I:\build\trunk_cn_5.0_64\simulator\bin\dnplycore.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d3912e9a34c9b7418d33c588e6e4a120eb9fbd1f2f06f9d1a0a6a9aad2a52446.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d3912e9a34c9b7418d33c588e6e4a120eb9fbd1f2f06f9d1a0a6a9aad2a52446.dll
Resource
win10v2004-20240508-en
General
-
Target
d3912e9a34c9b7418d33c588e6e4a120eb9fbd1f2f06f9d1a0a6a9aad2a52446
-
Size
993KB
-
MD5
85f9e704e6596a95bfae86fa556dfed1
-
SHA1
fc4fe6556b2935917177962611f85a0a5eb7614a
-
SHA256
d3912e9a34c9b7418d33c588e6e4a120eb9fbd1f2f06f9d1a0a6a9aad2a52446
-
SHA512
7d8011f144e3ea1251148d493f48cb9d0464b349f9aa8ae338cf93636853c5bc40099eb81c355ad74931e722fd1aad0b5c3d775462b027a32710aea44b30e439
-
SSDEEP
24576:TwYyReZKHdkS9W6atBy0lKjOS0+8EK4cH6hfi:XdZcdhW6atByTt0+8EK4cii
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3912e9a34c9b7418d33c588e6e4a120eb9fbd1f2f06f9d1a0a6a9aad2a52446
Files
-
d3912e9a34c9b7418d33c588e6e4a120eb9fbd1f2f06f9d1a0a6a9aad2a52446.dll windows:6 windows x86 arch:x86
d4f2d1709b846a197915863e7de609d0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
cximagecrt
?GetHeight@CxImage@@QBEIXZ
?DestroyFrames@CxImage@@QAE_NXZ
?Destroy@CxImage@@QAE_NXZ
?GetWidth@CxImage@@QBEIXZ
??0CxImage@@QAE@ABV0@_N11@Z
?Scanf@CxMemFile@@UAEHPBDPAX@Z
?GetS@CxMemFile@@UAEPADPADH@Z
?GetPixelColor@CxImage@@QAE?AUtagRGBQUAD@@HH_N@Z
?Load@CxImage@@QAE_NPB_WI@Z
??0CxImage@@QAE@I@Z
?Write@CxMemFile@@UAEIPBXII@Z
??0CxMemFile@@QAE@PAEI@Z
??1CxMemFile@@UAE@XZ
?Close@CxMemFile@@UAE_NXZ
?Read@CxMemFile@@UAEIPAXII@Z
?Resample@CxImage@@QAE_NHHHPAV1@@Z
?Seek@CxMemFile@@UAE_NHH@Z
?Tell@CxMemFile@@UAEHXZ
?Size@CxMemFile@@UAEHXZ
?Flush@CxMemFile@@UAE_NXZ
?Eof@CxMemFile@@UAE_NXZ
?Error@CxMemFile@@UAEHXZ
?PutC@CxMemFile@@UAE_NE@Z
?GetC@CxMemFile@@UAEHXZ
hid
HidP_GetValueCaps
HidP_GetUsages
HidP_GetButtonCaps
HidP_GetCaps
HidP_GetUsageValue
xinput1_3
ord4
ord5
ord2
winmm
timeGetDevCaps
timeBeginPeriod
timeGetTime
timeKillEvent
timeEndPeriod
timeSetEvent
kernel32
LoadLibraryW
GetProcAddress
DeleteCriticalSection
GetModuleFileNameA
CopyFileW
GetTickCount
GetLocalTime
GetUserDefaultUILanguage
OutputDebugStringA
GetCurrentProcessId
LocalFree
GetModuleFileNameW
lstrcmpW
lstrlenW
CreateFileMappingA
lstrcpyW
GlobalAlloc
GetVersionExW
GlobalFree
GetCurrentThreadId
GetFileSize
CreateFileW
SetPriorityClass
GlobalLock
GetModuleHandleW
GlobalUnlock
OpenProcess
ReleaseSemaphore
CreateSemaphoreW
DisableThreadLibraryCalls
GlobalMemoryStatusEx
GetSystemInfo
WideCharToMultiByte
VirtualQuery
FindResourceW
LoadResource
CreateProcessW
SizeofResource
GetFileAttributesW
MoveFileW
LockResource
DeleteFileW
SetFileAttributesW
WaitForMultipleObjects
CreateEventW
EnterCriticalSection
CreateNamedPipeA
GetLastError
GetOverlappedResult
ReadFile
LeaveCriticalSection
InitializeCriticalSection
WriteFile
ConnectNamedPipe
SetEvent
WaitForSingleObject
ReleaseMutex
QueryPerformanceFrequency
OpenEventW
OpenFileMappingW
CreateFileMappingW
OpenMutexW
Sleep
QueryPerformanceCounter
UnmapViewOfFile
MapViewOfFile
CreateMutexW
ResetEvent
SetThreadPriority
GetCurrentThread
DebugBreak
TerminateProcess
CloseHandle
MultiByteToWideChar
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
TerminateThread
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetExitCodeProcess
CreateThread
GetSystemDirectoryW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
user32
GetKeyState
PeekMessageW
MessageBoxA
GetWindowThreadProcessId
RegisterRawInputDevices
GetAncestor
GetAsyncKeyState
GetDesktopWindow
wsprintfW
MapVirtualKeyW
GetKeyboardLayout
GetForegroundWindow
GetClientRect
WindowFromPoint
GetFocus
KillTimer
GetWindowRect
ScreenToClient
SetTimer
GetRawInputDeviceList
GetRawInputDeviceInfoW
GetRegisteredRawInputDevices
PtInRect
IsIconic
GetRawInputData
GetKeyNameTextW
GetSystemMetrics
ReleaseDC
TranslateMessage
OpenClipboard
DispatchMessageW
MessageBoxW
GetParent
RegisterClassExW
GetWindowTextW
GetClassNameW
EmptyClipboard
IsWindow
FindWindowExW
SendMessageW
SetClipboardData
ClientToScreen
GetMessageExtraInfo
SetCapture
TrackMouseEvent
GetCapture
InflateRect
SetCursorPos
SystemParametersInfoW
MonitorFromWindow
ReleaseCapture
GetMonitorInfoW
SetCursor
SendInput
LoadImageW
PostMessageW
GetClipCursor
ShowCursor
DestroyCursor
ClipCursor
DestroyWindow
CloseClipboard
LoadCursorW
SetFocus
GetWindowLongW
GetClipboardData
SetWindowLongW
GetCursorPos
ShowWindow
CreateWindowExW
GetDC
RegisterClassW
GetKeyboardLayoutList
ChangeDisplaySettingsW
EnumWindows
DefWindowProcW
ActivateKeyboardLayout
MoveWindow
DrawTextW
MsgWaitForMultipleObjects
gdi32
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
CreateDIBSection
CreateFontW
GetDeviceCaps
DeleteDC
SetTextColor
Rectangle
CreateSolidBrush
GetStockObject
CreatePen
GetTextFaceW
CreateDCW
advapi32
InitializeSecurityDescriptor
RegCloseKey
RegOpenKeyExW
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
ole32
CoUninitialize
CoGetClassObject
CoInitializeEx
CoCreateGuid
oleaut32
SafeArrayGetLBound
SafeArrayGetUBound
SysAllocString
SysStringLen
SysFreeString
SafeArrayAccessData
SysAllocStringByteLen
SafeArrayDestroy
SysAllocStringLen
SafeArrayUnaccessData
SysStringByteLen
msvcp120
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
_Thrd_join
_Cnd_timedwait
_Mtx_current_owns
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_current
_Thrd_equal
?_Launch@_Pad@std@@QAEXPAU_Thrd_imp_t@@@Z
??1_Pad@std@@QAE@XZ
?_Release@_Pad@std@@QAEXXZ
??0_Pad@std@@QAE@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?_Make_dir@sys@tr2@std@@YAHPB_W@Z
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
_Xtime_get_ticks
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
??_7facet@locale@std@@6B@
??_7?$codecvt@_WDH@std@@6B@
??_7codecvt_base@std@@6B@
??_7_Facet_base@std@@6B@
??1?$codecvt@_WDH@std@@MAE@XZ
??0?$codecvt@_WDH@std@@QAE@I@Z
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
_Cnd_init
?_Throw_C_error@std@@YAXH@Z
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_Future_error_map@std@@YAPBDH@Z
?_Stat@sys@tr2@std@@YA?AW4file_type@123@PB_WAAH@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
_Cnd_destroy
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
_Mtx_destroy
_Mtx_unlock
_Cnd_broadcast
_Cnd_wait
_Mtx_lock
_Mtx_init
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_BADOFF@std@@3_JB
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??Bios_base@std@@QBE_NXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Rename@sys@tr2@std@@YAHPB_W0@Z
?_Close_dir@sys@tr2@std@@YAXPAX@Z
?_Read_dir@sys@tr2@std@@YAPA_WAAY0BAE@_WPAXAAW4file_type@123@@Z
?_Unlink@sys@tr2@std@@YAHPB_W@Z
?_Open_dir@sys@tr2@std@@YAPAXAAY0BAE@_WPB_WAAHAAW4file_type@123@@Z
?uncaught_exception@std@@YA_NXZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?width@ios_base@std@@QAE_J_J@Z
ws2_32
ntohs
ntohl
accept
listen
send
closesocket
__WSAFDIsSet
socket
bind
recv
setsockopt
htons
WSAGetLastError
select
htonl
inet_addr
connect
ioctlsocket
dsound
ord1
ord3
ord8
ord6
msvcr120
_except_handler4_common
__clean_type_info_names_internal
_libm_sse2_sin_precise
_libm_sse2_log10_precise
_libm_sse2_cos_precise
_libm_sse2_asin_precise
__CxxFrameHandler3
_except1
_CxxThrowException
_CIatan2
_stricmp
_strnicmp
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
_vsnprintf_s
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
vsprintf_s
_wcsicmp
_wcsnicmp
_libm_sse2_sqrt_precise
_setjmp3
memcpy
memset
_initterm_e
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
memmove
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
free
malloc
_snprintf_s
printf
sprintf_s
longjmp
realloc
_beginthreadex
wcstoul
_swprintf
??_V@YAXPAX@Z
_invalid_parameter_noinfo_noreturn
strchr
strrchr
strtoul
?__ExceptionPtrToBool@@YA_NPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
??0exception@std@@QAE@ABQBDH@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?Alloc@Concurrency@@YAPAXI@Z
??1scoped_lock@critical_section@Concurrency@@QAE@XZ
??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z
??1critical_section@Concurrency@@QAE@XZ
??0critical_section@Concurrency@@QAE@XZ
?set@event@Concurrency@@QAEXXZ
?wait@event@Concurrency@@QAEII@Z
??1event@Concurrency@@QAE@XZ
??0event@Concurrency@@QAE@XZ
?Free@Concurrency@@YAXPAX@Z
?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ
?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_GetCurrentInlineDepth@_StackGuard@details@Concurrency@@CAAAIXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_Oversubscribe@_Context@details@Concurrency@@SAX_N@Z
?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPAX@Z0@Z
?_NewCollection@_AsyncTaskCollection@details@Concurrency@@SAPAV123@PAV_CancellationTokenState@23@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
swprintf_s
rand
_time64
strncmp
wcschr
strstr
wcsstr
tolower
wcstod
wcsncmp
fscanf
fputc
sprintf
feof
fflush
_wfopen
fgets
wcsrchr
fread
ferror
fwrite
ftell
fseek
fclose
getc
_snwprintf_s
?terminate@@YAXXZ
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
_unlock_file
ungetc
fgetpos
_fseeki64
fgetc
fsetpos
setvbuf
_lock_file
memcpy_s
??8type_info@@QBE_NABV0@@Z
_localtime64_s
memchr
atoi
strtol
strncpy
isspace
fopen_s
isalpha
isdigit
wcstol
wcsncpy
_vswprintf
_waccess
_snprintf
wcstoull
?_wopen@@YAHPB_WHH@Z
wprintf
_wcslwr
_read
srand
_write
_close
vswprintf_s
_vswprintf_c_l
iphlpapi
GetAdaptersInfo
imm32
ImmSetConversionStatus
ImmAssociateContext
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmReleaseContext
ImmIsIME
ImmGetContext
ImmGetProperty
ImmGetConversionStatus
shlwapi
PathFileExistsW
wininet
InternetOpenW
InternetConnectW
HttpOpenRequestW
InternetCloseHandle
HttpQueryInfoW
InternetReadFile
HttpSendRequestW
InternetCrackUrlW
shell32
ord165
SHGetFolderPathW
ShellExecuteExW
ShellExecuteW
Exports
Exports
??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??0CxMemFile@@QAE@ABV0@@Z
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??1CxImage@@UAE@XZ
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_7CxImage@@6B@
??_7CxMemFile@@6B@
??_FCxIOFile@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXAAV0@@Z
?Close@CxIOFile@@UAE_NXZ
?Eof@CxIOFile@@UAE_NXZ
?Error@CxIOFile@@UAEHXZ
?Flush@CxIOFile@@UAE_NXZ
?GetC@CxIOFile@@UAEHXZ
?GetExifInfo@CxImage@@QAEPAUtag_ExifInfo@@XZ
?GetS@CxIOFile@@UAEPADPADH@Z
?Open@CxIOFile@@QAE_NPB_W0@Z
?PutC@CxFile@@UAE_NE@Z
?PutC@CxIOFile@@UAE_NE@Z
?Read@CxIOFile@@UAEIPAXII@Z
?Scanf@CxIOFile@@UAEHPBDPAX@Z
?Seek@CxIOFile@@UAE_NHH@Z
?Size@CxIOFile@@UAEHXZ
?Tell@CxIOFile@@UAEHXZ
?Write@CxIOFile@@UAEIPBXII@Z
createVBoxClient
initVbox
uninitVbox
Sections
.text Size: 744KB - Virtual size: 744KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ