2024-06-08_a3db4567efea11f9ae7987fc4f79b8a0_icedid_vidar

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-08_a3db4567efea11f9ae7987fc4f79b8a0_icedid_vidar
Size

5.2MB
MD5

a3db4567efea11f9ae7987fc4f79b8a0
SHA1

fc18e6f782b4f6afa391bd66ee3aabac55afbb12
SHA256

cbd01d3e0c008ac0ba705b4893ce776e646db2e1cccdc3ce3747b7e47775cac0
SHA512

7f77f69e57ed497a2997336c413080bc05374d161c7b9313a4cd68b791b69199fbcf0fbec670354646180748bea99ec4a846f038b3a13215ec1ddf665fbb9051
SSDEEP

98304:KhCNRld2O31y+wCQ6qkax4vOkusa5KcoYnondj4f4wJ4loj9ghi1RebMIg9Cbo/6:KhCLH1XxIs1Jndj4f4wJuojDIg9Cbo/6

Score

1^/10

Malware Config

Signatures

Files

2024-06-08_a3db4567efea11f9ae7987fc4f79b8a0_icedid_vidar
.exe windows:5 windows x86 arch:x86

95c5ec72d8de3d2d53f53ebeeda5bd57

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

01/05/2012, 00:00

Not After

31/12/2012, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G3,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

15:42:86:c1:77:fb:53:b9:6f:af:b1:2f:06:ca:a0:74
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

29/11/2012, 00:00

Not After

29/11/2013, 23:59

Subject

CN=Collobos Software Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Collobos Software Inc.,L=Palo Alto,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

13:6f:aa:4a:52:6b:7b:ca:3d:fc:21:12:bb:cf:c1:09:21:4a:92:c5
Signer

Actual PE Digest

13:6f:aa:4a:52:6b:7b:ca:3d:fc:21:12:bb:cf:c1:09:21:4a:92:c5

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Drydock\FingerPrint-2.2\Clients\Win32\Win32\Release\FingerPrint.pdb

Imports

shlwapi

PathGetDriveNumberW
PathFileExistsW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathAppendW
PathRemoveFileSpecW
PathFindFileNameW

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winsparkle

win_sparkle_check_update_with_ui
win_sparkle_set_appcast_url
win_sparkle_init
win_sparkle_cleanup

winmm

PlaySoundW
timeGetTime

kernel32

ReadConsoleInputA
SetConsoleMode
GetConsoleMode
VirtualAlloc
VirtualQuery
HeapQueryInformation
SetStdHandle
LCMapStringW
GetCPInfo
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
HeapDestroy
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetTimeZoneInformation
SetConsoleCtrlHandler
IsValidCodePage
GetConsoleCP
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA
WriteConsoleW
LockFileEx
HeapValidate
FormatMessageA
UnlockFileEx
GetFullPathNameA
GetDriveTypeW
PeekNamedPipe
GetFileInformationByHandle
FindFirstFileExA
GetDriveTypeA
ExitProcess
CreateThread
ExitThread
RtlUnwind
AreFileApisANSI
GetSystemTime
RaiseException
GetSystemTimeAsFileTime
GetOEMCP
GetDiskFreeSpaceA
CreateFileMappingW
GetLastError
FindResourceW
LoadResource
GlobalLock
GlobalAlloc
SizeofResource
GlobalUnlock
GlobalFree
LockResource
GetModuleHandleW
ActivateActCtx
LoadLibraryW
DeactivateActCtx
SetLastError
GetProcAddress
GetModuleFileNameW
CreateDirectoryW
InitializeCriticalSection
LeaveCriticalSection
GetFileAttributesW
EnterCriticalSection
DeleteCriticalSection
lstrlenW
lstrcpyW
GetVersion
GetLocaleInfoW
OutputDebugStringW
GetVersionExW
GlobalDeleteAtom
CreateMutexW
GetCurrentProcess
GlobalGetAtomNameW
ReleaseMutex
CloseHandle
GlobalAddAtomW
DeleteFileW
QueryPerformanceCounter
GetComputerNameW
GetTickCount
GetSystemInfo
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
OutputDebugStringA
GetStartupInfoW
HeapSetInformation
GetCommandLineW
DecodePointer
EncodePointer
GetStringTypeW
InterlockedCompareExchange
GetDiskFreeSpaceW
GetUserDefaultLCID
SearchPathW
GetProfileIntW
CopyFileW
CreateFileW
GetTempPathW
GetWindowsDirectoryW
Sleep
FreeLibrary
HeapAlloc
GetProcessHeap
HeapFree
lstrlenA
HeapSize
HeapReAlloc
lstrcatA
lstrcpyA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
SetErrorMode
GetNumberFormatW
GetTempFileNameW
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
GetFileAttributesExW
FindResourceExW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
lstrcmpiW
GetCurrentDirectoryW
GetSystemDirectoryW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GetVersionExA
GetFileSize
CreateFileA
LocalFree
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFlags
WaitForSingleObject
ResumeThread
SetThreadPriority
VirtualProtect
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
CompareStringA
LoadLibraryExW
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GlobalFindAtomW
CompareStringW
InitializeCriticalSectionAndSpinCount
lstrcmpW
GlobalSize
FormatMessageW
MulDiv
FlushConsoleInputBuffer
GlobalMemoryStatus
GetCurrentProcessId
GetStdHandle
GetFileType
GetModuleHandleA
ExpandEnvironmentStringsA
FindResourceA
FreeResource
CreateFileMappingA
MapViewOfFile
GetTempPathA
GetTempFileNameA
CopyFileA
UnmapViewOfFile
WriteFile
SetFilePointer
ReadFile
lstrcmpA
GetModuleFileNameA
GetWindowsDirectoryA
SetFileAttributesA
DeleteFileA
MoveFileA
GetEnvironmentVariableA
CreateDirectoryA
LoadLibraryA
GetFileAttributesA

user32

GetWindowRgn
DestroyCursor
CreateMenu
MapVirtualKeyExW
IsCharLowerW
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
SubtractRect
CharUpperBuffW
FrameRect
RegisterClipboardFormatW
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
HideCaret
InvertRect
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
GetUpdateRect
InvalidateRgn
CopyAcceleratorTableW
CharNextW
DestroyAcceleratorTable
SetClassLongW
GetDoubleClickTime
CopyIcon
SetCursorPos
SetRect
LockWindowUpdate
GetMenuDefaultItem
CreatePopupMenu
IsZoomed
NotifyWinEvent
EmptyClipboard
SetClipboardData
CharUpperW
WindowFromPoint
DeleteMenu
PostThreadMessageW
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
UnregisterClassW
SetLayeredWindowAttributes
EnumDisplayMonitors
IntersectRect
RealChildWindowFromPoint
DestroyMenu
GetMenuItemInfoW
WaitMessage
GetMessageW
TranslateMessage
SetWindowContextHelpId
MapDialogRect
GetAsyncKeyState
GetSysColorBrush
SetWindowRgn
DrawFrameControl
DrawStateW
GetIconInfo
CopyImage
DrawIconEx
GetNextDlgGroupItem
SetCapture
DrawFocusRect
OffsetRect
IsRectEmpty
ShowOwnedPopups
ReleaseCapture
InflateRect
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
GetPropW
RemovePropW
SetFocus
InvalidateRect
SetRectEmpty
DrawEdge
LoadCursorW
DrawTextW
FillRect
SetCursor
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
ValidateRect
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
PtInRect
GetWindow
GetMenuStringW
InsertMenuW
RemoveMenu
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
TabbedTextOutW
GetWindowThreadProcessId
GetWindowLongW
IsWindowEnabled
MapVirtualKeyW
GetKeyNameTextW
ReleaseDC
OpenClipboard
GetClipboardData
IsClipboardFormatAvailable
GetKeyState
CloseClipboard
SetMenuDefaultItem
IsWindow
MessageBoxW
EnableWindow
SendMessageW
GetClientRect
GetWindowRect
LoadIconW
PostQuitMessage
GetSystemMetrics
GetMenuItemCount
RedrawWindow
AppendMenuW
BringWindowToTop
LoadMenuW
GetMenu
DrawIcon
SetForegroundWindow
GetSubMenu
KillTimer
PostMessageW
EnumChildWindows
GetCursorPos
GetClassNameW
SystemParametersInfoW
FindWindowW
SetParent
LoadImageW
RegisterWindowMessageW
TrackPopupMenu
SetActiveWindow
DrawAnimatedRects
IsWindowVisible
BroadcastSystemMessageW
GetLastActivePopup
wsprintfA
GetUserObjectInformationW
GetMenuItemID
IsIconic
GetProcessWindowStation
SetTimer
GetSystemMenu
MessageBeep
DestroyIcon
GetParent
GetDesktopWindow
MessageBoxA
CheckMenuItem
EnableMenuItem
GetMenuState
ModifyMenuW
GetFocus
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetDC
LoadBitmapW
CopyRect
GetSysColor

gdi32

LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
CreateHatchBrush
CopyMetaFileW
CreateEllipticRgn
CreatePolygonRgn
CombineRgn
IntersectClipRect
GetTextColor
Polyline
Ellipse
Polygon
GetTextMetricsW
SetRectRgn
GetMapMode
DPtoLP
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateDIBSection
SetDIBColorTable
RealizePalette
CreateRoundRectRgn
OffsetRgn
GetRgnBox
EnumFontFamiliesExW
RoundRect
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
ExtFloodFill
SetPaletteEntries
GetViewportOrgEx
LPtoDP
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetWindowOrgEx
SetPixelV
GetTextFaceW
GetClipBox
ExcludeClipRect
SetMapMode
CreatePen
GetObjectW
Rectangle
CreateFontIndirectW
CreateSolidBrush
GetStockObject
GetPixel
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
DeleteObject
SetBkMode
SetPixel
StretchBlt
DeleteDC
SetTextColor
GetTextExtentPoint32W
BitBlt
EndDoc
ResetDCW
StartDocW
CreateDCW
GetDeviceCaps
StartPage
EndPage
CreateBitmap
CreateRectRgnIndirect
PatBlt
SaveDC
RestoreDC
SetBkColor
SetPolyFillMode
GetBkColor
SetROP2

msimg32

AlphaBlend
TransparentBlt
GradientFill

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
SetJobW
EnumPrintersW
ClosePrinter

advapi32

RegQueryValueExW
RegDeleteValueW
RegCloseKey
OpenProcessToken
RegDeleteKeyW
LookupPrivilegeValueW
RegOpenKeyExW
RegEnumKeyExW
AdjustTokenPrivileges
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegisterEventSourceA
DeregisterEventSource
RegCreateKeyExW
FreeSid
SetEntriesInAclA
SetEntriesInAclW
SetSecurityInfo
AllocateAndInitializeSid
GetSecurityInfo
ReportEventA
RegisterEventSourceW
RegSetValueExW

shell32

DragQueryFileW
DragFinish
SHGetSpecialFolderLocation
Shell_NotifyIconW
SHAppBarMessage
SHGetFileInfoW
ord727
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetDesktopFolder
SHGetFolderPathW
ShellExecuteW

comctl32

InitCommonControlsEx
ImageList_GetIconSize

ole32

CoRegisterMessageFilter
CoRevokeClassObject
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoFreeUnusedLibraries
OleUninitialize
OleLockRunning
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitializeEx
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoInitialize
CoTaskMemFree
CreateStreamOnHGlobal
CoUninitialize
CoCreateGuid
OleInitialize

oleaut32

OleCreateFontIndirect
VarBstrFromDate
VariantTimeToSystemTime
SystemTimeToVariantTime
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysAllocString
VariantCopy
SafeArrayDestroy
SysStringLen

oledlg

OleUIBusyW

gdiplus

GdipCloneImage
GdipSetImageAttributesColorMatrix
GdipDrawImageRectRectI
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipDeleteBrush
GdipDeletePen
GdipCloneBrush
GdipCreateSolidFill
GdipFillRectangleI
GdipCreatePen1
GdipDrawRectangleI
GdiplusShutdown
GdiplusStartup
GdipCreateHICONFromBitmap
GdipLoadImageFromStream
GdipDrawImageRectRect
GdipGetImageHeight
GdipStringFormatGetGenericDefault
GdipMeasureString
GdipSetStringFormatLineAlign
GdipDeleteFont
GdipGetImageGraphicsContext
GdipLoadImageFromFile
GdipCreateFromHDC
GdipDeleteFontFamily
GdipGetImageEncodersSize
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipGetImageEncoders
GdipDrawString
GdipCreateFontFamilyFromName
GdipSaveImageToFile
GdipCreateStringFormat
GdipGetImageWidth
GdipDeleteStringFormat
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipDisposeImage
GdipAlloc
GdipDrawImageRectI
GdipDeleteGraphics
GdipCreateBitmapFromStream
GdipSetStringFormatAlign
GdipFree

wsock32

WSASetLastError
WSAAsyncSelect
htons
ioctlsocket
listen
WSAGetLastError
closesocket
socket
recv
accept
shutdown
select
connect
WSAStartup
WSACleanup
send

netapi32

NetUserEnum
NetApiBufferFree

iphlpapi

SendARP
GetAdaptersInfo
GetIpNetTable

winhttp

WinHttpAddRequestHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpSetStatusCallback
WinHttpQueryHeaders
WinHttpConnect
WinHttpSendRequest
WinHttpSetOption
WinHttpReceiveResponse
WinHttpGetProxyForUrl
WinHttpOpen
WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser

ws2_32

WSAAddressToStringA

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

xpdfprint

pdfPrintSetLastPage
pdfPrintSetPrinter
pdfPrintSetFirstPage
pdfPrintToDC2
pdfLoadFileW

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 616KB - Virtual size: 616KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 139KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

95c5ec72d8de3d2d53f53ebeeda5bd57

Code Sign

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:edCertificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

15:42:86:c1:77:fb:53:b9:6f:af:b1:2f:06:ca:a0:74Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

13:6f:aa:4a:52:6b:7b:ca:3d:fc:21:12:bb:cf:c1:09:21:4a:92:c5Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shlwapi

version

winsparkle

winmm

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

oledlg

gdiplus

wsock32

netapi32

iphlpapi

winhttp

ws2_32

oleacc

imm32

xpdfprint

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 616KB - Virtual size: 616KB

.data Size: 139KB - Virtual size: 184KB

.rsrc Size: 1.9MB - Virtual size: 1.9MB

79:a2:a5:85:f9:d1:15:42:13:d9:b8:3e:f6:b6:8d:ed
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

15:42:86:c1:77:fb:53:b9:6f:af:b1:2f:06:ca:a0:74
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

13:6f:aa:4a:52:6b:7b:ca:3d:fc:21:12:bb:cf:c1:09:21:4a:92:c5
Signer

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 616KB - Virtual size: 616KB

.data
Size: 139KB - Virtual size: 184KB

.rsrc
Size: 1.9MB - Virtual size: 1.9MB