Soundpad[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

Soundpad.exe
Size

12.1MB
MD5

4e40382af44b34b7760ec6c2370f79a1
SHA1

88b95563b2b4e7fdee036927ff2349a328e57ea3
SHA256

caded5ded9e6d76ec01ddb944bc924c16f501a6fdd07c0143920224f66a0f919
SHA512

be5649928b12e19f05ba542c9cc1d9b419962455c0046ea3ef530fcb01056de59712885d9e4eccfb88607aab6b121f2da1c87a29d78f49fd9f36c9c56e5f2844
SSDEEP

196608:veTZbcoTJNEtbWdtsauejdLtS8S+T1oPA6J:veVbcAJNEtbWcUjBt3V+DJ

Score

1^/10

Malware Config

Signatures

Files

Soundpad.exe
.exe windows:6 windows x64 arch:x64

29067d24f8aa3e343496cb2023a7d138

Code Sign

20:1b:a2:64:3f:56:60:f8:0d:99:9a:f9:81:90:cd:f1
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/10/2019, 00:00

Not After

10/10/2022, 23:59

Subject

CN=Arthur Lepp,O=Arthur Lepp,POSTALCODE=50825,STREET=Iltisstr. 142,L=Köln,ST=NRW,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

1a:d3:ef:2a:5a:90:23:69:7c:ed:3f:f2:d3:81:fe:c5:0d:5f:c3:68
Signer

Actual PE Digest

1a:d3:ef:2a:5a:90:23:69:7c:ed:3f:f2:d3:81:fe:c5:0d:5f:c3:68

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\dev\UniteFx\x64\Release\Soundpad.pdb

Imports

usp10

ScriptItemize
ScriptBreak

dwmapi

DwmExtendFrameIntoClientArea
DwmIsCompositionEnabled

kernel32

GetDiskFreeSpaceExW
GetFileInformationByHandle
GetVolumeInformationW
FileTimeToSystemTime
HeapAlloc
GetProcessHeap
FindFirstFileW
CreateEventExW
FindNextFileW
CreateMutexW
FindClose
GetFileAttributesW
ReleaseMutex
OpenFileMappingW
GetSystemDirectoryW
FormatMessageW
GetFileAttributesExW
GetWindowsDirectoryW
VerSetConditionMask
GetModuleHandleW
CreateFileMappingW
MapViewOfFile
OutputDebugStringW
GetLocalTime
HeapSetInformation
MultiByteToWideChar
HeapFree
VerifyVersionInfoW
SetErrorMode
GetFileTime
GetLongPathNameW
GetTempFileNameW
SetCurrentDirectoryW
GetFileType
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
SetThreadPriority
GetExitCodeThread
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
QueryPerformanceCounter
QueryPerformanceFrequency
GetACP
GetLocaleInfoW
IsValidLocale
GetThreadLocale
SetThreadLocale
GetUserDefaultLCID
GetEnvironmentVariableW
IsDebuggerPresent
TerminateProcess
GetVersionExW
LoadResource
LockResource
SizeofResource
FindResourceW
IsValidCodePage
GetCPInfo
FreeLibrary
RtlCaptureContext
GetCurrentThread
GetCommandLineW
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
PeekNamedPipe
CreateThread
IsBadReadPtr
IsBadStringPtrA
MulDiv
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
HeapSize
GlobalSize
GetStdHandle
FreeConsole
AttachConsole
WriteConsoleA
WriteConsoleW
FillConsoleOutputCharacterW
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
ReadConsoleOutputCharacterA
GetStringTypeW
GetLocaleInfoEx
RtlPcToFileHeader
EncodePointer
LCMapStringEx
CompareStringEx
InitializeCriticalSectionAndSpinCount
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
RtlUnwind
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetDriveTypeW
GetFullPathNameW
SystemTimeToTzSpecificLocalTime
SetStdHandle
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
SetFilePointerEx
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
EnumSystemLocalesW
GetCurrentDirectoryW
GetFileSizeEx
HeapReAlloc
SetEndOfFile
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetLogicalDriveStringsW
FindFirstFileExW
GetCommandLineA
lstrcmpA
LocalFree
LocalAlloc
DisconnectNamedPipe
FlushFileBuffers
WriteFile
SetLastError
WideCharToMultiByte
CancelIo
ReadFile
ConnectNamedPipe
CreateNamedPipeW
CreateEventW
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentThreadId
CreateFileW
GetTempPathW
GetProcAddress
LoadLibraryW
CopyFileW
GetCurrentProcess
MoveFileExW
ReplaceFileW
DecodePointer
DeleteCriticalSection
RaiseException
GetTickCount64
Sleep
CreateDirectoryW
GetModuleFileNameW
UnmapViewOfFile
WaitForSingleObject
CloseHandle
GetExitCodeProcess
WaitForMultipleObjects
GetLastError
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteFileW
InitializeCriticalSectionEx
SetEnvironmentVariableW

user32

CreateMenu
CreatePopupMenu
DestroyMenu
GetSubMenu
InsertMenuW
AppendMenuW
ModifyMenuW
RemoveMenu
SetMenuInfo
InsertMenuItemW
SetMenuItemInfoW
DrawEdge
CheckMenuItem
GetMenuItemID
GetSysColorBrush
SetRect
CheckMenuRadioItem
RegisterWindowMessageW
SetMenu
FindWindowExW
EndDialog
EnumChildWindows
ChildWindowFromPoint
GetComboBoxInfo
UnionRect
GetClassInfoW
IsRectEmpty
IsMenu
GetWindowTextLengthW
HideCaret
ShowCaret
GetDesktopWindow
RegisterClipboardFormatW
GetClipboardFormatNameW
GetProcessDefaultLayout
GetWindowTextW
MessageBeep
GetClassNameW
CreateAcceleratorTableW
DestroyAcceleratorTable
TranslateAcceleratorW
GetMessageW
ValidateRect
GetWindowDC
BeginPaint
EndPaint
ValidateRgn
NotifyWinEvent
ChangeDisplaySettingsExW
EnumDisplaySettingsW
MonitorFromPoint
EnumDisplayMonitors
LoadImageW
IsClipboardFormatAvailable
wsprintfW
AdjustWindowRectEx
ShowCursor
PostQuitMessage
GetMessageTime
GetMessagePos
UnregisterHotKey
RegisterHotKey
TranslateMessage
GetParent
DestroyCursor
GetWindowLongPtrW
FillRect
DrawFocusRect
GetSysColor
GetWindowRect
DrawTextW
GetSystemMetrics
DdeFreeStringHandle
DdeQueryStringW
DdeCreateStringHandleW
DdeGetLastError
DdeFreeDataHandle
DdeGetData
DdeCreateDataHandle
DdeClientTransaction
DdeNameService
DdePostAdvise
DdeDisconnect
DdeConnect
DdeUninitialize
DdeInitializeW
LoadCursorW
SetCursor
KillTimer
SetTimer
MsgWaitForMultipleObjects
DispatchMessageW
DestroyWindow
DefWindowProcW
PeekMessageW
BringWindowToTop
CreateWindowExW
RegisterClassW
PostMessageW
PostThreadMessageW
MessageBoxW
LoadIconW
LoadBitmapW
OffsetRect
LoadCursorFromFileW
CopyRect
SetRectEmpty
DrawStateW
SetWindowRgn
EnableMenuItem
GetSystemMenu
DrawMenuBar
GetDialogBaseUnits
CreateDialogIndirectParamW
IsZoomed
IsIconic
FlashWindowEx
SetLayeredWindowAttributes
GetWindowPlacement
GetIconInfo
CreateIconIndirect
GetDlgItem
CreateDialogParamW
SystemParametersInfoW
GetScrollInfo
SetScrollInfo
IsDialogMessageW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
SetParent
PtInRect
GetMenuState
DrawIconEx
DrawFrameControl
SetWindowLongPtrW
InflateRect
ChildWindowFromPointEx
WindowFromPoint
MapWindowPoints
ScreenToClient
ClientToScreen
GetCursorPos
SetCursorPos
GetClientRect
SetWindowTextW
EnableScrollBar
ScrollWindow
RedrawWindow
InvalidateRect
GetUpdateRgn
ReleaseDC
GetDC
UpdateWindow
GetMenuItemInfoW
TrackPopupMenu
GetMenuItemCount
IsWindowEnabled
EnableWindow
ReleaseCapture
SetCapture
GetCapture
VkKeyScanW
GetKeyState
GetActiveWindow
SetFocus
IsWindowVisible
GetClassLongPtrW
SetClassLongPtrW
SendMessageW
UnregisterClassW
GetWindowLongW
SetWindowPos
DestroyIcon
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
MoveWindow
AnimateWindow
ShowWindow
IsWindow
CallWindowProcW
GetFocus
GetMonitorInfoW
MonitorFromWindow
SetWindowLongW
keybd_event
SetForegroundWindow
ExitWindowsEx
GetDoubleClickTime
GetAsyncKeyState
GetKeyNameTextW
MapVirtualKeyW

advapi32

AllocateAndInitializeSid
RegDeleteKeyExW
RegEnumKeyW
RegDeleteKeyW
RegSetKeySecurity
RegEnumKeyExW
RegCreateKeyExW
SetSecurityDescriptorOwner
RegGetKeySecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CloseEventLog
ReadEventLogW
OpenEventLogW
NotifyServiceStatusChangeW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
GetSecurityDescriptorDacl
CryptReleaseContext
CryptGetHashParam
CryptImportKey
CryptDestroyHash
CryptHashData
CryptDeriveKey
CryptCreateHash
CryptVerifySignatureW
CryptDecrypt
CryptAcquireContextW
CryptDestroyKey
RegCloseKey
GetTokenInformation
QueryServiceStatusEx
StartServiceW
EnumDependentServicesW
ControlService
GetUserNameW
RegSetValueExW
FreeSid
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegEnumValueW
RegDeleteTreeW

shell32

DragAcceptFiles
DragFinish
DragQueryPoint
DragQueryFileW
ExtractIconW
SHGetMalloc
SHGetPathFromIDListW
CommandLineToArgvW
SHGetFolderPathW
SHBrowseForFolderW
Shell_NotifyIconW
SHGetFileInfoW
ExtractIconExW
SHGetStockIconInfo
SHCreateItemFromParsingName
SHCreateDirectoryExW
ord155
ord6
SHOpenFolderAndSelectItems
ord190
ShellExecuteExW
SHChangeNotify

ole32

CoTaskMemFree
RegisterDragDrop
StringFromGUID2
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
OleSetClipboard
CoLockObjectExternal
ReleaseStgMedium
RevokeDragDrop
OleUninitialize
OleInitialize
PropVariantClear
CoInitializeEx
CoSetProxyBlanket
CoUninitialize
DoDragDrop
CoCreateInstance
CLSIDFromString
CoTaskMemAlloc

wsock32

WSACleanup
WSAStartup

comctl32

ImageList_SetDragCursorImage
ImageList_DragMove
ord16
ord17
ImageList_Create
ImageList_Destroy
ImageList_GetImageCount
ImageList_Add
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_Draw
ImageList_Replace
ImageList_Remove
ImageList_GetIconSize
ImageList_GetImageInfo
ImageList_Copy
ImageList_BeginDrag
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave

rpcrt4

RpcStringFreeW
UuidToStringW

oleacc

CreateStdAccessibleObject

uxtheme

GetThemeMargins
DrawThemeParentBackground
GetThemeFont
IsAppThemed
IsThemeActive
IsThemePartDefined
GetCurrentThemeName
SetWindowTheme
GetThemeInt
GetThemeBackgroundExtent
GetThemeSysFont
GetThemeColor
GetThemeSysColor
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeBackgroundContentRect
IsThemeBackgroundPartiallyTransparent
GetThemePartSize

shlwapi

ord219
SHAutoComplete
AssocQueryStringW
ord12

crypt32

CryptMsgClose
CryptMsgGetParam
CertFreeCertificateContext
CertCloseStore
CryptQueryObject
CertFindCertificateInStore
CryptDecodeObject

wininet

InternetQueryDataAvailable
InternetReadFile
InternetConnectW
InternetCloseHandle
HttpSendRequestW
HttpQueryInfoW
InternetOpenW
HttpOpenRequestW

mf

MFCreateTranscodeTopology
MFCreateTranscodeProfile
MFCreateMediaSession
MFGetService

mfplat

MFCreateMediaType
MFCreateSourceResolver
MFCreateSample
MFCreateMemoryBuffer
MFCreateAttributes
MFCreateMFByteStreamOnStream
MFShutdown
MFStartup

mfreadwrite

MFCreateSourceReaderFromByteStream
MFCreateSourceReaderFromURL

avrt

AvRevertMmThreadCharacteristics
AvSetMmThreadCharacteristicsW

msimg32

GradientFill
AlphaBlend

gdi32

SetPolyFillMode
SetPixel
GetLayout
SetBkMode
SetLayout
SetMapMode
SetGraphicsMode
ExtSelectClipRgn
SelectClipRgn
RoundRect
Rectangle
PolyPolygon
Pie
MaskBlt
GetStockObject
GetObjectType
GetClipBox
GetBkColor
Ellipse
Arc
GetPixel
ExtFloodFill
CreateSolidBrush
CreatePen
OffsetRgn
GetRegionData
ExtCreateRegion
GetObjectW
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
BitBlt
GetOutlineTextMetricsW
GetDeviceCaps
DeleteObject
EnumFontFamiliesExW
EndPage
StartPage
EndDoc
StartDocW
CreateDCW
SetAbortProc
GetSystemPaletteEntries
PlayEnhMetaFile
GetEnhMetaFileHeader
GetEnhMetaFileW
DeleteEnhMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
GetDIBColorTable
CreateDIBSection
GetDIBits
CreateDIBitmap
CreateICW
GetTextExtentExPointW
GetCharABCWidthsW
CreateRectRgnIndirect
CreateFontIndirectW
GdiFlush
SetBrushOrgEx
GetTextMetricsW
SelectPalette
SelectObject
RealizePalette
ExcludeClipRect
CreateRectRgn
SetTextColor
SetBkColor
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
RectInRegion
PtInRegion
GetRgnBox
EqualRgn
CombineRgn
MoveToEx
LineTo
GetTextExtentPoint32W
ExtCreatePen
CreatePatternBrush
CreateHatchBrush
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
PolyBezier
Polyline
Polygon
ExtTextOutW
ModifyWorldTransform
SetWorldTransform
GetWorldTransform
SetStretchBltMode
SetROP2
StretchDIBits
StretchBlt

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

comdlg32

ChooseFontW
CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW
PrintDlgW
PageSetupDlgW
ChooseColorW

oleaut32

SafeArrayUnlock
SafeArrayLock
VariantClear
SysAllocString
SysFreeString
VariantInit
SysStringLen
SystemTimeToVariantTime
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetVartype
VarBstrFromCy

Exports

Exports

??0ServiceControl@@QEAA@XZ
??0UniteFxControl@@QEAA@$$QEAV0@@Z
??0UniteFxControl@@QEAA@XZ
??1ServiceControl@@QEAA@XZ
??1UniteFxControl@@QEAA@XZ
??4UniteFxControl@@QEAAAEAV0@$$QEAV0@@Z
?GetFilterBlockVoice@UniteFxControl@@QEAAJAEA_N@Z
?PlaySoundData@UniteFxControl@@QEAAJAEAV?$vector@EV?$allocator@E@std@@@std@@AEBVAudioFormat@@@Z
?PlaySoundFile@UniteFxControl@@QEAAJPEB_WAEA_NAEAUUfxMediaControl@@@Z
?PlaySoundFileEx@UniteFxControl@@QEAAJPEAVAudioFile@@AEA_NAEAUUfxMediaControl@@@Z
?RestartService@ServiceControl@@QEAA?AUretCode@@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetFilterBlockVoice@UniteFxControl@@QEAAJAEA_N@Z
?Stop@UniteFxControl@@QEAAJXZ

Sections

.text
Size: 8.1MB - Virtual size: 8.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 158KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 243KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

29067d24f8aa3e343496cb2023a7d138

Code Sign

20:1b:a2:64:3f:56:60:f8:0d:99:9a:f9:81:90:cd:f1Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

1a:d3:ef:2a:5a:90:23:69:7c:ed:3f:f2:d3:81:fe:c5:0d:5f:c3:68Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

usp10

dwmapi

kernel32

user32

advapi32

shell32

ole32

wsock32

comctl32

rpcrt4

oleacc

uxtheme

shlwapi

crypt32

wininet

mf

mfplat

mfreadwrite

avrt

msimg32

gdi32

winspool.drv

comdlg32

oleaut32

Exports

Exports

Sections

.text Size: 8.1MB - Virtual size: 8.1MB

.rdata Size: 2.4MB - Virtual size: 2.4MB

.data Size: 158KB - Virtual size: 1.0MB

.pdata Size: 243KB - Virtual size: 242KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.reloc Size: 129KB - Virtual size: 128KB

20:1b:a2:64:3f:56:60:f8:0d:99:9a:f9:81:90:cd:f1
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

1a:d3:ef:2a:5a:90:23:69:7c:ed:3f:f2:d3:81:fe:c5:0d:5f:c3:68
Signer

.text
Size: 8.1MB - Virtual size: 8.1MB

.rdata
Size: 2.4MB - Virtual size: 2.4MB

.data
Size: 158KB - Virtual size: 1.0MB

.pdata
Size: 243KB - Virtual size: 242KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

.reloc
Size: 129KB - Virtual size: 128KB