boot_Net__SSLeay
Static task
static1
Behavioral task
behavioral1
Sample
123b01c9371f8e60ac51eeeaed6726c0N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
123b01c9371f8e60ac51eeeaed6726c0N.dll
Resource
win10v2004-20240709-en
General
-
Target
123b01c9371f8e60ac51eeeaed6726c0N.exe
-
Size
404KB
-
MD5
123b01c9371f8e60ac51eeeaed6726c0
-
SHA1
7400bf439fbbf50dc232125bcac68aae47de7595
-
SHA256
fbc45b31180460a225632897fc9e2b607f358fc0ab9a7430510d2bd67a340773
-
SHA512
d5045bf5d067e26f18a0cc24e5b23805b799fe5a5079227ef2a814dde18d379e3cd5bcebe87968eb9ee2ee4691f71f4312d2c16cfdc26827cc2178d6b1e8a4e7
-
SSDEEP
6144:WFddYrKebK/052gdiMNs/j3OZcJP5L52:nxc0wUxs/j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 123b01c9371f8e60ac51eeeaed6726c0N.exe
Files
-
123b01c9371f8e60ac51eeeaed6726c0N.exe.dll windows:4 windows x64 arch:x64
90bd6a7f03a233f1eecf1b7390f59fab
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_get_osfhandle
_gmtime64
_initterm
_lock
_mktime64
_unlock
abort
calloc
fputc
free
fwrite
localeconv
malloc
memcmp
memcpy
memset
realloc
strcat
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
vfprintf
wcslen
libcrypto-1_1-x64__
ASN1_BIT_STRING_get_bit
ASN1_ENUMERATED_free
ASN1_ENUMERATED_new
ASN1_ENUMERATED_set
ASN1_GENERALIZEDTIME_check
ASN1_GENERALIZEDTIME_free
ASN1_INTEGER_free
ASN1_INTEGER_get
ASN1_INTEGER_new
ASN1_INTEGER_set
ASN1_INTEGER_to_BN
ASN1_STRING_data
ASN1_STRING_length
ASN1_STRING_set
ASN1_TIME_check
ASN1_TIME_free
ASN1_TIME_new
ASN1_TIME_print
ASN1_TIME_set
ASN1_TIME_to_generalizedtime
BIO_ctrl
BIO_ctrl_pending
BIO_free
BIO_new
BIO_new_file
BIO_read
BIO_s_mem
BIO_write
BN_GENCB_free
BN_GENCB_new
BN_GENCB_set_old
BN_bn2bin
BN_bn2dec
BN_bn2hex
BN_dec2bn
BN_dup
BN_free
BN_hex2bn
BN_new
BN_num_bits
BN_set_word
BN_to_ASN1_INTEGER
CRYPTO_free
CRYPTO_get_ex_new_index
DH_free
EC_GROUP_free
EC_GROUP_new_by_curve_name
EC_GROUP_set_asn1_flag
EC_KEY_free
EC_KEY_generate_key
EC_KEY_new
EC_KEY_new_by_curve_name
EC_KEY_set_group
EC_curve_nist2nid
ENGINE_by_id
ENGINE_load_builtin_engines
ENGINE_register_all_complete
ENGINE_set_default
ERR_clear_error
ERR_error_string
ERR_get_error
ERR_load_RAND_strings
ERR_peek_error
ERR_print_errors_fp
ERR_put_error
EVP_CIPHER_iv_length
EVP_CIPHER_key_length
EVP_DecryptInit_ex
EVP_Digest
EVP_DigestFinal
EVP_DigestFinal_ex
EVP_DigestInit
EVP_DigestInit_ex
EVP_DigestUpdate
EVP_EncryptInit_ex
EVP_MD_CTX_free
EVP_MD_CTX_md
EVP_MD_CTX_new
EVP_MD_do_all_sorted
EVP_MD_size
EVP_MD_type
EVP_PKEY_assign
EVP_PKEY_bits
EVP_PKEY_copy_parameters
EVP_PKEY_free
EVP_PKEY_id
EVP_PKEY_new
EVP_PKEY_size
EVP_add_digest
EVP_aes_128_cbc
EVP_des_cbc
EVP_get_cipherbyname
EVP_get_digestbyname
EVP_md5
EVP_ripemd160
EVP_sha1
EVP_sha256
EVP_sha512
GENERAL_NAME_free
HMAC_Init_ex
MD4
MD5
OBJ_cmp
OBJ_dup
OBJ_ln2nid
OBJ_nid2ln
OBJ_nid2obj
OBJ_nid2sn
OBJ_obj2nid
OBJ_obj2txt
OBJ_sn2nid
OBJ_txt2nid
OBJ_txt2obj
OCSP_BASICRESP_free
OCSP_CERTID_free
OCSP_REQUEST_free
OCSP_REQUEST_new
OCSP_RESPONSE_free
OCSP_SINGLERESP_get0_id
OCSP_basic_add1_cert
OCSP_basic_verify
OCSP_cert_to_id
OCSP_check_nonce
OCSP_check_validity
OCSP_crl_reason_str
OCSP_request_add0_id
OCSP_request_add1_nonce
OCSP_resp_count
OCSP_resp_find
OCSP_resp_get0
OCSP_response_get1_basic
OCSP_response_status
OCSP_response_status_str
OCSP_single_get0_status
OPENSSL_cleanse
OPENSSL_init_crypto
OPENSSL_sk_delete
OPENSSL_sk_free
OPENSSL_sk_insert
OPENSSL_sk_new_null
OPENSSL_sk_num
OPENSSL_sk_pop
OPENSSL_sk_pop_free
OPENSSL_sk_push
OPENSSL_sk_shift
OPENSSL_sk_unshift
OPENSSL_sk_value
OpenSSL_version
OpenSSL_version_num
PEM_X509_INFO_read_bio
PEM_read_bio_DHparams
PEM_read_bio_PrivateKey
PEM_read_bio_X509
PEM_read_bio_X509_CRL
PEM_read_bio_X509_REQ
PEM_write_bio_PrivateKey
PEM_write_bio_X509
PEM_write_bio_X509_CRL
PEM_write_bio_X509_REQ
PKCS12_free
PKCS12_parse
RAND_add
RAND_bytes
RAND_file_name
RAND_load_file
RAND_poll
RAND_priv_bytes
RAND_pseudo_bytes
RAND_seed
RAND_status
RAND_write_file
RIPEMD160
RSA_free
RSA_generate_key_ex
RSA_new
SHA1
SHA256
SHA512
X509V3_EXT_conf_nid
X509V3_EXT_d2i
X509V3_EXT_print
X509V3_set_ctx
X509_ATTRIBUTE_count
X509_ATTRIBUTE_get0_type
X509_CRL_add0_revoked
X509_CRL_add1_ext_i2d
X509_CRL_add_ext
X509_CRL_digest
X509_CRL_free
X509_CRL_get_ext
X509_CRL_get_ext_by_NID
X509_CRL_get_ext_count
X509_CRL_get_ext_d2i
X509_CRL_get_issuer
X509_CRL_get_lastUpdate
X509_CRL_get_nextUpdate
X509_CRL_get_version
X509_CRL_new
X509_CRL_set1_lastUpdate
X509_CRL_set1_nextUpdate
X509_CRL_set_issuer_name
X509_CRL_set_version
X509_CRL_sign
X509_CRL_sort
X509_CRL_verify
X509_EXTENSION_free
X509_EXTENSION_get_critical
X509_EXTENSION_get_data
X509_EXTENSION_get_object
X509_LOOKUP_ctrl
X509_LOOKUP_hash_dir
X509_NAME_ENTRY_get_data
X509_NAME_ENTRY_get_object
X509_NAME_add_entry_by_NID
X509_NAME_add_entry_by_OBJ
X509_NAME_add_entry_by_txt
X509_NAME_cmp
X509_NAME_digest
X509_NAME_entry_count
X509_NAME_get_entry
X509_NAME_get_text_by_NID
X509_NAME_hash
X509_NAME_new
X509_NAME_oneline
X509_NAME_print_ex
X509_PUBKEY_get0_param
X509_REQ_add1_attr_by_NID
X509_REQ_add_extensions
X509_REQ_digest
X509_REQ_free
X509_REQ_get_attr
X509_REQ_get_attr_by_NID
X509_REQ_get_attr_by_OBJ
X509_REQ_get_attr_count
X509_REQ_get_extensions
X509_REQ_get_pubkey
X509_REQ_get_subject_name
X509_REQ_get_version
X509_REQ_new
X509_REQ_set_pubkey
X509_REQ_set_subject_name
X509_REQ_set_version
X509_REQ_sign
X509_REQ_verify
X509_REVOKED_add1_ext_i2d
X509_REVOKED_new
X509_REVOKED_set_revocationDate
X509_REVOKED_set_serialNumber
X509_STORE_CTX_free
X509_STORE_CTX_get0_cert
X509_STORE_CTX_get1_chain
X509_STORE_CTX_get1_issuer
X509_STORE_CTX_get_current_cert
X509_STORE_CTX_get_error
X509_STORE_CTX_get_error_depth
X509_STORE_CTX_get_ex_data
X509_STORE_CTX_init
X509_STORE_CTX_new
X509_STORE_CTX_set_cert
X509_STORE_CTX_set_error
X509_STORE_CTX_set_ex_data
X509_STORE_add_cert
X509_STORE_add_crl
X509_STORE_add_lookup
X509_STORE_free
X509_STORE_new
X509_STORE_set1_param
X509_STORE_set_flags
X509_STORE_set_purpose
X509_STORE_set_trust
X509_VERIFY_PARAM_add0_policy
X509_VERIFY_PARAM_add0_table
X509_VERIFY_PARAM_add1_host
X509_VERIFY_PARAM_clear_flags
X509_VERIFY_PARAM_free
X509_VERIFY_PARAM_get0_peername
X509_VERIFY_PARAM_get_depth
X509_VERIFY_PARAM_get_flags
X509_VERIFY_PARAM_inherit
X509_VERIFY_PARAM_lookup
X509_VERIFY_PARAM_new
X509_VERIFY_PARAM_set1
X509_VERIFY_PARAM_set1_email
X509_VERIFY_PARAM_set1_host
X509_VERIFY_PARAM_set1_ip
X509_VERIFY_PARAM_set1_ip_asc
X509_VERIFY_PARAM_set1_name
X509_VERIFY_PARAM_set1_policies
X509_VERIFY_PARAM_set_depth
X509_VERIFY_PARAM_set_flags
X509_VERIFY_PARAM_set_hostflags
X509_VERIFY_PARAM_set_purpose
X509_VERIFY_PARAM_set_time
X509_VERIFY_PARAM_set_trust
X509_VERIFY_PARAM_table_cleanup
X509_add_ext
X509_certificate_type
X509_check_email
X509_check_host
X509_check_ip
X509_check_ip_asc
X509_check_issued
X509_delete_ext
X509_digest
X509_dup
X509_free
X509_get0_serialNumber
X509_get0_tbs_sigalg
X509_get_X509_PUBKEY
X509_get_ex_data
X509_get_ext
X509_get_ext_by_NID
X509_get_ext_by_OBJ
X509_get_ext_count
X509_get_ext_d2i
X509_get_issuer_name
X509_get_pubkey
X509_get_serialNumber
X509_get_subject_name
X509_get_version
X509_getm_notAfter
X509_getm_notBefore
X509_gmtime_adj
X509_issuer_and_serial_hash
X509_issuer_name_hash
X509_load_cert_crl_file
X509_load_cert_file
X509_load_crl_file
X509_new
X509_policy_level_get0_node
X509_policy_level_node_count
X509_policy_node_get0_parent
X509_policy_node_get0_policy
X509_policy_node_get0_qualifiers
X509_policy_tree_free
X509_policy_tree_get0_level
X509_policy_tree_get0_policies
X509_policy_tree_get0_user_policies
X509_policy_tree_level_count
X509_pubkey_digest
X509_set_ex_data
X509_set_issuer_name
X509_set_pubkey
X509_set_serialNumber
X509_set_subject_name
X509_set_version
X509_sign
X509_subject_name_hash
X509_verify
X509_verify_cert
X509_verify_cert_error_string
d2i_OCSP_CERTID
d2i_OCSP_REQUEST
d2i_OCSP_RESPONSE
d2i_PKCS12_fp
d2i_X509_CRL_bio
d2i_X509_REQ_bio
d2i_X509_bio
i2d_OCSP_CERTID
i2d_OCSP_REQUEST
i2d_OCSP_RESPONSE
i2d_X509_PUBKEY
libssl-1_1-x64__
BIO_f_ssl
BIO_new_buffer_ssl_connect
BIO_new_ssl
BIO_new_ssl_connect
BIO_ssl_copy_session_id
BIO_ssl_shutdown
ERR_load_SSL_strings
OPENSSL_init_ssl
SSL_CIPHER_description
SSL_CIPHER_get_bits
SSL_CIPHER_get_cipher_nid
SSL_CIPHER_get_digest_nid
SSL_CIPHER_get_name
SSL_CIPHER_get_version
SSL_COMP_add_compression_method
SSL_CTX_add_client_CA
SSL_CTX_add_session
SSL_CTX_callback_ctrl
SSL_CTX_check_private_key
SSL_CTX_ctrl
SSL_CTX_flush_sessions
SSL_CTX_free
SSL_CTX_get0_param
SSL_CTX_get_cert_store
SSL_CTX_get_client_CA_list
SSL_CTX_get_ex_data
SSL_CTX_get_num_tickets
SSL_CTX_get_options
SSL_CTX_get_quiet_shutdown
SSL_CTX_get_security_level
SSL_CTX_get_timeout
SSL_CTX_get_verify_depth
SSL_CTX_get_verify_mode
SSL_CTX_load_verify_locations
SSL_CTX_new
SSL_CTX_remove_session
SSL_CTX_sess_set_new_cb
SSL_CTX_sess_set_remove_cb
SSL_CTX_sessions
SSL_CTX_set1_param
SSL_CTX_set_alpn_protos
SSL_CTX_set_alpn_select_cb
SSL_CTX_set_cert_store
SSL_CTX_set_cert_verify_callback
SSL_CTX_set_cipher_list
SSL_CTX_set_ciphersuites
SSL_CTX_set_client_CA_list
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_set_default_verify_paths
SSL_CTX_set_ex_data
SSL_CTX_set_info_callback
SSL_CTX_set_keylog_callback
SSL_CTX_set_msg_callback
SSL_CTX_set_next_proto_select_cb
SSL_CTX_set_next_protos_advertised_cb
SSL_CTX_set_num_tickets
SSL_CTX_set_options
SSL_CTX_set_post_handshake_auth
SSL_CTX_set_psk_client_callback
SSL_CTX_set_purpose
SSL_CTX_set_quiet_shutdown
SSL_CTX_set_security_level
SSL_CTX_set_session_id_context
SSL_CTX_set_ssl_version
SSL_CTX_set_timeout
SSL_CTX_set_tmp_dh_callback
SSL_CTX_set_trust
SSL_CTX_set_verify
SSL_CTX_set_verify_depth
SSL_CTX_use_PrivateKey
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_RSAPrivateKey_file
SSL_CTX_use_certificate
SSL_CTX_use_certificate_chain_file
SSL_CTX_use_certificate_file
SSL_SESSION_dup
SSL_SESSION_free
SSL_SESSION_get_ex_data
SSL_SESSION_get_master_key
SSL_SESSION_get_time
SSL_SESSION_get_timeout
SSL_SESSION_is_resumable
SSL_SESSION_new
SSL_SESSION_print
SSL_SESSION_print_fp
SSL_SESSION_set_ex_data
SSL_SESSION_set_time
SSL_SESSION_set_timeout
SSL_SESSION_up_ref
SSL_accept
SSL_add_client_CA
SSL_add_file_cert_subjects_to_stack
SSL_alert_desc_string
SSL_alert_desc_string_long
SSL_alert_type_string
SSL_alert_type_string_long
SSL_callback_ctrl
SSL_check_private_key
SSL_clear
SSL_client_version
SSL_connect
SSL_copy_session_id
SSL_ctrl
SSL_do_handshake
SSL_dup
SSL_export_keying_material
SSL_free
SSL_get0_alpn_selected
SSL_get0_next_proto_negotiated
SSL_get0_param
SSL_get1_session
SSL_get_SSL_CTX
SSL_get_certificate
SSL_get_cipher_list
SSL_get_ciphers
SSL_get_client_CA_list
SSL_get_client_random
SSL_get_current_cipher
SSL_get_default_timeout
SSL_get_error
SSL_get_ex_data
SSL_get_ex_data_X509_STORE_CTX_idx
SSL_get_fd
SSL_get_finished
SSL_get_num_tickets
SSL_get_options
SSL_get_peer_cert_chain
SSL_get_peer_certificate
SSL_get_peer_finished
SSL_get_quiet_shutdown
SSL_get_rbio
SSL_get_read_ahead
SSL_get_security_level
SSL_get_server_random
SSL_get_servername
SSL_get_servername_type
SSL_get_session
SSL_get_shared_ciphers
SSL_get_shutdown
SSL_get_ssl_method
SSL_get_state
SSL_get_verify_depth
SSL_get_verify_mode
SSL_get_verify_result
SSL_get_version
SSL_get_wbio
SSL_has_pending
SSL_in_before
SSL_in_init
SSL_is_dtls
SSL_is_init_finished
SSL_is_server
SSL_load_client_CA_file
SSL_new
SSL_peek
SSL_peek_ex
SSL_pending
SSL_read
SSL_read_ex
SSL_renegotiate
SSL_rstate_string
SSL_rstate_string_long
SSL_select_next_proto
SSL_session_reused
SSL_set1_param
SSL_set_SSL_CTX
SSL_set_accept_state
SSL_set_alpn_protos
SSL_set_bio
SSL_set_cipher_list
SSL_set_ciphersuites
SSL_set_client_CA_list
SSL_set_connect_state
SSL_set_default_passwd_cb
SSL_set_default_passwd_cb_userdata
SSL_set_ex_data
SSL_set_fd
SSL_set_info_callback
SSL_set_msg_callback
SSL_set_num_tickets
SSL_set_options
SSL_set_post_handshake_auth
SSL_set_psk_client_callback
SSL_set_purpose
SSL_set_quiet_shutdown
SSL_set_read_ahead
SSL_set_rfd
SSL_set_security_level
SSL_set_session
SSL_set_session_id_context
SSL_set_session_secret_cb
SSL_set_session_ticket_ext
SSL_set_session_ticket_ext_cb
SSL_set_shutdown
SSL_set_ssl_method
SSL_set_tmp_dh_callback
SSL_set_trust
SSL_set_verify
SSL_set_verify_depth
SSL_set_verify_result
SSL_set_wfd
SSL_shutdown
SSL_state_string
SSL_state_string_long
SSL_use_PrivateKey
SSL_use_PrivateKey_ASN1
SSL_use_PrivateKey_file
SSL_use_RSAPrivateKey
SSL_use_RSAPrivateKey_ASN1
SSL_use_RSAPrivateKey_file
SSL_use_certificate
SSL_use_certificate_ASN1
SSL_use_certificate_chain_file
SSL_use_certificate_file
SSL_verify_client_post_handshake
SSL_version
SSL_want
SSL_write
SSL_write_ex
TLS_client_method
TLS_method
TLS_server_method
TLSv1_1_client_method
TLSv1_1_method
TLSv1_1_server_method
TLSv1_2_client_method
TLSv1_2_method
TLSv1_2_server_method
TLSv1_client_method
TLSv1_method
TLSv1_server_method
d2i_SSL_SESSION
i2d_SSL_SESSION
perl538
PerlIO_findFILE
Perl_PerlIO_fileno
Perl_av_fetch
Perl_av_len
Perl_av_push
Perl_av_store
Perl_call_method
Perl_call_sv
Perl_croak_nocontext
Perl_croak_xs_usage
Perl_dowantarray
Perl_free_tmps
Perl_get_context
Perl_get_hv
Perl_get_sv
Perl_gv_add_by_type
Perl_hv_common_key_len
Perl_markstack_grow
Perl_mg_get
Perl_mg_set
Perl_more_bodies
Perl_more_sv
Perl_my_cxt_init
Perl_my_snprintf
Perl_newRV
Perl_newSV
Perl_newSViv
Perl_newSVpv
Perl_newSVpvn
Perl_newSVpvn_flags
Perl_newSVsv_flags
Perl_newSVuv
Perl_newXS_flags
Perl_pop_scope
Perl_push_scope
Perl_safesyscalloc
Perl_safesysfree
Perl_safesysmalloc
Perl_savetmps
Perl_stack_grow
Perl_sv_2bool_flags
Perl_sv_2io
Perl_sv_2iv_flags
Perl_sv_2mortal
Perl_sv_2nv_flags
Perl_sv_2pv_flags
Perl_sv_2uv_flags
Perl_sv_backoff
Perl_sv_free2
Perl_sv_newmortal
Perl_sv_setiv
Perl_sv_setiv_mg
Perl_sv_setnv_mg
Perl_sv_setpv
Perl_sv_setpvn
Perl_sv_setsv_flags
Perl_sv_setuv_mg
Perl_sv_utf8_decode
Perl_warn_nocontext
Perl_xs_boot_epilog
Perl_xs_handshake
Exports
Exports
Sections
.text Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 81B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ