Static task
static1
Behavioral task
behavioral1
Sample
6c55c641f62cb99d883c3fdf990db74b04d3392a227a2db680dab83dd34e23c1.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral2
Sample
6c55c641f62cb99d883c3fdf990db74b04d3392a227a2db680dab83dd34e23c1.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
General
-
Target
6c55c641f62cb99d883c3fdf990db74b04d3392a227a2db680dab83dd34e23c1
-
Size
9.8MB
-
MD5
54aa2fbc6bbd1b62f2fa60edd8bde54d
-
SHA1
9241bd58096950663649568797b7e7668eb08530
-
SHA256
6c55c641f62cb99d883c3fdf990db74b04d3392a227a2db680dab83dd34e23c1
-
SHA512
236b9c77086a03e507dbff95207c916818b25c9a7d097ce13f72e5ca20b85be519376ae01ea0c353809af13a6c029fab476cfa97badd7d4ee2ae3cd3069aab96
-
SSDEEP
98304:Sh2tNt9R9SXkeeedx5xIxnxBK9Oh8vB//Q+P44GCn9enRWHakD5kDfXXXn5GwAk+:Sqv9SWK9O444of5dqfb9f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6c55c641f62cb99d883c3fdf990db74b04d3392a227a2db680dab83dd34e23c1
Files
-
6c55c641f62cb99d883c3fdf990db74b04d3392a227a2db680dab83dd34e23c1.dll regsvr32 windows:4 windows x86 arch:x86
ad8cf86514c62248d25ab4bd3d863b99
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
aclui
CreateSecurityPage
advapi32
AdjustTokenPrivileges
AllocateAndInitializeSid
CloseServiceHandle
CommandLineFromMsiDescriptor
ConvertSidToStringSidW
CreateProcessAsUserW
EqualSid
FreeSid
GetNamedSecurityInfoW
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
GetSecurityDescriptorOwner
GetSecurityDescriptorSacl
GetTokenInformation
GetUserNameW
LookupPrivilegeValueA
MapGenericMask
OpenProcessToken
OpenSCManagerW
OpenServiceW
QueryServiceStatusEx
RegCloseKey
RegCreateKeyExA
RegCreateKeyExW
RegCreateKeyW
RegDeleteKeyA
RegEnumKeyA
RegEnumKeyExW
RegEnumKeyW
RegEnumValueA
RegEnumValueW
RegGetValueW
RegLoadMUIStringA
RegLoadMUIStringW
RegOpenKeyA
RegOpenKeyExA
RegOpenKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegQueryValueA
RegQueryValueExA
RegQueryValueExW
RegQueryValueW
RegSetValueExA
RegSetValueExW
SetNamedSecurityInfoW
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateFontIndirectW
DeleteObject
ExtTextOutW
GetBitmapBits
GetDeviceCaps
GetObjectW
GetStockObject
GetTextExtentPoint32W
GetTextMetricsW
SelectObject
SetBkColor
SetBkMode
SetTextColor
kernel32
ActivateActCtx
CloseHandle
CompareFileTime
CopyFileExW
CreateActCtxW
CreateDirectoryW
CreateFileMappingW
CreateFileW
CreateProcessW
DeactivateActCtx
DelayLoadFailureHook
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeviceIoControl
DisableThreadLibraryCalls
DosDateTimeToFileTime
EnterCriticalSection
EnumResourceNamesW
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FileTimeToDosDateTime
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceW
FormatMessageA
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetBinaryTypeW
GetCurrentDirectoryA
GetCurrentDirectoryW
GetDateFormatA
GetDateFormatW
GetDiskFreeSpaceExW
GetDriveTypeA
GetDriveTypeW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetLocalTime
GetLogicalDrives
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetPrivateProfileStringW
GetProcAddress
GetProfileStringW
GetShortPathNameA
GetShortPathNameW
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetTickCount
GetTimeFormatA
GetTimeFormatW
GetVersion
GetVolumeInformationA
GetVolumeInformationW
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
InitOnceExecuteOnce
IsBadStringPtrA
IsBadStringPtrW
IsWow64Process
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LockResource
MapViewOfFile
MoveFileExW
MoveFileW
MoveFileWithProgressW
MulDiv
MultiByteToWideChar
ProcessIdToSessionId
RaiseException
ReadFile
ReleaseActCtx
RemoveDirectoryW
ResolveDelayLoadedAPI
SearchPathW
SetCurrentDirectoryA
SetCurrentDirectoryW
SetErrorMode
SetFileAttributesW
SetFilePointer
SizeofResource
Sleep
SystemTimeToFileTime
UnmapViewOfFile
WideCharToMultiByte
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
WriteFile
WritePrivateProfileStringW
lstrcmpA
lstrcmpiA
lstrcmpiW
wine_get_unix_file_name
wine_get_dos_file_name
ntdll
RtlDosPathNameToNtPathName_U
RtlFreeUnicodeString
RtlGUIDFromString
RtlInitUnicodeString
RtlRandom
_vsnprintf
wine_get_host_version
shlwapi
ord2
ord3
ord4
ord5
ord6
ord7
ord8
ord9
ord10
ord24
PathAddBackslashA
PathAddBackslashW
PathAppendA
PathAppendW
PathBuildRootA
PathBuildRootW
PathCombineA
PathCombineW
PathCreateFromUrlW
PathFileExistsA
PathFileExistsW
PathFindExtensionA
PathFindExtensionW
PathFindFileNameA
PathFindFileNameW
PathFindOnPathA
PathFindOnPathW
PathGetArgsA
PathGetArgsW
PathGetCharTypeA
PathGetCharTypeW
PathGetDriveNumberA
PathGetDriveNumberW
PathIsDirectoryA
PathIsDirectoryW
PathIsFileSpecA
PathIsFileSpecW
PathIsRelativeA
PathIsRelativeW
PathIsRootA
PathIsRootW
PathIsSameRootA
PathIsSameRootW
PathIsUNCA
PathIsUNCW
PathIsURLW
PathMatchSpecA
PathMatchSpecW
PathParseIconLocationA
PathParseIconLocationW
PathQuoteSpacesA
PathQuoteSpacesW
PathRemoveArgsA
PathRemoveArgsW
PathRemoveBackslashW
PathRemoveBlanksA
PathRemoveBlanksW
PathRemoveExtensionA
PathRemoveExtensionW
PathRemoveFileSpecA
PathRemoveFileSpecW
PathSetDlgItemPathA
PathSetDlgItemPathW
PathStripPathA
PathStripPathW
PathStripToRootA
PathStripToRootW
PathUnquoteSpacesA
PathUnquoteSpacesW
SHCreateStreamOnFileW
SHDeleteKeyW
SHGetValueW
SHQueryValueExA
SHQueryValueExW
SHStrDupW
StrChrW
StrCmpIW
StrCpyNW
StrFormatByteSizeW
StrFormatKBSizeA
StrFormatKBSizeW
StrPBrkW
StrRChrW
StrRetToBSTR
StrRetToBufW
StrRetToStrW
UrlIsW
ucrtbase
__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vswprintf
_assert
_recalloc
_strdup
_wcsdup
_wcsicmp
_wcsnicmp
_wgetenv
atoi
calloc
free
fwrite
getenv
isprint
iswspace
malloc
memcmp
memcpy
memmove
memset
qsort
realloc
strchr
strcmp
strcpy
strcspn
strlen
strncmp
strrchr
towlower
towupper
wcscat
wcschr
wcscmp
wcscpy
wcscpy_s
wcslen
wcsncmp
wcspbrk
wcsrchr
wcsstr
wcstol
user32
BeginDeferWindowPos
BeginPaint
CallWindowProcW
CharLowerW
CheckMenuRadioItem
CopyImage
CreateIconIndirect
CreateMenu
CreatePopupMenu
CreateWindowExW
DdeClientTransaction
DdeConnect
DdeCreateDataHandle
DdeCreateStringHandleW
DdeDisconnect
DdeFreeDataHandle
DdeFreeStringHandle
DdeGetData
DdeGetLastError
DdeInitializeA
DdeInitializeW
DdeNameService
DdeQueryStringW
DdeUninitialize
DefWindowProcW
DeferWindowPos
DeleteMenu
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxIndirectParamW
DialogBoxParamW
DispatchMessageW
DrawEdge
DrawMenuBar
DrawTextW
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndDialog
EndPaint
ExitWindowsEx
FindWindowExW
FindWindowW
GetActiveWindow
GetAncestor
GetCapture
GetClassInfoW
GetClientRect
GetDC
GetDCEx
GetDlgItem
GetDlgItemTextW
GetIconInfo
GetKeyState
GetMenu
GetMenuDefaultItem
GetMenuInfo
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoW
GetMenuItemRect
GetMessageW
GetParent
GetPropW
GetSubMenu
GetSysColor
GetSystemMetrics
GetWindowLongA
GetWindowLongW
GetWindowRect
GetWindowTextA
GetWindowTextLengthW
GetWindowTextW
InsertMenuA
InsertMenuItemW
InsertMenuW
InvertRect
IsProcessDPIAware
IsWindow
IsWindowVisible
LoadAcceleratorsW
LoadCursorA
LoadCursorW
LoadIconW
LoadImageA
LoadImageW
LoadMenuA
LoadMenuW
LoadStringA
LoadStringW
MapWindowPoints
MessageBoxA
MessageBoxIndirectW
MessageBoxW
MoveWindow
PostQuitMessage
PrivateExtractIconExW
PrivateExtractIconsW
RegisterClassExW
RegisterClassW
RegisterClipboardFormatA
RegisterClipboardFormatW
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropW
ScreenToClient
SendDlgItemMessageW
SendMessageA
SendMessageTimeoutW
SendMessageW
SetCapture
SetCursor
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenu
SetMenuDefaultItem
SetMenuInfo
SetPropW
SetWindowLongA
SetWindowLongW
SetWindowPos
SetWindowTextA
SetWindowTextW
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TrackPopupMenuEx
TranslateMessage
UpdateWindow
WaitForInputIdle
wsprintfA
Exports
Exports
AddCommasW
CDefFolderMenu_Create2
CIDLData_CreateFromIDArray
CheckEscapesA
CheckEscapesW
CommandLineToArgvW
Control_FillCache_RunDLL
Control_FillCache_RunDLLA
Control_FillCache_RunDLLW
Control_RunDLL
Control_RunDLLA
Control_RunDLLAsUserW
Control_RunDLLW
DAD_AutoScroll
DAD_DragEnterEx
DAD_DragLeave
DAD_DragMove
DAD_SetDragImage
DAD_SetDragImageFromListView
DAD_ShowDragImage
Desktop_UpdateBriefcaseOnEvent
DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllInstall
DllRegisterServer
DllUnregisterServer
DoEnvironmentSubst
DoEnvironmentSubstA
DoEnvironmentSubstW
DragAcceptFiles
DragFinish
DragQueryFile
DragQueryFileA
DragQueryFileAorW
DragQueryFileW
DragQueryInfo
DragQueryPoint
DriveType
DuplicateIcon
ExtractAssociatedIconA
ExtractAssociatedIconExA
ExtractAssociatedIconExW
ExtractAssociatedIconW
ExtractIconA
ExtractIconEx
ExtractIconExA
ExtractIconExW
ExtractIconResInfoA
ExtractIconResInfoW
ExtractIconW
ExtractVersionResource16W
FOOBAR1217
FindExeDlgProc
FindExecutableA
FindExecutableW
FixupOptionalComponents
FreeIconList
GetCurrentProcessExplicitAppUserModelID
GetFileNameFromBrowse
ILAppendID
ILClone
ILCloneFirst
ILCombine
ILCreateFromPath
ILCreateFromPathA
ILCreateFromPathW
ILFindChild
ILFindLastID
ILFree
ILGetNext
ILGetPseudoNameW
ILGetSize
ILIsEqual
ILIsParent
ILRemoveLastID
ILSaveToStream
InitNetworkAddressControl
Int64ToString
InternalExtractIconListA
InternalExtractIconListW
IsLFNDrive
IsLFNDriveA
IsLFNDriveW
IsNetDrive
IsUserAnAdmin
LargeIntegerToString
Link_AddExtraDataSection
Link_ReadExtraDataSection
Link_RemoveExtraDataSection
LogoffWindowsDialog
OCInstall
OpenAs_RunDLL
OpenAs_RunDLLA
OpenAs_RunDLLW
OpenRegStream
PathCleanupSpec
PathGetShortPath
PathIsExe
PathMakeUniqueName
PathQualify
PathResolve
PathYetAnotherMakeUniqueName
PickIconDlg
PifMgr_CloseProperties
PifMgr_GetProperties
PifMgr_OpenProperties
PifMgr_SetProperties
Printer_LoadIconsW
PrintersGetCommand_RunDLL
PrintersGetCommand_RunDLLA
PrintersGetCommand_RunDLLW
Printers_AddPrinterPropPages
Printers_GetPidl
Printers_RegisterWindowW
Printers_UnregisterWindow
ReadCabinetState
RealDriveType
RealDriveTypeFlags
RealShellExecuteA
RealShellExecuteExA
RealShellExecuteExW
RealShellExecuteW
ReceiveAddToRecentDocs
RegenerateUserEnvironment
RestartDialog
SHAddFromPropSheetExtArray
SHAddToRecentDocs
SHAlloc
SHAppBarMessage
SHAssocEnumHandlers
SHAssocEnumHandlersForProtocolByApplication
SHBindToFolderIDListParent
SHBindToObject
SHBindToParent
SHBrowseForFolder
SHBrowseForFolderA
SHBrowseForFolderW
SHCLSIDFromString
SHChangeNotification_Lock
SHChangeNotification_Unlock
SHChangeNotify
SHChangeNotifyDeregister
SHChangeNotifyReceive
SHChangeNotifyRegister
SHChangeNotifySuspendResume
SHChangeRegistrationReceive
SHCloneSpecialIDList
SHCoCreateInstance
SHCreateAssociationRegistration
SHCreateDataObject
SHCreateDefaultContextMenu
SHCreateDirectory
SHCreateDirectoryExA
SHCreateDirectoryExW
SHCreateFileExtractIconW
SHCreateItemFromIDList
SHCreateItemFromParsingName
SHCreateItemFromRelativeName
SHCreateItemInKnownFolder
SHCreateItemWithParent
SHCreateProcessAsUserW
SHCreatePropSheetExtArray
SHCreateQueryCancelAutoPlayMoniker
SHCreateShellFolderView
SHCreateShellFolderViewEx
SHCreateShellItem
SHCreateShellItemArray
SHCreateShellItemArrayFromDataObject
SHCreateShellItemArrayFromIDLists
SHCreateShellItemArrayFromShellItem
SHCreateStdEnumFmtEtc
SHDefExtractIconA
SHDefExtractIconW
SHDestroyPropSheetExtArray
SHDoDragDrop
SHEmptyRecycleBinA
SHEmptyRecycleBinW
SHEnumerateUnreadMailAccountsW
SHExtractIconsW
SHFileOperation
SHFileOperationA
SHFileOperationW
SHFindComputer
SHFindFiles
SHFind_InitMenuPopup
SHFlushSFCache
SHFormatDrive
SHFree
SHFreeNameMappings
SHGetDataFromIDListA
SHGetDataFromIDListW
SHGetDesktopFolder
SHGetDiskFreeSpaceA
SHGetDiskFreeSpaceExA
SHGetDiskFreeSpaceExW
SHGetFileIcon
SHGetFileInfo
SHGetFileInfoA
SHGetFileInfoW
SHGetFolderLocation
SHGetFolderPathA
SHGetFolderPathAndSubDirA
SHGetFolderPathAndSubDirW
SHGetFolderPathEx
SHGetFolderPathW
SHGetFreeDiskSpace
SHGetIDListFromObject
SHGetIconOverlayIndexA
SHGetIconOverlayIndexW
SHGetImageList
SHGetInstanceExplorer
SHGetItemFromDataObject
SHGetItemFromObject
SHGetKnownFolderIDList
SHGetKnownFolderItem
SHGetKnownFolderPath
SHGetLocalizedName
SHGetMalloc
SHGetNameFromIDList
SHGetNewLinkInfo
SHGetNewLinkInfoA
SHGetNewLinkInfoW
SHGetPathFromIDList
SHGetPathFromIDListA
SHGetPathFromIDListEx
SHGetPathFromIDListW
SHGetPropertyStoreForWindow
SHGetPropertyStoreFromParsingName
SHGetRealIDL
SHGetSetFolderCustomSettings
SHGetSetSettings
SHGetSettings
SHGetSpecialFolderLocation
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
SHGetStockIconInfo
SHGlobalDefect
SHHandleDiskFull
SHHandleUpdateImage
SHHelpShortcuts_RunDLL
SHHelpShortcuts_RunDLLA
SHHelpShortcuts_RunDLLW
SHILCreateFromPath
SHInvokePrinterCommandA
SHInvokePrinterCommandW
SHIsBadInterfacePtr
SHIsFileAvailableOffline
SHLimitInputEdit
SHLoadInProc
SHLoadNonloadedIconOverlayIdentifiers
SHLocalAlloc
SHLocalFree
SHLocalReAlloc
SHMapPIDLToSystemImageListIndex
SHMultiFileProperties
SHNetConnectionDialog
SHObjectProperties
SHOpenFolderAndSelectItems
SHOpenWithDialog
SHParseDisplayName
SHPathPrepareForWriteA
SHPathPrepareForWriteW
SHPropStgCreate
SHPropStgReadMultiple
SHPropStgWriteMultiple
SHQueryRecycleBinA
SHQueryRecycleBinW
SHQueryUserNotificationState
SHRegCloseKey
SHRegDeleteKeyW
SHRegOpenKeyA
SHRegOpenKeyW
SHRegQueryValueA
SHRegQueryValueExA
SHRegQueryValueExW
SHRegQueryValueW
SHRemoveLocalizedName
SHReplaceFromPropSheetExtArray
SHRestricted
SHSetInstanceExplorer
SHSetLocalizedName
SHSetTemporaryPropertyForItem
SHSetUnreadMailCountW
SHShellFolderView_Message
SHSimpleIDListFromPath
SHUpdateImageA
SHUpdateImageW
SHUpdateRecycleBinIcon
SHValidateUNC
SHWaitOp_Operate
SetCurrentProcessExplicitAppUserModelID
SheChangeDirA
SheChangeDirExA
SheChangeDirExW
SheChangeDirW
SheConvertPathW
SheFullPathA
SheFullPathW
SheGetCurDrive
SheGetDirA
SheGetDirExW
SheGetDirW
SheGetPathOffsetW
SheRemoveQuotesA
SheRemoveQuotesW
SheSetCurDrive
SheShortenPathA
SheShortenPathW
ShellAboutA
ShellAboutW
ShellExec_RunDLL
ShellExec_RunDLLA
ShellExec_RunDLLW
ShellExecuteA
ShellExecuteEx
ShellExecuteExA
ShellExecuteExW
ShellExecuteW
ShellHookProc
ShellMessageBoxA
ShellMessageBoxW
Shell_GetCachedImageIndex
Shell_GetCachedImageIndexA
Shell_GetCachedImageIndexW
Shell_GetImageLists
Shell_MergeMenus
Shell_NotifyIcon
Shell_NotifyIconA
Shell_NotifyIconGetRect
Shell_NotifyIconW
ShortSizeFormatW
SignalFileOpen
StrChrA
StrChrIA
StrChrIW
StrChrW
StrCmpNA
StrCmpNIA
StrCmpNIW
StrCmpNW
StrCpyNA
StrCpyNW
StrNCmpA
StrNCmpIA
StrNCmpIW
StrNCmpW
StrNCpyA
StrNCpyW
StrRChrA
StrRChrIA
StrRChrIW
StrRChrW
StrRStrA
StrRStrIA
StrRStrIW
StrRStrW
StrStrA
StrStrIA
StrStrIW
StrStrW
WOWShellExecute
Win32DeleteFile
Sections
.text Size: 604KB - Virtual size: 600KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rodata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 164KB - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.buildid Size: 4KB - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 964B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8.4MB - Virtual size: 8.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/14 Size: 4KB - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/29 Size: 4KB - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/41 Size: 4KB - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/55 Size: 4KB - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/67 Size: 4KB - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/80 Size: 4KB - Virtual size: 161B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/91 Size: 4KB - Virtual size: 158B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ