Behavioral task
behavioral1
Sample
2024-06-01_280a6d555f997ba29b2749207f3a48c0_lockbit.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-01_280a6d555f997ba29b2749207f3a48c0_lockbit.exe
Resource
win10v2004-20240426-en
General
-
Target
2024-06-01_280a6d555f997ba29b2749207f3a48c0_lockbit
-
Size
264KB
-
MD5
280a6d555f997ba29b2749207f3a48c0
-
SHA1
bda2d92d343a390b85523f4bc1e6ab9d502ce7ab
-
SHA256
f8928dc897b948a680ebbfbba74930cf4ab0f2991932d34e8a9550a5854e83df
-
SHA512
9c646ae8c13880c453277dd645b5679b305babef5f033c04660e6023eade6282e1474686ad7f7207460609039ba59c5f41869cc3d432d29e59287893723e1969
-
SSDEEP
6144:76wysJpiy3eNuUf+7wgAS+Dq/u0vIPvtghrr:+srl3e0UEAR+m0Ggh
Malware Config
Signatures
-
Lockbit family
-
Rule to detect Lockbit 3.0 ransomware Windows payload 1 IoCs
Processes:
resource yara_rule sample family_lockbit -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2024-06-01_280a6d555f997ba29b2749207f3a48c0_lockbit
Files
-
2024-06-01_280a6d555f997ba29b2749207f3a48c0_lockbit.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size:
IMAGE_SCN_MEM_READ
Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
g��5�� Size: 720.1MB - Virtual size: 706.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
Size: - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
@c$��� Size: 1047.3MB - Virtual size: 3147.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
M�/2;Y� Size: 2659.1MB - Virtual size: 2977.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�b+���0� Size: 400.0MB - Virtual size: 1086.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�s���T:� Size: 1781.4MB - Virtual size: 2293.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
!А,�� Size: 1450.6MB - Virtual size: 3748.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
pUaJ~� Size: 50.8MB - Virtual size: 2275.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
~J��LR Size: 3979.5MB - Virtual size: 3104.7MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�P�H�� Size: 864.1MB - Virtual size: 434.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
{���g� Size: 2606.6MB - Virtual size: 548.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
�Ym���f Size: 1740.5MB - Virtual size: 2474.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
C �l��� Size: 3948.6MB - Virtual size: 2087.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
>�T:#E Size: 1141.5MB - Virtual size: 2870.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����Y�@@ Size: 1375.3MB - Virtual size: 3530.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
{�?��b Size: 3272.6MB - Virtual size: 3631.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�lY�sX!� Size: 289.5MB - Virtual size: 737.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
���/d��� Size: 1190.6MB - Virtual size: 1234.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
Bb���Nak Size: 1882.9MB - Virtual size: 1595.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��6N���L Size: 2906.7MB - Virtual size: 1221.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
5������` Size: 2097.2MB - Virtual size: 1904.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�}�1�= Size: 1969.5MB - Virtual size: 129.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ɯ4�H�;� Size: 2364.8MB - Virtual size: 615.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
��G�� Size: 2134.7MB - Virtual size: 4040.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
%<Y�D�� Size: 2451.5MB - Virtual size: 1638.5MB
IMAGE_SCN_MEM_WRITE
�u�W��K~ Size: 4089.0MB - Virtual size: 1947.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�o�G1�� Size: 1571.2MB - Virtual size: 2111.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
l�rt$�̔ Size: 2160.4MB - Virtual size: 3767.9MB
�~��=f� Size: 2750.8MB - Virtual size: 3270.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
��7t� Size: 3464.1MB - Virtual size: 4046.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
��iI�P Size: 419.1MB - Virtual size: 1668.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
��5| C� Size: 3347.9MB - Virtual size: 1525.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
-�B{Mެ Size: 1818.8MB - Virtual size: 3313.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
&��nl�X� Size: 310.6MB - Virtual size: 32.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
��0��ܱf Size: 203.2MB - Virtual size: 1779.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE
� �7�}�� Size: 4003.5MB - Virtual size: 1307.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE
| �@?�O Size: 3009.0MB - Virtual size: 3645.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
I�t6ٽ Size: 2018.3MB - Virtual size: 971.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
VU� pȽ Size: 764.9MB - Virtual size: 2160.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
P�k.r�� Size: 2339.0MB - Virtual size: 2829.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
���?~;N� Size: 1448.8MB - Virtual size: 553.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�>�6>�I Size: 2855.0MB - Virtual size: 1340.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/O���a� Size: 2773.3MB - Virtual size: 2787.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
�̀a�� Size: 264.1MB - Virtual size: 1954.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�l���f� Size: 3024.3MB - Virtual size: 1942.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
q l�٣B Size: 923.0MB - Virtual size: 3544.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE
�m��M�g� Size: 2730.5MB - Virtual size: 3424.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
��'��cz Size: 1581.1MB - Virtual size: 3531.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
:�[���� Size: 3753.1MB - Virtual size: 231.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
P�2|�a�� Size: 1436.6MB - Virtual size: 69.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�R�$e�~ Size: 2735.7MB - Virtual size: 2822.9MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�2�D?H Size: 3217.7MB - Virtual size: 1132.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
��h� Size: 728.7MB - Virtual size: 2883.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ؘ���W Size: 2503.4MB - Virtual size: 1565.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
L\)=T�\� Size: 2042.6MB - Virtual size: 2370.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ͬq�� Size: 3509.9MB - Virtual size: 3289.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�ա)�$� Size: 3243.6MB - Virtual size: 1693.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
D��N��z Size: 1783.7MB - Virtual size: 214.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
l� �ƝO� Size: 1142.7MB - Virtual size: 3675.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE
��aʆf�A Size: 3629.7MB - Virtual size: 3225.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
YAf�� Size: 1029.3MB - Virtual size: 1500.4MB
IMAGE_SCN_MEM_EXECUTE
�������T Size: 1259.5MB - Virtual size: 3408.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
J`�jD��s Size: 4037.1MB - Virtual size: 2967.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
��Am� Size: 2771.2MB - Virtual size: 3578.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
@�;�58&s Size: 3573.0MB - Virtual size: 1440.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Y1`�/Tx8 Size: 3343.4MB - Virtual size: 330.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
5��t�xg� Size: 2270.8MB - Virtual size: 217.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
�F̾��E� Size: 494.9MB - Virtual size: 956.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�o?��� Size: 930.4MB - Virtual size: 61.8MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
��J�ВW Size: 3227.3MB - Virtual size: 933.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
��D��� Size: 843.4MB - Virtual size: 230.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
�wl}r�!� Size: 3971.1MB - Virtual size: 3843.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
yqT�>8>a Size: 2293.8MB - Virtual size: 2896.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE
{k��x] Size: 1883.2MB - Virtual size: 2369.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
ȝ HR1 Size: 1644.8MB - Virtual size: 2952.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE
W��uU�� Size: 2144.3MB - Virtual size: 3274.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
$'j�L!n| Size: 2358.1MB - Virtual size: 1884.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
T���U�� Size: 4079.9MB - Virtual size: 4047.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
����m�`e Size: 533.0MB - Virtual size: 2775.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
+ Size: 217.4MB - Virtual size: 2694.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
K��G��@ Size: 510.9MB - Virtual size: 2622.3MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
V�.�� Size: 471.6MB - Virtual size: 1428.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
���@��~ Size: 3036.0MB - Virtual size: 1614.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE
y�7�r Size: 3852.8MB - Virtual size: 3992.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Ԛ�(K#8 Size: 2986.5MB - Virtual size: 1828.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
P=#�Z�O� Size: 1608.1MB - Virtual size: 2085.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
i���a�v� Size: 3015.4MB - Virtual size: 2815.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
�/��H� Size: 3849.2MB - Virtual size: 2437.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
����J Size: 235.1MB - Virtual size: 1702.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
�0WX Size: 1807.9MB - Virtual size: 3854.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
}���c Size: 2571.8MB - Virtual size: 3292.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
�B����R Size: 1503.4MB - Virtual size: 2543.6MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
��e�@��E Size: 1755.0MB - Virtual size: 637.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����Ȫ� Size: 3206.3MB - Virtual size: 4034.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
�p6g�[ Size: 2057.3MB - Virtual size: 3485.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
���SfKv Size: 63.2MB - Virtual size: 1245.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
��>y;�o[ Size: 1274.1MB - Virtual size: 3076.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
/�3�!�r Size: 2884.5MB - Virtual size: 4066.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�x ����� Size: 2993.9MB - Virtual size: 709.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� I Size: 3416.0MB - Virtual size: 2075.1MB
IMAGE_SCN_MEM_DISCARDABLE
�����P�� Size: 1899.7MB - Virtual size: 2673.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
6{��ӱh Size: 2898.2MB - Virtual size: 3760.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
H-�I Size: 3202.2MB - Virtual size: 2172.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
��Y�� Size: 537.6MB - Virtual size: 3660.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�T����� Size: 3847.1MB - Virtual size: 2643.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
h��� Size: 2587.0MB - Virtual size: 2449.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
*⽛���x Size: 1567.3MB - Virtual size: 2753.2MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
c����6d� Size: 2692.9MB - Virtual size: 1556.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�����<. Size: 1597.7MB - Virtual size: 4058.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
�a������ Size: 1781.1MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���֊hi Size: 1933.5MB - Virtual size: 1662.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
DPJՁV� Size: 3837.8MB - Virtual size: 3418.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
j̴��ha Size: 911.9MB - Virtual size: 3237.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
)�}xԳ� Size: 586.0MB - Virtual size: 2982.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
]��� Size: 1320.6MB - Virtual size: 755.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T��&�;: Size: 2654.1MB - Virtual size: 2622.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
�*��oA�� Size: 1238.8MB - Virtual size: 2573.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��1��w Size: 1048.7MB - Virtual size: 3820.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
fj8 Size: 2121.0MB - Virtual size: 3047.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T*ѭ� Size: 2423.4MB - Virtual size: 3926.7MB
IMAGE_SCN_MEM_READ
�8�db� Size: 2642.1MB - Virtual size: 3414.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�7r'��� Size: 1222.5MB - Virtual size: 877.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��[�X�� Size: 2038.9MB - Virtual size: 520.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�[~�D�O Size: 2199.6MB - Virtual size: 3321.0MB
IMAGE_SCN_MEM_WRITE
Te���N Size: 1961.6MB - Virtual size: 311.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�'�bG.�7 Size: 2821.4MB - Virtual size: 2284.4MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_D>Pt Size: 1119.4MB - Virtual size: 3824.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE
��_�r��3 Size: 2079.6MB - Virtual size: 1019.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
[!�}� h� Size: 1468.8MB - Virtual size: 2128.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
��S�b Size: 2797.2MB - Virtual size: 908.3MB
IMAGE_SCN_MEM_DISCARDABLE
R����'� Size: 20.3MB - Virtual size: 2340.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
����W�6 Size: 3870.2MB - Virtual size: 2788.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���ʄ Size: 3556.8MB - Virtual size: 3269.5MB
��x*a� Size: 1127.2MB - Virtual size: 1037.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
Hi�^�|�N Size: 227.8MB - Virtual size: 2694.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
O����ȼ Size: 1436.6MB - Virtual size: 2072.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
z���-:'� Size: 764.2MB - Virtual size: 3249.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�����u� Size: 1955.3MB - Virtual size: 2180.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE
�Be�!� e Size: 2288.8MB - Virtual size: 1881.0MB
IMAGE_SCN_MEM_DISCARDABLE
���*j�' Size: 1957.0MB - Virtual size: 658.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�1�� 0Zz Size: 3210.6MB - Virtual size: 26.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
N?���� T Size: 3359.0MB - Virtual size: 260.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
����D4� Size: 1824.7MB - Virtual size: 325.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_WRITE
;�Ao��i Size: 3893.8MB - Virtual size: 721.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
�,�,��� Size: 3838.4MB - Virtual size: 1546.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
O'CN� Size: 3327.0MB - Virtual size: 3684.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
5���`�� Size: 3146.0MB - Virtual size: 909.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
� ���j.. Size: 2362.2MB - Virtual size: 1649.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
��|MQ� Size: 206.5MB - Virtual size: 45.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�%Sm�`� Size: 220.4MB - Virtual size: 2915.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
靈��l Size: 4022.9MB - Virtual size: 3660.0MB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
����=�C Size: 3254.8MB - Virtual size: 3607.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
F���>�� Size: 1384.1MB - Virtual size: 814.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Y_ǀ��H� Size: 2953.8MB - Virtual size: 701.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
��ݝv�A� Size: 3225.5MB - Virtual size: 2190.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
e�b�ݎ Size: 1981.4MB - Virtual size: 2285.2MB
IMAGE_SCN_MEM_DISCARDABLE
�\��d��5 Size: 2071.6MB - Virtual size: 2730.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����'�L Size: 2689.8MB - Virtual size: 479.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
femh� Size: 1057.8MB - Virtual size: 3559.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���\S`( Size: 3081.4MB - Virtual size: 2634.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
��%wk e Size: 3994.1MB - Virtual size: 3561.4MB
IMAGE_SCN_MEM_WRITE
�~��<�=6 Size: 1074.6MB - Virtual size: 1869.9MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���G�~N Size: 1583.9MB - Virtual size: 1079.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�T�cx.�� Size: 1940.1MB - Virtual size: 2429.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
n���}*k Size: 3000.8MB - Virtual size: 2676.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
@��Z�ӌ Size: 3673.5MB - Virtual size: 4001.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
�2����� Size: 509.2MB - Virtual size: 178.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE