Release_v3_0_3.zip
- SHA256 986c2538c7ddd48a5833e96ce4c6b53168eb0c2f2b90bef15c1e4e2e7a7c7791
Password
.
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LGSTray.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
LGSTray.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
15 signatures
150 seconds
Behavioral task
behavioral3
Sample
LGSTrayHID.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
LGSTrayHID.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
Behavioral task
behavioral5
Sample
hidapi.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
hidapi.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
General
- Target Release_v3_0_3.zip
- Size 3.2MB
- Sample260702-3gl7msc15n
- SHA256 986c2538c7ddd48a5833e96ce4c6b53168eb0c2f2b90bef15c1e4e2e7a7c7791
- MD5 7f3db14f4b0a7f159781476661540de8
- SHA1 4ce6273092b4d3049f8ef97be7dd9f6d0c7f89b0
- SHA512 554afddcf391166a3f1eafce9936cc6a6abab5b444fe1ccc5a1a76b1a0e9c2abdbca2ad2c7e0c7d7dff80f1d28164c8153ee7a11b14052f335300d5892604a59
- SSDEEP 98304:irkGyeJaFmxSW949Xerpr8b4aw0+oasH/0dVCis/ErZyB:iVyeJa4xBJao9/Ycc
- TLSH T1E3F5332E65FA07A0F902230A1BB5A4DF93D815DC77DACCB3D68E8A9D8E35D83C974051
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/LGSTray.exe unpack001/LGSTrayHID.exe unpack001/hidapi.dll
File Explorer
-
Release_v3_0_3.zip.zip 3.2MB
-
LGSTray.exe.exe 5.6MB
-
LGSTray.pdb44KB
-
LGSTrayCore.pdb26KB
-
LGSTrayHID.exe.exe 2.9MB
-
LGSTrayHID.pdb24KB
-
LGSTrayPrimitives.pdb13KB
-
appsettings.toml338B
-
hidapi.dll.dll 166KB
LGSTray.exe
- IMPHASH 6a91eb82bfd19d2706c7d43c46f7064e
- SHA256 f2bf538f4fa35b3bac8488b392ae9339840eeeafb6d534df740f69ca499dd0e6
- MD5 1d6c3667da1e9f3eae127df08d80383f
- SHA1 a6877ed16f3fcb5d5a475633832d497c785d1067
- SHA512 a2f69a13dae2cc98555ae537c560aa71090dc80b6c447d6684a3817a23db53e3b7d88c707835e592d1d9946d3db9909218fd5c2e41bcdedc5c519c009cf52e12
- SSDEEP 49152:CuRsn77j4uVLzTaYsI8h/wW6LueJt4jgxBBjHQtDaXHr8Z8DnWXuiNza:iz4uRXsI8h/wW6LueLbK8Dnia
- TLSH T1A8468D0527E94716C6FF8B72A07150224772F946E317E79F298CA5B92DB3B888E01377
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
.
Minor OS version
0
Major OS version
6
Entry point
70560
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FreeLibrary
LoadLibraryExW
OutputDebugStringW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
GetModuleHandleW
MultiByteToWideChar
GetFileAttributesExW
LoadLibraryA
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetWindowsDirectoryW
FindResourceW
GetLastError
ActivateActCtx
FindClose
CreateActCtxW
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_errno
abort
__p___wargv
_c_exit
_register_thread_local_exe_atexit_callback
terminate
__p___argc
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
fputwc
__p__commode
_set_fmode
fputws
_wfsopen
fflush
__stdio_common_vfwprintf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf
setvbuf
api-ms-win-crt-heap-l1-1-0
calloc
_set_new_mode
free
_callnewh
malloc
api-ms-win-crt-string-l1-1-0
toupper
_wcsdup
wcsncmp
wcsnlen
strcpy_s
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
_gmtime64_s
_time64
wcsftime
api-ms-win-crt-locale-l1-1-0
setlocale
___mb_cur_max_func
_configthreadlocale
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_lock_locales
_unlock_locales
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
90KB
Virtual Size
90KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, productName=Unmarked objects (old),
count=12, id=260, version=33030,
count=18, id=259, version=33030,
count=86, id=261, version=33030,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=30795,
count=201, id=1, productName=Unmarked objects,
count=10, id=265, version=33129,
count=1, id=258, version=33129,
LGSTray.pdb
- SHA256 d8f1baa5d1d1a1698ae5e0aff0d376889f3d7898f5cd9cf0100e9a5a3086a214
- MD5 7a56313fc327c0e5f45565844f448b8e
- SHA1 0f7834a212f4a361d5127c4994d95d31c8811bf3
- SHA512 c099b247191447661630175b368c3dd94dbf001906681fdcfdc1cb7306dbc5d59c03963c29b38a1d1eb8d19585eaab6b4d647b6e8e031fe24e4df709717afb73
- SSDEEP 768:sFd70NxwAm3S25t52RpwIIn+r01Cid9BWw3tfUCcca+807OFnhwa2a544:BmDAU+rG3dywW3Xnhwad
- TLSH T16C234973831ED612C5555932986AC64C3B3483266B05EF34F2DEBA06EE7F75803B3661
- MD5 SHA1 SHA512 SSDEEP TLSH
LGSTrayCore.pdb
- SHA256 a6aba39bdc0f6e9ed1f17e8152fb34bf761e5053430c861275748307748b5bfc
- MD5 5fdd5e83e714ee25664427262c8ca007
- SHA1 28c1031a8bf4f2450e5d14784e37dec4ce5c6ce3
- SHA512 a3456bb4bee12c354633df71ce2e295f7079e498e34b22e173f72120e12beb1bd39cd21c7e9c29ae8afa5984c0333b017f80c16b1caea6e09fc5c45fd7aa0b28
- SSDEEP 768:NXV+zu2xJEV+dp8w3t9wccua7MjT7BzTNF:NIo7QT7xhF
- TLSH T1F9C217338788EA20C14596B6A415C2AC3734C3212B44FF75F6CA6944EEAF79847F76A1
- MD5 SHA1 SHA512 SSDEEP TLSH
LGSTrayHID.exe
- IMPHASH 6a91eb82bfd19d2706c7d43c46f7064e
- SHA256 22ea509fee4035230b2998554c41b24e7ddd5bb5fff8b0cfb6e044b07d64a22f
- MD5 6fa9a67972c0a886ad2e83bf0aa361ce
- SHA1 cbe55f42bc7c68b9ec414829c534b762ddbdca6c
- SHA512 281d70ae8e47afe3b0ac33fb4ed168a2ef609e52291e0d125d61406fa76cdfacd9db31bb686c40472405155f4b4dba86871c6a1e39cc1b0d2084717e6e20f6ba
- SSDEEP 24576:81um5tnHaaHnbL9KtyXTQRPXAsdAp8h/wxAhULjKeCowZVh:6u6VLzTaYsI8h/wW6LueJq
- TLSH T14DE539156FB84716DBAE1A74BCA0B3F15B35A6076412E71A29CCE0983D637B04D213FE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
.
Minor OS version
0
Major OS version
6
Entry point
70560
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
kernel32
FreeLibrary
LoadLibraryExW
OutputDebugStringW
FindFirstFileExW
EnterCriticalSection
GetFullPathNameW
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
GetEnvironmentVariableW
GetModuleHandleW
MultiByteToWideChar
GetFileAttributesExW
LoadLibraryA
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
GetProcAddress
GetWindowsDirectoryW
FindResourceW
GetLastError
ActivateActCtx
FindClose
CreateActCtxW
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
SwitchToThread
GetCurrentThreadId
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_exit
exit
_initterm_e
_initterm
_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_errno
abort
__p___wargv
_c_exit
_register_thread_local_exe_atexit_callback
terminate
__p___argc
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
fputwc
__p__commode
_set_fmode
fputws
_wfsopen
fflush
__stdio_common_vfwprintf
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf
setvbuf
api-ms-win-crt-heap-l1-1-0
calloc
_set_new_mode
free
_callnewh
malloc
api-ms-win-crt-string-l1-1-0
toupper
_wcsdup
wcsncmp
wcsnlen
strcpy_s
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
api-ms-win-crt-time-l1-1-0
_gmtime64_s
_time64
wcsftime
api-ms-win-crt-locale-l1-1-0
setlocale
___mb_cur_max_func
_configthreadlocale
___lc_codepage_func
___lc_locale_name_func
__pctype_func
_lock_locales
_unlock_locales
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
90KB
Virtual Size
90KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
37KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, productName=Unmarked objects (old),
count=12, id=260, version=33030,
count=18, id=259, version=33030,
count=86, id=261, version=33030,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=9, id=257, version=30795,
count=201, id=1, productName=Unmarked objects,
count=10, id=265, version=33129,
count=1, id=258, version=33129,
LGSTrayHID.pdb
- SHA256 57828c47dd8f1c99ca44907cc5d92111cf9f701b7e891faa74ace9b4aeedd887
- MD5 6655aa5994b2a31de84fb229bb32fe1e
- SHA1 fb418c8af28b6484a7dea05416a942b35f031b52
- SHA512 e906059581b3a22fcade5087e7cc25726c1bc3c03329cc68a0151b14b1185a3d9879a37980c01c5f7b9f3c01105436b985809478d6aeb418fa8e9ae47a665831
- SSDEEP 384:bd85BS6DKC0mbsVfin6umT12FFtmbCdf1Oa0Mk390v3V2rvDK57Mog2WV1HjfoGV:bwBZOLm4i6fTw3tnccua7Mj277fCe6Cs
- TLSH T1FCB21637D358DA21C86554B3A925C68D3338C3216B45EF35F2CCB509EEAF79807B2269
- MD5 SHA1 SHA512 SSDEEP TLSH
LGSTrayPrimitives.pdb
- SHA256 49763c97ae16f5055c5d0ca245aa1c6966389af052926415fbc65f8e56bc4c35
- MD5 ef98f4f3dc9ac3e91de8fe460049abac
- SHA1 fd3296171bebffcbd3f437903bfea266c36996f2
- SHA512 85c1ee8135c58f5505aff832b2c0818a70231a23bc34c9b526705fb09e9d2dcff649b9e5079af3dc849057222c8017ca2ee9fc102fa4390dedf7482d36e5a3b2
- SSDEEP 384:0TX+W4yq1iCdf1Oa0Mk390v3V2r0K57Mog2WV1HjfoGImsl1EYnucB:0r+DyqJcc67Mj27EYV
- TLSH T12F52A4376749E324C48555B6642AC68C373483203741EEB8F2C9B948DEAF6C943F65BA
- MD5 SHA1 SHA512 SSDEEP TLSH
appsettings.toml
- SHA256 1eb24d9c58b4fcc765e77f6e3387dc5aae1bdc15d92a7959f6174b49203e8563
- MD5 66d9355bb52d25f5ef27452adbd08fc2
- SHA1 7f1ab680a559b88e633ce9099f07a223563739d2
- SHA512 e92ced6164fbe057537053e387d69251626941eb219f42470fe4df277e65cebcfcaaf3e34f62edc75c93d9ffe23427d96c2cb5c8dc91da8d80757a0890dbc1d1
- TLSH T15CE0263004827CA1C5B7C04FD3B2396357B29D54282B3CF408DE007C9C0BB194600CA3
- MD5 SHA1 SHA512 TLSH
hidapi.dll
- IMPHASH d5b5a79d9f9f5779c541baa1795f27e6
- SHA256 38bda32f593c054cacaf95bebce36f9bacc7fbd0740f7b6f72f6d368fbc84b4d
- MD5 d253da1826423aea22247bb16cb456bf
- SHA1 7f09d74188fa30858bb1703e02468461ed6d0b5d
- SHA512 adccb073162eac131e93fa51444cd375b79e744b4f701c9dee07a4bc287302d7e698698dafb62a0c26e45edcd8d5a003274684e1e640777b9340399ca2e86175
- SSDEEP 3072:rywx87+Bj0+rzHb/09hOV8RAIrrg+Bqv92XMgU492BR93:rfBj0+rrw9hOMxr7Bq4M393
- TLSH T1F0F35C56B3E001BBF9778238C9A75A11F7B2B4110760DB9F03A4437AAF277819D3AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
.
Minor OS version
0
Major OS version
6
Entry point
26120
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\repos\hidapi\windows\x64\Release\hidapi.pdb
kernel32
ReadFile
CancelIo
WriteFile
DeviceIoControl
WaitForSingleObject
CreateFileW
CreateEventW
MultiByteToWideChar
FormatMessageW
GetLastError
CloseHandle
LoadLibraryW
ResetEvent
GetOverlappedResult
GetProcAddress
FreeLibrary
WideCharToMultiByte
WriteConsoleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
GetStringTypeW
SetFilePointerEx
SetStdHandle
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
hid_close
hid_enumerate
hid_error
hid_exit
hid_free_enumeration
hid_get_device_info
hid_get_feature_report
hid_get_indexed_string
hid_get_input_report
hid_get_manufacturer_string
hid_get_product_string
hid_get_report_descriptor
hid_get_serial_number_string
hid_hotplug_deregister_callback
hid_hotplug_register_callback
hid_init
hid_open
hid_open_path
hid_read
hid_read_timeout
hid_send_feature_report
hid_set_nonblocking
hid_version
hid_version_str
hid_winapi_descriptor_reconstruct_pp_data
hid_winapi_get_container_id
hid_write
Name
.text
Size
104KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=139, id=261, version=30795,
count=10, id=260, version=30795,
count=1, productName=Unmarked objects (old),
count=33, id=261, version=33030,
count=15, id=260, version=33030,
count=17, id=259, version=33030,
count=3, id=257, version=30795,
count=97, id=1, productName=Unmarked objects,
count=1, id=264, version=33130,
count=1, id=256, version=33130,
count=1, id=255, version=33130,
count=1, id=151,
count=1, id=258, version=33130,