4489d83f491751ad0fc524a72b108704_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

4489d83f491751ad0fc524a72b108704_JaffaCakes118
Size

1.8MB
MD5

4489d83f491751ad0fc524a72b108704
SHA1

eb3375e9a5f7c1e09a3586776f25b551a4b4d8e1
SHA256

09e7e180b505492895583996fd255db41777bc811ba9f6da49b9f540fccc5930
SHA512

9bbc84a44129a52e320e5351099b4b5f4ba20c1f8a6940c37bdb024817dcbe3e24c588cb41c2ac82464c2a4ae4266f407b106b03563cec9ebdc79bc6168cbb40
SSDEEP

24576:5+1xXFHaKM6TE30qYnxOyvdr53ARySvJf85+4c0OieiB1pHIN5DfXA6r8jF6SlF/:5+cKt7RHmYB4lqWlflsjMTaTiK5AKt

Score

1^/10

Malware Config

Signatures

Files

4489d83f491751ad0fc524a72b108704_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b553c4833e5b7cb001af920dfb0aea99

Code Sign

03:09:85:b5:a3:9f:75:a1:3a:49:7d:ab:8b:f6:11:f7
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/03/2013, 00:00

Not After

26/03/2014, 12:00

Subject

CN=InstallX\, LLC,O=InstallX\, LLC,L=Sartell,ST=Minnesota,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:f4:73:6f:af:ef:40:8a:1f:66:40:f2:65:d1:0a:c1
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d5:63:84:a3:f3:3d:d7:69:a6:02:67:9b:be:ff:a9:fd:3d:7d:31:d9
Signer

Actual PE Digest

d5:63:84:a3:f3:3d:d7:69:a6:02:67:9b:be:ff:a9:fd:3d:7d:31:d9

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\winapps\Windows\MAIN\Installer.Desktop.Application\ReleaseNoMFC\FreezeWrapWin.pdb

Imports

comctl32

InitCommonControlsEx
ImageList_Create
ImageList_Add

kernel32

GetTempPathW
GetFileAttributesW
FormatMessageW
InitializeCriticalSection
UnlockFileEx
LockFile
UnlockFile
InterlockedCompareExchange
UnmapViewOfFile
MapViewOfFile
GetFullPathNameW
LockFileEx
GetProcAddress
GetDiskFreeSpaceW
GetVersion
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
GetPrivateProfileStringA
GetPrivateProfileIntA
CopyFileA
SystemTimeToFileTime
GetLocalTime
WritePrivateProfileStringA
WaitForSingleObject
CreateMutexA
ReleaseMutex
RtlCaptureStackBackTrace
CreateFileMappingA
GetTickCount
GetCurrentThreadId
Sleep
GetLastError
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetDiskFreeSpaceA
GetFileAttributesExW
GetModuleHandleA
SetEnvironmentVariableA
SetEndOfFile
WriteConsoleW
FlushFileBuffers
SetStdHandle
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
LoadLibraryW
OutputDebugStringW
GetConsoleCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetStringTypeW
DeleteFileW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetFileType
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
WideCharToMultiByte
SetUnhandledExceptionFilter
GetModuleHandleW
GetStartupInfoW
RaiseException
FormatMessageA
LocalAlloc
lstrlenA
LocalFree
BeginUpdateResourceA
HeapAlloc
GetProcessHeap
UpdateResourceA
HeapFree
EndUpdateResourceA
LoadLibraryA
EnumResourceNamesA
EnumResourceLanguagesA
FreeLibrary
FindResourceA
LoadLibraryExA
FindResourceExA
GetUserDefaultUILanguage
GetTempPathA
FindFirstFileA
FindNextFileA
FindClose
CreateDirectoryA
GetSystemTime
GetTempFileNameA
DeleteFileA
RemoveDirectoryA
SetFileAttributesA
GetFileAttributesA
MoveFileA
GetModuleFileNameA
GetCurrentDirectoryA
GetFullPathNameA
GetLongPathNameA
CloseHandle
GetPrivateProfileSectionNamesA
CreateProcessA
OpenProcess
CreateToolhelp32Snapshot
Process32First
Process32Next
TerminateProcess
GetExitCodeProcess
Module32First
Module32Next
GetCurrentProcessId
VirtualQuery
GetCurrentThread
GetCurrentProcess
CreateEventA
WaitForSingleObjectEx
ResetEvent
SetEvent
FileTimeToSystemTime
GetTimeZoneInformation
CreateFileA
GetFileTime
FileTimeToLocalFileTime
TzSpecificLocalTimeToSystemTime
GetFileSize
ReadFile
WriteFile
SetFilePointer
GetVersionExA
GetSystemInfo
GetWindowsDirectoryA
GetSystemDirectoryA
ExpandEnvironmentStringsA
GlobalMemoryStatus
CreateFileW
WaitForMultipleObjects
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapDestroy
HeapReAlloc
HeapSize
EncodePointer
DecodePointer
InterlockedDecrement
ExitProcess
GetModuleHandleExW
AreFileApisANSI
IsProcessorFeaturePresent
IsDebuggerPresent
GetCommandLineA
CreateThread
ExitThread
LoadLibraryExW
GetSystemTimeAsFileTime
RtlUnwind
GetStdHandle
GetModuleFileNameW
SetLastError
InterlockedIncrement
UnhandledExceptionFilter
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree

user32

IsWindowEnabled
GetWindowThreadProcessId
FindWindowExA
GetClassNameA
EnumChildWindows
GetSystemMetrics
SystemParametersInfoA
GetShellWindow
FindWindowA
GetDesktopWindow
LoadCursorA
CreateWindowExA
GetClassInfoExA
RegisterClassExA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
CallWindowProcA
DefWindowProcA
LoadBitmapA
LoadImageA
SetCursor
ReleaseCapture
GetKeyboardState
CreatePopupMenu
DestroyMenu
AppendMenuA
TrackPopupMenu
WaitForInputIdle
SetDlgItemTextA
AdjustWindowRectEx
OffsetRect
SetClassLongA
EnumWindows
DrawIcon
ReleaseDC
GetMessagePos
CopyRect
SendMessageW
GetDlgItem
EndDialog
CreateDialogParamA
DialogBoxParamA
GetWindowTextLengthA
SetWindowLongA
GetWindowLongA
PostMessageA
SendMessageA
LoadStringA
InflateRect
FrameRect
SetWindowTextA
BeginPaint
EndPaint
GetDlgCtrlID
ScreenToClient
ClientToScreen
GetCursorPos
EnableMenuItem
GetSystemMenu
SetWindowPos
LoadIconA
IsIconic
GetFocus
SetFocus
IsWindowVisible
SetTimer
KillTimer
GetParent
GetSysColor
LoadAcceleratorsA
DestroyWindow
MessageBoxA
MessageBoxExA
ShowWindow
GetSysColorBrush
GetWindowTextA
GetDC
PostQuitMessage
EnableWindow
SetForegroundWindow
UpdateWindow
IsWindow
InvalidateRgn
InvalidateRect
MoveWindow
GetClientRect
GetWindowRect
SetParent

shell32

SHGetSpecialFolderPathA
Shell_NotifyIconA
ShellExecuteExA

ole32

CoTaskMemAlloc
CoUninitialize
CoInitialize
CoTaskMemFree
CoInitializeEx
StringFromGUID2
CoCreateInstance
OleInitialize
CoInitializeSecurity
OleUninitialize
CoCreateGuid

oleaut32

SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysStringLen
SysFreeString
SysAllocStringLen
SafeArrayDestroy

psapi

EnumProcesses
GetModuleFileNameExA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

userenv

ExpandEnvironmentStringsForUserA

wininet

InternetConnectA
HttpOpenRequestA
HttpAddRequestHeadersA
InternetOpenA
HttpSendRequestA
HttpQueryInfoA
InternetSetStatusCallback
InternetErrorDlg
InternetSetOptionA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetCombineUrlA
InternetGetCookieA
InternetSetCookieA
FindCloseUrlCache
InternetCloseHandle
InternetReadFileExA

shlwapi

PathCombineA
PathFindExtensionA
PathRenameExtensionA
UrlEscapeA
SHDeleteEmptyKeyA
PathStripPathA
PathRemoveFileSpecA
PathIsDirectoryEmptyA

urlmon

IsValidURL

rpcrt4

UuidFromStringA

gdi32

BitBlt
SetWindowOrgEx
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
PatBlt
DeleteObject
SetBkColor
GetObjectA
DeleteDC

advapi32

RegEnumKeyExA
RegEnumValueA
RegQueryInfoKeyA
RevertToSelf
OpenProcessToken
GetTokenInformation
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
SetTokenInformation
LookupPrivilegeValueA
DuplicateTokenEx
ImpersonateLoggedOnUser
GetLengthSid
AdjustTokenPrivileges
RegOpenCurrentUser
RegOpenUserClassesRoot
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA

gdiplus

GdipSetCompositingMode
GdipDeleteGraphics
GdipCreateFromHDC

comdlg32

GetOpenFileNameA

Sections

.text
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-de
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-ti
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 512B - Virtual size: 59B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text-co
Size: 257KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 368KB - Virtual size: 367KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-de
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-ti
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data-co
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b553c4833e5b7cb001af920dfb0aea99

Code Sign

03:09:85:b5:a3:9f:75:a1:3a:49:7d:ab:8b:f6:11:f7Certificate

Extended Key Usages

Key Usages

07:f4:73:6f:af:ef:40:8a:1f:66:40:f2:65:d1:0a:c1Certificate

Extended Key Usages

Key Usages

d5:63:84:a3:f3:3d:d7:69:a6:02:67:9b:be:ff:a9:fd:3d:7d:31:d9Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

comctl32

kernel32

user32

shell32

ole32

oleaut32

psapi

version

userenv

wininet

shlwapi

urlmon

rpcrt4

gdi32

advapi32

gdiplus

comdlg32

Sections

.text Size: 147KB - Virtual size: 146KB

.text-de Size: 99KB - Virtual size: 99KB

.text-co Size: 123KB - Virtual size: 122KB

.text-co Size: 73KB - Virtual size: 73KB

.text-co Size: 24KB - Virtual size: 23KB

.text-co Size: 12KB - Virtual size: 12KB

.text-ti Size: 42KB - Virtual size: 42KB

.text-co Size: 16KB - Virtual size: 15KB

.text-co Size: 512B - Virtual size: 59B

.text-co Size: 13KB - Virtual size: 12KB

.text-co Size: 17KB - Virtual size: 17KB

.text-co Size: 34KB - Virtual size: 33KB

.text-co Size: 50KB - Virtual size: 50KB

.text-co Size: 106KB - Virtual size: 106KB

.text-co Size: 106KB - Virtual size: 106KB

.text-co Size: 49KB - Virtual size: 49KB

.text-co Size: 31KB - Virtual size: 31KB

.text-co Size: 15KB - Virtual size: 15KB

.text-co Size: 257KB - Virtual size: 257KB

.rdata Size: 368KB - Virtual size: 367KB

.data Size: 14KB - Virtual size: 23KB

.data-de Size: 512B - Virtual size: 52B

.data-co Size: 512B - Virtual size: 176B

.data-co Size: 512B - Virtual size: 56B

.data-co Size: 512B - Virtual size: 48B

.data-co Size: 512B - Virtual size: 40B

.data-ti Size: 1KB - Virtual size: 1KB

.data-co Size: 512B - Virtual size: 40B

.data-co Size: 512B - Virtual size: 4B

.data-co Size: 512B - Virtual size: 40B

.data-co Size: 512B - Virtual size: 40B

.data-co Size: 512B - Virtual size: 40B

.data-co Size: 512B - Virtual size: 44B

.data-co Size: 512B - Virtual size: 40B

.data-co Size: 512B - Virtual size: 80B

.data-co Size: 512B - Virtual size: 48B

.data-co Size: 512B - Virtual size: 40B

.data-co Size: 512B - Virtual size: 40B

.data-co Size: 3KB - Virtual size: 2KB

.rsrc Size: 233KB - Virtual size: 232KB

03:09:85:b5:a3:9f:75:a1:3a:49:7d:ab:8b:f6:11:f7
Certificate

07:f4:73:6f:af:ef:40:8a:1f:66:40:f2:65:d1:0a:c1
Certificate

d5:63:84:a3:f3:3d:d7:69:a6:02:67:9b:be:ff:a9:fd:3d:7d:31:d9
Signer

.text
Size: 147KB - Virtual size: 146KB

.text-de
Size: 99KB - Virtual size: 99KB

.text-co
Size: 123KB - Virtual size: 122KB

.text-co
Size: 73KB - Virtual size: 73KB

.text-co
Size: 24KB - Virtual size: 23KB

.text-co
Size: 12KB - Virtual size: 12KB

.text-ti
Size: 42KB - Virtual size: 42KB

.text-co
Size: 16KB - Virtual size: 15KB

.text-co
Size: 512B - Virtual size: 59B

.text-co
Size: 13KB - Virtual size: 12KB

.text-co
Size: 17KB - Virtual size: 17KB

.text-co
Size: 34KB - Virtual size: 33KB

.text-co
Size: 50KB - Virtual size: 50KB

.text-co
Size: 106KB - Virtual size: 106KB

.text-co
Size: 106KB - Virtual size: 106KB

.text-co
Size: 49KB - Virtual size: 49KB

.text-co
Size: 31KB - Virtual size: 31KB

.text-co
Size: 15KB - Virtual size: 15KB

.text-co
Size: 257KB - Virtual size: 257KB

.rdata
Size: 368KB - Virtual size: 367KB

.data
Size: 14KB - Virtual size: 23KB

.data-de
Size: 512B - Virtual size: 52B

.data-co
Size: 512B - Virtual size: 176B

.data-co
Size: 512B - Virtual size: 56B

.data-co
Size: 512B - Virtual size: 48B

.data-co
Size: 512B - Virtual size: 40B

.data-ti
Size: 1KB - Virtual size: 1KB

.data-co
Size: 512B - Virtual size: 40B

.data-co
Size: 512B - Virtual size: 4B

.data-co
Size: 512B - Virtual size: 40B

.data-co
Size: 512B - Virtual size: 40B

.data-co
Size: 512B - Virtual size: 40B

.data-co
Size: 512B - Virtual size: 44B

.data-co
Size: 512B - Virtual size: 40B

.data-co
Size: 512B - Virtual size: 80B

.data-co
Size: 512B - Virtual size: 48B

.data-co
Size: 512B - Virtual size: 40B

.data-co
Size: 512B - Virtual size: 40B

.data-co
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 233KB - Virtual size: 232KB