Уведомление от 03.07.2026.rar
- SHA256 ccfbbe5b03875658628f390d655fe1f469d0b1ae5e37288efe396fb1a3b32a5c
Password
0207
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
GUP.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
16 signatures
300 seconds
Behavioral task
behavioral2
Sample
GUP.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
7 signatures
300 seconds
Behavioral task
behavioral3
Sample
README.txt
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
300 seconds
Behavioral task
behavioral4
Sample
README.txt
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
1 signatures
300 seconds
Behavioral task
behavioral5
Sample
libcurl.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
300 seconds
General
- Target Уведомление от 03.07.2026.rar
- Size 3.1MB
- Sample260703-yeacvaby2n
- SHA256 ccfbbe5b03875658628f390d655fe1f469d0b1ae5e37288efe396fb1a3b32a5c
- MD5 9bb7cf8a93dd070a7fedb22822a2ed9b
- SHA1 cea3257b9a2ff234e16881f63cd2fadb199a67aa
- SHA512 14d02b1703072cdf74750d3a7cfc54cab69f7d0c46968ed142091e87e393bb09b78cb84ac87bac41dddc84c14ddcbc2dd187ab5f38c0ae902ea35f76a1dcec6b
- SSDEEP 98304:21rr0xO/jE9yV3sAtNRiEwwnb6XJOLpXK:CrQxO/j93t+An0JOLo
- TLSH T1FAE533E1BF2D07C09F55D43FC159DC8968443571AAAFEDA0A7CA130AD4E2F731A2B099
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- DLL Hijacking vulnerability 1 IoCs
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
resource unpack001/libcurl.dll - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/libcurl.dll
File Explorer
-
Уведомление от 03.07.2026.rar.zip 3.1MB
-
GUP.exe.exe 789KB
-
README.txt112B
-
__MACOSX/._GUP.exe163B
-
__MACOSX/._README.txt163B
-
__MACOSX/._libcurl.dll163B
-
libcurl.dll.dll 10.2MB
GUP.exe
- IMPHASH 0b43764663ba024c8202f35227fe0bff
- SHA256 b9c965aa538c21b4702ec7e4f3ac47fc999e1cd505d69e0896a309f7956bb351
- MD5 7744ed6fac4775706938298f9cb5ba0d
- SHA1 2f20777a19b81a4b37de89e4d5a9b8eda21b51a6
- SHA512 9a6d02f58367c3bb728e81566685b0292232e4cd3e5c6b4eed65928026115e7a1fe20e1248950431a5a9d0b5e477310d756f9a70b9337edebee9b2a9acae47fb
- SSDEEP 12288:r/uMr7FsWEt/e51oHpbIp+UfhbkK4crxzB4uhBTpbAhTPCUe2F:7uOzC9IVkK4CxVToTPB
- TLSH T18C058E2A676C01F8E1B7E27989954507F7B6B859137197CF43A0867A2F236E05F3E320
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
0207
Digest
90:4a:9e:b9:9d:36:e8:4b:ee:15:f4:30:0b:9f:29:d8:db:0d:56:16:66:2a:d2:ff:0f:7e:36:0c:b9:b4:17:dd
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR
Chains
May 12, 2024
CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Notepad\+\+,O=Notepad\+\+,L=Saint Cloud,ST=Ile-de-France,C=FR
Serial Number
03:aa:64:92:de:9d:96:a9:0a:4b:ca:97:be:ad:b4:4a
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 13, 2022 - May 14, 2025
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
261552
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
libcurl
curl_easy_setopt
curl_easy_cleanup
curl_easy_init
curl_easy_perform
comctl32
InitCommonControlsEx
shlwapi
PathFileExistsA
PathFindExtensionW
PathIsDirectoryW
PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
kernel32
CreateFileW
HeapSize
SetEndOfFile
HeapReAlloc
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
CreateDirectoryW
lstrlenW
GetCurrentThreadId
Sleep
OutputDebugStringW
DeleteFileW
CreateThread
lstrcpyW
lstrcmpW
MulDiv
MoveFileW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseSemaphore
InitializeCriticalSection
WriteConsoleW
CreateEventW
GetLastError
SetEvent
CloseHandle
ResetEvent
CreateSemaphoreW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetConsoleOutputCP
WaitForSingleObject
FlushFileBuffers
GetFileSizeEx
HeapAlloc
HeapFree
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
MultiByteToWideChar
WideCharToMultiByte
WakeConditionVariable
TryAcquireSRWLockExclusive
WaitForSingleObjectEx
GetExitCodeThread
RtlUnwind
InitializeCriticalSectionEx
EncodePointer
DecodePointer
GetLocaleInfoEx
LCMapStringEx
GetProcAddress
GetStringTypeW
CompareStringEx
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ReadFile
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetStdHandle
WriteFile
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
user32
CallNextHookEx
EndDialog
SetWindowTextW
SetDlgItemTextW
CreateWindowExW
MessageBoxA
UnhookWindowsHookEx
SetWindowsHookExW
GetDlgItemInt
SystemParametersInfoW
SetDlgItemInt
DialogBoxParamW
LoadImageW
ReleaseDC
MessageBoxW
SendMessageW
SetWindowPos
GetDC
GetWindowRect
FindWindowExW
GetDlgItemTextW
gdi32
GetDeviceCaps
shell32
SHGetFolderPathW
ShellExecuteW
SHFileOperationW
Name
.text
Size
599KB
Virtual Size
598KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
135KB
Virtual Size
134KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=30795,
count=190, id=261, version=30795,
count=16, id=260, version=30795,
count=1, productName=Unmarked objects (old),
count=1, id=253, version=33218,
count=90, id=261, version=33218,
count=16, id=260, version=33218,
count=18, id=259, version=33218,
count=12, id=257, version=30795,
count=3, id=257, version=33522,
count=182, id=1, productName=Unmarked objects,
count=35, id=265, version=33522,
count=1, id=255, version=33522,
count=1, id=151,
count=1, id=258, version=33522,
README.txt
- SHA256 15de4aab8d9ec1864d286f9007952d18919a4b1599d068ebedb3ede021d830bf
- MD5 779d0fad21b1316d1546477c8b6c631e
- SHA1 46d6d83025fab1e03b8ab266a32242e866405a60
- SHA512 9d5acb8c878b4822c88755503933ee31b5aafa8d706899c551a544465101dc407f45c96bd6fe52360073e8a207790130c898b5c91d8cba6d6636a803919ca679
- TLSH T166B0927F0455917AA90B02CB2521596A94B99625EB8D80518EE812DE17369A932291A0
- MD5 SHA1 SHA512 TLSH
__MACOSX/._GUP.exe
- SHA256 4c672563d0ba905266413b18439a211e3e3408ed8e93b419b91fa2880952d373
- MD5 787f8c168266ac703b81de9ea51e8ed3
- SHA1 b3c4615b6d4763e51ca9aeecd3649e5f5597b274
- SHA512 d2682dabcc28fd51f7e442da5638284fc963b3e527a2536b2fe2a84239d6031d0dd9f45a13aa27acd9a38fd8f417e6070f8608e8d125be9010ac34b1287ae11b
- TLSH T14FC012A45AC0C2B0C45840340AC37D1EB3E594B491B71522714D44810700310679020A
- MD5 SHA1 SHA512 TLSH
__MACOSX/._README.txt
- SHA256 4c672563d0ba905266413b18439a211e3e3408ed8e93b419b91fa2880952d373
- MD5 787f8c168266ac703b81de9ea51e8ed3
- SHA1 b3c4615b6d4763e51ca9aeecd3649e5f5597b274
- SHA512 d2682dabcc28fd51f7e442da5638284fc963b3e527a2536b2fe2a84239d6031d0dd9f45a13aa27acd9a38fd8f417e6070f8608e8d125be9010ac34b1287ae11b
- TLSH T14FC012A45AC0C2B0C45840340AC37D1EB3E594B491B71522714D44810700310679020A
- MD5 SHA1 SHA512 TLSH
__MACOSX/._libcurl.dll
- SHA256 4c672563d0ba905266413b18439a211e3e3408ed8e93b419b91fa2880952d373
- MD5 787f8c168266ac703b81de9ea51e8ed3
- SHA1 b3c4615b6d4763e51ca9aeecd3649e5f5597b274
- SHA512 d2682dabcc28fd51f7e442da5638284fc963b3e527a2536b2fe2a84239d6031d0dd9f45a13aa27acd9a38fd8f417e6070f8608e8d125be9010ac34b1287ae11b
- TLSH T14FC012A45AC0C2B0C45840340AC37D1EB3E594B491B71522714D44810700310679020A
- MD5 SHA1 SHA512 TLSH
libcurl.dll
- IMPHASH 6973030e9fc37f4b0154f53f2f730681
- SHA256 a980505285bc469dc4b19a9df9d48db17cd28f97c56b68ef11dadb8c5023040e
- MD5 f0eeedaa0577440569080f61b180f353
- SHA1 8c82acf8f1349b59166882452308e903205e6db2
- SHA512 f4a7ea241496650353830dc9a95d570b5251d139b286db0a9835cb59554528b259c90208640a1d3a6980d719f4dbacce0ae452e293101e92c38abe73e9f3c5d2
- SSDEEP 49152:FhsW01a/VHVYsNhKlrzPtGKO7CMwTO5cZuvsvoZhebKmpqszcbf5NYCIixa+3RGA:J7
- TLSH T17EB60773644D32CB58920453E112A0F38CBDE936A71A92E5D48F902D39EE0ED956FFB1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
Password
0207
PE Signature issue
Digest
e6:1c:e8:9f:55:67:83:36:87:31:a3:86:63:41:8d:1b:16:c9:a7:b3:7e:8e:82:d6:2f:bb:67:9f:9c:fc:3f:4e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Beacon Interactive Ltd.,OU=Product AF14A609,O=Beacon Interactive Ltd.,L=Reston,ST=Maryland,C=AT
Chains
Jun 29, 2026
CN=Beacon Interactive Ltd.,OU=Product AF14A609,O=Beacon Interactive Ltd.,L=Reston,ST=Maryland,C=AT
Subject
CN=Beacon Interactive Ltd.,OU=Product AF14A609,O=Beacon Interactive Ltd.,L=Reston,ST=Maryland,C=AT
Serial Number
59:a0:30:92:e2:c9:97:9b:4c:b8:33:80:a3:86:57:b9
Issuer
CN=Beacon Interactive Ltd.,OU=Product AF14A609,O=Beacon Interactive Ltd.,L=Reston,ST=Maryland,C=AT
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 29, 2026 - Jun 29, 2029
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
0
Major OS version
6
Entry point
45524
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleFileNameW
GetTickCount64
Sleep
GetCommandLineW
GetLocalTime
GetEnvironmentVariableW
VirtualFree
WaitForSingleObject
CloseHandle
GetProcessHeap
HeapAlloc
HeapReAlloc
HeapFree
WideCharToMultiByte
DisableThreadLibraryCalls
GetCurrentProcessId
CompareStringW
SetCurrentDirectoryW
GetUserDefaultUILanguage
GetDriveTypeW
GetTimeFormatW
GetProcAddress
GetModuleHandleA
QueryPerformanceFrequency
QueryPerformanceCounter
LoadLibraryA
GetModuleHandleW
GetSystemTime
GetCurrentThreadId
ExpandEnvironmentStringsW
RtlAddFunctionTable
ExitThread
GetCurrentProcess
WriteConsoleW
CreateFileW
GetConsoleMode
GetConsoleOutputCP
MultiByteToWideChar
GetFileAttributesW
WriteFile
FlushFileBuffers
HeapSize
SetStdHandle
SetFilePointerEx
GetStringTypeW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
TerminateProcess
ExitProcess
GetModuleHandleExW
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
LCMapStringW
CmFree
CmMalloc
CmRealloc
GetOSMajorVersion
GetOSVersion
SzToWzWithAlloc
WzToSzWithAlloc
curl_easy_cleanup
curl_easy_init
curl_easy_perform
curl_easy_setopt
Name
.text
Size
102KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
7.3MB
Virtual Size
7.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2.7MB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ