I:\build\trunk_en_9.0\simulator\bin\dnmultiplayerex.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0551dc44484610cf4eed26b7758d2ddd22b1c7f59aaed767fb2ec91460f0e4eb.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0551dc44484610cf4eed26b7758d2ddd22b1c7f59aaed767fb2ec91460f0e4eb.exe
Resource
win10v2004-20240802-en
General
-
Target
0551dc44484610cf4eed26b7758d2ddd22b1c7f59aaed767fb2ec91460f0e4eb
-
Size
2.2MB
-
MD5
eee0265716f88739cb612e1191065d0a
-
SHA1
590c1627d0e783fb42bae75c6e4688ebec6b7506
-
SHA256
0551dc44484610cf4eed26b7758d2ddd22b1c7f59aaed767fb2ec91460f0e4eb
-
SHA512
befb772449b3d18b46f279ce60ea14772975c5facbb308f55cbd703c61c4b4d0ebeb66084e7513e647506974a0832e5687bc3607ac12a42c8eb9d9d271342fa8
-
SSDEEP
24576:qwzQBCDYaWaZ6CkYqcVXzzlm4HRIW63okxMX0DRk70DRkFeZU:7D3WY6CkYqcVXgWIW5eZU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0551dc44484610cf4eed26b7758d2ddd22b1c7f59aaed767fb2ec91460f0e4eb
Files
-
0551dc44484610cf4eed26b7758d2ddd22b1c7f59aaed767fb2ec91460f0e4eb.exe windows:6 windows x86 arch:x86
25839e9066a3dd518688d83022c2beb3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
cximagecrt
?Draw@CxImage@@QAEHPAUHDC__@@ABUtagRECT@@PAU3@_N3@Z
?AlphaCopy@CxImage@@QAE_NAAV1@@Z
?Resample2@CxImage@@QAE_NHHW4InterpolationMethod@1@W4OverflowMethod@1@QAV1@_N@Z
?Crop@CxImage@@QAE_NABUtagRECT@@PAV1@@Z
?GetHeight@CxImage@@QBEIXZ
?GetWidth@CxImage@@QBEIXZ
??0CxImage@@QAE@I@Z
libcurl
curl_easy_cleanup
curl_global_init
curl_global_cleanup
curl_easy_init
curl_easy_setopt
curl_easy_strerror
curl_easy_perform
curl_slist_append
kernel32
SetFilePointer
TerminateProcess
GetFileSize
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
CopyFileW
RemoveDirectoryW
TerminateThread
ExitProcess
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceW
MulDiv
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
DeleteFileW
GlobalAlloc
GlobalFree
GetVersionExW
WriteFile
GetTickCount
GetLastError
CreateFileW
CloseHandle
GetPrivateProfileStringW
MultiByteToWideChar
GetLocalTime
GetUserDefaultUILanguage
GetProcAddress
LoadLibraryW
GetModuleFileNameW
FreeLibrary
WideCharToMultiByte
Sleep
GetFileTime
WritePrivateProfileStringW
OpenMutexW
GetSystemInfo
GetModuleHandleW
GlobalMemoryStatusEx
GetSystemDirectoryW
CreatePipe
GetStartupInfoW
CreateProcessW
ReadFile
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventW
WaitForSingleObject
GetCurrentProcessId
GetExitCodeProcess
OpenProcess
K32EnumProcessModules
K32GetModuleFileNameExW
GetWindowsDirectoryW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetCurrentThreadId
CreateSemaphoreW
ReleaseSemaphore
CreateThread
CreateMutexW
SetEvent
FindFirstFileW
FindNextFileW
FindClose
GetSystemTimeAsFileTime
GlobalLock
GlobalUnlock
user32
SetWindowLongW
CreateWindowExW
DefWindowProcW
EnumWindows
GetClassNameW
FindWindowExW
GetWindowThreadProcessId
DestroyWindow
GetWindowLongW
RegisterClassW
IsWindow
GetSystemMetrics
GetMonitorInfoW
MonitorFromWindow
DispatchMessageW
MoveWindow
EnableWindow
GetWindowRect
SetTimer
KillTimer
EnumDisplaySettingsW
TranslateMessage
GetMessageW
PostQuitMessage
GetDesktopWindow
EnumDisplayMonitors
ClientToScreen
MapVirtualKeyW
GetKeyState
wsprintfW
IsZoomed
IsIconic
SendMessageW
PostMessageW
SetParent
IsWindowVisible
ShowWindow
SetWindowTextW
SystemParametersInfoW
GetDC
BringWindowToTop
SetForegroundWindow
SetWindowPos
LoadCursorW
GetCursorInfo
GetClientRect
ScreenToClient
GetParent
wvsprintfW
GetGUIThreadInfo
InvalidateRgn
CreateAcceleratorTableW
GetSysColor
SetCaretPos
ShowCaret
HideCaret
CreateCaret
SetRect
FillRect
DrawTextW
CharPrevW
GetCaretPos
GetCaretBlinkTime
GetWindowTextLengthW
GetWindowTextW
LoadImageW
AdjustWindowRectEx
GetMenu
GetClassInfoExW
RegisterClassExW
CallWindowProcW
GetWindow
IsRectEmpty
IntersectRect
MapWindowPoints
InvalidateRect
GetUpdateRect
EndPaint
BeginPaint
ReleaseCapture
SetCapture
GetFocus
GetActiveWindow
SetFocus
CharNextW
OffsetRect
UnionRect
SetCursor
SetPropW
MessageBoxW
SetWindowRgn
PtInRect
ReleaseDC
GetPropW
GetCursorPos
gdi32
GdiFlush
ExtTextOutW
TextOutW
MoveToEx
CreateDIBSection
SetStretchBltMode
StretchBlt
SetBkColor
ExtSelectClipRgn
SelectClipRgn
RoundRect
LineTo
GetTextExtentPoint32W
GetClipBox
GetCharABCWidthsW
CreateRectRgnIndirect
CreatePenIndirect
CombineRgn
SetTextColor
SetBkMode
CreateSolidBrush
CreatePatternBrush
GetObjectA
SetWindowOrgEx
GetTextMetricsW
SaveDC
RestoreDC
Rectangle
CreatePen
CreateFontIndirectW
CreateRoundRectRgn
DeleteObject
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
GetObjectW
DeleteDC
RemoveFontResourceW
AddFontResourceExW
GetDeviceCaps
SelectObject
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
DuplicateTokenEx
OpenProcessToken
RegOpenKeyW
RegCloseKey
shell32
ShellExecuteW
ShellExecuteExW
ord165
SHGetFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ole32
CreateStreamOnHGlobal
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoCreateInstance
CoUninitialize
OleUninitialize
CoInitializeSecurity
OleInitialize
CoInitialize
oleaut32
VariantClear
VariantInit
SysFreeString
SysAllocString
msvcp120
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_BADOFF@std@@3_JB
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Statvfs@sys@tr2@std@@YA?AUspace_info@123@PB_W@Z
_Mtx_lock
_Mtx_unlock
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_Future_error_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
_Cnd_wait
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
_Cnd_register_at_thread_exit
_Cnd_broadcast
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Unlink@sys@tr2@std@@YAHPB_W@Z
?_Winerror_map@std@@YAPBDH@Z
?_Stat@sys@tr2@std@@YA?AW4file_type@123@PB_WAAH@Z
??0_Lockit@std@@QAE@H@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?width@ios_base@std@@QAE_J_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Make_dir@sys@tr2@std@@YAHPB_W@Z
?_Copy_file@sys@tr2@std@@YAHPB_W0_N@Z
?_Open_dir@sys@tr2@std@@YAPAXAAY0BAE@_WPB_WAAHAAW4file_type@123@@Z
?_Close_dir@sys@tr2@std@@YAXPAX@Z
?_Remove_dir@sys@tr2@std@@YA_NPB_W@Z
?_Read_dir@sys@tr2@std@@YAPA_WAAY0BAE@_WPAXAAW4file_type@123@@Z
_Xtime_get_ticks
?_2@placeholders@std@@3V?$_Ph@$01@2@A
?_1@placeholders@std@@3V?$_Ph@$00@2@A
_Call_onceEx
_Do_call
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
_Thrd_join
_Cnd_timedwait
_Mtx_current_owns
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_current
_Thrd_equal
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??Bios_base@std@@QBE_NXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Launch@_Pad@std@@QAEXPAU_Thrd_imp_t@@@Z
??1_Pad@std@@QAE@XZ
?_Release@_Pad@std@@QAEXXZ
??0_Pad@std@@QAE@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
_Cnd_unregister_at_thread_exit
_Cnd_destroy
_Cnd_init
?_Throw_C_error@std@@YAXH@Z
_Mtx_init
_Mtx_destroy
?_Xinvalid_argument@std@@YAXPBD@Z
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
_Wcscoll
?id@?$collate@_W@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0facet@locale@std@@IAE@I@Z
??_7facet@locale@std@@6B@
??1facet@locale@std@@MAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
??1_Lockit@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Incref@facet@locale@std@@UAEXXZ
_Wcsxfrm
?is@?$ctype@_W@std@@QBE_NF_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
??_7_Facet_base@std@@6B@
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
gdiplus
GdipCreateBitmapFromScan0
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetCompositingQuality
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipGraphicsClear
GdipDrawImage
GdipDrawImageRectI
GdipDeleteFontFamily
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushI
GdipCloneImage
GdipDisposeImage
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipLoadImageFromStream
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDrawString
GdipGetFamily
GdipDeleteFont
msvcr120
realloc
malloc
swscanf_s
strchr
??0exception@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
_snwprintf_s
_snprintf_s
_setjmp3
?terminate@@YAXXZ
sprintf_s
_wtoi
_time64
_errno
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
??_V@YAXPAX@Z
rand
?wait@event@Concurrency@@QAEII@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?_GetCurrentInlineDepth@_StackGuard@details@Concurrency@@CAAAIXZ
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?_Oversubscribe@_Context@details@Concurrency@@SAX_N@Z
?set@event@Concurrency@@QAEXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
??0exception@std@@QAE@ABQBDH@Z
??1scoped_lock@critical_section@Concurrency@@QAE@XZ
??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z
?Free@Concurrency@@YAXPAX@Z
?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_NewCollection@_AsyncTaskCollection@details@Concurrency@@SAPAV123@PAV_CancellationTokenState@23@@Z
?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPAX@Z0@Z
?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ
??1event@Concurrency@@QAE@XZ
??1critical_section@Concurrency@@QAE@XZ
??0event@Concurrency@@QAE@XZ
??0critical_section@Concurrency@@QAE@XZ
?Alloc@Concurrency@@YAPAXI@Z
_wcsicmp
longjmp
_snwprintf
fclose
fwrite
fputc
fflush
setvbuf
fgetpos
_fseeki64
fsetpos
memcpy_s
ungetc
fgetc
_unlock_file
_lock_file
atoi
srand
vswprintf_s
??0exception@std@@QAE@ABQBD@Z
sscanf_s
??8type_info@@QBE_NABV0@@Z
wcsrchr
_vswprintf
_wcslwr
wcscpy_s
isalnum
sprintf
wcschr
tolower
memchr
_wcsnicmp
toupper
_vswprintf_c_l
isdigit
vsprintf_s
_beginthreadex
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
wcsncpy
wcsstr
_vsnwprintf
_itow
wcstod
_wtof
iswalnum
wcsncmp
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__wgetmainargs
__set_app_type
exit
_exit
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_wcmdln
_fmode
_commode
_except1
_except_handler4_common
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
wcstol
iswdigit
swprintf_s
free
wcstoul
mbstowcs_s
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
iphlpapi
GetAdaptersInfo
version
GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoSizeW
shlwapi
PathFileExistsW
wininet
InternetCrackUrlW
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetReadFile
HttpQueryInfoW
InternetCloseHandle
msi
ord173
ord217
comctl32
_TrackMouseEvent
ord17
imm32
ImmGetVirtualKey
ImmGetContext
ImmReleaseContext
ImmSetCompositionFontW
ImmSetCompositionWindow
Sections
.text Size: 1019KB - Virtual size: 1019KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 247KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 632KB - Virtual size: 636KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE