2024-06-16_5e4e2809c60859cb8bf5a65d96f1d444_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-16_5e4e2809c60859cb8bf5a65d96f1d444_mafia
Size

13.9MB
MD5

5e4e2809c60859cb8bf5a65d96f1d444
SHA1

bc592b0f5648ceda1e7a51f52e49c3444bdd1187
SHA256

92e7cb396bdadb76b660703c3230ab844fa95c346e4fbca431486b46c12e9f9c
SHA512

5e28aacf61006311d24c3b3e8b71eae19d382fc13d60c8829296f710fc46329efedd640d07cbf2a0e17c26c8f1bf1865b4348e8aa511404eee5653caee423f75
SSDEEP

196608:/cqDsZNH2haT3VKPp/xAdKrlW0REARHVzx3qmL3htAF5zbLrejzQO5GX7U8O:/cFKrQ2Zx3qmL3DAnzbnCEw8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-16_5e4e2809c60859cb8bf5a65d96f1d444_mafia

Files

2024-06-16_5e4e2809c60859cb8bf5a65d96f1d444_mafia
.exe windows:5 windows x86 arch:x86

dd7af24d62296255e4cfd802fceeb41f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\data\Software.MFC\iALotOfPathAndFileOperations\Ver32\iALotOfPathAndFileOperations.pdb

Imports

query

LoadIFilter

mpr

WNetGetConnectionA
WNetAddConnection3A
WNetConnectionDialog
WNetDisconnectDialog
WNetGetUniversalNameA

crypt32

CertOpenStore
CertCloseStore
CertFindCertificateInStore

fontsub

CreateFontPackage

kernel32

ExitThread
GetTimeFormatA
FindFirstFileExA
HeapQueryInformation
HeapSize
SetStdHandle
SetUnhandledExceptionFilter
IsValidCodePage
IsProcessorFeaturePresent
HeapCreate
HeapReAlloc
FreeEnvironmentStringsW
GetFileType
SetHandleCount
WriteConsoleW
GetLocaleInfoW
CompareStringW
LCMapStringW
SetConsoleCtrlHandler
GetStringTypeW
EnumSystemLocalesA
IsValidLocale
GetConsoleMode
GetConsoleCP
HeapAlloc
FlushConsoleInputBuffer
ReadConsoleInputA
SetConsoleMode
PeekNamedPipe
GetFileInformationByHandle
GetStartupInfoW
HeapSetInformation
GetDriveTypeW
SetEnvironmentVariableA
HeapFree
DecodePointer
EncodePointer
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathA
GetNumberFormatA
GetSystemDirectoryW
GetOEMCP
GlobalFlags
LocalReAlloc
FindNextFileA
GetPrivateProfileIntA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
lstrcmpA
InterlockedExchange
DuplicateHandle
GetFileSize
UnlockFile
LockFile
FlushFileBuffers
lstrcmpiA
GetFileAttributesExA
GetProfileIntA
lstrlenW
ReleaseActCtx
CreateActCtxW
SuspendThread
ResumeThread
GlobalFindAtomA
InitializeCriticalSectionAndSpinCount
ActivateActCtx
DeactivateActCtx
SetLastError
lstrcmpW
CreateDirectoryA
SetVolumeLabelA
GetFileAttributesA
SetFileAttributesA
GetCurrentDirectoryA
GetTempPathA
GetTempFileNameA
CreateEventA
DisableThreadLibraryCalls
EnumCalendarInfoA
FileTimeToDosDateTime
GetACP
GetCPInfo
FileTimeToSystemTime
FileTimeToLocalFileTime
GetLastError
GetDateFormatA
GetDiskFreeSpaceA
GetFullPathNameA
GetFullPathNameW
GetProfileStringA
GetStringTypeExA
GlobalHandle
LoadLibraryW
LocalFileTimeToFileTime
ResetEvent
SetErrorMode
SetEvent
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetStdHandle
RaiseException
RtlUnwind
UnhandledExceptionFilter
GetCommandLineA
GetLocaleInfoA
GetStartupInfoA
GetThreadLocale
LoadLibraryExA
VirtualQuery
GetVersion
LocalAlloc
VirtualAlloc
VirtualFree
DeleteCriticalSection
OpenProcess
BackupRead
BackupSeek
GlobalSize
GlobalReAlloc
lstrcpynA
GetFileAttributesExW
MoveFileWithProgressA
CopyFileExA
GetFileSizeEx
SetFilePointerEx
ReadFile
FindResourceA
FreeResource
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentProcess
CreateProcessA
GetBinaryTypeA
CompareStringA
MulDiv
GetSystemTime
GetLocalTime
GlobalGetAtomNameA
GlobalDeleteAtom
GlobalAddAtomA
WritePrivateProfileStringA
CopyFileA
MoveFileA
GetWindowsDirectoryA
GetPrivateProfileStringA
GetSystemInfo
GetSystemTimeAsFileTime
GetComputerNameA
GetVersionExA
ReleaseSemaphore
GetProcessHeap
HeapLock
HeapWalk
HeapUnlock
GlobalMemoryStatus
FindNextFileW
GetCurrentDirectoryW
GetTimeZoneInformation
SystemTimeToFileTime
TerminateProcess
GetExitCodeProcess
CreateProcessW
WaitForSingleObject
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
ReleaseMutex
CreateMutexA
RemoveDirectoryW
CreateDirectoryW
DeleteFileW
MoveFileW
CopyFileW
GetFileTime
SetFileTime
GetTempPathW
SetFileAttributesW
GetFileAttributesW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
FormatMessageA
LocalFree
SetEndOfFile
IsBadReadPtr
IsBadWritePtr
LoadLibraryA
GetProcAddress
QueryPerformanceCounter
FreeLibrary
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GetCurrentProcessId
CreateFileW
SetFilePointer
WriteFile
LoadResource
LockResource
SizeofResource
FindResourceW
GetModuleFileNameA
IsDebuggerPresent
DebugBreak
SetVolumeMountPointA
CreateHardLinkA
WideCharToMultiByte
MultiByteToWideChar
ExitProcess
CreateThread
GetDiskFreeSpaceExA
FindFirstFileA
GetVolumePathNameA
GetVolumeNameForVolumeMountPointA
RemoveDirectoryA
DeleteFileA
SetThreadPriority
lstrlenA
GlobalAlloc
GlobalLock
GlobalFree
lstrcpyA
GlobalUnlock
FindFirstFileW
FindClose
CreateFileA
DeviceIoControl
CloseHandle
WinExec
GetDriveTypeA
GetTickCount
GetVolumeInformationA
GetLogicalDrives
InitializeCriticalSection
FindCloseChangeNotification
FindFirstChangeNotificationA
WaitForMultipleObjects
FindNextChangeNotification
Sleep
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceFrequency
GetEnvironmentStringsW

user32

DrawTextA
TabbedTextOutA
MapVirtualKeyA
GetKeyNameTextA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
SystemParametersInfoA
DestroyMenu
GetActiveWindow
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
RedrawWindow
IsWindowVisible
ValidateRect
GetMenuItemID
GetMenuItemCount
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
CharUpperBuffA
CharLowerBuffA
CharUpperBuffW
CreateIcon
DrawIconEx
wvsprintfA
CharNextA
LoadStringA
GetKeyboardType
PostMessageA
GetWindowThreadProcessId
UpdateLayeredWindow
DrawTextExA
GetWindowTextA
GetClassNameA
LoadIconA
GetDesktopWindow
GetMessageA
GetDlgCtrlID
GetWindow
LockWindowUpdate
MonitorFromRect
MonitorFromWindow
EnumDisplayMonitors
UnionRect
GetMonitorInfoA
GetComboBoxInfo
SetRect
GetDC
ReleaseDC
ShowScrollBar
SendMessageW
MonitorFromPoint
IsMenu
CreatePopupMenu
SetMenuDefaultItem
GetMenuDefaultItem
WaitMessage
PostThreadMessageA
CopyAcceleratorTableA
ToAsciiEx
GetKeyboardLayout
GetWindowTextLengthA
GetWindowLongA
GetSysColor
EnumChildWindows
GetDialogBaseUnits
MapDialogRect
GetWindowTextW
SetWindowTextW
CharLowerA
CharUpperA
CharToOemA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
IsZoomed
RemoveMenu
EnableMenuItem
SetForegroundWindow
BringWindowToTop
wsprintfA
TranslateAcceleratorA
LoadAcceleratorsA
GetDoubleClickTime
ScreenToClient
PtInRect
GetIconInfo
DestroyIcon
GetFocus
KillTimer
SetTimer
InvalidateRect
UpdateWindow
GetWindowRect
IsClipboardFormatAvailable
IsWindow
OpenClipboard
GetClipboardData
EmptyClipboard
CloseClipboard
SetClipboardData
GetAsyncKeyState
AppendMenuW
RegisterClipboardFormatA
CreateMenu
SetMenuItemInfoA
GetCursor
LoadCursorA
SetCursor
CopyRect
GrayStringA
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
InsertMenuA
IsRectEmpty
SetCapture
ReleaseCapture
DrawStateA
PostQuitMessage
MessageBeep
OffsetRect
ShowOwnedPopups
SetWindowContextHelpId
RealChildWindowFromPoint
GetSysColorBrush
SetRectEmpty
SetLayeredWindowAttributes
FillRect
DrawTextW
DrawFocusRect
InflateRect
GetMenuItemInfoA
GetKeyState
GetMenuStringA
LoadBitmapA
LoadIconW
GetClientRect
IsIconic
LoadCursorW
IntersectRect
UnregisterClassA
GetSystemMenu
SetWindowRgn
WindowFromPoint
NotifyWinEvent
CreateWindowExA
EnableScrollBar
GetKeyboardState
DestroyAcceleratorTable
LoadAcceleratorsW
CreateAcceleratorTableA
SetParent
SetClassLongA
InsertMenuItemA
LoadImageA
GetProcessWindowStation
GetUserObjectInformationW
SendMessageA
DrawIcon
GetSystemMetrics
EnableWindow
GetParent
LoadMenuW
LoadMenuA
ReuseDDElParam
UnpackDDElParam
LoadImageW
InvalidateRgn
GetNextDlgGroupItem
DrawEdge
DrawFrameControl
SetCursorPos
InvertRect
HideCaret
FrameRect
CopyIcon
IsCharLowerA
MapVirtualKeyExA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
GetUpdateRect
SubtractRect
DestroyCursor
GetWindowRgn
LoadBitmapW
GetCursorPos
DeleteMenu
AppendMenuA
GetSubMenu
CopyImage

gdi32

GetEnhMetaFileBits
GetDeviceCaps
GetDIBColorTable
GetCurrentPositionEx
GetCharWidthW
GetCharWidth32W
GetBrushOrgEx
GetBitmapBits
GdiFlush
FillPath
ExtTextOutA
ExtEscape
EnumFontsA
EnumFontFamiliesExA
EnumEnhMetaFile
EndPath
EndPage
EndDoc
DeleteEnhMetaFile
CreateScalableFontResourceW
CreatePenIndirect
CreatePalette
CreateICA
CreateEnhMetaFileA
CreateDIBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileA
CombineTransform
CloseFigure
CloseEnhMetaFile
BeginPath
AddFontResourceW
CreateRectRgnIndirect
SaveDC
RestoreDC
SetPolyFillMode
SetMapMode
GetClipBox
ExcludeClipRect
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
GetKerningPairs
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
GetObjectType
CreateHatchBrush
CopyMetaFileA
EnumFontFamiliesA
GetTextCharsetInfo
GetEnhMetaFileDescriptionA
GetMapMode
DPtoLP
CreateRoundRectRgn
OffsetRgn
GetRgnBox
GetTextColor
GetBkColor
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
GetNearestPaletteIndex
Rectangle
ExtFloodFill
LPtoDP
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
SetPixelV
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetFontData
GetFontLanguageInfo
GetOutlineTextMetricsA
GetOutlineTextMetricsW
GetPaletteEntries
GetPixel
GetSystemPaletteEntries
GetTextFaceA
GetWinMetaFileBits
GetWindowOrgEx
IntersectClipRect
MaskBlt
PatBlt
PlayEnhMetaFile
PolyBezierTo
RemoveFontResourceW
SetAbortProc
SetBrushOrgEx
SetDIBColorTable
SetEnhMetaFileBits
SetICMMode
SetPaletteEntries
SetPixel
SetROP2
SetStretchBltMode
SetWinMetaFileBits
StartDocA
StartDocW
StartPage
StretchDIBits
StrokeAndFillPath
StrokePath
UnrealizeObject
FloodFill
SelectPalette
RealizePalette
GetDIBits
CreateDIBSection
CombineRgn
CreatePen
MoveToEx
LineTo
BitBlt
StretchBlt
DeleteDC
GetStockObject
GetTextMetricsA
CreateCompatibleDC
GetGlyphIndicesA
CreateHalftonePalette
CreateCompatibleBitmap
SetBkColor
GetGlyphIndicesW
SetRectRgn
GetGlyphOutlineW
CreateFontIndirectA
GetTextExtentPoint32A
SelectObject
CreateDCA
DeleteObject
CreateSolidBrush
SetTextColor
SetBkMode
TextOutA
GetTextExtentPointW
GetObjectA

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

EnumPrintersW
OpenPrinterA
DocumentPropertiesA
DeviceCapabilitiesA
ClosePrinter
SetJobA
EnumPrintersA
GetJobA
ord203

advapi32

CryptAcquireContextA
ReportEventA
RegisterEventSourceA
RegQueryValueA
RegEnumKeyA
EnumDependentServicesA
ControlService
QueryServiceConfigA
StartServiceA
QueryServiceStatus
OpenServiceA
OpenSCManagerA
CloseServiceHandle
IsValidSecurityDescriptor
LookupPrivilegeValueA
AdjustTokenPrivileges
DeregisterEventSource
CryptReleaseContext
CryptCreateHash
CryptDestroyHash
CryptHashData
CryptGetHashParam
OpenProcessToken
GetTokenInformation
RegDeleteKeyA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyA
RegEnumValueA
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

SHGetMalloc
DragQueryFileA
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteExA
Shell_NotifyIconA
ShellExecuteA
SHAppBarMessage
DragFinish
ExtractIconExA
SHGetSpecialFolderLocation
SHGetDesktopFolder
SHGetFileInfoA
SHFileOperationA

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW

ole32

RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
CoRegisterMessageFilter
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CreateStreamOnHGlobal
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CLSIDFromString
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleGetClipboard
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CLSIDFromProgID
CoCreateInstance
CoInitializeEx
CoUninitialize
CoCreateGuid
CoTaskMemFree
CoInitialize

oleaut32

SysFreeString
VariantInit
VariantClear
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopyInd
VariantCopy
GetErrorInfo
SysAllocStringByteLen
SysStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
SysAllocString

oledlg

ord8

gdiplus

GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetCompositingMode
GdipSetInterpolationMode
GdipSetPageUnit
GdipFillRectangle
GdipDrawString
GdipMeasureString
GdipDrawImageRectRectI
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipGetImageWidth
GdipGetImageHeight
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromHBITMAP
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipDeleteStringFormat
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipDrawImageI
GdipAlloc
GdipFree
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipSetImageAttributesColorKeys
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdiplusShutdown
GdiplusStartup
GdipCreateStringFormat

netapi32

NetDfsEnum
NetApiBufferFree
NetShareEnum

ws2_32

bind
listen
getsockopt
__WSAFDIsSet
ioctlsocket
setsockopt
htonl
ntohs
inet_ntoa
inet_addr
WSACleanup
recv
WSASetLastError
WSAStartup
socket
WSAGetLastError
htons
gethostbyname
connect
gethostname
closesocket
select
accept
shutdown
send

winmm

PlaySoundA

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

wininet

InternetQueryOptionA
InternetSetCookieA
InternetQueryDataAvailable
FtpSetCurrentDirectoryA
HttpOpenRequestA
InternetConnectA
FtpFindFirstFileA
HttpSendRequestExA
FtpGetCurrentDirectoryA
FtpPutFileA
HttpAddRequestHeadersA
HttpQueryInfoA
InternetFindNextFileA
InternetCloseHandle
InternetGetLastResponseInfoA
InternetOpenA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
HttpEndRequestA
InternetSetOptionExA

Sections

.text
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODE
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 412KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 510KB - Virtual size: 509KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd7af24d62296255e4cfd802fceeb41f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

query

mpr

crypt32

fontsub

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

netapi32

ws2_32

winmm

oleacc

imm32

version

wininet

Sections

.text Size: 4.9MB - Virtual size: 4.9MB

CODE Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 1.6MB - Virtual size: 1.6MB

.data Size: 412KB - Virtual size: 3.3MB

DATA Size: 134KB - Virtual size: 134KB

BSS Size: 12KB - Virtual size: 12KB

.rsrc Size: 3.9MB - Virtual size: 3.9MB

.reloc Size: 510KB - Virtual size: 509KB

.text
Size: 4.9MB - Virtual size: 4.9MB

CODE
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 412KB - Virtual size: 3.3MB

DATA
Size: 134KB - Virtual size: 134KB

BSS
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 3.9MB - Virtual size: 3.9MB

.reloc
Size: 510KB - Virtual size: 509KB