548aa4fd07f7de1cc3bdc74590eb2eb1

Sharing

Copy URL Twitter E-mail

General

Target

548aa4fd07f7de1cc3bdc74590eb2eb1
Size

634KB
MD5

548aa4fd07f7de1cc3bdc74590eb2eb1
SHA1

317d18c34c2f879c84c5ec955d8dc10ef73f20f9
SHA256

653ad6d6731877fa6dd3d24a904d96ba7793d817cadaecb78ce2af042d5f4f01
SHA512

8983b4b432af7f7cec4a7a9bdc01b57e798b42af866325d538ee4ce800c47af22a4fda6cf33ae7ec8b58eafc449591065decbc37928293bf8fb1bb6f9fa20d90
SSDEEP

12288:mSylrZh1xCuI1VUk7BtIdbGDrIv27o9RjiiA28r1gRUbH4lE:mdrZhXC1V3BadsI+7AhtATHYC

Score

3^/10

Malware Config

Signatures

Unsigned PE 7 IoCs

Checks for missing Authenticode signature.

resource
unpack001/baoming3.0/Bin/Dimac.JMail.Smtp.dll
unpack001/baoming3.0/Bin/Dimac.JMail.dll
unpack001/baoming3.0/Bin/Microsoft.Web.UI.WebControls.dll
unpack001/baoming3.0/Bin/Security.dll
unpack001/baoming3.0/Bin/WebValidates.dll
unpack001/baoming3.0/Bin/baoming.dll
unpack001/baoming3.0/Bin/treeview.dll

Files

548aa4fd07f7de1cc3bdc74590eb2eb1
.rar
baoming3.0/Bin/Dimac.JMail.Smtp.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
baoming3.0/Bin/Dimac.JMail.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
baoming3.0/Bin/Microsoft.Web.UI.WebControls.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
baoming3.0/Bin/Security.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.textxc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
baoming3.0/Bin/WebValidates.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
baoming3.0/Bin/baoming.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.textxc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
baoming3.0/Bin/treeview.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
baoming3.0/BmCss/style.css
baoming3.0/Default.aspx
.asp
baoming3.0/Error.aspx
.asp
baoming3.0/Global.asax
.asp
baoming3.0/License.rtf
baoming3.0/Web.config
.xml
baoming3.0/add_stu_info.aspx
.asp
baoming3.0/administrator/Add_Student.aspx
.asp
baoming3.0/administrator/Details.aspx
.asp
baoming3.0/administrator/Edit_stu.aspx
.asp
baoming3.0/administrator/Image/api.gif
.gif
baoming3.0/administrator/Image/bg.gif
.gif
baoming3.0/administrator/Image/copy.gif
.gif
baoming3.0/administrator/Image/demo.gif
.gif
baoming3.0/administrator/Image/dload.gif
.gif
baoming3.0/administrator/Image/friends.gif
.gif
baoming3.0/administrator/Image/fu.gif
.gif
baoming3.0/administrator/Image/list.gif
.gif
baoming3.0/administrator/Image/login_logo.gif
.gif
baoming3.0/administrator/Image/login_main.gif
.gif
baoming3.0/administrator/Image/menu_bg.gif
.gif
baoming3.0/administrator/Image/mslogo.gif
.gif
baoming3.0/administrator/Image/treeNode.gif
.gif
baoming3.0/administrator/Image/treeNode2.gif
.gif
baoming3.0/administrator/Image/update.gif
.gif
baoming3.0/administrator/MailtoStudent.aspx
.asp
baoming3.0/administrator/PrintStuInfo.aspx
.asp
baoming3.0/administrator/Sys_fenlei.aspx
.asp
baoming3.0/administrator/TaskMenu.js
.js
baoming3.0/administrator/admin.aspx
.asp
baoming3.0/administrator/admin_info_edit.aspx
.asp
baoming3.0/administrator/after_delete_admin.aspx
.asp
baoming3.0/administrator/backup/系统初始化（清除所有数据）.asax
baoming3.0/administrator/changepassword.aspx
.asp
baoming3.0/administrator/css/style.css
baoming3.0/administrator/css/vssver.scc
baoming3.0/administrator/db_out.aspx
.asp
baoming3.0/administrator/dbmanage.aspx
.asp
baoming3.0/administrator/images/Arrow1.gif
.gif
baoming3.0/administrator/images/Arrow11.gif
.gif
baoming3.0/administrator/images/Arrow2.gif
.gif
baoming3.0/administrator/images/bg.gif
.gif
baoming3.0/administrator/images/button_center_bg.gif
.gif
baoming3.0/administrator/images/button_center_bg_down.gif
.gif
baoming3.0/administrator/images/button_center_bg_over.gif
.gif
baoming3.0/administrator/images/button_center_bg_select.gif
.gif
baoming3.0/administrator/images/button_center_bg_select_over.gif
.gif
baoming3.0/administrator/images/button_left.gif
.gif
baoming3.0/administrator/images/button_left_down.gif
.gif
baoming3.0/administrator/images/button_left_over.gif
.gif
baoming3.0/administrator/images/button_left_select.gif
.gif
baoming3.0/administrator/images/button_left_select_over.gif
.gif
baoming3.0/administrator/images/button_right.gif
.gif
baoming3.0/administrator/images/button_right_down.gif
.gif
baoming3.0/administrator/images/button_right_over.gif
.gif
baoming3.0/administrator/images/button_right_select.gif
.gif
baoming3.0/administrator/images/button_right_select_over.gif
.gif
baoming3.0/administrator/images/catbg.gif
.gif
baoming3.0/administrator/images/close.gif
.gif
baoming3.0/administrator/images/close_all.gif
.gif
baoming3.0/administrator/images/close_all_over.gif
.gif
baoming3.0/administrator/images/close_down.gif
.gif
baoming3.0/administrator/images/close_over.gif
.gif
baoming3.0/administrator/images/folder.gif
.gif
baoming3.0/administrator/images/folderopen.gif
.gif
baoming3.0/administrator/images/headerbg.gif
.gif
baoming3.0/administrator/images/hide.gif
.gif
baoming3.0/administrator/images/html.gif
.gif
baoming3.0/administrator/images/icon/Copy of controltoolbar.gif
.gif
baoming3.0/administrator/images/icon/Copy of search.gif
.gif
baoming3.0/administrator/images/icon/controltoolbar.gif
.gif
baoming3.0/administrator/images/icon/search.gif
.gif
baoming3.0/administrator/images/quit.gif
.gif
baoming3.0/administrator/images/root.gif
.gif
baoming3.0/administrator/images/seperate.gif
.gif
baoming3.0/administrator/images/seperate_line_bg.gif
.gif
baoming3.0/administrator/images/seperateline.gif
.gif
baoming3.0/administrator/images/show.gif
.gif
baoming3.0/administrator/images/style.css
baoming3.0/administrator/images/tab1.gif
.gif
baoming3.0/administrator/images/tab2.gif
.gif
baoming3.0/administrator/images/title.gif
.gif
baoming3.0/administrator/images/title_bg.gif
.gif
baoming3.0/administrator/images/toolbar_bg.gif
.gif
baoming3.0/administrator/index.aspx
.asp
baoming3.0/administrator/left1.aspx
.asp .js polyglot
baoming3.0/administrator/mailstu.aspx
.asp
baoming3.0/administrator/main.aspx
.asp
baoming3.0/administrator/out.aspx
.asp
baoming3.0/administrator/public.js
.js
baoming3.0/administrator/scripts/MdiWin.js
.js
baoming3.0/administrator/site_info.aspx
.asp
baoming3.0/administrator/stuinfo_edit.aspx
.asp
baoming3.0/administrator/style.css
baoming3.0/administrator/sys_unlock.aspx
.asp
baoming3.0/administrator/sys_user.aspx
.asp
baoming3.0/administrator/sys_xueke.aspx
.asp
baoming3.0/administrator/top.aspx
.asp
baoming3.0/aspnet_client/system_web/1_1_4322/SmartNav.htm
baoming3.0/aspnet_client/system_web/1_1_4322/SmartNav.js
.js
baoming3.0/aspnet_client/system_web/1_1_4322/WebUIValidation.js
.js
baoming3.0/bottom.ascx
.asp
baoming3.0/database/db_out.asax
baoming3.0/database/dbsys/Region.asax
baoming3.0/database/dbsys/原始Region.asax
baoming3.0/database/dbsys/对外Region.asax
baoming3.0/database/new_baoming.asax
baoming3.0/database/temp.mdb
baoming3.0/help.GIF
.gif
baoming3.0/img/@.gif
.gif
baoming3.0/img/BannerYh.gif
.gif
baoming3.0/img/ButtonBg.jpg
.jpg
baoming3.0/img/Email.gif
.gif
baoming3.0/img/ICO_Q.gif
.gif
baoming3.0/img/QQ.gif
.gif
baoming3.0/img/Thumbs.db
baoming3.0/img/TiShi_bg.gif
.gif
baoming3.0/img/banner.gif
.gif
baoming3.0/img/btnBack.gif
.gif
baoming3.0/img/demo.gif
.gif
baoming3.0/img/loginBg.gif
.gif
baoming3.0/img/loginPageBg.gif
.gif
baoming3.0/img/main_bg.gif
.gif
baoming3.0/img/main_down.gif
.gif
baoming3.0/js/Calendar.js
.js
baoming3.0/js/ChangeColor.js
.js
baoming3.0/js/prototype.js
.js
baoming3.0/js/validate.js
.js
baoming3.0/list_student.aspx
.asp
baoming3.0/list_xueke.aspx
.asp
baoming3.0/login.aspx
.asp
baoming3.0/meta.ascx
.asp
baoming3.0/sendMail.aspx
.asp
baoming3.0/top.ascx
.asp
baoming3.0/treepath/MultiPage.htc
.js
baoming3.0/treepath/TabStrip.htc
.js
baoming3.0/treepath/images/folder.gif
.gif
baoming3.0/treepath/images/folderopen.gif
.gif
baoming3.0/treepath/images/html.gif
.gif
baoming3.0/treepath/images/root.gif
.gif
baoming3.0/treepath/toolbar.htc
.js
baoming3.0/treepath/treeimages/L.gif
.gif
baoming3.0/treepath/treeimages/Lminus.gif
.gif
baoming3.0/treepath/treeimages/Lplus.gif
.gif
baoming3.0/treepath/treeimages/Rminus.gif
.gif
baoming3.0/treepath/treeimages/Rplus.gif
.gif
baoming3.0/treepath/treeimages/T.gif
.gif
baoming3.0/treepath/treeimages/Tminus.gif
.gif
baoming3.0/treepath/treeimages/Tplus.gif
.gif
baoming3.0/treepath/treeimages/f.gif
.gif
baoming3.0/treepath/treeimages/fminus.gif
.gif
baoming3.0/treepath/treeimages/fplus.gif
.gif
baoming3.0/treepath/treeimages/i.gif
.gif
baoming3.0/treepath/treeimages/minus.gif
.gif
baoming3.0/treepath/treeimages/plus.gif
.gif
baoming3.0/treepath/treeimages/r.gif
.gif
baoming3.0/treepath/treeimages/rtl/F.gif
.gif
baoming3.0/treepath/treeimages/rtl/Fminus.gif
.gif
baoming3.0/treepath/treeimages/rtl/Fplus.gif
.gif
baoming3.0/treepath/treeimages/rtl/I.gif
.gif
baoming3.0/treepath/treeimages/rtl/L.gif
.gif
baoming3.0/treepath/treeimages/rtl/Lminus.gif
.gif
baoming3.0/treepath/treeimages/rtl/Lplus.gif
.gif
baoming3.0/treepath/treeimages/rtl/Rminus.gif
.gif
baoming3.0/treepath/treeimages/rtl/Rplus.gif
.gif
baoming3.0/treepath/treeimages/rtl/T.gif
.gif
baoming3.0/treepath/treeimages/rtl/Tminus.gif
.gif
baoming3.0/treepath/treeimages/rtl/Tplus.gif
.gif
baoming3.0/treepath/treeimages/rtl/minus.gif
.gif
baoming3.0/treepath/treeimages/rtl/plus.gif
.gif
baoming3.0/treepath/treeimages/rtl/r.gif
.gif
baoming3.0/treepath/treeimages/rtl/white.gif
.gif
baoming3.0/treepath/treeimages/white.gif
.gif
baoming3.0/treepath/treeview.htc
.js
baoming3.0/treepath/webservice.htc
.js
baoming3.0/treepath/webserviced.htc
.js
baoming3.0/下载说明.htm
.html .js polyglot
baoming3.0/安装说明.html
.html

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 16KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 60KB - Virtual size: 57KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

File Characteristics

Imports

mscoree

Sections

.text Size: 164KB - Virtual size: 161KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 4KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 8KB

.reloc Size: 4KB - Virtual size: 8KB

.textxc Size: 4KB - Virtual size: 2KB

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 12KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 888B

.reloc Size: 4KB - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 8KB - Virtual size: 8KB

.text Size: - Virtual size: 48KB

.text Size: 40KB - Virtual size: 40KB

.text Size: - Virtual size: 48KB

.text Size: 4KB - Virtual size: 8KB

.rsrc Size: 4KB - Virtual size: 8KB

.reloc Size: 4KB - Virtual size: 8KB

.textxc Size: 172KB - Virtual size: 171KB

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1024B - Virtual size: 1012B

.rsrc Size: 1024B - Virtual size: 824B

.reloc Size: 512B - Virtual size: 12B

.text
Size: 16KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 60KB - Virtual size: 57KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 164KB - Virtual size: 161KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 8KB

.reloc
Size: 4KB - Virtual size: 8KB

.textxc
Size: 4KB - Virtual size: 2KB

.text
Size: 12KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 888B

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 8KB - Virtual size: 8KB

.text
Size: - Virtual size: 48KB

.text
Size: 40KB - Virtual size: 40KB

.text
Size: - Virtual size: 48KB

.text
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 4KB - Virtual size: 8KB

.reloc
Size: 4KB - Virtual size: 8KB

.textxc
Size: 172KB - Virtual size: 171KB

.text
Size: 1024B - Virtual size: 1012B

.rsrc
Size: 1024B - Virtual size: 824B

.reloc
Size: 512B - Virtual size: 12B