aac49bdf2a290766e12f119fd6952d2f_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

aac49bdf2a290766e12f119fd6952d2f_JaffaCakes118
Size

4.5MB
MD5

aac49bdf2a290766e12f119fd6952d2f
SHA1

be227bbc503af48bef28e59480de8ba018791e66
SHA256

c2428f36721593af8f35b3238b57c96e2d88befe1d54166cd4a87e2e3e4ad153
SHA512

7944acbad3ed0d4caad378edb21290a3314e76d1743ce96a578ce785a6e399a0191c3b040ccdec1090d97f1013b084be669b26145cd166669335e8b82708ce9a
SSDEEP

98304:JIWw/9Sjh/AW9ycZ3HYMe3mPGtY2MtWgg4a0NBZ2vU95WwX6H49rjficJqdcoeEc:WHcvycZ343metYeyAvU95J6Qvf4JKd4g

Score

3^/10

Malware Config

Signatures

Unsigned PE 8 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DJJavaDecompiler_ha/Archiver.exe
unpack001/DJJavaDecompiler_ha/DJ.exe
unpack001/DJJavaDecompiler_ha/DJ_EN.exe
unpack001/DJJavaDecompiler_ha/FindFile.exe
unpack001/DJJavaDecompiler_ha/UnzDll.dll
unpack001/DJJavaDecompiler_ha/ZipDll.dll
unpack001/DJJavaDecompiler_ha/images/复件 DJ.exe
unpack001/DJJavaDecompiler_ha/jad.exe

Files

aac49bdf2a290766e12f119fd6952d2f_JaffaCakes118
.rar
DJJavaDecompiler_ha/Archiver.exe
.exe windows:4 windows x86 arch:x86

344b0d2fd71405d373ddaa7481cdc62a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoCreateInstance

comctl32

ImageList_SetIconSize

winspool.drv

OpenPrinterA

shell32

ShellExecuteA

comdlg32

PrintDlgA

lz32

LZOpenFileA

shfolder

SHGetFolderPathA

Sections

CODE
Size: 413KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DJJavaDecompiler_ha/DJ.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 9.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 1007KB - Virtual size: 1008KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DJJavaDecompiler_ha/DJHNEW.chm
.chm
DJJavaDecompiler_ha/DJ_EN.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 30KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 647KB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.!rc!
Size: - Virtual size: 940KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Geddon
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 939KB - Virtual size: 940KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DJJavaDecompiler_ha/Description.ini
DJJavaDecompiler_ha/Dj.xml
DJJavaDecompiler_ha/FindFile.exe
.exe windows:4 windows x86 arch:x86

5a5c0c83ccc0a80ec672d10b9472f12d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemAlloc

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

lz32

LZOpenFileA

Sections

CODE
Size: 276KB - Virtual size: 908KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 111KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DJJavaDecompiler_ha/JAVA工具精品新译5.txt
DJJavaDecompiler_ha/UnzDll.dll
.dll windows:4 windows x86 arch:x86

3dfc043207ac9a2d5f4cde4b24c9c6fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
DosDateTimeToFileTime
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
FormatMessageA
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCurrentDirectoryA
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetTimeZoneInformation
GetVersion
GetVersionExA
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatus
GlobalUnlock
HeapAlloc
HeapFree
IsBadReadPtr
LCMapStringA
LoadLibraryA
LocalFileTimeToFileTime
LocalFree
MultiByteToWideChar
OpenFile
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFileAttributesA
SetFilePointer
SetFileTime
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile
_lclose
lstrcatA
lstrcpyA
lstrcpynA
lstrlenA

shell32

SHChangeNotify

user32

CharToOemBuffA
DialogBoxParamA
EndDialog
EnumThreadWindows
GetDesktopWindow
MessageBoxA
OemToCharBuffA
SendDlgItemMessageA
SendMessageA
wsprintfA

Exports

Exports

DllEntryPoint
GetUnzDllPrivVersion
GetUnzDllVersion
UnzDllExec
___CPPdebugHook

Sections

.text
Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DJJavaDecompiler_ha/ZipDll.dll
.dll windows:4 windows x86 arch:x86

bd2660610e0b286dc2aeb3af93c91599

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileA
DeleteCriticalSection
DeleteFileA
DosDateTimeToFileTime
EnterCriticalSection
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetCPInfo
GetCurrentDirectoryA
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStrings
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetShortPathNameA
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemTime
GetTempPathA
GetTimeZoneInformation
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
InitializeCriticalSection
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LocalFileTimeToFileTime
MoveFileA
MultiByteToWideChar
RaiseException
ReadFile
RemoveDirectoryA
RtlUnwind
SetConsoleCtrlHandler
SetErrorMode
SetFileAttributesA
SetFilePointer
SetFileTime
SetHandleCount
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrcpynA
lstrlenA
GetVolumeInformationA

shell32

SHFileOperationA

user32

CharToOemBuffA
CharUpperBuffA
DialogBoxParamA
EndDialog
EnumThreadWindows
MessageBoxA
OemToCharBuffA
SendDlgItemMessageA
SendMessageA
wsprintfA

Exports

Exports

DllEntryPoint
GetZipDllPrivVersion
GetZipDllVersion
ZipDllExec
___CPPdebugHook

Sections

.text
Size: 91KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DJJavaDecompiler_ha/classes.txt
DJJavaDecompiler_ha/images/1.jpg
.jpg
DJJavaDecompiler_ha/images/10.jpg
.jpg
DJJavaDecompiler_ha/images/11.jpg
.jpg
DJJavaDecompiler_ha/images/12.jpg
.jpg
DJJavaDecompiler_ha/images/13.jpg
.jpg
DJJavaDecompiler_ha/images/14.jpg
.jpg
DJJavaDecompiler_ha/images/15.jpg
.jpg
DJJavaDecompiler_ha/images/16.jpg
.jpg
DJJavaDecompiler_ha/images/2.jpg
.jpg
DJJavaDecompiler_ha/images/3.jpg
.jpg
DJJavaDecompiler_ha/images/4.jpg
.jpg
DJJavaDecompiler_ha/images/5.jpg
.jpg
DJJavaDecompiler_ha/images/6.jpg
.jpg
DJJavaDecompiler_ha/images/7.jpg
.jpg
DJJavaDecompiler_ha/images/8.jpg
.jpg
DJJavaDecompiler_ha/images/9.jpg
.jpg
DJJavaDecompiler_ha/images/复件 DJ.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 30KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 647KB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.!rc!
Size: - Virtual size: 940KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Geddon
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 939KB - Virtual size: 940KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DJJavaDecompiler_ha/jad.exe
.exe windows:4 windows x86 arch:x86

aa9bdd6756356ffb890c3ed9cd664723

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetTimeZoneInformation
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetLastError
FindFirstFileA
FindNextFileA
GetProcAddress
GetModuleHandleA
ExitProcess
HeapFree
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetCPInfo
LCMapStringA
LCMapStringW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WriteFile
GetStdHandle
GetModuleFileNameA
LoadLibraryA
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
CloseHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
GetACP
GetOEMCP
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
ReadFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
CreateFileW
SetEndOfFile
CreateDirectoryA
GetFileAttributesA

Sections

.text
Size: 396KB - Virtual size: 394KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DJJavaDecompiler_ha/packages.txt

Sharing

General

Malware Config

Signatures

Files

344b0d2fd71405d373ddaa7481cdc62a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

mpr

version

gdi32

ole32

comctl32

winspool.drv

shell32

comdlg32

lz32

shfolder

Sections

CODE Size: 413KB - Virtual size: 1.3MB

.rsrc Size: 14KB - Virtual size: 16KB

Headers

File Characteristics

Sections

.nsp0 Size: - Virtual size: 9.6MB

.nsp1 Size: 1007KB - Virtual size: 1008KB

.nsp2 Size: - Virtual size: 6KB

Headers

File Characteristics

Sections

CODE Size: 2.8MB - Virtual size: 2.8MB

DATA Size: 30KB - Virtual size: 40KB

.idata Size: 12KB - Virtual size: 20KB

.rdata Size: 15B - Virtual size: 136KB

.text Size: 647KB - Virtual size: 4.8MB

.!rc! Size: - Virtual size: 940KB

.Geddon Size: 10KB - Virtual size: 12KB

.rsrc Size: 939KB - Virtual size: 940KB

5a5c0c83ccc0a80ec672d10b9472f12d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

version

gdi32

ole32

comctl32

shell32

comdlg32

lz32

Sections

CODE Size: 276KB - Virtual size: 908KB

.rsrc Size: 111KB - Virtual size: 112KB

3dfc043207ac9a2d5f4cde4b24c9c6fc

Headers

File Characteristics

Imports

kernel32

shell32

user32

Exports

Exports

Sections

.text Size: 85KB - Virtual size: 88KB

.data Size: 22KB - Virtual size: 28KB

.tls Size: 512B - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 4KB

.reloc Size: 3KB - Virtual size: 4KB

bd2660610e0b286dc2aeb3af93c91599

Headers

CODE
Size: 413KB - Virtual size: 1.3MB

.rsrc
Size: 14KB - Virtual size: 16KB

.nsp0
Size: - Virtual size: 9.6MB

.nsp1
Size: 1007KB - Virtual size: 1008KB

.nsp2
Size: - Virtual size: 6KB

CODE
Size: 2.8MB - Virtual size: 2.8MB

DATA
Size: 30KB - Virtual size: 40KB

.idata
Size: 12KB - Virtual size: 20KB

.rdata
Size: 15B - Virtual size: 136KB

.text
Size: 647KB - Virtual size: 4.8MB

.!rc!
Size: - Virtual size: 940KB

.Geddon
Size: 10KB - Virtual size: 12KB

.rsrc
Size: 939KB - Virtual size: 940KB

CODE
Size: 276KB - Virtual size: 908KB

.rsrc
Size: 111KB - Virtual size: 112KB

.text
Size: 85KB - Virtual size: 88KB

.data
Size: 22KB - Virtual size: 28KB

.tls
Size: 512B - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 4KB

.text
Size: 91KB - Virtual size: 92KB

.data
Size: 20KB - Virtual size: 36KB

.tls
Size: 512B - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 4KB

CODE
Size: 2.8MB - Virtual size: 2.8MB

DATA
Size: 30KB - Virtual size: 40KB

.idata
Size: 12KB - Virtual size: 20KB

.rdata
Size: 15B - Virtual size: 136KB

.text
Size: 647KB - Virtual size: 4.8MB

.!rc!
Size: - Virtual size: 940KB

.Geddon
Size: 10KB - Virtual size: 12KB

.rsrc
Size: 939KB - Virtual size: 940KB

.text
Size: 396KB - Virtual size: 394KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 16KB - Virtual size: 20KB

.rsrc
Size: 4KB - Virtual size: 176B