DiskGeniusProfessional6.0.1.1645.o.zip
- SHA256 3f6f68de0cd038d6dc8ac543fb89b1c18a312a81f5b61b4d82edb7da1a632a95
Password
taiwebs.com
General
- Target DiskGeniusProfessional6.0.1.1645.o.zip
- Size 60.0MB
- Sample260714-yhdvfae13s
- SHA256 3f6f68de0cd038d6dc8ac543fb89b1c18a312a81f5b61b4d82edb7da1a632a95
- MD5 50748c73575813e7defbbc8828eaf469
- SHA1 80d9d14cca639ff36ee73e1dea73d2630df0d647
- SHA512 c4980938be9b7262e8586939ee4947db3e148fa642a8e0d9d075f9360a90518ddf6ed1752e71e30f283b649c79be985e73abca36e926ebd505ae7a91f54d0c33
- SSDEEP 1572864:Uz86UOYMYAdiSnHf9q0DJzxiOWIAfFuMC6Ffv3Hhn:JcnHVNDhxUJkCXn
- TLSH T178D7337E4FE49FD9FD85E05C26B189F586B81ACCA825925206C9373ED3F6304CF41AA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Insecure Codesign Algorithm 1 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/DiskGenius Professional 6.0.1.1645 Multilingual/DGEngSetup6011645.exe - Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/DiskGenius Professional 6.0.1.1645 Multilingual/crack/x64/msimg32.dll unpack001/DiskGenius Professional 6.0.1.1645 Multilingual/crack/x86/msimg32.dll - Inno Setup is an open-source installation builder for Windows applications. 1 IoCs
Inno Setup installer
resource yara_rule static1/unpack001/DiskGenius Professional 6.0.1.1645 Multilingual/DGEngSetup6011645.exe innosetup
File Explorer
-
DiskGeniusProfessional6.0.1.1645.o.zip.zip 60.0MB
-
DiskGenius Professional 6.0.1.1645 Multilingual/DGEngSetup6011645.exe.exe 60.5MB
-
DiskGenius Professional 6.0.1.1645 Multilingual/Readme.txt262B
-
DiskGenius Professional 6.0.1.1645 Multilingual/crack/x64/Options.ini389B
-
DiskGenius Professional 6.0.1.1645 Multilingual/crack/x64/msimg32.dll.dll 8KB
-
DiskGenius Professional 6.0.1.1645 Multilingual/crack/x86/Options.ini389B
-
DiskGenius Professional 6.0.1.1645 Multilingual/crack/x86/msimg32.dll.dll 6KB
DiskGenius Professional 6.0.1.1645 Multilingual/DGEngSetup6011645.exe
- IMPHASH 5a594319a0d69dbc452e748bcf05892e
- SHA256 a3670b91bfa882fd7aaa8e0b293e28f49b7cb893ca6d34c7a510c64412afac77
- MD5 74ab37b4c603dd9afcac313e8b8ca6ee
- SHA1 ca7d027e5240e263fe1f17e87d3159fda13d184a
- SHA512 c741af416a18f48819502e7a8c3436df2312462d9b80b41c7b94994030ad235a321d0586b3f078af83180a349e68d394a5d386a50296814d881fc0e99a40dd09
- SSDEEP 1572864:fukAvET3RgaFLFcX2Ef54HvPDMx5PdoOBZ8:BAvE7tFBo2EyHvPDMxhd3Z8
- TLSH T1A8D7332BB364693FD09E1736073383612D7BB9A598168C1E53F8490CDF6A0B41F3E95A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
-
Inno Setup is an open-source installation builder for Windows applications.
Inno Setup installer
Password
taiwebs.com
Digest
0c:f9:5d:6c:6a:e2:73:c0:f0:ee:6d:21:69:d5:63:48:6d:3e:e7:e2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91130302MA09JH3X4Y,CN=Qinhuangdao Yizhishu Software Development Co.\, Ltd.,O=Qinhuangdao Yizhishu Software Development Co.\, Ltd.,L=秦皇岛市,ST=河北省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c1ee7a7a6e79a87e5b29be7bb8fe6b58ee68a80e69cafe5bc80e58f91e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b2b3e58c97e79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
May 21, 2025
SERIALNUMBER=91130302MA09JH3X4Y,CN=Qinhuangdao Yizhishu Software Development Co.\, Ltd.,O=Qinhuangdao Yizhishu Software Development Co.\, Ltd.,L=秦皇岛市,ST=河北省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c1ee7a7a6e79a87e5b29be7bb8fe6b58ee68a80e69cafe5bc80e58f91e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b2b3e58c97e79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=91130302MA09JH3X4Y,CN=Qinhuangdao Yizhishu Software Development Co.\, Ltd.,O=Qinhuangdao Yizhishu Software Development Co.\, Ltd.,L=秦皇岛市,ST=河北省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c1ee7a7a6e79a87e5b29be7bb8fe6b58ee68a80e69cafe5bc80e58f91e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b2b3e58c97e79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=91130302MA09JH3X4Y,CN=Qinhuangdao Yizhishu Software Development Co.\, Ltd.,O=Qinhuangdao Yizhishu Software Development Co.\, Ltd.,L=秦皇岛市,ST=河北省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c1ee7a7a6e79a87e5b29be7bb8fe6b58ee68a80e69cafe5bc80e58f91e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b2b3e58c97e79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Serial Number
09:c4:04:b4:55:45:70:53:d0:e8:73:e8:3d:05:12:e9
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jan 18, 2024 - Feb 19, 2027
Subject
CN=DigiCert Timestamp 2024,O=DigiCert,C=US
Serial Number
0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 26, 2024 - Nov 25, 2035
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
745196
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
kernel32
GetACP
GetExitCodeProcess
LocalFree
CloseHandle
SizeofResource
VirtualProtect
VirtualFree
GetFullPathNameW
ExitProcess
HeapAlloc
GetCPInfoExW
RtlUnwind
GetCPInfo
GetStdHandle
GetModuleHandleW
FreeLibrary
HeapDestroy
ReadFile
CreateProcessW
GetLastError
GetModuleFileNameW
SetLastError
FindResourceW
CreateThread
CompareStringW
LoadLibraryA
ResetEvent
GetVersion
RaiseException
FormatMessageW
SwitchToThread
GetExitCodeThread
GetCurrentThread
LoadLibraryExW
LockResource
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
VirtualQueryEx
Sleep
EnterCriticalSection
SetFilePointer
LoadResource
SuspendThread
GetTickCount
GetFileSize
GetStartupInfoW
GetFileAttributesW
InitializeCriticalSection
GetThreadPriority
SetThreadPriority
GetCurrentProcess
VirtualAlloc
GetSystemInfo
GetCommandLineW
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
GetWindowsDirectoryW
VerSetConditionMask
GetDiskFreeSpaceW
FindFirstFileW
GetUserDefaultUILanguage
lstrlenW
QueryPerformanceCounter
SetEndOfFile
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
GetSystemDirectoryW
DeleteFileW
GetLocalTime
GetEnvironmentVariableW
WaitForSingleObject
WriteFile
ExitThread
DeleteCriticalSection
TlsGetValue
GetDateFormatW
SetErrorMode
IsValidLocale
TlsSetValue
CreateDirectoryW
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
GetUserDefaultLangID
RemoveDirectoryW
CreateEventW
SetThreadLocale
GetThreadLocale
comctl32
InitCommonControls
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
user32
CreateWindowExW
TranslateMessage
CharLowerBuffW
CallWindowProcW
CharUpperW
PeekMessageW
GetSystemMetrics
SetWindowLongW
MessageBoxW
DestroyWindow
CharUpperBuffW
CharNextW
MsgWaitForMultipleObjects
LoadStringW
ExitWindowsEx
DispatchMessageW
oleaut32
SysAllocStringLen
SafeArrayPtrOfIndex
VariantCopy
SafeArrayGetLBound
SafeArrayGetUBound
VariantInit
VariantClear
SysFreeString
SysReAllocStringLen
VariantChangeType
SafeArrayCreate
netapi32
NetWkstaGetInfo
NetApiBufferFree
advapi32
RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
OpenProcessToken
RegOpenKeyExW
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Name
.text
Size
718KB
Virtual Size
717KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
27KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
512B
Virtual Size
420B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
154B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
24B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
93B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
DiskGenius Professional 6.0.1.1645 Multilingual/Readme.txt
- SHA256 4e7f065810dcd6bb07f91d441f5311c68f5bb05355eefe3aa2a8a5936f022a06
- MD5 4d6efb754425805acb799486198ab25a
- SHA1 1d57411752eee1c7a2c784415df01ea073611391
- SHA512 d19fb8dbb35a15c09423a9ac9b6c62ed289aa013bc2a78e74ebb4c9c512221df0fd7c231dad0c5de3f4c0ff02aeedcca5aac886ca4af271dd918e7bb5b6ec961
- TLSH T1C7D02B4C8C77E3B0182AC30A83115D41E3EEB4063088054F168BC0428612E134BCD51A
- MD5 SHA1 SHA512 TLSH
DiskGenius Professional 6.0.1.1645 Multilingual/crack/x64/Options.ini
- SHA256 4d39196b30c23036758e3b83e65988f8e738dc881858d8a61c1b250af9380a83
- MD5 cdef7a6d2ab681ce47283eeb9c326d54
- SHA1 766d00ff9b64a364c755bcc7413c371733e50dbf
- SHA512 63d6b40c3354a72821b300b4f068e4488e92a0c5b21da2314183f23651bce51987aef220c76c8abc95fdcf0bb2b9eae226841ea42d902fcca4dea6a10f041de0
- TLSH T113E0F134E16B2D9232DEE038ECF65B171C5443352A8644D5B82C146E2D71C1C94880DC
- MD5 SHA1 SHA512 TLSH
DiskGenius Professional 6.0.1.1645 Multilingual/crack/x64/msimg32.dll
- IMPHASH 733a914a9919d0bca8e1634b1a240157
- SHA256 4c6cf5533d0c14bbb7696eec0f70d0f54365121e4fa4e9d7ca2d62f524ae7451
- MD5 d6597f746355ec3a0453ba4ecff9dc0e
- SHA1 9b4b573cb368321fa0a0fd045288ba014b383603
- SHA512 854f60ec1251f9c5ae69f11a867178b5eb00840aa776bbd324b3afc27ea7078fbac5d8216365994e71a9a3a73739b1585a116c7f2231a01c9be2b4b10b9cc564
- SSDEEP 96:PKKX1jkQCkcVBdi/oUw4WEPx9hqPf8l5uN3pH1RYYMjTM29uFMdxFy9:PFFzm0/vPPx9O8l5AZzEM29uwxF
- TLSH T11F020BAEE7730B6EC15AC774C1D71B3236B3B9004A65122F2870C34536901AB9BE575A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
taiwebs.com
Minor OS version
2
Major OS version
5
Entry point
6504
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
msimg32.pdb
ntdll
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
NtProtectVirtualMemory
kernel32
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
SetLastError
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExA
DisableThreadLibraryCalls
GetCurrentProcessId
GetCommandLineW
GetModuleHandleA
GetProcAddress
CreateThread
gdi32
GetDeviceCaps
GetObjectA
GetCurrentObject
GdiAlphaBlend
GdiGradientFill
GdiTransparentBlt
GetObjectType
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Name
.text
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=123, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=23, id=1, productName=Unmarked objects,
count=1, id=125, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=4, id=109, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=1, id=122, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
count=10, id=114, version=40310,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=120, productName=Windows Server 2003 SP1 DDK (for AMD64) build 40310, version=40310,
DiskGenius Professional 6.0.1.1645 Multilingual/crack/x86/Options.ini
- SHA256 4d39196b30c23036758e3b83e65988f8e738dc881858d8a61c1b250af9380a83
- MD5 cdef7a6d2ab681ce47283eeb9c326d54
- SHA1 766d00ff9b64a364c755bcc7413c371733e50dbf
- SHA512 63d6b40c3354a72821b300b4f068e4488e92a0c5b21da2314183f23651bce51987aef220c76c8abc95fdcf0bb2b9eae226841ea42d902fcca4dea6a10f041de0
- TLSH T113E0F134E16B2D9232DEE038ECF65B171C5443352A8644D5B82C146E2D71C1C94880DC
- MD5 SHA1 SHA512 TLSH
DiskGenius Professional 6.0.1.1645 Multilingual/crack/x86/msimg32.dll
- IMPHASH 2e743a9fa2fea0d247bd39122da9c5a9
- SHA256 7400f335cdc201ca40851a8723495e803c8c3a81d4419490433b8a174346dda3
- MD5 ea2553dca4947a5d66b803340ff6e6fe
- SHA1 463e17bee4a465dc7710cf2fc2ff8ebd4f9d880f
- SHA512 b1c54a38ec50d08f776e8bce36ac3e06c2caf6dc9d028334e0bc6735a6ced486b505876e2ce0f772742c6f80cf00d4fa1983273a2e2c530260f8b6f4c79e2be6
- SSDEEP 48:aGyYphbb/KBXbIy47CNs6zEmcGTr6uWmn5ebIQgwPjoMAlmUbyqlQcZcmRxu2:xTpN4bLxswE7GTrb5en7elmvPA
- TLSH T1AFC1192B633569F7D0934771C2C31B77773D9B042A62143F2409D61E28B40090A39F35
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
taiwebs.com
Minor OS version
1
Major OS version
5
Entry point
4364
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msimg32.pdb
gdi32
GdiGradientFill
GetObjectType
GetCurrentObject
GetObjectA
GetDeviceCaps
GdiAlphaBlend
GdiTransparentBlt
kernel32
SetLastError
DisableThreadLibraryCalls
GetVersionExA
FreeLibrary
GetCommandLineW
GetModuleHandleA
GetProcAddress
CreateThread
ntdll
NtProtectVirtualMemory
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
72B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=11, id=1, productName=Unmarked objects,
count=1, id=92, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,