DiskInfo64A[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

DiskInfo64A.exe
Size

2.7MB
MD5

68413ccaf37442ea0b863474f775fcc7
SHA1

bde085da7de790de6af0e02b5476f74c220f55d8
SHA256

7f9e62788f2c9fc5bf2edcdda0c335f847eee8ec2c36642bbcfa5cf94847b2af
SHA512

6a77355e738afb113a18a4d61999cf174ce252dded822a5d9ce79c124b91b2cfd9ed7c82022a6b22ebd7337954e3df32fda23ebd13a13a3f743f0d8081a19d77
SSDEEP

49152:ry+Z7c3fZLPBqpJwkhR80l4muY1IHnTWz1ozFG:uU7pphR8dmuoIHrzFG

Score

1^/10

Malware Config

Signatures

Files

DiskInfo64A.exe
.exe windows:5 windows x64 arch:x64

309d669452943e70699beca1dc39b649

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4e:d3:c3:e6:41:76:90:14:67:47:c7:1e:0c:6a:51:50
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

13/02/2023, 07:59

Not After

13/02/2024, 07:59

Subject

CN=Open Source Developer\, Noriyuki Miyazaki,O=Open Source Developer,L=Sapporo,C=JP,1.2.840.113549.1.9.1=#0c196869796f6869796f406372797374616c6d61726b2e696e666f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

02/11/2023, 08:32

Not After

30/10/2034, 08:32

Subject

CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4e:d3:c3:e6:41:76:90:14:67:47:c7:1e:0c:6a:51:50
Certificate

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

13/02/2023, 07:59

Not After

13/02/2024, 07:59

Subject

CN=Open Source Developer\, Noriyuki Miyazaki,O=Open Source Developer,L=Sapporo,C=JP,1.2.840.113549.1.9.1=#0c196869796f6869796f406372797374616c6d61726b2e696e666f

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Not Before

02/11/2023, 08:32

Not After

30/10/2034, 08:32

Subject

CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

19/05/2021, 05:32

Not After

18/05/2036, 05:32

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

31/05/2021, 06:43

Not After

17/09/2029, 06:43

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

01:76:7c:75:56:ed:6e:d1:70:b3:f7:e8:2a:49:bb:04:59:99:a4:c2:c9:43:ae:13:e4:33:05:9d:b7:77:91:a6
Signer

Actual PE Digest

01:76:7c:75:56:ed:6e:d1:70:b3:f7:e8:2a:49:bb:04:59:99:a4:c2:c9:43:ae:13:e4:33:05:9d:b7:77:91:a6

Digest Algorithm

sha256

PE Digest Matches

true

98:01:7d:34:c2:b3:64:fb:8f:63:2b:45:ce:a8:f5:05:a8:fc:c6:dd
Signer

Actual PE Digest

98:01:7d:34:c2:b3:64:fb:8f:63:2b:45:ce:a8:f5:05:a8:fc:c6:dd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
LoadLibraryExA
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
FindFirstFileExW
GetFileAttributesW
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
LCMapStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
EnumSystemLocalesW
IsValidLocale
GetOEMCP
IsValidCodePage
GetStringTypeW
GetCPInfo
ExitProcess
GetStdHandle
HeapQueryInformation
GetFileType
SetStdHandle
GetCommandLineA
VirtualQuery
GetSystemInfo
RtlPcToFileHeader
RtlUnwindEx
RaiseException
OutputDebugStringW
FileTimeToLocalFileTime
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
FileTimeToSystemTime
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetThreadLocale
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameW
GetFileSize
FlushFileBuffers
GetTickCount64
GetCurrentProcessId
lstrcmpA
GetFileAttributesExW
GetVersionExW
GetCurrentThread
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
GlobalDeleteAtom
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
FormatMessageW
MulDiv
LocalFree
GlobalFree
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GetModuleHandleExW
SetLastError
OutputDebugStringA
GetACP
MultiByteToWideChar
VirtualFree
VirtualAlloc
OpenMutexW
ReleaseMutex
DeviceIoControl
SetFilePointer
ReadFile
GetDriveTypeW
DefineDosDeviceW
DeleteCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
GetPrivateProfileStringW
GetTickCount
VerifyVersionInfoW
GetWindowsDirectoryW
GetCurrentProcess
VerSetConditionMask
FindNextFileW
FindFirstFileW
FindClose
lstrlenW
lstrcmpW
LoadLibraryExW
VirtualProtect
GetTimeZoneInformation
GetProcAddress
GetModuleHandleW
WritePrivateProfileStringW
GetVolumeInformationW
GetDiskFreeSpaceExW
WideCharToMultiByte
GlobalLock
GlobalUnlock
GlobalAlloc
GetComputerNameW
LoadLibraryW
FreeLibrary
GetLocalTime
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
GetTempPathW
WriteFile
DeleteFileW
CreateFileW
GetPrivateProfileIntW
GetModuleFileNameW
Sleep
CreateMutexW
SetErrorMode
CloseHandle
CreateDirectoryW
GetCommandLineW
GetUserDefaultLCID
FindResourceW
SizeofResource
LockResource
LoadResource
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
SetFilePointerEx
GetLastError

user32

GetTopWindow
GetClassNameW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
PtInRect
EqualRect
GetSysColor
MapWindowPoints
ScreenToClient
MessageBoxW
AdjustWindowRectEx
GetWindowTextLengthW
RemovePropW
GetPropW
RedrawWindow
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
SetActiveWindow
UpdateWindow
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetFocus
GetWindow
SetWindowsHookExW
UnhookWindowsHookEx
PostMessageW
GetMenuItemCount
GetMenuItemID
CallNextHookEx
GetParent
OffsetRect
SetRectEmpty
SendDlgItemMessageA
GetWindowInfo
AdjustWindowRect
UnregisterClassW
FrameRect
PrintWindow
MonitorFromWindow
SetWindowLongW
GetWindowLongW
ReleaseDC
GetDC
TranslateAcceleratorW
LoadAcceleratorsW
SystemParametersInfoW
SetPropW
FillRect
LoadCursorW
SetCursor
SetScrollRange
WinHelpW
GetMonitorInfoW
ShowWindow
MoveWindow
GetScrollPos
SetScrollPos
RemoveMenu
ModifyMenuW
IsWindowEnabled
SetWindowTextW
IsDialogMessageW
CharUpperW
GetLastActivePopup
EnableWindow
InvalidateRect
GetClientRect
RegisterWindowMessageW
SendMessageW
UnregisterDeviceNotification
WaitForInputIdle
IsWindowVisible
IsIconic
SetTimer
KillTimer
GetSystemMetrics
GetMenuState
DrawMenuBar
DestroyMenu
CheckMenuItem
GetSubMenu
DrawIcon
SetForegroundWindow
GetWindowTextW
GetWindowRect
EnumWindows
GetWindowThreadProcessId
CheckMenuRadioItem
LoadIconW
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterDeviceNotificationW
CopyRect
MonitorFromRect
CreateMenu
CreatePopupMenu
TrackPopupMenu
InsertMenuItemW
GetCursorPos
LoadImageW
wsprintfW
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
GetActiveWindow
GetDesktopWindow
GetMessageW
TranslateMessage
PostQuitMessage
EnableMenuItem
AppendMenuW
RegisterClipboardFormatW
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
ClientToScreen
MessageBeep
GetNextDlgGroupItem
IsRectEmpty
SetRect
InvalidateRgn
CopyAcceleratorTableW
CharNextW
IntersectRect
PostThreadMessageW
ReleaseCapture
SetCapture
MapDialogRect
RealChildWindowFromPoint
GetSysColorBrush
WindowFromPoint
SetWindowContextHelpId

gdi32

GetStockObject
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
RestoreDC
SaveDC
ExtSelectClipRgn
SetBkMode
SetMapMode
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
GetMapMode
GetRgnBox
GetClipBox
Escape
SetBkColor
CreateBitmap
GetPixel
CreatePatternBrush
GetTextColor
GetBkColor
CreateSolidBrush
MoveToEx
GetObjectW
SetDIBColorTable
CreateDIBSection
SetTextColor
SetBitmapBits
SelectObject
LineTo
GetTextExtentPoint32W
GetDeviceCaps
GetBitmapBits
DeleteObject
CreatePen
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
EnumFontFamiliesExW
BitBlt
DeleteDC

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

StartServiceW
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegCloseKey
QueryServiceStatus
OpenServiceW
OpenSCManagerW
CloseServiceHandle
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
InitializeAcl
FreeSid
AllocateAndInitializeSid
AddAccessAllowedAce

shell32

CommandLineToArgvW
ShellExecuteW
ord680
SHAppBarMessage
Shell_NotifyIconW

comctl32

ImageList_ReplaceIcon
_TrackMouseEvent
InitCommonControlsEx

shlwapi

SHDeleteKeyW
PathFindExtensionW
UrlCreateFromPathW
PathStripToRootW
PathRemoveFileSpecW
PathIsUNCW
PathFindFileNameW

uxtheme

SetWindowTheme

ole32

OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateGuid
CoTaskMemFree
CoTaskMemAlloc
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CoInitializeEx
CoUninitialize
CoGetClassObject
CoRevokeClassObject
OleFlushClipboard
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromProgID
CLSIDFromString
OleIsCurrentClipboard

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayDestroy
SafeArrayCreate
VariantTimeToSystemTime
SysStringLen
DispCallFunc
LoadRegTypeLi
VariantCopy
VariantChangeType
SysAllocStringLen
SafeArrayGetElement
VariantClear
VariantInit
SysFreeString
SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime

gdiplus

GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipSaveImageToFile
GdipCreateBitmapFromFile
GdipGetImagePaletteSize
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipGetImageEncodersSize
GdipGetImagePalette
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdiplusShutdown
GdipCloneImage
GdipFree
GdipAlloc
GdiplusStartup
GdipGetImageEncoders

winmm

mciSendCommandW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

wintrust

WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WinVerifyTrust
WTHelperGetProvCertFromChain

crypt32

CertGetNameStringW

setupapi

SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
CM_Get_Device_IDW

oleacc

CreateStdAccessibleObject
LresultFromObject

Sections

.text
Size: 892KB - Virtual size: 891KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 301KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

309d669452943e70699beca1dc39b649

Code Sign

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

4e:d3:c3:e6:41:76:90:14:67:47:c7:1e:0c:6a:51:50Certificate

Extended Key Usages

Key Usages

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31Certificate

Extended Key Usages

Key Usages

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

4e:d3:c3:e6:41:76:90:14:67:47:c7:1e:0c:6a:51:50Certificate

Extended Key Usages

Key Usages

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39Certificate

Extended Key Usages

Key Usages

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31Certificate

Extended Key Usages

Key Usages

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87Certificate

Extended Key Usages

Key Usages

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27Certificate

Key Usages

01:76:7c:75:56:ed:6e:d1:70:b3:f7:e8:2a:49:bb:04:59:99:a4:c2:c9:43:ae:13:e4:33:05:9d:b7:77:91:a6Signer

98:01:7d:34:c2:b3:64:fb:8f:63:2b:45:ce:a8:f5:05:a8:fc:c6:ddSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

gdiplus

winmm

version

wintrust

crypt32

setupapi

oleacc

Sections

.text Size: 892KB - Virtual size: 891KB

.rdata Size: 301KB - Virtual size: 300KB

.data Size: 20KB - Virtual size: 71KB

.pdata Size: 35KB - Virtual size: 34KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 1.5MB - Virtual size: 1.5MB

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

4e:d3:c3:e6:41:76:90:14:67:47:c7:1e:0c:6a:51:50
Certificate

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

4e:d3:c3:e6:41:76:90:14:67:47:c7:1e:0c:6a:51:50
Certificate

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Certificate

09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Certificate

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Certificate

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Certificate

01:76:7c:75:56:ed:6e:d1:70:b3:f7:e8:2a:49:bb:04:59:99:a4:c2:c9:43:ae:13:e4:33:05:9d:b7:77:91:a6
Signer

98:01:7d:34:c2:b3:64:fb:8f:63:2b:45:ce:a8:f5:05:a8:fc:c6:dd
Signer

.text
Size: 892KB - Virtual size: 891KB

.rdata
Size: 301KB - Virtual size: 300KB

.data
Size: 20KB - Virtual size: 71KB

.pdata
Size: 35KB - Virtual size: 34KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 1.5MB - Virtual size: 1.5MB