D:\mvdci_jenkins\workspace\MVD-cci-Pipeline\18375\bin\win32\WinXP\System_Info.pdb
Static task
static1
Behavioral task
behavioral1
Sample
62b01a030d12c25ad5cbfa1d615acfe8fec1b567e8eb77a7dfde65ca7ebd64f6.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
62b01a030d12c25ad5cbfa1d615acfe8fec1b567e8eb77a7dfde65ca7ebd64f6.exe
Resource
win10v2004-20240226-en
General
-
Target
62b01a030d12c25ad5cbfa1d615acfe8fec1b567e8eb77a7dfde65ca7ebd64f6
-
Size
509KB
-
MD5
acbcfb328a423009d648c2cbcf98873d
-
SHA1
a14390080ea09d3eff1286aba1c5115ffa3d768e
-
SHA256
62b01a030d12c25ad5cbfa1d615acfe8fec1b567e8eb77a7dfde65ca7ebd64f6
-
SHA512
a4ec914591f9c0625087714568cbed5d7a3c50f06563ec8c9634b7dabfe5c68d75328306bb8b398acffa0dc7dfa56f3f9b864aefd4a548dfb0468bf8771f4662
-
SSDEEP
1536:Ai6rF9SEYzBAdAytjFjIGwBvwZVAxWP1UPnuYPGfWPyr+fp78dTG3w/:zc9RYzBAdjdlxIkVAxWP1UPnurh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62b01a030d12c25ad5cbfa1d615acfe8fec1b567e8eb77a7dfde65ca7ebd64f6
Files
-
62b01a030d12c25ad5cbfa1d615acfe8fec1b567e8eb77a7dfde65ca7ebd64f6.exe windows:5 windows x86 arch:x86
c11b363f5efc8c69689bd2766a3936b0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
qt5core
?removeNativeEventFilter@QCoreApplication@@QAEXPAVQAbstractNativeEventFilter@@@Z
?installNativeEventFilter@QCoreApplication@@QAEXPAVQAbstractNativeEventFilter@@@Z
?addLibraryPath@QCoreApplication@@SAXABVQString@@@Z
?setAttribute@QCoreApplication@@SAXW4ApplicationAttribute@Qt@@_N@Z
??1QAbstractNativeEventFilter@@UAE@XZ
??0QAbstractNativeEventFilter@@QAE@XZ
?registerResource@QResource@@SA_NABVQString@@0@Z
?entryList@QDir@@QBE?AVQStringList@@V?$QFlags@W4Filter@QDir@@@@V?$QFlags@W4SortFlag@QDir@@@@@Z
??1QDir@@QAE@XZ
??0QDir@@QAE@ABVQString@@@Z
?detach@QListData@@QAEPAUData@1@H@Z
??8@YA_NABVQString@@0@Z
?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ
?shared_null@QListData@@2UData@1@B
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?load@QTranslator@@QAE_NABVQString@@000@Z
??1QTranslator@@UAE@XZ
??0QTranslator@@QAE@PAVQObject@@@Z
?codecForName@QTextCodec@@SAPAV1@PBD@Z
??6QDebug@@QAEAAV0@PBD@Z
??1QDebug@@QAE@XZ
??0QMessageLogger@@QAE@PBDH0@Z
??6QTextStream@@QAEAAV0@ABVQString@@@Z
?flush@QTextStream@@QAEXXZ
?setCodec@QTextStream@@QAEXPAVQTextCodec@@@Z
??1QTextStream@@UAE@XZ
??0QTextStream@@QAE@PAVQIODevice@@@Z
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z
?removeTranslator@QCoreApplication@@SA_NPAVQTranslator@@@Z
?installTranslator@QCoreApplication@@SA_NPAVQTranslator@@@Z
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??1QFile@@UAE@XZ
??0QFile@@QAE@ABVQString@@@Z
?close@QFileDevice@@UAEXXZ
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PBV1@PAPAX01PAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PBHPBU3@@Z
?append@QListData@@QAEPAPAXXZ
?dispose@QListData@@SAXPAUData@1@@Z
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z
??8QString@@QBE_NPBD@Z
?append@QString@@QAEAAV1@PBD@Z
?fromUtf8@QString@@SA?AV1@PBDH@Z
?toUtf8@QString@@QBE?AVQByteArray@@XZ
?append@QString@@QAEAAV1@ABV1@@Z
?arg@QString@@QBE?AV1@ABV1@HVQChar@@@Z
??1QString@@QAE@XZ
??0QString@@QAE@ABV0@@Z
??0QString@@QAE@XZ
??1QByteArray@@QAE@XZ
??0QChar@@QAE@UQLatin1Char@@@Z
??1Connection@QMetaObject@@QAE@XZ
?isConnected_helper@Connection@QMetaObject@@ABE_NXZ
?tr@QMetaObject@@QBE?AVQString@@PBD0H@Z
?critical@QMessageLogger@@QBE?AVQDebug@@XZ
qt5gui
??1QIcon@@QAE@XZ
??0QIcon@@QAE@ABVQString@@@Z
?addApplicationFont@QFontDatabase@@SAHABVQString@@@Z
qt5widgets
??1QApplication@@UAE@XZ
??0QApplication@@QAE@AAHPAPADH@Z
?create@QStyleFactory@@SAPAVQStyle@@ABVQString@@@Z
?show@QWidget@@QAEXXZ
?widget@QLayoutItem@@UAEPAVQWidget@@XZ
?wheelEvent@QWidget@@MAEXPAVQWheelEvent@@@Z
?takeAt@QBoxLayout@@UAEPAVQLayoutItem@@H@Z
?tabletEvent@QWidget@@MAEXPAVQTabletEvent@@@Z
?spacerItem@QLayoutItem@@UAEPAVQSpacerItem@@XZ
?sizeHint@QWidget@@UBE?AVQSize@@XZ
?sizeHint@QLabel@@UBE?AVQSize@@XZ
?sizeHint@QDialog@@UBE?AVQSize@@XZ
?sizeHint@QBoxLayout@@UBE?AVQSize@@XZ
?showEvent@QWidget@@MAEXPAVQShowEvent@@@Z
?showEvent@QDialog@@MAEXPAVQShowEvent@@@Z
?sharedPainter@QWidget@@MBEPAVQPainter@@XZ
?setGeometry@QBoxLayout@@UAEXABVQRect@@@Z
?resizeEvent@QWidget@@MAEXPAVQResizeEvent@@@Z
?reject@QDialog@@UAEXXZ
?redirected@QWidget@@MBEPAVQPaintDevice@@PAVQPoint@@@Z
?qt_metacast@QWidget@@UAEPAXPBD@Z
?qt_metacast@QVBoxLayout@@UAEPAXPBD@Z
?qt_metacast@QHBoxLayout@@UAEPAXPBD@Z
?qt_metacall@QWidget@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacall@QVBoxLayout@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacall@QHBoxLayout@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?paintEvent@QWidget@@MAEXPAVQPaintEvent@@@Z
?paintEngine@QWidget@@UBEPAVQPaintEngine@@XZ
?open@QDialog@@UAEXXZ
?nativeEvent@QWidget@@MAE_NABVQByteArray@@PAXPAJ@Z
?setStyle@QApplication@@SAXPAVQStyle@@@Z
?mouseReleaseEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QLabel@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QLabel@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QLabel@@MAEXPAVQMouseEvent@@@Z
?mouseDoubleClickEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?minimumSizeHint@QWidget@@UBE?AVQSize@@XZ
?minimumSizeHint@QLabel@@UBE?AVQSize@@XZ
?minimumSizeHint@QDialog@@UBE?AVQSize@@XZ
?minimumSize@QBoxLayout@@UBE?AVQSize@@XZ
?minimumHeightForWidth@QBoxLayout@@UBEHH@Z
?metric@QWidget@@MBEHW4PaintDeviceMetric@QPaintDevice@@@Z
?metaObject@QWidget@@UBEPBUQMetaObject@@XZ
?metaObject@QVBoxLayout@@UBEPBUQMetaObject@@XZ
?metaObject@QHBoxLayout@@UBEPBUQMetaObject@@XZ
?maximumSize@QBoxLayout@@UBE?AVQSize@@XZ
?leaveEvent@QWidget@@MAEXPAVQEvent@@@Z
?layout@QLayout@@UAEPAV1@XZ
?keyReleaseEvent@QWidget@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QWidget@@MAEXPAVQKeyEvent@@@Z
?itemAt@QBoxLayout@@UBEPAVQLayoutItem@@H@Z
?isEmpty@QLayout@@UBE_NXZ
?invalidate@QBoxLayout@@UAEXXZ
?inputMethodQuery@QWidget@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?inputMethodEvent@QWidget@@MAEXPAVQInputMethodEvent@@@Z
?initPainter@QWidget@@MBEXPAVQPainter@@@Z
?indexOf@QLayout@@UBEHPAVQWidget@@@Z
?hideEvent@QWidget@@MAEXPAVQHideEvent@@@Z
?heightForWidth@QWidget@@UBEHH@Z
?heightForWidth@QLabel@@UBEHH@Z
?setWindowIcon@QApplication@@SAXABVQIcon@@@Z
?exec@QApplication@@SAHXZ
?moveEvent@QWidget@@MAEXPAVQMoveEvent@@@Z
?heightForWidth@QBoxLayout@@UBEHH@Z
?hasHeightForWidth@QWidget@@UBE_NXZ
?hasHeightForWidth@QBoxLayout@@UBE_NXZ
?geometry@QLayout@@UBE?AVQRect@@XZ
?focusOutEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?focusOutEvent@QLabel@@MAEXPAVQFocusEvent@@@Z
?focusNextPrevChild@QWidget@@MAE_N_N@Z
?focusNextPrevChild@QLabel@@MAE_N_N@Z
?focusInEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?focusInEvent@QLabel@@MAEXPAVQFocusEvent@@@Z
?expandingDirections@QBoxLayout@@UBE?AV?$QFlags@W4Orientation@Qt@@@@XZ
?event@QWidget@@MAE_NPAVQEvent@@@Z
?event@QLabel@@MAE_NPAVQEvent@@@Z
?enterEvent@QWidget@@MAEXPAVQEvent@@@Z
?dropEvent@QWidget@@MAEXPAVQDropEvent@@@Z
?dragMoveEvent@QWidget@@MAEXPAVQDragMoveEvent@@@Z
?dragLeaveEvent@QWidget@@MAEXPAVQDragLeaveEvent@@@Z
?dragEnterEvent@QWidget@@MAEXPAVQDragEnterEvent@@@Z
?done@QDialog@@UAEXH@Z
?devType@QWidget@@UBEHXZ
?count@QBoxLayout@@UBEHXZ
?controlTypes@QLayout@@UBE?AV?$QFlags@W4ControlType@QSizePolicy@@@@XZ
?contextMenuEvent@QWidget@@MAEXPAVQContextMenuEvent@@@Z
?contextMenuEvent@QLabel@@MAEXPAVQContextMenuEvent@@@Z
?contextMenuEvent@QDialog@@MAEXPAVQContextMenuEvent@@@Z
?closeEvent@QWidget@@MAEXPAVQCloseEvent@@@Z
?closeEvent@QDialog@@MAEXPAVQCloseEvent@@@Z
?childEvent@QLayout@@MAEXPAVQChildEvent@@@Z
?changeEvent@QWidget@@MAEXPAVQEvent@@@Z
?addItem@QBoxLayout@@UAEXPAVQLayoutItem@@@Z
?actionEvent@QWidget@@MAEXPAVQActionEvent@@@Z
?accept@QDialog@@UAEXXZ
?setText@QLabel@@QAEXABVQString@@@Z
?setWordWrap@QLabel@@QAEX_N@Z
?setAlignment@QLabel@@QAEXV?$QFlags@W4AlignmentFlag@Qt@@@@@Z
?text@QLabel@@QBE?AVQString@@XZ
??1QVBoxLayout@@UAE@XZ
??0QVBoxLayout@@QAE@XZ
??1QHBoxLayout@@UAE@XZ
??0QHBoxLayout@@QAE@XZ
?setSpacing@QBoxLayout@@QAEXH@Z
?addLayout@QBoxLayout@@QAEXPAVQLayout@@H@Z
?addWidget@QBoxLayout@@QAEXPAVQWidget@@HV?$QFlags@W4AlignmentFlag@Qt@@@@@Z
?addStretch@QBoxLayout@@QAEXH@Z
?addSpacing@QBoxLayout@@QAEXH@Z
?setContentsMargins@QLayout@@QAEXHHHH@Z
?setLayout@QWidget@@QAEXPAVQLayout@@@Z
?resize@QWidget@@QAEXABVQSize@@@Z
?setWindowTitle@QWidget@@QAEXABVQString@@@Z
?setFixedWidth@QWidget@@QAEXH@Z
??1QWidget@@UAE@XZ
??0QWidget@@QAE@PAV0@V?$QFlags@W4WindowType@Qt@@@@@Z
?setVisible@QWidget@@UAEX_N@Z
customctr
?cEnableDefualtShadow@HIKCustomMainWindow@@QAEXXZ
?cSigButtonClick@HIKCustomMainWindow@@QAEXH@Z
?changeEvent@HIKCustomMainWindow@@MAEXPAVQEvent@@@Z
?error@HIKCustomMessageBox@@SAHPAVQWidget@@ABVQString@@1V?$QFlags@W4Button@HIKCustomMainWindow@@@@1@Z
??0HIKCustomLabel@@QAE@PAVQWidget@@@Z
??1HIKCustomLabel@@UAE@XZ
?cSetTitleControls@HIKCustomTitleBar@@QAEXV?$QFlags@W4TitleControl@HIKCustomTitleBar@@@@@Z
?cTitleControls@HIKCustomTitleBar@@QAE?AV?$QFlags@W4TitleControl@HIKCustomTitleBar@@@@XZ
?cSetTitleText@HIKCustomTitleBar@@QAEXABVQString@@@Z
?cDrawContent@HIKCustomObject@@MAE_NPAVQPainter@@PAVQStyleOption@@@Z
?cLanguageChange@HIKCustomObject@@MAEXXZ
?cNotifyUpdateValue@HIKCustomLabel@@MAEXABVQString@@0W4ItemStatus@HIKCustom@@@Z
?cNotifyUpdateValue@HIKCustomMainWindow@@MAEXABVQString@@0W4ItemStatus@HIKCustom@@@Z
?cOnCancelCliked@HIKCustomMainWindow@@MAEXXZ
?cOnOKClicked@HIKCustomMainWindow@@MAEXXZ
?cSetPrivateFontFamily@HIKCustomObject@@UAEXABVQString@@@Z
?cSetShadowEnable@HIKCustomMainWindow@@UAEX_NPAVQWidget@@@Z
?cSetShadowEnable@HIKCustomQssHelper@@UAEX_NPAVQWidget@@@Z
?cSetStyleSelector@HIKCustomObject@@UAEXABVQString@@@Z
?cSetStyleSelector@HIKCustomObject@@UAEXW4CommonStyleSelector@HIKCustom@@@Z
?changeEvent@HIKCustomLabel@@MAEXPAVQEvent@@@Z
?enterEvent@HIKCustomLabel@@MAEXPAVQEvent@@@Z
?enterEvent@HIKCustomMainWindow@@MAEXPAVQEvent@@@Z
?cSetStrechEdges@HIKCustomMainWindow@@QAEXV?$QFlags@W4StrechEdge@HIKCustomMainWindow@@@@@Z
?eventFilter@HIKCustomMainWindow@@MAE_NPAVQObject@@PAVQEvent@@@Z
?exec@HIKCustomMainWindow@@UAEHXZ
?hideEvent@HIKCustomMainWindow@@MAEXPAVQHideEvent@@@Z
?keyPressEvent@HIKCustomLabel@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@HIKCustomMainWindow@@MAEXPAVQKeyEvent@@@Z
?leaveEvent@HIKCustomLabel@@MAEXPAVQEvent@@@Z
?leaveEvent@HIKCustomMainWindow@@MAEXPAVQEvent@@@Z
?metaObject@HIKCustomLabel@@UBEPBUQMetaObject@@XZ
?mouseMoveEvent@HIKCustomMainWindow@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@HIKCustomMainWindow@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@HIKCustomMainWindow@@MAEXPAVQMouseEvent@@@Z
?paintEvent@HIKCustomLabel@@MAEXPAVQPaintEvent@@@Z
?paintEvent@HIKCustomMainWindow@@MAEXPAVQPaintEvent@@@Z
?qt_metacall@HIKCustomLabel@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@HIKCustomLabel@@UAEPAXPBD@Z
?resizeEvent@HIKCustomMainWindow@@MAEXPAVQResizeEvent@@@Z
?setVisible@HIKCustomMainWindow@@UAEX_N@Z
?timerEvent@HIKCustomMainWindow@@MAEXPAVQTimerEvent@@@Z
?staticMetaObject@HIKCustomMainWindow@@2UQMetaObject@@B
?qt_metacast@HIKCustomMainWindow@@UAEPAXPBD@Z
?qt_metacall@HIKCustomMainWindow@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?getSaveFileName@HIKCustom@@YA?AVQString@@PAVQWidget@@ABV2@1111ABVQStringList@@PAV2@V?$QFlags@W4Option@QFileDialog@@@@@Z
?fontColor@HIKCustom@@YA?AVQColor@@W4FontColorStyle@1@@Z
?setLanguage@HIKCustom@@YAXW4Language@1@@Z
?cSetFontSize@HIKCustomObject@@QAEXHW4ItemStatus@HIKCustom@@ABVQStringList@@@Z
?cSetFontColor@HIKCustomObject@@QAEXABVQColor@@W4ItemStatus@HIKCustom@@ABVQStringList@@@Z
??0HIKCustomMainWindow@@QAE@PAVQWidget@@@Z
??1HIKCustomMainWindow@@UAE@XZ
?cSetMainButton@HIKCustomMainWindow@@QAEXH@Z
?cTitleBar@HIKCustomMainWindow@@QBEQAVHIKCustomTitleBar@@XZ
?cSetCentralWidget@HIKCustomMainWindow@@QAEXPAVQWidget@@@Z
?cSetEnableButtonBar@HIKCustomMainWindow@@QAEX_N@Z
?cSetButtons@HIKCustomMainWindow@@QAEXV?$QFlags@W4Button@HIKCustomMainWindow@@@@@Z
?cAddCustomButtons@HIKCustomMainWindow@@QAEXABVQStringList@@@Z
?cResetCustomButtonNames@HIKCustomMainWindow@@QAEXABVQStringList@@@Z
?event@HIKCustomMainWindow@@MAE_NPAVQEvent@@@Z
commontools
?curExeVersion@MVSInterface@@YA?AVQString@@XZ
??_7MVSNativeEventFilter@@6B@
?nativeEventFilter@MVSNativeEventFilter@@UAE_NABVQByteArray@@PAXPAJ@Z
?killProcess@MVSInterface@@YAXABVQString@@@Z
?processID@MVSInterface@@YA_JABVQString@@PAV?$QList@_J@@@Z
?initLog4qtConfig@MVSInterface@@YAXABVQString@@@Z
?resolution@MVSInterface@@YA?AVQString@@XZ
?graphicsChips@MVSInterface@@YA?AVQString@@XZ
?operatingSys@MVSInterface@@YA?AVQString@@XZ
?byteOrder@MVSInterface@@YA?AVQString@@XZ
?availbleMmeory@MVSInterface@@YA?AVQString@@XZ
?numOfCpu@MVSInterface@@YA?AVQString@@XZ
?cpu@MVSInterface@@YA?AVQString@@XZ
?language@MVSInterface@@YA?AVQString@@XZ
kernel32
QueryPerformanceCounter
LocalFree
GetCommandLineW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
CloseHandle
CreateMutexW
OpenMutexW
WideCharToMultiByte
user32
ShowWindow
SetForegroundWindow
FindWindowW
msvcp120
?_Winerror_map@std@@YAPBDH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
msvcr120
_XcptFilter
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
__crtGetShowWindowMode
_cexit
_CxxThrowException
_hypot
memmove
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
_amsg_exit
_exit
__getmainargs
__set_app_type
exit
memcpy
_ismbblead
_configthreadlocale
__setusermatherr
_initterm_e
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
_initterm
_acmdln
_fmode
_commode
_except_handler4_common
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__CxxFrameHandler3
?terminate@@YAXXZ
??_V@YAXPAX@Z
shell32
CommandLineToArgvW
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 421KB - Virtual size: 421KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ