296e88064266c46a3c159eb473614265_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

296e88064266c46a3c159eb473614265_JaffaCakes118
Size

132KB
MD5

296e88064266c46a3c159eb473614265
SHA1

de61ef601530a66689b024c450152426cff0e9ef
SHA256

4a8ce6c7d703175386446673ebee0139e41976e5d99c345d15d1e7c48bfd49c8
SHA512

33f32652498033abc8ff18e732bd3aa07b7a401d5fd9f9962c7499964215c492b5dd7f4d59373197b4040c660e46a4f6c09840ab3fee0ae6f749fa257efd1023
SSDEEP

3072:/IaWBXo9X1DHlV/FdL9FHpj1+GGKnSAyEDJ:7bftF3Jj0CN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
296e88064266c46a3c159eb473614265_JaffaCakes118

Files

296e88064266c46a3c159eb473614265_JaffaCakes118
.dll windows:5 windows x86 arch:x86

196c91fad1bf5f1e4e579f6e332d4376

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libxmlsec

xmlSecBnInitialize
xmlSecBnFinalize
xmlSecGetNextElementNode
xmlSecCheckNodeName
xmlSecBnGetNodeValue
xmlSecBnGetSize
xmlSecBnGetData
xmlSecKeyDataGetSize
xmlSecKeyDataDuplicate
xmlSecKeyDataBinaryValueDebugXmlDump
xmlSecKeyDataBinaryValueDebugDump
xmlSecKeyDataBinaryValueGetSize
xmlSecKeyDataBinaryValueBinWrite
xmlSecKeyDataBinaryValueBinRead
xmlSecKeyDataBinaryValueXmlWrite
xmlSecBnBlobSetNodeValue
xmlSecKeyDataBinaryValueFinalize
xmlSecKeyDataBinaryValueDuplicate
xmlSecKeyDataBinaryValueInitialize
xmlSecBufferSetData
xmlSecAddChild
xmlSecKeyGetValue
xmlSecKeyDataBinaryValueGetBuffer
xmlSecBufferSetMaxSize
xmlSecBufferRemoveHead
xmlSecTransformDefaultGetDataType
xmlSecTransformDefaultPushBin
xmlSecTransformDefaultPopBin
xmlSecCheckVersionExt
xmlSecErrorsSetCallback
xmlSecCryptoDLFunctionsRegisterKeyDataAndTransforms
xmlSecErrorsDefaultCallback
xmlSecBufferSetSize
xmlSecKeyDataStoreCreate
xmlSecKeysMngrAdoptDataStore
xmlSecKeyDataStoreDestroy
xmlSecBufferInitialize
xmlSecBufferReadFile
xmlSecBufferFinalize
xmlSecBufferGetSize
xmlSecBufferGetData
xmlSecKeysMngrGetKeysStore
xmlSecKeyEnsureData
xmlSecSimpleKeysStoreAdoptKey
xmlSecSimpleKeysStoreGetKlass
xmlSecKeyInfoCtxFinalize
xmlSecKeyInfoNodeRead
xmlSecKeyInfoCtxInitialize
xmlSecSimpleKeysStoreSave
xmlSecKeySetName
xmlSecKeyStoreFindKey
xmlSecIsEmptyString
xmlSecBufferAppend
xmlSecBase64Encode
xmlSecBnFromDecString
xmlSecBnReverse
xmlSecX509DataGetNodeContent
xmlSecKeyGetData
xmlSecBase64Decode
xmlSecKeyReqMatchKeyValue
xmlSecNodeEncodeAndSetContent
xmlSecBnSetData
xmlSecKeyDataBinaryValueXmlRead
xmlSecBnSetNodeValue
xmlSecKeyDataCreate
xmlSecKeyDataDestroy
xmlSecKeyDestroy
xmlSecKeyCreate
xmlSecKeySetValue
xmlSecKeyAdoptData
xmlSecKeysMngrGetDataStore
xmlSecKeyStoreCreate
xmlSecError
xmlSecKeysMngrCreate
xmlSecKeyStoreDestroy
xmlSecKeysMngrAdoptKeysStore
xmlSecKeysMngrDestroy
xmlSecKeysMngrGetKey

libxml2

xmlStrdup
xmlMalloc
xmlStrPrintf
xmlFreeDoc
xmlDocGetRootElement
xmlParseFile
xmlStrlen
xmlNodeGetContent
xmlNodeSetContent
xmlStrstr
xmlFree

kernel32

InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
GetLastError
FormatMessageA
LocalFree
GetSystemTimeAsFileTime

crypt32

CertGetPublicKeyLength
CryptAcquireCertificatePrivateKey
CryptImportPublicKeyInfo
CertStrToNameA
PFXIsPFXBlob
PFXVerifyPassword
PFXImportCertStore
CertEnumCertificatesInStore
CertGetCertificateContextProperty
CertCloseStore
CertCreateCertificateContext
CertDuplicateCertificateContext
CertFreeCertificateContext
CertFindCertificateInStore
CertAddStoreToCollection
CertCompareCertificateName
CertGetNameStringA
CertFindExtension
CertNameToStrA
CertCreateCRLContext
CertDuplicateCRLContext
CertFreeCRLContext
CertOpenStore
CertEnumCRLsInStore
CertAddCRLContextToStore
CertAddCertificateContextToStore
CertOpenSystemStoreA

advapi32

CryptAcquireContextA
CryptGenRandom
CryptSetKeyParam
CryptGetKeyParam
CryptDecrypt
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptExportKey
CryptGenKey
CryptGetProvParam
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptGetUserKey
CryptSignHashA
CryptVerifySignatureA
CryptCreateHash
CryptReleaseContext

msvcr90

_except_handler4_common
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
strncmp
fprintf
memcpy
memset
_onexit

Exports

Exports

xmlSecAttrAlgorithm
xmlSecAttrApplication
xmlSecAttrEncoding
xmlSecAttrFilter
xmlSecAttrId
xmlSecAttrIdentifier
xmlSecAttrMechanism
xmlSecAttrMimeType
xmlSecAttrNonce
xmlSecAttrNotBefore
xmlSecAttrNotOnOrAfter
xmlSecAttrOriginalRequestId
xmlSecAttrPrefixList
xmlSecAttrRecipient
xmlSecAttrRequestId
xmlSecAttrResponseLimit
xmlSecAttrResultMajor
xmlSecAttrResultMinor
xmlSecAttrService
xmlSecAttrStatusValue
xmlSecAttrTarget
xmlSecAttrTime
xmlSecAttrType
xmlSecAttrURI
xmlSecCryptoGetFunctions_mscrypto
xmlSecDSigNs
xmlSecEncNs
xmlSecHrefAESKeyValue
xmlSecHrefAes128Cbc
xmlSecHrefAes192Cbc
xmlSecHrefAes256Cbc
xmlSecHrefBase64
xmlSecHrefC14N
xmlSecHrefC14NWithComments
xmlSecHrefDESKeyValue
xmlSecHrefDSAKeyValue
xmlSecHrefDes3Cbc
xmlSecHrefDsaSha1
xmlSecHrefEncryptedKey
xmlSecHrefEnveloped
xmlSecHrefExcC14N
xmlSecHrefExcC14NWithComments
xmlSecHrefGOST2001KeyValue
xmlSecHrefGost2001GostR3411_94
xmlSecHrefGostR3411_94
xmlSecHrefHMACKeyValue
xmlSecHrefHmacMd5
xmlSecHrefHmacRipemd160
xmlSecHrefHmacSha1
xmlSecHrefHmacSha224
xmlSecHrefHmacSha256
xmlSecHrefHmacSha384
xmlSecHrefHmacSha512
xmlSecHrefKWAes128
xmlSecHrefKWAes192
xmlSecHrefKWAes256
xmlSecHrefKWDes3
xmlSecHrefMd5
xmlSecHrefPGPData
xmlSecHrefRSAKeyValue
xmlSecHrefRawX509Cert
xmlSecHrefRipemd160
xmlSecHrefRsaMd5
xmlSecHrefRsaOaep
xmlSecHrefRsaPkcs1
xmlSecHrefRsaRipemd160
xmlSecHrefRsaSha1
xmlSecHrefRsaSha224
xmlSecHrefRsaSha256
xmlSecHrefRsaSha384
xmlSecHrefRsaSha512
xmlSecHrefSPKIData
xmlSecHrefSha1
xmlSecHrefSha224
xmlSecHrefSha256
xmlSecHrefSha384
xmlSecHrefSha512
xmlSecHrefX509Data
xmlSecHrefXslt
xmlSecKeyBindingReasonIssuerTrust
xmlSecKeyBindingReasonRevocationStatus
xmlSecKeyBindingReasonSignature
xmlSecKeyBindingReasonValidityInterval
xmlSecKeyBindingStatusIndeterminate
xmlSecKeyBindingStatusInvalid
xmlSecKeyBindingStatusValid
xmlSecKeyUsageEncryption
xmlSecKeyUsageExchange
xmlSecKeyUsageSignature
xmlSecMSCryptoAppDefaultKeysMngrAdoptKey
xmlSecMSCryptoAppDefaultKeysMngrAdoptKeyStore
xmlSecMSCryptoAppDefaultKeysMngrAdoptTrustedStore
xmlSecMSCryptoAppDefaultKeysMngrAdoptUntrustedStore
xmlSecMSCryptoAppDefaultKeysMngrInit
xmlSecMSCryptoAppDefaultKeysMngrLoad
xmlSecMSCryptoAppDefaultKeysMngrPrivateKeyLoad
xmlSecMSCryptoAppDefaultKeysMngrPublicKeyLoad
xmlSecMSCryptoAppDefaultKeysMngrSave
xmlSecMSCryptoAppDefaultKeysMngrSymKeyLoad
xmlSecMSCryptoAppGetCertStoreName
xmlSecMSCryptoAppGetDefaultPwdCallback
xmlSecMSCryptoAppInit
xmlSecMSCryptoAppKeyCertLoad
xmlSecMSCryptoAppKeyCertLoadMemory
xmlSecMSCryptoAppKeyLoad
xmlSecMSCryptoAppKeyLoadMemory
xmlSecMSCryptoAppKeysMngrCertLoad
xmlSecMSCryptoAppKeysMngrCertLoadMemory
xmlSecMSCryptoAppPkcs12Load
xmlSecMSCryptoAppPkcs12LoadMemory
xmlSecMSCryptoAppShutdown
xmlSecMSCryptoAppliedKeysMngrAdoptKeyStore
xmlSecMSCryptoAppliedKeysMngrAdoptTrustedStore
xmlSecMSCryptoAppliedKeysMngrAdoptUntrustedStore
xmlSecMSCryptoAppliedKeysMngrCreate
xmlSecMSCryptoAppliedKeysMngrPriKeyLoad
xmlSecMSCryptoAppliedKeysMngrPubKeyLoad
xmlSecMSCryptoAppliedKeysMngrSymKeyLoad
xmlSecMSCryptoCertAdopt
xmlSecMSCryptoCertDup
xmlSecMSCryptoCertStrToName
xmlSecMSCryptoErrorsDefaultCallback
xmlSecMSCryptoGenerateRandom
xmlSecMSCryptoInit
xmlSecMSCryptoKeyDataAesGetKlass
xmlSecMSCryptoKeyDataAesSet
xmlSecMSCryptoKeyDataDesGetKlass
xmlSecMSCryptoKeyDataDsaGetKlass
xmlSecMSCryptoKeyDataGetCert
xmlSecMSCryptoKeyDataGetDecryptKey
xmlSecMSCryptoKeyDataGetKey
xmlSecMSCryptoKeyDataGost2001GetKlass
xmlSecMSCryptoKeyDataRawX509CertGetKlass
xmlSecMSCryptoKeyDataRsaGetKlass
xmlSecMSCryptoKeyDataX509AdoptCert
xmlSecMSCryptoKeyDataX509AdoptCrl
xmlSecMSCryptoKeyDataX509AdoptKeyCert
xmlSecMSCryptoKeyDataX509GetCert
xmlSecMSCryptoKeyDataX509GetCertsSize
xmlSecMSCryptoKeyDataX509GetCrl
xmlSecMSCryptoKeyDataX509GetCrlsSize
xmlSecMSCryptoKeyDataX509GetKeyCert
xmlSecMSCryptoKeyDataX509GetKlass
xmlSecMSCryptoKeysMngrInit
xmlSecMSCryptoKeysStoreAdoptKey
xmlSecMSCryptoKeysStoreGetKlass
xmlSecMSCryptoKeysStoreLoad
xmlSecMSCryptoKeysStoreSave
xmlSecMSCryptoShutdown
xmlSecMSCryptoTransformAes128CbcGetKlass
xmlSecMSCryptoTransformAes192CbcGetKlass
xmlSecMSCryptoTransformAes256CbcGetKlass
xmlSecMSCryptoTransformDes3CbcGetKlass
xmlSecMSCryptoTransformDsaSha1GetKlass
xmlSecMSCryptoTransformGost2001GostR3411_94GetKlass
xmlSecMSCryptoTransformGostR3411_94GetKlass
xmlSecMSCryptoTransformRsaPkcs1GetKlass
xmlSecMSCryptoTransformRsaSha1GetKlass
xmlSecMSCryptoTransformSha1GetKlass
xmlSecMSCryptoX509StoreAdoptCert
xmlSecMSCryptoX509StoreAdoptKeyStore
xmlSecMSCryptoX509StoreAdoptTrustedStore
xmlSecMSCryptoX509StoreAdoptUntrustedStore
xmlSecMSCryptoX509StoreEnableSystemTrustedCerts
xmlSecMSCryptoX509StoreFindCert
xmlSecMSCryptoX509StoreGetKlass
xmlSecMSCryptoX509StoreVerify
xmlSecNameAESKeyValue
xmlSecNameAes128Cbc
xmlSecNameAes192Cbc
xmlSecNameAes256Cbc
xmlSecNameBase64
xmlSecNameC14N
xmlSecNameC14NWithComments
xmlSecNameDESKeyValue
xmlSecNameDSAKeyValue
xmlSecNameDes3Cbc
xmlSecNameDsaSha1
xmlSecNameEncryptedKey
xmlSecNameEnveloped
xmlSecNameExcC14N
xmlSecNameExcC14NWithComments
xmlSecNameGOST2001KeyValue
xmlSecNameGost2001GostR3411_94
xmlSecNameGostR3411_94
xmlSecNameHMACKeyValue
xmlSecNameHmacMd5
xmlSecNameHmacRipemd160
xmlSecNameHmacSha1
xmlSecNameHmacSha224
xmlSecNameHmacSha256
xmlSecNameHmacSha384
xmlSecNameHmacSha512
xmlSecNameKWAes128
xmlSecNameKWAes192
xmlSecNameKWAes256
xmlSecNameKWDes3
xmlSecNameKeyName
xmlSecNameKeyValue
xmlSecNameMd5
xmlSecNameMemBuf
xmlSecNamePGPData
xmlSecNameRSAKeyValue
xmlSecNameRawX509Cert
xmlSecNameRetrievalMethod
xmlSecNameRipemd160
xmlSecNameRsaMd5
xmlSecNameRsaOaep
xmlSecNameRsaPkcs1
xmlSecNameRsaRipemd160
xmlSecNameRsaSha1
xmlSecNameRsaSha224
xmlSecNameRsaSha256
xmlSecNameRsaSha384
xmlSecNameRsaSha512
xmlSecNameSPKIData
xmlSecNameSha1
xmlSecNameSha224
xmlSecNameSha256
xmlSecNameSha384
xmlSecNameSha512
xmlSecNameX509Data
xmlSecNameX509Store
xmlSecNameXPath
xmlSecNameXPath2
xmlSecNameXPointer
xmlSecNameXslt
xmlSecNodeAESKeyValue
xmlSecNodeBody
xmlSecNodeCanonicalizationMethod
xmlSecNodeCarriedKeyName
xmlSecNodeCipherData
xmlSecNodeCipherReference
xmlSecNodeCipherValue
xmlSecNodeCode
xmlSecNodeCompoundRequest
xmlSecNodeCompoundResult
xmlSecNodeDESKeyValue
xmlSecNodeDSAG
xmlSecNodeDSAJ
xmlSecNodeDSAKeyValue
xmlSecNodeDSAP
xmlSecNodeDSAPgenCounter
xmlSecNodeDSAQ
xmlSecNodeDSASeed
xmlSecNodeDSAX
xmlSecNodeDSAY
xmlSecNodeDataReference
xmlSecNodeDetail
xmlSecNodeDigestMethod
xmlSecNodeDigestValue
xmlSecNodeEncryptedData
xmlSecNodeEncryptedKey
xmlSecNodeEncryptionMethod
xmlSecNodeEncryptionProperties
xmlSecNodeEncryptionProperty
xmlSecNodeEnvelope
xmlSecNodeFault
xmlSecNodeFaultActor
xmlSecNodeFaultCode
xmlSecNodeFaultDetail
xmlSecNodeFaultString
xmlSecNodeGOST2001KeyValue
xmlSecNodeHMACKeyValue
xmlSecNodeHMACOutputLength
xmlSecNodeHeader
xmlSecNodeInclusiveNamespaces
xmlSecNodeIndeterminateReason
xmlSecNodeInvalidReason
xmlSecNodeKeyInfo
xmlSecNodeKeyName
xmlSecNodeKeyReference
xmlSecNodeKeyUsage
xmlSecNodeKeyValue
xmlSecNodeLocateRequest
xmlSecNodeLocateResult
xmlSecNodeManifest
xmlSecNodeMessageExtension
xmlSecNodeNode
xmlSecNodeObject
xmlSecNodeOpaqueClientData
xmlSecNodePGPData
xmlSecNodePendingNotification
xmlSecNodeQueryKeyBinding
xmlSecNodeRSAExponent
xmlSecNodeRSAKeyValue
xmlSecNodeRSAModulus
xmlSecNodeRSAPrivateExponent
xmlSecNodeReason
xmlSecNodeReference
xmlSecNodeReferenceList
xmlSecNodeRequestSignatureValue
xmlSecNodeRespondWith
xmlSecNodeResponseMechanism
xmlSecNodeResult
xmlSecNodeRetrievalMethod
xmlSecNodeRole
xmlSecNodeRsaOAEPparams
xmlSecNodeSPKIData
xmlSecNodeSignature
xmlSecNodeSignatureMethod
xmlSecNodeSignatureProperties
xmlSecNodeSignatureValue
xmlSecNodeSignedInfo
xmlSecNodeStatus
xmlSecNodeStatusRequest
xmlSecNodeStatusResult
xmlSecNodeSubcode
xmlSecNodeText
xmlSecNodeTimeInstant
xmlSecNodeTransform
xmlSecNodeTransforms
xmlSecNodeUnverifiedKeyBinding
xmlSecNodeUseKeyWith
xmlSecNodeValidReason
xmlSecNodeValidateRequest
xmlSecNodeValidateResult
xmlSecNodeValidityInterval
xmlSecNodeValue
xmlSecNodeX509CRL
xmlSecNodeX509Certificate
xmlSecNodeX509Data
xmlSecNodeX509IssuerName
xmlSecNodeX509IssuerSerial
xmlSecNodeX509SKI
xmlSecNodeX509SerialNumber
xmlSecNodeX509SubjectName
xmlSecNodeXPath
xmlSecNodeXPath2
xmlSecNodeXPointer
xmlSecNs
xmlSecNsExcC14N
xmlSecNsExcC14NWithComments
xmlSecRespondWithKeyName
xmlSecRespondWithKeyValue
xmlSecRespondWithOCSP
xmlSecRespondWithPGP
xmlSecRespondWithPGPWeb
xmlSecRespondWithPrivateKey
xmlSecRespondWithRetrievalMethod
xmlSecRespondWithSPKI
xmlSecRespondWithX509CRL
xmlSecRespondWithX509Cert
xmlSecRespondWithX509Chain
xmlSecResponseMechanismPending
xmlSecResponseMechanismRepresent
xmlSecResponseMechanismRequestSignatureValue
xmlSecResultMajorCodePending
xmlSecResultMajorCodeReceiver
xmlSecResultMajorCodeRepresent
xmlSecResultMajorCodeSender
xmlSecResultMajorCodeSuccess
xmlSecResultMajorCodeVersionMismatch
xmlSecResultMinorCodeFailure
xmlSecResultMinorCodeIncomplete
xmlSecResultMinorCodeMessageNotSupported
xmlSecResultMinorCodeNoAuthentication
xmlSecResultMinorCodeNoMatch
xmlSecResultMinorCodeNotSynchronous
xmlSecResultMinorCodeRefused
xmlSecResultMinorCodeTooManyResponses
xmlSecResultMinorCodeUnknownResponseId
xmlSecSoap11Ns
xmlSecSoap12Ns
xmlSecSoapFaultCodeClient
xmlSecSoapFaultCodeMustUnderstand
xmlSecSoapFaultCodeReceiver
xmlSecSoapFaultCodeSender
xmlSecSoapFaultCodeServer
xmlSecSoapFaultCodeVersionMismatch
xmlSecSoapFaultDataEncodningUnknown
xmlSecStatusResultFailed
xmlSecStatusResultPending
xmlSecStatusResultSuccess
xmlSecStringCR
xmlSecStringEmpty
xmlSecTypeEncContent
xmlSecTypeEncElement
xmlSecXPath2FilterIntersect
xmlSecXPath2FilterSubtract
xmlSecXPath2FilterUnion
xmlSecXPath2Ns
xmlSecXPathNs
xmlSecXPointerNs
xmlSecXkmsFormatStrPlain
xmlSecXkmsFormatStrSoap11
xmlSecXkmsFormatStrSoap12
xmlSecXkmsNs
xmlSecXkmsServerRequestCompoundName
xmlSecXkmsServerRequestLocateName
xmlSecXkmsServerRequestResultName
xmlSecXkmsServerRequestStatusName
xmlSecXkmsServerRequestValidateName
xmlSecXkmsSoapFaultReasonLang
xmlSecXkmsSoapFaultReasonMessageInvalid
xmlSecXkmsSoapFaultReasonMessageNotSupported
xmlSecXkmsSoapFaultReasonServiceUnavailable
xmlSecXkmsSoapFaultReasonUnableToProcess
xmlSecXkmsSoapFaultReasonUnsupportedVersion
xmlSecXkmsSoapSubcodeValueBadMessage
xmlSecXkmsSoapSubcodeValueMessageNotSupported

Sections

.text
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

196c91fad1bf5f1e4e579f6e332d4376

Headers

File Characteristics

Imports

libxmlsec

libxml2

kernel32

crypt32

advapi32

msvcr90

Exports

Exports

Sections

.text Size: 77KB - Virtual size: 76KB

.rdata Size: 43KB - Virtual size: 42KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 77KB - Virtual size: 76KB

.rdata
Size: 43KB - Virtual size: 42KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 10KB - Virtual size: 9KB