O:\OOO330\ooo\svtools\wntmsci12.pro\bin\hatchwindowfactory.uno.pdb
Static task
static1
Behavioral task
behavioral1
Sample
48bccf718954425da70aabb5dd435e5d_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48bccf718954425da70aabb5dd435e5d_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
48bccf718954425da70aabb5dd435e5d_JaffaCakes118
-
Size
64KB
-
MD5
48bccf718954425da70aabb5dd435e5d
-
SHA1
96517b21aad31ea54d6967b30a443ed970e57338
-
SHA256
02baad35caf1e751aa86abdde8e8c04fd6def29faff3be30b3208b4a6b109742
-
SHA512
54686555424d6f00e70c1d57f2c5968192efec0b70dfc16df0c597b87ca02e0add9aca627c70fb19ad82224c215de20ab6b238410e480e1450dff5b333410274
-
SSDEEP
768:C56dsmHwMGO0YoYgV182gKwHVj8ADFhShcQVvcjnrZhKlMnZ/CLb2OKEzAz+:Oy3vKwHJRo+OgnrZhKlMnZ0b2OKEzAC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 48bccf718954425da70aabb5dd435e5d_JaffaCakes118
Files
-
48bccf718954425da70aabb5dd435e5d_JaffaCakes118.dll windows:5 windows x86 arch:x86
5747607eec152c93b61b97b045b598ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
tkmi
?createDevice@VCLXDevice@@UAA?AV?$Reference@VXDevice@awt@star@sun@com@@@uno@star@sun@com@@JJ@Z
?createGraphics@VCLXDevice@@UAA?AV?$Reference@VXGraphics@awt@star@sun@com@@@uno@star@sun@com@@XZ
??1VCLXWindow@@UAE@XZ
?startPopupMode@VCLXWindow@@UAAXABURectangle@awt@star@sun@com@@@Z
?addEventListener@VCLXWindow@@UAAXABV?$Reference@VXEventListener@lang@star@sun@com@@@uno@star@sun@com@@@Z
?dispose@VCLXWindow@@UAAXXZ
?release@?$ImplInheritanceHelper9@VVCLXDevice@@VXWindow2@awt@star@sun@com@@VXVclWindowPeer@3456@VXLayoutConstrains@3456@VXView@3456@VXDockableWindow@3456@VXAccessible@accessibility@456@VXEventListener@lang@456@VXPropertySetInfo@beans@456@VXStyleSettingsSupplier@3456@@cppu@@UAAXXZ
?isLocked@VCLXWindow@@UAAEXZ
?unlock@VCLXWindow@@UAAXXZ
?lock@VCLXWindow@@UAAXXZ
?setFloatingMode@VCLXWindow@@UAAXE@Z
?isFloating@VCLXWindow@@UAAEXZ
?enableDocking@VCLXWindow@@UAAXE@Z
?removeDockableWindowListener@VCLXWindow@@UAAXABV?$Reference@VXDockableWindowListener@awt@star@sun@com@@@uno@star@sun@com@@@Z
?addDockableWindowListener@VCLXWindow@@UAAXABV?$Reference@VXDockableWindowListener@awt@star@sun@com@@@uno@star@sun@com@@@Z
?setZoom@VCLXWindow@@UAAXMM@Z
?draw@VCLXWindow@@UAAXJJ@Z
?getInfo@VCLXDevice@@UAA?AUDeviceInfo@awt@star@sun@com@@XZ
?getGraphics@VCLXWindow@@UAA?AV?$Reference@VXGraphics@awt@star@sun@com@@@uno@star@sun@com@@XZ
?setGraphics@VCLXWindow@@UAAEABV?$Reference@VXGraphics@awt@star@sun@com@@@uno@star@sun@com@@@Z
?calcAdjustedSize@VCLXWindow@@UAA?AUSize@awt@star@sun@com@@ABU23456@@Z
?getPreferredSize@VCLXWindow@@UAA?AUSize@awt@star@sun@com@@XZ
?getMinimumSize@VCLXWindow@@UAA?AUSize@awt@star@sun@com@@XZ
?getProperty@VCLXWindow@@UAA?AVAny@uno@star@sun@com@@ABVOUString@rtl@@@Z
?setProperty@VCLXWindow@@UAAXABVOUString@rtl@@ABVAny@uno@star@sun@com@@@Z
?getStyles@VCLXWindow@@UAAXFAAUFontDescriptor@awt@star@sun@com@@AAJ1@Z
?setControlFont@VCLXWindow@@UAAXABUFontDescriptor@awt@star@sun@com@@@Z
?setForeground@VCLXWindow@@UAAXJ@Z
?enableClipSiblings@VCLXWindow@@UAAXE@Z
?isDesignMode@VCLXWindow@@UAAEXZ
?setDesignMode@VCLXWindow@@UAAXE@Z
?isChild@VCLXWindow@@UAAEABV?$Reference@VXWindowPeer@awt@star@sun@com@@@uno@star@sun@com@@@Z
?invalidateRect@VCLXWindow@@UAAXABURectangle@awt@star@sun@com@@F@Z
?invalidate@VCLXWindow@@UAAXF@Z
?setBackground@VCLXWindow@@UAAXJ@Z
?getFontDescriptors@VCLXDevice@@UAA?AV?$Sequence@UFontDescriptor@awt@star@sun@com@@@uno@star@sun@com@@XZ
?getFont@VCLXDevice@@UAA?AV?$Reference@VXFont@awt@star@sun@com@@@uno@star@sun@com@@ABUFontDescriptor@awt@456@@Z
?createBitmap@VCLXDevice@@UAA?AV?$Reference@VXBitmap@awt@star@sun@com@@@uno@star@sun@com@@JJJJ@Z
?createDisplayBitmap@VCLXDevice@@UAA?AV?$Reference@VXDisplayBitmap@awt@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXBitmap@awt@star@sun@com@@@3456@@Z
?ProcessWindowEvent@VCLXWindow@@MAEXABVVclWindowEvent@@@Z
?CreateAccessibleContext@VCLXWindow@@MAE?AV?$Reference@VXAccessibleContext@accessibility@star@sun@com@@@uno@star@sun@com@@XZ
?GetWindow@VCLUnoHelper@@SAPAVWindow@@ABV?$Reference@VXWindow@awt@star@sun@com@@@uno@star@sun@com@@@Z
?queryInterface@?$ImplInheritanceHelper9@VVCLXDevice@@VXWindow2@awt@star@sun@com@@VXVclWindowPeer@3456@VXLayoutConstrains@3456@VXView@3456@VXDockableWindow@3456@VXAccessible@accessibility@456@VXEventListener@lang@456@VXPropertySetInfo@beans@456@VXStyleSettingsSupplier@3456@@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?acquire@?$ImplInheritanceHelper9@VVCLXDevice@@VXWindow2@awt@star@sun@com@@VXVclWindowPeer@3456@VXLayoutConstrains@3456@VXView@3456@VXDockableWindow@3456@VXAccessible@accessibility@456@VXEventListener@lang@456@VXPropertySetInfo@beans@456@VXStyleSettingsSupplier@3456@@cppu@@UAAXXZ
?GetImplementation@VCLXWindow@@SAPAV1@ABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
??0VCLXWindow@@QAE@_N@Z
?getStyleSettings@VCLXWindow@@UAA?AV?$Reference@VXStyleSettings@awt@star@sun@com@@@uno@star@sun@com@@XZ
?hasPropertyByName@VCLXWindow@@UAAEABVOUString@rtl@@@Z
?getPropertyByName@VCLXWindow@@UAA?AUProperty@beans@star@sun@com@@ABVOUString@rtl@@@Z
?getProperties@VCLXWindow@@UAA?AV?$Sequence@UProperty@beans@star@sun@com@@@uno@star@sun@com@@XZ
?disposing@VCLXWindow@@UAAXABUEventObject@lang@star@sun@com@@@Z
?getAccessibleContext@VCLXWindow@@UAA?AV?$Reference@VXAccessibleContext@accessibility@star@sun@com@@@uno@star@sun@com@@XZ
?getSize@VCLXWindow@@UAA?AUSize@awt@star@sun@com@@XZ
?isInPopupMode@VCLXWindow@@UAAEXZ
?setPointer@VCLXWindow@@UAAXABV?$Reference@VXPointer@awt@star@sun@com@@@uno@star@sun@com@@@Z
?getToolkit@VCLXWindow@@UAA?AV?$Reference@VXToolkit@awt@star@sun@com@@@uno@star@sun@com@@XZ
?hasFocus@VCLXWindow@@UAAEXZ
?isEnabled@VCLXWindow@@UAAEXZ
?isActive@VCLXWindow@@UAAEXZ
?isVisible@VCLXWindow@@UAAEXZ
?getOutputSize@VCLXWindow@@UAA?AUSize@awt@star@sun@com@@XZ
?setOutputSize@VCLXWindow@@UAAXABUSize@awt@star@sun@com@@@Z
?removePaintListener@VCLXWindow@@UAAXABV?$Reference@VXPaintListener@awt@star@sun@com@@@uno@star@sun@com@@@Z
?addPaintListener@VCLXWindow@@UAAXABV?$Reference@VXPaintListener@awt@star@sun@com@@@uno@star@sun@com@@@Z
?removeMouseMotionListener@VCLXWindow@@UAAXABV?$Reference@VXMouseMotionListener@awt@star@sun@com@@@uno@star@sun@com@@@Z
?addMouseMotionListener@VCLXWindow@@UAAXABV?$Reference@VXMouseMotionListener@awt@star@sun@com@@@uno@star@sun@com@@@Z
?removeMouseListener@VCLXWindow@@UAAXABV?$Reference@VXMouseListener@awt@star@sun@com@@@uno@star@sun@com@@@Z
?addMouseListener@VCLXWindow@@UAAXABV?$Reference@VXMouseListener@awt@star@sun@com@@@uno@star@sun@com@@@Z
?removeKeyListener@VCLXWindow@@UAAXABV?$Reference@VXKeyListener@awt@star@sun@com@@@uno@star@sun@com@@@Z
?addKeyListener@VCLXWindow@@UAAXABV?$Reference@VXKeyListener@awt@star@sun@com@@@uno@star@sun@com@@@Z
?removeFocusListener@VCLXWindow@@UAAXABV?$Reference@VXFocusListener@awt@star@sun@com@@@uno@star@sun@com@@@Z
?addFocusListener@VCLXWindow@@UAAXABV?$Reference@VXFocusListener@awt@star@sun@com@@@uno@star@sun@com@@@Z
?removeWindowListener@VCLXWindow@@UAAXABV?$Reference@VXWindowListener@awt@star@sun@com@@@uno@star@sun@com@@@Z
?addWindowListener@VCLXWindow@@UAAXABV?$Reference@VXWindowListener@awt@star@sun@com@@@uno@star@sun@com@@@Z
?setFocus@VCLXWindow@@UAAXXZ
?setEnable@VCLXWindow@@UAAXE@Z
?setVisible@VCLXWindow@@UAAXE@Z
?getPosSize@VCLXWindow@@UAA?AURectangle@awt@star@sun@com@@XZ
?setPosSize@VCLXWindow@@UAAXJJJJF@Z
?convertSizeToPixel@VCLXDevice@@UAA?AUSize@awt@star@sun@com@@ABU23456@F@Z
?convertSizeToLogic@VCLXDevice@@UAA?AUSize@awt@star@sun@com@@ABU23456@F@Z
?convertPointToPixel@VCLXDevice@@UAA?AUPoint@awt@star@sun@com@@ABU23456@F@Z
?convertPointToLogic@VCLXDevice@@UAA?AUPoint@awt@star@sun@com@@ABU23456@F@Z
?getSomething@VCLXWindow@@UAA_JABV?$Sequence@C@uno@star@sun@com@@@Z
?SetWindow@VCLXWindow@@UAEXPAVWindow@@@Z
?removeEventListener@VCLXWindow@@UAAXABV?$Reference@VXEventListener@lang@star@sun@com@@@uno@star@sun@com@@@Z
?GetPropertyIds@VCLXWindow@@MAEXAAV?$list@GV?$allocator@G@_STL@@@_STL@@@Z
vclmi
?CaptureMouse@Window@@QAEXXZ
?GetPointer@Window@@QBEABVPointer@@XZ
?PixelToLogic@OutputDevice@@QBE?AVSize@@ABV2@@Z
?PixelToLogic@OutputDevice@@QBE?AVPoint@@ABV2@@Z
?ShowTracking@Window@@QAEXABVRectangle@@G@Z
?Push@OutputDevice@@QAEXG@Z
??0MapMode@@QAE@XZ
??1MapMode@@QAE@XZ
?SetFillColor@OutputDevice@@QAEXABVColor@@@Z
?SetLineColor@OutputDevice@@QAEXXZ
?DrawRect@OutputDevice@@QAEXABVRectangle@@@Z
?Pop@OutputDevice@@QAEXXZ
?HasChildPathFocus@Window@@QBEEE@Z
?Notify@Window@@UAEJAAVNotifyEvent@@@Z
?PreNotify@Window@@UAEJAAVNotifyEvent@@@Z
?SetPointer@Window@@QAEXABVPointer@@@Z
?GetSurroundingTextSelection@Window@@UBE?AVSelection@@XZ
?GetSurroundingText@Window@@UBE?AVString@@XZ
?GetOptimalSize@Window@@UBE?AVSize@@W4WindowSizeType@@@Z
?GetPrimarySelection@Window@@UAE?AV?$Reference@VXClipboard@clipboard@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetClipboard@Window@@UAE?AV?$Reference@VXClipboard@clipboard@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetDragGestureRecognizer@Window@@UAE?AV?$Reference@VXDragGestureRecognizer@dnd@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetDragSource@Window@@UAE?AV?$Reference@VXDragSource@dnd@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetDropTarget@Window@@UAE?AV?$Reference@VXDropTarget@dnd@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetParentLabeledBy@Window@@UBEPAV1@PBV1@@Z
?GetParentLabelFor@Window@@UBEPAV1@PBV1@@Z
?CreateAccessible@Window@@UAE?AV?$Reference@VXAccessible@accessibility@star@sun@com@@@uno@star@sun@com@@XZ
?GetComponentInterface@Window@@UAE?AV?$Reference@VXWindowPeer@awt@star@sun@com@@@uno@star@sun@com@@E@Z
?GetDisplayBackground@Window@@UBEABVWallpaper@@XZ
?GetDisplayText@Window@@UBE?AVString@@XZ
?GetText@Window@@UBE?AVString@@XZ
?SetText@Window@@UAEXABVString@@@Z
?Invalidate@Window@@UAEXG@Z
?Invalidate@Window@@UAEXABVRectangle@@G@Z
?Invalidate@Window@@UAEXABVRegion@@G@Z
?Scroll@Window@@UAEXJJG@Z
?Scroll@Window@@UAEXJJABVRectangle@@G@Z
?IsScrollable@Window@@UBEEXZ
?SetOutputSizePixel@Window@@UAEXABVSize@@@Z
?GetSizePixel@Window@@UBE?AVSize@@XZ
?SetSizePixel@Window@@UAEXABVSize@@@Z
?GetPosPixel@Window@@UBE?AVPoint@@XZ
?SetPosPixel@Window@@UAEXABVPoint@@@Z
?SetPosSizePixel@Window@@UAEXJJJJG@Z
?SetPosSizePixel@Window@@UAEXABVPoint@@ABVSize@@@Z
?SetSettings@Window@@UAEXABVAllSettings@@E@Z
?GetPreferredKeyInputWindow@Window@@UAEPAV1@XZ
?DataChanged@Window@@UAEXABVDataChangedEvent@@@Z
?StateChanged@Window@@UAEXG@Z
?UserEvent@Window@@UAEXKPAX@Z
?Tracking@Window@@UAEXABVTrackingEvent@@@Z
?Command@Window@@UAEXABVCommandEvent@@@Z
?RequestHelp@Window@@UAEXABVHelpEvent@@@Z
?LoseFocus@Window@@UAEXXZ
?GetFocus@Window@@UAEXXZ
?Deactivate@Window@@UAEXXZ
?Activate@Window@@UAEXXZ
?Move@Window@@UAEXXZ
?Draw@Window@@UAEXPAVOutputDevice@@ABVPoint@@ABVSize@@K@Z
?PrePaint@Window@@UAEXXZ
?KeyUp@Window@@UAEXABVKeyEvent@@@Z
?SetRelativeMapMode@OutputDevice@@UAEXABVMapMode@@@Z
?SetMapMode@OutputDevice@@UAEXXZ
?SetMapMode@OutputDevice@@UAEXABVMapMode@@@Z
?SetSettings@Window@@UAEXABVAllSettings@@@Z
??0Window@@QAE@PAV0@_J@Z
?SetBackground@OutputDevice@@QAEXXZ
?SetAccessibleRole@Window@@QAEXG@Z
?GetOutputSizePixel@OutputDevice@@QBE?AVSize@@XZ
??1Window@@UAE@XZ
?ReleaseMouse@Window@@QAEXXZ
?HideTracking@Window@@QAEXXZ
?GetSettings@Application@@SAABVAllSettings@@XZ
?GetLayoutRTL@AllSettings@@QBEEXZ
?GetMainThreadIdentifier@Application@@SAKXZ
?PostUserEvent@Application@@SAKABVLink@@PAX@Z
?GetSolarMutex@Application@@SAAAVIMutex@vos@@XZ
?EndAllDialogs@Dialog@@SAXPAVWindow@@@Z
?SetComponentInterface@Window@@UAEXV?$Reference@VXWindowPeer@awt@star@sun@com@@@uno@star@sun@com@@@Z
tlmi
?IsInside@Rectangle@@QBEEABVPoint@@@Z
?GetSize@Rectangle@@QBE?AVSize@@XZ
?SetSize@Rectangle@@QAEXABVSize@@@Z
?SetPos@Rectangle@@QAEXABVPoint@@@Z
?Justify@Rectangle@@QAEXXZ
?TopRight@Rectangle@@QBE?AVPoint@@XZ
?BottomLeft@Rectangle@@QBE?AVPoint@@XZ
??0Rectangle@@QAE@XZ
?BottomRight@Rectangle@@QBE?AVPoint@@XZ
?TopLeft@Rectangle@@QBE?AVPoint@@XZ
?Center@Rectangle@@QBE?AVPoint@@XZ
??0Rectangle@@QAE@ABVPoint@@ABVSize@@@Z
?GetHeight@Rectangle@@QBEJXZ
?GetWidth@Rectangle@@QBEJXZ
cppuhelper3msc
?disposeAndClear@OInterfaceContainerHelper@cppu@@QAAXABUEventObject@lang@star@sun@com@@@Z
?removeInterface@OInterfaceContainerHelper@cppu@@QAAJABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
??0OInterfaceContainerHelper@cppu@@QAE@AAVMutex@osl@@@Z
?addInterface@OInterfaceContainerHelper@cppu@@QAAJABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
??1OInterfaceContainerHelper@cppu@@QAE@XZ
?ImplHelper_getImplementationId@cppu@@YA?AV?$Sequence@C@uno@star@sun@com@@PAUclass_data@1@@Z
?WeakImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?WeakImplHelper_query@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAXPAVOWeakObject@1@@Z
?createOneInstanceFactory@cppu@@YA?AV?$Reference@VXSingleServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@3456@ABVOUString@rtl@@P6A?AV?$Reference@VXInterface@uno@star@sun@com@@@3456@0@ZABV?$Sequence@VOUString@rtl@@@3456@PAU_rtl_ModuleCount@@@Z
?createSingleFactory@cppu@@YA?AV?$Reference@VXSingleServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@3456@ABVOUString@rtl@@P6A?AV?$Reference@VXInterface@uno@star@sun@com@@@3456@0@ZABV?$Sequence@VOUString@rtl@@@3456@PAU_rtl_ModuleCount@@@Z
?release@OWeakObject@cppu@@UAAXXZ
?acquire@OWeakObject@cppu@@UAAXXZ
??0OWeakObject@cppu@@QAE@XZ
??1OWeakObject@cppu@@MAE@XZ
??1OImplementationId@cppu@@QAE@XZ
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
?queryAdapter@OWeakObject@cppu@@UAA?AV?$Reference@VXAdapter@uno@star@sun@com@@@uno@star@sun@com@@XZ
?getImplementationId@OImplementationId@cppu@@QBA?AV?$Sequence@C@uno@star@sun@com@@XZ
cppu3
uno_type_sequence_reference2One
cppu_unsatisfied_iquery_msg
uno_type_assignData
uno_type_sequence_assign
uno_type_sequence_construct
uno_type_destructData
typelib_static_sequence_type_init
typelib_static_type_init
uno_any_destruct
uno_any_construct
typelib_static_type_getByTypeClass
typelib_typedescriptionreference_equals
uno_type_any_construct
sal3
rtl_uString_new
osl_acquireMutex
osl_releaseMutex
osl_getGlobalMutex
osl_incrementInterlockedCount
rtl_freeMemory
rtl_uString_acquire
rtl_string2UString
rtl_uString_assign
rtl_ustr_compare_WithLength
rtl_ustr_ascii_compare_WithLength
rtl_uString_newConcat
rtl_uString_newFromAscii
rtl_allocateMemory
osl_createMutex
osl_destroyMutex
osl_getThreadIdentifier
rtl_uString_release
msvcr90
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
_unlock
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
__dllonexit
??0exception@std@@QAE@ABQBDH@Z
??1exception@std@@UAE@XZ
_CxxThrowException
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler3
kernel32
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
Exports
Exports
GetVersionInfo
component_getFactory
component_getImplementationEnvironment
component_writeInfo
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ