ae1db88834f0967100762dcdcc8ab97c_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

ae1db88834f0967100762dcdcc8ab97c_JaffaCakes118
Size

237KB
MD5

ae1db88834f0967100762dcdcc8ab97c
SHA1

1d0892d5050d78ae92300ca3c2603ba44ce124cb
SHA256

233ff20921d9768816931bb07f657e7eb324457a31b33058701ba8f33395f691
SHA512

a86426efc803e71856d8b53ab2218dbb41ca3bae8beabe71b125b706bac575a2414eba7717ac48256dcbd18960681d2f1ed88136398820cfb2b367cd72f820d1
SSDEEP

3072:C3PH3PitAMPoV9QXwq2Zhj6Fs55lZ9OLvO2F8TMnxmi/6ve9QrFvHHCrwqVEiu9J:C/qPohhjesLtOa4xD6vkQxc8Gx2

Score

1^/10

Malware Config

Signatures

Files

ae1db88834f0967100762dcdcc8ab97c_JaffaCakes118
.dll windows:5 windows x86 arch:x86

05fb397486d73b030cc97c76eb421fc9

Code Sign

57:5f:ab:29:ab:47:d5:ad:46:52:db:e3:88:88:89:3a
Certificate

Issuer

CN=LMxpxno5kPqZzSp

Not Before

28/03/2012, 09:42

Not After

31/12/2039, 23:59

Subject

CN=LMxpxno5kPqZzSp

Extended Key Usages

ExtKeyUsageCodeSigning

96:1b:22:3e:26:87:bc:49:e7:59:da:60:46:5f:35:a9:2a:4b:ac:9b
Signer

Actual PE Digest

96:1b:22:3e:26:87:bc:49:e7:59:da:60:46:5f:35:a9:2a:4b:ac:9b

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetWindowsDirectoryW
GlobalAddAtomW
GlobalDeleteAtom
GlobalFindAtomA
GlobalFix
GlobalFree
HeapAlloc
HeapDestroy
InterlockedExchangeAdd
IsBadHugeReadPtr
IsBadReadPtr
IsBadStringPtrA
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryExA
LocalFileTimeToFileTime
LocalUnlock
LockResource
MapUserPhysicalPagesScatter
MapViewOfFile
MoveFileWithProgressW
MultiByteToWideChar
OpenEventA
PrepareTape
ProcessIdToSessionId
QueryInformationJobObject
QueueUserAPC
ReadConsoleA
ReadConsoleInputA
ReadConsoleOutputA
ReadConsoleOutputW
ReadProcessMemory
RemoveDirectoryW
ReplaceFileW
ResetWriteWatch
RtlFillMemory
RtlMoveMemory
ScrollConsoleScreenBufferA
SetCalendarInfoA
SetCommTimeouts
SetComputerNameExA
SetConsoleCP
SetConsoleCtrlHandler
SetDefaultCommConfigW
SetEndOfFile
SetEvent
SetFileApisToANSI
SetFileApisToOEM
SetProcessAffinityMask
SetProcessShutdownParameters
SetStdHandle
SetTapePosition
SetThreadIdealProcessor
SetThreadPriority
SetVolumeMountPointA
SetWaitableTimer
SuspendThread
SwitchToFiber
SystemTimeToTzSpecificLocalTime
Thread32First
VerLanguageNameW
VerifyVersionInfoA
WaitForDebugEvent
WaitNamedPipeW
WriteConsoleInputW
WriteConsoleOutputW
WriteFileEx
WriteProcessMemory
WriteProfileStringW
_hwrite
_llseek
_lopen
lstrcmpA
lstrcpy
lstrcpyn
lstrcpynA
lstrcatA
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
VirtualAlloc
LoadLibraryW
GetSystemInfo
GetVolumePathNameA
AddAtomW
AllocConsole
BackupRead
BackupWrite
Beep
BuildCommDCBW
CancelDeviceWakeupRequest
CancelIo
CommConfigDialogA
CompareFileTime
CopyFileExW
CreateFileMappingA
CreateFileW
CreateHardLinkA
CreateSemaphoreA
CreateWaitableTimerW
DefineDosDeviceW
DeleteFileA
DeleteTimerQueue
DisableThreadLibraryCalls
DisconnectNamedPipe
DosDateTimeToFileTime
EnumCalendarInfoA
EnumDateFormatsW
EnumSystemCodePagesW
EnumSystemLanguageGroupsW
EnumSystemLocalesW
EnumTimeFormatsA
EraseTape
ExpandEnvironmentStringsW
FillConsoleOutputCharacterA
FillConsoleOutputCharacterW
FindAtomW
FindFirstFileExA
FindFirstVolumeA
FindFirstVolumeMountPointA
FindFirstVolumeMountPointW
FindNextFileA
FindNextVolumeMountPointW
FindResourceExA
FindResourceW
FindVolumeMountPointClose
FlushInstructionCache
FoldStringA
FormatMessageW
FreeConsole
FreeEnvironmentStringsW
GetAtomNameW
GetBinaryType
GetCalendarInfoA
GetCalendarInfoW
GetCommConfig
GetCompressedFileSizeW
GetComputerNameExW
GetComputerNameW
GetConsoleAliasExesA
GetConsoleAliasExesW
GetCurrentConsoleFont
GetCurrentDirectoryW
GetCurrentThread
GetDateFormatW
GetDiskFreeSpaceExW
CreateFileA
GetDiskFreeSpaceW
GetFileAttributesW
GetFileSizeEx
GetFileTime
GetLocalTime
GetLocaleInfoW
GetLogicalDriveStringsA
GetLongPathNameW
GetModuleHandleA
GetNamedPipeHandleStateA
GetPriorityClass
GetPrivateProfileSectionNamesW
GetPrivateProfileStringA
GetPrivateProfileStringW
GetPrivateProfileStructW
GetProfileStringA
GetShortPathNameA
GetStartupInfoW
GetSystemDefaultLCID
GetSystemPowerStatus
GetSystemTime
GetSystemWindowsDirectoryA
GetVolumeNameForVolumeMountPointW
GetVersionExA
GetTimeFormatA
GetThreadPriorityBoost
GetThreadPriority
GetThreadContext
GetTapePosition
AddAtomA
GetSystemWindowsDirectoryW

user32

EnableMenuItem
EndDeferWindowPos
EndDialog
EnumClipboardFormats
EnumDisplayDevicesW
EnumDisplayMonitors
EnumPropsExW
EnumPropsW
DrawTextExW
EnumWindows
GetActiveWindow
GetAltTabInfoW
GetCaretBlinkTime
GetClassInfoA
GetDialogBaseUnits
GetDlgCtrlID
GetDlgItem
DrawStateA
DrawIconEx
DrawCaption
DrawAnimatedRects
DragDetect
DlgDirSelectComboBoxExA
DlgDirListW
DlgDirListComboBoxW
DispatchMessageA
DialogBoxIndirectParamA
DestroyIcon
DestroyCaret
DestroyAcceleratorTable
DefFrameProcW
GetDlgItemInt
DefFrameProcA
DdeQueryStringW
DdePostAdvise
DdeNameService
DdeImpersonateClient
DdeFreeDataHandle
DdeEnableCallback
DdeDisconnect
DdeConnect
CreatePopupMenu
CreateDialogIndirectParamA
CopyRect
CopyImage
CopyIcon
CloseClipboard
ClipCursor
CharUpperW
CharUpperA
CharToOemW
CharPrevA
CharLowerA
ChangeDisplaySettingsA
CascadeChildWindows
CallWindowProcA
BroadcastSystemMessage
BringWindowToTop
BlockInput
AttachThreadInput
AppendMenuW
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
BeginPaint
GetClientRect
EndPaint
PostQuitMessage
GetDlgItemTextA
GetDoubleClickTime
GetForegroundWindow
GetGUIThreadInfo
GetGuiResources
GetInputDesktop
GetKeyNameTextA
GetKeyNameTextW
DefWindowProcA
GetKeyboardLayoutNameW
GetKeyboardType
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemInfoW
GetMessageA
GetMouseMovePointsEx
GetNextDlgGroupItem
GetNextDlgTabItem
GetOpenClipboardWindow
GetScrollRange
GetUpdateRect
GetUserObjectSecurity
GetWindowContextHelpId
GetWindowModuleFileNameW
GetWindowPlacement
GetWindowTextLengthW
GetWindowWord
HiliteMenuItem
IMPGetIMEA
InsertMenuW
InternalGetWindowText
wvsprintfA
mouse_event
WindowFromPoint
WINNLSGetEnableStatus
VkKeyScanExW
ValidateRect
UserHandleGrantAccess
UpdateLayeredWindow
UnregisterClassA
UnhookWinEvent
TranslateAcceleratorA
TrackMouseEvent
ToUnicode
TileChildWindows
SystemParametersInfoW
SystemParametersInfoA
SwitchDesktop
SwapMouseButton
ShowScrollBar
SetWindowTextW
SetWindowPlacement
SetUserObjectInformationA
SetTimer
SetThreadDesktop
SetSystemCursor
SetScrollRange
SetPropW
SetParent
SetMenuItemInfoA
SetMenuInfo
SetMenu
SetLayeredWindowAttributes
SetCursor
SetClipboardViewer
SendNotifyMessageW
SendMessageTimeoutW
SendMessageCallbackW
SendInput
RemovePropW
RegisterWindowMessageA
RegisterHotKey
RegisterDeviceNotificationW
RedrawWindow
PostThreadMessageW
PostThreadMessageA
PeekMessageW
PaintDesktop
OpenDesktopA
OemToCharW
OemKeyScan
MessageBeep
MapVirtualKeyW
MapVirtualKeyA
LookupIconIdFromDirectory
LockSetForegroundWindow
LoadCursorFromFileA
LoadBitmapW
LoadAcceleratorsA
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsMenu
IsHungAppWindow
IsDlgButtonChecked
IsDialogMessageW
IsCharUpperW
IsCharLowerW
EnumThreadWindows
IsCharAlphaNumericW

gdi32

DeleteEnhMetaFile
CloseEnhMetaFile
LineTo
MoveToEx
Rectangle
CreateEnhMetaFileA
GetStockObject
PlayEnhMetaFile

comdlg32

ReplaceTextW
ReplaceTextA
PrintDlgW
PrintDlgExW
PrintDlgExA
PrintDlgA
PageSetupDlgW
PageSetupDlgA
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
GetFileTitleW
GetFileTitleA
FindTextW
FindTextA
CommDlgExtendedError
ChooseFontW
ChooseFontA
ChooseColorW
ChooseColorA

ole32

WriteOleStg
WriteClassStm
WriteClassStg
WdtpInterfacePointer_UserMarshal
WdtpInterfacePointer_UserFree
UtGetDvtd16Info
StringFromIID
StringFromCLSID
StgOpenStorageOnILockBytes
StgOpenPropStg
StgCreateStorageEx
StgCreateDocfileOnILockBytes
StgConvertVariantToProperty
StgConvertPropertyToVariant
SetDocumentBitStg
STGMEDIUM_UserMarshal
SNB_UserUnmarshal
SNB_UserFree
RevokeDragDrop
ReadStringStream
ReadOleStg
PropVariantCopy
PropVariantClear
PropStgNameToFmtId
OpenOrCreateStream
OleUninitialize
OleTranslateAccelerator
OleSetMenuDescriptor
OleRun
OleRegGetMiscStatus
OleRegEnumFormatEtc
OleQueryLinkFromData
OleNoteObjectVisible
OleLoadFromStream
OleLoad
OleIsRunning
OleInitialize
OleGetIconOfClass
OleGetClipboard
OleGetAutoConvert
OleDoAutoConvert
OleDestroyMenuDescriptor
OleCreateStaticFromData
OleCreateMenuDescriptor
OleCreateLinkFromDataEx
OleCreateLinkFromData
OleCreateFromData
OleCreateDefaultHandler
OleCreate
OleConvertIStorageToOLESTREAMEx
OleConvertIStorageToOLESTREAM
OleBuildVersion
MonikerRelativePathTo
IsEqualGUID
HWND_UserSize
HPALETTE_UserUnmarshal
HPALETTE_UserMarshal
HPALETTE_UserFree
HMETAFILE_UserUnmarshal
HMETAFILE_UserSize
HMETAFILE_UserMarshal
HMENU_UserUnmarshal
HICON_UserFree
HGLOBAL_UserUnmarshal
HGLOBAL_UserMarshal
HDC_UserSize
HDC_UserFree
HBRUSH_UserUnmarshal
HBRUSH_UserFree
HBITMAP_UserUnmarshal
HBITMAP_UserMarshal
HBITMAP_UserFree
HACCEL_UserUnmarshal
HACCEL_UserSize
GetRunningObjectTable
GetHookInterface
GetHGlobalFromStream
GetConvertStg
GetClassFile
DllGetClassObjectWOW
DllDebugObjectRPCHook
CreatePointerMoniker
CreateObjrefMoniker
CreateItemMoniker
CreateDataCache
CreateClassMoniker
CreateBindCtx
CoTreatAsClass
CoTestCancel
CoTaskMemRealloc
CoSwitchCallContext
CoSuspendClassObjects
CoReleaseServerProcess
CoReleaseMarshalData
CoRegisterSurrogateEx
CoRegisterPSClsid
CoRegisterMessageFilter
CoRegisterMallocSpy
CoQueryReleaseObject
CoQueryProxyBlanket
CoMarshalHresult
CoLoadLibrary
CoIsHandlerConnected
CoInstall
CoInitializeWOW
CoInitializeEx
CoInitialize
CoGetStandardMarshal
CoGetPSClsid
CoGetObjectContext
CoGetObject
CoGetMalloc
CoGetInterfaceAndReleaseStream
CoGetInstanceFromIStorage
CoGetCurrentProcess
CoGetCallerTID
CoGetCallContext
CoGetApartmentID
CoFreeUnusedLibraries
CoFreeAllLibraries
CoFileTimeToDosDateTime
CoFileTimeNow
CoEnableCallCancellation
CoDosDateTimeToFileTime
CoDisconnectObject
CoDeactivateObject
CoCreateInstanceEx
CoCreateGuid
CoCopyProxy
CoCancelCall
CoAddRefServerProcess
CLSIDFromProgID
CLIPFORMAT_UserSize
CLIPFORMAT_UserMarshal
CLIPFORMAT_UserFree
UtConvertDvtd32toDvtd16
CoRegisterChannelHook

oleaut32

VarI1FromI4
VarI1FromCy
VarI1FromBool
VarFormatPercent
VarFormatCurrency
VarFormat
VarFix
VarDiv
VarDecInt
VarDecFromUI1
VarDecFromR4
VarDecFromI1
VarDecFromDisp
VarDecFromCy
VarDecFromBool
VarDecFix
VarDecCmpR8
VarDateFromUdate
VarDateFromUI4
VarDateFromUI2
VarDateFromUI1
VarDateFromStr
VarDateFromR8
VarDateFromR4
VarDateFromI1
VarDateFromDec
VarDateFromCy
VarCyRound
VarCyMulI4
VarCyMul
VarCyInt
VarCyFromUI2
VarCyFromR4
VarCyFromI4
VarCyFromI2
VarCyFromDate
VarCyFromBool
VarCyFix
VarCyAdd
VarCyAbs
VarCat
VarBstrFromUI2
VarBstrFromUI1
VarBstrFromI2
VarBstrFromDate
VarBstrCat
VarBoolFromUI4
VarBoolFromUI2
VarBoolFromI4
VarBoolFromDate
VARIANT_UserMarshal
VARIANT_UserFree
SysReAllocStringLen
SysFreeString
SafeArraySetIID
SafeArrayPutElement
SafeArrayGetRecordInfo
SafeArrayGetElemsize
SafeArrayCreateVectorEx
SafeArrayCreateVector
SafeArrayCreateEx
SafeArrayCopyData
SafeArrayAllocDescriptor
SafeArrayAccessData
RegisterTypeLi
RegisterActiveObject
OleTranslateColor
OleLoadPicturePath
OleLoadPictureFileEx
OleLoadPictureFile
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_Unmarshal
GetErrorInfo
GetAltMonthNames
GetActiveObject
DispInvoke
CreateDispTypeInfo
ClearCustData
BstrFromVector
BSTR_UserUnmarshal
BSTR_UserSize
BSTR_UserMarshal
BSTR_UserFree
VarI1FromR4
VarI1FromStr
VarI1FromUI1
VarI1FromUI2
VarI2FromDate
VarI2FromDec
VarI2FromI1
VarI2FromR8
VarI2FromUI1
VarI4FromBool
VarI4FromDec
VarI4FromR8
VarI4FromUI1
VarI4FromUI2
VarI4FromUI4
VarInt
VarMod
VarNeg
VarNot
VarNumFromParseNum
VarR4FromI1
VarR4FromR8
VarR4FromStr
VarR4FromUI4
VarR8FromDate
VarR8FromDisp
VarR8FromI1
VarR8FromR4
VarR8FromUI2
VarR8FromUI4
VarR8Pow
VarSu
VarTokenizeFormatString
VarUI1FromBool
VarUI1FromCy
VarUI1FromDate
VarUI1FromDec
VarUI1FromDisp
VarUI1FromI1
VarUI1FromI4
VarUI1FromR8
VarUI1FromStr
VarUI1FromUI2
VarUI1FromUI4
VarUI2FromBool
VarUI2FromI1
VarUI2FromI2
VarUI2FromI4
VarUI2FromR4
VarUI2FromStr
VarUI4FromCy
VarUI4FromDisp
VarUI4FromI1
VarUI4FromI4
VarUI4FromR4
VarUI4FromStr
VarUI4FromUI1
VarUI4FromUI2
VarUdateFromDate
VarWeekdayName
VariantChangeTypeEx
VariantClear
VariantCopy
VariantInit
VariantTimeToDosDateTime
VectorFromBstr
VarI1FromDec

comctl32

_TrackMouseEvent
UninitializeFlatSB
ord3
PropertySheetW
PropertySheetA
PropertySheet
ord2
ord13
ord14
InitializeFlatSB
InitMUILanguage
InitCommonControlsEx
ImageList_Write
ImageList_SetOverlayImage
ImageList_SetImageCount
ImageList_SetIconSize
ImageList_SetFilter
ImageList_SetDragCursorImage
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Replace
ImageList_Remove
ImageList_Read
ImageList_Merge
ImageList_LoadImageW
ImageList_LoadImageA
ImageList_GetImageRect
ImageList_GetImageInfo
ImageList_GetIconSize
ImageList_GetIcon
ImageList_GetDragImage
ImageList_GetBkColor
ImageList_EndDrag
ImageList_Duplicate
ImageList_DrawIndirect
ImageList_DrawEx
ImageList_Draw
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_Create
ImageList_Copy
ImageList_BeginDrag
ImageList_AddMasked
ImageList_AddIcon
GetMUILanguage
ord4
FlatSB_ShowScrollBar
FlatSB_SetScrollRange
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollProp
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
FlatSB_EnableScrollBar
DrawStatusTextW
ord5
ord15
DestroyPropertySheetPage
ord16
CreateToolbarEx
ord7
CreateStatusWindowW
ord6
CreateStatusWindow
CreatePropertySheetPageW
CreatePropertySheetPageA
CreatePropertySheetPage

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g9
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g8
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g7
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g6
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g5
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g4
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g2
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

05fb397486d73b030cc97c76eb421fc9

Code Sign

57:5f:ab:29:ab:47:d5:ad:46:52:db:e3:88:88:89:3aCertificate

Extended Key Usages

96:1b:22:3e:26:87:bc:49:e7:59:da:60:46:5f:35:a9:2a:4b:ac:9bSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

ole32

oleaut32

comctl32

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 512B - Virtual size: 200B

.g9 Size: 1024B - Virtual size: 1000B

.g8 Size: 1024B - Virtual size: 1000B

.g7 Size: 1024B - Virtual size: 1000B

.g6 Size: 1024B - Virtual size: 1000B

.g5 Size: 1024B - Virtual size: 1000B

.g4 Size: 1024B - Virtual size: 1000B

.g3 Size: 1024B - Virtual size: 1000B

.g2 Size: 199KB - Virtual size: 198KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 5KB - Virtual size: 4KB

57:5f:ab:29:ab:47:d5:ad:46:52:db:e3:88:88:89:3a
Certificate

96:1b:22:3e:26:87:bc:49:e7:59:da:60:46:5f:35:a9:2a:4b:ac:9b
Signer

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 512B - Virtual size: 200B

.g9
Size: 1024B - Virtual size: 1000B

.g8
Size: 1024B - Virtual size: 1000B

.g7
Size: 1024B - Virtual size: 1000B

.g6
Size: 1024B - Virtual size: 1000B

.g5
Size: 1024B - Virtual size: 1000B

.g4
Size: 1024B - Virtual size: 1000B

.g3
Size: 1024B - Virtual size: 1000B

.g2
Size: 199KB - Virtual size: 198KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 5KB - Virtual size: 4KB