d76a63ad4605f33b26c6acdf26be67eb11436f6149ead36b57
-
SSDEEP
49152:iTXPbMLzwLkYB1GCAYVeoWR3QofbCMeoRa0U3CCowMyDskZMMY5PWw2E7bq8x6Bd:6XPMz+GhQVEa3CLwN3MMY5D2EvMU/BE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b84c12b1afe676e3816d13c89338dd60146d4056d733c8a8e6a49c0c3a9340c
Files
-
2b84c12b1afe676e3816d13c89338dd60146d4056d733c8a8e6a49c0c3a9340c.exe windows:6 windows x64 arch:x64
45111b028a9e13352637d16f2c2bf8f0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
comctl32
ImageList_Replace
ord16
ImageList_SetBkColor
ImageList_Destroy
ImageList_Create
ord17
ImageList_GetIconSize
ImageList_Draw
ImageList_Add
ImageList_GetImageCount
ImageList_GetImageInfo
rpcrt4
UuidToStringW
RpcStringFreeW
ncore
NCoreOnStart
NCoreOnExitEx
NObjectReset
NStringEqualsN
NDoubleParseN
NInt32TypeOf
NUInt8ToStringN
NObjectEquals
NValueToInt32
NEnumParseN
NEnumGetValues
NValueToObject
NObjectGetPropertyNN
NSingleTypeOf
NAsyncOperationGetResult
NTypeIsInstanceOfType
NAsyncOperationAddCompleted
NFileWriteAllBytesN
NObjectToStringN
NAsyncOperationGetError
NObjectSetPropertyNN
NBooleanTypeOf
NStringGetBufferW
NEnumToStringN
NReAlloc
NStringAppendStrOrCharsW
NStringCreateWrapperW
NCAlloc
NObjectSet
NObjectRemovePropertyChanged
NErrorCreateN
NCallbackCreateCustomRaw
NErrorSetLastEx
NErrorGetCodeEx
NStringConcatManyVAW
NStringConcatManyVAA
NStringCreateFromStrOrCharsA
NErrorSetLastN
NErrorSetLastA
NErrorSetLastW
NObjectAddPropertyChanged
NCallbackFree
NStringBuilderInitW
NStringBuilderAppendW
NStringBuilderAppendNW
NStringBuilderAppendCharW
NStringBuilderDetachStringNW
NStringBuilderDisposeW
NStringBuilderGetLengthW
NStringTrim
NFree
NStringToLower
NStringCreateWrapperA
NStringFree
NStringClone
NFileReadAllLinesN
NFileExistsN
NObjectUnref
NErrorSuppress
NErrorGetLastEx
NObjectRef
NStringEqualsStrOrCharsW
NErrorSetComW
nmedia
NImageFormatGetFormatCount
NImageCreateFromFileExN
NImageFormatCanWrite
NImageFormatGetFormatEx
NImageGetWidth
NImageFormatGetNameN
NImageFormatGetFileFilterN
NImageFormatCanRead
NImageCopyToData
NImageGetHeight
NImageSaveToFileExN
nbiometrics
NSubjectGetMatchingResult
NTemplateSizeTypeOf
NSubjectSetMultipleSubjects
NSubjectGetRelatedSubjectCount
NSubjectGetRelatedSubject
NBiometricEngineInitialize
NSubjectGetMatchingResultCount
NBiometricTaskGetSubjectCount
NBiometricTaskGetSubject
NSubjectGetId
NMatchingResultGetScore
NMatchingResultGetId
NBiometricEngineIdentifyAsync
NBiometricTaskGetStatus
NBiometricEngineClear
NBiometricTaskAddSubject
NSubjectSetIdN
NBiometricTaskTypeOf
NSubjectCreateFromFileN
NBiometricTaskCreate
NFaceGetObjectCount
NBiometricEngineCreateTemplateAsync
NFaceSetImage
NLivenessModeTypeOf
NFaceTypeOf
NBiometricEngineDetectFacesAsync
NFaceGetObject
NBiometricSetFileNameN
NSubjectGetFace
NSubjectGetTemplateBuffer
NBiometricStatusTypeOf
NBiometricEnginePerformTaskAsync
NBiometricEngineCreateTask
NSubjectAddFace
NBiometricSetCaptureOptions
NBiometricEngineVerifyOfflineAsync
NFaceCreate
NSubjectCreate
NSubjectGetStatus
NBiometricGetStatus
NBiometricAttributesGetDetectionConfidence
NBiometricAttributesGetQuality
NLAttributesGetLivenessAction
NLAttributesGetTokenImageRect
NLAttributesGetGender
NGenderTypeOf
NLAttributesGetGenderConfidence
NBiometricAttributesGetAttributeIndexOf
NBiometricAttributesGetAttributeThreshold
NBiometricAttributesGetAttributeValue
NBiometricAttributesGetAttributeId
NLAttributesGetLeftEyeCenter
NLAttributesGetRightEyeCenter
NLAttributesGetNoseTip
NLAttributesGetMouthCenter
NLAttributesGetFeaturePoints
NLAttributesGetLivenessScore
NLAttributesGetLivenessTargetYaw
NLAttributesGetYaw
NLAttributesGetRoll
NLAttributesGetBoundingRect
NLAttributesGetIcaoWarnings
NFaceRemoveObjectsCollectionChanged
NFaceAddObjectsCollectionChanged
NFaceGetObjects
NFaceGetImage
nbiometricclient
NBiometricClientGetFaceCaptureDevice
NBiometricClientForce
NBiometricClientGetDeviceManager
NBiometricClientSetFaceCaptureDevice
NBiometricClientCancel
NBiometricClientCaptureAsync
NBiometricClientForceStart
NBiometricClientCreate
NBiometricClientSetBiometricTypes
NBiometricClientSetUseDeviceManager
nlicensing
NLicManSetTrialMode
NLicenseObtainComponentsN
NLicManGetTrialMode
NLicenseIsComponentActivatedN
ndevices
NDeviceGetDisplayNameN
NDeviceManagerGetDeviceByIdN
NDeviceManagerGetDevices
NCameraTypeOf
NDeviceGetIdN
kernel32
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
InitializeSListHead
QueryPerformanceFrequency
QueryPerformanceCounter
CreateEventW
IsBadStringPtrA
IsBadReadPtr
GetACP
RtlCaptureContext
GetLogicalDriveStringsW
GetDriveTypeW
WaitForMultipleObjects
ExpandEnvironmentStringsW
LocalAlloc
FormatMessageW
GetLastError
SetLastError
ExitProcess
GetCurrentThreadId
MulDiv
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
LoadLibraryW
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
GetCommandLineW
LocalFree
GetStdHandle
FreeConsole
AttachConsole
WriteConsoleA
WriteConsoleW
FillConsoleOutputCharacterW
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
ReadConsoleOutputCharacterA
GlobalSize
GlobalHandle
SetErrorMode
GetSystemTimeAsFileTime
MultiByteToWideChar
WideCharToMultiByte
SetCurrentDirectoryW
CreateFileW
GetFileAttributesW
GetFileType
CloseHandle
CopyFileW
WaitForSingleObject
GetCurrentProcess
GetCurrentThread
TlsAlloc
TlsSetValue
TlsFree
GetTempPathW
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetEnvironmentVariableW
IsDebuggerPresent
TerminateProcess
GetVersionExW
GetNativeSystemInfo
LoadResource
LockResource
SizeofResource
FindResourceW
IsValidCodePage
GetCPInfo
FindClose
FindFirstFileW
GetLongPathNameW
GetTempFileNameW
SetEvent
OutputDebugStringW
user32
IsRectEmpty
GetClassInfoW
SetMenu
RegisterWindowMessageW
GetProcessDefaultLayout
MessageBoxW
DrawIconEx
DestroyIcon
HideCaret
GetWindowTextLengthW
keybd_event
IsMenu
SetWindowRgn
SetForegroundWindow
GetSystemMenu
GetDialogBaseUnits
CreateDialogIndirectParamW
IsZoomed
BringWindowToTop
IsIconic
FlashWindowEx
SetLayeredWindowAttributes
UnregisterClassW
RegisterClassW
GetWindowPlacement
CheckMenuRadioItem
GetSysColorBrush
MsgWaitForMultipleObjects
GetMonitorInfoW
DdeFreeStringHandle
DdeQueryStringW
DdeCreateStringHandleW
DdeGetLastError
DdeFreeDataHandle
DdeGetData
DdeCreateDataHandle
DdeClientTransaction
DdeNameService
DdePostAdvise
GetMenuItemID
CheckMenuItem
DrawFrameControl
DrawEdge
DestroyCursor
LoadCursorW
SetMenuItemInfoW
InsertMenuItemW
SetMenuInfo
RemoveMenu
EnumDisplayMonitors
AppendMenuW
MessageBeep
GetSubMenu
EnableMenuItem
DestroyMenu
CreatePopupMenu
CreateMenu
DrawMenuBar
GetMenuState
PostMessageW
UnionRect
OffsetRect
CopyRect
SetRectEmpty
SetRect
DrawStateW
DrawFocusRect
DdeDisconnect
GetComboBoxInfo
FindWindowExW
ChildWindowFromPoint
LoadImageW
CreateIconIndirect
GetIconInfo
wsprintfW
LoadIconW
LoadBitmapW
GetDlgItem
CreateDialogParamW
SystemParametersInfoW
GetScrollInfo
SetScrollInfo
IsDialogMessageW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
SetParent
GetParent
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
InflateRect
FillRect
GetSysColor
ChildWindowFromPointEx
GetClassNameW
CreateAcceleratorTableW
DestroyAcceleratorTable
TranslateAcceleratorW
GetDoubleClickTime
GetCaretBlinkTime
GetMessageW
PostThreadMessageW
ValidateRect
GetWindowDC
BeginPaint
EndPaint
GetDesktopWindow
ValidateRgn
WindowFromPoint
MapWindowPoints
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
RegisterClipboardFormatW
GetClipboardFormatNameW
ChangeDisplaySettingsExW
EnumDisplaySettingsW
GetWindowTextW
MonitorFromPoint
InsertMenuW
SetCursorPos
MonitorFromWindow
IsClipboardFormatAvailable
ModifyMenuW
GetWindowRect
GetClientRect
SetWindowTextW
EnableScrollBar
ScrollWindow
RedrawWindow
InvalidateRect
GetUpdateRgn
ReleaseDC
GetDC
UpdateWindow
GetMenuItemInfoW
TrackPopupMenu
GetMenuItemCount
GetSystemMetrics
IsWindowEnabled
EnableWindow
ReleaseCapture
SetCapture
GetCapture
MapVirtualKeyW
VkKeyScanW
GetAsyncKeyState
GetKeyState
GetFocus
GetActiveWindow
SetFocus
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPos
MoveWindow
AnimateWindow
ShowWindow
DestroyWindow
IsWindow
CreateWindowExW
CallWindowProcW
PostQuitMessage
DefWindowProcW
SendMessageW
GetMessageTime
GetMessagePos
UnregisterHotKey
RegisterHotKey
PeekMessageW
DispatchMessageW
TranslateMessage
DdeConnect
DdeUninitialize
DdeInitializeW
KillTimer
DrawTextW
SetTimer
PtInRect
gdi32
SetBrushOrgEx
GetTextMetricsW
SelectPalette
GdiFlush
DeleteObject
SelectObject
RealizePalette
GetDeviceCaps
ExcludeClipRect
CreateRectRgn
CreateFontIndirectW
GetOutlineTextMetricsW
EndPage
StartPage
EndDoc
StartDocW
SetAbortProc
EnumFontFamiliesExW
GetSystemPaletteEntries
CreateDCW
PlayEnhMetaFile
GetEnhMetaFileHeader
GetEnhMetaFileW
DeleteEnhMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
SetViewportOrgEx
SetDIBColorTable
GetDIBColorTable
CreateDIBSection
GetDIBits
CreateDIBitmap
CreateICW
GetTextExtentExPointW
GetCharABCWidthsW
CreateRectRgnIndirect
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
RectInRegion
PtInRegion
GetRgnBox
EqualRgn
CombineRgn
MoveToEx
LineTo
GetBkColor
SetWindowOrgEx
SetWindowExtEx
SetViewportExtEx
PolyBezier
Polyline
Polygon
LPtoDP
DPtoLP
CreatePolygonRgn
ExtTextOutW
ModifyWorldTransform
SetWorldTransform
GetWorldTransform
SetROP2
StretchDIBits
SetPolyFillMode
SetPixel
GetLayout
SetLayout
SetMapMode
SetGraphicsMode
ExtSelectClipRgn
SelectClipRgn
RoundRect
Rectangle
PolyPolygon
Pie
MaskBlt
GetPixel
GetObjectType
GetClipBox
ExtFloodFill
Ellipse
Arc
OffsetRgn
GetRegionData
ExtCreateRegion
GetTextExtentPoint32W
SetStretchBltMode
StretchBlt
ExtCreatePen
CreatePen
GetStockObject
CreatePatternBrush
CreateHatchBrush
GetWindowExtEx
GetViewportExtEx
GetGraphicsMode
CreateSolidBrush
SetTextColor
SetBkMode
GetObjectW
SetBkColor
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmapIndirect
CreateBitmap
BitBlt
winspool.drv
DocumentPropertiesW
GetPrinterW
OpenPrinterW
ClosePrinter
comdlg32
ChooseFontW
CommDlgExtendedError
GetSaveFileNameW
PageSetupDlgW
PrintDlgW
GetOpenFileNameW
advapi32
RegCreateKeyExW
RegSetValueExW
RegCloseKey
GetUserNameW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
shell32
DragQueryPoint
DragFinish
SHGetFolderPathW
ord6
SHGetFileInfoW
CommandLineToArgvW
ExtractIconExW
ExtractIconW
DragAcceptFiles
DragQueryFileW
ole32
CoLockObjectExternal
OleUninitialize
OleInitialize
RevokeDragDrop
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
OleIsCurrentClipboard
ReleaseStgMedium
OleFlushClipboard
OleGetClipboard
OleSetClipboard
RegisterDragDrop
oleaut32
SysFreeString
SysAllocString
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAJ@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrSwap@@YAXPEAX0@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?_Xout_of_range@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?uncaught_exception@std@@YA_NXZ
oleacc
LresultFromObject
uxtheme
DrawThemeBackground
GetThemeBackgroundContentRect
IsThemeBackgroundPartiallyTransparent
GetThemeColor
DrawThemeParentBackground
GetThemeMargins
GetThemePartSize
GetThemeInt
GetThemeSysColor
GetThemeSysFont
SetWindowTheme
GetThemeBackgroundExtent
GetCurrentThemeName
IsThemeActive
IsAppThemed
GetThemeFont
IsThemePartDefined
OpenThemeData
CloseThemeData
msimg32
GradientFill
AlphaBlend
shlwapi
SHAutoComplete
vcruntime140
__RTDynamicCast
__std_exception_destroy
__std_exception_copy
__intrinsic_setjmp
_set_se_translator
wcsstr
longjmp
__CxxFrameHandler3
__std_terminate
__RTtypeid
__std_type_info_compare
_purecall
__std_type_info_name
wcschr
__C_specific_handler
memcpy
memmove
memset
memcmp
_CxxThrowException
strchr
strstr
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfwprintf
_wsopen_dispatch
_get_osfhandle
_open_osfhandle
_wfopen
clearerr
feof
ferror
_fseeki64
_ftelli64
fwrite
__stdio_common_vswscanf
__stdio_common_vsscanf
fflush
__stdio_common_vswprintf_s
_close
_read
_write
_lseeki64
_telli64
__stdio_common_vswprintf
__stdio_common_vswprintf_p
fread
__acrt_iob_func
__stdio_common_vfprintf
fclose
_set_fmode
__p__commode
_fileno
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
malloc
realloc
calloc
_callnewh
api-ms-win-crt-runtime-l1-1-0
exit
terminate
_set_app_type
_get_narrow_winmain_command_line
_cexit
_initterm
_initterm_e
_errno
abort
_exit
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_c_exit
_crt_atexit
_register_thread_local_exe_atexit_callback
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_seh_filter_exe
api-ms-win-crt-math-l1-1-0
acosf
atan2f
ceilf
cosf
floorf
fmodf
pow
sinf
sqrtf
lround
tanf
roundf
ceil
cos
floor
fmod
__setusermatherr
sin
lroundf
sqrt
log10
atan2
_fdopen
api-ms-win-crt-convert-l1-1-0
atof
strtol
_wcstoi64
_wcstoui64
_wtol
strtoll
wcstod
_wtoi
_wcstod_l
wcstol
wcstoul
api-ms-win-crt-string-l1-1-0
towupper
_wcsicmp
wcspbrk
strncmp
isspace
tolower
_strdup
strncpy
towlower
strcmp
iswprint
iswxdigit
iswspace
iswdigit
iswalpha
iswalnum
toupper
wcsncpy
api-ms-win-crt-time-l1-1-0
_tzset
_time64
_mktime64
_localtime64
_gmtime64
wcsftime
_get_timezone
api-ms-win-crt-utility-l1-1-0
qsort
bsearch
api-ms-win-crt-environment-l1-1-0
_wgetenv
getenv
_wgetcwd
api-ms-win-crt-filesystem-l1-1-0
_wrename
_wremove
api-ms-win-crt-locale-l1-1-0
_create_locale
_configthreadlocale
setlocale
_free_locale
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 87KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ