d:\Projects\WinRAR\SFX\build\sfxrar32\Release\sfxrar.pdb
Static task
static1
Behavioral task
behavioral1
Sample
EMVFOUNDRY/FOUNDRY registration/FOUNDRU registration.exe
Resource
win11-20240709-en
Behavioral task
behavioral2
Sample
EMVFOUNDRY/emvfoundry.exe
Resource
win11-20240709-en
Behavioral task
behavioral3
Sample
EMVFOUNDRY/emvfoundryFULL.exe
Resource
win11-20240709-en
General
-
Target
EMVFOUNDRY2021 FREE CRACKED BY FK.rar
-
Size
56.0MB
-
MD5
71fcaf9fca7b2b2a72b722e615c699d0
-
SHA1
0b68a9f75aea397bff3d781eda67dc0ffad09a75
-
SHA256
757170ff1dcb66f11aac0e172fa0171c900d8da3489031aaf783bee2b399b703
-
SHA512
0e6055ed36c8c453c07097fb49409a86cedf7f31fe211eaf9ed3a4e406f9219fad528bc31e1739e5ba851d4d84b5f9349bba9fed112ee7cf31ff5edfff754321
-
SSDEEP
1572864:Vi2mDi4aVQmvfO4NzkR2WYn2xs7CV7/5i2C:BqC9DNzt2xYCV7RiB
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/EMVFOUNDRY/FOUNDRY registration/FOUNDRU registration.exe unpack001/EMVFOUNDRY/emvfoundry.exe unpack001/EMVFOUNDRY/emvfoundryFULL.exe
Files
-
EMVFOUNDRY2021 FREE CRACKED BY FK.rar.rar
-
EMVFOUNDRY/FOUNDRY registration/FOUNDRU registration.exe.exe windows:5 windows x86 arch:x86
3eaa732d4dae53340f9646bdd85dac41
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
InitCommonControlsEx
shlwapi
SHAutoComplete
kernel32
ReadFile
GetFileAttributesW
SetFileAttributesW
FindNextFileW
GetFullPathNameW
GetModuleFileNameW
FindResourceW
GetModuleHandleW
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentProcessId
GetLocaleInfoW
GetNumberFormatW
ExpandEnvironmentStringsW
WaitForSingleObject
DosDateTimeToFileTime
GetDateFormatW
GetTimeFormatW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetExitCodeProcess
GetTempPathW
MoveFileExW
Sleep
UnmapViewOfFile
MapViewOfFile
GetCommandLineW
CreateFileMappingW
GetTickCount
SetEnvironmentVariableW
OpenFileMappingW
CreateThread
EnterCriticalSection
LeaveCriticalSection
GetProcessAffinityMask
ReleaseSemaphore
ResetEvent
DeleteCriticalSection
SetEvent
SetThreadPriority
InitializeCriticalSection
CreateEventW
CreateSemaphoreW
SystemTimeToFileTime
GetSystemTime
LocalFileTimeToFileTime
WideCharToMultiByte
MultiByteToWideChar
CompareStringW
IsDBCSLeadByte
FindFirstFileW
GetFileType
SetCurrentDirectoryW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetModuleFileNameA
ExitProcess
HeapSize
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
VirtualAlloc
VirtualFree
HeapCreate
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoA
GetCommandLineA
RaiseException
GetSystemTimeAsFileTime
SetEndOfFile
SetFilePointer
GetStdHandle
WriteFile
FlushFileBuffers
GetLongPathNameW
MoveFileW
GetShortPathNameW
CreateDirectoryW
RemoveDirectoryW
GlobalAlloc
DeleteFileW
FindClose
CreateFileW
DeviceIoControl
SetFileTime
GetCurrentProcess
CloseHandle
CreateHardLinkW
SetLastError
GetLastError
GetCurrentDirectoryW
CreateFileA
GetCPInfo
HeapAlloc
HeapReAlloc
HeapFree
RtlUnwind
user32
EnableWindow
ShowWindow
GetDlgItem
MessageBoxW
FindWindowExW
GetParent
MapWindowPoints
CreateWindowExW
UpdateWindow
LoadCursorW
RegisterClassExW
DefWindowProcW
DestroyWindow
CopyRect
IsWindow
CharUpperW
OemToCharBuffA
LoadIconW
PostMessageW
GetSysColor
SetForegroundWindow
WaitForInputIdle
IsWindowVisible
DialogBoxParamW
DestroyIcon
SetFocus
GetClassNameW
SendDlgItemMessageW
EndDialog
GetDlgItemTextW
SetDlgItemTextW
wvsprintfW
SendMessageW
GetDC
ReleaseDC
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
LoadStringW
GetWindowRect
GetClientRect
SetWindowPos
GetWindowTextW
SetWindowTextW
GetSystemMetrics
GetWindow
GetWindowLongW
SetWindowLongW
LoadBitmapW
gdi32
GetDeviceCaps
CreateCompatibleDC
GetObjectW
CreateCompatibleBitmap
SelectObject
StretchBlt
DeleteDC
DeleteObject
comdlg32
GetSaveFileNameW
CommDlgExtendedError
GetOpenFileNameW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
SetFileSecurityW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
shell32
SHChangeNotify
SHGetFileInfoW
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteExW
SHFileOperationW
ole32
CLSIDFromString
CoCreateInstance
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
oleaut32
VariantInit
Sections
.text Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
EMVFOUNDRY/emvfoundry.exe.exe windows:5 windows x86 arch:x86
cc46fd34de968bc5d66e394408761053
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
mpr
WNetGetConnectionW
winmm
timeEndPeriod
wininet
InternetCloseHandle
winspool.drv
DocumentPropertiesW
comdlg32
FindTextW
comctl32
ImageList_GetImageInfo
ws2_32
accept
shell32
DragQueryFileW
user32
CopyImage
CharUpperBuffW
version
GetFileVersionInfoSizeW
oledlg
OleUIPasteSpecialW
oleaut32
SafeArrayPutElement
msvcrt
strncmp
advapi32
CloseServiceHandle
netapi32
NetWkstaGetInfo
cryptui
CryptUIDlgSelectCertificateW
kernel32
GetVersion
GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
crypt32
CertGetNameStringW
ole32
RevokeDragDrop
gdi32
AddFontMemResourceEx
Exports
Exports
1��f���/K������ȾAh�� MJ���`�w:I��U"�π���>�ڔ5R�[�O����H�Z��nWQ�*�H/���Q.��E ��v�[`rx� ��S3 ͬJ�Å'1�#�|-2����q�J ������V��r6w�!���~B����Z~���"�89��{��{�!TT��`��i�L���h}�O�)� �� =|P�֍�'At:����İ%g?�*J�_}������!�z9_z/�B�!�C,*�Ul�!�_�C˸qI�i~O�q���������:B`7��5~{�b��y���p�Y֢9pk�2�������lO�ש����_w�%/ÃJ�$��_¡�ee��!s��pg����ݹ���<s��$4T�PΚ�X'��s� #r�yv����1`��r{Nr:�,;j�a������+'O�C'0ٙL� (�X{uN�4��=�:�m�o��L1���1k�-�.:jG�.$j���q�Kyzm��O|���8텓��V��Y�N���4��m4�YK�kPshR��7��[��+�46����Ղ�9��?p�l��@��R_s������% ˖�t���Z�m��Y\ 1��}ۤ}"�ymgqF2�� U½������� ˝�i�m��+�=� %,�ǫ���0� cS�v�l� NO������Y�B����,��~;7�t|!��������MYLǸh����V�9��'z���v�z�����P�ET����?a+�F���pL���@���$���&q�R8|=ż�ּ'�ybNEaK��yQ�����wķ:!㘖Ԙ���/T�t>����vq}82�۬��9cs�vC5��a�PZ ���N������������uVƝ>Ӷ����`�{1��{�i,qv6���gҪ&���d5���P��4@h�@�i�&% �gr�i����b~�1_�F'�G�p1�"�A�����(��7˜<!x0��H�@K ��>���I�lk�� ]ث�=GW4�+L����'��I����L�Z6���`�HO`&X#�U��Nɻm�Oa2ebK�r�Z���f;�Z�-��vQ�@��eT7q���9��%�t@g������>\���b��5u?Oؕ���A�u��{�@�[�������J�x�N{�a#�ECu�G�nȽM0t0����g�0���i��*��8ރ��fF���t��]���%�f���v �~lz�����*�g�L�_c���">���(�x_�MQ�Z�W�A8��HZp�������cu�w?�ݎ]J�<d���g�;���w�'�Z f}-ؕJH�me�L'��Ei~X����~R1�'s�O�熧�6Ec��y*?��X�%�V�Uv����̈́�K]va��)�k�l��R�@�ܕɌ��̉p�3��:� @�-�9������ ��m�����U%#]����ׂ�~�d���� ��� Ǣ䕉 ��螁�ǿߓ��os�[�����W0\�P+����1F� �f�����oR��1�&sn��������u�������dEد0�~qq����@�L�����mI��>�?���P�θ�p���F�u�f�я��S(����$l&d�(:�������`7:#�����;s����t�. �ֲ����RY��5U�&��.oj�^���n��WQ�i;D����'r@f��T��|K��%ȅ����3�(zY�ޏ�Q�5�V�t� ��6/�d�xI��wL�ф��j73�P�-�ϛ+���!s�ݺ?�&�E�JԜ0��=-���1l�C/x��f�ҍt9��S�V�pYԸkS ��>�#��O5]o�bp����"@��TF��H��>��$��A�P�ⵐ��ozu?L�g�u��ز�e- 5% 8����h��G�l�y��� ��O/O�2ޫ�L������i�� �cAr�ʼn��z�fĎ�9K��˪����,����O6��ʹ�]�bG�a �v�mp�;'�1��u��S��Wc��55:u��q���?I������Y6��~:$@�ĥu�/��Qh"�c4OB�������j�P@W���2-j�t�^3Ί_��k�OV��~��"U�Zw:`� ���|�R��)����S~�Īa�D�ǧ��JH0�D �]L���`y�¼��}��<�kc�Egl���l�x6�#-e����ٞ �(���������z��H�3�M� 3[?ň�A���)��]�9�bl�S�~��1�I�n�J�i�@J��Pv�zs��=�ӣJڀ��ht�8��Śړ��oj �R�Ex+�`O�u>�����j�С�öOF�+���Hp��Y)"I���|�q��~�ʹ����7�7��MI:N�(~Lͨ�wf�ء;�ʸ�UP,o2�I�.lOXM�/`ZxJ�4=~��*-G�R6o��g��5�4)� �|T���|�*�#��q��Iz�L����Zq���~�� �u���'��~ݬq�*�#Q$�e_}E�,29!��S��DU�,R�u�hx�!�+h���r2Ju�0�l���s�����oG��3��K��K9i�!ؖj������MN\Q�� ���C�� �<,Dh<0JYZn����ǦK�?�`ଋd��H�]�M^M=��3�/푤����=H�;���2 ��q���Q���aa��GD�|[ZJ9��^�X����MzS7�Ӊr.��O��ٺ��F��;�;*z�U*K6Md�=p"� Xq�Ӌ�x�C��~�և�(K�� O�H/��d�Q!ͱI���%:F�U ��?Ysh�����e ���/K�ж_���65A����g����q�EqE<�穎�*ʅ�����J�Bn�0æ���X���}���l ����nas�6#���Z�[�;8xUm������ܞG8�O4�8�ҕ(�����hs�,��~v1q,���j�}�������Q5T���_���y��QL���_�vU���K�Db1�����b��7������5h�Z���۱ WH�+��Ѻ���^�q3 W�Z� � �˟2�r���0?�(��aS���8.�sq�D������?+8F�
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Sections
.text Size: 29.3MB - Virtual size: 29.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 637KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 538KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 124B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 105B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.O3v0 Size: 29.7MB - Virtual size: 29.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.O3v1 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
EMVFOUNDRY/emvfoundryFULL.exe.exe windows:5 windows x86 arch:x86
cc46fd34de968bc5d66e394408761053
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
mpr
WNetGetConnectionW
winmm
timeEndPeriod
wininet
InternetCloseHandle
winspool.drv
DocumentPropertiesW
comdlg32
FindTextW
comctl32
ImageList_GetImageInfo
ws2_32
accept
shell32
DragQueryFileW
user32
CopyImage
CharUpperBuffW
version
GetFileVersionInfoSizeW
oledlg
OleUIPasteSpecialW
oleaut32
SafeArrayPutElement
msvcrt
strncmp
advapi32
CloseServiceHandle
netapi32
NetWkstaGetInfo
cryptui
CryptUIDlgSelectCertificateW
kernel32
GetVersion
GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
crypt32
CertGetNameStringW
ole32
RevokeDragDrop
gdi32
AddFontMemResourceEx
Exports
Exports
&d��+#�p�0����?B���������,����%��U�K�&�q����⁆<��&���آK�����پ=�F�s#�m�06�ʝOˣ�#���@qOHC��.lț07��qw�^�m �nfTحd�:���~����g�3VY�@�ȳS���jIš� 0-�ϱ�c)�"lG� ��W�a��_ οЭx~�`���dU�`\���u���'�s2�1AG����Pŧ}s��<q��f҆��9`kNA ��a�zf��y"�^�����H{�x�3E<j�h�����'>G|;=L����5k r������"�B���/�C폶�g����<���f�%��dӮ���`~%6��?�Vi�#�����3Rl�<�v�şP�V�<����~����L.M �u�U����LG�����'��W�C�[��������i��!o���Ht�xC�f���g �^ex��J1[Q�P�fT�҇�����=��p��/o�&^l �Ֆc6n4ҷ�Ғ�O����?�i�4����*i����G?�{�Y]F)/>��������d��XmZk�0�6e\����,��J�H?\�a���Ƽb�.��ۊ����ПR��g�ɴ�o���ד���%��{�k��m�FEB�t`��HJ����w�������Ԧ4&bH��v�s��{��Si��f��Q���������z�<ly���-0����FQ}ǟ�#3��Nv�k��9dΌh:^� J��*���-�<�f���@<��Hc/�%Q�w��a��#��捗m�ԥ���S��e���+���#B��G,�x�����k�#R��0�D1��{\����,-�'�)��S�2���;#����^����m�~���Z��I���+�����Mvj�{!�ܩ�Tp�LL(��$,"�|�r2K�!�O�ypea����(����k���߂�F���E�g%��b���Q�"�+F�[@��e����*?\n�VJt�����NHA o�S>���2~���RogWF�3��鈤�{�Z�=�� _�hP_���Qf�<s?\���kG�ZI�����LRb��C�f}��l�V��S���%�M��e��=�7(�����X�ڞ�I/�2U�Gҙ�@<������#��V�iX�O�h����Z��n�J��{0ޝ+a�}{��]�5\xt����%(�_IJ��uZ�O��DQ;Y�]�����6x{�Dn����Q·�0�0?l��2�}��1K��N�ݰ�`��� �'�tr���hYT�P�<��V;M��� �w2����A9z}�-�lw$,C��9� "e6��H3s�7J����!�x��;$KS��_�˙�����^���Ӂ�t��2h��si�@�Լ������vK���=���'dR��Ö����⸑69��[tb)Ef��Sj�����%����E{9�C����fC�������:�4@5 J +uD�(ԁ����/��������6�[4�{�I���B^��CHc�#���} ! "ٍ�z[����2�M���!�)��iG���gQ|tɷf�"��֎�l^�p6^�s��Vn��T���Nڰk���w;�ߣ��h� .9�bĮPK��o [Y֭cV�1�˧\KU��̔��~�$���W�t".���BX8?8��q�A�Yh�re�+��<��ΤT&o�V��^n����C`�k����.8A��q�+ ���q�pŝ�MP�ޓs�J�sWBG�z>�,}���a1�:�,�4 �PD����g}&�X�P��-��}�)��A��PX �Ti�P�к��\:P�V��6 �߿��-z����kR>E�ԃ�Af�f���v��o��´�P��MQ����p�<A����*��?*z��X"��R�fF����y8ʼnݢ�A��ʮ�@Á����`$7�4(/\Mx:����+�f :Z��2�B�hX0����RF�Xg�b��O~n���l<�2�����:t�~�PK���E�L��d��j_�I5����{��5|��c�9J��@���ܙB�R|1���D�O�Rd�*�N�EI�C�ۭ����7K5Zw����(ho��B���� �4>rIwP�[��������q��y�!uU�XDt#��[�ʳ�}ٖ�oū����ν}7���sT���髋-l]�)��s�)GW}O��w�����ؼ���7�j'��_2I��a@�͡w��-ɝ��D�����*�n�sZ�F��#�aU(&��gB������������O�������*s�'��3̼V8b���DŽ� ��d98�a�m�U���T�Ne�B��K���������_M������p����L]#�xݐy������:���0�Z��4n�K��Ӄ��e�������?X�����yZ���l%QX0���P�"�6�[�!��*)������_�"��C&����I�nif�묎�����A��I*Qn�gS�g��6�%G�U�QXΞ�z��o�w����#g�h��/7�`ZkS?�X�� ��Pcz����N:ڦ�䔍B�o��x �Ő=�A�Y���P,�.��z��w����}����}F`�^A4P�wX ��E6��=�\C2�������u(!����4�0z�o��������hO������<���Sn��Bθ�,&����~�N�@��E;����F����������B*v(����~0ߝ2HS��N�����U��zP���n8Z�V��?��� ��φf��1�夜��9���S]B��r,����fd&�N�������V&��>��YkI��89� ߠ���_O� ���P�X�ƆjW?=���[�T�:��&�����4�NjZ�ޢ������G�L �}��r]�(�"����%=��.�ؐg�S#�l��*Koꃔ2���&e�߽�k<�}���{F'�k����(�ϳ8m�������@s�4�G���-� Aؾ~�7A�vi����� ȼH�b�T�k��S��ጉ���n��f��j�b�5��Q��ߏ���8ψ#{ֹ� ʥ�
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Sections
.text Size: - Virtual size: 31.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 638KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 538KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didata Size: - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 124B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 105B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.O3v0 Size: - Virtual size: 30.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.O3v1 Size: 25.5MB - Virtual size: 25.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ