Mh��W�#R1��� k��H���xM�\��}`��\�����w^P��$ �C_���5��E|'�"��(9�� �ҧ� s�E�1o , R�nq�%~�#�̙�ܮ��q4K������y+s�����©-W��'��؟1����9�wh_:������B� �:�}�"�\QX�'"�� �� �t�S r�� ���rH���N��I# ���HKAy� ���*��`# ;�<��_�dZ%��Je��i�Ż|���m���4jV��D����9 ��{oi@��<~�yg �Yu��LD���S�@���J]�Iw ���-��cq���_�Ӱ�]tt�ڜ�<��� �x 2����a >�l��*�'I�U�~k.��O)0c}D��|�|JZ��"��0,�n�U�%';�UtF�E�I�+NE�iq�e�vx&�~+ ʥN��,�#\G����� 2�T��Ԫ ED�d _)��>+�䬜�ݎ#�H��HdH�I�3�l��D� ��UFY��p�����k�I��Ar�'}7,��!<V����4����a��A�ڃ�s}�8��H[� �+1�\��h �P�u ����8��� �v��-X�&�H����T2|.�5�����6+�O���g�_��q�j�sی�� ����a�z��m�3]�ݏ�2���6��ݨ̀ ���FP�=�D��9=�,��n��Y$ ��N�������s�5ma+�Ջ;�h�R��#+hO^�?�2��%�Wt'��ȱ�W �K>cj�$�3���7�]����� A�Xb�ev��f*{UO�9�~���P��e��ۄ3����8E�KB5�6�)� ",��g��~���8.v�wa|e���2�_��P\��" w��>�ᾁ'�b���Oi���.#a%�T�����oaMk��ŷ)�)H6�`�7=S<Z)@C�:˶�w�Ùp�l��8O��Q � ̥-� �D��"�5����5�ysE>�{M��]Zì�Tf���n&�O9�ؿ'�,&��nz�����x@u�~�� ������E�A-��6� ���T�!Lj8��.�e�u�e� ���d2kZ�� ��6[0�B +Mf2,v��ߑf����H)�˧�����T�؊��V����sRa>f���D�|��S �@�;�Yqa�Zt����SC�C�A���U6��6�M!l[9*1��O ���f� k1��T����o]�]L3�g�/�={�E��4��˱ڱ'��"� UK��I��;?������´��� ŵ ��=� ���ƍa/}`Rt�x9��EWuL�_������+�h�+,.�b�|�j�ݴJ��0�֎M�7�3�X}kJ��^�W�V\~M�p�q&dIj�N/c�[�Z�Ci�s����;�Z��$U\?�Ԉfo徼��7 ��k&v���ՔD��e�u\rƫ��M:�������{V��_��$eg��6�c�m��?}fZ���x�İLa�mXuB���j�9����EvM�+���C H ��ʣ�0�� �A��n�6���~��E2�֬*3�+�Ǹ)�g���8�d^;u �����j��:�k��(�#U`�m,��R���&��]`�� Y}h�0�� J�����U���{oE) ��^ ��]My�.��x+ �]KPH�C��`^���v���X�v�� q��T�q�ѠC��p�MIb�� �c���N!��~��r�J#�Y��H�R Kjq]�����Q���V�$�f%�VQ���'���\?u.�����ơCkC%Y��R��k�b�zh�yT;���%�����l��l�V��JOq�e��`,�A߀E��� �� Z�KU>*�����i!�� �P�H�?_ɘW&���^a�v�T���R�,���>D��kˋ2��s-ܷ(��N��� ~����%��o�G�W�KV�}U�v *%�� \v���n�[� IIh�� B����L�J�I�^�V�/¼��y��]R $ ���j ��>�C����t���we� ,�� g���+�OU�c��� D��3�����a�7��(9�-�|�����oʠ �=�Șf�Քe;���ִ�'9�/��� � �uh����Տ�� �v�Er��.��t��q&�B/�Z:l�������s�.� ��~��eÊ�Jg5�.���_]����K��m��t9\���QT�g���w�Q_��e�~�T�A"�8;7k�Q��H�����b�b��Qh�������gӳ���9�s���1�OF��@R���?���n�J�.�M � �8g� ��s֎�O�)�sX'�oP��P����q��ZV&,��<�m����z* UT��=���c���q7��+���> � �?�Q�R� ϋ����1��VL��H��/�t�� �kOʂ�ɐjr��@x� ��N�D� �.�>Sw���u�PƘˁ��L�~\A�M�.Wq �圭�0��>�B����Stj�-�?I�� go���82��L�&۸-���[Jd���k �u�$U�х���;��R��u�< �#���P4!���Cp��U�r���d��9�T�[�>�/F�h&�>�"�'��a6� ��5��J���A����<���6 㲪����Lߝ�$t �9 �� �������ZF(����q-Dz�"Q 崁������S����:�%zmn�_}�/ �F(�w��cyE��:3���}� �e3J��|�� ����j�]�����!�h3(e�9���Z[�K�A.ܼ�7 DTu0��S��<2Y��4i_�C-�U��DT���p�O|������e�:W9�r�ĸ����q�S��Y��su�T�}�q�F�D[���m��V?����ҋ��K�!t��=�Ƅ���2(�1�V���U|����p��C��E����41bR��,U���^!w�9�v�Py�L��6���z4_�G?��>�<g�rڗ=*�]��e4����w�[۸po������K�6�f�^"�T��h&.e+p!�� 7+���e 8�g� ��]r ��U��/ ���0W��8������� .0D�[���_�-tx���:Y�KЫ",�R���j?R��2{��� �ƹ-� �G�`�f����f� �H���y��a��]A�ñ���$��x9�7�
Behavioral task
behavioral1
Sample
69f847dcbd260accef7f41c9e9177ae9_JaffaCakes118.exe
Resource
win7-20240708-en
windows7-x64
General
-
Target
69f847dcbd260accef7f41c9e9177ae9_JaffaCakes118
-
Size
424KB
-
MD5
69f847dcbd260accef7f41c9e9177ae9
-
SHA1
feeb0a11c599346e24579fbb817c3d103cb1e98c
-
SHA256
50fca306c3030018b946bd4439e5b16442f33d3e8cf0ba2c68c99eb10a5a1943
-
SHA512
787a6d6e3ffee25f079c78f0e861c1a597ff0bb36c01643bda4740f1fe3071eb74bd7f7dbe24be6d6d110d08a79a339205c1a2791dd577db97ea6f21882b4133
-
SSDEEP
12288:RmEoj/t9hSiVXNvFK3JdDhjQnWv/9AWe:1ojt9kiVu3JZtXTe
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69f847dcbd260accef7f41c9e9177ae9_JaffaCakes118
Files
-
69f847dcbd260accef7f41c9e9177ae9_JaffaCakes118.exe windows:4 windows x86 arch:x86
c419a6a3978cae64218a5d45f0752203
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathRemoveBackslashW
PathSkipRootA
StrToIntW
PathFileExistsA
UrlCreateFromPathW
StrStrA
SHDeleteKeyA
PathAddBackslashW
PathCanonicalizeA
PathStripToRootW
PathRenameExtensionW
PathFindFileNameA
StrCmpIW
PathQuoteSpacesA
PathRelativePathToA
PathSetDlgItemPathW
PathRemoveFileSpecA
PathCompactPathW
SHDeleteValueW
PathIsUNCA
PathIsURLW
PathIsDirectoryW
PathAppendA
PathIsDirectoryEmptyW
StrCatW
PathFindExtensionW
StrStrW
UrlCanonicalizeW
PathAppendW
PathMakeSystemFolderW
PathGetCharTypeW
StrToInt64ExW
SHAutoComplete
PathRemoveExtensionW
SHDeleteKeyW
PathBuildRootA
PathRemoveBackslashA
PathIsUNCServerA
PathIsUNCServerShareA
PathStripPathA
UrlCombineW
StrFormatByteSizeW
StrToIntExW
PathMatchSpecW
PathFileExistsW
StrStrIA
PathIsDirectoryA
PathCompactPathA
UrlUnescapeW
StrToIntA
AssocQueryStringW
StrRetToStrW
StrStrIW
PathIsRelativeA
PathRemoveFileSpecW
SHDeleteValueA
StrDupW
PathIsRelativeW
UrlUnescapeA
PathRelativePathToW
PathParseIconLocationA
StrCpyW
PathIsUNCW
PathCombineW
PathIsRootA
StrRetToBufW
PathMakePrettyW
PathStripPathW
StrTrimA
SHSetValueW
PathGetDriveNumberA
PathCombineA
PathAddBackslashA
SHCopyKeyA
UrlIsW
PathFindFileNameW
SHCreateStreamOnFileW
StrTrimW
StrCmpNIW
PathStripToRootA
PathUnquoteSpacesA
StrFormatKBSizeW
PathRemoveBlanksW
StrFromTimeIntervalA
PathRemoveArgsA
PathIsNetworkPathW
PathIsRootW
PathRemoveExtensionA
PathFindExtensionA
PathCreateFromUrlW
SHDeleteEmptyKeyA
PathCommonPrefixW
PathRenameExtensionA
PathIsURLA
SHCreateStreamOnFileA
StrCmpW
PathCanonicalizeW
PathMakePrettyA
PathIsFileSpecW
advapi32
RegEnumKeyW
RegSetValueW
GetSecurityInfo
SetSecurityDescriptorDacl
LsaNtStatusToWinError
OpenSCManagerW
SetSecurityInfo
RegDeleteValueA
CheckTokenMembership
DeregisterEventSource
EnumServicesStatusA
CreateProcessAsUserA
LsaAddAccountRights
QueryServiceStatus
QueryServiceConfigW
LogonUserW
ImpersonateLoggedOnUser
ConvertStringSecurityDescriptorToSecurityDescriptorW
LookupPrivilegeValueW
RegLoadKeyA
OpenProcessToken
CryptDecrypt
LookupPrivilegeDisplayNameA
LockServiceDatabase
RegConnectRegistryW
RegQueryValueW
RegDeleteKeyW
GetKernelObjectSecurity
RegDeleteKeyA
RegisterServiceCtrlHandlerW
RegEnumValueA
CryptVerifySignatureA
RegDisablePredefinedCache
RegUnLoadKeyW
ChangeServiceConfigA
CryptEncrypt
MakeAbsoluteSD
GetSecurityDescriptorSacl
QueryServiceLockStatusW
RegOpenKeyExA
CryptCreateHash
SetFileSecurityW
IsValidSid
DeleteService
InitializeAcl
ConvertStringSidToSidW
CryptDeriveKey
LsaQueryInformationPolicy
CryptDestroyKey
AllocateAndInitializeSid
GetUserNameA
GetSidSubAuthority
OpenServiceW
LsaRemoveAccountRights
AddAce
RegFlushKey
IsValidAcl
RegCreateKeyExW
RegEnumKeyExA
InitializeSid
GetTokenInformation
SetSecurityDescriptorSacl
RegGetKeySecurity
InitiateSystemShutdownExW
GetFileSecurityA
CreateServiceW
ReportEventA
RegConnectRegistryA
RegUnLoadKeyA
BuildTrusteeWithSidW
StartServiceW
LookupAccountNameA
LsaOpenPolicy
SetServiceObjectSecurity
GetExplicitEntriesFromAclW
LsaLookupSids
GetSecurityDescriptorGroup
RegisterEventSourceW
CryptAcquireContextA
SetNamedSecurityInfoA
SetNamedSecurityInfoW
CryptGenKey
InitializeSecurityDescriptor
RegSetValueExA
RegCreateKeyExA
LookupAccountSidW
MapGenericMask
ConvertSecurityDescriptorToStringSecurityDescriptorW
GetLengthSid
RegQueryValueExW
OpenEncryptedFileRawW
InitiateSystemShutdownA
CryptAcquireContextW
EncryptFileW
DuplicateTokenEx
ImpersonateNamedPipeClient
LookupAccountNameW
StartServiceA
ControlService
SetSecurityDescriptorControl
SetTokenInformation
RegisterServiceCtrlHandlerExA
GetSidIdentifierAuthority
CloseServiceHandle
RegRestoreKeyW
CopySid
ConvertStringSidToSidA
ReportEventW
RegQueryValueA
GetUserNameW
RegCreateKeyA
RegDeleteValueW
BuildExplicitAccessWithNameW
RegQueryInfoKeyA
RegOpenKeyW
CreateServiceA
LsaLookupNames
CryptDestroyHash
MakeSelfRelativeSD
FreeSid
RegOpenCurrentUser
ChangeServiceConfig2W
ReadEncryptedFileRaw
RegEnumValueW
EnumDependentServicesW
LookupAccountSidA
GetSecurityDescriptorLength
RegQueryInfoKeyW
RegQueryValueExA
CreateProcessAsUserW
CryptGetUserKey
SetSecurityDescriptorGroup
GetEffectiveRightsFromAclA
CryptReleaseContext
SetEntriesInAclA
QueryServiceStatusEx
LookupPrivilegeValueA
StartServiceCtrlDispatcherA
SetThreadToken
RegEnumKeyExW
RegLoadKeyW
CryptSetProvParam
AccessCheck
RegNotifyChangeKeyValue
RegCreateKeyW
RegSetKeySecurity
SetServiceStatus
LookupPrivilegeNameA
GetNamedSecurityInfoA
LsaClose
ChangeServiceConfig2A
CryptGetHashParam
UnlockServiceDatabase
GetNamedSecurityInfoW
EqualPrefixSid
LsaFreeMemory
SetSecurityDescriptorOwner
CreateWellKnownSid
StartServiceCtrlDispatcherW
GetSecurityDescriptorOwner
GetSecurityDescriptorDacl
CloseEncryptedFileRaw
DeleteAce
RegSaveKeyW
RegisterEventSourceA
ConvertSidToStringSidW
OpenSCManagerA
RegRestoreKeyA
ChangeServiceConfigW
CryptGenRandom
GetAce
RevertToSelf
RegSetValueA
SetEntriesInAclW
CryptExportKey
CryptGetKeyParam
IsValidSecurityDescriptor
GetSidLengthRequired
BuildTrusteeWithNameW
RegSetValueExW
RegSaveKeyA
CryptImportKey
QueryServiceConfigA
AddAccessAllowedAce
EqualSid
GetSidSubAuthorityCount
RegEnumKeyA
GetAclInformation
GetSecurityDescriptorControl
LogonUserA
OpenThreadToken
RegOpenKeyA
AdjustTokenPrivileges
CryptHashData
RegCloseKey
ImpersonateSelf
CryptEnumProvidersW
RegOpenKeyExW
DuplicateToken
GetFileSecurityW
RegisterServiceCtrlHandlerA
WriteEncryptedFileRaw
OpenServiceA
SetFileSecurityA
kernel32
QueryPerformanceFrequency
GetTempFileNameA
GetAtomNameA
FindVolumeClose
lstrcatW
DeleteFileA
FatalAppExitA
BeginUpdateResourceW
QueryPerformanceCounter
IsDBCSLeadByte
GetProcessTimes
UpdateResourceW
OpenFile
CreateWaitableTimerA
ClearCommBreak
SetConsoleCtrlHandler
FindFirstFileExW
CreateFileMappingA
SetTimeZoneInformation
BackupWrite
GetSystemDirectoryA
GetVolumeNameForVolumeMountPointW
InterlockedCompareExchange
MapViewOfFileEx
GetCPInfo
UnmapViewOfFile
SetThreadLocale
DeleteVolumeMountPointA
EnumResourceLanguagesW
GetSystemPowerStatus
GetProcAddress
HeapAlloc
SetThreadContext
UnlockFile
WriteProcessMemory
GetThreadTimes
AllocConsole
OpenEventA
SetStdHandle
MultiByteToWideChar
VerifyVersionInfoA
GetSystemTimeAsFileTime
FindFirstChangeNotificationA
GlobalFindAtomW
OpenProcess
HeapValidate
GetTempFileNameW
lstrcatA
GetPrivateProfileStructA
SetVolumeMountPointA
CreateNamedPipeW
_llseek
SearchPathW
FreeResource
ReleaseMutex
DeleteCriticalSection
VirtualLock
FlushInstructionCache
PulseEvent
CreateMutexW
GlobalFree
Module32First
VirtualProtect
GetNumberFormatA
IsBadReadPtr
WritePrivateProfileStructA
SetConsoleMode
GetCommandLineW
GetFileAttributesW
lstrcpynA
SetSystemTime
WaitForSingleObject
EnumCalendarInfoW
WritePrivateProfileStructW
FindFirstFileW
TlsSetValue
GetSystemDefaultLCID
GetTickCount
GetProfileIntW
GetConsoleOutputCP
ExpandEnvironmentStringsA
InterlockedIncrement
GetLocaleInfoW
LeaveCriticalSection
CreateNamedPipeA
IsDebuggerPresent
EndUpdateResourceW
TlsGetValue
DebugActiveProcess
TlsFree
SetLastError
DuplicateHandle
WriteConsoleW
HeapFree
GetProcessHeap
LocalFree
EnumCalendarInfoExW
GlobalDeleteAtom
LoadResource
GetLocalTime
IsBadStringPtrA
EnumSystemLanguageGroupsW
CreateProcessA
SetCurrentDirectoryA
CreateFileA
FindCloseChangeNotification
GetProfileSectionA
BuildCommDCBA
OpenSemaphoreW
VirtualProtectEx
lstrlenW
GetVolumeInformationW
GetQueuedCompletionStatus
TryEnterCriticalSection
GetTimeZoneInformation
GetModuleHandleA
Thread32First
GetCommandLineA
GetSystemDefaultLangID
SetThreadAffinityMask
WaitNamedPipeA
FormatMessageW
LocalSize
CreateDirectoryW
GetDriveTypeA
GetStringTypeExA
GlobalMemoryStatusEx
MapViewOfFile
GetFileAttributesExW
TransmitCommChar
GetThreadPriority
Process32FirstW
DeviceIoControl
GetFileType
GetProcessWorkingSetSize
GetStartupInfoA
WriteProfileStringW
EnterCriticalSection
GetCommModemStatus
IsDBCSLeadByteEx
WriteConsoleA
WriteProfileStringA
GetLogicalDrives
GlobalSize
AreFileApisANSI
ReleaseSemaphore
GetConsoleCP
GetFileInformationByHandle
FreeLibrary
CreateEventW
IsBadWritePtr
GetHandleInformation
SetProcessAffinityMask
SetProcessWorkingSetSize
ReadConsoleInputA
EnumResourceLanguagesA
WideCharToMultiByte
CompareFileTime
GetProfileStringA
ExitProcess
MoveFileExA
GetStringTypeExW
GetEnvironmentStringsW
SystemTimeToTzSpecificLocalTime
VirtualFreeEx
GetExitCodeThread
GetCurrentDirectoryA
Process32First
GetMailslotInfo
MulDiv
GetPriorityClass
Thread32Next
GetLongPathNameW
EnumSystemLocalesA
ReadFile
EscapeCommFunction
GetCommConfig
EnumResourceNamesA
GlobalLock
SetConsoleTitleW
QueryDosDeviceA
LocalReAlloc
WinExec
GetCompressedFileSizeW
AddAtomW
VirtualAllocEx
GetBinaryTypeA
SetFilePointerEx
SetFileTime
RemoveDirectoryW
GetStringTypeA
lstrcmpiA
GetPrivateProfileIntA
GetEnvironmentVariableW
CreateToolhelp32Snapshot
GetComputerNameExW
GlobalHandle
WriteFile
FindResourceA
SetHandleInformation
lstrcpyW
GetDiskFreeSpaceExW
GetUserDefaultUILanguage
InitializeCriticalSectionAndSpinCount
TerminateThread
ResetEvent
GetFullPathNameW
CreateSemaphoreA
FormatMessageA
GetUserDefaultLCID
GetDiskFreeSpaceA
GetTimeFormatA
GlobalAddAtomA
SetCommState
SetMailslotInfo
GetComputerNameA
LocalLock
GetDriveTypeW
Heap32First
GetEnvironmentStrings
GetSystemWindowsDirectoryA
WaitForMultipleObjects
ProcessIdToSessionId
SetCommConfig
HeapSize
GlobalMemoryStatus
GetLastError
CreateFileMappingW
FlushConsoleInputBuffer
CommConfigDialogW
DeleteVolumeMountPointW
GetOEMCP
FileTimeToDosDateTime
FileTimeToSystemTime
ResumeThread
GetProcessHeaps
GlobalGetAtomNameA
GlobalAlloc
LocalUnlock
OpenFileMappingA
WaitNamedPipeW
HeapDestroy
InterlockedExchange
LockFile
GetModuleFileNameW
SetupComm
_hread
GetCurrentProcess
WriteFileEx
FindResourceExA
GetShortPathNameW
SetPriorityClass
WaitForDebugEvent
DosDateTimeToFileTime
DefineDosDeviceA
GetStdHandle
TlsAlloc
GetFullPathNameA
lstrcpynW
SetProcessPriorityBoost
GetCurrentDirectoryW
ExpandEnvironmentStringsW
GetDiskFreeSpaceExA
_lwrite
GetSystemTime
OpenMutexW
OpenEventW
DeleteFileW
GetNumberFormatW
HeapCreate
LCMapStringA
GetStartupInfoW
ConvertDefaultLocale
GetPrivateProfileSectionNamesA
ReadDirectoryChangesW
FindFirstChangeNotificationW
PurgeComm
FindAtomW
SetEnvironmentVariableW
UpdateResourceA
GetCurrentThreadId
OpenThread
_lopen
SetUnhandledExceptionFilter
GetUserDefaultLangID
WritePrivateProfileSectionA
QueueUserAPC
CreateFileW
SetLocalTime
SetHandleCount
SwitchToThread
_lcreat
GetComputerNameW
LoadLibraryA
GetCommState
HeapReAlloc
GetConsoleMode
SetWaitableTimer
CreateWaitableTimerW
EnumUILanguagesW
WaitForMultipleObjectsEx
OpenMutexA
MoveFileExW
PeekNamedPipe
GetComputerNameExA
SetConsoleCursorPosition
GetVolumeNameForVolumeMountPointA
ConnectNamedPipe
IsBadCodePtr
Beep
FlushFileBuffers
GetSystemInfo
GetTempPathA
GetCurrencyFormatA
Heap32ListFirst
GetTimeFormatW
SetThreadPriority
FindResourceW
GetDateFormatW
HeapCompact
WriteConsoleOutputW
BackupSeek
CopyFileA
GetCurrentProcessId
SetFilePointer
GetProfileStringW
GetThreadContext
DebugBreak
ReadProcessMemory
GetModuleFileNameA
_hwrite
GetVersionExA
GlobalGetAtomNameW
GetCommProperties
RemoveDirectoryA
GetLogicalDriveStringsW
GetShortPathNameA
EndUpdateResourceA
CreateEventA
GetDiskFreeSpaceW
FreeEnvironmentStringsW
IsProcessorFeaturePresent
GlobalFlags
SetEndOfFile
lstrcpyA
CreateIoCompletionPort
GetCurrentThread
DeleteFiber
ConvertThreadToFiber
InitializeCriticalSection
RtlFillMemory
FindFirstVolumeW
WritePrivateProfileSectionW
GetVersionExW
GetSystemTimeAdjustment
SetComputerNameW
GetCommTimeouts
IsValidLocale
EnumLanguageGroupLocalesW
GetLogicalDriveStringsA
GetFileAttributesA
CloseHandle
_lread
FreeEnvironmentStringsA
FindNextChangeNotification
SetCommBreak
GetVolumeInformationA
ClearCommError
GetPrivateProfileStringA
VirtualFree
SetCommTimeouts
GlobalFindAtomA
SystemTimeToFileTime
WritePrivateProfileStringW
CreateMutexA
lstrlenA
Module32NextW
OpenSemaphoreA
CopyFileExW
SetEvent
GetStringTypeW
GetCPInfoExA
CreatePipe
GetExitCodeProcess
SetTapePosition
VerLanguageNameA
GetDateFormatA
GetPrivateProfileStringW
SetCommMask
GetFileTime
WritePrivateProfileStringA
SetEnvironmentVariableA
GetACP
FindNextFileA
Module32Next
VirtualQuery
LocalAlloc
EnumResourceTypesA
GetThreadLocale
GetCommMask
FindClose
CreateSemaphoreW
FreeConsole
GlobalReAlloc
DeleteAtom
VirtualAlloc
OutputDebugStringW
SetProcessShutdownParameters
LocalCompact
IsValidCodePage
GetPrivateProfileSectionA
FlushViewOfFile
VirtualUnlock
_lclose
GlobalUnlock
GetProcessVersion
SuspendThread
CopyFileW
GetLocaleInfoA
SleepEx
SetNamedPipeHandleState
QueryDosDeviceW
SetThreadExecutionState
MoveFileA
RtlUnwind
OutputDebugStringA
CompareStringW
Heap32Next
GetEnvironmentVariableA
GetOverlappedResult
QueueUserWorkItem
LCMapStringW
FindFirstFileA
LockResource
GetFileSize
DisconnectNamedPipe
GetModuleHandleW
LocalHandle
CreateThread
GlobalAddAtomW
CreateDirectoryA
Heap32ListNext
LoadLibraryW
FindResourceExW
FindNextVolumeW
LoadLibraryExA
UnlockFileEx
GetFileSizeEx
Process32Next
EnumCalendarInfoA
GetFileAttributesExA
CompareStringA
FileTimeToLocalFileTime
CancelIo
ExitThread
RaiseException
BackupRead
CreateProcessW
SetVolumeLabelA
GetVolumePathNameW
GetLongPathNameA
SearchPathA
GetProfileIntA
FindNextFileW
lstrcmpiW
SwitchToFiber
GetWindowsDirectoryW
GetVolumePathNameA
CreateMailslotA
MoveFileW
DisableThreadLibraryCalls
UnhandledExceptionFilter
CreateFiber
SetErrorMode
EnumResourceNamesW
ContinueDebugEvent
WaitForSingleObjectEx
LockFileEx
CopyFileExA
Module32FirstW
LoadLibraryExW
LocalFileTimeToFileTime
GetTempPathW
GetVersion
Toolhelp32ReadProcessMemory
SetFileAttributesW
IsBadStringPtrW
GetTapeParameters
TerminateProcess
GetProcessAffinityMask
SetCurrentDirectoryW
VerifyVersionInfoW
lstrcmpW
BeginUpdateResourceA
SetVolumeLabelW
SetFileAttributesA
PostQueuedCompletionStatus
CreateDirectoryExA
SizeofResource
InterlockedExchangeAdd
shell32
DragFinish
DragQueryPoint
SHGetPathFromIDListA
FindExecutableW
DragQueryFileW
SHGetDesktopFolder
SHFreeNameMappings
SHBindToParent
DragQueryFileA
SHChangeNotify
Shell_NotifyIconA
SHGetDataFromIDListA
SHFileOperationA
SHGetDataFromIDListW
SHGetFileInfoW
CommandLineToArgvW
Shell_NotifyIconW
ord155
ExtractIconExW
SHGetFolderPathA
SHFileOperationW
DoEnvironmentSubstW
SHGetSpecialFolderLocation
SHGetFolderPathW
SHGetFileInfoA
SHGetMalloc
ShellExecuteA
SHCreateDirectoryExA
ExtractIconA
SHCreateDirectoryExW
SHGetFolderLocation
SHEmptyRecycleBinA
DuplicateIcon
SHBrowseForFolderW
DragAcceptFiles
ShellExecuteExA
ShellExecuteExW
SHGetSpecialFolderPathW
SHAddToRecentDocs
FindExecutableA
SHAppBarMessage
SHGetPathFromIDListW
ExtractIconExA
SHGetInstanceExplorer
ShellExecuteW
SHGetSpecialFolderPathA
ExtractIconW
SHBrowseForFolderA
rpcrt4
RpcStringFreeA
NdrConvert
UuidFromStringA
NdrPointerBufferSize
RpcRaiseException
UuidCreateSequential
RpcBindingFree
RpcBindingFromStringBindingA
NdrServerCall2
RpcStringFreeW
RpcServerListen
NdrPointerFree
UuidToStringA
UuidCreate
NdrConformantStringUnmarshall
RpcServerUnregisterIf
NdrPointerMarshall
RpcMgmtStopServerListening
UuidFromStringW
RpcStringBindingComposeA
I_RpcGetBuffer
RpcServerRegisterIf
UuidToStringW
NdrServerCall
RpcServerUseProtseqEpA
NdrServerInitializeNew
NdrClientCall2
urlmon
CreateAsyncBindCtx
UrlMkSetSessionOption
RegisterBindStatusCallback
CopyStgMedium
CreateURLMoniker
URLDownloadToFileA
IsValidURL
CoInternetGetSession
URLDownloadToFileW
URLDownloadToCacheFileW
URLDownloadToCacheFileA
comctl32
ImageList_Replace
ImageList_DrawEx
PropertySheetA
ImageList_EndDrag
CreateToolbarEx
ImageList_GetBkColor
ImageList_AddIcon
ImageList_LoadImage
ImageList_DragMove
FlatSB_ShowScrollBar
ImageList_GetIconSize
ImageList_SetDragCursorImage
ImageList_Destroy
InitializeFlatSB
ImageList_DragEnter
ImageList_Create
ImageList_AddMasked
ImageList_SetBkColor
ImageList_BeginDrag
ImageList_SetFlags
ImageList_GetDragImage
ImageList_GetImageCount
DestroyPropertySheetPage
CreatePropertySheetPageA
ImageList_Add
ImageList_LoadImageW
ord17
ImageList_ReplaceIcon
ImageList_Merge
ImageList_Read
MakeDragList
ImageList_Remove
ImageList_GetImageInfo
ImageList_Write
InitCommonControlsEx
CreatePropertySheetPageW
CreateUpDownControl
ImageList_LoadImageA
ImageList_DragLeave
ImageList_Draw
ImageList_SetIconSize
ImageList_GetIcon
ImageList_DrawIndirect
DrawStatusTextW
PropertySheetW
FlatSB_EnableScrollBar
ImageList_Copy
ImageList_SetOverlayImage
_TrackMouseEvent
ImageList_SetImageCount
CreateStatusWindowW
ImageList_DragShowNolock
ImageList_Duplicate
user32
GetClipboardFormatNameA
SystemParametersInfoA
GetWindowDC
TabbedTextOutA
CreateIconIndirect
PostThreadMessageW
wsprintfA
SendInput
CharLowerBuffA
ValidateRgn
GetNextDlgTabItem
UnpackDDElParam
CreatePopupMenu
LoadIconW
UnregisterClassW
GetCursorInfo
VkKeyScanExA
CreateDialogIndirectParamW
AllowSetForegroundWindow
ExitWindowsEx
SetWindowRgn
IsCharLowerW
wsprintfW
LoadStringW
VkKeyScanW
DlgDirListComboBoxW
IsDlgButtonChecked
GetUpdateRgn
RealChildWindowFromPoint
RegisterClassA
DefDlgProcA
GetWindowTextW
DrawTextA
CallMsgFilterA
DispatchMessageW
OpenDesktopA
CallWindowProcA
TrackPopupMenu
LoadMenuA
CreateIconFromResourceEx
EnumDisplaySettingsA
OpenIcon
GetWindowPlacement
DdeClientTransaction
GetParent
MapDialogRect
AppendMenuW
DdePostAdvise
GetClassLongW
MoveWindow
MessageBoxW
GetClassLongA
ReleaseCapture
SetWindowsHookExA
RegisterClassExA
GetMenuItemInfoW
IsCharAlphaNumericW
DestroyAcceleratorTable
GetWindowContextHelpId
DlgDirListA
DdeCreateStringHandleA
IsWindowEnabled
SetDlgItemTextA
IsCharAlphaA
DrawStateA
ScrollWindow
RemoveMenu
DrawEdge
ClipCursor
PostQuitMessage
PostMessageW
ClientToScreen
DrawCaption
GetWindowLongA
DialogBoxParamA
GetMenu
ExcludeUpdateRgn
GetMenuItemInfoA
SubtractRect
DestroyCursor
AnimateWindow
GetSysColor
GetDlgItemTextW
UnionRect
GetClipboardData
RemovePropW
GetScrollInfo
GetClipCursor
TileChildWindows
GetCapture
SwapMouseButton
keybd_event
SetTimer
DdeFreeStringHandle
CloseWindow
CharLowerBuffW
EndDialog
ChildWindowFromPointEx
MapVirtualKeyExA
GetMenuStringW
CreateIcon
SetMenu
LoadKeyboardLayoutA
MapVirtualKeyA
InflateRect
SetForegroundWindow
SwitchDesktop
SetWindowContextHelpId
VkKeyScanA
LoadMenuIndirectW
ToUnicode
DlgDirListComboBoxA
DrawAnimatedRects
GetDoubleClickTime
OpenInputDesktop
EnableWindow
OemToCharBuffA
ChildWindowFromPoint
GetMenuStringA
DdeFreeDataHandle
SetPropA
PostThreadMessageA
DeferWindowPos
LookupIconIdFromDirectoryEx
GetMenuState
DefWindowProcA
WinHelpW
GetWindowRect
SetCapture
GetUserObjectInformationA
CopyImage
GetDC
ChangeDisplaySettingsA
IsCharAlphaNumericA
GetWindowInfo
SetMenuDefaultItem
GetKeyboardState
SetUserObjectSecurity
InSendMessage
RegisterClipboardFormatW
DialogBoxIndirectParamW
IsZoomed
GetKeyNameTextW
GetMessageExtraInfo
RegisterWindowMessageA
CharNextW
LoadAcceleratorsW
IsDialogMessageW
IsDialogMessageA
ScrollDC
RedrawWindow
SetScrollPos
GetInputState
GetDlgItem
CheckMenuItem
TranslateMDISysAccel
FreeDDElParam
ActivateKeyboardLayout
IsCharLowerA
GetTopWindow
GetCursor
DefWindowProcW
SendDlgItemMessageA
DispatchMessageA
GetUpdateRect
SetMenuItemBitmaps
GetLastInputInfo
FindWindowW
IsMenu
MonitorFromRect
SetWindowTextA
IsWindow
GetAsyncKeyState
UnhookWindowsHookEx
FindWindowExA
GetMenuCheckMarkDimensions
CharUpperA
RegisterClassW
CharNextA
RegisterDeviceNotificationW
IsCharUpperA
DdeUnaccessData
OffsetRect
SetParent
FindWindowA
EmptyClipboard
SendNotifyMessageA
OemToCharA
TranslateMessage
GetMessageW
HideCaret
SetFocus
wvsprintfA
InsertMenuW
SetClipboardData
ReplyMessage
SetCaretBlinkTime
EnumChildWindows
GetMessagePos
GetWindowLongW
GetClassInfoA
InsertMenuItemA
DrawTextExW
CheckMenuRadioItem
ShowWindow
GetProcessWindowStation
ReuseDDElParam
GetScrollPos
CreateWindowExW
IsClipboardFormatAvailable
LockWindowUpdate
FrameRect
CreateDialogParamW
GetMessageTime
MapVirtualKeyExW
GetClipboardFormatNameW
GetThreadDesktop
DrawFrameControl
SetRect
CharUpperBuffW
DdeQueryStringW
CallNextHookEx
CopyIcon
CloseDesktop
MapVirtualKeyW
TabbedTextOutW
DefFrameProcW
GetDCEx
LoadIconA
EqualRect
SetWindowsHookExW
DdeAccessData
DdeInitializeW
GetPropW
GrayStringW
GetActiveWindow
ChangeDisplaySettingsW
SetCursor
ValidateRect
UnregisterClassA
LoadMenuW
SetMenuInfo
GetDialogBaseUnits
GetClassNameW
SetClassLongW
GetScrollRange
DdeCreateDataHandle
LoadStringA
GetMonitorInfoA
GetWindow
ReleaseDC
MessageBoxIndirectA
CreateDesktopW
IntersectRect
GetMenuDefaultItem
GetDlgItemTextA
GetWindowModuleFileNameW
SetWindowPos
CloseWindowStation
CopyRect
CreateWindowExA
EnableMenuItem
CreateCursor
ScreenToClient
GetClassInfoW
DrawTextW
MapWindowPoints
CreateIconFromResource
OpenWindowStationW
LookupIconIdFromDirectory
TileWindows
CreateAcceleratorTableA
CreateMDIWindowA
SetDlgItemInt
GetClassNameA
LoadAcceleratorsA
CallWindowProcW
SetScrollRange
GetMenuItemCount
PtInRect
GetMenuItemID
KillTimer
RegisterWindowMessageW
DestroyCaret
TranslateAcceleratorW
DefMDIChildProcW
GetKeyState
MonitorFromPoint
SetWindowTextW
InvertRect
MsgWaitForMultipleObjects
MenuItemFromPoint
SetWindowLongW
LoadCursorFromFileW
WaitForInputIdle
WinHelpA
FillRect
SendMessageTimeoutA
SetLayeredWindowAttributes
UpdateWindow
CharPrevA
UnregisterDeviceNotification
DrawStateW
SetRectEmpty
GetClassInfoExA
LoadCursorW
CopyAcceleratorTableA
SendMessageA
GetSubMenu
SetActiveWindow
GetPropA
GetIconInfo
GetDlgItemInt
IsRectEmpty
wvsprintfW
IsDialogMessage
EnumDisplayMonitors
EnumWindows
DialogBoxParamW
GetSystemMenu
BeginDeferWindowPos
GetKeyboardLayoutNameA
SetPropW
BeginPaint
OpenClipboard
TrackMouseEvent
LoadBitmapW
SetWindowPlacement
ShowCursor
EndDeferWindowPos
DdeDisconnect
DdeInitializeA
GetKeyboardLayout
IsChild
SetDoubleClickTime
MonitorFromWindow
SetMenuItemInfoW
EndPaint
ShowCaret
ScrollWindowEx
DrawIconEx
GetQueueStatus
GetMenuBarInfo
GetWindowRgn
DdeUninitialize
CharNextExA
SetScrollInfo
SetClassLongA
GetUserObjectSecurity
GetCaretPos
PostMessageA
DlgDirSelectExA
GetGUIThreadInfo
DrawMenuBar
WindowFromPoint
GetScrollBarInfo
RemovePropA
GetTabbedTextExtentA
GetWindowTextLengthA
DestroyMenu
ShowOwnedPopups
ShowScrollBar
InsertMenuItemW
GrayStringA
ChangeClipboardChain
CharLowerA
SetWindowLongA
DdeGetLastError
InvalidateRect
GetWindowThreadProcessId
ShowWindowAsync
GetNextDlgGroupItem
CreateDialogIndirectParamA
ModifyMenuA
PackDDElParam
IsWindowUnicode
SetMenuContextHelpId
SetProcessWindowStation
ToAsciiEx
SendMessageW
GetFocus
LoadBitmapA
CreateMDIWindowW
BringWindowToTop
DdeGetData
GetAncestor
GetMenuInfo
CreateCaret
SetMenuItemInfoA
DrawTextExA
SetDlgItemTextW
GetClipboardViewer
DeleteMenu
FindWindowExW
CharToOemA
DragDetect
ArrangeIconicWindows
RegisterHotKey
SetCaretPos
InvalidateRgn
LoadMenuIndirectA
LoadImageA
TranslateAcceleratorA
ModifyMenuW
CharToOemBuffA
CreateDialogParamA
InsertMenuA
DdeNameService
MessageBeep
LoadCursorA
CountClipboardFormats
AdjustWindowRectEx
GetUserObjectInformationW
GetKeyboardLayoutList
ToUnicodeEx
CreateMenu
GetTitleBarInfo
DlgDirSelectComboBoxExA
MessageBoxA
OpenWindowStationA
MessageBoxExA
DrawIcon
CloseClipboard
mouse_event
MsgWaitForMultipleObjectsEx
DdeQueryStringA
SystemParametersInfoW
WaitMessage
GetClipboardOwner
DdeCreateStringHandleW
CharUpperW
GetWindowWord
ToAscii
GetCaretBlinkTime
SetCursorPos
EnumDisplaySettingsW
DdeConnect
GetDlgCtrlID
SendDlgItemMessageW
GetClientRect
DefFrameProcA
HiliteMenuItem
SetMessageExtraInfo
CharUpperBuffA
BroadcastSystemMessage
UnhookWinEvent
GetClassInfoExW
RegisterClipboardFormatA
GetMessageA
CheckDlgButton
IsIconic
GetForegroundWindow
TrackPopupMenuEx
CharLowerW
CreateAcceleratorTableW
OpenDesktopW
GetComboBoxInfo
DestroyWindow
IsWindowVisible
LockSetForegroundWindow
EnableScrollBar
GetSystemMetrics
GetWindowTextLengthW
DefMDIChildProcA
GetMenuContextHelpId
UnregisterHotKey
AdjustWindowRect
SetClipboardViewer
RegisterClassExW
EnumClipboardFormats
GetOpenClipboardWindow
SetThreadDesktop
LoadImageW
NotifyWinEvent
DialogBoxIndirectParamA
GetWindowTextA
PeekMessageA
FlashWindowEx
SetKeyboardState
EnumDesktopWindows
AttachThreadInput
DestroyIcon
GetClassWord
GetSysColorBrush
GetLastActivePopup
WindowFromDC
GetDesktopWindow
DrawFocusRect
PeekMessageW
FlashWindow
CascadeWindows
CheckRadioButton
GetCursorPos
CopyAcceleratorTableW
LoadCursorFromFileA
AppendMenuA
GetMonitorInfoW
GetKeyNameTextA
EnumThreadWindows
SendNotifyMessageW
comdlg32
GetSaveFileNameA
PrintDlgW
CommDlgExtendedError
GetSaveFileNameW
ChooseColorA
ChooseFontA
PrintDlgA
ChooseFontW
FindTextW
FindTextA
GetOpenFileNameA
PageSetupDlgA
GetOpenFileNameW
ChooseColorW
PrintDlgExA
ReplaceTextA
ReplaceTextW
PageSetupDlgW
GetFileTitleA
GetFileTitleW
gdi32
StartDocW
Chord
GetBitmapDimensionEx
GetDIBits
ExtFloodFill
GetCharWidth32W
AbortPath
EndPage
CreateEnhMetaFileW
MoveToEx
CreateFontIndirectA
GetObjectType
CreateFontW
DeleteEnhMetaFile
ExcludeClipRect
SetBkMode
SetTextAlign
PolyDraw
GetTextCharacterExtra
EnumEnhMetaFile
OffsetWindowOrgEx
WidenPath
RestoreDC
GdiFlush
GetPath
EnumFontFamiliesW
FillRgn
GetGlyphOutlineW
DrawEscape
SetPixelV
GetTextMetricsW
StartDocA
GetGlyphOutlineA
GetViewportExtEx
PlayEnhMetaFile
CreateEnhMetaFileA
TranslateCharsetInfo
GetFontLanguageInfo
EnumFontFamiliesExW
CreatePolyPolygonRgn
SetDIBitsToDevice
StretchDIBits
Ellipse
CreateDCW
GetWindowOrgEx
GetCurrentObject
ExtSelectClipRgn
PlayMetaFile
SetBkColor
PatBlt
SetLayout
LPtoDP
SetBitmapDimensionEx
SetTextCharacterExtra
EnumFontFamiliesExA
SetGraphicsMode
EnumMetaFile
GetMapMode
GetMetaRgn
Escape
SelectObject
GetEnhMetaFilePaletteEntries
SetICMMode
CreateBrushIndirect
StretchBlt
CreateRectRgnIndirect
GetTextAlign
Rectangle
SetDIBits
SetWorldTransform
OffsetClipRgn
GetCharABCWidthsW
Pie
CopyMetaFileA
GetRgnBox
RealizePalette
ExtEscape
PolyBezierTo
SetWindowOrgEx
CloseMetaFile
SetDCBrushColor
CopyEnhMetaFileW
GetSystemPaletteEntries
ArcTo
CreateHatchBrush
GetObjectA
GetRegionData
GetViewportOrgEx
FillPath
SetArcDirection
GetEnhMetaFileHeader
GetClipBox
SetWindowExtEx
CreatePolygonRgn
GetTextCharsetInfo
Polygon
InvertRgn
BitBlt
AddFontResourceA
GetPixelFormat
GetWinMetaFileBits
TextOutW
IntersectClipRect
ScaleWindowExtEx
SetMiterLimit
EnumFontsW
GetCharABCWidthsFloatW
SetBitmapBits
GetStockObject
GetWindowExtEx
SetTextJustification
CreateICW
StrokeAndFillPath
FrameRgn
GetPaletteEntries
PolyBezier
GetCharABCWidthsFloatA
GetBitmapBits
SetEnhMetaFileBits
CreateRoundRectRgn
SetStretchBltMode
SetColorAdjustment
FlattenPath
CreateRectRgn
GetDCOrgEx
GetTextFaceA
SetPolyFillMode
GetCharacterPlacementW
ExtTextOutW
SetMapMode
GetNearestColor
CloseEnhMetaFile
DeleteObject
StrokePath
SetICMProfileA
SelectClipPath
GetTextExtentExPointW
GetEnhMetaFileBits
GetBrushOrgEx
GetLayout
DeleteMetaFile
CreateDIBPatternBrushPt
EndDoc
ExtCreateRegion
CreateMetaFileW
GetTextExtentPoint32A
AnimatePalette
ExtTextOutA
ExtCreatePen
DeleteDC
SetMapperFlags
GetTextExtentPointA
GetTextExtentPoint32W
GetTextFaceW
PtInRegion
GetPolyFillMode
GetCharWidth32A
DescribePixelFormat
SetDCPenColor
GetDeviceCaps
EndPath
ModifyWorldTransform
GetMiterLimit
PolyPolyline
GetStretchBltMode
SaveDC
GetMetaFileA
ResizePalette
GetBoundsRect
TextOutA
CreateBitmap
SetViewportExtEx
GetEnhMetaFileW
SetBoundsRect
CreateHalftonePalette
PolylineTo
SetViewportOrgEx
AngleArc
GetTextMetricsA
StartPage
SelectPalette
CreateDIBitmap
Polyline
GetBkMode
GetOutlineTextMetricsA
GetROP2
CreateEllipticRgn
MaskBlt
GetCharABCWidthsA
CopyMetaFileW
PlayMetaFileRecord
GetCharWidthA
PolyPolygon
SetWinMetaFileBits
GetClipRgn
RectInRegion
GetMetaFileBitsEx
GetAspectRatioFilterEx
GetTextExtentPointW
UpdateColors
GetEnhMetaFileA
RemoveFontResourceA
CreateFontIndirectW
Arc
SetPixel
CreateICA
PlayEnhMetaFileRecord
GetCharWidthW
ChoosePixelFormat
ResetDCW
SetPixelFormat
SetMetaFileBitsEx
GetFontData
SetAbortProc
EnumFontsA
CreateDiscardableBitmap
EnumObjects
GetPixel
GdiComment
CreatePenIndirect
GetCharWidthFloatA
GetDIBColorTable
CreateDCA
CreatePalette
DPtoLP
ScaleViewportExtEx
CombineRgn
ResetDCA
CreateCompatibleDC
RectVisible
PtVisible
SetBrushOrgEx
GetObjectW
CreateMetaFileA
CloseFigure
PlgBlt
CreatePatternBrush
GetArcDirection
CreateCompatibleBitmap
CreateDIBSection
CreateEllipticRgnIndirect
GetNearestPaletteIndex
SelectClipRgn
LineDDA
EnumFontFamiliesA
CopyEnhMetaFileA
RoundRect
AbortDoc
GetTextCharset
OffsetViewportOrgEx
GetGraphicsMode
BeginPath
GetKerningPairsA
PathToRegion
UnrealizeObject
CreatePen
GetTextExtentExPointA
GetTextColor
OffsetRgn
SetTextColor
SwapBuffers
PaintRgn
SetPaletteEntries
GetCurrentPositionEx
GetBkColor
LineTo
CreateSolidBrush
SetROP2
FloodFill
SetRectRgn
SetDIBColorTable
EqualRgn
CreateBitmapIndirect
GetColorAdjustment
CreateFontA
Exports
Exports
Sections
.text Size: - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 411KB - Virtual size: 411KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 232B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ