C:\Users\Fligger\Source\Repos\FateInjector\x64\Release\FateInjector.pdb
Static task
static1
Behavioral task
behavioral1
Sample
FateInjector.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
FateInjector.exe
Resource
win10v2004-20240412-en
General
-
Target
FateInjector.exe
-
Size
3.7MB
-
MD5
9e6de7c7ebd1a00c2f7ddec78ba9403a
-
SHA1
65a9e65bf9b2b683ed93ac9848df8b5c9f3d4297
-
SHA256
77a84c4ed29551d8968a9bc5de796d6f8463fa54df8554b3cff91ca83d8ff70d
-
SHA512
f2dac6efaf4fa6c32b14a45bfa60813b67eb3a46e9a7342d13c1ba3bea3e0a188a5703d34c5fc65d20baae751c334474a9b51d7862d4c74fb60007dd8ce4adc9
-
SSDEEP
49152:PVE0okol7ESpUbVIwI2SovAJsXbkiokMTU+tbCn8GTs5QnSaTevSpoadQ4zXgpdP:dEcI71ibyJJkwC9JfdQ4zitt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FateInjector.exe
Files
-
FateInjector.exe.exe windows:6 windows x64 arch:x64
7872442659d25a99d4c81847d3fcd592
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
QueryPerformanceFrequency
GetDriveTypeW
LoadLibraryW
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
CloseHandle
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
LocalFree
Sleep
InitializeSListHead
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
GlobalSize
GetProcessHeap
HeapSize
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
SetLastError
MulDiv
ReadConsoleOutputCharacterA
SetConsoleCursorPosition
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterW
WriteConsoleW
WriteConsoleA
AttachConsole
FreeConsole
GetStdHandle
ExpandEnvironmentStringsW
GetSystemTimeAsFileTime
IsBadStringPtrA
IsBadReadPtr
CopyFileW
GetFileType
SetCurrentDirectoryW
GetProcAddress
GetModuleHandleW
FreeLibrary
WaitForMultipleObjects
CreateEventW
SetEvent
GetCommandLineW
GetUserDefaultLCID
GetLocaleInfoW
GetACP
GetCurrentThread
RtlCaptureContext
GetTempPathW
GetTempFileNameW
GetLongPathNameW
GetFileAttributesW
FindFirstFileW
FindClose
CreateFileW
GetCPInfo
IsValidCodePage
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleFileNameW
GetVersionExW
TerminateProcess
GetCurrentProcessId
IsDebuggerPresent
GetEnvironmentVariableW
TlsFree
TlsSetValue
TlsAlloc
GetCurrentThreadId
ExitProcess
GetCurrentProcess
WaitForSingleObject
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
OutputDebugStringW
WideCharToMultiByte
MultiByteToWideChar
FormatMessageW
GetLastError
SetErrorMode
GetLogicalDriveStringsW
advapi32
RegDeleteValueW
RegEnumKeyW
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
GetUserNameW
RegCloseKey
RegCreateKeyExW
GetNamedSecurityInfoW
ConvertStringSidToSidW
SetEntriesInAclW
SetNamedSecurityInfoW
RegDeleteKeyW
RegSetValueExW
comctl32
ImageList_Create
ImageList_Destroy
ImageList_GetImageCount
ImageList_Add
ImageList_SetBkColor
ImageList_Draw
ImageList_Replace
ord17
ImageList_GetIconSize
ImageList_GetImageInfo
ord16
rpcrt4
UuidToStringW
RpcStringFreeW
uxtheme
IsAppThemed
GetThemeFont
GetThemeColor
IsThemeActive
GetThemeSysFont
GetThemeSysColor
GetThemeInt
GetThemePartSize
GetThemeMargins
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
GetThemeBackgroundContentRect
DrawThemeBackground
CloseThemeData
IsThemePartDefined
OpenThemeData
GetThemeBackgroundExtent
GetCurrentThemeName
SetWindowTheme
msvcp140
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Xlength_error@std@@YAXPEBD@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??7ios_base@std@@QEBA_NXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Xout_of_range@std@@YAXPEBD@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
_Cnd_do_broadcast_at_thread_exit
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
_Thrd_detach
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
msimg32
AlphaBlend
GradientFill
shlwapi
SHAutoComplete
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcmp
longjmp
__current_exception
wcschr
__intrinsic_setjmp
__std_terminate
_purecall
strstr
__C_specific_handler
_set_se_translator
strchr
wcsstr
memset
memmove
memcpy
_CxxThrowException
__std_exception_copy
__std_type_info_compare
__RTtypeid
__std_exception_destroy
__current_exception_context
api-ms-win-crt-stdio-l1-1-0
__p__commode
fflush
setvbuf
fsetpos
_set_fmode
__stdio_common_vswscanf
_fseeki64
fgetpos
fwrite
__stdio_common_vfprintf
_open_osfhandle
fread
fgetc
ungetc
fputc
_ftelli64
ferror
feof
clearerr
_wfopen
_telli64
_lseeki64
_write
_read
_close
_wsopen_dispatch
_get_osfhandle
_fileno
__stdio_common_vfwprintf
__stdio_common_vswprintf_p
__stdio_common_vswprintf
__acrt_iob_func
_get_stream_buffer_pointers
fclose
__stdio_common_vsprintf
fputwc
ungetwc
fgetwc
_getcwd
__stdio_common_vsscanf
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_initterm
_get_narrow_winmain_command_line
_register_thread_local_exe_atexit_callback
_set_app_type
_seh_filter_exe
_cexit
_exit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
exit
_invalid_parameter_noinfo_noreturn
_crt_atexit
abort
_errno
_c_exit
terminate
_beginthreadex
api-ms-win-crt-heap-l1-1-0
calloc
_set_new_mode
realloc
_callnewh
malloc
free
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstol
atoi
wcstoul
_wtol
atof
_wcstod_l
wcstod
_wcstoui64
_wcstoi64
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_wremove
_wrename
_lock_file
api-ms-win-crt-string-l1-1-0
_stricmp
wcspbrk
iswalnum
_wcsicmp
_strdup
wcsncpy
strcmp
strncmp
toupper
iswxdigit
iswprint
iswalpha
towupper
isspace
tolower
iswdigit
iswspace
towlower
api-ms-win-crt-time-l1-1-0
wcsftime
_mktime64
_get_timezone
_time64
_gmtime64
_localtime64
_tzset
api-ms-win-crt-utility-l1-1-0
bsearch
qsort
api-ms-win-crt-locale-l1-1-0
setlocale
_configthreadlocale
_create_locale
_free_locale
api-ms-win-crt-environment-l1-1-0
getenv
_wgetcwd
_wgetenv
api-ms-win-crt-math-l1-1-0
floor
fmod
_fdopen
sqrt
pow
ceilf
sin
atan2
__setusermatherr
floorf
cos
user32
ValidateRgn
DestroyCursor
GetCaretBlinkTime
GetDoubleClickTime
TranslateAcceleratorW
DestroyAcceleratorTable
CreateAcceleratorTableW
DrawIconEx
ValidateRect
GetMessageW
GetClassNameW
MessageBeep
GetWindowTextW
CheckMenuRadioItem
SetRect
GetSysColorBrush
GetMenuItemID
CheckMenuItem
DrawFrameControl
DrawEdge
SetMenuItemInfoW
IsRectEmpty
SetMenuInfo
RemoveMenu
EnumDisplayMonitors
AppendMenuW
GetWindowDC
GetSubMenu
DestroyMenu
CreatePopupMenu
CreateMenu
GetMenuState
HideCaret
GetWindowTextLengthW
keybd_event
IsMenu
CreateIconIndirect
OffsetRect
CopyRect
SetRectEmpty
DrawFocusRect
DrawStateW
DrawTextW
GetIconInfo
InsertMenuItemW
wsprintfW
BeginPaint
LoadImageW
LoadIconW
LoadBitmapW
DestroyIcon
EndPaint
UnionRect
GetDesktopWindow
GetComboBoxInfo
ChildWindowFromPoint
FindWindowExW
RegisterClipboardFormatW
GetClipboardFormatNameW
ChangeDisplaySettingsExW
EnumDisplaySettingsW
MonitorFromPoint
MonitorFromWindow
InsertMenuW
GetMonitorInfoW
ModifyMenuW
IsClipboardFormatAvailable
MessageBoxW
PostThreadMessageW
PostMessageW
RegisterClassW
CreateWindowExW
BringWindowToTop
PeekMessageW
SendMessageW
DefWindowProcW
UnregisterClassW
DestroyWindow
DispatchMessageW
MsgWaitForMultipleObjects
SetTimer
KillTimer
SetCursor
LoadCursorW
DdeInitializeW
DdeUninitialize
DdeConnect
DdeDisconnect
DdePostAdvise
DdeNameService
DdeClientTransaction
DdeCreateDataHandle
DdeGetData
DdeFreeDataHandle
DdeGetLastError
DdeCreateStringHandleW
DdeQueryStringW
DdeFreeStringHandle
GetKeyState
GetProcessDefaultLayout
RegisterWindowMessageW
SetMenu
GetWindowRect
GetWindowPlacement
ShowWindow
SetLayeredWindowAttributes
FlashWindowEx
MoveWindow
SetWindowPos
IsIconic
IsZoomed
CreateDialogIndirectParamW
GetDialogBaseUnits
DrawMenuBar
GetSystemMenu
EnableMenuItem
SetForegroundWindow
SetWindowTextW
SetWindowLongW
GetWindowLongPtrW
SetWindowLongPtrW
SetWindowRgn
TranslateMessage
RegisterHotKey
UnregisterHotKey
GetMessagePos
GetMessageTime
PostQuitMessage
CallWindowProcW
IsWindow
AnimateWindow
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
SetFocus
GetActiveWindow
GetFocus
GetAsyncKeyState
VkKeyScanW
MapVirtualKeyW
GetCapture
SetCapture
ReleaseCapture
EnableWindow
IsWindowEnabled
GetSystemMetrics
GetMenuItemCount
TrackPopupMenu
GetMenuItemInfoW
UpdateWindow
GetDC
ReleaseDC
GetUpdateRgn
InvalidateRect
RedrawWindow
ScrollWindow
EnableScrollBar
GetClientRect
SetCursorPos
GetCursorPos
ClientToScreen
ScreenToClient
MapWindowPoints
WindowFromPoint
ChildWindowFromPointEx
GetSysColor
FillRect
InflateRect
PtInRect
GetWindowLongW
GetParent
SetParent
GetWindow
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
IsDialogMessageW
SetScrollInfo
GetScrollInfo
SystemParametersInfoW
CreateDialogParamW
GetDlgItem
gdi32
GdiFlush
SetBrushOrgEx
GetTextMetricsW
SelectPalette
SelectObject
RealizePalette
CreateFontIndirectW
GetDeviceCaps
ExcludeClipRect
CreateRectRgn
OffsetRgn
GetRegionData
CreateRectRgnIndirect
DeleteObject
GetSystemPaletteEntries
EndPage
StartPage
EndDoc
StartDocW
SetAbortProc
EnumFontFamiliesExW
PlayEnhMetaFile
GetEnhMetaFileHeader
GetEnhMetaFileW
DeleteEnhMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
CreateDCW
GetDIBColorTable
CreateDIBSection
GetDIBits
CreateDIBitmap
CreateICW
GetTextExtentExPointW
GetCharABCWidthsW
ExtCreateRegion
CreatePatternBrush
CreateHatchBrush
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
RectInRegion
PtInRegion
GetRgnBox
EqualRgn
CombineRgn
ExtCreatePen
CreatePen
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
PolyBezier
Polyline
Polygon
ModifyWorldTransform
SetWorldTransform
GetWorldTransform
SetStretchBltMode
SetROP2
StretchDIBits
StretchBlt
SetPolyFillMode
SetPixel
GetLayout
SetLayout
SetMapMode
SetGraphicsMode
ExtSelectClipRgn
SelectClipRgn
RoundRect
Rectangle
PolyPolygon
Pie
MaskBlt
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExtFloodFill
Ellipse
Arc
ExtTextOutW
MoveToEx
LineTo
GetBkColor
GetTextExtentPoint32W
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmapIndirect
CreateBitmap
BitBlt
SetTextColor
SetBkMode
SetBkColor
GetWindowExtEx
GetViewportExtEx
GetGraphicsMode
CreateSolidBrush
GetObjectW
GetOutlineTextMetricsW
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
comdlg32
PrintDlgW
ChooseFontW
CommDlgExtendedError
GetSaveFileNameW
PageSetupDlgW
GetOpenFileNameW
shell32
SHGetFileInfoW
Shell_NotifyIconW
ExtractIconExW
ExtractIconW
DragAcceptFiles
DragFinish
DragQueryPoint
DragQueryFileW
SHGetFolderPathW
CommandLineToArgvW
ord6
ole32
ReleaseStgMedium
OleGetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CoCreateInstance
RegisterDragDrop
CoLockObjectExternal
CoTaskMemAlloc
RevokeDragDrop
CoTaskMemFree
OleUninitialize
OleInitialize
OleSetClipboard
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 82KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ