FactoryServer-ChunkDownloader.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
280cce4397e2469019b1404addadeb60_NeikiAnalytics.dll
Resource
win7-20240508-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
280cce4397e2469019b1404addadeb60_NeikiAnalytics.dll
Resource
win10v2004-20240426-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
280cce4397e2469019b1404addadeb60_NeikiAnalytics
-
Size
282KB
-
MD5
280cce4397e2469019b1404addadeb60
-
SHA1
1e9b058359377498f617359ad18a5d928c868dc0
-
SHA256
e75e008158ce1843d7722530e4663688d36135c419d0b5549459c68033c5510c
-
SHA512
3469506dfa75591fe4c19e750bb7236a2871888a2528d9057b26b0d72587dfdefd95a8e7b89df1a640578011ac30e3f543dd8a43f5e30408ad1336e424d6eee2
-
SSDEEP
3072:RUptOY5vqrCrYx25cwWmnX5VEb5q2k4pB/8Noo4rB5T/rU462b+P+6qd1wWrO9c1:SDvScYxuWmpVEB+pqdNRZUmR/
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 280cce4397e2469019b1404addadeb60_NeikiAnalytics
Files
-
280cce4397e2469019b1404addadeb60_NeikiAnalytics.dll windows:6 windows x64 arch:x64
551469d5f88050dbefa6ae894320a382
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
factoryserver-core
??0FName@@QEAA@PEB_WW4EFindName@@@Z
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPathDebug@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?Stricmp@FGenericPlatformStricmp@@SAHPEB_W0@Z
?GetConvertedLength@Private@Core@UE@@YAHPEBW4UTF8CHAR@FGenericPlatformTypes@@PEB_WH@Z
?GetConvertedLength@Private@Core@UE@@YAHPEB_WPEBW4UTF8CHAR@FGenericPlatformTypes@@H@Z
?Convert@Private@Core@UE@@YAPEAW4UTF8CHAR@FGenericPlatformTypes@@PEAW445@HPEB_WH@Z
?Convert@Private@Core@UE@@YAPEA_WPEA_WHPEBW4UTF8CHAR@FGenericPlatformTypes@@H@Z
?HandleAtomicsFailure@FWindowsPlatformAtomics@@KAXPEB_WZZ
?AddAdditionalRootDirectory@FGenericPlatformMisc@@SAXAEBVFString@@@Z
?BeginNamedEvent@FWindowsPlatformMisc@@SAXAEBUFColor@@PEBD@Z
?EndNamedEvent@FWindowsPlatformMisc@@SAXXZ
?GetDiskTotalAndFreeSpace@FWindowsPlatformMisc@@SA_NAEBVFString@@AEA_K1@Z
?OutputEventType@FCpuProfilerTrace@@SAIPEBD0I@Z
?OutputBeginEvent@FCpuProfilerTrace@@SAXI@Z
?OutputBeginDynamicEventWithId@FCpuProfilerTrace@@SAXVFName@@PEB_WPEBDI@Z
?OutputEndEvent@FCpuProfilerTrace@@SAXXZ
?CheckVerifyFailedImpl@FDebug@@SA_NPEBD0HPEAXPEB_WZZ
?CheckVerifyImpl@@YA_NAEA_N_NPEBDHPEAX2PEB_WZZ
?Malloc@FMemory@@SAPEAX_KI@Z
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?Free@FMemory@@SAXPEAX@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?OnInvalidArrayNum@Private@Core@UE@@YAX_K@Z
?OnInvalidSetNum@Private@Core@UE@@YAX_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_KI@Z
??0FString@@QEAA@PEBD@Z
??0FString@@QEAA@PEB_W@Z
??4FString@@QEAAAEAV0@PEB_W@Z
?AssignRange@FString@@AEAAXPEB_WH@Z
?Empty@FString@@QEAAXXZ
?AppendChars@FString@@QEAAXPEB_WH@Z
?PathAppend@FString@@QEAAXPEB_WH@Z
?PrintfImpl@FString@@CA?AV1@PEB_WZZ
?StartsWith@FString@@QEBA_NPEB_WHW4Type@ESearchCase@@@Z
?FromValidEName@FNameEntryId@@CA?AU1@W4EName@@@Z
??0FName@@QEAA@PEBDW4EFindName@@@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?BasicLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
?GenerateNewID@FDelegateHandle@@CA_KXZ
?StackWalkAndDump@FWindowsPlatformStackWalk@@SAXPEAD_KHPEAX@Z
?ThreadStackWalkAndDump@FWindowsPlatformStackWalk@@SAXPEAD_KHI@Z
?GetDestructionSentinelStackTls@FMRSWRecursiveAccessDetector@@CAAEAV?$TArray@PEAUFDestructionSentinel@FMRSWRecursiveAccessDetector@@V?$TSizedInlineAllocator@$03$0CA@V?$TSizedDefaultAllocator@$0CA@@@@@@@XZ
?GetReadersTls@FMRSWRecursiveAccessDetector@@CAAEAV?$TArray@UFReaderNum@FMRSWRecursiveAccessDetector@@V?$TSizedInlineAllocator@$03$0CA@V?$TSizedDefaultAllocator@$0CA@@@@@@@XZ
?GetSynchEventFromPool@FGenericPlatformProcess@@SAPEAVFEvent@@_N@Z
?ReturnSynchEventToPool@FGenericPlatformProcess@@SAXPEAVFEvent@@@Z
?MemoryTrace_GetActiveTag@@YAHXZ
??0FMemScope@@QEAA@W4ELLMTag@@_N@Z
??1FMemScope@@QEAA@XZ
?Construct@FLowLevelMemTracker@@SAAEAV1@XZ
?OnLowLevelAlloc@FLowLevelMemTracker@@QEAAXW4ELLMTracker@@PEBX_KW4ELLMTag@@W4ELLMAllocType@@_N@Z
?OnLowLevelFree@FLowLevelMemTracker@@QEAAXW4ELLMTracker@@PEBXW4ELLMAllocType@@_N@Z
?GetActiveTagData@FLowLevelMemTracker@@QEAAPEBVFTagData@LLMPrivate@UE@@W4ELLMTracker@@W4ELLMTagSet@@@Z
?Init@FLLMScope@@IEAAXW4ELLMTag@@_NW4ELLMTagSet@@W4ELLMTracker@@1@Z
?Destruct@FLLMScope@@IEAAXXZ
?Get@FThreadStatsPool@@SAAEAU1@XZ
?GetFromPool@FThreadStatsPool@@QEAAPEAVFThreadStats@@XZ
?Flush@FThreadStats@@QEAAX_N0@Z
?FlushRawStats@FThreadStats@@QEAAX_N0@Z
?DoSetup@FThreadSafeStaticStatBase@@IEBAPEBUTStatIdData@@PEBDPEB_W001_N2W4Type@EStatDataType@@22W4EMemoryCounterRegion@FWindowsPlatformMemory@@@Z
?SaveStack@FMetadataTrace@@SAIXZ
??1FMetadataRestoreScope@@QEAA@XZ
?RestoreInheritedContext@FInheritedContextBase@UE@@QEAA?AVFInheritedContextScope@2@XZ
?AnsiMalloc@@YAPEAX_KI@Z
?AnsiFree@@YAXPEAX@Z
?MemoryTrace_MarkAllocAsHeap@@YAX_KIW4EMemoryTraceHeapAllocationFlags@@@Z
?MemoryTrace_UnmarkAllocAsHeap@@YAX_KI@Z
?MemoryTrace_Alloc@@YAX_K0II@Z
?MemoryTrace_Free@@YAX_KI@Z
??0FTextFormat@@QEAA@AEBVFText@@@Z
??0FText@@QEAA@XZ
?AsNumber@FText@@SA?AV1@HQEBUFNumberFormattingOptions@@AEBV?$TSharedPtr@VFCulture@@$00@@@Z
?FromString@FText@@SA?AV1@AEBVFString@@@Z
?IsEmpty@FText@@QEBA_NXZ
?Format@FText@@SA?AV1@VFTextFormat@@$$QEAV?$TArray@VFFormatArgumentValue@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?ForUseOnlyByLocMacroAndGraphNodeTextLiterals_CreateText@FInternationalization@@SA?AVFText@@PEB_W00@Z
?UtcNow@FDateTime@@SA?AU1@XZ
?IsWorkerThread@FSchedulerTls@LowLevelTasks@@QEBA_NXZ
?BusyWaitInternal@FScheduler@LowLevelTasks@@AEAAXAEBV?$TTaskDelegate@$$A6A_NXZ$0BA@@2@_N@Z
??0FSHA1@@QEAA@XZ
??1FSHA1@@QEAA@XZ
?Update@FSHA1@@QEAAXPEBE_K@Z
?Final@FSHA1@@QEAAXXZ
?GetHash@FSHA1@@QEAAXPEAE@Z
?GetCoreTicker@FTSTicker@@SAAEAV1@XZ
?AddTicker@FTSTicker@@QEAA?AV?$TWeakPtr@UFElement@FTSTicker@@$00@@AEBV?$TDelegate@$$A6A_NM@ZUFDefaultDelegateUserPolicy@@@@M@Z
?GetPlatformPhysical@IPlatformFile@@SAAEAV1@XZ
?Get@IFileManager@@SAAEAV1@XZ
?ProjectContentDir@FPaths@@SA?AVFString@@XZ
?ProjectPersistentDownloadDir@FPaths@@SA?AVFString@@XZ
?CombineInternal@FPaths@@KA?AVFString@@PEBV?$TStringView@_W@@H@Z
?GetArray@FConfigCacheIni@@QEAAHPEB_W0AEAV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@AEBVFString@@@Z
?Get@FModuleManager@@SAAEAV1@XZ
?LoadModule@FModuleManager@@QEAAPEAVIModuleInterface@@VFName@@W4ELoadModuleFlags@@@Z
?LoadModuleChecked@FModuleManager@@QEAAAEAVIModuleInterface@@VFName@@@Z
??0FGenericPlatformChunkInstall@@QEAA@XZ
??1FGenericPlatformChunkInstall@@UEAA@XZ
?GetPakchunkLocation@FGenericPlatformChunkInstall@@UEAA?AW4Type@EChunkLocation@@H@Z
?PrioritizePakchunk@FGenericPlatformChunkInstall@@UEAA_NHW4Type@EChunkPriority@@@Z
?ExternalNotifyChunkAvailable@FGenericPlatformChunkInstall@@UEAAXI@Z
?SupportsIntelligentInstall@FGenericPlatformChunkInstall@@UEAA_NXZ
?IsChunkInstallationPending@FGenericPlatformChunkInstall@@UEAA_NAEBV?$TArray@UFCustomChunk@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?InstallChunks@FGenericPlatformChunkInstall@@UEAA_NAEBV?$TArray@UFCustomChunk@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?UninstallChunks@FGenericPlatformChunkInstall@@UEAA_NAEBV?$TArray@UFCustomChunk@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetCustomChunksByType@FGenericPlatformChunkInstall@@UEAA?AV?$TArray@UFCustomChunk@@V?$TSizedDefaultAllocator@$0CA@@@@@W4ECustomChunkType@@@Z
?SupportsNamedChunkInstall@FGenericPlatformChunkInstall@@UEBA_NXZ
?IsNamedChunkInProgress@FGenericPlatformChunkInstall@@UEAA_NVFName@@@Z
?InstallNamedChunk@FGenericPlatformChunkInstall@@UEAA_NVFName@@@Z
?UninstallNamedChunk@FGenericPlatformChunkInstall@@UEAA_NVFName@@@Z
?InstallNamedChunks@FGenericPlatformChunkInstall@@UEAA_NAEBV?$TArrayView@$$CBVFName@@H@@@Z
?UninstallNamedChunks@FGenericPlatformChunkInstall@@UEAA_NAEBV?$TArrayView@$$CBVFName@@H@@@Z
?GetNamedChunkLocation@FGenericPlatformChunkInstall@@UEAA?AW4Type@EChunkLocation@@VFName@@@Z
?GetNamedChunkProgress@FGenericPlatformChunkInstall@@UEAAMVFName@@W4Type@EChunkProgressReportingType@@@Z
?PrioritizeNamedChunk@FGenericPlatformChunkInstall@@UEAA_NVFName@@W4Type@EChunkPriority@@@Z
?GetNamedChunkType@FGenericPlatformChunkInstall@@UEBA?AW4ENamedChunkType@@VFName@@@Z
?GetNamedChunksByType@FGenericPlatformChunkInstall@@UEBA?AV?$TArray@VFName@@V?$TSizedDefaultAllocator@$0CA@@@@@W4ENamedChunkType@@@Z
?AddNamedChunkInstallDelegate@FGenericPlatformChunkInstall@@UEAA?AVFDelegateHandle@@V?$TDelegate@$$A6AXVFName@@_N@ZUFDefaultDelegateUserPolicy@@@@@Z
?RemoveNamedChunkInstallDelegate@FGenericPlatformChunkInstall@@UEAAXVFDelegateHandle@@@Z
?CpuChannel@@3AEAVFChannel@Trace@UE@@EA
?CRCTable_DEPRECATED@FCrc@@2PAIA
?GConfig@@3PEAVFConfigCacheIni@@EA
?GGameIni@@3VFString@@A
?GCycleStatsShouldEmitNamedEvents@@3HA
?GShouldEmitVerboseNamedEvents@@3_NA
?TrackerInstance@FLowLevelMemTracker@@0PEAV1@EA
?bIsDisabled@FLowLevelMemTracker@@2_NA
?TStatId_NAME_None@TStatId@@0UTStatIdData@@A
?TlsSlot@FThreadStats@@0IA
?bPrimaryEnable@FThreadStats@@0_NA
?bPrimaryDisableForever@FThreadStats@@0_NA
?bIsRawStatsActive@FThreadStats@@0_NA
?GThreadPool@@3PEAVFQueuedThreadPool@@EA
?Singleton@FScheduler@LowLevelTasks@@0V12@A
?MountPak@FCoreDelegates@@2V?$TDelegate@$$A6APEAVIPakFile@@AEBVFString@@H@ZUFDefaultDelegateUserPolicy@@@@A
?OnUnmountPak@FCoreDelegates@@2V?$TDelegate@$$A6A_NAEBVFString@@@ZUFDefaultDelegateUserPolicy@@@@A
factoryserver-coreuobject
?CollectGarbage@@YAXW4EObjectFlags@@_N@Z
factoryserver-http
?Get@FHttpModule@@SAAEAV1@XZ
kernel32
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
GetCurrentThreadId
TlsGetValue
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSListHead
vcruntime140
memset
__C_specific_handler
__current_exception
__current_exception_context
__std_type_info_destroy_list
strstr
memmove
_purecall
memcpy
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsscanf
api-ms-win-crt-convert-l1-1-0
_wtoi
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_configure_narrow_argv
_initterm
_cexit
_crt_at_quick_exit
terminate
_initterm_e
_initialize_onexit_table
_execute_onexit_table
_initialize_narrow_environment
_register_onexit_function
_crt_atexit
api-ms-win-crt-heap-l1-1-0
malloc
free
Exports
Exports
??0?$TSharedFromThis@VFChunkDownloader@@$00@@IEAA@AEBV0@@Z
??0?$TSharedFromThis@VFChunkDownloader@@$00@@IEAA@XZ
??0FChunkDownloader@@IEAA@XZ
??0FChunkDownloader@@QEAA@AEBV0@@Z
??1?$TSharedFromThis@VFChunkDownloader@@$00@@IEAA@XZ
??1FChunkDownloader@@QEAA@XZ
??4?$TSharedFromThis@VFChunkDownloader@@$00@@IEAAAEAV0@AEBV0@@Z
??4FChunkDownloader@@QEAAAEAV0@AEBV0@@Z
?AsShared@?$TSharedFromThis@VFChunkDownloader@@$00@@QEAA?AV?$TSharedRef@VFChunkDownloader@@$00@@XZ
?AsShared@?$TSharedFromThis@VFChunkDownloader@@$00@@QEBA?AV?$TSharedRef@$$CBVFChunkDownloader@@$00@@XZ
?AsWeak@?$TSharedFromThis@VFChunkDownloader@@$00@@QEAA?AV?$TWeakPtr@VFChunkDownloader@@$00@@XZ
?AsWeak@?$TSharedFromThis@VFChunkDownloader@@$00@@QEBA?AV?$TWeakPtr@$$CBVFChunkDownloader@@$00@@XZ
?BeginLoadingMode@FChunkDownloader@@QEAAXAEBV?$TFunction@$$A6AX_N@Z@@@Z
?CancelDownload@FChunkDownloader@@AEAAXAEBV?$TSharedRef@UFPakFile@FChunkDownloader@@$00@@_N@Z
?CheckFileSha1Hash@FChunkDownloader@@KA_NAEBVFString@@0@Z
?ChunkStatusToString@FChunkDownloader@@SAPEB_WW4EChunkStatus@1@@Z
?CompleteMountTask@FChunkDownloader@@AEAAXAEAUFChunk@1@@Z
?ComputeLoadingStats@FChunkDownloader@@AEAAXXZ
?DoesSharedInstanceExist@?$TSharedFromThis@VFChunkDownloader@@$00@@QEBA_NXZ
?DownloadChunk@FChunkDownloader@@QEAAXHAEBV?$TFunction@$$A6AX_N@Z@@H@Z
?DownloadChunkInternal@FChunkDownloader@@AEAAXAEBUFChunk@1@AEBV?$TFunction@$$A6AX_N@Z@@H@Z
?DownloadChunks@FChunkDownloader@@QEAAXAEBV?$TArray@HV?$TSizedDefaultAllocator@$0CA@@@@@AEBV?$TFunction@$$A6AX_N@Z@@H@Z
?DownloadPakFileInternal@FChunkDownloader@@AEAAXAEBV?$TSharedRef@UFPakFile@FChunkDownloader@@$00@@AEBV?$TFunction@$$A6AX_N@Z@@H@Z
?DumpLoadedChunks@FChunkDownloader@@SAXXZ
?ExecuteNextTick@FChunkDownloader@@AEAAXAEBV?$TFunction@$$A6AX_N@Z@@_N@Z
?Finalize@FChunkDownloader@@QEAAXXZ
?FlushCache@FChunkDownloader@@QEAAHXZ
?Get@FChunkDownloader@@SA?AV?$TSharedPtr@VFChunkDownloader@@$00@@XZ
?GetAllChunkIds@FChunkDownloader@@QEBAXAEAV?$TArray@HV?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetChecked@FChunkDownloader@@SA?AV?$TSharedRef@VFChunkDownloader@@$00@@XZ
?GetChunkStatus@FChunkDownloader@@QEBA?AW4EChunkStatus@1@H@Z
?GetContentBuildId@FChunkDownloader@@QEBAAEBVFString@@XZ
?GetDeploymentName@FChunkDownloader@@QEBAAEBVFString@@XZ
?GetLoadingStats@FChunkDownloader@@QEBAAEBUFStats@1@XZ
?GetNumDownloadRequests@FChunkDownloader@@QEBAHXZ
?GetOrCreate@FChunkDownloader@@SA?AV?$TSharedRef@VFChunkDownloader@@$00@@XZ
?Initialize@FChunkDownloader@@QEAAXAEBVFString@@H@Z
?IssueDownloads@FChunkDownloader@@AEAAXXZ
?LoadCachedBuild@FChunkDownloader@@QEAA_NAEBVFString@@@Z
?LoadManifest@FChunkDownloader@@AEAAXAEBV?$TArray@UFPakFileEntry@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?MountChunk@FChunkDownloader@@QEAAXHAEBV?$TFunction@$$A6AX_N@Z@@@Z
?MountChunkInternal@FChunkDownloader@@AEAAXAEAUFChunk@1@AEBV?$TFunction@$$A6AX_N@Z@@@Z
?MountChunks@FChunkDownloader@@QEAAXAEBV?$TArray@HV?$TSizedDefaultAllocator@$0CA@@@@@AEBV?$TFunction@$$A6AX_N@Z@@@Z
?SaveLocalManifest@FChunkDownloader@@AEAAX_N@Z
?SetContentBuildId@FChunkDownloader@@AEAAXAEBVFString@@0@Z
?Shutdown@FChunkDownloader@@SAXXZ
?TryDownloadBuildManifest@FChunkDownloader@@AEAAXH@Z
?TryLoadBuildManifest@FChunkDownloader@@AEAAXH@Z
?UnmountPakFile@FChunkDownloader@@AEAAXAEBV?$TSharedRef@UFPakFile@FChunkDownloader@@$00@@@Z
?UpdateBuild@FChunkDownloader@@QEAAXAEBVFString@@0AEBV?$TFunction@$$A6AX_N@Z@@@Z
?UpdateLoadingMode@FChunkDownloader@@AEAA_NXZ
?UpdateMountTasks@FChunkDownloader@@AEAA_NM@Z
?ValidateCache@FChunkDownloader@@QEAAHXZ
?WaitForMounts@FChunkDownloader@@AEAAXXZ
InitializeModule
Sections
.text Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.uedbg Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ