D:\a\xenia-canary\xenia-canary\build\bin\Windows\Release\xenia_canary.pdb
Static task
static1
1 signatures
General
-
Target
xenia_canary.exe
-
Size
9.1MB
-
MD5
716c824e7154d729850f719ec383c8c1
-
SHA1
81ebf54e96f20d69dd0a0b6ef68c09eef83b3185
-
SHA256
54a014691316f7a6f78ace5214cb64bf9a3f54747c177617eadc996895bf6ac0
-
SHA512
b3e1da1b3c19b1c94421c041063f36de489cdd034ad444c6344f05180dc20d00a6d9b58ae9e30567ba6935777dc39ab1730a7a4c193e60ed077a9a972639a044
-
SSDEEP
98304:uxdouyFLLg33iFsmEJo4NwQIMy46WCfULgM:uxmBLL9Tyy4QagM
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource xenia_canary.exe
Files
-
xenia_canary.exe.exe windows:6 windows x64 arch:x64
2c84a33b8e9bfe704679a57adb3707fd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
K32GetModuleInformation
SetUnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
GetProcAddress
FormatMessageA
GetCurrentThread
GetLastError
GetModuleHandleA
GetCurrentProcess
WriteProcessMemory
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
GetLocaleInfoA
GetSystemPowerStatus
GetModuleHandleExW
CompareStringA
MulDiv
SetThreadExecutionState
GlobalMemoryStatusEx
VerifyVersionInfoW
GetOverlappedResult
CreateFileA
WakeConditionVariable
WaitForSingleObject
CancelIo
SetEnvironmentVariableA
GetEnvironmentVariableA
ReleaseSemaphore
GetTickCount
Process32Next
CreateToolhelp32Snapshot
Process32First
OutputDebugStringW
SetErrorMode
GetFileSizeEx
GetModuleFileNameW
WaitNamedPipeW
PeekNamedPipe
LoadLibraryA
VirtualAlloc
VirtualFree
RemoveVectoredContinueHandler
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
MapViewOfFileEx
MapViewOfFile
CreateFileMappingW
GetFileSize
GetSystemInfo
FlushViewOfFile
UnmapViewOfFile
SetFilePointer
InitializeCriticalSectionEx
TryEnterCriticalSection
InitializeConditionVariable
InitOnceComplete
InitOnceBeginInitialize
InitializeSRWLock
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
FormatMessageW
GetConsoleMode
GetModuleFileNameA
ExitProcess
TerminateProcess
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
GetStartupInfoW
UnhandledExceptionFilter
InitializeSListHead
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetFileInformationByHandleEx
DeviceIoControl
AreFileApisANSI
SetFileInformationByHandle
GetFullPathNameW
FindFirstFileExW
CreateDirectoryW
FlushInstructionCache
VirtualProtect
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
DeleteTimerQueueTimer
GlobalAddAtomW
GlobalDeleteAtom
CreateTimerQueueTimer
GetThreadContext
AllocConsole
AttachConsole
GetStdHandle
FreeLibrary
LocalFree
LoadLibraryW
GetCommandLineW
IsDebuggerPresent
TlsGetValue
SleepEx
CreateSemaphoreW
GetModuleHandleW
GetThreadId
QueueUserAPC
CreateThread
RaiseException
GetThreadPriority
TlsAlloc
WaitForSingleObjectEx
TerminateThread
CreateEventW
CancelWaitableTimer
ExitThread
ResumeThread
SuspendThread
ReleaseMutex
WaitForMultipleObjectsEx
CreateMutexW
SetThreadPriority
SignalObjectAndWait
GetProcessAffinityMask
CreateWaitableTimerW
SetProcessAffinityMask
TlsSetValue
SetWaitableTimer
SetThreadAffinityMask
QueryPerformanceCounter
GetCurrentProcessId
QueryPerformanceFrequency
Sleep
GetCurrentThreadId
FlushFileBuffers
SetFilePointerEx
CloseHandle
GetFileAttributesExW
CreateFileW
FindClose
SetEndOfFile
WriteFile
FindNextFileW
FindFirstFileW
ReadFile
OutputDebugStringA
WriteConsoleW
user32
SetForegroundWindow
GetWindowTextW
ChangeDisplaySettingsExW
EnumDisplayMonitors
PtInRect
EnumDisplaySettingsW
MapVirtualKeyW
GetKeyboardState
GetKeyboardLayout
EnumDisplayDevicesW
FlashWindowEx
SetWindowsHookExW
GetDoubleClickTime
IsIconic
GetClassInfoExW
KillTimer
ClipCursor
GetUpdateRect
IsRectEmpty
GetForegroundWindow
GetClipCursor
TrackMouseEvent
GetParent
GetRawInputData
MessageBoxA
PeekMessageW
SetTimer
UnregisterClassW
GetSystemMetrics
CallNextHookEx
GetPropW
GetMenu
GetWindowRect
CallWindowProcW
GetMessageExtraInfo
RegisterClassExA
UnregisterDeviceNotification
UnregisterClassA
CreateWindowExA
RegisterDeviceNotificationW
RegisterWindowMessageA
GetDesktopWindow
SystemParametersInfoW
DrawTextW
GetDlgItem
MessageBoxW
GetCursorPos
ReleaseDC
InvalidateRect
ReleaseCapture
ToUnicode
IntersectRect
AppendMenuW
GetMenuInfo
GetClientRect
SetWindowLongW
SetCursor
SetCapture
DrawMenuBar
LoadCursorW
LoadIconW
SetPropW
SetFocus
DestroyMenu
SetMenu
ValidateRect
SetMenuInfo
SetWindowPlacement
ClientToScreen
GetMonitorInfoW
DestroyIcon
GetCapture
ShowWindow
GetClassLongPtrW
GetWindowPlacement
WindowFromPoint
RegisterClassExW
GetWindowLongPtrW
CreatePopupMenu
SetWindowTextW
SendMessageW
ScreenToClient
CreateWindowExW
SetWindowLongPtrW
MonitorFromWindow
SetWindowPos
GetDC
DestroyWindow
GetFocus
CreateIconFromResourceEx
GetKeyState
AdjustWindowRectEx
DefWindowProcW
GetWindowLongW
PostQuitMessage
TranslateMessage
DispatchMessageW
PostMessageW
GetMessageW
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetAsyncKeyState
SystemParametersInfoA
DialogBoxIndirectParamW
EndDialog
GetClipboardSequenceNumber
IsClipboardFormatAvailable
GetWindowTextLengthW
SetLayeredWindowAttributes
UnhookWindowsHookEx
CreateIconFromResource
EnableMenuItem
GetRawInputDeviceList
RemovePropW
GetRawInputDeviceInfoA
PostThreadMessageW
RegisterRawInputDevices
SetCursorPos
CreateIconIndirect
CopyImage
RegisterClassW
SetWindowRgn
CreateMenu
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
CoTaskMemFree
PropVariantClear
ntdll
RtlCaptureContext
VerSetConditionMask
RtlCaptureStackBackTrace
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlInstallFunctionTableCallback
RtlDeleteFunctionTable
dwmapi
DwmSetWindowAttribute
shlwapi
ord219
dxgi
CreateDXGIFactory1
wsock32
WSAStartup
accept
getsockopt
htonl
ioctlsocket
select
__WSAFDIsSet
WSAGetLastError
bind
closesocket
ntohl
setsockopt
shutdown
listen
getsockname
send
socket
connect
inet_ntoa
recvfrom
recv
sendto
bcrypt
BCryptImportKeyPair
BCryptCloseAlgorithmProvider
BCryptDestroyKey
BCryptEncrypt
BCryptOpenAlgorithmProvider
BCryptGenRandom
imm32
ImmNotifyIME
ImmSetCandidateWindow
ImmSetCompositionStringW
ImmAssociateContext
ImmGetIMEFileNameA
ImmGetCompositionStringW
ImmGetCandidateListW
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
msvcp140
?id@?$numpunct@D@std@@2V0locale@2@A
?id@?$numpunct@_W@std@@2V0locale@2@A
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
_Mtx_trylock
_Thrd_hardware_concurrency
_Thrd_yield
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Cnd_init_in_situ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Winerror_map@std@@YAHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPEBD@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?id@?$collate@D@std@@2V0locale@2@A
?_Syserror_map@std@@YAPEBDH@Z
_Strcoll
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
_Query_perf_frequency
_Thrd_sleep
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?tolower@?$ctype@D@std@@QEBADD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
_Mbrtowc
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?_Throw_Cpp_error@std@@YAXH@Z
_Strxfrm
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Xbad_function_call@std@@YAXXZ
?_Throw_C_error@std@@YAXH@Z
_Mtx_lock
_Cnd_do_broadcast_at_thread_exit
_Mtx_unlock
_Mtx_destroy_in_situ
_Cnd_timedwait
_Mtx_current_owns
_Mtx_init_in_situ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Query_perf_counter
_Cnd_signal
?_Getctype@_Locinfo@std@@QEBA?AU_Ctypevec@@XZ
??0ctype_base@std@@QEAA@_K@Z
??1ctype_base@std@@UEAA@XZ
_Toupper
_Tolower
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
_Cnd_destroy_in_situ
_Cnd_broadcast
_Cnd_wait
_Xtime_get_ticks
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Thrd_join
_Thrd_id
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcmp
memmove
memcpy
__RTDynamicCast
__current_exception_context
__current_exception
__std_type_info_compare
strrchr
strstr
__RTtypeid
__std_type_info_name
_CxxThrowException
__C_specific_handler
strchr
__std_terminate
_purecall
memchr
__std_exception_copy
memset
__std_exception_destroy
api-ms-win-crt-stdio-l1-1-0
fgetpos
_set_fmode
setvbuf
__p__commode
fgets
fwrite
fgetc
fclose
fflush
fputc
__acrt_iob_func
_isatty
__stdio_common_vsnprintf_s
_fileno
__stdio_common_vsprintf
ungetc
fsetpos
fread
_fseeki64
_chsize_s
_wfopen
_ftelli64
ferror
fopen
_open_osfhandle
_get_stream_buffer_pointers
fopen_s
freopen_s
__stdio_common_vswprintf
fputs
__stdio_common_vsscanf
__stdio_common_vfprintf
ftell
fseek
__stdio_common_vsprintf_s
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
calloc
_set_new_mode
realloc
_aligned_free
free
_aligned_realloc
_aligned_malloc
api-ms-win-crt-math-l1-1-0
asin
atan
scalbn
trunc
cos
cosh
exp
fabs
log
sin
sinh
round
llrint
tanh
frexp
exp2f
hypot
_dclass
atan2
pow
sqrt
sinf
log2f
exp2
acos
_fdclass
_ldclass
acosf
asinf
atan2f
atanf
cosf
__setusermatherr
_ldsign
expf
fmod
_fdsign
fmodf
log10
ldexp
lroundf
truncf
log10f
_copysign
lround
logf
scalbnf
powf
_dsign
tan
sqrtf
log2
nanf
roundf
tanf
_fdopen
api-ms-win-crt-convert-l1-1-0
strtoul
strtod
atoi
strtoll
wcstombs
atof
strtoull
strtol
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
___lc_codepage_func
localeconv
api-ms-win-crt-runtime-l1-1-0
abort
exit
_get_wpgmptr
terminate
_beginthreadex
quick_exit
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
_exit
signal
_errno
_c_exit
_register_thread_local_exe_atexit_callback
strerror
api-ms-win-crt-string-l1-1-0
strcmp
tolower
iscntrl
toupper
isalnum
strncmp
strspn
_strrev
strcspn
strncpy
_strnicmp
_strdup
isxdigit
islower
isdigit
_stricmp
isalpha
isupper
isgraph
isprint
ispunct
_wcsnicmp
_wcsicmp
isspace
api-ms-win-crt-time-l1-1-0
_gmtime64
_mkgmtime64
_localtime64
_mktime64
clock
_time64
api-ms-win-crt-utility-l1-1-0
bsearch
qsort
gdi32
SelectObject
CreateBitmap
DeleteObject
CreateDIBSection
CombineRgn
CreateCompatibleDC
GetTextExtentPoint32A
GetTextMetricsW
CreateFontIndirectW
GetDeviceCaps
CreateDCW
DeleteDC
GetStockObject
CreateRectRgn
GetICMProfileW
BitBlt
DescribePixelFormat
ChoosePixelFormat
SwapBuffers
GetPixelFormat
SetPixelFormat
SetDeviceGammaRamp
GetDeviceGammaRamp
CreateCompatibleBitmap
GetDIBits
shell32
DragFinish
DragAcceptFiles
DragQueryFileW
CommandLineToArgvW
ShellExecuteW
SHGetKnownFolderPath
SHGetFolderPathW
ExtractIconExW
winmm
waveInPrepareHeader
waveOutGetNumDevs
waveInGetNumDevs
waveOutGetErrorTextW
waveOutWrite
waveOutGetDevCapsW
waveInClose
waveInUnprepareHeader
waveOutUnprepareHeader
waveOutClose
timeBeginPeriod
timeEndPeriod
waveInGetDevCapsW
waveOutReset
waveInOpen
waveOutOpen
waveOutPrepareHeader
waveInStart
waveInReset
waveInAddBuffer
setupapi
CM_Get_Parent
CM_Locate_DevNodeA
CM_Get_Device_IDA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
advapi32
RegQueryValueExW
RegCloseKey
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegOpenKeyExW
oleaut32
SysFreeString
api-ms-win-crt-environment-l1-1-0
getenv
Exports
Exports
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Sections
.text Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.cold Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 270KB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 175KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ