2024-05-11_6a142736b370bede2730d7af32d90722_bkransomware

Sharing

Copy URL

Twitter E-mail

General

Target

2024-05-11_6a142736b370bede2730d7af32d90722_bkransomware
Size

149KB
MD5

6a142736b370bede2730d7af32d90722
SHA1

65d46ed85d191adcff80b583155fbc338942b8a9
SHA256

7fc6be7e351188461f8af9e348940405af461d6cfaba5526bf1dab9bda51d33e
SHA512

47779ece44416c734c38a2ba41e6eb8f7b5e8931e24d5c6dc58eff15a8a9c507e22aa423652aea08b35ae57e7dcdc6bb03f4cd61e575e001ae413f679d236cb8
SSDEEP

3072:IIScU4FmklHsx1leMP6AMC/QDppdcg9cyRBpQWDFgi:xifPeKO5cgrBz2i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-11_6a142736b370bede2730d7af32d90722_bkransomware

Files

2024-05-11_6a142736b370bede2730d7af32d90722_bkransomware
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�E��EW�
Size: 375.3MB - Virtual size: 258.8MB

IMAGE_SCN_MEM_READ

��i3�_�M
Size: 3109.9MB - Virtual size: 3724.8MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

A
Size: 1664.0MB - Virtual size: 2340.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

P�<O
Size: 259KB - Virtual size: 1608.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�O
Size: 1310.8MB - Virtual size: 3276.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�A
Size: 9KB - Virtual size: 2304.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA

��
Size: 1128.6MB - Virtual size: 3200.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Q�UO
Size: 2098.8MB - Virtual size: 204.3MB

IMAGE_SCN_MEM_EXECUTE

Size: 19KB - Virtual size: 3224.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

F��t P�
Size: 4.1MB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

V��v�
Size: 199.4MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 3952.0MB - Virtual size: 1390.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA

��
Size: 2078.8MB - Virtual size: 3276.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

h
Size: 1315.2MB - Virtual size: 4096.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��5��
Size: 2052.4MB - Virtual size: 2124.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

��
Size: 2321.8MB - Virtual size: 4063.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

��Pj
Size: 64KB - Virtual size: 352.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

j
Size: 3976.3MB - Virtual size: 2136.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�L
Size: 3089.3MB - Virtual size: 3976.3MB

Ƅ�
Size: 2320.3MB - Virtual size: 2224.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

$
Size: 4095.7MB - Virtual size: 1328.0MB

IMAGE_SCN_MEM_DISCARDABLE

��@u��
Size: 2096.0MB - Virtual size: 1712.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��P��E
Size: 4095.9MB - Virtual size: 2207.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

h
Size: 1669.1MB - Virtual size: 3848.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

Vj
Size: 4095.5MB - Virtual size: 430.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��p�
Size: 3240.7MB - Virtual size: 2261.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�X
Size: 1272.7MB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

@�G9O
Size: 453.5MB - Virtual size: 1148.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

��K
Size: 3276.8MB - Virtual size: 3712.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

P*
Size: 12.4MB - Virtual size: 22KB

�F
Size: 2238.8MB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�O+�;�|
Size: 3512.3MB - Virtual size: 3075.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

y��O�
Size: 1525.9MB - Virtual size: 222.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�M��
Size: 1504.5MB - Virtual size: 3876.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

U��3�
Size: 1328.5MB - Virtual size: 455.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

�M��I
Size: 3331.7MB - Virtual size: 2116.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

�
Size: 3121.8MB - Virtual size: 2230.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��B3�
Size: 1049.0MB - Virtual size: 2239.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 544B - Virtual size: 3912.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

h
Size: 3717.4MB - Virtual size: 2096.0MB

��W
Size: 3912.3MB - Virtual size: 3032.6MB

IMAGE_SCN_MEM_DISCARDABLE

�g
Size: 223B - Virtual size: 3200.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

��P��
Size: 3016.3MB - Virtual size: 4096.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

A
Size: 3728.0MB - Virtual size: 3904.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��8�A
Size: 1112.9MB - Virtual size: 4096.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

��u
Size: 3080.3MB - Virtual size: 3772.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��:u�
Size: 2096.9MB - Virtual size: 2209.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uǅ��
Size: 2372.0MB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

u��
Size: 2108.0MB - Virtual size: 1885.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��D�A��E
Size: 2209.2MB - Virtual size: 897.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 3B - Virtual size: 2140.4MB

IMAGE_SCN_MEM_WRITE

�t�P:Q
Size: 1885.2MB - Virtual size: 2096.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 929.0MB - Virtual size: 2372.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��u�3��
Size: 2140.4MB - Virtual size: 2108.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��:u�
Size: 2096.9MB - Virtual size: 2209.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uǅ��
Size: 2373.3MB - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

u��
Size: 2108.0MB - Virtual size: 1885.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��X�A��E
Size: 2209.2MB - Virtual size: 929.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 8B - Virtual size: 2140.4MB

IMAGE_SCN_MEM_WRITE

�t�P:Q
Size: 1885.2MB - Virtual size: 2096.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 929.0MB - Virtual size: 2374.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��u�3��
Size: 2140.4MB - Virtual size: 2108.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�:u��
Size: 3080.2MB - Virtual size: 1288.6MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��ɹ
Size: 2272.0MB - Virtual size: 1088.9MB

�ΉT��
Size: 48.6MB - Virtual size: 4095.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

7�эz�
Size: 3442.7MB - Virtual size: 2116.1MB

�A��u�+
Size: 2224.8MB - Virtual size: 228.3MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

C
Size: 1203.6MB - Virtual size: 324.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 2136.7MB - Virtual size: 103.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��;C�
Size: 2096.0MB - Virtual size: 4096.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

U��E��
Size: 137KB - Virtual size: 1407.1MB

IMAGE_SCN_MEM_WRITE

V$+Ѝd$
Size: 1884.6MB - Virtual size: 1032.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

U��D
Size: 1391.8MB - Virtual size: 12.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

�D ��u
Size: 4063.8MB - Virtual size: 3016.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

j\P��I
Size: 3320.7MB - Virtual size: 2128.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

��_^�
Size: 1502.3MB - Virtual size: 3283.2MB

IMAGE_SCN_MEM_READ

�
Size: 2110.8MB - Virtual size: 3276.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�54�A
Size: 3652.3MB - Virtual size: 1285.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�֋E��]�
Size: 3204.3MB - Virtual size: 4095.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

W�E��W
Size: 4.1MB - Virtual size: 2205.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

��U̍
Size: 3204.3MB - Virtual size: 2028.1MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�UЍ9;
Size: 1696.0MB - Virtual size: 2224.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

�[�gC
Size: 1390.8MB - Virtual size: 3276.2MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�~��d$
Size: 2582.4MB - Virtual size: 2256.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��A
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��u�f��
Size: 586.3MB - Virtual size: 2256.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

�ؒA
Size: 782.5MB - Virtual size: 2349.8MB

IMAGE_SCN_CNT_CODE

��t�=O
Size: 16KB - Virtual size: 1872.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��I�D
Size: 2078.8MB - Virtual size: 1884.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�ǅh��
Size: 1240.7MB - Virtual size: 1280.0MB

IMAGE_SCN_CNT_CODE

��]��
Size: 2078.8MB - Virtual size: 3276.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA

��
Size: 3728.0MB - Virtual size: 6.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�j
Size: 4096.0MB - Virtual size: 15.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��$
Size: 216.3MB - Virtual size: 490.5MB

�A�I��
Size: 2377.8MB - Virtual size: 2442.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�A
Size: 1383.5MB - Virtual size: 3848.7MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 4086.6MB - Virtual size: 1376.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

��$
Size: 2258.0MB - Virtual size: 2116.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�ɸ
Size: 2224.3MB - Virtual size: 3717.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 65.4MB - Virtual size: 1406.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

A
Size: 4080.8MB - Virtual size: 1887.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

�_]��
Size: 4.1MB - Virtual size: 4094.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

x#B
Size: 4.1MB - Virtual size: 2371.4MB

� �B
Size: 2582.3MB - Virtual size: 1710.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

E�d�
Size: 236B - Virtual size: 2271.0MB

h
Size: 2521.0MB - Virtual size: 2128.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

M�d�
Size: 1664.2MB - Virtual size: 1510.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��A
Size: 1112.8MB - Virtual size: 1868.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��u��5�
Size: 1026.1MB - Virtual size: 351.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA

�H�A
Size: 4.1MB - Virtual size: 1868.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

U��SVW�}
Size: 2116.1MB - Virtual size: 2269.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

��+��I
Size: 1884.6MB - Virtual size: 1320.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

EPh?
Size: 2305.0MB - Virtual size: 1669.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

�A
Size: 3276.8MB - Virtual size: 3276.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

Size: 135.3MB - Virtual size: 1.4MB

IMAGE_SCN_MEM_WRITE

B
Size: 1664.0MB - Virtual size: 4063.2MB

IMAGE_SCN_MEM_READ

��5�#B��
Size: 3980.7MB - Virtual size: 1305.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

M��#B
Size: 569.3MB - Virtual size: 1058.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

@�A
Size: 1391.5MB - Virtual size: 1049.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

Size: 2261.1MB - Virtual size: 1058.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 279.3MB - Virtual size: 702.8MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

2
Size: 1049.0MB - Virtual size: 4096.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

E��Q�5�
Size: 1025.4MB - Virtual size: 1280.0MB

IMAGE_SCN_MEM_READ

�CV�4�A
Size: 847.9MB - Virtual size: 1376.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

E�V�ӋU�
Size: 2116.1MB - Virtual size: 1944.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��$
Size: 4039.8MB - Virtual size: 2116.0MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�u�V��=
Size: 2196.1MB - Virtual size: 4.1MB

IMAGE_SCN_MEM_READ

�_[V��
Size: 2229.4MB - Virtual size: 1342.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�A
Size: 3391.9MB - Virtual size: 1001B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Vh�
Size: 22.5MB - Virtual size: 5.1MB

�5�B
Size: 2563.4MB - Virtual size: 1389.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��P��Vh
Size: 1292.2MB - Virtual size: 4080.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

h
Size: 63.7MB - Virtual size: 4080.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��B
Size: 490.0MB - Virtual size: 1669.4MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�P��Vh
Size: 4085.1MB - Virtual size: 1887.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 260KB - Virtual size: 3391.8MB

IMAGE_SCN_MEM_EXECUTE

B
Size: 62.8MB - Virtual size: 2140.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 12.3MB - Virtual size: 2078.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 15.7MB - Virtual size: 1280.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

��j
Size: 2136.8MB - Virtual size: 158.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�h��
Size: 4.0MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ǅ��
Size: 4.1MB - Virtual size: 1701.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

�A
Size: 3760.1MB - Virtual size: 140.3MB

IMAGE_SCN_MEM_READ

��Pj
Size: 4031.3MB - Virtual size: 1664.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��
Size: 3976.4MB - Virtual size: 2270.7MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

p�C
Size: 2488.9MB - Virtual size: 3440.0MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��u덅�
Size: 63KB - Virtual size: 3200.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��օ�
Size: 2272.0MB - Virtual size: 3219.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

Size: 257KB - Virtual size: 856.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

��5�B��
Size: 255KB - Virtual size: 4040.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

��5�J��
Size: 119.3MB - Virtual size: 3912.3MB

IMAGE_SCN_MEM_READ

��
Size: 12.0MB - Virtual size: 2078.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 3439.9MB - Virtual size: 512.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

"
Size: 1058.2MB - Virtual size: 2309.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

�fn�[�
Size: 2129.1MB - Virtual size: 85.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

P��G
Size: 2434.8MB - Virtual size: 3938.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��Pǅ��
Size: 2591.5MB - Virtual size: 25.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fօ��
Size: 4095.4MB - Virtual size: 2506.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�Pǅ��
Size: 2256.0MB - Virtual size: 700B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

A
Size: 2624.0MB - Virtual size: 1058.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

�p!B
Size: 16.0MB - Virtual size: 174.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

j
Size: 72.7MB - Virtual size: 1017B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

Pj
Size: 2224.1MB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

TB
Size: 4.1MB - Virtual size: 3440.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�hN��h�
Size: 326.0MB - Virtual size: 1328.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 64.8MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

B
Size: 71.3MB - Virtual size: 2061.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

h!B
Size: 984.7MB - Virtual size: 1872.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

B
Size: 2563.4MB - Virtual size: 14.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

��P��j
Size: 4080.0MB - Virtual size: 256KB

IMAGE_SCN_MEM_READ

��j
Size: 3440.0MB - Virtual size: 2563.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�ȑI
Size: 2136.8MB - Virtual size: 944.0MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��jP��
Size: 1520.0MB - Virtual size: 2112.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

�P��4��
Size: 4095.3MB - Virtual size: 4095.9MB

IMAGE_SCN_MEM_EXECUTE

��Ph
Size: 2048.0MB - Virtual size: 1665.0MB

��P�
Size: 2256.0MB - Virtual size: 1057.9MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

4
Size: 4095.4MB - Virtual size: 4.1MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

x!B
Size: 2260.8MB - Virtual size: 2116.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

��x!B��
Size: 40.6MB - Virtual size: 650.1MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

u��
Size: 324.8MB - Virtual size: 2108.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

u��,�A
Size: 4040.8MB - Virtual size: 2419.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

ʍ��Q
Size: 2911.9MB - Virtual size: 1696.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

A
Size: 12KB - Virtual size: 1240.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

D�A
Size: 825.1MB - Virtual size: 1461.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

S�ȑA
Size: 4.1MB - Virtual size: 62.7MB

IMAGE_SCN_MEM_WRITE

(��Ph
Size: 90KB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

��P
Size: 4.1MB - Virtual size: 490.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

~2
Size: 4047.8MB - Virtual size: 1058.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

�x!B
Size: 2116.1MB - Virtual size: 586.3MB

��u��$�A
Size: 650.1MB - Virtual size: 535.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

�O�GG��
Size: 2108.7MB - Virtual size: 3240.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

�A�I��
Size: 2419.0MB - Virtual size: 714.1MB

�A��u��
Size: 518.5MB - Virtual size: 4095.8MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 2414.0MB - Virtual size: 102.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

�h��
Size: 4080.0MB - Virtual size: 4096.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

�A
Size: 1872.1MB - Virtual size: 204.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

�A
Size: 2116.1MB - Virtual size: 1304.8MB

��u��$�A
Size: 650.1MB - Virtual size: 535.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

�O�GG��
Size: 2108.7MB - Virtual size: 3240.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

�A�I��
Size: 2419.0MB - Virtual size: 714.1MB

�A��u��
Size: 1696.1MB - Virtual size: 4095.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

(��
Size: 3070.6MB - Virtual size: 1509.9MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��D�A��
Size: 12KB - Virtual size: 1510.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��B�3�
Size: 92.4MB - Virtual size: 1391.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

<
Size: - Virtual size: 3184.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

A��u�+�
Size: 3835.2MB - Virtual size: 54.6MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

@h��A
Size: 2340.3MB - Virtual size: 864.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��Ph
Size: 2048.0MB - Virtual size: 3590.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�P�5�B
Size: 4080.0MB - Virtual size: 2318.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

�A
Size: 3.0MB - Virtual size: 2224.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

U��M�
Size: 591.9MB - Virtual size: 127.5MB

|#B
Size: 3224.3MB - Virtual size: 1950.7MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

#B
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

B
Size: 216.6MB - Virtual size: 959.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

�#B
Size: 863.9MB - Virtual size: 1058.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��]Ë�
Size: 4.0MB - Virtual size: 4.0MB

U��j�h��
Size: 1742.8MB - Virtual size: 2582.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

d�
Size: 586.3MB - Virtual size: 535.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��x!B
Size: 3783.4MB - Virtual size: 216.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��I�d$
Size: 2506.1MB - Virtual size: 2256.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��A@�A
Size: 3976.3MB - Virtual size: 2490.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��j
Size: 2KB - Virtual size: 926.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

��hP�
Size: 3146.2MB - Virtual size: 3717.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��ǅ��
Size: 1701.2MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE

��
Size: 4096.0MB - Virtual size: 886.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA

�hhB ��
Size: 460.3MB - Virtual size: 4096.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�� A
Size: 8.6MB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

��sB
Size: 15KB - Virtual size: 391.2MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

��jP�%
Size: 4.1MB - Virtual size: 2112.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

��A
Size: 2256.0MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��jP��
Size: 2392.7MB - Virtual size: 3144.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE

�t&��
Size: 2510.3MB - Virtual size: 2261.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��A
Size: 327.2MB - Virtual size: 4080.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA

��XB
Size: 640KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA

C
Size: 1041.8MB - Virtual size: 20.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

��A
Size: 4.1MB - Virtual size: 846.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

��5
Size: 1525.6MB - Virtual size: 1615.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

��
Size: 4.1MB - Virtual size: 2238.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

B
Size: 277B - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

�5�B
Size: 342.5MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�=HB
Size: 1696.3MB - Virtual size: 3712.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

��ܑA��
Size: 3125.6MB - Virtual size: 1057.9MB

P��0
Size: 1397.4MB - Virtual size: 12.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�
Size: 2563.4MB - Virtual size: 327B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

$�8@
Size: 111KB - Virtual size: 3760.0MB

��h��
Size: 2096.0MB - Virtual size: 1057.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 96KB - Virtual size: 95KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 5KB - Virtual size: 16KB

.rsrc Size: 12KB - Virtual size: 11KB

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

Size: - Virtual size:

�E��E W� Size: 375.3MB - Virtual size: 258.8MB

��i3�_�M Size: 3109.9MB - Virtual size: 3724.8MB

A Size: 1664.0MB - Virtual size: 2340.5MB

P�<O Size: 259KB - Virtual size: 1608.3MB

�O Size: 1310.8MB - Virtual size: 3276.8MB

�A Size: 9KB - Virtual size: 2304.9MB

������� Size: 1128.6MB - Virtual size: 3200.7MB

Q�UO Size: 2098.8MB - Virtual size: 204.3MB

Size: 19KB - Virtual size: 3224.4MB

F��t P� Size: 4.1MB - Virtual size: 19KB

V���v� Size: 199.4MB - Virtual size: 4.1MB

�������� Size: 3952.0MB - Virtual size: 1390.8MB

�������� Size: 2078.8MB - Virtual size: 3276.8MB

h Size: 1315.2MB - Virtual size: 4096.0MB

��5���� Size: 2052.4MB - Virtual size: 2124.4MB

�������� Size: 2321.8MB - Virtual size: 4063.5MB

�����Pj Size: 64KB - Virtual size: 352.0MB

j Size: 3976.3MB - Virtual size: 2136.8MB

�L Size: 3089.3MB - Virtual size: 3976.3MB

Ƅ� Size: 2320.3MB - Virtual size: 2224.8MB

$ Size: 4095.7MB - Virtual size: 1328.0MB

��@u���� Size: 2096.0MB - Virtual size: 1712.0MB

��P��E Size: 4095.9MB - Virtual size: 2207.0MB

h Size: 1669.1MB - Virtual size: 3848.7MB

Vj Size: 4095.5MB - Virtual size: 430.5MB

�����p� Size: 3240.7MB - Virtual size: 2261.7MB

�X Size: 1272.7MB - Virtual size: 21KB

@�G9O Size: 453.5MB - Virtual size: 1148.4MB

��K Size: 3276.8MB - Virtual size: 3712.0MB

P* Size: 12.4MB - Virtual size: 22KB

�F Size: 2238.8MB - Virtual size: 7KB

�O+�;�| Size: 3512.3MB - Virtual size: 3075.2MB

y��O� Size: 1525.9MB - Virtual size: 222.2MB

�M��� Size: 1504.5MB - Virtual size: 3876.3MB

U����3� Size: 1328.5MB - Virtual size: 455.6MB

�M���I Size: 3331.7MB - Virtual size: 2116.1MB

� Size: 3121.8MB - Virtual size: 2230.0MB

����B3� Size: 1049.0MB - Virtual size: 2239.8MB

���� Size: 544B - Virtual size: 3912.3MB

h Size: 3717.4MB - Virtual size: 2096.0MB

�����W Size: 3912.3MB - Virtual size: 3032.6MB

�g Size: 223B - Virtual size: 3200.0MB

�����P�� Size: 3016.3MB - Virtual size: 4096.0MB

A Size: 3728.0MB - Virtual size: 3904.0MB

���8�A Size: 1112.9MB - Virtual size: 4096.0MB

�����u Size: 3080.3MB - Virtual size: 3772.0MB

��:u� Size: 2096.9MB - Virtual size: 2209.2MB

uǅ���� Size: 2372.0MB - Virtual size: 128KB

u�� Size: 2108.0MB - Virtual size: 1885.2MB

��D�A��E Size: 2209.2MB - Virtual size: 897.0MB

����� Size: 3B - Virtual size: 2140.4MB

�t�P:Q Size: 1885.2MB - Virtual size: 2096.9MB

Size: 929.0MB - Virtual size: 2372.8MB

��u�3�� Size: 2140.4MB - Virtual size: 2108.0MB

��:u� Size: 2096.9MB - Virtual size: 2209.2MB

uǅ���� Size: 2373.3MB - Virtual size: 6B

u���� Size: 2108.0MB - Virtual size: 1885.2MB

.text
Size: 96KB - Virtual size: 95KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 5KB - Virtual size: 16KB

.rsrc
Size: 12KB - Virtual size: 11KB

�E��EW�
Size: 375.3MB - Virtual size: 258.8MB

��i3�_�M
Size: 3109.9MB - Virtual size: 3724.8MB

A
Size: 1664.0MB - Virtual size: 2340.5MB

P�<O
Size: 259KB - Virtual size: 1608.3MB

�O
Size: 1310.8MB - Virtual size: 3276.8MB

�A
Size: 9KB - Virtual size: 2304.9MB

��
Size: 1128.6MB - Virtual size: 3200.7MB

Q�UO
Size: 2098.8MB - Virtual size: 204.3MB

F��t P�
Size: 4.1MB - Virtual size: 19KB

V��v�
Size: 199.4MB - Virtual size: 4.1MB

��
Size: 3952.0MB - Virtual size: 1390.8MB

��
Size: 2078.8MB - Virtual size: 3276.8MB

h
Size: 1315.2MB - Virtual size: 4096.0MB

��5��
Size: 2052.4MB - Virtual size: 2124.4MB

��
Size: 2321.8MB - Virtual size: 4063.5MB

��Pj
Size: 64KB - Virtual size: 352.0MB

j
Size: 3976.3MB - Virtual size: 2136.8MB

�L
Size: 3089.3MB - Virtual size: 3976.3MB

Ƅ�
Size: 2320.3MB - Virtual size: 2224.8MB

$
Size: 4095.7MB - Virtual size: 1328.0MB

��@u��
Size: 2096.0MB - Virtual size: 1712.0MB

��P��E
Size: 4095.9MB - Virtual size: 2207.0MB

h
Size: 1669.1MB - Virtual size: 3848.7MB

Vj
Size: 4095.5MB - Virtual size: 430.5MB

��p�
Size: 3240.7MB - Virtual size: 2261.7MB

�X
Size: 1272.7MB - Virtual size: 21KB

@�G9O
Size: 453.5MB - Virtual size: 1148.4MB

��K
Size: 3276.8MB - Virtual size: 3712.0MB

P*
Size: 12.4MB - Virtual size: 22KB

�F
Size: 2238.8MB - Virtual size: 7KB

�O+�;�|
Size: 3512.3MB - Virtual size: 3075.2MB

y��O�
Size: 1525.9MB - Virtual size: 222.2MB

�M��
Size: 1504.5MB - Virtual size: 3876.3MB

U��3�
Size: 1328.5MB - Virtual size: 455.6MB

�M��I
Size: 3331.7MB - Virtual size: 2116.1MB

�
Size: 3121.8MB - Virtual size: 2230.0MB

��B3�
Size: 1049.0MB - Virtual size: 2239.8MB

��
Size: 544B - Virtual size: 3912.3MB

h
Size: 3717.4MB - Virtual size: 2096.0MB

��W
Size: 3912.3MB - Virtual size: 3032.6MB

�g
Size: 223B - Virtual size: 3200.0MB

��P��
Size: 3016.3MB - Virtual size: 4096.0MB

A
Size: 3728.0MB - Virtual size: 3904.0MB

��8�A
Size: 1112.9MB - Virtual size: 4096.0MB

��u
Size: 3080.3MB - Virtual size: 3772.0MB

��:u�
Size: 2096.9MB - Virtual size: 2209.2MB

uǅ��
Size: 2372.0MB - Virtual size: 128KB

u��
Size: 2108.0MB - Virtual size: 1885.2MB

��D�A��E
Size: 2209.2MB - Virtual size: 897.0MB

��
Size: 3B - Virtual size: 2140.4MB

�t�P:Q
Size: 1885.2MB - Virtual size: 2096.9MB

��u�3��
Size: 2140.4MB - Virtual size: 2108.0MB

��:u�
Size: 2096.9MB - Virtual size: 2209.2MB

uǅ��
Size: 2373.3MB - Virtual size: 6B

u��
Size: 2108.0MB - Virtual size: 1885.2MB

��X�A��E
Size: 2209.2MB - Virtual size: 929.0MB

��
Size: 8B - Virtual size: 2140.4MB

�t�P:Q
Size: 1885.2MB - Virtual size: 2096.9MB

��u�3��
Size: 2140.4MB - Virtual size: 2108.0MB

�:u��
Size: 3080.2MB - Virtual size: 1288.6MB

��ɹ
Size: 2272.0MB - Virtual size: 1088.9MB

�ΉT��
Size: 48.6MB - Virtual size: 4095.9MB

7�эz�
Size: 3442.7MB - Virtual size: 2116.1MB

�A��u�+
Size: 2224.8MB - Virtual size: 228.3MB

C
Size: 1203.6MB - Virtual size: 324.2MB

��
Size: 2136.7MB - Virtual size: 103.9MB

��;C�
Size: 2096.0MB - Virtual size: 4096.0MB

U��E��
Size: 137KB - Virtual size: 1407.1MB

V$+Ѝd$
Size: 1884.6MB - Virtual size: 1032.8MB

U��D
Size: 1391.8MB - Virtual size: 12.3MB

�D ��u
Size: 4063.8MB - Virtual size: 3016.3MB

j\P��I
Size: 3320.7MB - Virtual size: 2128.5MB

��_^�
Size: 1502.3MB - Virtual size: 3283.2MB

�
Size: 2110.8MB - Virtual size: 3276.8MB

�54�A
Size: 3652.3MB - Virtual size: 1285.1MB

�֋E��]�
Size: 3204.3MB - Virtual size: 4095.0MB