e:\e盘 拷贝\游戏盒版本\youxun\trunk\bin\Win32\Debug\openlnk\openlnk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c8ea11f0e29bbb5b0baede01d3cb77b5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c8ea11f0e29bbb5b0baede01d3cb77b5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8ea11f0e29bbb5b0baede01d3cb77b5_JaffaCakes118
-
Size
4.1MB
-
MD5
c8ea11f0e29bbb5b0baede01d3cb77b5
-
SHA1
75fbaaf78aada8e49abd0c4a07723c7781be4169
-
SHA256
13c02967de7035ee2ed73406f750dcd66112051b8c911e8b922e95de3c4bad8a
-
SHA512
d408bd6a92d6684a5793032517c1f7835f56ffebb0c8a1f65f9cab1f6f65568a65da074ec981e05167efc02eddef483791b21d766698518c24f9e4a6c6262e50
-
SSDEEP
98304:D/pc8kPsDBsfaIU1YhR6m4JjvcOUeyBt5+atRC2H:Tpc8kPsDBsfaIU1YhR6m4JjvcOUeyBtb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8ea11f0e29bbb5b0baede01d3cb77b5_JaffaCakes118
Files
-
c8ea11f0e29bbb5b0baede01d3cb77b5_JaffaCakes118.exe windows:5 windows x86 arch:x86
5580fee2b0f19779a9420262b9fbaefd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wininet
GetUrlCacheEntryInfoW
InternetCrackUrlW
InternetCloseHandle
InternetReadFile
HttpQueryInfoW
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetConnectW
InternetOpenW
InternetQueryDataAvailable
GopherGetLocatorTypeW
InternetGetLastResponseInfoW
GopherFindFirstFileW
InternetFindNextFileW
FtpFindFirstFileW
HttpSendRequestExW
HttpEndRequestW
InternetErrorDlg
GopherOpenFileW
GopherGetAttributeW
GopherCreateLocatorW
FtpGetFileW
FtpPutFileW
FtpCommandW
FtpOpenFileW
FtpGetCurrentDirectoryW
FtpSetCurrentDirectoryW
FtpRemoveDirectoryW
FtpCreateDirectoryW
FtpRenameFileW
FtpDeleteFileW
DeleteUrlCacheEntryW
InternetWriteFile
InternetSetFilePointer
InternetGetCookieW
InternetSetCookieW
InternetSetStatusCallbackW
InternetSetOptionExW
InternetOpenUrlW
InternetQueryOptionW
InternetCanonicalizeUrlW
psapi
GetModuleBaseNameW
EnumProcesses
GetModuleFileNameExW
EnumProcessModules
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
kernel32
CreateFileA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
SetEnvironmentVariableA
CloseHandle
WriteFile
CreateFileW
DeleteFileW
MultiByteToWideChar
GetProcAddress
GetModuleHandleW
FindResourceW
SizeofResource
LockResource
GetUserDefaultLCID
LoadResource
VirtualFreeEx
ReadProcessMemory
WriteProcessMemory
VirtualAllocEx
OpenProcess
CreateDirectoryW
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetStartupInfoW
CreatePipe
FindClose
FindNextFileW
FindFirstFileW
EnumSystemLocalesA
IsValidLocale
GetDateFormatA
GetTimeFormatA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
HeapReAlloc
HeapSize
GetConsoleOutputCP
WriteConsoleA
GetTimeZoneInformation
LCMapStringW
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetCPInfo
GetOEMCP
InterlockedCompareExchange
OpenEventA
CreateFileMappingA
OpenFileMappingA
GetACP
SetConsoleCtrlHandler
FatalAppExitA
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
QueryPerformanceCounter
OutputDebugStringW
OutputDebugStringA
DebugBreak
VirtualQuery
GetSystemInfo
VirtualAlloc
GetModuleFileNameA
IsBadReadPtr
HeapValidate
FileTimeToLocalFileTime
FindNextFileA
FindFirstFileA
GetConsoleMode
GetConsoleCP
SetStdHandle
GetProcessHeap
HeapAlloc
HeapFree
SetCurrentDirectoryW
SetEnvironmentVariableW
GetSystemTimeAsFileTime
CreateThread
GetStdHandle
GetFileType
WriteConsoleW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
ExitProcess
RtlUnwind
GetTickCount
GetDiskFreeSpaceW
FindResourceExW
ReleaseMutex
CreateMutexW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetProfileIntW
VirtualProtect
GetModuleHandleA
GlobalFlags
FileTimeToSystemTime
InterlockedIncrement
lstrcmpiW
GetThreadLocale
GetStringTypeExW
GetFullPathNameW
GetVolumeInformationW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
DuplicateHandle
GetHandleInformation
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileAttributesExW
GetFileTime
GetFileSizeEx
PulseEvent
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
InterlockedDecrement
GetCurrentProcessId
CompareStringA
InterlockedExchange
GetCurrentThread
GetLocaleInfoW
ConvertDefaultLocale
EnumResourceLanguagesW
GetAtomNameW
lstrlenA
lstrcmpA
SuspendThread
GetThreadPriority
SetThreadPriority
CompareStringW
LoadLibraryA
lstrcmpW
WideCharToMultiByte
GlobalGetAtomNameW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExA
MulDiv
GlobalFree
CopyFileW
GlobalSize
LoadLibraryW
LocalAlloc
FreeLibrary
SetLastError
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
MoveFileW
SetVolumeLabelW
GetDriveTypeW
SetFileTime
GetCurrentDirectoryW
GetTempPathW
GetTempFileNameW
GetDiskFreeSpaceExW
FormatMessageW
LocalFree
ReleaseSemaphore
CreateSemaphoreW
TerminateProcess
GetCurrentProcess
Module32FirstW
Module32NextW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
ResetEvent
SetEvent
OpenEventW
CreateEventW
GetCurrentThreadId
ResumeThread
LeaveCriticalSection
TryEnterCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WaitForMultipleObjects
ExitThread
SetFileAttributesW
WritePrivateProfileStringW
lstrlenW
GetLastError
GetVersionExW
GetFileAttributesW
GetShortPathNameW
GetModuleFileNameW
GlobalAlloc
GlobalLock
GlobalUnlock
FreeResource
user32
GetDialogBaseUnits
CharUpperW
CheckMenuRadioItem
GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectW
LoadMenuW
ModifyMenuW
InsertMenuItemW
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
DeleteMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringW
GetTabbedTextExtentW
DrawTextExW
DrawTextW
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateW
DrawIcon
InvertRect
FrameRect
FillRect
ExcludeUpdateRgn
WindowFromDC
GetSysColorBrush
GetCursorPos
GetMessageW
TranslateMessage
PostQuitMessage
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
OpenIcon
CloseWindow
PostThreadMessageW
GetWindowContextHelpId
SetWindowContextHelpId
SendNotifyMessageW
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
GetLastActivePopup
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExW
DlgDirSelectExW
DlgDirListComboBoxW
DlgDirListW
SetCapture
KillTimer
SetTimer
DrawCaption
DrawAnimatedRects
EnableScrollBar
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
GetAsyncKeyState
InvalidateRgn
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
GetWindowDC
EndPaint
BeginPaint
BringWindowToTop
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
HiliteMenuItem
GetSystemMenu
DrawMenuBar
DragDetect
IsClipboardFormatAvailable
LoadBitmapW
SetMenuItemBitmaps
RegisterWindowMessageW
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
GetClientRect
MapWindowPoints
GetSysColor
PeekMessageW
DispatchMessageW
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetParent
GetCapture
WinHelpW
TrackPopupMenuEx
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthW
GetWindowTextW
GetKeyState
GetDlgCtrlID
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
PtInRect
DefWindowProcW
SetMenu
GetMenu
GetMessageTime
GetMessagePos
SetWindowLongW
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
TabbedTextOutW
PostMessageW
MapDialogRect
EndDialog
GetActiveWindow
SetActiveWindow
EnableWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
SetRectEmpty
ReleaseCapture
GetClipboardFormatNameA
GetClipboardFormatNameW
UnpackDDElParam
DestroyMenu
SystemParametersInfoW
LoadAcceleratorsW
DestroyIcon
TranslateAcceleratorW
ReuseDDElParam
GetMenuBarInfo
CharNextW
CopyAcceleratorTableW
MessageBeep
GetKeyNameTextW
MapVirtualKeyW
UnregisterClassW
MsgWaitForMultipleObjects
RegisterClipboardFormatW
ValidateRect
InSendMessage
GetDlgItem
IsWindowEnabled
RemoveMenu
IsMenu
GetMenuItemCount
GetSubMenu
GetMenuState
GetMenuStringW
AppendMenuW
InsertMenuW
GetMenuItemID
GetDesktopWindow
wsprintfW
SetCursor
GetSystemMetrics
GetDC
UpdateLayeredWindow
ReleaseDC
IsWindow
GetWindowThreadProcessId
SendMessageW
FindWindowW
FindWindowExW
GetWindow
ClientToScreen
OffsetRect
LoadCursorW
SetRect
WaitMessage
IsRectEmpty
InflateRect
UnionRect
SubtractRect
DispatchMessageA
GetMessageA
IsWindowUnicode
PeekMessageA
GetTabbedTextExtentA
GetMenuCheckMarkDimensions
GetClipboardOwner
gdi32
GetObjectType
CreatePen
CreatePenIndirect
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateBrushIndirect
CreatePatternBrush
CreateDIBPatternBrushPt
CreateFontIndirectW
CreateFontW
CreateBitmapIndirect
SetBitmapBits
GetBitmapBits
SetBitmapDimensionEx
GetBitmapDimensionEx
CreateCompatibleBitmap
CreateDiscardableBitmap
CreatePalette
CreateHalftonePalette
GetPaletteEntries
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
CreateRectRgn
CreateRectRgnIndirect
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
CombineRgn
EqualRgn
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
CreateICW
GetBrushOrgEx
SetBrushOrgEx
EnumObjects
GetNearestColor
RealizePalette
UpdateColors
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetMapMode
GetGraphicsMode
GetWorldTransform
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
FillRgn
FrameRgn
InvertRgn
PaintRgn
PtVisible
RectVisible
GetCurrentPositionEx
Arc
Polyline
Chord
Ellipse
Pie
Polygon
PolyPolygon
Rectangle
RoundRect
PatBlt
BitBlt
StretchBlt
GetPixel
SetPixel
FloodFill
ExtFloodFill
TextOutW
GetTextExtentPoint32W
GetTextAlign
SetBkColor
UnrealizeObject
GetTextCharacterExtra
GetCharWidthW
GetFontLanguageInfo
GetCharacterPlacementW
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCW
GetOutlineTextMetricsW
GetCharABCWidthsW
GetFontData
GetKerningPairsW
GetGlyphOutlineW
StartDocW
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
MaskBlt
PlgBlt
SetPixelV
AngleArc
GetArcDirection
PolyPolyline
GetColorAdjustment
GetCurrentObject
PolyBezier
DrawEscape
ExtEscape
GetCharABCWidthsFloatW
GetCharWidthFloatW
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetMiterLimit
GetPath
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
GdiComment
PlayEnhMetaFile
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
EnumMetaFile
PlayMetaFile
StretchDIBits
EnumFontFamiliesExW
DeleteMetaFile
GetTextMetricsW
CreateBitmap
SetTextColor
GetClipBox
GetDCOrgEx
DeleteDC
DeleteObject
GetObjectW
CreateDIBSection
CreateCompatibleDC
SelectObject
GetStockObject
CopyMetaFileW
CreateDCW
GetDeviceCaps
CreateMetaFileW
CloseMetaFile
CreateEnhMetaFileW
GetTextFaceW
ExtTextOutW
CloseEnhMetaFile
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
OpenPrinterW
GetJobW
ClosePrinter
advapi32
SetFileSecurityW
RegDeleteValueW
RegCreateKeyW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegSetValueW
OpenThreadToken
RevertToSelf
SetThreadToken
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
GetFileSecurityW
shell32
SHGetSpecialFolderLocation
ShellExecuteW
ShellExecuteExW
SHFileOperationW
DragAcceptFiles
SHGetFileInfoW
ExtractIconW
DragFinish
DragQueryFileW
SHGetPathFromIDListW
shlwapi
PathFileExistsW
UrlUnescapeW
PathFindExtensionW
PathRemoveExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathRemoveFileSpecW
oledlg
OleUIInsertObjectW
OleUIConvertW
OleUIChangeIconW
OleUIEditLinksW
OleUIUpdateLinksW
OleUIPasteSpecialW
OleUIBusyW
ole32
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleRegGetMiscStatus
OleRegEnumVerbs
DoDragDrop
OleSetMenuDescriptor
OleGetClipboard
OleQueryLinkFromData
OleQueryCreateFromData
OleIsRunning
CreateOleAdviseHolder
WriteClassStm
OleGetIconOfClass
GetHGlobalFromILockBytes
StgIsStorageILockBytes
OleSave
OleLoad
OleCreate
CreateDataAdviseHolder
CoRevokeClassObject
OleTranslateAccelerator
IsAccelerator
GetRunningObjectTable
CoLockObjectExternal
OleSetClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoMarshalInterface
CoUnmarshalInterface
GetClassFile
CreateFileMoniker
CreateGenericComposite
CreateItemMoniker
CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemFree
CreateStreamOnHGlobal
OleDuplicateData
CreateBindCtx
SetConvertStg
CoReleaseMarshalData
CoGetMalloc
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
CoTaskMemAlloc
ReleaseStgMedium
CLSIDFromProgID
CLSIDFromString
CoDisconnectObject
StringFromGUID2
CoInitializeEx
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleRun
CoRegisterClassObject
OleSaveToStream
OleCreateLinkToFile
OleCreateFromFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSetContainedObject
OleLockRunning
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
OleFlushClipboard
oleaut32
SysStringLen
SysAllocString
OleCreateFontIndirect
VarBstrFromDate
VarDateFromStr
VarDecFromStr
VarBstrFromDec
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayCopy
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VariantCopy
SafeArrayCreate
SafeArrayRedim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
SafeArrayGetElemsize
SafeArrayGetDim
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
DosDateTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate
VarDateFromUdate
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SafeArrayAllocData
SystemTimeToVariantTime
gdiplus
GdipDrawImageRectRectI
GdipCloneImage
GdipDisposeImage
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipCreateFont
GdipDrawImageRectRect
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipAlloc
GdipFree
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdiplusStartup
GdiplusShutdown
sensapi
IsNetworkAlive
ws2_32
setsockopt
inet_ntoa
inet_addr
WSACleanup
WSAStartup
socket
WSAGetLastError
gethostbyname
htons
connect
send
select
__WSAFDIsSet
recv
closesocket
Sections
.textbss Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 535KB - Virtual size: 534KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 1024B - Virtual size: 793B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 133KB - Virtual size: 133KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ