Soundpad[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Soundpad.exe
Size

11.6MB
MD5

c12a3125c44a34afe0735f285cc803f5
SHA1

9e08b967400e893bbce3d2e55b79502aa47b4e37
SHA256

e2f55d7874b2b7cadcf8b2b8cdf462d1be9ddcf7f46e3c8b9dbb680a3b1d0832
SHA512

e19918b14176ad1dc618e9eab997410b8831d6c3c05c02a82fdae7f6c63b1e61940eb0a7f0497b2792a032a5e16938e8e235848f46f2639f1625e7e5a0e806a9
SSDEEP

98304:3J3gyYYEBh/9rK0i8S9VgzAtrwZlHWexon+vIpGeaTcHHnoHQWs+m0fgC8zQ5tH0:3J3gDBh/9rs8SrAAtyHWmIpxowWTWTT

Score

1^/10

Malware Config

Signatures

Files

Soundpad.exe
.exe windows:6 windows x64 arch:x64

f2e8adcddba63ecbff2ee62207830c54

Code Sign

20:1b:a2:64:3f:56:60:f8:0d:99:9a:f9:81:90:cd:f1
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

11/10/2019, 00:00

Not After

10/10/2022, 23:59

Subject

CN=Arthur Lepp,O=Arthur Lepp,POSTALCODE=50825,STREET=Iltisstr. 142,L=Köln,ST=NRW,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

01/08/2030, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

62:a3:1b:eb:32:78:29:f9:30:0d:b6:78:a0:b7:99:e2:f5:2c:72:0e
Signer

Actual PE Digest

62:a3:1b:eb:32:78:29:f9:30:0d:b6:78:a0:b7:99:e2:f5:2c:72:0e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\dev\UniteFx\x64\Steam Release\Soundpad.pdb

Imports

usp10

ScriptBreak
ScriptItemize

dwmapi

DwmIsCompositionEnabled
DwmExtendFrameIntoClientArea

steam_api64

SteamAPI_GetHSteamUser
SteamAPI_Shutdown
SteamAPI_Init
SteamInternal_FindOrCreateUserInterface
SteamInternal_ContextInit

kernel32

GetDiskFreeSpaceExW
FindFirstFileW
CreateEventExW
FindNextFileW
CreateMutexW
FindClose
GetFileAttributesW
ReleaseMutex
OpenFileMappingW
GetSystemDirectoryW
FormatMessageW
GetFileAttributesExW
GetFileInformationByHandle
VerSetConditionMask
GetModuleHandleW
CreateFileMappingW
MapViewOfFile
OutputDebugStringW
LocalAlloc
HeapAlloc
LocalFree
GetProcessHeap
GetLocalTime
HeapSetInformation
MultiByteToWideChar
HeapFree
GetTickCount64
VerifyVersionInfoW
SetErrorMode
GetFileTime
GetLongPathNameW
GetTempFileNameW
SetCurrentDirectoryW
GetFileType
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
SetThreadPriority
GetExitCodeThread
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
QueryPerformanceCounter
QueryPerformanceFrequency
GetACP
GetLocaleInfoW
IsValidLocale
GetThreadLocale
SetThreadLocale
GetUserDefaultLCID
GetEnvironmentVariableW
IsDebuggerPresent
TerminateProcess
GetVersionExW
LoadResource
LockResource
SizeofResource
FindResourceW
IsValidCodePage
GetCPInfo
FreeLibrary
RtlCaptureContext
GetCurrentThread
GetCommandLineW
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
PeekNamedPipe
CreateThread
IsBadReadPtr
IsBadStringPtrA
MulDiv
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
HeapSize
GlobalSize
GetStdHandle
FreeConsole
AttachConsole
WriteConsoleA
WriteConsoleW
FillConsoleOutputCharacterW
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
ReadConsoleOutputCharacterA
SwitchToThread
GetStringTypeW
RtlPcToFileHeader
EncodePointer
InitializeCriticalSectionAndSpinCount
CompareStringW
LCMapStringW
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
GetThreadTimes
FreeLibraryAndExitThread
LoadLibraryExW
RtlUnwindEx
RtlUnwind
ExitThread
GetModuleHandleExW
GetDriveTypeW
GetFullPathNameW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetStdHandle
GetConsoleMode
ReadConsoleW
GetConsoleCP
SetFilePointerEx
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
EnumSystemLocalesW
GetCurrentDirectoryW
GetFileSizeEx
HeapReAlloc
SetEndOfFile
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
FindFirstFileExW
GetCommandLineA
GetVolumeInformationW
DisconnectNamedPipe
FlushFileBuffers
WriteFile
SetLastError
WideCharToMultiByte
CancelIo
ReadFile
ConnectNamedPipe
CreateNamedPipeW
CreateEventW
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentThreadId
CreateFileW
GetTempPathW
GetProcAddress
LoadLibraryW
CopyFileW
GetCurrentProcess
MoveFileExW
ReplaceFileW
DecodePointer
DeleteCriticalSection
RaiseException
Sleep
CreateDirectoryW
GetModuleFileNameW
UnmapViewOfFile
WaitForSingleObject
CloseHandle
GetExitCodeProcess
WaitForMultipleObjects
GetLastError
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteFileW
InitializeCriticalSectionEx
GetLogicalDriveStringsW
GetWindowsDirectoryW

user32

LoadCursorFromFileW
DestroyCursor
GetMenuState
CreateMenu
CreatePopupMenu
DestroyMenu
GetSubMenu
InsertMenuW
AppendMenuW
ModifyMenuW
RemoveMenu
SetMenuInfo
InsertMenuItemW
SetMenuItemInfoW
DrawEdge
CheckMenuItem
GetMenuItemID
GetSysColorBrush
SetRect
CheckMenuRadioItem
RegisterWindowMessageW
SetMenu
FindWindowExW
EndDialog
EnumChildWindows
ChildWindowFromPoint
GetComboBoxInfo
UnionRect
GetClassInfoW
IsRectEmpty
IsMenu
GetWindowTextLengthW
HideCaret
ShowCaret
GetDesktopWindow
RegisterClipboardFormatW
GetClipboardFormatNameW
GetProcessDefaultLayout
GetWindowTextW
MessageBeep
GetClassNameW
CreateAcceleratorTableW
DestroyAcceleratorTable
TranslateAcceleratorW
GetMessageW
ValidateRect
GetWindowDC
BeginPaint
EndPaint
ValidateRgn
NotifyWinEvent
ChangeDisplaySettingsExW
EnumDisplaySettingsW
MonitorFromPoint
EnumDisplayMonitors
IsClipboardFormatAvailable
DrawFrameControl
AdjustWindowRectEx
ShowCursor
UnregisterHotKey
RegisterHotKey
TranslateMessage
GetParent
SetWindowLongPtrW
GetWindowLongPtrW
FillRect
DrawFocusRect
GetSysColor
GetWindowRect
DrawTextW
GetSystemMetrics
DdeFreeStringHandle
DdeQueryStringW
DdeCreateStringHandleW
DdeGetLastError
DdeFreeDataHandle
DdeGetData
DdeCreateDataHandle
DdeClientTransaction
DdeNameService
DdePostAdvise
DdeDisconnect
DdeConnect
DdeUninitialize
DdeInitializeW
LoadCursorW
SetCursor
KillTimer
SetTimer
MsgWaitForMultipleObjects
DispatchMessageW
DestroyWindow
DefWindowProcW
PeekMessageW
BringWindowToTop
CreateWindowExW
RegisterClassW
PostMessageW
PostThreadMessageW
MessageBoxW
OffsetRect
CopyRect
SetRectEmpty
DrawStateW
LoadImageW
LoadIconW
LoadBitmapW
DestroyIcon
SetWindowRgn
EnableMenuItem
GetSystemMenu
DrawMenuBar
GetDialogBaseUnits
CreateDialogIndirectParamW
IsZoomed
IsIconic
FlashWindowEx
SetLayeredWindowAttributes
GetWindowPlacement
DrawIconEx
GetIconInfo
CreateIconIndirect
GetDlgItem
CreateDialogParamW
SystemParametersInfoW
GetScrollInfo
SetScrollInfo
IsDialogMessageW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
SetParent
PtInRect
InflateRect
ChildWindowFromPointEx
WindowFromPoint
MapWindowPoints
ScreenToClient
ClientToScreen
GetCursorPos
SetCursorPos
GetClientRect
SetWindowTextW
EnableScrollBar
ScrollWindow
RedrawWindow
InvalidateRect
GetUpdateRgn
ReleaseDC
GetDC
UpdateWindow
GetMenuItemInfoW
TrackPopupMenu
GetMenuItemCount
IsWindowEnabled
EnableWindow
ReleaseCapture
SetCapture
GetCapture
VkKeyScanW
GetAsyncKeyState
GetKeyState
GetActiveWindow
SetFocus
IsWindowVisible
GetMonitorInfoW
MonitorFromWindow
SetWindowLongW
keybd_event
SetForegroundWindow
ExitWindowsEx
GetDoubleClickTime
GetKeyNameTextW
MapVirtualKeyW
GetFocus
SetWindowPos
GetWindowLongW
UnregisterClassW
SendMessageW
SetClassLongPtrW
GetClassLongPtrW
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
MoveWindow
AnimateWindow
ShowWindow
IsWindow
CallWindowProcW
PostQuitMessage
GetMessageTime
wsprintfW
GetMessagePos

advapi32

CryptHashData
RegSetKeySecurity
CryptDestroyHash
CryptGetHashParam
CryptReleaseContext
GetSecurityDescriptorDacl
RegGetKeySecurity
SetSecurityDescriptorOwner
AllocateAndInitializeSid
SetEntriesInAclW
RegCreateKeyExW
RegDeleteTreeW
CryptAcquireContextW
CryptDestroyKey
RegCloseKey
GetTokenInformation
QueryServiceStatusEx
StartServiceW
EnumDependentServicesW
ControlService
GetUserNameW
RegDeleteKeyW
RegEnumKeyW
RegDeleteKeyExW
RegSetValueExW
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CloseEventLog
ReadEventLogW
OpenEventLogW
NotifyServiceStatusChangeW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
CryptCreateHash
RegQueryValueExW
RegEnumValueW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW

shell32

DragQueryFileW
CommandLineToArgvW
SHGetFolderPathW
SHBrowseForFolderW
DragFinish
DragAcceptFiles
ExtractIconW
SHGetStockIconInfo
SHCreateItemFromParsingName
SHCreateDirectoryExW
ord155
SHOpenFolderAndSelectItems
ord190
SHChangeNotify
ShellExecuteExW
Shell_NotifyIconW
SHGetFileInfoW
ord6
SHGetMalloc
ExtractIconExW
SHGetPathFromIDListW
DragQueryPoint

ole32

OleFlushClipboard
OleIsCurrentClipboard
StringFromGUID2
RevokeDragDrop
CoTaskMemAlloc
OleUninitialize
PropVariantClear
OleGetClipboard
OleSetClipboard
DoDragDrop
OleInitialize
CLSIDFromString
CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoUninitialize
CoSetProxyBlanket
RegisterDragDrop
CoLockObjectExternal
ReleaseStgMedium

wsock32

WSACleanup
WSAStartup

comctl32

ImageList_DragMove
ImageList_SetDragCursorImage
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_GetImageInfo
ImageList_GetIconSize
ImageList_Remove
ImageList_Replace
ImageList_Draw
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
ord17
ord16

rpcrt4

UuidToStringW
RpcStringFreeW

oleacc

CreateStdAccessibleObject

uxtheme

OpenThemeData
CloseThemeData
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
GetThemeColor
DrawThemeParentBackground
GetThemeMargins
GetThemePartSize
GetThemeInt
GetThemeSysColor
GetThemeSysFont
GetThemeBackgroundExtent
SetWindowTheme
GetCurrentThemeName
GetThemeFont
IsAppThemed
IsThemeActive
IsThemePartDefined
GetThemeBackgroundContentRect

shlwapi

ord12
ord219
SHAutoComplete
AssocQueryStringW

wininet

InternetConnectW
HttpSendRequestW
HttpOpenRequestW
InternetQueryDataAvailable
HttpQueryInfoW
InternetOpenW
InternetReadFile
InternetCloseHandle

mf

MFCreateTranscodeTopology
MFCreateTranscodeProfile
MFCreateMediaSession
MFGetService

mfplat

MFCreateSample
MFCreateMemoryBuffer
MFShutdown
MFCreateMFByteStreamOnStream
MFStartup
MFCreateSourceResolver
MFCreateMediaType
MFCreateAttributes

mfreadwrite

MFCreateSourceReaderFromURL
MFCreateSourceReaderFromByteStream

avrt

AvRevertMmThreadCharacteristics
AvSetMmThreadCharacteristicsW

msimg32

AlphaBlend
GradientFill

gdi32

CreateCompatibleBitmap
SetLayout
EnumFontFamiliesExW
EndPage
StartPage
EndDoc
StartDocW
CreateDCW
GetSystemPaletteEntries
PlayEnhMetaFile
GetEnhMetaFileHeader
GetEnhMetaFileW
DeleteEnhMetaFile
GetBkColor
GetClipBox
GetObjectType
GetStockObject
CreateCompatibleDC
DeleteDC
GetObjectW
ExtCreateRegion
GetRegionData
OffsetRgn
CreatePen
CreateSolidBrush
MaskBlt
Pie
ExtFloodFill
Rectangle
RoundRect
SelectClipRgn
ExtSelectClipRgn
SetBkColor
SetMapMode
SetGraphicsMode
GetPixel
CreateEnhMetaFileW
CloseEnhMetaFile
GetDIBColorTable
CreateDIBSection
GetDIBits
CreateDIBitmap
CreateICW
GetTextExtentExPointW
GetCharABCWidthsW
CreateRectRgnIndirect
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
RectInRegion
PtInRegion
GetRgnBox
EqualRgn
CombineRgn
MoveToEx
LineTo
GetTextExtentPoint32W
CreateBitmap
BitBlt
ExtCreatePen
CreatePatternBrush
CreateHatchBrush
SetWindowOrgEx
Arc
PolyPolygon
Ellipse
GetOutlineTextMetricsW
GetDeviceCaps
DeleteObject
CreateFontIndirectW
GdiFlush
SetBrushOrgEx
GetTextMetricsW
SelectPalette
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
PolyBezier
Polyline
Polygon
ExtTextOutW
ModifyWorldTransform
SetWorldTransform
GetWorldTransform
SetStretchBltMode
SetROP2
StretchDIBits
StretchBlt
SetPolyFillMode
SetPixel
GetLayout
SelectObject
RealizePalette
ExcludeClipRect
CreateRectRgn
SetTextColor
SetBkMode
SetAbortProc

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

comdlg32

GetSaveFileNameW
PrintDlgW
CommDlgExtendedError
ChooseColorW
PageSetupDlgW
GetOpenFileNameW
ChooseFontW

oleaut32

SafeArrayDestroy
SafeArrayCreate
SystemTimeToVariantTime
SafeArrayGetVartype
SafeArrayUnlock
SysStringLen
VarBstrFromCy
VariantInit
SysFreeString
SafeArrayLock
VariantClear
SysAllocString

Exports

Exports

??0ServiceControl@@QEAA@XZ
??0UniteFxControl@@QEAA@$$QEAV0@@Z
??0UniteFxControl@@QEAA@XZ
??1ServiceControl@@QEAA@XZ
??1UniteFxControl@@QEAA@XZ
??4UniteFxControl@@QEAAAEAV0@$$QEAV0@@Z
?GetFilterBlockVoice@UniteFxControl@@QEAAJAEA_N@Z
?PlaySoundData@UniteFxControl@@QEAAJAEAV?$vector@EV?$allocator@E@std@@@std@@AEBVAudioFormat@@@Z
?PlaySoundFile@UniteFxControl@@QEAAJPEB_WAEA_NAEAUUfxMediaControl@@@Z
?PlaySoundFileEx@UniteFxControl@@QEAAJPEAVAudioFile@@AEA_NAEAUUfxMediaControl@@@Z
?RestartService@ServiceControl@@QEAA?AUretCode@@AEAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SetFilterBlockVoice@UniteFxControl@@QEAAJAEA_N@Z
?Stop@UniteFxControl@@QEAAJXZ

Sections

.text
Size: 7.7MB - Virtual size: 7.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 147KB - Virtual size: 1021KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f2e8adcddba63ecbff2ee62207830c54

Code Sign

20:1b:a2:64:3f:56:60:f8:0d:99:9a:f9:81:90:cd:f1Certificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08Certificate

Extended Key Usages

Key Usages

62:a3:1b:eb:32:78:29:f9:30:0d:b6:78:a0:b7:99:e2:f5:2c:72:0eSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

usp10

dwmapi

steam_api64

kernel32

user32

advapi32

shell32

ole32

wsock32

comctl32

rpcrt4

oleacc

uxtheme

shlwapi

wininet

mf

mfplat

mfreadwrite

avrt

msimg32

gdi32

winspool.drv

comdlg32

oleaut32

Exports

Exports

Sections

.text Size: 7.7MB - Virtual size: 7.7MB

.rdata Size: 2.3MB - Virtual size: 2.3MB

.data Size: 147KB - Virtual size: 1021KB

.pdata Size: 222KB - Virtual size: 221KB

_RDATA Size: 512B - Virtual size: 148B

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.reloc Size: 128KB - Virtual size: 128KB

20:1b:a2:64:3f:56:60:f8:0d:99:9a:f9:81:90:cd:f1
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

62:a3:1b:eb:32:78:29:f9:30:0d:b6:78:a0:b7:99:e2:f5:2c:72:0e
Signer

.text
Size: 7.7MB - Virtual size: 7.7MB

.rdata
Size: 2.3MB - Virtual size: 2.3MB

.data
Size: 147KB - Virtual size: 1021KB

.pdata
Size: 222KB - Virtual size: 221KB

_RDATA
Size: 512B - Virtual size: 148B

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

.reloc
Size: 128KB - Virtual size: 128KB