6ce51860ba1c07b8e694f02ab4020b367badf5b0134a309f656a4420f878f8bb

Sharing

Copy URL Twitter E-mail

General

Target

6ce51860ba1c07b8e694f02ab4020b367badf5b0134a309f656a4420f878f8bb
Size

1.7MB
MD5

45f82f7a54e92872ef151b3f11b4cd6d
SHA1

f235e457130bb5bfe6fa3709aa0df6573710c150
SHA256

6ce51860ba1c07b8e694f02ab4020b367badf5b0134a309f656a4420f878f8bb
SHA512

6b303d26d9a8d1a85bbcec315a53c23dd7a647ade807f80739a8a07027cf5da52ebd2f743a216d5ff6564eb20bd5ad32c153a7cab2eb21d297ef4b7b7e9df01b
SSDEEP

24576:OyffE5On9i7lu3PwjS22F75lbkQjcR7lajth/dIA546b7U4H5p3C05G:uUn9n3PwjS2ydIA5Db7U4Zp3C05G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ce51860ba1c07b8e694f02ab4020b367badf5b0134a309f656a4420f878f8bb

Files

6ce51860ba1c07b8e694f02ab4020b367badf5b0134a309f656a4420f878f8bb
.dll regsvr32 windows:4 windows x86 arch:x86

743bc5e3c7084975005d91d59dc79b33

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

Imports

advapi32

ChangeServiceConfig2W
CloseServiceHandle
ControlService
ConvertSidToStringSidW
CreateProcessAsUserW
CreateServiceW
DeleteService
EnumDependentServicesW
GetServiceDisplayNameW
GetTokenInformation
GetUserNameW
LookupAccountNameW
MD5Final
MD5Init
MD5Update
OpenProcessToken
OpenSCManagerW
OpenServiceW
QueryServiceStatusEx
RegCloseKey
RegCreateKeyExW
RegCreateKeyW
RegDeleteKeyExW
RegDeleteKeyW
RegDeleteTreeW
RegDeleteValueW
RegEnumKeyExW
RegEnumKeyW
RegEnumValueW
RegGetValueW
RegOpenKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
StartServiceW

cabinet

FDICreate
FDICopy
FDIDestroy

comctl32

ImageList_Add
ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon

crypt32

CertDuplicateCertificateContext

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
DeleteDC
DeleteObject
GetDeviceCaps
GetObjectW
GetStockObject
GetTextMetricsW
SelectObject
SetBkMode
SetTextColor
StretchBlt

imagehlp

BindImage

kernel32

CloseHandle
ConnectNamedPipe
CopyFileW
CreateDirectoryW
CreateFileMappingW
CreateFileW
CreateNamedPipeW
CreateProcessW
CreateThread
DebugBreak
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
DosDateTimeToFileTime
DuplicateHandle
EnterCriticalSection
EnumResourceNamesW
ExpandEnvironmentStringsW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FindResourceExW
FindResourceW
FreeLibrary
GetComputerNameW
GetCurrentDirectoryW
GetDateFormatW
GetDiskFreeSpaceExW
GetDriveTypeW
GetEnvironmentVariableW
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesW
GetFileSize
GetFullPathNameW
GetLocalTime
GetLogicalDriveStringsW
GetLogicalDrives
GetModuleFileNameW
GetModuleHandleW
GetNativeSystemInfo
GetPrivateProfileStringW
GetProcAddress
GetShortPathNameW
GetSystemDefaultLangID
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetTempFileNameW
GetTempPathW
GetTickCount
GetTickCount64
GetTimeFormatW
GetUserDefaultLangID
GetVersion
GetVolumeInformationW
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalMemoryStatusEx
HeapAlloc
HeapFree
HeapReAlloc
IsBadStringPtrA
IsBadStringPtrW
IsValidCodePage
IsValidLocale
IsWow64Process
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalFileTimeToFileTime
LocalFree
LockResource
MapViewOfFile
MoveFileExW
MulDiv
MultiByteToWideChar
RaiseException
ReadFile
RemoveDirectoryW
RtlUnwind
SearchPathW
SetFileAttributesW
SetFilePointer
SetFileTime
SizeofResource
Sleep
SystemTimeToFileTime
TzSpecificLocalTimeToSystemTime
UnmapViewOfFile
WaitForSingleObject
WideCharToMultiByte
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
WriteFile
WritePrivateProfileStringW

mspatcha

ApplyPatchToFileW

ntdll

NtCreateSection
NtQuerySection
RtlGetVersion
_vsnprintf

odbccp32

SQLConfigDataSourceW
SQLRemoveTranslatorW
SQLRemoveDriverW
SQLInstallDriverExW
SQLInstallTranslatorExW

ole32

CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoCreateInstance
CoInitialize
CoInitializeEx
CoTaskMemFree
CoUninitialize
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
StgCreateDocfile
StgOpenStorage
StgOpenStorageOnILockBytes
StringFromGUID2

oleaut32

SysAllocString
SysAllocStringLen
SysFreeString
VariantInit
VariantClear
VariantCopy
VariantCopyInd
VariantChangeType
DispGetParam
SysAllocStringByteLen
LoadTypeLib
LoadRegTypeLib
RegisterTypeLib
LoadTypeLibEx
SystemTimeToVariantTime
VariantTimeToSystemTime
UnRegisterTypeLib
OleLoadPicture

rpcrt4

I_RpcExceptionFilter
NdrClientCall2
NdrServerCall2
RpcBindingFree
RpcBindingFromStringBindingW
RpcServerRegisterIfEx
RpcServerUnregisterIf
RpcServerUseProtseqEpW
RpcStringBindingComposeW
RpcStringFreeW

shell32

SHGetFolderPathW
ShellExecuteW

shlwapi

PathAddBackslashW
PathAppendW
PathFindFileNameW
PathIsRelativeW
PathRemoveBackslashW
PathRemoveFileSpecW
PathStripPathW
PathStripToRootW
SHCreateStreamOnFileW
StrFormatByteSizeW
UrlIsW

sxs

CreateAssemblyCache

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vswprintf
_assert
_strdup
_wcsdup
_wcsicmp
_wcsnicmp
_wcsupr
_wtoi
bsearch
calloc
free
fwrite
getenv
iswdigit
iswspace
malloc
memcmp
memcpy
memmove
memset
qsort
realloc
strcat
strchr
strcmp
strcpy
strcspn
strlen
strtol
towupper
wcscat
wcschr
wcscmp
wcscpy
wcslen
wcsncmp
wcsrchr
wcsstr
wcstol

urlmon

URLDownloadToCacheFileW

user32

AdjustWindowRect
AppendMenuA
CallWindowProcW
CharLowerW
CharUpperW
CreatePopupMenu
CreateWindowExW
DefWindowProcW
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageW
EnableWindow
EnumChildWindows
GetClientRect
GetDC
GetFocus
GetNextDlgTabItem
GetParent
GetPropW
GetWindowLongW
GetWindowRect
GetWindowTextW
InvalidateRect
IsDialogMessageW
LoadBitmapW
LoadCursorW
LoadIconW
LoadImageW
LoadStringW
MapWindowPoints
MessageBoxExA
MessageBoxExW
MessageBoxW
MsgWaitForMultipleObjects
MsgWaitForMultipleObjectsEx
PeekMessageW
PostMessageW
RegisterClassW
ReleaseDC
RemovePropW
SendMessageW
SetFocus
SetPropW
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
TrackPopupMenu
TranslateMessage
UnregisterClassW
wsprintfA
wsprintfW

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

wininet

GetUrlCacheEntryInfoW

wintrust

WTHelperGetProvCertFromChain
WTHelperGetProvSignerFromChain
WinVerifyTrustEx

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllGetVersion
DllRegisterServer
DllUnregisterServer
Migrate10CachedPackagesA
Migrate10CachedPackagesW
MsiAdvertiseProductA
MsiAdvertiseProductExA
MsiAdvertiseProductExW
MsiAdvertiseProductW
MsiAdvertiseScriptA
MsiAdvertiseScriptW
MsiApplyMultiplePatchesA
MsiApplyMultiplePatchesW
MsiApplyPatchA
MsiApplyPatchW
MsiBeginTransactionA
MsiBeginTransactionW
MsiCloseAllHandles
MsiCloseHandle
MsiCollectUserInfoA
MsiCollectUserInfoW
MsiConfigureFeatureA
MsiConfigureFeatureFromDescriptorA
MsiConfigureFeatureFromDescriptorW
MsiConfigureFeatureW
MsiConfigureProductA
MsiConfigureProductExA
MsiConfigureProductExW
MsiConfigureProductW
MsiCreateAndVerifyInstallerDirectory
MsiCreateRecord
MsiCreateTransformSummaryInfoA
MsiCreateTransformSummaryInfoW
MsiDatabaseApplyTransformA
MsiDatabaseApplyTransformW
MsiDatabaseCommit
MsiDatabaseExportA
MsiDatabaseExportW
MsiDatabaseGenerateTransformA
MsiDatabaseGenerateTransformW
MsiDatabaseGetPrimaryKeysA
MsiDatabaseGetPrimaryKeysW
MsiDatabaseImportA
MsiDatabaseImportW
MsiDatabaseIsTablePersistentA
MsiDatabaseIsTablePersistentW
MsiDatabaseMergeA
MsiDatabaseMergeW
MsiDatabaseOpenViewA
MsiDatabaseOpenViewW
MsiDecomposeDescriptorA
MsiDecomposeDescriptorW
MsiDeleteUserDataA
MsiDeleteUserDataW
MsiDetermineApplicablePatchesA
MsiDetermineApplicablePatchesW
MsiDeterminePatchSequenceA
MsiDeterminePatchSequenceW
MsiDoActionA
MsiDoActionW
MsiEnableLogA
MsiEnableLogW
MsiEnableUIPreview
MsiEndTransaction
MsiEnumClientsA
MsiEnumClientsExA
MsiEnumClientsExW
MsiEnumClientsW
MsiEnumComponentCostsA
MsiEnumComponentCostsW
MsiEnumComponentQualifiersA
MsiEnumComponentQualifiersW
MsiEnumComponentsA
MsiEnumComponentsExA
MsiEnumComponentsExW
MsiEnumComponentsW
MsiEnumFeaturesA
MsiEnumFeaturesW
MsiEnumPatchesA
MsiEnumPatchesExA
MsiEnumPatchesExW
MsiEnumPatchesW
MsiEnumProductsA
MsiEnumProductsExA
MsiEnumProductsExW
MsiEnumProductsW
MsiEnumRelatedProductsA
MsiEnumRelatedProductsW
MsiEvaluateConditionA
MsiEvaluateConditionW
MsiExtractPatchXMLDataA
MsiExtractPatchXMLDataW
MsiFormatRecordA
MsiFormatRecordW
MsiGetActiveDatabase
MsiGetComponentPathA
MsiGetComponentPathExA
MsiGetComponentPathExW
MsiGetComponentPathW
MsiGetComponentStateA
MsiGetComponentStateW
MsiGetDatabaseState
MsiGetFeatureCostA
MsiGetFeatureCostW
MsiGetFeatureInfoA
MsiGetFeatureInfoW
MsiGetFeatureStateA
MsiGetFeatureStateW
MsiGetFeatureUsageA
MsiGetFeatureUsageW
MsiGetFeatureValidStatesA
MsiGetFeatureValidStatesW
MsiGetFileHashA
MsiGetFileHashW
MsiGetFileSignatureInformationA
MsiGetFileSignatureInformationW
MsiGetFileVersionA
MsiGetFileVersionW
MsiGetLanguage
MsiGetLastErrorRecord
MsiGetMode
MsiGetPatchFileListA
MsiGetPatchFileListW
MsiGetPatchInfoA
MsiGetPatchInfoExA
MsiGetPatchInfoExW
MsiGetPatchInfoW
MsiGetProductCodeA
MsiGetProductCodeFromPackageCodeA
MsiGetProductCodeFromPackageCodeW
MsiGetProductCodeW
MsiGetProductInfoA
MsiGetProductInfoExA
MsiGetProductInfoExW
MsiGetProductInfoFromScriptA
MsiGetProductInfoFromScriptW
MsiGetProductInfoW
MsiGetProductPropertyA
MsiGetProductPropertyW
MsiGetPropertyA
MsiGetPropertyW
MsiGetShortcutTargetA
MsiGetShortcutTargetW
MsiGetSourcePathA
MsiGetSourcePathW
MsiGetSummaryInformationA
MsiGetSummaryInformationW
MsiGetTargetPathA
MsiGetTargetPathW
MsiGetUserInfoA
MsiGetUserInfoW
MsiInstallMissingComponentA
MsiInstallMissingComponentW
MsiInstallMissingFileA
MsiInstallMissingFileW
MsiInstallProductA
MsiInstallProductW
MsiInvalidateFeatureCache
MsiIsProductElevatedA
MsiIsProductElevatedW
MsiJoinTransaction
MsiLoadStringA
MsiLoadStringW
MsiLocateComponentA
MsiLocateComponentW
MsiMessageBoxA
MsiMessageBoxExA
MsiMessageBoxExW
MsiMessageBoxW
MsiNotifySidChangeA
MsiNotifySidChangeW
MsiOpenDatabaseA
MsiOpenDatabaseW
MsiOpenPackageA
MsiOpenPackageExA
MsiOpenPackageExW
MsiOpenPackageW
MsiOpenProductA
MsiOpenProductW
MsiPreviewBillboardA
MsiPreviewBillboardW
MsiPreviewDialogA
MsiPreviewDialogW
MsiProcessAdvertiseScriptA
MsiProcessAdvertiseScriptW
MsiProcessMessage
MsiProvideAssemblyA
MsiProvideAssemblyW
MsiProvideComponentA
MsiProvideComponentFromDescriptorA
MsiProvideComponentFromDescriptorW
MsiProvideComponentW
MsiProvideQualifiedComponentA
MsiProvideQualifiedComponentExA
MsiProvideQualifiedComponentExW
MsiProvideQualifiedComponentW
MsiQueryComponentStateA
MsiQueryComponentStateW
MsiQueryFeatureStateA
MsiQueryFeatureStateExA
MsiQueryFeatureStateExW
MsiQueryFeatureStateFromDescriptorA
MsiQueryFeatureStateFromDescriptorW
MsiQueryFeatureStateW
MsiQueryProductStateA
MsiQueryProductStateW
MsiRecordClearData
MsiRecordDataSize
MsiRecordGetFieldCount
MsiRecordGetInteger
MsiRecordGetStringA
MsiRecordGetStringW
MsiRecordIsNull
MsiRecordReadStream
MsiRecordSetInteger
MsiRecordSetStreamA
MsiRecordSetStreamW
MsiRecordSetStringA
MsiRecordSetStringW
MsiReinstallFeatureA
MsiReinstallFeatureFromDescriptorA
MsiReinstallFeatureFromDescriptorW
MsiReinstallFeatureW
MsiReinstallProductA
MsiReinstallProductW
MsiRemovePatchesA
MsiRemovePatchesW
MsiSequenceA
MsiSequenceW
MsiSetComponentStateA
MsiSetComponentStateW
MsiSetExternalUIA
MsiSetExternalUIRecord
MsiSetExternalUIW
MsiSetFeatureAttributesA
MsiSetFeatureAttributesW
MsiSetFeatureStateA
MsiSetFeatureStateW
MsiSetInstallLevel
MsiSetInternalUI
MsiSetMode
MsiSetOfflineContextW
MsiSetPropertyA
MsiSetPropertyW
MsiSetTargetPathA
MsiSetTargetPathW
MsiSourceListAddMediaDiskA
MsiSourceListAddMediaDiskW
MsiSourceListAddSourceA
MsiSourceListAddSourceExA
MsiSourceListAddSourceExW
MsiSourceListAddSourceW
MsiSourceListClearAllA
MsiSourceListClearAllExA
MsiSourceListClearAllExW
MsiSourceListClearAllW
MsiSourceListClearMediaDiskA
MsiSourceListClearMediaDiskW
MsiSourceListClearSourceA
MsiSourceListClearSourceW
MsiSourceListEnumMediaDisksA
MsiSourceListEnumMediaDisksW
MsiSourceListEnumSourcesA
MsiSourceListEnumSourcesW
MsiSourceListForceResolutionA
MsiSourceListForceResolutionExA
MsiSourceListForceResolutionExW
MsiSourceListForceResolutionW
MsiSourceListGetInfoA
MsiSourceListGetInfoW
MsiSourceListSetInfoA
MsiSourceListSetInfoW
MsiSummaryInfoGetPropertyA
MsiSummaryInfoGetPropertyCount
MsiSummaryInfoGetPropertyW
MsiSummaryInfoPersist
MsiSummaryInfoSetPropertyA
MsiSummaryInfoSetPropertyW
MsiUseFeatureA
MsiUseFeatureExA
MsiUseFeatureExW
MsiUseFeatureW
MsiVerifyDiskSpace
MsiVerifyPackageA
MsiVerifyPackageW
MsiViewClose
MsiViewExecute
MsiViewFetch
MsiViewGetColumnInfo
MsiViewGetErrorA
MsiViewGetErrorW
MsiViewModify
QueryInstanceCount
__wine_msi_call_dll_function

Sections

.text
Size: 676KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 148KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 4KB - Virtual size: 53B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 324B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 324KB - Virtual size: 322KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/14
Size: 4KB - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 4KB - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/41
Size: 4KB - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/55
Size: 4KB - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/67
Size: 4KB - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 4KB - Virtual size: 161B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/91
Size: 4KB - Virtual size: 158B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

743bc5e3c7084975005d91d59dc79b33

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

cabinet

comctl32

crypt32

gdi32

imagehlp

kernel32

mspatcha

ntdll

odbccp32

ole32

oleaut32

rpcrt4

shell32

shlwapi

sxs

ucrtbase

urlmon

user32

version

wininet

wintrust

Exports

Exports

Sections

.text Size: 676KB - Virtual size: 675KB

.data Size: 4KB - Virtual size: 1KB

.rodata Size: 4KB - Virtual size: 2KB

.rdata Size: 148KB - Virtual size: 145KB

.buildid Size: 4KB - Virtual size: 53B

/4 Size: 88KB - Virtual size: 86KB

.bss Size: - Virtual size: 324B

.edata Size: 12KB - Virtual size: 9KB

.idata Size: 12KB - Virtual size: 10KB

.rsrc Size: 324KB - Virtual size: 322KB

.reloc Size: 36KB - Virtual size: 32KB

/14 Size: 4KB - Virtual size: 32B

/29 Size: 4KB - Virtual size: 36B

/41 Size: 4KB - Virtual size: 20B

/55 Size: 4KB - Virtual size: 88B

/67 Size: 4KB - Virtual size: 56B

/80 Size: 4KB - Virtual size: 161B

/91 Size: 4KB - Virtual size: 158B

.text
Size: 676KB - Virtual size: 675KB

.data
Size: 4KB - Virtual size: 1KB

.rodata
Size: 4KB - Virtual size: 2KB

.rdata
Size: 148KB - Virtual size: 145KB

.buildid
Size: 4KB - Virtual size: 53B

/4
Size: 88KB - Virtual size: 86KB

.bss
Size: - Virtual size: 324B

.edata
Size: 12KB - Virtual size: 9KB

.idata
Size: 12KB - Virtual size: 10KB

.rsrc
Size: 324KB - Virtual size: 322KB

.reloc
Size: 36KB - Virtual size: 32KB

/14
Size: 4KB - Virtual size: 32B

/29
Size: 4KB - Virtual size: 36B

/41
Size: 4KB - Virtual size: 20B

/55
Size: 4KB - Virtual size: 88B

/67
Size: 4KB - Virtual size: 56B

/80
Size: 4KB - Virtual size: 161B

/91
Size: 4KB - Virtual size: 158B