E:\全新神州11-10\真9源码\Mx_Code\[Client]MHAutoPatch\Debug Connect\MHAutoPatch.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d08ede53c495448b3ff2a048d000c315aebee74322edfc45fa2a838dd2f00a89N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d08ede53c495448b3ff2a048d000c315aebee74322edfc45fa2a838dd2f00a89N.exe
Resource
win10v2004-20240802-en
General
-
Target
d08ede53c495448b3ff2a048d000c315aebee74322edfc45fa2a838dd2f00a89N
-
Size
7.9MB
-
MD5
c4be74fea3978a1c6dc269579b198050
-
SHA1
9c2b85752012e65772f8c3cdbff2ca4eb3751dc1
-
SHA256
d08ede53c495448b3ff2a048d000c315aebee74322edfc45fa2a838dd2f00a89
-
SHA512
d3ed6d44831b86d929c962f2311095db6a1e57e1a08923205999dab883adeeccb2a549b8ec4dd80ff313edca96e3d0e55de2083f76b4f1f15454a8573c0cfd9a
-
SSDEEP
49152:HQYSY+qN/G2xXn83ihMf2lp4s9+GtrVtCRH/+rCnw/TihssYtt22cq4kWq97UtQ7:HTN/DXxsslsXlJ47jEJgFN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d08ede53c495448b3ff2a048d000c315aebee74322edfc45fa2a838dd2f00a89N
Files
-
d08ede53c495448b3ff2a048d000c315aebee74322edfc45fa2a838dd2f00a89N.exe windows:6 windows x86 arch:x86
a8e28b6b2bccb1312838daa943a0153f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SetEnvironmentVariableA
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
GetDriveTypeW
GetTimeZoneInformation
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
FindNextFileW
FindFirstFileExW
HeapQueryInformation
IsValidCodePage
WaitForSingleObjectEx
SetConsoleCtrlHandler
CreateSemaphoreW
CreateEventW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetConsoleCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetStartupInfoW
FatalAppExitA
WriteConsoleW
OutputDebugStringW
GetStdHandle
GetFileType
SetStdHandle
VirtualQuery
VirtualAlloc
AreFileApisANSI
ExitProcess
ExitThread
CreateThread
GetCommandLineA
GetSystemTimeAsFileTime
SystemTimeToTzSpecificLocalTime
RtlUnwind
GetSystemInfo
HeapValidate
GetModuleHandleExW
IsProcessorFeaturePresent
IsDebuggerPresent
LocalUnlock
LocalLock
SearchPathA
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
lstrcpyA
GetUserDefaultLCID
ReplaceFileA
GetTempFileNameA
GetDiskFreeSpaceA
GetWindowsDirectoryA
GetTickCount
FindResourceExW
CreateSemaphoreA
WaitForMultipleObjects
CreateMutexA
ReleaseMutex
ReleaseSemaphore
FindNextFileA
SetFileTime
SetFileAttributesA
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
SystemTimeToFileTime
GetACP
VirtualProtect
GetProfileIntA
GetCPInfo
GetOEMCP
SetErrorMode
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
PulseEvent
ResetEvent
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsGetValue
TlsAlloc
InitializeCriticalSection
GetAtomNameA
FileTimeToSystemTime
LocalAlloc
FileTimeToLocalFileTime
GetStringTypeExA
GetVolumeInformationA
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryExA
GetHandleInformation
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
CreateFileA
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalSize
GetCurrentProcessId
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
GlobalAlloc
GetModuleFileNameA
GetVersionExA
GetCurrentThread
CreateEventA
SetEvent
GlobalFree
GlobalUnlock
GlobalLock
ResumeThread
SuspendThread
GetThreadPriority
SetThreadPriority
GetThreadLocale
WideCharToMultiByte
FindResourceW
SizeofResource
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
LoadLibraryW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LockResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
SetLastError
EncodePointer
OutputDebugStringA
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
RaiseException
DecodePointer
IsDBCSLeadByte
MultiByteToWideChar
CreateProcessA
TerminateProcess
GetCurrentProcess
Sleep
WaitForSingleObject
CloseHandle
GetCurrentDirectoryA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteFileA
LeaveCriticalSection
EnterCriticalSection
GetLastError
TlsSetValue
user32
DrawStateA
GrayStringA
DrawTextExA
DrawTextA
DrawIcon
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuItemInfoA
GetMenuItemInfoA
InsertMenuItemA
DeleteMenu
ModifyMenuA
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
LoadMenuIndirectA
LoadMenuW
LoadMenuA
DrawFrameControl
DrawEdge
CharUpperA
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringA
IsMenu
GetWindowThreadProcessId
SetCursor
PostQuitMessage
GetCursorPos
TranslateMessage
GetMessageA
EndDialog
CreateDialogIndirectParamA
IsDialogMessageA
SetWindowTextA
ScrollWindowEx
IsWindowEnabled
SendDlgItemMessageA
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
NotifyWinEvent
ArrangeIconicWindows
DlgDirSelectComboBoxExA
DlgDirListComboBoxA
DlgDirSelectExA
DlgDirListA
LoadCursorW
LoadCursorA
GetLastActivePopup
FindWindowExA
FindWindowA
SetParent
GetDesktopWindow
ChildWindowFromPointEx
ChildWindowFromPoint
WindowFromPoint
ClientToScreen
GetCaretPos
SetCaretPos
ShowCaret
HideCaret
CreateCaret
GetWindowContextHelpId
SetWindowContextHelpId
EnableScrollBar
ShowScrollBar
LockWindowUpdate
RedrawWindow
ValidateRgn
InvalidateRgn
ValidateRect
InvalidateRect
GetWindowRgn
SetWindowRgn
GetUpdateRgn
GetUpdateRect
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDCEx
GetDC
SetForegroundWindow
GetForegroundWindow
UpdateWindow
DragDetect
GetSystemMenu
DrawMenuBar
HiliteMenuItem
EnableWindow
KillTimer
SetRectEmpty
SetCapture
GetTabbedTextExtentA
GetOpenClipboardWindow
ChangeClipboardChain
GetClipboardViewer
SetClipboardViewer
GetClipboardOwner
OpenClipboard
GetNextDlgTabItem
GetNextDlgGroupItem
IsZoomed
BringWindowToTop
IsIconic
IsWindowVisible
CloseWindow
OpenIcon
ShowOwnedPopups
FlashWindow
PostThreadMessageA
SendNotifyMessageA
DrawAnimatedRects
DrawCaption
OffsetRect
CharNextA
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
MapDialogRect
TabbedTextOutA
PostMessageA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetTopWindow
GetClassNameA
GetParent
GetClassLongA
SetWindowLongA
GetWindowLongA
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
SetActiveWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
ReleaseCapture
GetAsyncKeyState
GetTabbedTextExtentW
DestroyCursor
GetSystemMetrics
MessageBoxA
SubtractRect
ChangeDisplaySettingsExA
DestroyWindow
IsChild
IsWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
SendMessageA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
UnregisterClassA
WindowFromDC
ExcludeUpdateRgn
ScrollDC
SetMenuContextHelpId
GetMenuContextHelpId
GetSysColorBrush
DrawFocusRect
FillRect
FrameRect
InvertRect
CheckMenuRadioItem
LoadBitmapA
InflateRect
IntersectRect
GetKeyNameTextA
EnumDisplayMonitors
GetMonitorInfoA
MapVirtualKeyA
DestroyMenu
SystemParametersInfoA
CopyImage
RealChildWindowFromPoint
GetClipboardFormatNameA
UnpackDDElParam
GetActiveWindow
SetRect
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
InSendMessage
IsClipboardFormatAvailable
EnumChildWindows
CharUpperBuffA
CopyIcon
GetDoubleClickTime
SetClassLongA
SetCursorPos
DestroyAcceleratorTable
CreateAcceleratorTableA
EnumDisplaySettingsA
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
LoadImageW
EmptyClipboard
SetClipboardData
CloseClipboard
SetLayeredWindowAttributes
GetIconInfo
DrawIconEx
UnionRect
RegisterClipboardFormatA
MsgWaitForMultipleObjectsEx
MessageBeep
WaitMessage
ReuseDDElParam
GetMenuBarInfo
LoadImageA
TranslateAcceleratorA
LoadAcceleratorsA
DestroyIcon
LoadAcceleratorsW
GetDialogBaseUnits
IsRectEmpty
SetTimer
CopyAcceleratorTableA
gdi32
CreateBitmapIndirect
CreateBrushIndirect
CreateCompatibleBitmap
CreateDiscardableBitmap
CreateCompatibleDC
CreateDIBPatternBrushPt
CreateEllipticRgn
CreateEllipticRgnIndirect
CreateFontIndirectA
CreateFontA
CreateHatchBrush
CreateICA
CreatePalette
CreatePen
CreatePenIndirect
CreatePolyPolygonRgn
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
DrawEscape
Ellipse
EnumObjects
EqualRgn
Escape
ExtEscape
ExtCreateRegion
ExtFloodFill
FillRgn
FloodFill
FrameRgn
GetROP2
GetAspectRatioFilterEx
GetBkColor
GetBkMode
GetBitmapBits
GetBitmapDimensionEx
GetBoundsRect
GetBrushOrgEx
GetCharWidthA
GetCharWidthFloatA
GetCharABCWidthsA
GetCharABCWidthsFloatA
GetCurrentObject
GetCurrentPositionEx
GetFontData
GetGlyphOutlineA
GetGraphicsMode
GetMapMode
GetNearestColor
GetNearestPaletteIndex
GetObjectType
GetOutlineTextMetricsA
GetPaletteEntries
GetPixel
GetPolyFillMode
GetRegionData
GetRgnBox
GetStockObject
GetStretchBltMode
GetTextCharacterExtra
GetTextAlign
GetTextColor
GetTextExtentPoint32A
GetFontLanguageInfo
GetCharacterPlacementA
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
InvertRgn
MaskBlt
PlgBlt
OffsetRgn
PatBlt
Pie
PaintRgn
PolyPolygon
PtInRegion
PtVisible
RectInRegion
RectVisible
Rectangle
ResetDCA
RealizePalette
RoundRect
ResizePalette
SelectObject
SetBitmapBits
SetBoundsRect
SetPaletteEntries
CombineRgn
BitBlt
StretchBlt
SetRectRgn
UpdateColors
PlayEnhMetaFile
GdiComment
GetTextMetricsA
AngleArc
PolyPolyline
GetWorldTransform
GetColorAdjustment
CreateHalftonePalette
StartDocA
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetPath
PathToRegion
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
ExtCreatePen
GetMiterLimit
GetArcDirection
TextOutA
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
PolyBezier
SetBitmapDimensionEx
SetBrushOrgEx
GetTextFaceA
GetKerningPairsA
UnrealizeObject
DeleteObject
ExcludeClipRect
GetClipBox
GetClipRgn
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
MoveToEx
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
StretchDIBits
EnumFontFamiliesExA
SetPixel
Chord
Arc
AnimatePalette
GetDeviceCaps
CreateDCA
CopyMetaFileA
CreateBitmap
ExtTextOutA
CreateEnhMetaFileA
CloseEnhMetaFile
CreateMetaFileA
CloseMetaFile
SetTextColor
SetBkColor
GetObjectA
CreateSolidBrush
SetPixelV
GetTextExtentPoint32W
GetTextExtentPointA
DeleteMetaFile
SetDIBColorTable
CreateDIBSection
GetDIBits
GetTextCharsetInfo
EnumFontFamiliesA
CreateDIBitmap
GetSystemPaletteEntries
DeleteDC
msimg32
GradientFill
AlphaBlend
TransparentBlt
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
GetJobA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegEnumKeyA
RegQueryValueA
RegSetValueA
RegOpenKeyExW
RegEnumValueA
SetFileSecurityA
GetFileSecurityA
RegEnumKeyExA
RegCloseKey
shell32
SHBrowseForFolderA
DragAcceptFiles
SHGetFileInfoA
SHAddToRecentDocs
ExtractIconA
DragQueryFileA
DragFinish
SHGetPathFromIDListA
ShellExecuteExA
SHAppBarMessage
ShellExecuteA
SHGetMalloc
SHGetDesktopFolder
SHGetSpecialFolderLocation
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameA
PathRemoveExtensionA
PathIsUNCA
PathStripToRootA
UrlUnescapeA
PathRemoveFileSpecW
PathFindExtensionA
StrFormatKBSizeA
uxtheme
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeParentBackground
GetThemeColor
GetCurrentThemeName
GetThemeSysColor
GetWindowTheme
DrawThemeText
ole32
OleCreate
CreateOleAdviseHolder
CreateDataAdviseHolder
GetRunningObjectTable
OleRegEnumVerbs
CoUninitialize
CoCreateGuid
CoCreateInstance
CoInitialize
CLSIDFromString
CLSIDFromProgID
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleSave
OleSaveToStream
OleSetContainedObject
OleIsRunning
OleLockRunning
OleGetIconOfClass
GetHGlobalFromILockBytes
CoGetMalloc
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
OleLoad
OleQueryLinkFromData
OleQueryCreateFromData
OleSetMenuDescriptor
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleRegGetMiscStatus
WriteClassStm
StgIsStorageILockBytes
OleGetClipboard
DoDragDrop
CreateItemMoniker
CreateFileMoniker
GetClassFile
CreateGenericComposite
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
PropVariantCopy
CoRevokeClassObject
CoRegisterClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
StringFromGUID2
CoGetClassObject
OleRun
CoInitializeEx
CoDisconnectObject
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
WriteClassStg
ReadClassStg
CreateBindCtx
CoTreatAsClass
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
oleaut32
VarBstrFromCy
VarCyFromStr
VarDateFromStr
VariantCopy
SafeArrayPtrOfIndex
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayUnlock
SafeArrayLock
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayRedim
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VarBstrFromDate
SafeArrayAllocData
SafeArrayAllocDescriptor
SysReAllocStringLen
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocString
SafeArrayGetElemsize
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
OleCreateFontIndirect
SysFreeString
SysStringByteLen
SysAllocStringByteLen
VarBstrFromDec
VarDecFromStr
SafeArrayCreate
SafeArrayGetDim
oledlg
ord8
ord9
ord7
ord6
ord5
ord4
ord3
urlmon
URLDownloadToFileA
gdiplus
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipFree
GdipAlloc
GdiplusShutdown
GdiplusStartup
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
wininet
InternetSetStatusCallback
FtpFindFirstFileA
FtpGetFileA
FtpPutFileA
FtpDeleteFileA
FtpRenameFileA
FtpOpenFileA
FtpCreateDirectoryA
FtpRemoveDirectoryA
FtpSetCurrentDirectoryA
FtpGetCurrentDirectoryA
FtpCommandA
GopherCreateLocatorA
InternetGetLastResponseInfoA
GopherFindFirstFileA
GopherOpenFileA
GopherGetAttributeA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
HttpSendRequestExA
HttpEndRequestA
HttpQueryInfoA
InternetSetCookieA
InternetGetCookieA
InternetErrorDlg
InternetSetOptionExA
InternetQueryOptionA
InternetFindNextFileA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetOpenA
InternetCloseHandle
InternetConnectA
InternetOpenUrlA
InternetReadFile
InternetSetFilePointer
InternetWriteFile
GopherGetLocatorTypeA
InternetQueryDataAvailable
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 879KB - Virtual size: 879KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 122KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ