Luxury Shield v18.9.0.zip
- SHA256 fabe13a339f9bc0679aa7370646e705946b2843765e49f943e0e5eb2bcd25b59
Overview
overview
8Static
static
4Luxury Shi...64.dll
windows10-2004-x64
5Luxury Shi...64.dll
windows11-ltsc_2024-x64
5Luxury Shi...86.dll
windows10-2004-x64
5Luxury Shi...86.dll
windows11-ltsc_2024-x64
5Luxury Shi...ge.exe
windows10-2004-x64
1Luxury Shi...ge.exe
windows11-ltsc_2024-x64
1Luxury Shi...er.exe
windows10-2004-x64
5Luxury Shi...er.exe
windows11-ltsc_2024-x64
5Luxury Shi...ch.exe
windows10-2004-x64
8Luxury Shi...ch.exe
windows11-ltsc_2024-x64
5Behavioral task
behavioral1
Sample
Luxury Shield v18.9.0/DNGRTx64.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Luxury Shield v18.9.0/DNGRTx64.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
Luxury Shield v18.9.0/DNGRTx86.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
Luxury Shield v18.9.0/DNGRTx86.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral5
Sample
Luxury Shield v18.9.0/ILMerge.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Luxury Shield v18.9.0/ILMerge.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Luxury Shield v18.9.0/Luxury Crypter.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral8
Sample
Luxury Shield v18.9.0/Luxury Crypter.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral9
Sample
Luxury Shield v18.9.0/Patch.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
13 signatures
150 seconds
General
- Target Luxury Shield v18.9.0.zip
- Size 15.3MB
- Sample260808-jcfphsbn5t
- SHA256 fabe13a339f9bc0679aa7370646e705946b2843765e49f943e0e5eb2bcd25b59
- MD5 0406fcae10aa4eaa2491816cee264f47
- SHA1 f576717996bb42b0d290a2c2e4fcb71684d03718
- SHA512 5bf55d2bd2acbf25d3b36d94b50eaeef7cad02164a67031b0445c4d35a96978588f22f00bca606e9482a786bd4746f0d08f1a86c30fc3dae90cab537eed2420a
- SSDEEP 393216:9/HGzqhmD6bYdNoXgarmSfvfir+2Bz5AdOyvkT32bJG4ndyW:9/mzqQD6bYd6trmSfvi+mdAd3M2bJ3H
- TLSH T1ABF6338789FEA3851AB4210A17D59CFB671EBE0C634038B4D8D8D76E31B938C15E56B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Costura .NET executable packer 1 IoCs
Costura packer aka Costura Fody, is an add-in for the .NET framework that embeds all external dependency .dll files as resources inside main executable.
resource yara_rule static1/unpack001/Luxury Shield v18.9.0/Luxury Crypter.exe costura - Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack001/Luxury Shield v18.9.0/DNGRTx64.dll unpack001/Luxury Shield v18.9.0/DNGRTx86.dll unpack001/Luxury Shield v18.9.0/ILMerge.exe unpack001/Luxury Shield v18.9.0/Luxury Crypter.exe unpack001/Luxury Shield v18.9.0/Patch.exe
File Explorer
-
Luxury Shield v18.9.0.zip.zip 15.3MB
-
Luxury Shield v18.9.0/DNGRTx64.dll.dll 5.3MB
-
Luxury Shield v18.9.0/DNGRTx86.dll.dll 1.2MB
-
Luxury Shield v18.9.0/ILMerge.exe.exe 668KB
-
Luxury Shield v18.9.0/Luxury Crypter.exe.exe 8.8MB
-
Luxury Shield v18.9.0/Patch.exe.exe 441KB
Luxury Shield v18.9.0/DNGRTx64.dll
- IMPHASH 4392f67b7daf185a12509fa625efba9b
- SHA256 ddeb3041ff32da6d6a98e90941ec18f45b7a8afb2b738394de3073d774dfde4a
- MD5 a428c3e775add87c7915381a88061888
- SHA1 aaf1ef5d8924e92961bf81d07c2d6886e1e01585
- SHA512 29f8d8787e41370e0373bd01021783190fb752f6b37881462ebf7edd9bda9f530f59c125c3ca1ba8f88dde1200a3015868eaf718a9ad09ffc2ad6396a0f098d1
- SSDEEP 98304:yTPCS2FAxDgcE2WT6GFmtMImE2g5gKU/eh8ZnPbLMvlllmUjTF3WlN/vd:hcD7mCtXmpd/egPbLMvXQ+GlBd
- TLSH T1C94622ED6144334CD41EC5349933FD09B2BA542E0BD6A9FEB2DB6BD0B79E014DA42B12
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4002973
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
GetVersionExW
FlsSetValue
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
wtsapi32
WTSSendMessageW
user32
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
a
b
�s ��j�B���lI*�]� �^g����'�h(/�}:�[e=}(�9���zA�5V$�UN��/]�;~�Ze���������j /���ICv�k�����]Tgm��|8 �F� �0�E�@k$eKw�
s�G
��Ԕ��9>���{��J��&��<w��h�G§� = �6�;�W�\���,|���d��@��c��|Ԟ��"��ba�Tv�@�52@"N�������z���?)�]����clQtU\�%:���e3�Y��|ˡ9%� l��&G�"L���O� q�fh��� ���p&����z�r*����|_��ڔ�q�?Ւ��5�d�QmȜF�'`�yʗ �t��e=�O�.8�P> ����\�����ry�wϤ���Wm���Xg�� ���+MY۳X�C �Q���<z$�+���a�UPqsW��q��L�`��f�"�;e�����{�<cn�C��7�'��2���h&��mbL8��q�Z��
v���M��r��R0h�Z$D�@�!,Rƾ{���~�a�[��Já���f��/�i���2֦>$fU��
I�ܴ�����g�x̿�J9���(���x�ց�\�� c�u �ː�/ �'/E3n���%����.%����$h���
ᐚ�8^3�
�uP�etB%���|b��9�� ��ڱ�z���{,�������*@}"��l>��=�4� HZA��*�Vi�?/���f�;�� V�dm�@8��{��ɐD��/�D�.����2g�NA�]���ꭩ�U���ʳ��y��Z�
���
^4g��d`�l���x �:�u�r�!��y���8(��ΥYE&��'�ƃſ���=�z��ݧ��.vr�Y�5�ٓ��O![o3� !���Na�̷�c�ӧ�� U���X��Nyz7����t��j��g���~�- �ߜ
?�
���P���V��~h<%5K�Ⱥ:��"( �vg� ǰ�Y �2�D25=D��EJ�w ����f� �̅����(
ܧ�o�A��L�"8!��r��.��"3�)Ұ�٤���4�5�c�B�7�X�ݠou�\�_#*�2��W��f4�`~� �� �0�L�;/�(�{�쀁g������`��y�wZ�GmN�� �yd�7pi'[���0 �ʳ���kj�Ew^��o���ȗUcJ��d�����)�I�w����@��6&.t��ũ��\gd$E�9�x�;� Md]v�'A��쪑-��_P��70J0i�W!D�f���l�RMt ]�o���y�,M|���0)<4�<����L�e� ���� ��9Dun�|�ksFXd
ǔ#��'< u�e��f=g�p���j�*�z5��*�a��lD�����eR�鮏v�R(m�ժmW��Կ��bk�L� #��|�F��&Q �;3W�y��~mZ���v�epYN`���b�]wb[�#�p��x�F �����H���^N�; u�M�t$�a����f���L�_ �_N�\����W�|N:$Y���F$;��U��X�ö��k�b�]���˰4�zJ���*�S��C�T�V�����z�1�t�t1� I� ��L�X J
ܵ����U�:,GKn����7?�(iY8mv^��ѳ_T��f�z�ˎ��]�_��n�讉�e�9���Q@�j(��&�+:Y0��� �����u�R7 aH���49�\�4���O f$V�� �ƜS��g4Y���nq�8����cr�)K�'�j�g��%~�S��8�:O��a_^0����g!͞>����*e,���M6[:',��W��e�g�`0]����#g��m�]d-Z��ܠ��� ������#�2ح�`W��
HE����stc(��V�;������k� ��=�p��[���b!3��_5'P\i#4[�f51�C��Tڥ���)�����
4�\9W�� Ԛ�k�ֆ�|�� �ũ�r�TԵD@ח��) @d�+�Q��+�����|�8aj@= GР{��$�x[� ��mQ�! fI�`@/�d �R k�3���{<�#gN^�`y� H]��2P�����F���xŅ<4S
ޙ��1�`������*0vƞs~�����3:��E7� ��Y2?'�O� ��鋇�̭����OG���:�P�<L �(��i @�D�>
��G�<���m �J�S�Y?չī��R��RO��F��408�0�����['��A&���RΧ�e���p��:���6�lw�ܺvH��M:.�� b���sM��W��)Л{����=u�8�h��)T.c:���?'����M'gWZ��Zl��i� u e:/���U!4�k Ƥr�K�/ zO�� lY�3KD�/\B���r)5
�I�� �
�=�ʽu�MC�a,u8�Dt� �b�wU���_���B �PC����Yk���W���[q&�!��7/�{���Ax
�E ȋ81�����
�~T���"���q��J]w�h�d����fɄ��0OU�X��L�ps=�R���C3�SG��8i�<F� ��~�� �H��Z�,p�w��ȅ�d�]f�p4�ޔ�*�6�W��u|�E�4�V X�(\�{���[���qϋ8�Hr���H�� �.Q_��օ,D�O��NVV����
Q���������!o.� !i���mp�6�i������Q�I�gD�'!3X~ gO� z$��X�+t/_�@�Q7,����ܮ�*�O��H��_���YI0\o~���/^�0ү��z��N���0�ma�1����!� �[�X�*�����0��^���jL �==����[>ɱ5��{_E�'�6De���iiC��?z��U^��n�9�T6,�T:.T3b����o�:^��0�d������/���fl~R/{>b� �t��u�#�>b&*�8 ��N�+���,���ÊX�7Xl\���-,c%�?��T�(>g �xruv8�l;�kV�� l��[C�~��e��ՠu�yc=1`�@(4�������[��.�? �N�K�-� ����tTgG~��|�~o���.]$M&n�U�}������=-�Ӝ�E;L����� w�咇�nT;�<� j�p���K� ���X�- �u^���0t�������
�PI��2֫��k��� �?(r�&��� b%��3
Name
.text
Size
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data0
Size
Virtual Size
3.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data1
Size
5.3MB
Virtual Size
5.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
204B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Luxury Shield v18.9.0/DNGRTx86.dll
- SHA256 5e97b1088fb36b687c19f1661e43b13b9bebe233fe2543f66e8b2f8ab07b891b
- MD5 a8a0481e38db76b75c4c61529e479b5f
- SHA1 f2c406eb3799bac9def8a96acd9ca68b9f1f6ffb
- SHA512 bfff222fae902dfac61e2cc36e34dacffeaaaae1c6a39e779c2f85f2ac956fda7e8f9e973e0b3773b2bbfa7ed1dd00e9d1fa4516cc50225a00fea1d6dd1cd09e
- SSDEEP 24576:aDb02iQ069HOuZUTzao7PRTCB657SRBJP4YLhxdYqCrCmlRR2+Vr:2oo9uyOZPRTI69SRBJhhbYsml
- TLSH T1164533DB9A05A2D8D8F1A87DA7C5AD7386F8C08E4357D86E4942C9BD73320143B385BD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4443740
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
_a@20
_b@20
Name
Size
33KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
9KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
2KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
186KB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
970KB
Virtual Size
972KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=38, id=225, productName=VS2013 build 21005, version=21005,
count=21, id=223, productName=VS2013 build 21005, version=21005,
count=111, id=224, productName=VS2013 build 21005, version=21005,
count=3, id=203, version=65501,
count=102, id=1, productName=Unmarked objects,
count=7, id=229, version=40629,
count=1, id=220, productName=VS2013 UPD5 build 40629, version=40629,
count=1, id=222, productName=VS2013 UPD5 build 40629, version=40629,
Luxury Shield v18.9.0/ILMerge.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 8110d740b485bcb06ff406b17001714c3a146fe6517098c9dc90d812b83389fd
- MD5 2bb6322885e6ca0986206de174e842c9
- SHA1 c5ea70169106d32bc513d28ea76ae8ea1e49380b
- SHA512 9750180c54a5bd8f0e1fa8a8f529364430f2ef444efbf8ac51e8d2a0aaa4e3d21fe553865ba8567c7c19e4ae84d04b20464f391743e88c52c00cac0bf20fc2a7
- SSDEEP 12288:8E8Q+HlWx+TV7109nrRoTQhfL40+FQT7gWoi:hn+HQp9UQ2dFNi
- TLSH T111E44B107FE4D617D1BA87B2A8B3091457FCE046F357EB8F59806AE91C03741AD262BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
688082
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
664KB
Virtual Size
663KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Luxury Shield v18.9.0/Luxury Crypter.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 1454f76153641a5065dde7f5cd4ded43d86a643177d421e6239f0045b0a093cd
- MD5 5bfe693ca3d590de2d262348775c50e9
- SHA1 98c80fa291f01ef2afbe0b46bba11a09253a33fb
- SHA512 4e5ac61a7345257a5407234f4bdb8af86a5097415ec3b917f1bc4fa90dd87d1c283c8e3dcdc4742bf9e148b64f4d69d8dff353f7486b84867cc4d370cb3bac8d
- SSDEEP 196608:fReG3+fWT1RncbvhNmeBjgeGpXxGGbmTL3RVmEM1I2G8hQE2v:Ek3TzcL6eBjNiXEGbYj/S15GWF
- TLSH T1949633597B59F9D9CBA80F3CC5A4C4EBEB682CD62F00962F7CB070D414B728A7816563
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
9081614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
8.7MB
Virtual Size
8.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
174KB
Virtual Size
174KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Luxury Shield v18.9.0/Patch.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 4a42534a306ffb3f4a84b37cee256495b206d3960056f41c9d18516a0f18de90
- MD5 ab7afbe5613dc7807e61435ebdea7e50
- SHA1 5e96df26d1f44a445cc89b9bc78dc458443553db
- SHA512 72646e576b3c1a01edae6910546df41ca8e5a421d628ff836edae97e104d09a67b4a79b729d5e906db65ba6ccea00038a0a8fd0d5badea6c639a064ffeae6047
- SSDEEP 12288:fSRXYWwrqxpzaXs3NelvdII20JK+auFeTVx:mwzQAvd/20c+RIVx
- TLSH T1A4A4CF1E19E7D45AC3DB4275D083C080DBB3D9F2E457D3BB641825F7EA21F9A880663A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
447830
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.O-J
Size
Virtual Size
201KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.vvo
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.I<S
Size
369KB
Virtual Size
368KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
70KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ