Static task
static1
Behavioral task
behavioral1
Sample
9978aff6c62dd70849731117c98a1a02319f985e6b337bed2efe1e515fdeb402_NeikiAnalytics.exe
Resource
win7-20240419-en
windows7-x64
Behavioral task
behavioral2
Sample
9978aff6c62dd70849731117c98a1a02319f985e6b337bed2efe1e515fdeb402_NeikiAnalytics.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
General
-
Target
9978aff6c62dd70849731117c98a1a02319f985e6b337bed2efe1e515fdeb402_NeikiAnalytics.exe
-
Size
1.1MB
-
MD5
9e117d0a5786a967028c06e826a46c20
-
SHA1
c4b09cbbf0b8037679d7667e792e0dd10c982784
-
SHA256
9978aff6c62dd70849731117c98a1a02319f985e6b337bed2efe1e515fdeb402
-
SHA512
d699b797c0f5cc158da73d4140fd1b7e97bf8fa038e0da6f06066ea22c7086dadc55fb48bdd16ddb73c68c4cff458a3fd7c9477eca02150d5f0aa61ef1d60efe
-
SSDEEP
24576:ywHPYIC5wvZ/HjEUfeRRszKF6YirIspO1U1MYN2IuuuNuuuHuuuZuuu:ygC5wvlHjLfeRRsmgYirIspW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9978aff6c62dd70849731117c98a1a02319f985e6b337bed2efe1e515fdeb402_NeikiAnalytics.exe
Files
-
9978aff6c62dd70849731117c98a1a02319f985e6b337bed2efe1e515fdeb402_NeikiAnalytics.exe.exe windows:4 windows x64 arch:x64
8d92a131bbbed8696ff6b2484d84a0ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
libpstream
_ZN4Foam8UPstream12waitRequestsEii
_ZN4Foam8UPstream16waitSomeRequestsEiiPNS_11DynamicListIiLi16EEE
_ZN4Foam8UPstream9nRequestsEv
_ZN4Foam9UIPstream4readENS_8UPstream10commsTypesEiPcxiiPNS1_7RequestE
_ZN4Foam9UOPstream5writeENS_8UPstream10commsTypesEiPKcxiiPNS1_7RequestENS1_9sendModesE
libopenfoam
_ZN4Foam10DLListBase10removeHeadEv
_ZN4Foam10DLListBase9push_backEPNS0_4linkE
_ZN4Foam10FatalErrorE
_ZN4Foam10UOPBstreamD2Ev
_ZN4Foam10dictionary12subDictOrAddERKNS_4wordENS_7keyType6optionE
_ZN4Foam10dictionary3addERKNS_7keyTypeERKNS_4wordEb
_ZN4Foam10dictionary3addERKNS_7keyTypeERKS0_b
_ZN4Foam10dictionary3addERKNS_7keyTypeEib
_ZN4Foam10dictionary5mergeERKS0_
_ZN4Foam10dictionary6removeERKNS_4wordE
_ZN4Foam10dictionary7subDictERKNS_4wordENS_7keyType6optionE
_ZN4Foam10dictionaryC1ERNS_7IstreamE
_ZN4Foam10dictionaryC1Ev
_ZN4Foam10dictionaryD1Ev
_ZN4Foam10dictionaryD2Ev
_ZN4Foam10fieldTypes14calculatedTypeE
_ZN4Foam10tetIndices10nWarnings_E
_ZN4Foam11VectorSpaceINS_6VectorIdEEdLh3EE8typeNameE
_ZN4Foam11dimPressureE
_ZN4Foam11regIOobject10readStreamERKNS_4wordEb
_ZN4Foam11regIOobject11setUpToDateEv
_ZN4Foam11regIOobject14readIfModifiedEv
_ZN4Foam11regIOobject14updateMetaDataEv
_ZN4Foam11regIOobject4readEv
_ZN4Foam11regIOobject5closeEv
_ZN4Foam11regIOobject6renameERKNS_4wordE
_ZN4Foam11regIOobject7checkInEv
_ZN4Foam11regIOobject8addWatchERKNS_8fileNameE
_ZN4Foam11regIOobject8addWatchEv
_ZN4Foam11regIOobject8headerOkEv
_ZN4Foam11regIOobject8readDataERNS_7IstreamE
_ZN4Foam11regIOobject8typeNameE
_ZN4Foam11regIOobjectC2ERKNS_4wordERKS0_b
_ZN4Foam11regIOobjectC2ERKNS_8IOobjectEb
_ZN4Foam11regIOobjectD2Ev
_ZN4Foam12FatalIOErrorE
_ZN4Foam12IOdictionaryC1ERKNS_8IOobjectEPKNS_10dictionaryE
_ZN4Foam12IOobjectListC1ERKNS_14objectRegistryERKNS_8fileNameES6_NS_14IOobjectOptionE
_ZN4Foam12dimensionSet9readEntryERKNS_4wordERKNS_10dictionaryENS_14IOobjectOption10readOptionE
_ZN4Foam12dimensionSetC1ERKS0_
_ZN4Foam12orientedType4readERKNS_10dictionaryE
_ZN4Foam12readRawLabelERNS_7IstreamEPiy
_ZN4Foam13UIPstreamBase12beginRawReadEv
_ZN4Foam13UIPstreamBase4readEPcx
_ZN4Foam13UIPstreamBase4readERNS_4wordE
_ZN4Foam13UIPstreamBase4readERNS_5tokenE
_ZN4Foam13UIPstreamBase4readERNS_6stringE
_ZN4Foam13UIPstreamBase4readERc
_ZN4Foam13UIPstreamBase4readERd
_ZN4Foam13UIPstreamBase4readERf
_ZN4Foam13UIPstreamBase4readERi
_ZN4Foam13UIPstreamBase6rewindEv
_ZN4Foam13UIPstreamBase7readRawEPcx
_ZN4Foam13UIPstreamBaseD2Ev
_ZN4Foam13UOPstreamBase11writeQuotedEPKcxb
_ZN4Foam13UOPstreamBase13beginRawWriteEx
_ZN4Foam13UOPstreamBase5writeEPKc
_ZN4Foam13UOPstreamBase5writeEPKcx
_ZN4Foam13UOPstreamBase5writeERKNS_4wordE
_ZN4Foam13UOPstreamBase5writeERKNS_5tokenE
_ZN4Foam13UOPstreamBase5writeERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN4Foam13UOPstreamBase5writeEc
_ZN4Foam13UOPstreamBase5writeEd
_ZN4Foam13UOPstreamBase5writeEf
_ZN4Foam13UOPstreamBase5writeEi
_ZN4Foam13UOPstreamBase5writeEx
_ZN4Foam13UOPstreamBase6rewindEv
_ZN4Foam13UOPstreamBase8writeRawEPKcx
_ZN4Foam13messageStream6streamEPNS_8OSstreamE
_ZN4Foam13messageStreamclEPKcS2_i
_ZN4Foam13messageStreamclEPKcS2_iRKNS_10dictionaryE
_ZN4Foam13nullObjectPtrE
_ZN4Foam13readRawScalarERNS_7IstreamEPdy
_ZN4Foam14emptyPolyPatch8typeNameE
_ZN4Foam14objectRegistry14readIfModifiedEv
_ZN4Foam14objectRegistry6renameERKNS_4wordE
_ZN4Foam14objectRegistryD2Ev
_ZN4Foam15cyclicPolyPatch8typeNameE
_ZN4Foam16baseIOdictionary8typeNameE
_ZN4Foam17localIOdictionaryC1ERKNS_8IOobjectERKNS_4wordEPKNS_10dictionaryE
_ZN4Foam17mapDistributeBase17checkReceivedSizeEiii
_ZN4Foam3magERKNS_12orientedTypeE
_ZN4Foam3powEii
_ZN4Foam4InfoE
_ZN4Foam4PoutE
_ZN4Foam4Time15controlDictNameE
_ZN4Foam4Time7setTimeERKNS_7instantEi
_ZN4Foam4TimeC1ERKNS_4wordERKNS_7argListES3_S3_bbNS_14IOobjectOption10readOptionE
_ZN4Foam4TimeD1Ev
_ZN4Foam4word4nullE
_ZN4Foam4word5debugE
_ZN4Foam5cloud11defaultNameE
_ZN4Foam5cloud11readObjectsERKNS_14objectRegistryE
_ZN4Foam5cloud17geometryTypeNamesE
_ZN4Foam5cloud6prefixE
_ZN4Foam5cloudC2ERKNS_14objectRegistryERKNS_4wordE
_ZN4Foam5error10printStackERNS_7OstreamEi
_ZN4Foam5error4exitEi
_ZN4Foam5error5abortEv
_ZN4Foam5error6streamEv
_ZN4Foam5errorclEPKcS2_i
_ZN4Foam5mkDirERKNS_8fileNameEt
_ZN4Foam5token21transferCompoundTokenEPKNS_7IstreamE
_ZN4Foam5token8compound10isCompoundERKNS_4wordE
_ZN4Foam5tokenC1ERNS_7IstreamE
_ZN4Foam6HasherEPKvyj
_ZN4Foam6dlOpenESt16initializer_listINS_8fileNameEEb
_ZN4Foam6string14removeRepeatedEc
_ZN4Foam6string9removeEndEc
_ZN4Foam6wordReC1ERKNS_7keyTypeE
_ZN4Foam7IOFieldINS_6VectorIdEEE8typeNameE
_ZN4Foam7IOFieldIdE8typeNameE
_ZN4Foam7IOFieldIiE8typeNameE
_ZN4Foam7IOerror4exitEi
_ZN4Foam7IOerrorclEPKcS2_iRKNS_10dictionaryE
_ZN4Foam7IOerrorclEPKcS2_iRKNS_8IOstreamE
_ZN4Foam7Istream11readEndListEPKc
_ZN4Foam7Istream13readBeginListEPKc
_ZN4Foam7Istream7putBackERKNS_5tokenE
_ZN4Foam7Istream7readEndEPKc
_ZN4Foam7Istream9readBeginEPKc
_ZN4Foam7Ostream10beginBlockERKNS_7keyTypeE
_ZN4Foam7Ostream10beginBlockEv
_ZN4Foam7Ostream11writeQuotedERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEb
_ZN4Foam7Ostream12writeKeywordERKNS_7keyTypeE
_ZN4Foam7Ostream5writeERKNS_7keyTypeE
_ZN4Foam7Ostream8endBlockEv
_ZN4Foam7Ostream8endEntryEv
_ZN4Foam7Pstream5debugE
_ZN4Foam7WarningE
_ZN4Foam7argList13argsMandatoryEv
_ZN4Foam7argList7addNoteERKNS_6stringE
_ZN4Foam7argListC1ERiRPPcbbb
_ZN4Foam7argListD1Ev
_ZN4Foam7dimlessE
_ZN4Foam7pTraitsIdE8typeNameE
_ZN4Foam7pTraitsIdEC1ERNS_7IstreamE
_ZN4Foam8IOobject15writeEndDividerERNS_7OstreamE
_ZN4Foam8IOobject18readAndCheckHeaderEbRKNS_4wordEbbb
_ZN4Foam8IOobjectC1ERKNS_4wordERKNS_8fileNameERKNS_14objectRegistryENS_14IOobjectOptionE
_ZN4Foam8IOobjectC1ERKNS_4wordERKNS_8fileNameES6_RKNS_14objectRegistryENS_14IOobjectOptionE
_ZN4Foam8IOstream10precision_E
_ZN4Foam8IPstreamC1ENS_8UPstream10commsTypesEiiiiNS_14IOstreamOption12streamFormatE
_ZN4Foam8OFstreamC1ENS_14IOstreamOption10atomicTypeERKNS_8fileNameES1_NS1_10appendTypeE
_ZN4Foam8OFstreamD1Ev
_ZN4Foam8OPstreamC1ENS_8UPstream10commsTypesEiiiiNS_14IOstreamOption12streamFormatE
_ZN4Foam8UPstream15nProcsSimpleSumE
_ZN4Foam8UPstream16defaultCommsTypeE
_ZN4Foam8UPstream17treeCommunicationEi
_ZN4Foam8UPstream19linearCommunicationEi
_ZN4Foam8UPstream7parRun_E
_ZN4Foam8UPstream8msgType_E
_ZN4Foam8UPstream8procIDs_E
_ZN4Foam8UPstream9myProcNo_E
_ZN4Foam8UPstream9worldCommE
_ZN4Foam8fileName20allowSpaceInFileNameE
_ZN4Foam8fileName4nullE
_ZN4Foam8fileName5debugE
_ZN4Foam8polyMesh10regionNameERKNS_4wordE
_ZN4Foam8polyMesh13defaultRegionE
_ZN4Foam9FieldBase28allowConstructFromLargerSizeE
_ZN4Foam9IPBstreamC1EiiNS_14IOstreamOption12streamFormatE
_ZN4Foam9OPBstreamC1EiiNS_14IOstreamOption12streamFormatE
_ZN4Foam9UOPstreamD2Ev
_ZN4Foam9regExpCxx11set_patternEPKcyb
_ZN4FoamdvERKNS_6stringES2_
_ZN4FoamlsERNS_7OstreamEPKc
_ZN4FoamlsERNS_7OstreamERKNS_12dimensionSetE
_ZN4FoamlsERNS_7OstreamERKNS_4wordE
_ZN4FoamlsERNS_7OstreamERKNS_5token16punctuationTokenE
_ZN4FoamlsERNS_7OstreamERKNS_8fileNameE
_ZN4FoamlsERNS_7OstreamERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN4FoamlsERNS_7OstreamEc
_ZN4FoamlsERNS_7OstreamEd
_ZN4FoamlsERNS_7OstreamEi
_ZN4FoamlsINS_5tokenEEERNS_7OstreamES3_RKNS_9InfoProxyIT_EE
_ZN4FoamlsINS_8IOobjectEEERNS_7OstreamES3_RKNS_9InfoProxyIT_EE
_ZN4FoammlERKNS_5UListIdEERKNS_3tmpINS_5FieldIdEEEE
_ZN4FoamplERKNS_5UListIdEERKd
_ZN4FoamrsERNS_7IstreamERNS_4wordE
_ZN4FoamrsERNS_7IstreamERNS_5tokenE
_ZN4FoamrsERNS_7IstreamERd
_ZN4FoamrsERNS_7IstreamERi
_ZNK4Foam10dictionary12relativeNameEb
_ZNK4Foam10dictionary13checkITstreamERKNS_8ITstreamERKNS_4wordE
_ZNK4Foam10dictionary7csearchERKNS_4wordENS_7keyType6optionE
_ZNK4Foam10dictionary7subDictERKNS_4wordENS_7keyType6optionE
_ZNK4Foam11regIOobject11writeObjectENS_14IOstreamOptionEb
_ZNK4Foam11regIOobject12findMetaDataEv
_ZNK4Foam11regIOobject5writeEb
_ZNK4Foam11regIOobject8filePathEv
_ZNK4Foam11regIOobject8modifiedEv
_ZNK4Foam12IOobjectList11sortedNamesEPKc
_ZNK4Foam12dimensionSetaSERKS0_
_ZNK4Foam12dimensionSeteqERKS0_
_ZNK4Foam12orientedType10writeEntryERNS_7OstreamE
_ZNK4Foam13UIPstreamBase5printERNS_7OstreamE
_ZNK4Foam13UOPstreamBase5printERNS_7OstreamE
_ZNK4Foam13primitiveMesh10cellShapesEv
_ZNK4Foam13primitiveMesh11cellCentresEv
_ZNK4Foam14objectRegistry11writeObjectENS_14IOstreamOptionEb
_ZNK4Foam14objectRegistry13cfindIOobjectERKNS_4wordEb
_ZNK4Foam14objectRegistry23is_cacheTemporaryObjectEPKNS_11regIOobjectE
_ZNK4Foam14objectRegistry8modifiedEv
_ZNK4Foam17mapDistributeBase13whichScheduleENS_8UPstream10commsTypesE
_ZNK4Foam5UListINS_8UPstream11commsStructEEixEi
_ZNK4Foam5cloud12writeObjectsERNS_14objectRegistryE
_ZNK4Foam5entry13checkITstreamERKNS_8ITstreamE
_ZNK4Foam6flipOpclINS_6VectorIdEEEET_RKS4_
_ZNK4Foam6flipOpclIdEET_RKS2_
_ZNK4Foam7argList13checkRootCaseEv
_ZNK4Foam7argList18createProcInfoFileEv
_ZNK4Foam8IOobject11writeHeaderERNS_7OstreamERKNS_4wordE
_ZNK4Foam8IOobject13objectRelPathEv
_ZNK4Foam8IOobject2dbEv
_ZNK4Foam8IOobject4pathEv
_ZNK4Foam8IOobject4timeEv
_ZNK4Foam8IOstream10fatalCheckEPKc
_ZNK4Foam8IOstream4nameEv
_ZNK4Foam8IOstream5checkEPKc
_ZNK4Foam8IOstream5printERNS_7OstreamE
_ZNK4Foam8polyMesh11tetBasePtIsEv
_ZNK4Foam8polyMesh6pointsEv
_ZNK4Foam9TimePaths5timesEv
_ZTVN4Foam13IStringStreamE
_ZTVN4Foam13OStringStreamE
_ZTVN4Foam16baseIOdictionaryE
_ZTVN4Foam5cloudE
_ZTVN4Foam8IOobjectE
_ZTVN4Foam8ISstreamE
_ZTVN4Foam8OSstreamE
libfinitevolume
_ZN4Foam12fvPatchFieldINS_6VectorIdEEE21patchConstructorTableERKNS_4wordE
_ZN4Foam12fvPatchFieldINS_6VectorIdEEE25patchConstructorTablePtr_E
_ZN4Foam12fvPatchFieldINS_6VectorIdEEE26dictionaryConstructorTableERKNS_4wordE
_ZN4Foam12fvPatchFieldINS_6VectorIdEEE30dictionaryConstructorTablePtr_E
_ZN4Foam12fvPatchFieldIdE21patchConstructorTableERKNS_4wordE
_ZN4Foam12fvPatchFieldIdE25patchConstructorTablePtr_E
_ZN4Foam12fvPatchFieldIdE26dictionaryConstructorTableERKNS_4wordE
_ZN4Foam12fvPatchFieldIdE30dictionaryConstructorTablePtr_E
_ZN4Foam14GeometricFieldINS_6VectorIdEENS_12fvPatchFieldENS_7volMeshEE5debugE
_ZN4Foam14GeometricFieldINS_6VectorIdEENS_12fvPatchFieldENS_7volMeshEE8typeNameE
_ZN4Foam14GeometricFieldIdNS_12fvPatchFieldENS_7volMeshEE5debugE
_ZN4Foam14GeometricFieldIdNS_12fvPatchFieldENS_7volMeshEE8typeNameE
_ZN4Foam16DimensionedFieldINS_6VectorIdEENS_7volMeshEE8typeNameE
_ZN4Foam16DimensionedFieldIdNS_7volMeshEE8typeNameE
_ZN4Foam16fvPatchFieldBase25disallowGenericPatchFieldE
_ZN4Foam16fvPatchFieldBase5debugE
_ZN4Foam16fvPatchFieldBase8readDictERKNS_10dictionaryE
_ZN4Foam16fvPatchFieldBase8typeNameE
_ZN4Foam16fvPatchFieldBaseC2ERKS0_
_ZN4Foam22GeometricBoundaryFieldINS_6VectorIdEENS_12fvPatchFieldENS_7volMeshEE5debugE
_ZN4Foam22GeometricBoundaryFieldIdNS_12fvPatchFieldENS_7volMeshEE5debugE
_ZN4Foam6fvMesh10movePointsERKNS_5FieldINS_6VectorIdEEEE
_ZN4Foam6fvMesh4initEb
_ZN4Foam6fvMeshC1ERKNS_8IOobjectEb
_ZN4Foam6fvMeshD1Ev
_ZNK4Foam14fvBoundaryMesh11findPatchIDERKNS_4wordE
_ZNK4Foam14fvBoundaryMesh7indicesERKNS_6wordReEb
_ZNK4Foam16fvPatchFieldBase10checkPatchERKS0_
_ZNK4Foam22GeometricBoundaryFieldIdNS_12fvPatchFieldENS_7volMeshEE5checkEv
_ZNK4Foam7fvPatch11deltaCoeffsEv
_ZTVN4Foam16fvPatchFieldBaseE
liblagrangian
_ZN4Foam5CloudINS_15passiveParticleEE5debugE
_ZN4Foam5CloudINS_15passiveParticleEE8typeNameE
_ZN4Foam8particle14particleCount_E
_ZN4Foam8particle19transformPropertiesERKNS_6TensorIdEE
_ZN4Foam8particle19transformPropertiesERKNS_6VectorIdEE
_ZN4Foam8particle24writeLagrangianPositionsE
_ZN4Foam8particle26writeLagrangianCoordinatesE
_ZN4Foam8particle7autoMapERKNS_6VectorIdEERKNS_11mapPolyMeshE
_ZN4Foam8particle8typeNameE
_ZN4Foam8particleC2ERKNS_8polyMeshERNS_7IstreamEbbb
_ZN4Foam8particleC2ERKS0_
_ZNK4Foam8particle13writePositionERNS_7OstreamE
_ZNK4Foam8particle16writeCoordinatesERNS_7OstreamE
libmeshtools
_ZNK4Foam18cyclicAMIPolyPatch3AMIEv
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__C_specific_handler
___lc_codepage_func
__dllonexit
__doserrno
__getmainargs
__initenv
__iob_func
__lconv_init
__mb_cur_max
__pioinfo
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_filelengthi64
_fileno
_fmode
_fstat64
_initterm
_lock
_lseeki64
_onexit
_strnicmp
_unlock
_write
abort
calloc
exit
fclose
fflush
fgetpos
fopen
fprintf
fputc
fputs
fread
free
fsetpos
fwrite
getc
getenv
getwc
isspace
iswctype
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
putc
putwc
realloc
setlocale
setvbuf
signal
sprintf
strcmp
strcoll
strerror
strftime
strlen
strncmp
strtoul
strxfrm
towlower
towupper
ungetc
ungetwc
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
_write
_read
_fileno
_fdopen
libwinpthread-1
pthread_cond_broadcast
pthread_cond_wait
pthread_getspecific
pthread_key_create
pthread_key_delete
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_unlock
pthread_once
pthread_setspecific
Sections
.text Size: 864KB - Virtual size: 864KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE