E:\MyProg\vcpkg\buildtrees\apr\x86-windows-rel\libapr-1.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ca59f5a1a02a8bf4b05cf3852b83a3688322ae93ecd3e738c295633c015bc6fa.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ca59f5a1a02a8bf4b05cf3852b83a3688322ae93ecd3e738c295633c015bc6fa.dll
Resource
win10v2004-20240508-en
General
-
Target
ca59f5a1a02a8bf4b05cf3852b83a3688322ae93ecd3e738c295633c015bc6fa
-
Size
159KB
-
MD5
97294243b5c4c88a364ff0ba3be59545
-
SHA1
e0197d2c39d852547208d4f41a1f64bc9fa14ccb
-
SHA256
ca59f5a1a02a8bf4b05cf3852b83a3688322ae93ecd3e738c295633c015bc6fa
-
SHA512
3c1f9972ca16761751c2063c17efbe4dd92f1cd40f64016e991e49869b3b007a346c104fbd3938d010d340f868675d882c668e2fb60f548c38203174f89b0190
-
SSDEEP
3072:uT2i45qdt/VeFo3fzfbe2r8HlXLqHWBDsQ8cNCpg+BCbAIRUsA:uyedBvLRYHxLwWBDsQ8cNCpKbAIjA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca59f5a1a02a8bf4b05cf3852b83a3688322ae93ecd3e738c295633c015bc6fa
Files
-
ca59f5a1a02a8bf4b05cf3852b83a3688322ae93ecd3e738c295633c015bc6fa.dll windows:6 windows x86 arch:x86
03a931b186c9a4fd3252c6b03122800f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ws2_32
getservbyname
ntohs
ntohl
getaddrinfo
htonl
getpeername
setsockopt
WSACleanup
WSAStartup
WSAGetLastError
socket
shutdown
send
select
freeaddrinfo
getnameinfo
recvfrom
sendto
WSAGetOverlappedResult
WSARecv
WSASend
__WSAFDIsSet
getsockopt
gethostname
bind
htons
closesocket
connect
ioctlsocket
getsockname
inet_addr
listen
recv
accept
mswsock
TransmitFile
rpcrt4
UuidCreate
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetLastError
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryExW
CreateDirectoryW
FindClose
FindFirstFileW
FindNextFileW
RemoveDirectoryW
CloseHandle
DuplicateHandle
GetCurrentProcess
FindFirstFileA
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetFileSizeEx
GetFileType
GetFileTime
GetFullPathNameW
SetFileAttributesW
SetFileTime
SetLastError
LocalFree
SetCurrentDirectoryW
GetCurrentDirectoryW
GetDriveTypeA
GetDriveTypeW
LockFile
LockFileEx
UnlockFile
UnlockFileEx
Sleep
DisableThreadLibraryCalls
SetStdHandle
CreateFileW
DeleteFileW
SetFilePointer
DeviceIoControl
GetOverlappedResult
CancelIo
WaitForSingleObject
MoveFileExW
CreateHardLinkW
CreateFileA
CreatePipe
CreateEventA
CreateNamedPipeA
FlushFileBuffers
ReadFile
WriteFile
PeekNamedPipe
SetEndOfFile
ReleaseMutex
CreateMutexW
OpenMutexW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseSemaphore
CreateSemaphoreA
TryEnterCriticalSection
SetEvent
CreateMutexA
ResetEvent
FormatMessageA
GetExitCodeProcess
GetACP
GetLocaleInfoA
GetThreadLocale
GetEnvironmentVariableW
SetEnvironmentVariableW
GetCurrentProcessId
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
GetVersionExA
GetModuleFileNameA
LoadLibraryA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
TlsFree
GlobalFree
GetSystemInfo
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
SetHandleInformation
GetCurrentThread
CreateFileMappingW
OpenFileMappingW
GetHandleInformation
WaitForMultipleObjects
InitializeSListHead
OpenProcess
TerminateProcess
SwitchToThread
GetSystemTimeAsFileTime
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
ExpandEnvironmentStringsW
GetStdHandle
CreateProcessW
shell32
CommandLineToArgvW
advapi32
AllocateAndInitializeSid
FreeSid
GetEffectiveRightsFromAclW
GetNamedSecurityInfoA
GetNamedSecurityInfoW
GetSecurityInfo
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
OpenProcessToken
RegQueryValueExW
RegOpenKeyExA
RegCloseKey
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
GetSidIdentifierAuthority
LookupAccountNameA
LookupAccountSidA
IsValidSid
EqualSid
LogonUserW
SetSecurityDescriptorDacl
RevertToSelf
InitializeSecurityDescriptor
ImpersonateLoggedOnUser
DuplicateTokenEx
CreateProcessAsUserW
LookupPrivilegeValueA
PrivilegeCheck
OpenThreadToken
vcruntime140
__std_type_info_destroy_list
_except_handler4_common
memchr
memmove
memset
wcschr
strrchr
memcpy
strchr
api-ms-win-crt-string-l1-1-0
isupper
isalpha
_stricmp
_strnicmp
islower
tolower
isspace
iscntrl
wcsncmp
toupper
isdigit
isxdigit
strncmp
api-ms-win-crt-utility-l1-1-0
rand
srand
api-ms-win-crt-stdio-l1-1-0
fflush
fputc
__stdio_common_vsprintf
__stdio_common_vfprintf
__acrt_iob_func
_setmode
_open_osfhandle
_isatty
_get_osfhandle
_dup2
_commit
_close
setvbuf
fputs
api-ms-win-crt-heap-l1-1-0
free
malloc
realloc
calloc
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_crt_atexit
strerror
_execute_onexit_table
_initterm
exit
_configure_narrow_argv
_getpid
_initterm_e
_cexit
_initialize_onexit_table
_errno
_register_onexit_function
_endthreadex
__doserrno
_beginthreadex
_seh_filter_dll
api-ms-win-crt-convert-l1-1-0
strtol
_strtoi64
atoi
api-ms-win-crt-environment-l1-1-0
getenv
__p__environ
__p__wenviron
api-ms-win-crt-conio-l1-1-0
_getch
api-ms-win-crt-math-l1-1-0
modf
api-ms-win-crt-time-l1-1-0
strftime
Exports
Exports
_apr_allocator_align@8
_apr_allocator_alloc@8
_apr_allocator_create@4
_apr_allocator_destroy@4
_apr_allocator_free@8
_apr_allocator_max_free_set@8
_apr_allocator_mutex_get@4
_apr_allocator_mutex_set@8
_apr_allocator_owner_get@4
_apr_allocator_owner_set@8
_apr_app_initialize@12
_apr_array_append@12
_apr_array_cat@8
_apr_array_clear@4
_apr_array_copy@8
_apr_array_copy_hdr@8
_apr_array_make@12
_apr_array_pop@4
_apr_array_pstrcat@12
_apr_array_push@4
_apr_atoi64@4
_apr_atomic_add32@8
_apr_atomic_cas32@12
_apr_atomic_casptr@12
_apr_atomic_dec32@4
_apr_atomic_inc32@4
_apr_atomic_init@4
_apr_atomic_read32@4
_apr_atomic_set32@8
_apr_atomic_sub32@8
_apr_atomic_xchg32@8
_apr_atomic_xchgptr@8
_apr_collapse_spaces@8
_apr_conv_ucs2_to_utf8@16
_apr_conv_utf8_to_ucs2@16
_apr_cpystrn@12
_apr_crypto_sha256_new@4
_apr_cstr_atoi64@8
_apr_cstr_atoi@8
_apr_cstr_atoui64@8
_apr_cstr_atoui@8
_apr_cstr_casecmp@8
_apr_cstr_casecmpn@12
_apr_cstr_count_newlines@4
_apr_cstr_match_glob_list@8
_apr_cstr_match_list@8
_apr_cstr_skip_prefix@8
_apr_cstr_split@16
_apr_cstr_split_append@20
_apr_cstr_strtoi64@28
_apr_cstr_strtoui64@28
_apr_cstr_tokenize@8
_apr_ctime@12
_apr_dir_close@4
_apr_dir_make@12
_apr_dir_make_recursive@12
_apr_dir_open@12
_apr_dir_read@12
_apr_dir_remove@8
_apr_dir_rewind@4
_apr_dso_error@12
_apr_dso_load@12
_apr_dso_sym@12
_apr_dso_unload@4
_apr_env_delete@8
_apr_env_get@12
_apr_env_set@12
_apr_escape_echo@20
_apr_escape_entity@20
_apr_escape_hex@20
_apr_escape_ldap@20
_apr_escape_path@20
_apr_escape_path_segment@16
_apr_escape_shell@16
_apr_escape_urlencoded@16
_apr_file_append@16
_apr_file_attrs_set@16
_apr_file_buffer_set@12
_apr_file_buffer_size_get@4
_apr_file_close@4
_apr_file_copy@16
_apr_file_data_get@12
_apr_file_data_set@16
_apr_file_datasync@4
_apr_file_dup2@12
_apr_file_dup@12
_apr_file_eof@4
_apr_file_flags_get@4
_apr_file_flush@4
_apr_file_getc@8
_apr_file_gets@12
_apr_file_info_get@12
_apr_file_inherit_set@4
_apr_file_inherit_unset@4
_apr_file_link@8
_apr_file_lock@8
_apr_file_mktemp@16
_apr_file_mtime_set@16
_apr_file_name_get@8
_apr_file_namedpipe_create@12
_apr_file_open@20
_apr_file_open_flags_stderr@12
_apr_file_open_flags_stdin@12
_apr_file_open_flags_stdout@12
_apr_file_open_stderr@8
_apr_file_open_stdin@8
_apr_file_open_stdout@8
_apr_file_perms_set@8
_apr_file_pipe_create@12
_apr_file_pipe_create_ex@16
_apr_file_pipe_create_pools@20
_apr_file_pipe_timeout_get@8
_apr_file_pipe_timeout_set@12
_apr_file_pool_get@4
_apr_file_putc@8
_apr_file_puts@8
_apr_file_read@12
_apr_file_read_full@16
_apr_file_remove@8
_apr_file_rename@12
_apr_file_seek@12
_apr_file_setaside@12
_apr_file_sync@4
_apr_file_trunc@12
_apr_file_ungetc@8
_apr_file_unlock@4
_apr_file_write@12
_apr_file_write_full@16
_apr_file_writev@16
_apr_file_writev_full@16
_apr_filepath_encoding@8
_apr_filepath_get@12
_apr_filepath_list_merge@12
_apr_filepath_list_split@12
_apr_filepath_merge@20
_apr_filepath_name_get@4
_apr_filepath_root@16
_apr_filepath_set@8
_apr_fnmatch@12
_apr_fnmatch_test@4
_apr_generate_random_bytes@8
_apr_gethostname@12
_apr_getnameinfo@12
_apr_getopt@16
_apr_getopt_init@16
_apr_getopt_long@16
_apr_getservbyname@8
_apr_gid_compare@8
_apr_gid_get@12
_apr_gid_name_get@12
_apr_hash_clear@4
_apr_hash_copy@8
_apr_hash_count@4
_apr_hash_do@12
_apr_hash_first@8
_apr_hash_get@12
_apr_hash_make@4
_apr_hash_make_custom@8
_apr_hash_merge@20
_apr_hash_next@4
_apr_hash_overlay@12
_apr_hash_pool_get@4
_apr_hash_set@16
_apr_hash_this@16
_apr_hash_this_key@4
_apr_hash_this_key_len@4
_apr_hash_this_val@4
_apr_initialize@0
_apr_ipsubnet_create@16
_apr_ipsubnet_test@8
_apr_is_empty_array@4
_apr_is_empty_table@4
_apr_itoa@8
_apr_ltoa@8
_apr_match_glob@12
_apr_mcast_hops@8
_apr_mcast_interface@8
_apr_mcast_join@16
_apr_mcast_leave@16
_apr_mcast_loopback@8
_apr_mmap_create@28
_apr_mmap_delete@4
_apr_mmap_dup@12
_apr_mmap_offset@16
_apr_off_t_toa@12
_apr_os_default_encoding@4
_apr_os_dir_get@8
_apr_os_dir_put@12
_apr_os_dso_handle_get@8
_apr_os_dso_handle_put@12
_apr_os_exp_time_get@8
_apr_os_exp_time_put@12
_apr_os_file_get@8
_apr_os_file_put@16
_apr_os_imp_time_get@8
_apr_os_imp_time_put@12
_apr_os_locale_encoding@4
_apr_os_pipe_put@12
_apr_os_pipe_put_ex@16
_apr_os_proc_mutex_get@8
_apr_os_proc_mutex_get_ex@12
_apr_os_proc_mutex_put@12
_apr_os_proc_mutex_put_ex@20
_apr_os_shm_get@8
_apr_os_shm_put@12
_apr_os_sock_get@8
_apr_os_sock_make@12
_apr_os_sock_put@12
_apr_os_thread_current@0
_apr_os_thread_equal@8
_apr_os_thread_get@8
_apr_os_thread_put@12
_apr_os_threadkey_get@8
_apr_os_threadkey_put@12
_apr_os_uuid_get@4
_apr_palloc@8
_apr_palloc_debug@12
_apr_parse_addr_port@20
_apr_password_get@12
_apr_pcalloc@8
_apr_pcalloc_debug@12
_apr_pescape_echo@12
_apr_pescape_entity@12
_apr_pescape_hex@16
_apr_pescape_ldap@16
_apr_pescape_path@12
_apr_pescape_path_segment@8
_apr_pescape_shell@8
_apr_pescape_urlencoded@8
_apr_pmemdup@12
_apr_poll@20
_apr_poll_method_defname@0
_apr_pollcb_add@8
_apr_pollcb_create@16
_apr_pollcb_create_ex@20
_apr_pollcb_method_name@4
_apr_pollcb_poll@20
_apr_pollcb_remove@8
_apr_pollcb_wakeup@4
_apr_pollset_add@8
_apr_pollset_create@16
_apr_pollset_create_ex@20
_apr_pollset_destroy@4
_apr_pollset_method_name@4
_apr_pollset_poll@20
_apr_pollset_remove@8
_apr_pollset_wakeup@4
_apr_pool_abort_get@4
_apr_pool_abort_set@8
_apr_pool_allocator_get@4
_apr_pool_child_cleanup_set@16
_apr_pool_cleanup_for_exec@0
_apr_pool_cleanup_kill@12
_apr_pool_cleanup_register@16
_apr_pool_cleanup_run@12
_apr_pool_clear@4
_apr_pool_clear_debug@8
_apr_pool_create_core_ex@12
_apr_pool_create_core_ex_debug@16
_apr_pool_create_ex@16
_apr_pool_create_ex_debug@20
_apr_pool_create_unmanaged_ex@12
_apr_pool_create_unmanaged_ex_debug@16
_apr_pool_destroy@4
_apr_pool_destroy_debug@8
_apr_pool_initialize@0
_apr_pool_is_ancestor@8
_apr_pool_note_subprocess@12
_apr_pool_parent_get@4
_apr_pool_pre_cleanup_register@12
_apr_pool_tag@8
_apr_pool_terminate@0
_apr_pool_userdata_get@12
_apr_pool_userdata_set@16
_apr_pool_userdata_setn@16
_apr_proc_create@24
_apr_proc_detach@4
_apr_proc_kill@8
_apr_proc_mutex_child_init@12
_apr_proc_mutex_cleanup@4
_apr_proc_mutex_create@16
_apr_proc_mutex_defname@0
_apr_proc_mutex_destroy@4
_apr_proc_mutex_lock@4
_apr_proc_mutex_lockfile@4
_apr_proc_mutex_mech@4
_apr_proc_mutex_name@4
_apr_proc_mutex_perms_set@16
_apr_proc_mutex_pool_get@4
_apr_proc_mutex_timedlock@12
_apr_proc_mutex_trylock@4
_apr_proc_mutex_unlock@4
_apr_proc_other_child_alert@12
_apr_proc_other_child_refresh@8
_apr_proc_other_child_refresh_all@4
_apr_proc_other_child_register@20
_apr_proc_other_child_unregister@4
_apr_proc_wait@16
_apr_proc_wait_all_procs@20
_apr_procattr_addrspace_set@8
_apr_procattr_child_err_set@12
_apr_procattr_child_errfn_set@8
_apr_procattr_child_in_set@12
_apr_procattr_child_out_set@12
_apr_procattr_cmdtype_set@8
_apr_procattr_create@8
_apr_procattr_detach_set@8
_apr_procattr_dir_set@8
_apr_procattr_error_check_set@8
_apr_procattr_group_set@8
_apr_procattr_io_set@16
_apr_procattr_perms_set_register@16
_apr_procattr_user_set@12
_apr_pstrcatv@16
_apr_pstrdup@8
_apr_pstrmemdup@12
_apr_pstrndup@12
_apr_punescape_entity@8
_apr_punescape_hex@16
_apr_punescape_url@20
_apr_pvsprintf@12
_apr_random_add_entropy@12
_apr_random_after_fork@4
_apr_random_barrier@4
_apr_random_init@20
_apr_random_insecure_bytes@12
_apr_random_insecure_ready@4
_apr_random_secure_bytes@12
_apr_random_secure_ready@4
_apr_random_standard_new@4
_apr_rfc822_date@12
_apr_shm_attach@12
_apr_shm_attach_ex@16
_apr_shm_baseaddr_get@4
_apr_shm_create@16
_apr_shm_create_ex@20
_apr_shm_delete@4
_apr_shm_destroy@4
_apr_shm_detach@4
_apr_shm_perms_set@16
_apr_shm_pool_get@4
_apr_shm_remove@8
_apr_shm_size_get@4
_apr_signal_block@4
_apr_signal_description_get@4
_apr_signal_unblock@4
_apr_skiplist_add@8
_apr_skiplist_add_compare@12
_apr_skiplist_add_index@12
_apr_skiplist_alloc@8
_apr_skiplist_destroy@8
_apr_skiplist_element@4
_apr_skiplist_find@12
_apr_skiplist_find_compare@16
_apr_skiplist_free@8
_apr_skiplist_getlist@4
_apr_skiplist_height@4
_apr_skiplist_init@8
_apr_skiplist_insert@8
_apr_skiplist_insert_compare@12
_apr_skiplist_last@12
_apr_skiplist_last_compare@16
_apr_skiplist_merge@8
_apr_skiplist_next@8
_apr_skiplist_peek@4
_apr_skiplist_pop@8
_apr_skiplist_preheight@4
_apr_skiplist_previous@8
_apr_skiplist_remove@12
_apr_skiplist_remove_all@8
_apr_skiplist_remove_compare@16
_apr_skiplist_remove_node@12
_apr_skiplist_replace@12
_apr_skiplist_replace_compare@16
_apr_skiplist_set_compare@12
_apr_skiplist_set_preheight@8
_apr_skiplist_size@4
_apr_sleep@8
_apr_sockaddr_equal@8
_apr_sockaddr_info_copy@12
_apr_sockaddr_info_get@24
_apr_sockaddr_ip_get@8
_apr_sockaddr_ip_getbuf@12
_apr_sockaddr_is_wildcard@4
_apr_sockaddr_zone_get@16
_apr_sockaddr_zone_set@8
_apr_socket_accept@12
_apr_socket_addr_get@12
_apr_socket_atmark@8
_apr_socket_atreadeof@8
_apr_socket_bind@8
_apr_socket_close@4
_apr_socket_connect@8
_apr_socket_create@20
_apr_socket_data_get@12
_apr_socket_data_set@16
_apr_socket_inherit_set@4
_apr_socket_inherit_unset@4
_apr_socket_listen@8
_apr_socket_opt_get@12
_apr_socket_opt_set@12
_apr_socket_pool_get@4
_apr_socket_protocol_get@8
_apr_socket_recv@12
_apr_socket_recvfrom@20
_apr_socket_send@12
_apr_socket_sendfile@24
_apr_socket_sendto@20
_apr_socket_sendv@16
_apr_socket_shutdown@8
_apr_socket_timeout_get@8
_apr_socket_timeout_set@12
_apr_socket_type_get@8
_apr_stat@16
_apr_strerror@12
_apr_strfsize@12
_apr_strftime@20
_apr_strnatcasecmp@8
_apr_strnatcmp@8
_apr_strtoff@16
_apr_strtoi64@12
_apr_strtok@12
_apr_table_add@12
_apr_table_addn@12
_apr_table_clear@4
_apr_table_clone@8
_apr_table_compress@8
_apr_table_copy@8
_apr_table_elts@4
_apr_table_get@8
_apr_table_getm@12
_apr_table_make@8
_apr_table_merge@12
_apr_table_mergen@12
_apr_table_overlap@12
_apr_table_overlay@12
_apr_table_set@12
_apr_table_setn@12
_apr_table_unset@8
_apr_table_vdo@16
_apr_temp_dir_get@8
_apr_terminate2@0
_apr_thread_cond_broadcast@4
_apr_thread_cond_create@8
_apr_thread_cond_destroy@4
_apr_thread_cond_pool_get@4
_apr_thread_cond_signal@4
_apr_thread_cond_timedwait@16
_apr_thread_cond_wait@8
_apr_thread_create@20
_apr_thread_data_get@12
_apr_thread_data_set@16
_apr_thread_detach@4
_apr_thread_exit@8
_apr_thread_join@8
_apr_thread_mutex_create@12
_apr_thread_mutex_destroy@4
_apr_thread_mutex_lock@4
_apr_thread_mutex_pool_get@4
_apr_thread_mutex_timedlock@12
_apr_thread_mutex_trylock@4
_apr_thread_mutex_unlock@4
_apr_thread_once@8
_apr_thread_once_init@8
_apr_thread_pool_get@4
_apr_thread_rwlock_create@8
_apr_thread_rwlock_destroy@4
_apr_thread_rwlock_pool_get@4
_apr_thread_rwlock_rdlock@4
_apr_thread_rwlock_tryrdlock@4
_apr_thread_rwlock_trywrlock@4
_apr_thread_rwlock_unlock@4
_apr_thread_rwlock_wrlock@4
_apr_thread_yield@0
_apr_threadattr_create@8
_apr_threadattr_detach_get@4
_apr_threadattr_detach_set@8
_apr_threadattr_guardsize_set@8
_apr_threadattr_stacksize_set@8
_apr_threadkey_data_get@12
_apr_threadkey_data_set@16
_apr_threadkey_private_create@12
_apr_threadkey_private_delete@4
_apr_threadkey_private_get@8
_apr_threadkey_private_set@8
_apr_time_ansi_put@12
_apr_time_clock_hires@4
_apr_time_exp_get@8
_apr_time_exp_gmt@12
_apr_time_exp_gmt_get@8
_apr_time_exp_lt@12
_apr_time_exp_tz@16
_apr_time_now@0
_apr_tokenize_to_argv@12
_apr_uid_compare@8
_apr_uid_current@12
_apr_uid_get@16
_apr_uid_homepath_get@12
_apr_uid_name_get@12
_apr_unescape_entity@16
Sections
.text Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ