Static task
static1
Behavioral task
behavioral1
Sample
2bbb2d2a7d3a29fe97b50c794489816839436470c2f274b787791e580348556d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2bbb2d2a7d3a29fe97b50c794489816839436470c2f274b787791e580348556d.exe
Resource
win10v2004-20231215-en
General
-
Target
2bbb2d2a7d3a29fe97b50c794489816839436470c2f274b787791e580348556d
-
Size
7.9MB
-
MD5
7bee30a885c803d9823d6379656da5a0
-
SHA1
85edd2fe859a8822257476987309ef97380cf7f9
-
SHA256
2bbb2d2a7d3a29fe97b50c794489816839436470c2f274b787791e580348556d
-
SHA512
d39a92b390a11dcfd14979f5ca7a7b6618e4b652c586e616f3775903c2433c8cc0c9db89a79ea234af3f1c62b82259c19b16719fa2ad74cce680eec0e664d291
-
SSDEEP
98304:gwHH5rfwHm6Eswnr3iAwG/jSB87OhbROKBI4rm14goS/6LS6FCY:j1wGBrhKBI4u1ZSlF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bbb2d2a7d3a29fe97b50c794489816839436470c2f274b787791e580348556d
Files
-
2bbb2d2a7d3a29fe97b50c794489816839436470c2f274b787791e580348556d.exe windows:5 windows x86 arch:x86
0e527a201ba5569882c28f724d5fa908
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyW
SetupCopyOEMInfW
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
hid
HidD_GetHidGuid
HidD_GetAttributes
gdiplus
GdipCreateBitmapFromStream
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageI
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipSetInterpolationMode
GdipStringFormatGetGenericTypographic
GdipSetStringFormatAlign
GdipCreatePath
GdipDeletePath
GdipAddPathString
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawString
GdipDrawImageRectI
GdipGetPathWorldBounds
GdipDeleteStringFormat
GdipCreateStringFormat
GdipAlloc
GdipFree
GdipGetImageGraphicsContext
GdipDeleteBrush
GdipCreateSolidFill
GdipDeleteFontFamily
GdipCreateFont
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipDeleteFont
GdipGetFamily
GdipGetFontStyle
GdipGetFontSize
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdiplusShutdown
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipCloneBrush
kernel32
OpenEventA
MapViewOfFile
CreateFileMappingA
InterlockedCompareExchange
UnmapViewOfFile
OpenFileMappingA
FileTimeToLocalFileTime
CloseHandle
CreateFileW
WriteFile
ReadFile
Sleep
GetACP
SetCommTimeouts
SetCommState
BuildCommDCBA
CreateFileA
GetCommModemStatus
EscapeCommFunction
PurgeComm
FindResourceW
SizeofResource
SetEnvironmentVariableA
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
GetStringTypeW
LCMapStringW
GetTimeZoneInformation
HeapQueryInformation
HeapSize
HeapReAlloc
FatalAppExitA
GetProcessHeap
HeapAlloc
HeapFree
SetConsoleCtrlHandler
IsValidCodePage
GetCPInfo
GetOEMCP
IsProcessorFeaturePresent
UnhandledExceptionFilter
TerminateProcess
HeapDestroy
LockResource
LoadResource
WideCharToMultiByte
GetLastError
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
QueryPerformanceCounter
SetUnhandledExceptionFilter
OutputDebugStringW
OutputDebugStringA
VirtualQuery
GetSystemInfo
VirtualAlloc
GetSystemTimeAsFileTime
GetModuleFileNameA
SetStdHandle
ExitThread
ExitProcess
GetDateFormatW
GetTimeFormatW
DecodePointer
EncodePointer
IsBadReadPtr
HeapValidate
IsDebuggerPresent
RaiseException
GetStdHandle
GetFileType
WriteConsoleW
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetCommandLineW
LocalLock
LocalUnlock
WaitForMultipleObjects
ReleaseMutex
CreateMutexW
ReleaseSemaphore
CreateSemaphoreW
InitializeCriticalSectionAndSpinCount
ResetEvent
PulseEvent
SearchPathW
GetTickCount
GetNumberFormatW
GetWindowsDirectoryW
FindResourceExW
GetTempPathW
GetUserDefaultLCID
ReplaceFileW
GetDiskFreeSpaceW
GetTempFileNameW
SetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
GetFileAttributesExW
GetFileTime
GetFileSizeEx
GetFileAttributesW
GetShortPathNameW
lstrcmpiW
GetStringTypeExW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
MoveFileW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
GetHandleInformation
GetProfileIntW
VirtualProtect
DeleteFileW
CreateEventW
GetCurrentDirectoryW
lstrlenA
GetThreadLocale
SystemTimeToFileTime
FileTimeToSystemTime
SetErrorMode
InterlockedIncrement
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GetAtomNameW
CompareStringW
GetVersionExW
GlobalGetAtomNameW
GlobalFindAtomW
ResumeThread
GetThreadPriority
SetThreadPriority
lstrcpyW
FreeResource
GetCurrentProcessId
GlobalAddAtomW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
SuspendThread
SetEvent
WaitForSingleObject
CompareStringA
InterlockedExchange
lstrcmpW
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetCurrentThread
GetCurrentThreadId
GetLocaleInfoW
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
MulDiv
CopyFileW
GlobalSize
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
GetModuleHandleW
LoadLibraryW
GetProcAddress
ActivateActCtx
DeactivateActCtx
SetLastError
MultiByteToWideChar
GlobalAlloc
GlobalFree
CreateThread
TerminateThread
GetModuleFileNameW
GlobalFlags
user32
GetIconInfo
SetClassLongW
SetCursorPos
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CreateAcceleratorTableW
DrawIconEx
UnregisterClassW
UpdateLayeredWindow
MonitorFromPoint
MessageBeep
CopyAcceleratorTableW
CharNextW
GetDialogBaseUnits
LoadImageW
GetMenuBarInfo
ReuseDDElParam
TranslateAcceleratorW
DestroyIcon
CharUpperW
UnpackDDElParam
GetClipboardFormatNameW
GetClipboardFormatNameA
SetRectEmpty
GetAsyncKeyState
WaitMessage
ReleaseCapture
DestroyMenu
LoadAcceleratorsW
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoW
RealChildWindowFromPoint
MapVirtualKeyW
GetKeyNameTextW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
SendDlgItemMessageA
MonitorFromWindow
GetMonitorInfoW
GetSysColor
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
WinHelpW
TrackPopupMenuEx
TrackPopupMenu
SetWindowPlacement
GetWindowPlacement
GetClassLongW
SetPropW
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
SetMenu
GetMenu
GetMessageTime
GetMessagePos
OpenIcon
CloseWindow
LoadIconW
LoadCursorW
PostThreadMessageW
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
NotifyWinEvent
GetWindowContextHelpId
SendNotifyMessageW
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
IsChild
GetTopWindow
FindWindowExW
FindWindowW
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExW
DlgDirSelectExW
DlgDirListComboBoxW
DlgDirListW
SetCapture
GetCapture
KillTimer
CopyImage
DrawCaption
DrawAnimatedRects
EnableScrollBar
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
InvalidateRgn
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
ScreenToClient
ClientToScreen
MapWindowPoints
GetClientRect
GetWindowRect
BringWindowToTop
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
IsIconic
HiliteMenuItem
GetSystemMenu
DrawMenuBar
DragDetect
SetFocus
ShowWindow
MoveWindow
GetDlgCtrlID
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
IsDialogMessageW
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
SendDlgItemMessageW
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
GetClassNameW
UnhookWindowsHookEx
CheckMenuRadioItem
GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectW
LoadMenuW
ModifyMenuW
InsertMenuItemW
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
DeleteMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringW
GetTabbedTextExtentW
DrawTextExW
DrawTextW
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateW
DrawIcon
InvertRect
FrameRect
PeekMessageA
IsWindowUnicode
GetMessageA
DispatchMessageA
SubtractRect
FillRect
ExcludeUpdateRgn
WindowFromDC
GetSysColorBrush
GetWindow
SetWindowContextHelpId
RegisterWindowMessageW
EndDialog
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
MessageBoxW
RegisterClipboardFormatW
SetClipboardData
CloseClipboard
EmptyClipboard
PtInRect
OffsetRect
CopyIcon
IsRectEmpty
CharUpperBuffW
DefFrameProcW
TranslateMDISysAccel
DefMDIChildProcW
IsClipboardFormatAvailable
GetDoubleClickTime
IsCharLowerW
GetParent
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetWindowThreadProcessId
SetCursor
GetKeyState
CallNextHookEx
GetCursorPos
SetWindowsHookExW
ValidateRect
MapVirtualKeyExW
InSendMessage
EnumChildWindows
DestroyCursor
MsgWaitForMultipleObjectsEx
SetTimer
UnionRect
IntersectRect
InflateRect
SetRect
LoadBitmapW
PostMessageW
wsprintfW
DispatchMessageW
TranslateMessage
PeekMessageW
SetWindowLongW
GetWindowLongW
SetWindowPos
RegisterDeviceNotificationW
GetSystemMetrics
UnregisterDeviceNotification
SendMessageW
IsWindow
GetMenuItemID
InsertMenuW
AppendMenuW
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemCount
IsMenu
RemoveMenu
PostQuitMessage
MapDialogRect
TabbedTextOutW
GetFocus
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetMessageW
DestroyAcceleratorTable
gdi32
CreateDiscardableBitmap
CreatePalette
CreateHalftonePalette
GetPaletteEntries
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
CreateRectRgn
CreateRectRgnIndirect
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
CombineRgn
EqualRgn
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
CreateICW
CreateCompatibleDC
GetBrushOrgEx
SetBrushOrgEx
EnumObjects
SelectObject
GetNearestColor
RealizePalette
UpdateColors
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetMapMode
GetGraphicsMode
GetWorldTransform
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
FillRgn
FrameRgn
InvertRgn
PaintRgn
PtVisible
RectVisible
GetCurrentPositionEx
Arc
Polyline
Chord
Ellipse
Pie
Polygon
PolyPolygon
Rectangle
RoundRect
PatBlt
BitBlt
StretchBlt
GetPixel
SetPixel
FloodFill
ExtFloodFill
TextOutW
GetTextExtentPoint32W
GetTextAlign
GetTextFaceW
GetTextMetricsW
GetTextCharacterExtra
GetCharWidthW
GetFontLanguageInfo
GetCharacterPlacementW
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCW
GetOutlineTextMetricsW
GetCharABCWidthsW
GetFontData
GetKerningPairsW
SetBitmapDimensionEx
CreateCompatibleBitmap
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
MaskBlt
PlgBlt
SetPixelV
AngleArc
GetArcDirection
PolyPolyline
GetColorAdjustment
GetCurrentObject
PolyBezier
DrawEscape
ExtEscape
GetCharABCWidthsFloatW
GetCharWidthFloatW
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetMiterLimit
GetPath
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
GdiComment
PlayEnhMetaFile
DeleteObject
SetTextColor
SetBkColor
DeleteDC
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetLayout
SetLayout
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
EnumMetaFile
PlayMetaFile
EnumFontFamiliesW
GetTextCharsetInfo
CreateDIBitmap
StretchDIBits
CreateDIBSection
EnumFontFamiliesExW
GetSystemPaletteEntries
GetDIBits
SetDIBColorTable
DeleteMetaFile
GetTextExtentPointW
StartDocW
GetBitmapDimensionEx
GetBitmapBits
SetBitmapBits
CreateBitmapIndirect
CreateFontW
CreateFontIndirectW
CreateDIBPatternBrushPt
CreatePatternBrush
CreateBrushIndirect
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePenIndirect
CreatePen
GetObjectType
UnrealizeObject
GetStockObject
GetObjectW
CreateBitmap
ExtTextOutW
CloseEnhMetaFile
CreateEnhMetaFileW
CloseMetaFile
CreateMetaFileW
CopyMetaFileW
CreateDCW
GetGlyphOutlineW
GetDeviceCaps
msimg32
TransparentBlt
GradientFill
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
GetJobW
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
OpenThreadToken
RegSetValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueW
RegEnumKeyW
RegEnumValueW
RevertToSelf
SetThreadToken
GetFileSecurityW
SetFileSecurityW
RegEnumKeyExW
RegCloseKey
shell32
DragFinish
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
SHGetSpecialFolderLocation
ShellExecuteExW
SHAppBarMessage
DragQueryFileW
ShellExecuteW
ExtractIconW
SHGetFileInfoW
SHAddToRecentDocs
DragAcceptFiles
comctl32
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove
ImageList_GetIcon
ImageList_GetImageCount
ImageList_DrawEx
InitCommonControlsEx
shlwapi
PathRemoveExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
PathFindExtensionW
PathStripToRootW
ole32
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitializeEx
CoUninitialize
CoInitialize
CoCreateInstance
StringFromGUID2
CoDisconnectObject
CLSIDFromString
CLSIDFromProgID
CreateILockBytesOnHGlobal
ReleaseStgMedium
CoTaskMemAlloc
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
OleRun
PropVariantCopy
CoRegisterClassObject
CoRevokeClassObject
OleInitialize
OleUninitialize
CoUnmarshalInterface
CoMarshalInterface
CoReleaseMarshalData
CreateDataAdviseHolder
CreateOleAdviseHolder
GetRunningObjectTable
GetClassFile
OleQueryLinkFromData
OleQueryCreateFromData
OleRegGetMiscStatus
OleRegEnumVerbs
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CoRegisterMessageFilter
StgCreateDocfile
OleIsRunning
CreateItemMoniker
CreateGenericComposite
OleSaveToStream
WriteClassStm
OleGetIconOfClass
GetHGlobalFromILockBytes
StgIsStorageILockBytes
OleSave
OleLoad
OleCreate
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
OleSetMenuDescriptor
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
StgIsStorageFile
CreateFileMoniker
CoGetMalloc
DoDragDrop
OleFlushClipboard
OleSetClipboard
OleIsCurrentClipboard
CreateStreamOnHGlobal
CoCreateGuid
CoTaskMemFree
OleDuplicateData
StgOpenStorage
CoFreeUnusedLibraries
oleaut32
SysStringByteLen
SysFreeString
SysAllocString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SafeArrayGetDim
SafeArrayGetElemsize
RegisterTypeLi
SafeArrayGetElement
SysAllocStringByteLen
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VarBstrFromDec
VarDecFromStr
SysStringLen
VarDateFromStr
VarBstrFromDate
OleCreateFontIndirect
LoadRegTypeLi
DosDateTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate
VarDateFromUdate
SystemTimeToVariantTime
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayRedim
SafeArrayCreate
VariantCopy
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
LoadTypeLi
oledlg
OleUIPasteSpecialW
OleUIUpdateLinksW
OleUIEditLinksW
OleUIChangeIconW
OleUIConvertW
OleUIInsertObjectW
OleUIBusyW
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundW
Sections
.textbss Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 824KB - Virtual size: 823KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 281KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ