Static task
static1
Behavioral task
behavioral1
Sample
LCMA/Silent install/lnjector.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
LCMA/Silent install/lnjector.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
LCMA/lnjector.exe
Resource
win7-20231215-en
General
-
Target
LCMA.zip
-
Size
18.2MB
-
MD5
ce22ad18b491e3790e262101a903b4dc
-
SHA1
7647e851ab7e273ad2cfee79544028b646361427
-
SHA256
5febf8fbf3daaf8868a1d61cb43bf2b9d003c97ed0bc88e650a081263b5d93ce
-
SHA512
3c20e9bab6d1b530c2ed16c31a423d856aa981ffada0d80379be38e18eedd28c803b208a8c4f67f71b5039909749136564f89d228aa6755d8b27638e67602774
-
SSDEEP
393216:2d40jBTIxowZ4i/8J6KM9S1dHdmSQkOT4zTd9cpb38FYFsR1PJcOI:2d4HxowZ4I8JJMEjQPQTde8mFQPJQ
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/LCMA/Silent install/lnjector.exe unpack001/LCMA/lnjector.exe
Files
-
LCMA.zip.zip
Password: infected
-
LCMA/Inf/ArOmodPpmk.xml.xml
-
LCMA/Inf/BHnfCNKJJr.xml.xml
-
LCMA/Inf/DbYgtRCNoe.xml.xml
-
LCMA/Inf/FLnwJaEDnM.xml.xml
-
LCMA/Inf/FcydhtoAxs.xml.xml
-
LCMA/Inf/FrzBQTmCSj.xml.xml
-
LCMA/Inf/HIuTTeBcCw.xml.xml
-
LCMA/Inf/IBwmVYGXmR/BbhEarEBHN.xml.xml
-
LCMA/Inf/IBwmVYGXmR/CWTlBZwakb.xml.xml
-
LCMA/Inf/IBwmVYGXmR/CZkFeZxJAo.xml.xml
-
LCMA/Inf/IBwmVYGXmR/ENhjUpGcDq.xml.xml
-
LCMA/Inf/IBwmVYGXmR/ErqNReLmpJ.xml.xml
-
LCMA/Inf/IBwmVYGXmR/FeozGtGNRG.xml.xml
-
LCMA/Inf/IBwmVYGXmR/IAtVjqCzGU.xml.xml
-
LCMA/Inf/IBwmVYGXmR/IwtCXSeAoo.xml.xml
-
LCMA/Inf/IBwmVYGXmR/JqPokhsyjl.xml.xml
-
LCMA/Inf/IBwmVYGXmR/LaoEVjhQFm.xml.xml
-
LCMA/Inf/IBwmVYGXmR/LoKvZQSnlo.xml.xml
-
LCMA/Inf/IBwmVYGXmR/NuYCtLKHmc.xml.xml
-
LCMA/Inf/IBwmVYGXmR/RFCkCqmOyr.xml.xml
-
LCMA/Inf/IBwmVYGXmR/SQKsWKeQhy.xml.xml
-
LCMA/Inf/IBwmVYGXmR/UVBgTqKnDt.xml.xml
-
LCMA/Inf/IBwmVYGXmR/VgZSggDbub.xml.xml
-
LCMA/Inf/IBwmVYGXmR/VqMkVsPevH.xml.xml
-
LCMA/Inf/IBwmVYGXmR/XCXytCEXGb.xml.xml
-
LCMA/Inf/IBwmVYGXmR/XRkuwngabJ.xml.xml
-
LCMA/Inf/IBwmVYGXmR/YOvHZQhNdN.xml.xml
-
LCMA/Inf/IBwmVYGXmR/azDDrgwmhF.xml.xml
-
LCMA/Inf/IBwmVYGXmR/dzxMyNjpKF.xml.xml
-
LCMA/Inf/IBwmVYGXmR/fKQukFJKtM.xml.xml
-
LCMA/Inf/IBwmVYGXmR/fWUzRHXUTz.xml.xml
-
LCMA/Inf/IBwmVYGXmR/ivcMhSCwYs.xml.xml
-
LCMA/Inf/IBwmVYGXmR/jeeMyFnHBD.xml.xml
-
LCMA/Inf/IBwmVYGXmR/oAfTLlbWer.xml.xml
-
LCMA/Inf/IBwmVYGXmR/oCLhEsZoos.xml.xml
-
LCMA/Inf/IBwmVYGXmR/oXwAxbxbUf.xml.xml
-
LCMA/Inf/IBwmVYGXmR/ozWdYdRkIE.xml.xml
-
LCMA/Inf/IBwmVYGXmR/sIoWuwPUub.xml.xml
-
LCMA/Inf/IBwmVYGXmR/tmUyYOMDpY.xml.xml
-
LCMA/Inf/IBwmVYGXmR/uHEBKfCkkt.xml.xml
-
LCMA/Inf/IBwmVYGXmR/uHvOcvAvUJ.xml.xml
-
LCMA/Inf/IBwmVYGXmR/vmWxhVrSJT.xml.xml
-
LCMA/Inf/IBwmVYGXmR/wGMDVIsMTk.xml.xml
-
LCMA/Inf/IBwmVYGXmR/wbfaKBWOrO.xml.xml
-
LCMA/Inf/IBwmVYGXmR/zYcLVYjJFU.xml.xml
-
LCMA/Inf/KDDRBNFFSw.xml.xml
-
LCMA/Inf/MTpWFDOfif.xml.xml
-
LCMA/Inf/NFZvMpoPqC.xml.xml
-
LCMA/Inf/NTFvZoreQG.xml.xml
-
LCMA/Inf/VGUpNYLWkW.xml.xml
-
LCMA/Inf/WLndXDbPuW.xml.xml
-
LCMA/Inf/bssBLEzzBW/BDacScqqFz.xml.xml
-
LCMA/Inf/bssBLEzzBW/CCWCAJWWCf.xml.xml
-
LCMA/Inf/bssBLEzzBW/CPvJyjWfYi.xml.xml
-
LCMA/Inf/bssBLEzzBW/DTfdASfrtb.xml.xml
-
LCMA/Inf/bssBLEzzBW/DaqylOrMst.xml.xml
-
LCMA/Inf/bssBLEzzBW/GeLiaZhJyM.xml.xml
-
LCMA/Inf/bssBLEzzBW/JWMAHhdyIH.xml.xml
-
LCMA/Inf/bssBLEzzBW/KwBdYlYYQb.xml.xml
-
LCMA/Inf/bssBLEzzBW/LhGSNVwtcC.xml.xml
-
LCMA/Inf/bssBLEzzBW/LssvcUzOEb.xml.xml
-
LCMA/Inf/bssBLEzzBW/OTlpbETStB.xml.xml
-
LCMA/Inf/bssBLEzzBW/QQMgRmFbBi.xml.xml
-
LCMA/Inf/bssBLEzzBW/QQXkowWaDA.xml.xml
-
LCMA/Inf/bssBLEzzBW/QrbXCIMJGG.xml.xml
-
LCMA/Inf/bssBLEzzBW/RKJUSjnKBR.xml.xml
-
LCMA/Inf/bssBLEzzBW/TKpSECKfgE.xml.xml
-
LCMA/Inf/bssBLEzzBW/UAqAZMfjLE.xml.xml
-
LCMA/Inf/bssBLEzzBW/VlHextqSBJ.xml.xml
-
LCMA/Inf/bssBLEzzBW/aTkfjJMxnD.xml.xml
-
LCMA/Inf/bssBLEzzBW/bOCTEmHbZZ.xml.xml
-
LCMA/Inf/bssBLEzzBW/dEXSLNOJOj.xml.xml
-
LCMA/Inf/bssBLEzzBW/emhygDoZoM.xml.xml
-
LCMA/Inf/bssBLEzzBW/fhvwZJgedn.xml.xml
-
LCMA/Inf/bssBLEzzBW/gkcCSfIgrF.xml.xml
-
LCMA/Inf/bssBLEzzBW/hZyvzUWOAc.xml.xml
-
LCMA/Inf/bssBLEzzBW/iBVoGappbq.xml.xml
-
LCMA/Inf/bssBLEzzBW/kZBqAEEwKi.xml.xml
-
LCMA/Inf/bssBLEzzBW/lOvTkLbQYX.xml.xml
-
LCMA/Inf/bssBLEzzBW/lUEhXjSVsa.xml.xml
-
LCMA/Inf/bssBLEzzBW/mxjRwSpyrH.xml.xml
-
LCMA/Inf/bssBLEzzBW/oOgmyRRLiK.xml.xml
-
LCMA/Inf/bssBLEzzBW/qjXDXHmXoi.xml.xml
-
LCMA/Inf/bssBLEzzBW/rIIZGaEMzq.xml.xml
-
LCMA/Inf/bssBLEzzBW/rNlYqCnsbH.xml.xml
-
LCMA/Inf/bssBLEzzBW/rmVgCwPoSK.xml.xml
-
LCMA/Inf/bssBLEzzBW/sNukRlwOKe.xml.xml
-
LCMA/Inf/bssBLEzzBW/swwWebsnle.xml.xml
-
LCMA/Inf/bssBLEzzBW/uQknksQuHk.xml.xml
-
LCMA/Inf/bssBLEzzBW/vUWqgATzjV.xml.xml
-
LCMA/Inf/bssBLEzzBW/veayBKrWJK.xml.xml
-
LCMA/Inf/bssBLEzzBW/wnCfTbgSuH.xml.xml
-
LCMA/Inf/bssBLEzzBW/wphpEBJeZS.xml.xml
-
LCMA/Inf/bssBLEzzBW/zOjOCWlJBu.xml.xml
-
LCMA/Inf/bssBLEzzBW/zaJPIoUwHB.xml.xml
-
LCMA/Inf/cIhviDYIiC.xml.xml
-
LCMA/Inf/dMOjnckDzL.xml.xml
-
LCMA/Inf/kqAcHHNKYf.xml.xml
-
LCMA/Inf/meQsVFkglK.xml.xml
-
LCMA/Inf/pXCZPZLsUQ/CHbAtBQLkH.xml.xml
-
LCMA/Inf/pXCZPZLsUQ/IevxWQyoAP.xml.xml
-
LCMA/Inf/pXCZPZLsUQ/MCcTIdZLgw.xml.xml
-
LCMA/Inf/pXCZPZLsUQ/NLUQePfsqs.xml.xml
-
LCMA/Inf/pXCZPZLsUQ/OkACQiAtec.xml.xml
-
LCMA/Inf/pXCZPZLsUQ/PFjkExCyHU.xml.xml
-
LCMA/Inf/pXCZPZLsUQ/ZZSOzIQNuU.xml.xml
-
LCMA/Inf/pXCZPZLsUQ/cFpfzuMqTk.xml.xml
-
LCMA/Inf/pXCZPZLsUQ/usUeadhvAm.xml.xml
-
LCMA/Inf/pXCZPZLsUQ/xGvjuZoNFu.xml.xml
-
LCMA/Inf/rAbiWpfcTj/AJjzmIxhUZ.xml.xml
-
LCMA/Inf/rAbiWpfcTj/BZfKyrlTKA.xml.xml
-
LCMA/Inf/rAbiWpfcTj/CqrNalJPOB.xml.xml
-
LCMA/Inf/rAbiWpfcTj/EsffZihJZZ.xml.xml
-
LCMA/Inf/rAbiWpfcTj/FNYINZltSF.xml.xml
-
LCMA/Inf/rAbiWpfcTj/GQrtJDXnJS.xml.xml
-
LCMA/Inf/rAbiWpfcTj/GmXxKFnuFo.xml.xml
-
LCMA/Inf/rAbiWpfcTj/HnApQOMAzI.xml.xml
-
LCMA/Inf/rAbiWpfcTj/IcgBYEEWjN.xml.xml
-
LCMA/Inf/rAbiWpfcTj/IhYXpRjEXW.xml.xml
-
LCMA/Inf/rAbiWpfcTj/JEdDKeywAp.xml.xml
-
LCMA/Inf/rAbiWpfcTj/KJSZjXdydj.xml.xml
-
LCMA/Inf/rAbiWpfcTj/KdVKCKdeIL.xml.xml
-
LCMA/Inf/rAbiWpfcTj/NnSsWsJPHv.xml.xml
-
LCMA/Inf/rAbiWpfcTj/OCuIMXiNDu.xml.xml
-
LCMA/Inf/rAbiWpfcTj/OJVUTxmWim.xml.xml
-
LCMA/Inf/rAbiWpfcTj/PGAeCaIDts.xml.xml
-
LCMA/Inf/rAbiWpfcTj/RFNqRsAoML.xml.xml
-
LCMA/Inf/rAbiWpfcTj/SdJNsAbiLE.xml.xml
-
LCMA/Inf/rAbiWpfcTj/SfpBrYJrwv.xml.xml
-
LCMA/Inf/rAbiWpfcTj/SyqMpCWkLG.xml.xml
-
LCMA/Inf/rAbiWpfcTj/UsASlThKug.xml.xml
-
LCMA/Inf/rAbiWpfcTj/VIVPYqCtWC.xml.xml
-
LCMA/Inf/rAbiWpfcTj/XTuIKFknRG.xml.xml
-
LCMA/Inf/rAbiWpfcTj/ZhRrmbQjyz.xml.xml
-
LCMA/Inf/rAbiWpfcTj/cOoumNHvlb.xml.xml
-
LCMA/Inf/rAbiWpfcTj/cVhHxZFsYR.xml.xml
-
LCMA/Inf/rAbiWpfcTj/ctDgqpXWnA.xml.xml
-
LCMA/Inf/rAbiWpfcTj/fHIuRAcWrI.xml.xml
-
LCMA/Inf/rAbiWpfcTj/ffJlfkBtqW.xml.xml
-
LCMA/Inf/rAbiWpfcTj/fyTwFVWuvY.xml.xml
-
LCMA/Inf/rAbiWpfcTj/gJdnVAHIkB.xml.xml
-
LCMA/Inf/rAbiWpfcTj/gzUTDBmYdN.xml.xml
-
LCMA/Inf/rAbiWpfcTj/jdytoxTepW.xml.xml
-
LCMA/Inf/rAbiWpfcTj/kLeCFnSqMp.xml.xml
-
LCMA/Inf/rAbiWpfcTj/mUtWQVUjBM.xml.xml
-
LCMA/Inf/rAbiWpfcTj/mlkcyVcHsN.xml.xml
-
LCMA/Inf/rAbiWpfcTj/moZyPLWaYk.xml.xml
-
LCMA/Inf/rAbiWpfcTj/mquHaapswr.xml.xml
-
LCMA/Inf/rAbiWpfcTj/ojNpkFFfBk.xml.xml
-
LCMA/Inf/rAbiWpfcTj/owVbDYfrMm.xml.xml
-
LCMA/Inf/rAbiWpfcTj/qChOAMdkPB.xml.xml
-
LCMA/Inf/rAbiWpfcTj/rjXexwYxaR.xml.xml
-
LCMA/Inf/rAbiWpfcTj/slryeVaMss.xml.xml
-
LCMA/Inf/rAbiWpfcTj/uVWSlIkzhF.xml.xml
-
LCMA/Inf/rAbiWpfcTj/wOaILCcPam.xml.xml
-
LCMA/Inf/rAbiWpfcTj/xLfANKTPMY.xml.xml
-
LCMA/Inf/rAbiWpfcTj/zRNjCdcYbu.xml.xml
-
LCMA/Inf/rAbiWpfcTj/zvJZZdZhkm.xml.xml
-
LCMA/Inf/uYESqDokgU/BMeZgogNNw.xml.xml
-
LCMA/Inf/uYESqDokgU/CxZLYiHshL.xml.xml
-
LCMA/Inf/uYESqDokgU/EBBjHNpjWx.xml.xml
-
LCMA/Inf/uYESqDokgU/LPflHZsnEL.xml.xml
-
LCMA/Inf/uYESqDokgU/LqQXBnVGsK.xml.xml
-
LCMA/Inf/uYESqDokgU/NaoqiUZuKE.xml.xml
-
LCMA/Inf/uYESqDokgU/OeMgMFdTad.xml.xml
-
LCMA/Inf/uYESqDokgU/TprypMCRph.xml.xml
-
LCMA/Inf/uYESqDokgU/UtzTQRMopq.xml.xml
-
LCMA/Inf/uYESqDokgU/VDoxwapMGM.xml.xml
-
LCMA/Inf/uYESqDokgU/fRqNoPgyNj.xml.xml
-
LCMA/Inf/uYESqDokgU/fsgGqpIVkZ.xml.xml
-
LCMA/Inf/uYESqDokgU/hGRmLgTMTh.xml.xml
-
LCMA/Inf/uYESqDokgU/iJzfppRslF.xml.xml
-
LCMA/Inf/uYESqDokgU/iRmvXAhUvy.xml.xml
-
LCMA/Inf/uYESqDokgU/iTlRxAvRpV.xml.xml
-
LCMA/Inf/uYESqDokgU/igzxgFHPfA.xml.xml
-
LCMA/Inf/uYESqDokgU/lUQOzzDYET.xml.xml
-
LCMA/Inf/uYESqDokgU/liiivuJvmE.xml.xml
-
LCMA/Inf/uYESqDokgU/pJRVEdsRQe.xml.xml
-
LCMA/Inf/uYESqDokgU/pqQqoLrGVc.xml.xml
-
LCMA/Inf/uYESqDokgU/ptqhgeGOJS.xml.xml
-
LCMA/Inf/uYESqDokgU/ruOjOpKiKe.xml.xml
-
LCMA/Inf/uYESqDokgU/sJFqqQmQAF.xml.xml
-
LCMA/Inf/uYESqDokgU/sQmvLREaiR.xml.xml
-
LCMA/Inf/uYESqDokgU/ukXxGPdtWk.xml.xml
-
LCMA/Inf/uYESqDokgU/wviGKEwFaQ.xml.xml
-
LCMA/Inf/uYESqDokgU/xRgZXikcsQ.xml.xml
-
LCMA/Inf/uYESqDokgU/xgthuogXyF.xml.xml
-
LCMA/Inf/wvloMvjkLQ.xml.xml
-
LCMA/Inf/zwOMDRjLyT.xml.xml
-
LCMA/Silent install/icudtl.dat
-
LCMA/Silent install/lnjector.exe.exe windows:5 windows x86 arch:x86
b77b99c3883f50fc5eeab54139139034
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetStockObject
DeleteObject
SetBkMode
SetTextColor
CreateFontIndirectA
SelectObject
GetObjectA
user32
GetDlgItemTextA
wsprintfA
MessageBoxA
LoadCursorA
GetClassInfoA
CheckDlgButton
SetWindowLongA
CallWindowProcA
GetActiveWindow
kernel32
WriteConsoleW
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
VirtualProtect
VirtualAlloc
LoadLibraryA
GetProcAddress
lstrlenW
CreateThread
Sleep
WaitForSingleObject
FreeConsole
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
HeapReAlloc
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetFileType
GetStringTypeW
CompareStringW
LCMapStringW
GetProcessHeap
HeapSize
DecodePointer
Sections
.text Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.IA1Xt Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 371KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
LCMA/icudtl.dat
-
LCMA/lnjector.exe.exe windows:6 windows x86 arch:x86
f494e9bb2753c3b395b9806eb5f3c320
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CallWindowProcA
GetDlgItemTextA
wsprintfA
MessageBoxA
LoadCursorA
GetActiveWindow
CheckDlgButton
SetWindowLongA
GetClassInfoA
kernel32
GetStdHandle
WriteConsoleW
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
VirtualProtect
VirtualAlloc
LoadLibraryA
GetProcAddress
lstrlenW
CreateThread
Sleep
WaitForSingleObject
FreeConsole
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
FlushFileBuffers
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
RaiseException
DecodePointer
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetFileType
GetStringTypeW
CompareStringW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rcB7R Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 481KB - Virtual size: 483KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
main Size: 3KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ