General

  • Target
    UnionCrax.Direct.Setup.2.7.3.exe
  • Size 108.2MB
  • Sample260705-lpc59sbv4y
  • SHA256 5800ab8d951273d64c3d7843dc0b499a144bed21ebcd9e01e1110dd4e8be2d0d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • UnionCrax.Direct.Setup.2.7.3.exe
    .exe 108.2MB
  • $PLUGINSDIR/StdUtils.dll
    .dll 100KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/UAC.dll
    .dll 14KB
  • $PLUGINSDIR/WinShell.dll
    .dll 3KB
  • $PLUGINSDIR/app-64.7z
    .7z 107.7MB
  • LICENSE.electron.txt
    1KB
  • LICENSES.chromium.html
    8.7MB
  • UnionCrax.Direct.exe
    .exe 180.0MB
  • chrome_100_percent.pak
    148KB
  • chrome_200_percent.pak
    223KB
  • d3dcompiler_47.dll
    .dll 4.7MB
  • ffmpeg.dll
    .dll 2.8MB
  • icudtl.dat
    10.0MB
  • libEGL.dll
    .dll 481KB
  • libGLESv2.dll
    .dll 8.0MB
  • locales/af.pak
    520KB
  • locales/am.pak
    840KB
  • locales/ar.pak
    921KB
  • locales/bg.pak
    959KB
  • locales/bn.pak
    1.2MB
  • locales/ca.pak
    584KB
  • locales/cs.pak
    602KB
  • locales/da.pak
    545KB
  • locales/de.pak
    582KB
  • locales/el.pak
    1.0MB
  • locales/en-GB.pak
    474KB
  • locales/en-US.pak
    478KB
  • locales/es-419.pak
    575KB
  • locales/es.pak
    575KB
  • locales/et.pak
    523KB
  • locales/fa.pak
    855KB
  • locales/fi.pak
    534KB
  • locales/fil.pak
    604KB
  • locales/fr.pak
    622KB
  • locales/gu.pak
    1.2MB
  • locales/he.pak
    751KB
  • locales/hi.pak
    1.3MB
  • locales/hr.pak
    581KB
  • locales/hu.pak
    625KB
  • locales/id.pak
    516KB
  • locales/it.pak
    567KB
  • locales/ja.pak
    691KB
  • locales/kn.pak
    1.4MB
  • locales/ko.pak
    585KB
  • locales/lt.pak
    629KB
  • locales/lv.pak
    628KB
  • locales/ml.pak
    1.4MB
  • locales/mr.pak
    1.2MB
  • locales/ms.pak
    541KB
  • locales/nb.pak
    525KB
  • locales/nl.pak
    543KB
  • locales/pl.pak
    604KB
  • locales/pt-BR.pak
    567KB
  • locales/pt-PT.pak
    571KB
  • locales/ro.pak
    592KB
  • locales/ru.pak
    972KB
  • locales/sk.pak
    611KB
  • locales/sl.pak
    587KB
  • locales/sr.pak
    903KB
  • locales/sv.pak
    528KB
  • locales/sw.pak
    557KB
  • locales/ta.pak
    1.4MB
  • locales/te.pak
    1.3MB
  • locales/th.pak
    1.1MB
  • locales/tr.pak
    567KB
  • locales/uk.pak
    972KB
  • locales/ur.pak
    850KB
  • locales/vi.pak
    673KB
  • locales/zh-CN.pak
    484KB
  • locales/zh-TW.pak
    479KB
  • resources.pak
    5.5MB
  • resources/SDL2.dll
    .dll 1.6MB
  • resources/app-update.yml
    108B
  • resources/app.asar
    68.4MB
  • resources/app.asar.unpacked/assets/bin/aria2/cacert.pem
    187KB
  • resources/app.asar.unpacked/assets/bin/aria2/linux-x64/aria2c
    .elf 13.4MB
  • resources/app.asar.unpacked/assets/bin/aria2/win32-x64/aria2c.exe
    .exe 7.7MB
  • resources/app.asar.unpacked/electron/native/build/Release/obj/uc_overlay_native/addon.obj
    1.5MB
  • resources/app.asar.unpacked/electron/native/build/Release/obj/uc_overlay_native/gcpad_bridge.obj
    1.8MB
  • resources/app.asar.unpacked/electron/native/build/Release/obj/uc_overlay_native/injector.obj
    1.6MB
  • resources/app.asar.unpacked/electron/native/build/Release/obj/uc_overlay_native/pipe_server.obj
    1.9MB
  • resources/app.asar.unpacked/electron/native/build/Release/obj/uc_overlay_native/shared_memory.obj
    1.8MB
  • resources/app.asar.unpacked/electron/native/build/Release/obj/uc_overlay_native/uc_overl.9D338492.tlog/CL.command.1.tlog
    23KB
  • resources/app.asar.unpacked/electron/native/build/Release/obj/uc_overlay_native/uc_overl.9D338492.tlog/CL.read.1.tlog
    250KB
  • resources/app.asar.unpacked/electron/native/build/Release/obj/uc_overlay_native/uc_overl.9D338492.tlog/CL.write.1.tlog
    2KB
  • resources/app.asar.unpacked/electron/native/build/Release/obj/uc_overlay_native/uc_overl.9D338492.tlog/Cl.items.tlog
    1KB
  • resources/app.asar.unpacked/electron/native/build/Release/obj/uc_overlay_native/uc_overl.9D338492.tlog/link.command.1.tlog
    3KB
  • resources/app.asar.unpacked/electron/native/build/Release/obj/uc_overlay_native/uc_overl.9D338492.tlog/link.read.1.tlog
    7KB
  • resources/app.asar.unpacked/electron/native/build/Release/obj/uc_overlay_native/uc_overl.9D338492.tlog/link.secondary.1.tlog
    1KB
  • resources/app.asar.unpacked/electron/native/build/Release/obj/uc_overlay_native/uc_overl.9D338492.tlog/link.write.1.tlog
    1KB
  • resources/app.asar.unpacked/electron/native/build/Release/obj/uc_overlay_native/uc_overl.9D338492.tlog/uc_overlay_native.lastbuildstate
    192B
  • resources/app.asar.unpacked/electron/native/build/Release/obj/uc_overlay_native/uc_overlay_native.node.recipe
    334B
  • resources/app.asar.unpacked/electron/native/build/Release/obj/uc_overlay_native/volume_control.obj
    1.7MB
  • resources/app.asar.unpacked/electron/native/build/Release/obj/uc_overlay_native/win_delay_load_hook.obj
    106KB
  • resources/app.asar.unpacked/electron/native/build/Release/uc_overlay_native.exp
    1015B
  • resources/app.asar.unpacked/electron/native/build/Release/uc_overlay_native.iobj
    1.7MB
  • resources/app.asar.unpacked/electron/native/build/Release/uc_overlay_native.ipdb
    384KB
  • resources/app.asar.unpacked/electron/native/build/Release/uc_overlay_native.lib
    2KB
  • resources/app.asar.unpacked/electron/native/build/Release/uc_overlay_native.node
    .dll 216KB
  • resources/app.asar.unpacked/electron/native/build/Release/uc_overlay_native.pdb
    5.2MB
  • resources/app.asar.unpacked/electron/native/build/binding.sln
    871B
  • resources/app.asar.unpacked/electron/native/build/config.gypi
    16KB
  • resources/app.asar.unpacked/electron/native/build/uc_overlay_native.vcxproj
    .xml 13KB
  • resources/app.asar.unpacked/electron/native/build/uc_overlay_native.vcxproj.filters
    .xml 3KB
  • resources/app.asar.unpacked/node_modules/7zip-bin/7x.sh
    .sh 235B
  • resources/app.asar.unpacked/node_modules/7zip-bin/LICENSE.txt
    1KB
  • resources/app.asar.unpacked/node_modules/7zip-bin/index.js
    500B
  • resources/app.asar.unpacked/node_modules/7zip-bin/linux/arm/7za
    .elf 983KB
  • resources/app.asar.unpacked/node_modules/7zip-bin/linux/arm64/7za
    .elf 1.1MB
  • resources/app.asar.unpacked/node_modules/7zip-bin/linux/ia32/7za
    .elf 1.6MB
  • resources/app.asar.unpacked/node_modules/7zip-bin/linux/x64/7za
    .elf 1.4MB
  • resources/app.asar.unpacked/node_modules/7zip-bin/linux/x64/build.sh
    .sh .vbs 266B
  • resources/app.asar.unpacked/node_modules/7zip-bin/linux/x64/do-build.sh
    .sh .vbs 646B
  • resources/app.asar.unpacked/node_modules/7zip-bin/mac/arm64/7za
    .macho 965KB
  • resources/app.asar.unpacked/node_modules/7zip-bin/mac/x64/7za
    .macho 2.8MB
  • resources/app.asar.unpacked/node_modules/7zip-bin/package.json
    244B
  • resources/app.asar.unpacked/node_modules/7zip-bin/win/arm64/7za.exe
    1.0MB
  • resources/app.asar.unpacked/node_modules/7zip-bin/win/ia32/7za.exe
    .exe 773KB
  • resources/app.asar.unpacked/node_modules/7zip-bin/win/x64/7za.exe
    .exe 1.2MB
  • resources/app.asar.unpacked/node_modules/classic-level/LICENSE
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/UPGRADING.md
    5KB
  • resources/app.asar.unpacked/node_modules/classic-level/binding.js
    54B
  • resources/app.asar.unpacked/node_modules/classic-level/chained-batch.js
    700B
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/LICENSE
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/Makefile
    15KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/build_detect_platform
    .sh 8KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/db/builder.h
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/db/c_test.c
    11KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/db/db_impl.h
    7KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/db/db_iter.h
    803B
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/db/dbformat.h
    7KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/db/filename.h
    2KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/db/log_format.h
    896B
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/db/log_reader.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/db/log_writer.h
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/db/memtable.h
    2KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/db/skiplist.h
    11KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/db/snapshot.h
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/db/table_cache.h
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/db/version_edit.h
    2KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/db/version_set.h
    13KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/db/write_batch_internal.h
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/helpers/memenv/memenv.h
    699B
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/include/leveldb/c.h
    9KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/include/leveldb/cache.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/include/leveldb/comparator.h
    2KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/include/leveldb/db.h
    6KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/include/leveldb/dumpfile.h
    876B
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/include/leveldb/env.h
    12KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/include/leveldb/filter_policy.h
    2KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/include/leveldb/iterator.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/include/leveldb/options.h
    7KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/include/leveldb/slice.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/include/leveldb/status.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/include/leveldb/table.h
    2KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/include/leveldb/table_builder.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/include/leveldb/value_sink.h
    587B
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/include/leveldb/write_batch.h
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/port/atomic_pointer.h
    7KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/port/port.h
    755B
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/port/port_example.h
    4KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/port/port_posix.h
    4KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/port/thread_annotations.h
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/port/win/stdint.h
    855B
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/table/block.h
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/table/block_builder.h
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/table/filter_block.h
    2KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/table/format.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/table/iterator_wrapper.h
    2KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/table/merger.h
    867B
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/table/two_level_iterator.h
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/util/arena.h
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/util/coding.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/util/crc32c.h
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/util/env_posix_test_helper.h
    896B
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/util/hash.h
    524B
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/util/histogram.h
    925B
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/util/logging.h
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/util/mutexlock.h
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/util/posix_logger.h
    2KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/util/random.h
    2KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/util/testharness.h
    4KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb-1.20/util/testutil.h
    2KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/leveldb.gyp
    8KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/patches/001-value-sink.patch
    5KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/port-libuv/atomic_pointer_win.h
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/port-libuv/port_uv.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/port-libuv/port_uv.h.bak
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/port-libuv/stdint-msvc2008.h
    7KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/port-libuv/uv_condvar.h
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/leveldb/port-libuv/win_logger.h
    690B
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/freebsd/config.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/freebsd/snappy-stubs-public.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/linux/config.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/linux/snappy-stubs-public.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/mac/config.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/mac/snappy-stubs-public.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/openbsd/config.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/openbsd/snappy-stubs-public.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/snappy.gyp
    2KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/snappy/COPYING
    2KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/snappy/cmake/SnappyConfig.cmake
    56B
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/snappy/cmake/config.h.in
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/snappy/snappy-c.h
    5KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/snappy/snappy-internal.h
    9KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/snappy/snappy-sinksource.h
    7KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/snappy/snappy-stubs-internal.h
    16KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/snappy/snappy-stubs-public.h.in
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/snappy/snappy-test.h
    16KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/snappy/snappy.h
    9KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/solaris/config.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/solaris/snappy-stubs-public.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/win32/config.h
    771B
  • resources/app.asar.unpacked/node_modules/classic-level/deps/snappy/win32/snappy-stubs-public.h
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/index.js
    .js 8KB
  • resources/app.asar.unpacked/node_modules/classic-level/iterator.js
    3KB
  • resources/app.asar.unpacked/node_modules/classic-level/package.json
    1KB
  • resources/app.asar.unpacked/node_modules/classic-level/prebuilds/android-arm/classic-level.armv7.node
    .elf 333KB
  • resources/app.asar.unpacked/node_modules/classic-level/prebuilds/android-arm64/classic-level.armv8.node
    .elf 371KB
  • resources/app.asar.unpacked/node_modules/classic-level/prebuilds/darwin-x64+arm64/classic-level.node
    .bundle 695KB
  • resources/app.asar.unpacked/node_modules/classic-level/prebuilds/linux-arm/classic-level.armv6.node
    .elf 403KB
  • resources/app.asar.unpacked/node_modules/classic-level/prebuilds/linux-arm/classic-level.armv7.node
    .elf 403KB
  • resources/app.asar.unpacked/node_modules/classic-level/prebuilds/linux-arm64/classic-level.armv8.node
    .elf 441KB
  • resources/app.asar.unpacked/node_modules/classic-level/prebuilds/linux-x64/classic-level.musl.node
    .elf 473KB
  • resources/app.asar.unpacked/node_modules/classic-level/prebuilds/linux-x64/classic-level.node
    .elf 469KB
  • resources/app.asar.unpacked/node_modules/classic-level/prebuilds/win32-ia32/classic-level.node
    .dll 462KB
  • resources/app.asar.unpacked/node_modules/classic-level/prebuilds/win32-x64/classic-level.node
    .dll 529KB
  • resources/elevate.exe
    .exe 105KB
  • resources/gcpad.dll
    .dll 185KB
  • resources/uc-overlay-x64.dll
    .dll 185KB
  • snapshot_blob.bin
    309KB
  • v8_context_snapshot.bin
    671KB
  • vk_swiftshader.dll
    .dll 5.3MB
  • vk_swiftshader_icd.json
    106B
  • vulkan-1.dll
    .dll 874KB
  • $PLUGINSDIR/modern-wizard.bmp
    150KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsExec.dll
    .dll 6KB
  • $PLUGINSDIR/nsis7z.dll
    .dll 424KB
  • $R0/Uninstall UnionCrax.Direct.exe
    .exe 173KB
  • uninstallerIcon.ico
    20KB

UnionCrax.Direct.Setup.2.7.3.exe

  • IMPHASH b34f154ec913d2d2c435cbd644e91687
  • SHA256 5800ab8d951273d64c3d7843dc0b499a144bed21ebcd9e01e1110dd4e8be2d0d
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Password
6757676
Minor OS version
0
Major OS version
4
Entry point
13199
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths