459231aa1a7fa476f8420659b333b1f6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

459231aa1a7fa476f8420659b333b1f6_JaffaCakes118
Size

570KB
MD5

459231aa1a7fa476f8420659b333b1f6
SHA1

4312fc62648df8bb26fb336c48bcc4d2f466496f
SHA256

c8a6d501dda63cc1a513aeabf17e7f02720dd88a61c259684ba49ce713302b04
SHA512

04acf6c7d010e61b17042e7fbcb944482632ceae4611ccf8467c8db618956dde6a67b2d2f00cbdd0b3f7e941cb6f96c8e03de18f5417716198d9e8ef9b330251
SSDEEP

12288:/zyfhINPzzTRgqjrvvkklErJQyOarBtoldNsrQB7iqs9WNQdDevqRWQYw:by5oPbKIrvn4JLOsBSdNWQBOqeWNSzWk

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/CCProxy/CCProxy.dll
unpack001/CCProxy/CCProxy.exe
unpack001/CCProxy/zlib1.dll

Files

459231aa1a7fa476f8420659b333b1f6_JaffaCakes118
.rar
CCProxy/CCProxy.dll
.dll windows:5 windows x86 arch:x86

44cb2668712bdd681d2500e57c41eb59

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

e:\_Y_Develop\CC Proxy\CCProxy\CCProxy.pdb

Imports

kernel32

GetCPInfo
GetOEMCP
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
HeapAlloc
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetCommandLineA
VirtualAlloc
HeapReAlloc
ExitProcess
HeapSize
GetACP
IsValidCodePage
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapCreate
HeapDestroy
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetDriveTypeA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GlobalFindAtomA
lstrcmpW
CreateFileA
GetFullPathNameA
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalAddAtomA
GlobalFlags
GetCurrentDirectoryA
GlobalGetAtomNameA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
InterlockedIncrement
GetModuleHandleW
FindFirstFileA
FileTimeToLocalFileTime
FindNextFileA
FindClose
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
CompareStringA
InterlockedExchange
lstrcmpA
SetLastError
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
GetWindowsDirectoryA
GetLocaleInfoA
GlobalFree
FileTimeToSystemTime
GetSystemTime
MultiByteToWideChar
GetSystemDirectoryA
GetComputerNameA
lstrlenA
FreeLibrary
GetProcessHeap
HeapFree
GetCurrentProcessId
DuplicateHandle
DeviceIoControl
GetVersionExA
GetModuleHandleA
GetCurrentProcess
GetSystemInfo
CreateThread
TerminateThread
OpenProcess
TerminateProcess
GetLastError
MapViewOfFile
UnmapViewOfFile
lstrcmpiA
LoadLibraryA
GetProcAddress
LocalAlloc
LocalFree
GetTimeZoneInformation
WritePrivateProfileStringA
GetTickCount
CreateEventA
WaitForSingleObject
CloseHandle
SetEvent
Sleep
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetPrivateProfileIntA
lstrcpyA
GetPrivateProfileStringA
GetModuleFileNameA
InterlockedDecrement
CreateDirectoryA
WideCharToMultiByte
GetLocalTime
EnterCriticalSection
FindResourceA
LoadResource
LockResource
VirtualFree
SizeofResource

user32

DestroyMenu
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
CallWindowProcA
GetMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetWindowPos
ShowWindow
SetWindowLongA
IsWindow
GetDlgItem
wsprintfA
GetSystemMetrics
MsgWaitForMultipleObjects
CharLowerA
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
DefWindowProcA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
PostQuitMessage
PostMessageA
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
LoadCursorA
UnhookWindowsHookEx
MessageBoxA
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetWindowTextA
GetWindowThreadProcessId
SendMessageA

gdi32

GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
GetDeviceCaps
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateBitmap
SetViewportOrgEx

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegDeleteKeyA
RegQueryValueA
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
RegCreateKeyA
RegDeleteValueA
LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
ControlService
DeleteService
CreateServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
StartServiceA
QueryServiceStatus
RegEnumKeyA

shlwapi

StrTrimA
PathFindExtensionA

oleaut32

SysAllocString
VariantClear
VariantInit
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
SysFreeString

ws2_32

WSAStartup
WSAAccept
WSASocketA
WSAConnect
WSARecvFrom
inet_addr
htons
gethostbyname
ntohs
select
send
WSAGetLastError
sendto
recvfrom
closesocket
inet_ntoa
socket
recv
__WSAFDIsSet
ntohl
WSAAddressToStringA
getsockname
WSAIoctl
accept
setsockopt
listen
bind
connect

wininet

InternetReadFile
InternetSetOptionA
InternetOpenUrlA
InternetGetLastResponseInfoA
GetUrlCacheEntryInfoA
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
InternetCloseHandle
HttpQueryInfoA

iphlpapi

SendARP
GetIfTable

imagehlp

MapFileAndCheckSumA

zlib1

inflate
inflateEnd
inflateInit2_

Exports

Exports

InstallNT
Start
StartNT
UninstallNT

Sections

.text
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
CCProxy/CCProxy.exe
.exe windows:5 windows x86 arch:x86

6ad9309a5ca6c1d244810ca5f20e1c97

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

__WSAFDIsSet
select
closesocket
sendto
htons
socket
send
WSAIoctl
recv
accept
listen
connect
bind
ntohs
getsockname
WSAStartup
htonl
gethostbyname
setsockopt
inet_ntoa
inet_addr
ntohl

kernel32

GetOEMCP
GetModuleHandleW
GetThreadLocale
FindResourceExA
GetCurrentDirectoryA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
GetVolumeInformationA
GetFullPathNameA
CreateFileA
GetFileAttributesA
GetFileSizeEx
GetFileTime
SetErrorMode
RtlUnwind
GetCPInfo
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapAlloc
GetCommandLineA
GetStartupInfoA
VirtualAlloc
VirtualQuery
HeapReAlloc
ExitProcess
HeapSize
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetFileType
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetDriveTypeA
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CompareStringW
SetEnvironmentVariableA
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
InterlockedExchange
lstrcmpA
FileTimeToLocalFileTime
VirtualProtect
GetModuleFileNameW
FormatMessageA
LocalFree
MulDiv
FileTimeToSystemTime
GetCurrentThreadId
GlobalGetAtomNameA
GlobalDeleteAtom
CompareStringA
SetLastError
MultiByteToWideChar
lstrcmpW
GlobalFree
FreeResource
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleHandleA
GetSystemInfo
WaitForSingleObject
MapViewOfFile
GetCurrentProcessId
CreateEventA
DuplicateHandle
DeviceIoControl
UnmapViewOfFile
GetProcessHeap
HeapFree
OpenProcess
TerminateProcess
FindFirstFileA
FindNextFileA
FindClose
lstrlenA
GetWindowsDirectoryA
FreeLibrary
TerminateThread
CreateThread
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WinExec
GetCurrentProcess
GetTickCount
GlobalFindAtomA
GlobalAddAtomA
lstrcatA
CreateMutexA
GetLastError
CloseHandle
Sleep
LoadLibraryA
GetProcAddress
GetSystemTime
DeleteFileA
InterlockedDecrement
GetLocaleInfoA
CreateDirectoryA
GetPrivateProfileIntA
CopyFileA
lstrcpyA
WritePrivateProfileStringA
GetVersionExA
EnterCriticalSection
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceA
GetLocalTime
GetModuleFileNameA
GetPrivateProfileStringA
UnhandledExceptionFilter

user32

SetWindowContextHelpId
DestroyMenu
WindowFromPoint
GetSysColorBrush
UnregisterClassA
CharUpperA
CharNextA
CopyAcceleratorTableA
IsRectEmpty
SetRect
InvalidateRgn
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
GetMenuStringA
GetWindowThreadProcessId
ShowWindow
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetMenuState
EnableMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
TrackPopupMenu
SetMenu
IsWindowVisible
CreateWindowExA
GetClassInfoExA
AdjustWindowRectEx
EqualRect
CopyRect
GetDlgCtrlID
CallWindowProcA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
IsWindowEnabled
GetNextDlgTabItem
EndDialog
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
LoadBitmapA
UpdateWindow
MsgWaitForMultipleObjects
KillTimer
MessageBoxA
FillRect
DefWindowProcA
RegisterClassA
SetCapture
RedrawWindow
ReleaseDC
GetDC
InflateRect
LoadCursorA
CopyIcon
GetSysColor
SetWindowLongA
SetCursor
ReleaseCapture
MessageBeep
LoadIconA
SetForegroundWindow
IsIconic
GetSystemMenu
PostMessageA
LoadMenuA
ModifyMenuA
GetSubMenu
GetMenuItemID
GetMenuItemCount
CheckMenuItem
AppendMenuA
DrawIcon
ExitWindowsEx
SetWindowTextA
GetCursorPos
UnregisterHotKey
RegisterHotKey
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
MapDialogRect
GetAsyncKeyState
EndPaint
BeginPaint
GetWindowDC
GetSystemMetrics
LoadImageA
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
wsprintfA
GetClassInfoA
FindWindowA
SetTimer
InvalidateRect
PtInRect
LoadStringA
GetKeyState
MoveWindow
GetWindowRect
ScreenToClient
GetDlgItem
IsWindow
GetClientRect
EnableWindow
GetParent
GetWindow
SendMessageA
GetMenu

gdi32

Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetWindowExtEx
ExtSelectClipRgn
DeleteDC
ExtTextOutA
RectVisible
CreatePen
CreateHatchBrush
GetMapMode
EnumFontFamiliesExA
GetBkColor
GetTextColor
GetRgnBox
TextOutA
GetViewportExtEx
PtVisible
SetBkMode
RestoreDC
SaveDC
CreateRectRgnIndirect
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
BitBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetTextExtentPoint32A
GetObjectA
CreateFontIndirectA
GetStockObject
DeleteObject
MoveToEx
LineTo
SetMapMode

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegQueryValueA
RegCreateKeyExA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyA
RegSetValueExA
EnumServicesStatusA
QueryServiceConfigA
ControlService
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenSCManagerA
OpenServiceA
CloseServiceHandle
StartServiceA
QueryServiceStatus
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
Shell_NotifyIconA
ShellExecuteA

comctl32

ord17

shlwapi

PathRemoveFileSpecW
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
StrTrimA
PathIsUNCA

oledlg

ord8

ole32

CLSIDFromProgID
CoTaskMemAlloc
CoInitializeEx
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoUninitialize
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CoCreateInstance
CoInitialize
CoTaskMemFree

oleaut32

VariantTimeToSystemTime
VariantCopy
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SystemTimeToVariantTime
SafeArrayDestroy
OleCreateFontIndirect
SysAllocString

wsock32

WSASetLastError
WSACleanup

iphlpapi

SendARP
GetIfTable

Sections

.text
Size: 571KB - Virtual size: 570KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
CCProxy/Language/ChineseBig5.ini
CCProxy/Language/ChineseGB.ini
CCProxy/Language/English.ini
CCProxy/web/accinfo.htm
CCProxy/web/cn_acclistadmin.htm
CCProxy/web/cn_acclistuser.htm
CCProxy/web/en_acclistadmin.htm
CCProxy/web/en_acclistuser.htm
CCProxy/web/proxyadmin.php
CCProxy/zlib1.dll
.dll windows:4 windows x86 arch:x86

7e3560e4dd2deaa398fa039458dd4b4b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

free
malloc
strerror
fflush
_errno
fopen
fread
fprintf
_vsnprintf
sprintf
ftell
fseek
fclose
clearerr
_fdopen
_initterm
_adjust_fdiv
fwrite
fputc

kernel32

DisableThreadLibraryCalls

Exports

Exports

adler32
compress
compress2
compressBound
crc32
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
get_crc_table
gzclearerr
gzclose
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateInit2_
inflateInit_
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
uncompress
zError
zlibCompileFlags
zlibVersion

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

44cb2668712bdd681d2500e57c41eb59

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

oleaut32

ws2_32

wininet

iphlpapi

imagehlp

zlib1

Exports

Exports

Sections

.text Size: 408KB - Virtual size: 408KB

.rdata Size: 61KB - Virtual size: 61KB

.data Size: 11KB - Virtual size: 205KB

.rsrc Size: 25KB - Virtual size: 24KB

.reloc Size: 41KB - Virtual size: 41KB

6ad9309a5ca6c1d244810ca5f20e1c97

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

wsock32

iphlpapi

Sections

.text Size: 571KB - Virtual size: 570KB

.rdata Size: 126KB - Virtual size: 126KB

.data Size: 15KB - Virtual size: 204KB

.rsrc Size: 424KB - Virtual size: 423KB

7e3560e4dd2deaa398fa039458dd4b4b

Headers

File Characteristics

Imports

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 37KB - Virtual size: 36KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 512B - Virtual size: 116B

.rsrc Size: 1024B - Virtual size: 920B

.reloc Size: 1024B - Virtual size: 872B

.text
Size: 408KB - Virtual size: 408KB

.rdata
Size: 61KB - Virtual size: 61KB

.data
Size: 11KB - Virtual size: 205KB

.rsrc
Size: 25KB - Virtual size: 24KB

.reloc
Size: 41KB - Virtual size: 41KB

.text
Size: 571KB - Virtual size: 570KB

.rdata
Size: 126KB - Virtual size: 126KB

.data
Size: 15KB - Virtual size: 204KB

.rsrc
Size: 424KB - Virtual size: 423KB

.text
Size: 37KB - Virtual size: 36KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 512B - Virtual size: 116B

.rsrc
Size: 1024B - Virtual size: 920B

.reloc
Size: 1024B - Virtual size: 872B