esent.pdb
Static task
static1
Behavioral task
behavioral1
Sample
esent.dll
Resource
win10v2004-20240226-en
General
-
Target
esent.dll
-
Size
2.7MB
-
MD5
adbbbc2334eccfd37fbb8004d9a0c628
-
SHA1
c5c9bf3c89492c97f6d9332e4fa43bbbadef9ada
-
SHA256
7e5d29f34f8872aa17a355440577e46cfc8697fc18f8eb529d88a16271d21be7
-
SHA512
18c0a5e802ff83cf52706e465d0fa05e85fc6ca3b4cd8cc4fa641fc702ae05314188a279126cae5b5aff05b0a5d5a06f584eb1c36e310ad2e4fd1d8a673851ae
-
SSDEEP
49152:GpAdRkEskrB0czC+nG/5VipgOHIO42NExeXGv8+8g+nS+4ZZ2xgg6dDhnc/bNS:tdzC7ziyOoANEaGU+8g+ShZ2xgg6dNnP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource esent.dll
Files
-
esent.dll.dll windows:10 windows x86 arch:x86
a82c41331bc17081c9dd5bfe946f21fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_wtoi64
_wcstoi64
_wfullpath
time
wcspbrk
wcsrchr
_wmakepath_s
iswalpha
wcstok_s
iscntrl
iswprint
strcspn
_wsplitpath_s
strrchr
qsort
sprintf_s
strncmp
strpbrk
swprintf_s
strtoul
_except_handler4_common
_lock
_unlock
isupper
modf
_vsnwprintf
strstr
wcsncmp
_wcsnicmp
wprintf
_itoa_s
isprint
_vsnprintf
vprintf
fclose
fflush
fprintf
__dllonexit
_wfopen_s
wcsstr
wcstol
_wcstoui64
wcscspn
wcschr
_snprintf_s
memcpy_s
_strnicmp
_ultoa_s
_stricmp
swscanf_s
strchr
_onexit
_amsg_exit
_initterm
memmove
malloc
free
memcpy
memcmp
strtok_s
__iob_func
bsearch
rand_s
printf
rand
_wtol
_purecall
_wcsicmp
_ftol2
_ftol2_sse
memset
ntdll
RtlCaptureStackBackTrace
api-ms-win-core-processthreads-l1-1-0
CreateThread
TerminateProcess
ResumeThread
GetCurrentThread
TlsGetValue
SetThreadPriority
CreateProcessW
TlsFree
TlsSetValue
TlsAlloc
GetCurrentThreadId
GetCurrentProcess
GetExitCodeThread
GetCurrentProcessId
SetThreadPriorityBoost
api-ms-win-core-libraryloader-l1-2-0
GetProcAddress
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
GetModuleHandleExW
DisableThreadLibraryCalls
FreeLibrary
api-ms-win-core-heap-l1-1-0
GetProcessHeap
HeapSetInformation
HeapAlloc
HeapFree
HeapDestroy
api-ms-win-core-errorhandling-l1-1-0
GetLastError
SetUnhandledExceptionFilter
SetLastError
UnhandledExceptionFilter
api-ms-win-core-sysinfo-l1-2-0
GetNativeSystemInfo
api-ms-win-core-sysinfo-l1-1-0
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemTime
GlobalMemoryStatusEx
GetWindowsDirectoryW
GetSystemWindowsDirectoryW
GetLocalTime
GetTickCount
GetVersionExW
api-ms-win-core-memory-l1-1-0
VirtualProtect
CreateFileMappingW
VirtualQueryEx
VirtualFree
VirtualAlloc
MapViewOfFileEx
UnmapViewOfFile
OpenFileMappingW
MapViewOfFile
api-ms-win-core-memory-l1-1-1
QueryMemoryResourceNotification
VirtualUnlock
CreateMemoryResourceNotification
api-ms-win-core-handle-l1-1-0
DuplicateHandle
CloseHandle
SetHandleInformation
api-ms-win-core-heap-l2-1-0
LocalFree
LocalAlloc
api-ms-win-core-file-l1-1-0
GetFileAttributesExW
GetFileInformationByHandle
CreateDirectoryW
RemoveDirectoryW
SetFilePointerEx
ReadFileScatter
SetFileValidData
SetFileInformationByHandle
WriteFile
GetDiskFreeSpaceExW
CreateFileW
GetVolumePathNameW
DeleteFileW
GetFileSizeEx
FindFirstFileW
WriteFileGather
GetFileAttributesW
FindClose
FindNextFileW
GetDriveTypeW
ReadFile
FlushFileBuffers
SetEndOfFile
api-ms-win-core-synch-l1-1-0
ReleaseMutex
SetEvent
CreateMutexW
ReleaseSemaphore
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SleepEx
LeaveCriticalSection
AcquireSRWLockExclusive
EnterCriticalSection
ReleaseSRWLockExclusive
WaitForSingleObjectEx
OpenMutexW
WaitForSingleObject
OpenEventW
WaitForMultipleObjectsEx
ResetEvent
CreateEventW
api-ms-win-core-io-l1-1-0
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
GetOverlappedResult
DeviceIoControl
api-ms-win-core-string-l1-1-0
MultiByteToWideChar
WideCharToMultiByte
api-ms-win-core-debug-l1-1-0
DebugBreak
OutputDebugStringA
api-ms-win-core-localization-l1-2-0
LCMapStringEx
LCMapStringW
LocaleNameToLCID
GetLocaleInfoEx
GetLocaleInfoW
FormatMessageW
api-ms-win-core-synch-l1-2-0
WakeAllConditionVariable
SleepConditionVariableSRW
Sleep
api-ms-win-core-processthreads-l1-1-1
IsProcessorFeaturePresent
api-ms-win-core-console-l1-1-0
SetConsoleCtrlHandler
api-ms-win-core-profile-l1-1-0
QueryPerformanceFrequency
QueryPerformanceCounter
api-ms-win-core-timezone-l1-1-0
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
api-ms-win-core-datetime-l1-1-0
GetDateFormatW
GetTimeFormatW
api-ms-win-core-file-l1-2-0
GetVolumeNameForVolumeMountPointW
api-ms-win-core-file-l2-1-0
MoveFileExW
CopyFileExW
api-ms-win-core-processenvironment-l1-1-0
GetStdHandle
api-ms-win-core-console-l2-1-0
GetConsoleScreenBufferInfo
api-ms-win-core-errorhandling-l1-1-3
SetThreadErrorMode
api-ms-win-core-localization-l1-2-2
LCIDToLocaleName
api-ms-win-eventing-provider-l1-1-0
EventRegister
EventUnregister
EventWriteTransfer
api-ms-win-core-privateprofile-l1-1-0
GetProfileStringW
api-ms-win-core-processtopology-obsolete-l1-1-0
GetProcessAffinityMask
api-ms-win-core-kernel32-legacy-l1-1-0
RegisterWaitForSingleObject
GetSystemPowerStatus
api-ms-win-core-threadpool-legacy-l1-1-0
CreateTimerQueue
DeleteTimerQueueTimer
CreateTimerQueueTimer
UnregisterWaitEx
DeleteTimerQueueEx
api-ms-win-core-windowserrorreporting-l1-1-0
WerRegisterMemoryBlock
api-ms-win-core-delayload-l1-1-1
ResolveDelayLoadedAPI
api-ms-win-core-delayload-l1-1-0
DelayLoadFailureHook
Exports
Exports
DebugExtensionInitialize
DebugExtensionInitialize@8
DebugExtensionNotify
DebugExtensionNotify@12
DebugExtensionUninitialize
DebugExtensionUninitialize@0
JetAddColumn
JetAddColumnA
JetAddColumnA@28
JetAddColumnW
JetAddColumnW@28
JetAttachDatabase
JetAttachDatabase2
JetAttachDatabase2A
JetAttachDatabase2A@16
JetAttachDatabase2W
JetAttachDatabase2W@16
JetAttachDatabase3
JetAttachDatabase3A
JetAttachDatabase3A@20
JetAttachDatabase3W
JetAttachDatabase3W@20
JetAttachDatabaseA
JetAttachDatabaseA@12
JetAttachDatabaseW
JetAttachDatabaseW@12
JetAttachDatabaseWithStreaming
JetAttachDatabaseWithStreamingA
JetAttachDatabaseWithStreamingA@24
JetAttachDatabaseWithStreamingW
JetAttachDatabaseWithStreamingW@24
JetBackup
JetBackupA
JetBackupA@12
JetBackupInstance
JetBackupInstanceA
JetBackupInstanceA@16
JetBackupInstanceW
JetBackupInstanceW@16
JetBackupW
JetBackupW@12
JetBeginDatabaseIncrementalReseed
JetBeginDatabaseIncrementalReseedA
JetBeginDatabaseIncrementalReseedA@12
JetBeginDatabaseIncrementalReseedW
JetBeginDatabaseIncrementalReseedW@12
JetBeginExternalBackup
JetBeginExternalBackup@4
JetBeginExternalBackupInstance
JetBeginExternalBackupInstance@8
JetBeginSession
JetBeginSessionA
JetBeginSessionA@16
JetBeginSessionW
JetBeginSessionW@16
JetBeginSurrogateBackup
JetBeginSurrogateBackup@16
JetBeginTransaction
JetBeginTransaction2
JetBeginTransaction2@8
JetBeginTransaction3
JetBeginTransaction3@16
JetBeginTransaction@4
JetCloseDatabase
JetCloseDatabase@12
JetCloseFile
JetCloseFile@4
JetCloseFileInstance
JetCloseFileInstance@8
JetCloseTable
JetCloseTable@8
JetCommitTransaction
JetCommitTransaction2
JetCommitTransaction2@16
JetCommitTransaction@8
JetCompact
JetCompactA
JetCompactA@24
JetCompactW
JetCompactW@24
JetComputeStats
JetComputeStats@8
JetConfigureProcessForCrashDump
JetConfigureProcessForCrashDump@4
JetConsumeLogData
JetConsumeLogData@20
JetConvertDDL
JetConvertDDLA
JetConvertDDLA@20
JetConvertDDLW
JetConvertDDLW@20
JetCreateDatabase
JetCreateDatabase2
JetCreateDatabase2A
JetCreateDatabase2A@20
JetCreateDatabase2W
JetCreateDatabase2W@20
JetCreateDatabase3
JetCreateDatabase3A
JetCreateDatabase3A@24
JetCreateDatabase3W
JetCreateDatabase3W@24
JetCreateDatabaseA
JetCreateDatabaseA@20
JetCreateDatabaseW
JetCreateDatabaseW@20
JetCreateDatabaseWithStreaming
JetCreateDatabaseWithStreamingA
JetCreateDatabaseWithStreamingA@28
JetCreateDatabaseWithStreamingW
JetCreateDatabaseWithStreamingW@28
JetCreateEncryptionKey
JetCreateEncryptionKey@16
JetCreateIndex
JetCreateIndex2
JetCreateIndex2A
JetCreateIndex2A@16
JetCreateIndex2W
JetCreateIndex2W@16
JetCreateIndex3A
JetCreateIndex3W
JetCreateIndex4A
JetCreateIndex4W
JetCreateIndexA
JetCreateIndexA@28
JetCreateIndexW
JetCreateIndexW@28
JetCreateInstance
JetCreateInstance2
JetCreateInstance2A
JetCreateInstance2A@16
JetCreateInstance2W
JetCreateInstance2W@16
JetCreateInstanceA
JetCreateInstanceA@8
JetCreateInstanceW
JetCreateInstanceW@8
JetCreateTable
JetCreateTableA
JetCreateTableA@24
JetCreateTableColumnIndex
JetCreateTableColumnIndex2
JetCreateTableColumnIndex2A
JetCreateTableColumnIndex2A@12
JetCreateTableColumnIndex2W
JetCreateTableColumnIndex2W@12
JetCreateTableColumnIndex3A
JetCreateTableColumnIndex3A@12
JetCreateTableColumnIndex3W
JetCreateTableColumnIndex3W@12
JetCreateTableColumnIndex4A
JetCreateTableColumnIndex4A@12
JetCreateTableColumnIndex4W
JetCreateTableColumnIndex4W@12
JetCreateTableColumnIndex5A
JetCreateTableColumnIndex5A@12
JetCreateTableColumnIndex5W
JetCreateTableColumnIndex5W@12
JetCreateTableColumnIndexA
JetCreateTableColumnIndexA@12
JetCreateTableColumnIndexW
JetCreateTableColumnIndexW@12
JetCreateTableW
JetCreateTableW@24
JetDBUtilities
JetDBUtilitiesA
JetDBUtilitiesA@4
JetDBUtilitiesW
JetDBUtilitiesW@4
JetDatabaseScan
JetDatabaseScan@24
JetDefragment
JetDefragment2
JetDefragment2A
JetDefragment2A@28
JetDefragment2W
JetDefragment2W@28
JetDefragment3
JetDefragment3A
JetDefragment3A@32
JetDefragment3W
JetDefragment3W@32
JetDefragmentA
JetDefragmentA@24
JetDefragmentW
JetDefragmentW@24
JetDelete
JetDelete@8
JetDeleteColumn
JetDeleteColumn2
JetDeleteColumn2A
JetDeleteColumn2A@16
JetDeleteColumn2W
JetDeleteColumn2W@16
JetDeleteColumnA
JetDeleteColumnA@12
JetDeleteColumnW
JetDeleteColumnW@12
JetDeleteIndex
JetDeleteIndexA
JetDeleteIndexA@12
JetDeleteIndexW
JetDeleteIndexW@12
JetDeleteTable
JetDeleteTableA
JetDeleteTableA@12
JetDeleteTableW
JetDeleteTableW@12
JetDetachDatabase
JetDetachDatabase2
JetDetachDatabase2A
JetDetachDatabase2A@12
JetDetachDatabase2W
JetDetachDatabase2W@12
JetDetachDatabaseA
JetDetachDatabaseA@8
JetDetachDatabaseW
JetDetachDatabaseW@8
JetDupCursor
JetDupCursor@16
JetDupSession
JetDupSession@8
JetEnableMultiInstance
JetEnableMultiInstanceA
JetEnableMultiInstanceA@12
JetEnableMultiInstanceW
JetEnableMultiInstanceW@12
JetEndDatabaseIncrementalReseed
JetEndDatabaseIncrementalReseedA
JetEndDatabaseIncrementalReseedA@24
JetEndDatabaseIncrementalReseedW
JetEndDatabaseIncrementalReseedW@24
JetEndExternalBackup
JetEndExternalBackup@0
JetEndExternalBackupInstance
JetEndExternalBackupInstance2
JetEndExternalBackupInstance2@8
JetEndExternalBackupInstance@4
JetEndSession
JetEndSession@8
JetEndSurrogateBackup
JetEndSurrogateBackup@8
JetEnumerateColumns
JetEnumerateColumns@40
JetEscrowUpdate
JetEscrowUpdate@36
JetExternalRestore
JetExternalRestore2
JetExternalRestore2A
JetExternalRestore2A@40
JetExternalRestore2W
JetExternalRestore2W@40
JetExternalRestoreA
JetExternalRestoreA@32
JetExternalRestoreW
JetExternalRestoreW@32
JetFreeBuffer
JetFreeBuffer@4
JetGetAttachInfo
JetGetAttachInfoA
JetGetAttachInfoA@12
JetGetAttachInfoInstance
JetGetAttachInfoInstanceA
JetGetAttachInfoInstanceA@16
JetGetAttachInfoInstanceW
JetGetAttachInfoInstanceW@16
JetGetAttachInfoW
JetGetAttachInfoW@12
JetGetBookmark
JetGetBookmark@20
JetGetColumnInfo
JetGetColumnInfoA
JetGetColumnInfoA@28
JetGetColumnInfoW
JetGetColumnInfoW@28
JetGetCounter
JetGetCounter@12
JetGetCurrentIndex
JetGetCurrentIndexA
JetGetCurrentIndexA@16
JetGetCurrentIndexW
JetGetCurrentIndexW@16
JetGetCursorInfo
JetGetCursorInfo@20
JetGetDatabaseFileInfo
JetGetDatabaseFileInfoA
JetGetDatabaseFileInfoA@16
JetGetDatabaseFileInfoW
JetGetDatabaseFileInfoW@16
JetGetDatabaseInfo
JetGetDatabaseInfoA
JetGetDatabaseInfoA@20
JetGetDatabaseInfoW
JetGetDatabaseInfoW@20
JetGetDatabasePages
JetGetDatabasePages@32
JetGetErrorInfoW
JetGetErrorInfoW@20
JetGetIndexInfo
JetGetIndexInfoA
JetGetIndexInfoA@28
JetGetIndexInfoW
JetGetIndexInfoW@28
JetGetInstanceInfo
JetGetInstanceInfoA
JetGetInstanceInfoA@8
JetGetInstanceInfoW
JetGetInstanceInfoW@8
JetGetInstanceMiscInfo
JetGetInstanceMiscInfo@16
JetGetLS
JetGetLS@16
JetGetLock
JetGetLock@12
JetGetLogFileInfo
JetGetLogFileInfoA
JetGetLogFileInfoA@16
JetGetLogFileInfoW
JetGetLogFileInfoW@16
JetGetLogInfo
JetGetLogInfoA
JetGetLogInfoA@12
JetGetLogInfoInstance
JetGetLogInfoInstance2
JetGetLogInfoInstance2A
JetGetLogInfoInstance2A@20
JetGetLogInfoInstance2W
JetGetLogInfoInstance2W@20
JetGetLogInfoInstanceA
JetGetLogInfoInstanceA@16
JetGetLogInfoInstanceW
JetGetLogInfoInstanceW@16
JetGetLogInfoW
JetGetLogInfoW@12
JetGetMaxDatabaseSize
JetGetMaxDatabaseSize@16
JetGetObjectInfo
JetGetObjectInfoA
JetGetObjectInfoA@32
JetGetObjectInfoW
JetGetObjectInfoW@32
JetGetPageInfo
JetGetPageInfo2
JetGetPageInfo2@24
JetGetPageInfo@24
JetGetRecordPosition
JetGetRecordPosition@16
JetGetRecordSize
JetGetRecordSize2
JetGetRecordSize2@16
JetGetRecordSize@16
JetGetResourceParam
JetGetResourceParam@16
JetGetSecondaryIndexBookmark
JetGetSecondaryIndexBookmark@36
JetGetSessionInfo
JetGetSessionInfo@16
JetGetSessionParameter
JetGetSessionParameter@20
JetGetSystemParameter
JetGetSystemParameterA
JetGetSystemParameterA@24
JetGetSystemParameterW
JetGetSystemParameterW@24
JetGetTableColumnInfo
JetGetTableColumnInfoA
JetGetTableColumnInfoA@24
JetGetTableColumnInfoW
JetGetTableColumnInfoW@24
JetGetTableIndexInfo
JetGetTableIndexInfoA
JetGetTableIndexInfoA@24
JetGetTableIndexInfoW
JetGetTableIndexInfoW@24
JetGetTableInfo
JetGetTableInfoA
JetGetTableInfoA@20
JetGetTableInfoW
JetGetTableInfoW@20
JetGetThreadStats
JetGetThreadStats@8
JetGetTruncateLogInfoInstance
JetGetTruncateLogInfoInstanceA
JetGetTruncateLogInfoInstanceA@16
JetGetTruncateLogInfoInstanceW
JetGetTruncateLogInfoInstanceW@16
JetGetVersion
JetGetVersion@8
JetGotoBookmark
JetGotoBookmark@16
JetGotoPosition
JetGotoPosition@12
JetGotoSecondaryIndexBookmark
JetGotoSecondaryIndexBookmark@28
JetGrowDatabase
JetGrowDatabase@16
JetIdle
JetIdle@8
JetIndexRecordCount
JetIndexRecordCount2
JetIndexRecordCount2@20
JetIndexRecordCount@16
JetInit
JetInit2
JetInit2@8
JetInit3
JetInit3A
JetInit3A@12
JetInit3W
JetInit3W@12
JetInit4
JetInit4A
JetInit4A@12
JetInit4W
JetInit4W@12
JetInit@4
JetIntersectIndexes
JetIntersectIndexes@20
JetMakeKey
JetMakeKey@20
JetMove
JetMove@16
JetOSSnapshotAbort
JetOSSnapshotAbort@8
JetOSSnapshotEnd
JetOSSnapshotEnd@8
JetOSSnapshotFreeze
JetOSSnapshotFreezeA
JetOSSnapshotFreezeA@16
JetOSSnapshotFreezeW
JetOSSnapshotFreezeW@16
JetOSSnapshotGetFreezeInfo
JetOSSnapshotGetFreezeInfoA
JetOSSnapshotGetFreezeInfoA@16
JetOSSnapshotGetFreezeInfoW
JetOSSnapshotGetFreezeInfoW@16
JetOSSnapshotPrepare
JetOSSnapshotPrepare@8
JetOSSnapshotPrepareInstance
JetOSSnapshotPrepareInstance@12
JetOSSnapshotThaw
JetOSSnapshotThaw@8
JetOSSnapshotTruncateLog
JetOSSnapshotTruncateLog@8
JetOSSnapshotTruncateLogInstance
JetOSSnapshotTruncateLogInstance@12
JetOnlinePatchDatabasePage
JetOnlinePatchDatabasePage@32
JetOpenDatabase
JetOpenDatabaseA
JetOpenDatabaseA@20
JetOpenDatabaseW
JetOpenDatabaseW@20
JetOpenFile
JetOpenFileA
JetOpenFileA@16
JetOpenFileInstance
JetOpenFileInstanceA
JetOpenFileInstanceA@20
JetOpenFileInstanceW
JetOpenFileInstanceW@20
JetOpenFileSectionInstance
JetOpenFileSectionInstanceA
JetOpenFileSectionInstanceA@36
JetOpenFileSectionInstanceW
JetOpenFileSectionInstanceW@36
JetOpenFileW
JetOpenFileW@16
JetOpenTable
JetOpenTableA
JetOpenTableA@28
JetOpenTableW
JetOpenTableW@28
JetOpenTempTable
JetOpenTempTable2
JetOpenTempTable2@28
JetOpenTempTable3
JetOpenTempTable3@28
JetOpenTempTable@24
JetOpenTemporaryTable
JetOpenTemporaryTable2
JetOpenTemporaryTable2@8
JetOpenTemporaryTable@8
JetPatchDatabasePages
JetPatchDatabasePagesA
JetPatchDatabasePagesA@28
JetPatchDatabasePagesW
JetPatchDatabasePagesW@28
JetPrepareToCommitTransaction
JetPrepareToCommitTransaction@16
JetPrepareUpdate
JetPrepareUpdate@12
JetPrereadColumnsByReference
JetPrereadColumnsByReference@36
JetPrereadIndexRange
JetPrereadIndexRange@28
JetPrereadIndexRanges
JetPrereadIndexRanges@32
JetPrereadKeys
JetPrereadKeys@28
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.didat Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cachelin Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ