o:\OOO320\src\filter\wntmsci12.pro\bin\svgfiltermi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8f6b974a41bf928ce08324f62ec1c7ef.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8f6b974a41bf928ce08324f62ec1c7ef.dll
Resource
win10v2004-20231215-en
General
-
Target
8f6b974a41bf928ce08324f62ec1c7ef
-
Size
293KB
-
MD5
8f6b974a41bf928ce08324f62ec1c7ef
-
SHA1
1a5bccef5464b440e75d22ccef7400b27934f57a
-
SHA256
330c169e0a738fd8d1e49cac94329e3695ccdd7eeb94f465a6d0163db1675395
-
SHA512
ada20335183946bd12c9501a0a37366de976d1849ac250fe2b4e493aeb4779fe7488ed67956664e71944065d0c58dc51a52e80085638476b4e091d55ee3748c3
-
SSDEEP
6144:Mo0VK9TPRVW88XOymxo6JPc+mUHtQ2mUfzdvbwN/Bvuz3:Mo0M9T5VzxoAPc+urEzdjwNA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f6b974a41bf928ce08324f62ec1c7ef
Files
-
8f6b974a41bf928ce08324f62ec1c7ef.dll windows:5 windows x86 arch:x86
3e39418a5c42f72cbc9cd37ceba53593
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
svxcoremi
?StaticType@SvxFooterField@@SAP6APAXXZXZ
?StaticType@SvxHeaderField@@SAP6APAXXZXZ
?GetObjGraphic@SdrExchangeView@@SA?AVGraphic@@PBVSdrModel@@PBVSdrObject@@@Z
?GetSdrObjectFromXShape@@YAPAVSdrObject@@V?$Reference@VXShape@drawing@star@sun@com@@@uno@star@sun@com@@@Z
?GetDrawOutliner@SdrModel@@QBEAAVSdrOutliner@@PBVSdrTextObj@@@Z
?getImplementation@SvxDrawPage@@SAPAV1@ABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
?StaticType@SvxPageField@@SAP6APAXXZXZ
?StaticType@SvxDateTimeField@@SAP6APAXXZXZ
?CreateRomanString@SvxNumberFormat@@SA?AVString@@KE@Z
xomi
??0SvXMLElementExport@@QAE@AAVSvXMLExport@@GABVOUString@rtl@@EE@Z
?AddAttribute@SvXMLExport@@QAEXGPBDABVOUString@rtl@@@Z
??0SvXMLElementExport@@QAE@AAVSvXMLExport@@GPBDEE@Z
?getSomething@SvXMLExport@@UAA_JABV?$Sequence@C@uno@star@sun@com@@@Z
?setName@SvXMLExport@@UAAXABVOUString@rtl@@@Z
?getName@SvXMLExport@@UAA?AVOUString@rtl@@XZ
?initialize@SvXMLExport@@UAAXABV?$Sequence@VAny@uno@star@sun@com@@@uno@star@sun@com@@@Z
?setSourceDocument@SvXMLExport@@UAAXABV?$Reference@VXComponent@lang@star@sun@com@@@uno@star@sun@com@@@Z
?getSupportedServiceNames@SvXMLExport@@UAA?AV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@XZ
?supportsService@SvXMLExport@@UAAEABVOUString@rtl@@@Z
?getImplementationName@SvXMLExport@@UAA?AVOUString@rtl@@XZ
?cancel@SvXMLExport@@UAAXXZ
?filter@SvXMLExport@@UAAEABV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@@Z
?getImplementationId@?$WeakImplHelper6@VXFilter@document@star@sun@com@@VXServiceInfo@lang@345@VXExporter@2345@VXInitialization@7345@VXNamed@container@345@VXUnoTunnel@7345@@cppu@@UAA?AV?$Sequence@C@uno@star@sun@com@@XZ
?getTypes@?$WeakImplHelper6@VXFilter@document@star@sun@com@@VXServiceInfo@lang@345@VXExporter@2345@VXInitialization@7345@VXNamed@container@345@VXUnoTunnel@7345@@cppu@@UAA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
?DisposingModel@SvXMLExport@@UAEXXZ
?exportAnnotationMeta@SvXMLExport@@UAEXABV?$Reference@VXShape@drawing@star@sun@com@@@uno@star@sun@com@@@Z
?getDataStyleName@SvXMLExport@@UBE?AVOUString@rtl@@JE@Z
?exportAutoDataStyles@SvXMLExport@@UAEXXZ
?exportDataStyles@SvXMLExport@@UAEXXZ
?addDataStyle@SvXMLExport@@UAEXJE@Z
?GetDocumentSpecificSettings@SvXMLExport@@MAEJAAV?$list@USettingsGroup@SvXMLExport@@V?$allocator@USettingsGroup@SvXMLExport@@@_STL@@@_STL@@@Z
?GetConfigurationSettings@SvXMLExport@@MAEXAAV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@@Z
?GetViewSettings@SvXMLExport@@MAEXAAV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@@Z
?CreateFormExport@SvXMLExport@@MAEPAVOFormLayerXMLExport@xmloff@@XZ
?CreateFontAutoStylePool@SvXMLExport@@MAEPAVXMLFontAutoStylePool@@XZ
?CreatePageExport@SvXMLExport@@MAEPAVXMLPageExport@@XZ
?CreateChartExport@SvXMLExport@@MAEPAVSchXMLExportHelper@@XZ
?CreateAutoStylePool@SvXMLExport@@MAEPAVSvXMLAutoStylePoolP@@XZ
?CreateShapeExport@SvXMLExport@@MAEPAVXMLShapeExport@@XZ
?CreateTextParagraphExport@SvXMLExport@@MAEPAVXMLTextParagraphExport@@XZ
?_ExportFontDecls@SvXMLExport@@MAEXXZ
?_ExportScripts@SvXMLExport@@MAEXXZ
?SetBodyAttributes@SvXMLExport@@EAEXXZ
?release@?$WeakImplHelper6@VXFilter@document@star@sun@com@@VXServiceInfo@lang@345@VXExporter@2345@VXInitialization@7345@VXNamed@container@345@VXUnoTunnel@7345@@cppu@@UAAXXZ
?acquire@?$WeakImplHelper6@VXFilter@document@star@sun@com@@VXServiceInfo@lang@345@VXExporter@2345@VXInitialization@7345@VXNamed@container@345@VXUnoTunnel@7345@@cppu@@UAAXXZ
?queryInterface@?$WeakImplHelper6@VXFilter@document@star@sun@com@@VXServiceInfo@lang@345@VXExporter@2345@VXInitialization@7345@VXNamed@container@345@VXUnoTunnel@7345@@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
??0SvXMLExport@@QAE@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABVOUString@rtl@@ABV?$Reference@VXDocumentHandler@sax@xml@star@sun@com@@@2345@W4MapUnit@@@Z
??1SvXMLExport@@UAE@XZ
??1SvXMLElementExport@@QAE@XZ
gomi
??0GraphicObject@@QAE@ABVGraphic@@PBVGraphicManager@@@Z
?GetUniqueID@GraphicObject@@QBE?AVByteString@@XZ
??1GraphicObject@@UAE@XZ
vclmi
??0MapMode@@QAE@ABV0@@Z
?SetScaleX@MapMode@@QAEXABVFraction@@@Z
?SetScaleY@MapMode@@QAEXABVFraction@@@Z
?SetOrigin@MapMode@@QAEXABVPoint@@@Z
?AddHatchActions@OutputDevice@@QAEXABVPolyPolygon@@ABVHatch@@AAVGDIMetaFile@@@Z
??0BitmapEx@@QAE@ABVBitmap@@@Z
?GetSizePixel@Bitmap@@QBE?AVSize@@XZ
?PixelToLogic@OutputDevice@@QBE?AVSize@@ABV2@@Z
??0Font@@QAE@ABV0@@Z
?SetHeight@Font@@QAEXJ@Z
?GetColor@Font@@QBEABVColor@@XZ
?Scale@GDIMetaFile@@QAEXNN@Z
?Move@GDIMetaFile@@QAEXJJ@Z
??0BitmapEx@@QAE@ABV0@@Z
??0Graphic@@QAE@ABVBitmapEx@@@Z
?Export@GraphicConverter@@SAKAAVSvStream@@ABVGraphic@@K@Z
?GetTextArray@OutputDevice@@QBEJABVString@@PAJGG@Z
?GetAlign@Font@@QBE?AW4TextAlign@@XZ
?GetItalic@Font@@QBE?AW4FontItalic@@XZ
?GetOrientation@Font@@QBEFXZ
?SetRelativeMapMode@OutputDevice@@UAEXABVMapMode@@@Z
?SetMapMode@OutputDevice@@UAEXXZ
?SetSettings@OutputDevice@@UAEXABVAllSettings@@@Z
??0MapMode@@QAE@XZ
??8Font@@QBEEABV0@@Z
??4Font@@QAEAAV0@ABV0@@Z
?GetHeight@Font@@QBEJXZ
?GetWeight@Font@@QBE?AW4FontWeight@@XZ
?GetUnderline@Font@@QBE?AW4FontUnderline@@XZ
?GetStrikeout@Font@@QBE?AW4FontStrikeout@@XZ
?AddGradientActions@OutputDevice@@QAEXABVRectangle@@ABVGradient@@AAVGDIMetaFile@@@Z
?LogicToLogic@OutputDevice@@SA?AVPoint@@ABV2@ABVMapMode@@1@Z
??0Font@@QAE@XZ
?EnableOutput@OutputDevice@@QAEXE@Z
?Push@OutputDevice@@QAEXG@Z
?GetName@Font@@QBEABVString@@XZ
?Pop@OutputDevice@@QAEXXZ
??0VirtualDevice@@QAE@G@Z
??0Font@@QAE@ABVString@@ABVSize@@@Z
?SetMapMode@OutputDevice@@UAEXABVMapMode@@@Z
?SetAlign@Font@@QAEXW4TextAlign@@@Z
?SetFont@OutputDevice@@QAEXABVFont@@@Z
?GetFontMetric@OutputDevice@@QBE?AVFontMetric@@XZ
?GetAscent@FontMetric@@QBEJXZ
??1FontInfo@@QAE@XZ
?GetDescent@FontMetric@@QBEJXZ
??1Font@@QAE@XZ
??1VirtualDevice@@UAE@XZ
??1FontMetric@@QAE@XZ
?GetTextOutline@OutputDevice@@QBEEAAVPolyPolygon@@ABVString@@GGGEKPBJ@Z
?GetTextBoundRect@OutputDevice@@QBEEAAVRectangle@@ABVString@@GGGKPBJ@Z
?GetTextWidth@OutputDevice@@QBEJABVString@@GG@Z
??0Graphic@@QAE@XZ
?Import@GraphicConverter@@SAKAAVSvStream@@AAVGraphic@@K@Z
?GetDefaultDevice@Application@@SAPAVOutputDevice@@XZ
?PixelToLogic@OutputDevice@@QBE?AVSize@@ABV2@ABVMapMode@@@Z
?LogicToLogic@OutputDevice@@SA?AVSize@@ABV2@ABVMapMode@@1@Z
?Read@GDIMetaFile@@QAEAAVSvStream@@AAV2@@Z
??1MetaBmpExScaleAction@@MAE@XZ
?Read@MetaBmpExScaleAction@@UAEXAAVSvStream@@PAUImplMetaReadData@@@Z
?Write@MetaBmpExScaleAction@@UAEXAAVSvStream@@PAUImplMetaWriteData@@@Z
?Scale@MetaBmpExScaleAction@@UAEXNN@Z
?Move@MetaBmpExScaleAction@@UAEXJJ@Z
?Clone@MetaBmpExScaleAction@@UAEPAVMetaAction@@XZ
?Execute@MetaBmpExScaleAction@@UAEXPAVOutputDevice@@@Z
?Compare@MetaBmpExScaleAction@@EBEEABVMetaAction@@@Z
?GetType@Graphic@@QBE?AW4GraphicType@@XZ
??0GDIMetaFile@@QAE@XZ
??0GraphicConversionParameters@@QAE@ABVSize@@_N11@Z
?GetBitmapEx@Graphic@@QBE?AVBitmapEx@@ABVGraphicConversionParameters@@@Z
??0MetaBmpExScaleAction@@QAE@ABVPoint@@ABVSize@@ABVBitmapEx@@@Z
?AddAction@GDIMetaFile@@QAEXPAVMetaAction@@@Z
??1BitmapEx@@QAE@XZ
??0MapMode@@QAE@W4MapUnit@@@Z
??4MapMode@@QAEAAV0@ABV0@@Z
??1MapMode@@QAE@XZ
?GetGDIMetaFile@Graphic@@QBEABVGDIMetaFile@@XZ
??1Graphic@@UAE@XZ
??8GDIMetaFile@@QBEEABV0@@Z
??1GDIMetaFile@@UAE@XZ
?Hook@GDIMetaFile@@MAEJXZ
?Linker@GDIMetaFile@@MAEXPAVOutputDevice@@E@Z
??0GDIMetaFile@@QAE@ABV0@@Z
?GetSolarMutex@Application@@SAAAVIMutex@vos@@XZ
?GetFocusWindow@Application@@SAPAVWindow@@XZ
?EnterWait@Window@@QAEXXZ
?LeaveWait@Window@@QAEXXZ
?Crop@BitmapEx@@QAEEABVRectangle@@@Z
utlmi
?ConvertURLToPhysicalName@LocalFileHelper@utl@@SAEABVString@@AAV3@@Z
??1OOutputStreamWrapper@utl@@UAE@XZ
?release@OOutputStreamWrapper@utl@@UAAXXZ
?acquire@OOutputStreamWrapper@utl@@UAAXXZ
?queryInterface@OOutputStreamWrapper@utl@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?CreateStream@UcbStreamHelper@utl@@SAPAVSvStream@@ABVString@@GPAVUcbLockBytesHandler@2@E@Z
??0OOutputStreamWrapper@utl@@QAE@AAVSvStream@@@Z
??0TempFile@utl@@QAE@PBVString@@E@Z
?GetURL@TempFile@utl@@QBE?AVString@@XZ
?GetStream@TempFile@utl@@QAEPAVSvStream@@G@Z
??1TempFile@utl@@QAE@XZ
tlmi
?Erase@String@@QAEAAV1@GG@Z
??0Fraction@@QAE@JJ@Z
??XFraction@@QAEAAV0@ABV0@@Z
?Center@Rectangle@@QBE?AVPoint@@XZ
??0Polygon@@QAE@XZ
??4Polygon@@QAEAAV0@ABV0@@Z
??0Polygon@@QAE@ABVRectangle@@ABVPoint@@1W4PolyStyle@@@Z
?CompareIgnoreCaseToAscii@ByteString@@QBE?AW4StringCompare@@PBDG@Z
??0SvMemoryStream@@QAE@KK@Z
?Flush@SvStream@@QAEXXZ
??1SvMemoryStream@@UAE@XZ
?Assign@String@@QAEAAV1@ABVOUString@rtl@@@Z
??0String@@QAE@ABV0@@Z
?SetChar@String@@QAEXGG@Z
?GetHeight@Rectangle@@QBEJXZ
?TopLeft@Rectangle@@QBE?AVPoint@@XZ
?GetBoundRect@PolyPolygon@@QBE?AVRectangle@@XZ
??0Polygon@@QAE@ABV0@@Z
??APolygon@@QAEAAVPoint@@G@Z
?Insert@PolyPolygon@@QAEXABVPolygon@@G@Z
?Count@PolyPolygon@@QBEGXZ
?GetPoint@Polygon@@QBEABVPoint@@G@Z
?GetObject@PolyPolygon@@QBEABVPolygon@@G@Z
?GetSize@Polygon@@QBEGXZ
?GetFlags@Polygon@@QBE?AW4PolyFlags@@G@Z
?Remove@Container@@QAEPAXK@Z
?Insert@Container@@QAEXPAXK@Z
??0Container@@QAE@GGG@Z
?Assign@String@@QAEAAV1@ABV1@@Z
?Call@Link@@QBEJPAX@Z
??0String@@QAE@ABVOUString@rtl@@@Z
??BString@@QBE?AVOUString@rtl@@XZ
?CreateFromInt32@String@@SA?AV1@JF@Z
?Append@String@@QAEAAV1@G@Z
??1String@@QAE@XZ
??1Container@@QAE@XZ
?Append@String@@QAEAAV1@ABV1@@Z
??0String@@QAE@XZ
?GetSize@Rectangle@@QBE?AVSize@@XZ
??0String@@QAE@ABVByteString@@GK@Z
??0String@@QAE@PBDGGK@Z
??1ByteString@@QAE@XZ
??0ByteString@@QAE@PBGGK@Z
??1PolyPolygon@@QAE@XZ
?GetWidth@Rectangle@@QBEJXZ
??0String@@QAE@G@Z
??0Rectangle@@QAE@ABVPoint@@ABVSize@@@Z
?Scale@PolyPolygon@@QAEXNN@Z
??0PolyPolygon@@QAE@GG@Z
?GetToken@String@@QBE?AV1@GG@Z
?Move@PolyPolygon@@QAEXJJ@Z
??1Polygon@@QAE@XZ
??0PolyPolygon@@QAE@ABVPolygon@@@Z
??0Polygon@@QAE@ABVRectangle@@@Z
?GetObject@Container@@QBEPAXK@Z
??0String@@QAE@ABV0@GG@Z
comphelp4msc
?getProcessServiceFactory@comphelper@@YA?AV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@XZ
cppuhelper3msc
?WeakImplHelper_query@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAXPAVOWeakObject@1@@Z
?ImplHelper_getImplementationId@cppu@@YA?AV?$Sequence@C@uno@star@sun@com@@PAUclass_data@1@@Z
?WeakImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?release@OWeakObject@cppu@@UAAXXZ
?acquire@OWeakObject@cppu@@UAAXXZ
?createSingleFactory@cppu@@YA?AV?$Reference@VXSingleServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@3456@ABVOUString@rtl@@P6A?AV?$Reference@VXInterface@uno@star@sun@com@@@3456@0@ZABV?$Sequence@VOUString@rtl@@@3456@PAU_rtl_ModuleCount@@@Z
??1OWeakObject@cppu@@MAE@XZ
??0OWeakObject@cppu@@QAE@XZ
?queryAdapter@OWeakObject@cppu@@UAA?AV?$Reference@VXAdapter@uno@star@sun@com@@@uno@star@sun@com@@XZ
cppu3
uno_type_sequence_reference2One
uno_type_assignData
typelib_static_type_getByTypeClass
uno_any_construct
uno_type_sequence_construct
uno_type_sequence_realloc
uno_type_any_assign
typelib_static_sequence_type_init
uno_type_destructData
uno_any_destruct
typelib_static_type_init
sal3
rtl_ustr_valueOfDouble
rtl_ustr_hashCode_WithLength
rtl_ustr_compare_WithLength
rtl_getGlobalProcessId
osl_decrementInterlockedCount
rtl_ustr_valueOfInt32
rtl_uString_newFromStr_WithLength
rtl_uString_newReplace
rtl_ustr_lastIndexOfStr_WithLength
rtl_uString_release
rtl_uString_newConcat
rtl_uString_acquire
rtl_uString_new
osl_getGlobalMutex
osl_releaseMutex
osl_acquireMutex
osl_incrementInterlockedCount
rtl_freeMemory
rtl_allocateMemory
rtl_ustr_asciil_reverseEquals_WithLength
rtl_uString_assign
rtl_string2UString
rtl_uString_newFromAscii
rtl_ustr_reverseCompare_WithLength
rtl_ustr_ascii_compare_WithLength
jvmaccess3msc
??0AttachGuard@VirtualMachine@jvmaccess@@QAE@ABV?$Reference@VVirtualMachine@jvmaccess@@@rtl@@@Z
??1AttachGuard@VirtualMachine@jvmaccess@@QAE@XZ
msvcr90
free
_encoded_null
_decode_pointer
_initterm
_malloc_crt
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_unlock
memcpy
_encode_pointer
_onexit
??_V@YAXPAX@Z
??_U@YAPAXI@Z
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??3@YAXPAX@Z
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBDH@Z
??1exception@std@@UAE@XZ
__CxxFrameHandler3
_lock
_initterm_e
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
__dllonexit
kernel32
Sleep
InterlockedCompareExchange
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedExchange
stlport_vc7145
?_Rebalance@?$_Rb_global@_N@_STL@@SAXPAU_Rb_tree_node_base@2@AAPAU32@@Z
??1?$allocator@G@_STL@@QAE@XZ
?_M_decrement@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
?_M_increment@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
??0?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@ABV?$allocator@PAX@1@@Z
?reserve@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAEXI@Z
?_M_fill_insert@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAEXPAPAXIABQAX@Z
?get_allocator@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QBE?AV?$allocator@PAX@2@XZ
??0?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@IABQAXABV?$allocator@PAX@1@@Z
?swap@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAEXAAV12@@Z
??1?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@XZ
??1?$allocator@PAX@_STL@@QAE@XZ
?deallocate@?$__node_alloc@$00$0A@@_STL@@SAXPAXI@Z
?allocate@?$__node_alloc@$00$0A@@_STL@@SAPAXI@Z
Exports
Exports
GetVersionInfo
component_getFactory
component_getImplementationEnvironment
component_writeInfo
Sections
.text Size: 65KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 178KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE