Not_A_Virus[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Not_A_Virus.zip
Size

4.1MB
MD5

749de92014afe74f8bdfd88994870cf4
SHA1

141136def33f1b4da5d8de0fd17a5fe3586d06d9
SHA256

26526d49683c5484149b68c1e92f84c87e4172146e655d696a823cd2cd662180
SHA512

0dc3306b878b1ddad6d412f7b8a18b07f53d784f34ea6ff337384ed1e83b73ff6f712906ec035e5fb139e7663a490f36f1ac947dd9aa66eae7984de151dd8e17
SSDEEP

98304:VUYZticXi8FWhZTm+QA1cVO9Bme5qyMEAmcFHHOMZM+WL:tiYWXkEBmwqyMErUHOMFWL

Score

3^/10

Malware Config

Signatures

Unsigned PE 9 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Not_A_Virus/Assets/Mods/Autumn/Autumn.dll
unpack001/Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/bin/Release/DefaultMod.dll
unpack001/Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/bin/Release/GooseModdingAPI.dll
unpack001/Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/obj/Release/DefaultMod.dll
unpack001/Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/bin/Release/GooseModdingAPI.dll
unpack001/Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/obj/Release/GooseModdingAPI.dll
unpack001/Not_A_Virus/GooseModdingAPI.dll
unpack001/Not_A_Virus/MMQ.dll
unpack001/Not_A_Virus/Not_A_Virus.exe

Files

Not_A_Virus.zip
.zip
Not_A_Virus/Assets/Images/MemeAttributions.txt
Not_A_Virus/Assets/Images/Memes/GooseDance.gif
.gif
Not_A_Virus/Assets/Images/Memes/Meme1.png
.png
Not_A_Virus/Assets/Images/Memes/Meme2.png
.png
Not_A_Virus/Assets/Images/Memes/Meme3.png
.png
Not_A_Virus/Assets/Images/Memes/Meme4.png
.png
Not_A_Virus/Assets/Images/Memes/Meme5.png
.png
Not_A_Virus/Assets/Images/Memes/Meme6.png
.png
Not_A_Virus/Assets/Images/Memes/Meme7.png
.png
Not_A_Virus/Assets/Images/OtherGfx/DonatePage.png
.png
Not_A_Virus/Assets/Images/OtherGfx/heart.png
.png
Not_A_Virus/Assets/Mods/Autumn/Autumn.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Sam\Downloads\_newdg\DesktopGoose v0.3\FOR MOD-MAKERS\GooseAutumn\DefaultMod\obj\Release\GooseAutumn.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Not_A_Virus/Assets/Sound/Music/Rename me to just Music.mp3
Not_A_Virus/Assets/Sound/NotEmbedded/BITE.mp3
Not_A_Virus/Assets/Sound/NotEmbedded/Honk1.mp3
Not_A_Virus/Assets/Sound/NotEmbedded/Honk2.mp3
Not_A_Virus/Assets/Sound/NotEmbedded/Honk3.mp3
Not_A_Virus/Assets/Sound/NotEmbedded/Honk4.mp3
Not_A_Virus/Assets/Sound/NotEmbedded/MudSquith.mp3
Not_A_Virus/Assets/Text/NotepadMessages/am goose.txt
Not_A_Virus/Assets/Text/NotepadMessages/good work.txt
Not_A_Virus/Assets/Text/NotepadMessages/gooseASCII1.txt
Not_A_Virus/Assets/Text/NotepadMessages/hard to type.txt
Not_A_Virus/Assets/Text/NotepadMessages/i cause problems.txt
Not_A_Virus/Assets/Text/NotepadMessages/peace was never.txt
Not_A_Virus/Close Goose.bat
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/.vs/GooseMod/v14/.suo
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/.vs/GooseModdingAPI/v14/.suo
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/DefaultMod.csproj
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/ModMain.cs
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/Properties/AssemblyInfo.cs
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/TaskDemo_FollowLowAccel.cs
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/bin/Release/DefaultMod.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Start Minecraft\Documents\Visual Studio 2015\Projects\GooseDesktop\_API Solution\GooseModdingAPI\DefaultMod\obj\Release\DefaultMod.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/bin/Release/DefaultMod.pdb
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/bin/Release/GooseModdingAPI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Start Minecraft\Documents\Visual Studio 2015\Projects\GooseDesktop\_API Solution\GooseModdingAPI\GooseModdingAPI\obj\Release\GooseModdingAPI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/bin/Release/GooseModdingAPI.pdb
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/obj/Release/DefaultMod.csproj.FileListAbsolute.txt
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/obj/Release/DefaultMod.csprojResolveAssemblyReference.cache
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/obj/Release/DefaultMod.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Start Minecraft\Documents\Visual Studio 2015\Projects\GooseDesktop\_API Solution\GooseModdingAPI\DefaultMod\obj\Release\DefaultMod.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/obj/Release/DefaultMod.pdb
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/DefaultMod/obj/Release/DesignTimeResolveAssemblyReferencesInput.cache
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseMod.sln
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/Exports.cs
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/GooseModdingAPI.csproj
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/Properties/AssemblyInfo.cs
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/SamEngine.cs
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/bin/Release/GooseModdingAPI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Start Minecraft\Documents\Visual Studio 2015\Projects\GooseDesktop\_API Solution\GooseModdingAPI\GooseModdingAPI\obj\Release\GooseModdingAPI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/bin/Release/GooseModdingAPI.pdb
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/obj/Release/GooseModdingAPI.csproj.FileListAbsolute.txt
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/obj/Release/GooseModdingAPI.csprojResolveAssemblyReference.cache
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/obj/Release/GooseModdingAPI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Start Minecraft\Documents\Visual Studio 2015\Projects\GooseDesktop\_API Solution\GooseModdingAPI\GooseModdingAPI\obj\Release\GooseModdingAPI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Not_A_Virus/FOR MOD-MAKERS/GooseMod_DefaultSolution/GooseModdingAPI/obj/Release/GooseModdingAPI.pdb
Not_A_Virus/FOR MOD-MAKERS/What is this.txt
Not_A_Virus/GooseModdingAPI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Start Minecraft\Documents\Visual Studio 2015\Projects\GooseDesktop\_API Solution\GooseModdingAPI\GooseModdingAPI\obj\Release\GooseModdingAPI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Not_A_Virus/MMQ.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Start Minecraft\Documents\Visual Studio 2015\_Libraries\MMQ-master\MMQ\obj\Release\MMQ.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Not_A_Virus/Not_A_Virus.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Start Minecraft\documents\visual studio 2015\Projects\GooseDesktop\GooseDesktop\obj\Release\GooseDesktop.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 194KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Not_A_Virus/config.ini

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 9KB - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 14KB - Virtual size: 13KB

.rsrc Size: 1024B - Virtual size: 936B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 14KB - Virtual size: 13KB

.rsrc Size: 1024B - Virtual size: 936B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 14KB - Virtual size: 13KB

.rsrc Size: 1024B - Virtual size: 936B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 14KB - Virtual size: 13KB

.text
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 14KB - Virtual size: 13KB

.rsrc
Size: 1024B - Virtual size: 936B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 14KB - Virtual size: 13KB

.rsrc
Size: 1024B - Virtual size: 936B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 14KB - Virtual size: 13KB

.rsrc
Size: 1024B - Virtual size: 936B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 14KB - Virtual size: 13KB

.rsrc
Size: 1024B - Virtual size: 936B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 194KB - Virtual size: 193KB

.rsrc
Size: 26KB - Virtual size: 25KB

.reloc
Size: 512B - Virtual size: 12B