E:\Projects\gitlab\ceac2.0_win\bin2\CEAC2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b0b6c276b493767d0fd0376de3a5333f3af2aa18dbd9f4fab488c03d558122fc.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b0b6c276b493767d0fd0376de3a5333f3af2aa18dbd9f4fab488c03d558122fc.exe
Resource
win10v2004-20240508-en
General
-
Target
b0b6c276b493767d0fd0376de3a5333f3af2aa18dbd9f4fab488c03d558122fc
-
Size
6.0MB
-
MD5
e1fe5d6d4ca9b3119f257fddb8191bc9
-
SHA1
d7f3ee983953791acd9c978f5a6558d086ee2214
-
SHA256
b0b6c276b493767d0fd0376de3a5333f3af2aa18dbd9f4fab488c03d558122fc
-
SHA512
e8229cb0943379ef21a68d41ae28df56e470666cbde485716e3fe805d24d77b1f26bfd4dadd22ef5894f8e190e311b4638ede2591ff5ad711ca2bd69baf3d151
-
SSDEEP
98304:sYoSzSFJGU1G3KOEmZJFJD3TgS7HwnKuwFZ/THUlb6euE4cUNqqwquvyqca/vfTs:SngNZXNEfwMduE4cU9FgvfTf0MnCUc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0b6c276b493767d0fd0376de3a5333f3af2aa18dbd9f4fab488c03d558122fc
Files
-
b0b6c276b493767d0fd0376de3a5333f3af2aa18dbd9f4fab488c03d558122fc.exe windows:5 windows x86 arch:x86
e67ebb5132bfc1c59bb08e9d0d008b45
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
crypt32
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CryptStringToBinaryA
CertFindCertificateInStore
CertCompareCertificate
CertDeleteCertificateFromStore
CertAddCertificateContextToStore
CertGetCertificateContextProperty
CertSetCertificateContextProperty
CertFreeCertificateContext
CertCreateCertificateContext
CertDuplicateCertificateContext
CertGetNameStringA
kernel32
FreeEnvironmentStringsW
MoveFileExW
DeleteFileW
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
GetStringTypeW
FatalAppExitA
SetConsoleCtrlHandler
GetTimeZoneInformation
OutputDebugStringW
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
WriteConsoleW
GetEnvironmentStringsW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateFileW
SetEnvironmentVariableA
LockResource
SetConsoleMode
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
FlushConsoleInputBuffer
GlobalMemoryStatus
GetLastError
LoadResource
SizeofResource
lstrlenW
lstrlenA
ReadConsoleW
GetConsoleMode
GetConsoleCP
CreateSemaphoreW
GetStartupInfoW
GetFullPathNameW
TerminateProcess
CreateMutexA
FindResourceW
WideCharToMultiByte
FileTimeToLocalFileTime
FileTimeToSystemTime
MultiByteToWideChar
InterlockedDecrement
GetProcAddress
GetCurrentProcess
ExitProcess
Sleep
GetModuleFileNameA
GetModuleHandleA
DecodePointer
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
FreeLibrary
CloseHandle
GetLocalTime
GetSystemInfo
SystemTimeToFileTime
LoadLibraryA
GetModuleHandleW
CreateDirectoryA
CopyFileA
GetVersionExA
CreateToolhelp32Snapshot
Process32First
Process32Next
InterlockedIncrement
GlobalAlloc
GlobalLock
GlobalUnlock
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
WaitForSingleObject
MapViewOfFile
UnmapViewOfFile
CreateEventW
CreateFileMappingA
CreateProcessA
FindResourceA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFileAttributesA
GetSystemDefaultLangID
GetFileType
WriteFile
ReadFile
SetFilePointer
SetFileTime
DuplicateHandle
DosDateTimeToFileTime
CreateFileA
MulDiv
GetCurrentThreadId
SetThreadPriority
TerminateThread
ResumeThread
FreeResource
GlobalFree
IsDBCSLeadByte
GetACP
SetLastError
FormatMessageA
SleepEx
VerSetConditionMask
GetSystemDirectoryA
QueryPerformanceFrequency
VerifyVersionInfoA
GetTickCount
QueryPerformanceCounter
ExpandEnvironmentStringsA
WaitForMultipleObjects
GetStdHandle
PeekNamedPipe
GetFileSizeEx
GlobalSize
LocalFree
OutputDebugStringA
EncodePointer
GetSystemDirectoryW
GetModuleFileNameW
LoadLibraryExW
GlobalDeleteAtom
lstrcmpW
LoadLibraryW
GlobalAddAtomA
GlobalFindAtomA
GlobalGetAtomNameA
CompareStringA
CreateEventA
SuspendThread
GetCurrentThread
lstrcmpA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentProcessId
DeleteFileA
FindClose
FindFirstFileA
FlushFileBuffers
GetFileSize
GetFullPathNameA
LockFile
SetEndOfFile
UnlockFile
LoadLibraryExA
GetShortPathNameA
lstrcmpiA
MoveFileA
GetVolumeInformationA
GetThreadLocale
GetStringTypeExA
FindNextFileA
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
GetAtomNameA
GlobalFlags
CompareStringW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetOEMCP
GetCPInfo
GetFileAttributesExA
GetFileTime
LocalFileTimeToFileTime
SetFileAttributesA
SetErrorMode
GetWindowsDirectoryA
lstrcpyA
GetTempPathA
GetTempFileNameA
GetProfileIntA
SearchPathA
VirtualProtect
GetDiskFreeSpaceA
ReplaceFileA
GetUserDefaultLCID
FindResourceExW
LocalLock
LocalUnlock
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCommandLineA
AreFileApisANSI
CreateThread
ExitThread
GetFileAttributesExW
SetFilePointerEx
GetFileInformationByHandle
VirtualAlloc
VirtualQuery
GetModuleHandleExW
HeapQueryInformation
SetStdHandle
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
user32
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
CharUpperA
IsDialogMessageA
SetWindowTextA
ScrollWindowEx
SendDlgItemMessageA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
KillTimer
SetTimer
WaitMessage
MapDialogRect
SetWindowContextHelpId
GetWindowThreadProcessId
IsWindowEnabled
GetActiveWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetLastActivePopup
GetTopWindow
GetClassNameA
GetClassLongA
EqualRect
CopyRect
MapWindowPoints
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
GetForegroundWindow
SetActiveWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetCapture
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
GetClassInfoA
GetMessageTime
GetMessagePos
PeekMessageA
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
RemoveMenu
GetWindowDC
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
DrawIcon
GetWindow
AdjustWindowRectEx
GetPropA
SetPropA
GetMenu
SetFocus
GetClassInfoExA
RegisterClassA
CallWindowProcA
PostQuitMessage
GetMessageA
GetWindowRgn
CreateWindowExA
RegisterClassExA
FillRect
InvalidateRgn
EndPaint
BeginPaint
CreateAcceleratorTableA
DefWindowProcA
GetSysColor
GetCaretPos
SetCaretPos
ShowCaret
HideCaret
CreateCaret
DispatchMessageA
TranslateMessage
GetKeyboardLayout
DestroyCursor
CreateMenu
InSendMessage
PostMessageA
SetForegroundWindow
MessageBoxA
GetDesktopWindow
FindWindowA
SystemParametersInfoA
SetWindowRgn
GetUpdateRect
GetKeyState
IsZoomed
IsIconic
ShowOwnedPopups
SetLayeredWindowAttributes
SetWindowLongA
GetWindowLongA
ScreenToClient
GetCursorPos
GetClientRect
ReleaseDC
GetDC
ReleaseCapture
SetCapture
UpdateLayeredWindow
MoveWindow
DestroyWindow
LoadIconW
GetParent
ShowScrollBar
EnableWindow
SendMessageA
SetRect
LoadCursorA
PtInRect
IsRectEmpty
OffsetRect
UnionRect
WindowFromPoint
InflateRect
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetSysColorBrush
RealChildWindowFromPoint
DestroyMenu
GetMenuItemInfoA
CopyImage
DeleteMenu
LoadCursorW
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
GetDialogBaseUnits
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
CreatePopupMenu
IntersectRect
SetRectEmpty
InsertMenuItemA
GetMenuBarInfo
UnpackDDElParam
ReuseDDElParam
RegisterClipboardFormatA
GetMenuDefaultItem
DrawFocusRect
GetTabbedTextExtentW
GetTabbedTextExtentA
AppendMenuA
WindowFromDC
SendNotifyMessageA
SubtractRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
EnumChildWindows
FrameRect
CharUpperBuffA
ModifyMenuA
SetMenuDefaultItem
CopyIcon
ShowWindow
BringWindowToTop
GetDoubleClickTime
SetClassLongA
SetCursorPos
UnregisterClassA
RegisterDeviceNotificationA
UnregisterDeviceNotification
GetUserObjectInformationW
GetProcessWindowStation
RegisterWindowMessageA
SendMessageTimeoutA
DestroyAcceleratorTable
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
IsWindow
SetWindowPos
GetSystemMetrics
UpdateWindow
GetWindowRect
DestroyIcon
InvalidateRect
SetCursor
ClientToScreen
LockWindowUpdate
GetDCEx
MapVirtualKeyExA
IsCharLowerA
GetComboBoxInfo
LoadMenuW
TrackMouseEvent
MonitorFromPoint
IsMenu
DrawFrameControl
DrawEdge
LoadImageW
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
PostThreadMessageA
SetParent
GetSystemMenu
GetKeyNameTextA
MapVirtualKeyA
NotifyWinEvent
InvertRect
EnableScrollBar
GetAsyncKeyState
GetIconInfo
LoadImageA
DrawIconEx
gdi32
GetBitmapBits
DeleteMetaFile
CreateMetaFileA
CloseMetaFile
GetTextFaceA
GetTextExtentPoint32W
GetTextExtentPointA
GetTextAlign
GetStretchBltMode
GetPolyFillMode
GetNearestColor
GetBkMode
GetROP2
SetAbortProc
AbortDoc
EndPage
StartPage
EndDoc
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
GetBoundsRect
FillRgn
SetPaletteEntries
ExtFloodFill
SetPixelV
FrameRgn
RoundRect
GetCurrentObject
CreateRoundRectRgn
OffsetRgn
EnumFontFamiliesExA
Rectangle
Polyline
Polygon
CreatePolygonRgn
Ellipse
CreateEllipticRgn
SetDIBColorTable
StretchBlt
SetPixel
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
StretchDIBits
GetCharWidthA
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
GetTextMetricsA
GetRgnBox
GetTextColor
GetBkColor
GetTextExtentPoint32A
DPtoLP
SetRectRgn
PatBlt
GetMapMode
CreateRectRgnIndirect
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
PolylineTo
PolyBezierTo
ExtTextOutA
TextOutA
MoveToEx
ExtCreatePen
SetArcDirection
SelectClipPath
PolyDraw
ArcTo
StartDocA
SetColorAdjustment
ModifyWorldTransform
SetWorldTransform
EnumMetaFile
PlayMetaFileRecord
SetTextJustification
SetTextAlign
SetTextCharacterExtra
SetStretchBltMode
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetGraphicsMode
SetMapperFlags
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
PlayMetaFile
OffsetClipRgn
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetCurrentPositionEx
GetClipRgn
GetClipBox
ExcludeClipRect
Escape
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateDIBPatternBrushPt
SetTextColor
SetBkColor
CreateBitmap
CopyMetaFileA
SelectObject
PtInRegion
DeleteObject
GetStockObject
CreateRectRgn
CreateFontIndirectA
CombineRgn
GetObjectA
CreateDIBSection
GetDIBits
GetDeviceCaps
DeleteDC
CreateDCA
CreateSolidBrush
CreateFontA
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
msimg32
AlphaBlend
TransparentBlt
winspool.drv
GetJobA
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
GetFileSecurityA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegOpenKeyA
RegEnumValueW
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptEncrypt
RegSetValueA
ReportEventA
RegisterEventSourceA
DeregisterEventSource
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegQueryValueA
RegCloseKey
SetFileSecurityA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExW
shell32
SHGetSpecialFolderLocation
ord680
ShellExecuteExA
SHGetSpecialFolderPathA
Shell_NotifyIconA
SHGetFolderPathA
ExtractAssociatedIconA
DragQueryFileA
DragQueryPoint
DragAcceptFiles
SHGetFileInfoA
SHAppBarMessage
SHBrowseForFolderA
SHGetMalloc
SHGetDesktopFolder
ShellExecuteA
SHGetPathFromIDListA
DragFinish
ExtractIconA
SHAddToRecentDocs
comctl32
_TrackMouseEvent
shlwapi
PathCanonicalizeA
StrChrA
StrToIntA
PathIsDirectoryA
PathFindExtensionA
PathFindFileNameA
PathRemoveExtensionA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
StrFormatKBSizeA
uxtheme
GetWindowTheme
GetThemeSysColor
IsAppThemed
GetThemePartSize
GetCurrentThemeName
GetThemeColor
CloseThemeData
OpenThemeData
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
DrawThemeText
ole32
StringFromGUID2
CoDisconnectObject
OleRegGetMiscStatus
OleRegEnumVerbs
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
OleRun
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
DoDragDrop
OleSetMenuDescriptor
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
CreateFileMoniker
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CreateGenericComposite
CreateItemMoniker
WriteClassStm
OleCreate
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleLoad
OleSave
OleSaveToStream
OleSetContainedObject
OleGetIconOfClass
GetHGlobalFromILockBytes
CreateOleAdviseHolder
CreateDataAdviseHolder
GetRunningObjectTable
CoInitializeEx
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
WriteClassStg
ReadClassStg
CreateBindCtx
CoTreatAsClass
CoTaskMemFree
CoTaskMemAlloc
OleLockRunning
CLSIDFromProgID
StringFromCLSID
CoGetMalloc
CreateStreamOnHGlobal
CoUninitialize
CoCreateGuid
CLSIDFromString
CoCreateInstance
CoInitialize
OleIsRunning
OleQueryCreateFromData
OleQueryLinkFromData
PropVariantCopy
oleaut32
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayUnaccessData
SafeArrayDestroyDescriptor
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VarDateFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VariantTimeToSystemTime
VarDecFromStr
OleCreateFontIndirect
SafeArrayCreate
SafeArrayAllocData
SafeArrayGetElement
SafeArrayAllocDescriptor
GetErrorInfo
SetErrorInfo
CreateErrorInfo
SysStringLen
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
VariantChangeType
SysAllocStringLen
VariantCopy
VariantClear
VariantInit
SafeArrayAccessData
SysAllocStringByteLen
SysStringByteLen
SysAllocString
SystemTimeToVariantTime
VarBstrFromDec
SysFreeString
SysReAllocStringLen
oledlg
ord8
ws2_32
shutdown
gethostbyname
inet_ntoa
inet_addr
ntohl
gethostname
ioctlsocket
sendto
recvfrom
freeaddrinfo
getaddrinfo
socket
setsockopt
ntohs
getsockopt
getsockname
getpeername
connect
WSASetLastError
select
__WSAFDIsSet
send
WSASocketA
WSAIoctl
WSAAsyncSelect
WSAGetLastError
recv
listen
htons
htonl
closesocket
bind
accept
WSACleanup
WSAStartup
cryptui
CryptUIDlgViewContext
gdiplus
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStreamICM
GdipCreateHBITMAPFromBitmap
GdipCreateHICONFromBitmap
GdipGetFontStyle
GdipGetFontSize
GdipGetFontHeightGivenDPI
GdipCreatePen1
GdipDeletePen
GdipSetPenDashStyle
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipDrawRectangle
GdipGraphicsClear
GdipSetPenWidth
GdipSetPenColor
GdipDrawLineI
GdipDrawRectanglesI
GdipAddPathEllipseI
GdipSetSmoothingMode
GdipDrawImageRectI
GdipSetClipPath
GdipCreateTexture
GdipFillRectangle
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipGetFamily
GdipLoadImageFromStream
GdipGetPathWorldBounds
GdiplusStartup
GdiplusShutdown
GdipGetImageWidth
GdipGetImageHeight
GdipAlloc
GdipFree
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetTextRenderingHint
GdipFillRectangleI
GdipDrawImageRectRect
GdipDrawImageRectRectI
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipCreateFont
GdipDeleteFont
GdipDrawString
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipSetSolidFillColor
GdipCreatePath
GdipDeletePath
GdipAddPathString
winmm
timeKillEvent
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
PlaySoundA
timeSetEvent
imm32
ImmGetDescriptionA
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
ImmGetOpenStatus
ImmIsIME
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 4.7MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 949KB - Virtual size: 948KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 301KB - Virtual size: 301KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ