RevoicePro[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
RevoicePro.exe
Size 40.5MB
Sample260705-e6154ahv71
SHA256 c22a67afeae83ce55fcae93b9e4bd414be1e71d575cd6615cd4c9e857a2c7dba
MD5 b02bcb2fd9f5346a245f50c8eab7323c
SHA1 656fe09e83016f078fd78e179e43d66ae9e4a065
SHA512 13ddc95c2fd40f5c2fa1769dd7da41debc20d9b18f66d29dbb7cb54ac4b682e84628dea826c209957eee7e5dac736ed745f6b38820a738d7040296bc55554055
SSDEEP 393216:+uuEoSQHCgAzNdR7J9f7XBXycRsBnDI8ZtCzpWlExq7pBnc/t:gSQHCpPRt9f7XBXV8be1qd
TLSH
T11A97AF46B1D801D9F07AF07A419AA707F631382143245AFBB2ADC6A51FBB7D07E3A711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RevoicePro.exe

File Explorer

RevoicePro.exe

.exe 40.5MB

RevoicePro.exe

IMPHASH 30deaa2684220ac5c54aaca9cdd0b923
SHA256 c22a67afeae83ce55fcae93b9e4bd414be1e71d575cd6615cd4c9e857a2c7dba
MD5 b02bcb2fd9f5346a245f50c8eab7323c
SHA1 656fe09e83016f078fd78e179e43d66ae9e4a065
SHA512 13ddc95c2fd40f5c2fa1769dd7da41debc20d9b18f66d29dbb7cb54ac4b682e84628dea826c209957eee7e5dac736ed745f6b38820a738d7040296bc55554055
SSDEEP 393216:+uuEoSQHCgAzNdR7J9f7XBXycRsBnDI8ZtCzpWlExq7pBnc/t:gSQHCpPRt9f7XBXV8be1qd
TLSH
T11A97AF46B1D801D9F07AF07A419AA707F631382143245AFBB2ADC6A51FBB7D07E3A711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27131088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\actions-runner\_work\SA.Core\SA.Core\build\RevoicePro\APP\Ultra\Release\RevoicePro.exe\RevoicePro.pdb

wininet

InternetSetStatusCallbackW InternetGetLastResponseInfoW InternetQueryOptionW InternetCheckConnectionA InternetSetFilePointer InternetCrackUrlW InternetWriteFile InternetQueryDataAvailable InternetOpenUrlW InternetCanonicalizeUrlW DeleteUrlCacheEntryA FindCloseUrlCache FindNextUrlCacheEntryA FindFirstUrlCacheEntryA HttpQueryInfoW HttpEndRequestW InternetCheckConnectionW HttpSendRequestExW HttpOpenRequestW FtpOpenFileW InternetOpenW InternetConnectA InternetOpenA HttpSendRequestA HttpOpenRequestA InternetReadFile InternetConnectW InternetCloseHandle InternetSetOptionW

comctl32

InitCommonControlsEx ord345

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

rpcrt4

UuidCreate

crypt32

CertOpenStore CertCloseStore CertEnumCertificatesInStore CertFindCertificateInStore CertFreeCertificateContext CryptStringToBinaryA PFXImportCertStore CryptDecodeObjectEx CertAddCertificateContextToStore CertFindExtension CertGetNameStringA CryptQueryObject CertCreateCertificateChainEngine CertFreeCertificateChainEngine CertGetCertificateChain CertFreeCertificateChain

wintrust

WinVerifyTrust

psapi

GetModuleInformation EnumProcessModules

setupapi

SetupDiGetDeviceInstanceIdA SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailA SetupDiGetClassDevsW SetupDiGetDeviceRegistryPropertyW SetupDiEnumDeviceInfo

imagehlp

SymInitialize SymFromAddr SymGetModuleInfo64

dwmapi

DwmGetWindowAttribute DwmExtendFrameIntoClientArea

dwrite

DWriteCreateFactory

avrt

AvSetMmThreadCharacteristicsW

winmm

timeKillEvent timeSetEvent timeBeginPeriod timeGetTime PlaySoundW

winhttp

WinHttpGetProxyForUrl WinHttpGetIEProxyConfigForCurrentUser WinHttpSendRequest WinHttpReceiveResponse WinHttpOpenRequest WinHttpQueryDataAvailable WinHttpReadData WinHttpConnect WinHttpCloseHandle WinHttpOpen

ws2_32

recv listen htons htonl closesocket bind send accept WSAPoll __WSAFDIsSet connect ioctlsocket getpeername select socket setsockopt getsockname getsockopt inet_addr inet_ntoa ntohs recvfrom sendto WSAGetLastError getaddrinfo freeaddrinfo WSACleanup ntohl WSAIoctl WSASetLastError WSAStartup

kernel32

DeleteFileA CreateMutexW CreateFileMappingW InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection DeviceIoControl GetVersionExW lstrcmpiA WaitForMultipleObjects DecodePointer InitializeCriticalSectionEx RtlCaptureStackBackTrace GetEnvironmentVariableW SetCurrentDirectoryW GetCurrentDirectoryW GetDriveTypeW GetFileInformationByHandle GetFinalPathNameByHandleW GetLogicalDriveStringsW GetVolumeInformationW RemoveDirectoryW SetFileTime IsDebuggerPresent SetHandleInformation SetUnhandledExceptionFilter CreatePipe ConnectNamedPipe DisconnectNamedPipe PeekNamedPipe CreateNamedPipeW GetOverlappedResult CancelIo ExitProcess TerminateProcess GetExitCodeProcess GetCurrentThread SetThreadPriority GetThreadPriority TerminateThread CreateProcessW SetPriorityClass GlobalMemoryStatusEx SetLocalTime GetSystemDirectoryW GetComputerNameExW GetNativeSystemInfo GetSystemFirmwareTable GetModuleHandleW GetModuleHandleExW SetThreadAffinityMask CopyFileW ReplaceFileW CreateSymbolicLinkW GetLocaleInfoW GetCommandLineW AttachConsole GetFileAttributesA GetFileTime SetFilePointerEx GetWindowsDirectoryW MoveFileExW MulDiv VerSetConditionMask InitializeCriticalSectionAndSpinCount SleepEx VerifyVersionInfoW WaitNamedPipeA GetEnvironmentVariableA VirtualAlloc VirtualFree CreateThread GetComputerNameW ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW SetErrorMode GetLogicalDrives SetEnvironmentVariableW GetStringTypeExW LCMapStringW InitializeSListHead InterlockedPushEntrySList GlobalMemoryStatus DeleteTimerQueueTimer RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter IsProcessorFeaturePresent GetStartupInfoW EncodePointer LoadLibraryExW CreateActCtxW ActivateActCtx DeactivateActCtx FindActCtxSectionStringW QueryActCtxW GlobalDeleteAtom GlobalAddAtomW GlobalFindAtomW CompareStringW GetShortPathNameW lstrcmpiW GetThreadLocale SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GlobalReAlloc GlobalHandle LocalReAlloc GlobalGetAtomNameW VirtualProtect lstrcmpA CompareStringA GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW GetTickCount64 FileTimeToLocalFileTime FlushFileBuffers GetProfileIntW GlobalFlags GetSystemDefaultUILanguage GetUserDefaultUILanguage FindResourceExW SearchPathW CreateTimerQueueTimer VirtualLock VirtualUnlock CreateToolhelp32Snapshot Heap32ListFirst Heap32ListNext Heap32First Heap32Next Process32FirstW Process32NextW Thread32First Thread32Next Module32FirstW Module32NextW GetSystemDirectoryA MoveFileExA VerifyVersionInfoA GetStdHandle VirtualQuery GetFileAttributesExW GetFullPathNameA GetFullPathNameW GetTempPathA HeapCreate HeapDestroy HeapReAlloc HeapSize HeapValidate HeapCompact LockFile LockFileEx MapViewOfFile UnlockFile UnlockFileEx OutputDebugStringA FlushViewOfFile GetModuleFileNameW OutputDebugStringW MoveFileW ReadFile GetTempFileNameW FindNextFileW FindFirstFileW AreFileApisANSI GetLogicalProcessorInformation TlsFree TlsSetValue TlsGetValue TlsAlloc ResumeThread CreateWaitableTimerW SetWaitableTimer OpenEventA ResetEvent CreateEventW SystemTimeToFileTime CreateFileMappingA GetModuleHandleA UnmapViewOfFile MapViewOfFileEx GetSystemTime SwitchToThread GetCurrentProcessId GetProcessTimes CreateMutexA WaitForSingleObject ReleaseMutex SetLastError WriteFile SetFilePointer SetEndOfFile RemoveDirectoryA GetFileSizeEx FindNextFileA FindFirstFileA FindClose CreateFileA CreateDirectoryA lstrlenW lstrcmpW lstrcatA LoadLibraryW Sleep GetCurrentThreadId WaitForMultipleObjectsEx FindResourceW SizeofResource LockResource LoadResource GlobalLock GlobalUnlock GlobalSize GetSystemTimeAsFileTime GetCurrentProcess GetProcessHeap HeapFree HeapAlloc QueryPerformanceFrequency QueryPerformanceCounter DuplicateHandle GetSystemInfo CreateSemaphoreA ReleaseSemaphore FormatMessageW GetTempPathW MultiByteToWideChar WaitForSingleObjectEx lstrcpyW lstrcpyA SetFileAttributesW GetFileSize GetFileAttributesW GetDiskFreeSpaceExW DeleteFileW CreateFileW CreateDirectoryW GetStringTypeExA GetUserDefaultLCID LCMapStringA LoadLibraryA GlobalFree GlobalAlloc WideCharToMultiByte lstrlenA CreateEventA SetEvent CloseHandle LocalFree LocalAlloc GetTickCount FormatMessageA LoadLibraryExA GetProcAddress GetModuleFileNameA FreeLibrary GetLastError GetDiskFreeSpaceA LocalFileTimeToFileTime GetDiskFreeSpaceW RaiseException TryAcquireSRWLockExclusive GetLocaleInfoEx GetExitCodeThread GetStringTypeW InitOnceBeginInitialize InitOnceComplete WakeConditionVariable RtlPcToFileHeader FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork LCMapStringEx CompareStringEx GetCPInfo RtlUnwindEx RtlUnwind ExitThread FreeLibraryAndExitThread GetFileType GetTimeZoneInformation GetCommandLineA HeapQueryInformation SetStdHandle GetConsoleMode ReadConsoleW GetConsoleOutputCP FlsAlloc FlsGetValue FlsSetValue FlsFree GetDateFormatW GetTimeFormatW IsValidLocale EnumSystemLocalesW IsValidCodePage GetACP GetOEMCP FindFirstFileExW GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal WriteConsoleW

user32

UnpackDDElParam LoadImageW InsertMenuItemW LoadAcceleratorsW GetKeyNameTextW OffsetRect SetRectEmpty SendDlgItemMessageA DrawStateW LoadMenuW CharUpperW LoadBitmapW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps IsDialogMessageW CheckDlgButton SetDlgItemTextW GetWindowDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW RemoveMenu InsertMenuW WinHelpW GetScrollInfo SetScrollInfo GetLastActivePopup GetClassLongPtrW SetWindowLongW EqualRect AdjustWindowRectEx GetWindowTextLengthW RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow TrackPopupMenu SetMenu GetMenu GetDlgCtrlID IsIconic EndDeferWindowPos DeferWindowPos BeginDeferWindowPos SetWindowPlacement IsMenu GetClassInfoExW GetClassInfoW DrawMenuBar InflateRect GetSysColor GetMenuItemInfoW DestroyMenu GetMenuStringW SetActiveWindow IsWindowEnabled GetNextDlgTabItem GetDlgItem CopyImage GetSystemMetrics CreateDialogIndirectParamW FindWindowExA SetParent MoveWindow CallWindowProcW RegisterWindowMessageW GetWindowInfo GetDpiForWindow EnumDisplayMonitors EnumDisplayDevicesW EnumDisplaySettingsW GetIconInfo CreateIconIndirect DrawIconEx DestroyIcon DestroyCursor CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW EnumChildWindows WindowFromPoint MapWindowPoints ShowCaret SetCursorPos MessageBeep SetWindowTextW ValidateRgn GetUpdateRgn GetForegroundWindow GetSystemMenu EnableScrollBar DrawFrameControl VkKeyScanW ToUnicode GetKeyboardState EndDialog GetWindowPlacement SetWindowPos SetLayeredWindowAttributes UpdateLayeredWindow ShowWindow IsChild IsWindow GetMessageExtraInfo GetMessageTime GetMessagePos EnumWindows SetWindowLongPtrW GetWindowLongPtrW GetWindowTextW ReuseDDElParam DefFrameProcW DefMDIChildProcW TranslateMDISysAccel CharNextW MapDialogRect PostQuitMessage ShowOwnedPopups SetWindowContextHelpId SetRect RealChildWindowFromPoint GetSysColorBrush IsZoomed GetCaretPos GetInputState GetWindowRgn SubtractRect CreateMenu GetUpdateRect GetComboBoxInfo MapVirtualKeyExW IsCharLowerW GetDoubleClickTime DrawIcon InvertRect HideCaret WaitMessage FrameRect CopyIcon GetKeyboardLayout ToUnicodeEx LockWindowUpdate CharUpperBuffW SetClassLongPtrW RegisterClassW DestroyWindow CreateWindowExW RegisterClassExW DefWindowProcW SendNotifyMessageW SendMessageTimeoutW GetMessageW MonitorFromWindow GetWindowThreadProcessId AttachThreadInput UnregisterClassW wsprintfW GetMenuState GetClassNameW GetActiveWindow GetClipboardFormatNameW EnumClipboardFormats UpdateWindow ModifyMenuW GetMenuItemCount GetMenuItemID GetSubMenu CopyAcceleratorTableW DestroyAcceleratorTable CreateAcceleratorTableW GetDesktopWindow TranslateAcceleratorW SetForegroundWindow EnableMenuItem RedrawWindow ValidateRect EndPaint BeginPaint ReleaseDC GetDC LoadIconW GetWindowLongW SetCaretPos DestroyCaret CreateCaret MapVirtualKeyW GetFocus TrackMouseEvent GetAncestor TranslateMessage FillRect SetTimer SystemParametersInfoW GetMonitorInfoW MonitorFromPoint GetWindow GetTopWindow EnableWindow ReleaseCapture SetCapture GetCapture BringWindowToTop SetMenuDefaultItem SendMessageW LoadCursorW GetParent PtInRect IsRectEmpty IntersectRect CopyRect ScreenToClient ClientToScreen GetCursorPos SetCursor MessageBoxW GetClientRect InvalidateRect GetKeyState SetFocus IsWindowVisible PostMessageA KillTimer PeekMessageW DispatchMessageW GetWindowRect AppendMenuW CheckMenuItem CreatePopupMenu PostMessageW IsClipboardFormatAvailable EmptyClipboard RegisterClipboardFormatW GetClipboardData SetClipboardData CloseClipboard OpenClipboard LoadStringA DrawFocusRect DrawEdge GetNextDlgGroupItem PostThreadMessageW InvalidateRgn SendInput UnionRect GetMenuDefaultItem NotifyWinEvent SetWindowRgn GetSystemMetricsForDpi DeleteMenu GetAsyncKeyState

gdi32

GetNearestPaletteIndex GetPaletteEntries GetSystemPaletteEntries Polyline Polygon CreatePolygonRgn Ellipse CreateEllipticRgn OffsetRgn SetDIBColorTable SetPixel RealizePalette EnumFontFamiliesExW GetRgnBox GetTextCharsetInfo EnumFontFamiliesW CreateDIBitmap LPtoDP CombineRgn CreateBitmap CreateRectRgn CreateRectRgnIndirect GetRegionData RestoreDC SaveDC StretchBlt Rectangle SetStretchBltMode CreateDIBSection GetObjectW ExtFloodFill SetPaletteEntries RoundRect FillRgn FrameRgn GetBoundsRect PtInRegion GetViewportOrgEx GetWindowOrgEx SetPixelV GetTextFaceW SetBrushOrgEx SetBkMode SelectPalette ExtSelectClipRgn CreatePalette StretchDIBits CreateRoundRectRgn GetTextMetricsW DPtoLP SetRectRgn GetMapMode GetTextColor PatBlt SetMapMode SetMapperFlags SelectClipRgn DeleteObject CreateFontIndirectW GetBkColor SelectObject DeleteDC CreateDCW ScaleWindowExtEx ScaleViewportExtEx CreateCompatibleDC CreateCompatibleBitmap BitBlt OffsetWindowOrgEx OffsetViewportOrgEx GetDeviceCaps SetWindowOrgEx SetWindowExtEx CreateFontW SetViewportOrgEx SetViewportExtEx TextOutW MoveToEx SetTextAlign SetROP2 SetPolyFillMode GetLayout SetLayout RectVisible PtVisible LineTo IntersectClipRect GetWindowExtEx GetViewportExtEx GetStockObject GetPixel GetObjectType GetClipBox Escape CreateSolidBrush CreatePatternBrush CreatePen CreateHatchBrush CopyMetaFileW SetTextColor SetBkColor ExtTextOutW GetTextExtentPoint32W ExcludeClipRect

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

shell32

DragAcceptFiles SHGetKnownFolderPath DragQueryFileW DragFinish ord155 ord190 SHOpenFolderAndSelectItems SHAppBarMessage SHGetDesktopFolder SHAddToRecentDocs ExtractIconW SHGetFileInfoW SHGetSpecialFolderLocation Shell_NotifyIconW SHParseDisplayName SHBrowseForFolderW SHCreateShellItem SHGetPathFromIDListW SHGetMalloc ExtractAssociatedIconW CommandLineToArgvW SHGetSpecialFolderPathW SHFileOperationW ShellExecuteW

ole32

CoInitializeSecurity CoSetProxyBlanket CoInitialize OleInitialize OleUninitialize CoTaskMemAlloc CoUninitialize RevokeDragDrop DoDragDrop OleCreate OleSetContainedObject StringFromCLSID OleDuplicateData ReleaseStgMedium CoFreeUnusedLibraries CLSIDFromString CLSIDFromProgID CoDisconnectObject OleGetClipboard OleFlushClipboard OleIsCurrentClipboard CoLockObjectExternal CoGetClassObject StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CreateILockBytesOnHGlobal CoRevokeClassObject CoRegisterMessageFilter CreateStreamOnHGlobal OleLockRunning CoTaskMemFree CoCreateInstance CoCreateGuid CoInitializeEx RegisterDragDrop OleCreateMenuDescriptor OleDestroyMenuDescriptor OleTranslateAccelerator IsAccelerator

oleaut32

SafeArrayGetElement SafeArrayGetLBound SafeArrayGetUBound SafeArrayGetElemsize SysAllocString SysFreeString SafeArrayDestroy SafeArrayAccessData SafeArrayUnaccessData SafeArrayPutElement VariantInit SysStringLen VariantChangeType SysAllocStringLen VarBstrFromDate VariantClear OleCreateFontIndirect VariantCopy LoadRegTypeLi DispCallFunc LoadTypeLi SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayCreate SafeArrayCreateVector

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

OpenServiceA EventRegister CryptAcquireContextA InitializeSecurityDescriptor SetSecurityDescriptorDacl RegCloseKey RegOpenKeyExA RegQueryValueExA QueryServiceStatus CryptAcquireContextW CryptGenRandom CryptReleaseContext RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW OpenProcessToken AccessCheck DuplicateToken MapGenericMask GetUserNameW RegDeleteKeyW OpenSCManagerA RegDeleteValueW RegEnumKeyExW GetNamedSecurityInfoW CloseServiceHandle EventSetInformation RegGetValueW RegEnumValueW EventUnregister EventWriteTransfer ConvertStringSecurityDescriptorToSecurityDescriptorW CryptGetHashParam CryptCreateHash CryptHashData CryptDestroyHash RegSetValueW RegEnumKeyW RegQueryValueW GetFileSecurityW SetFileSecurityW

msimg32

AlphaBlend TransparentBlt

shlwapi

PathIsUNCW ord12 PathStripToRootW PathCreateFromUrlA PathFindFileNameW PathRemoveExtensionW PathFindExtensionW PathRemoveFileSpecW UrlUnescapeW StrFormatKBSizeW UrlCreateFromPathA

uxtheme

DrawThemeBackground IsThemeBackgroundPartiallyTransparent OpenThemeData CloseThemeData DrawThemeText GetCurrentThemeName GetThemePartSize GetWindowTheme GetThemeSysColor IsAppThemed DrawThemeParentBackground GetThemeColor

oledlg

OleUIBusyW

gdiplus

GdipCreateFromHDC GdipCreateBitmapFromHBITMAP GdipDrawImageI GdipDeleteGraphics GdipSetInterpolationMode GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipBitmapUnlockBits GdipCreateBitmapFromStream GdipGetImagePaletteSize GdipGetImagePalette GdipGetImagePixelFormat GdipGetImageHeight GdipGetImageWidth GdipGetImageGraphicsContext GdipDisposeImage GdipCloneImage GdiplusStartup GdipFree GdipAlloc GdiplusShutdown GdipDrawImageRectI

d2d1

ord2 ord1

dxgi

CreateDXGIFactory2

d3d11

D3D11CreateDevice

dcomp

DCompositionCreateDevice

imm32

ImmAssociateContextEx ImmGetCompositionStringW ImmReleaseContext ImmSetCandidateWindow ImmIsUIMessageW ImmGetOpenStatus ImmNotifyIME ImmAssociateContext ImmGetContext

oleacc

AccessibleObjectFromWindow LresultFromObject CreateStdAccessibleObject

iphlpapi

GetAdaptersInfo

Name

.text

Size

29.8MB

Virtual Size

29.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

IPPCODE

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5.6MB

Virtual Size

5.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.2MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

864KB

Virtual Size

864KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.itt_not

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

IPPDATA

Size

7KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=36, id=259, version=30795,

count=262, id=261, version=30795,

count=74, id=260, version=30795,

count=2, id=262, version=30795,

count=105, id=259, productName=VS2019 v16.0.0 build 27508, version=27508,

count=1465, productName=Unmarked objects (old),

count=82, id=260, productName=VS2015 UPD1 build 23506, version=23506,

count=19, id=261, version=24247,

count=6, id=253, version=33030,

count=444, id=261, version=33030,

count=20, id=260, version=33030,

count=27, id=259, version=33030,

count=57, id=261, version=27048,

count=5, id=261, version=31823,

count=1197, id=1, productName=Unmarked objects,

count=75, id=257, version=30795,

count=1, id=260, version=31935,

count=326, id=261, version=31935,

count=74, id=260, version=33133,

count=491, id=261, version=33133,

count=1, id=255, version=33133,

count=1, id=151,

count=1, id=258, version=33133,