WalshComboMaker.rar
- SHA256 7bb75c17c7284253250e45a48101baf0b55d3d4c7d9bb06dea7fad419dfdb7e4
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WalshComboMaker/WebView2Loader.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
WalshComboMaker/walsh-combo-maker.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
WalshComboMaker/walsh-combo-maker.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
8 signatures
150 seconds
General
- Target WalshComboMaker.rar
- Size 4.7MB
- Sample260828-1ppxdsec29
- SHA256 7bb75c17c7284253250e45a48101baf0b55d3d4c7d9bb06dea7fad419dfdb7e4
- MD5 f20ee7e27677492ddb8c522391970346
- SHA1 59796f0c3e5be2f65cb9f68db58d17c621bc36d7
- SHA512 aa9a214bb34f845c78e0097338ec2a0ed41c74461616ecf807e5eae3bc74911bb345b0abf4bc5b86dc1e6139cbdf2d41d0de733c6396f0fffc5b47f765853730
- SSDEEP 98304:pBOMOtj9/hJl/r0UJuObKG9ZD6btV3b69N08ocUy22NQVEY:pBOMOBz0UJBKGTD63+v0ty2MKR
- TLSH T1483633CB61A951F6ECE0DDED901A40D8825EF84F6D6542EE77C25F2A6C67CDC3026C24
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/WalshComboMaker/walsh-combo-maker.exe
File Explorer
-
WalshComboMaker.rar.rar 4.7MB
-
WalshComboMaker/WebView2Loader.dll.dll 156KB
-
WalshComboMaker/error_logs.txt47B
-
WalshComboMaker/requirements.txt94B
-
WalshComboMaker/walsh-combo-maker.exe.exe 24.1MB
WalshComboMaker/WebView2Loader.dll
- IMPHASH 90db803f7a0acc2517ef287c1dc1bb76
- SHA256 8427b1fc58ec707813e5c0a51eb5d69397bb333250a7b891be4d3b123f1e0f1c
- MD5 b7f10b8066ee96c628e09c439b8d0b9b
- SHA1 3a2fe02d9d43100056b7dd1ccd2dfb3f30ad0f55
- SHA512 4ce26a59faadfa0a20e098caf297f3403ac1542706f72879ed7248dee4026a5c7ffc3aa95912d8e3510ac7593082429ce0e83978a5843cfce52fb475cc975333
- SSDEEP 3072:1mJgy7/ph9euiDNQ6A93jJBC9JGv6T/MEtJ6mj4UrqhQ:w/NVZ6A93j//EtJnrX
- TLSH T173F35C5BB2E900BBE17BC278C5A34A15E772B8111760AAEF036447791F137D0AE3DB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
20:0a:0b:1d:57:67:2c:96:ed:25:eb:8b:ac:94:71:7c:b9:ef:20:b6:a5:c9:21:f6:fb:30:b0:72:47:ef:a7:71
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 1, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:7f:2f:42:2a:73:53:08:de:ea:00:00:00:00:04:7f
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 15, 2025 - May 15, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:9200-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:09:08:07:e0:f9:5c:8c:e6:55:00:01:00:00:02:09
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
18608
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
WebView2Loader.dll.pdb
kernel32
AcquireSRWLockExclusive
CloseHandle
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
GetAvailableCoreWebView2BrowserVersionStringWithOptions
Name
.text
Size
86KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
46KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
WalshComboMaker/error_logs.txt
- SHA256 d4d53a775814dac04b66bdb637cb5cee88783dbd0b96a97d10cbdccfb8363453
- MD5 e14f462b3091ccc439b18a07e4adf790
- SHA1 23f6db02d9dc28e436fd5ce0f632c1ac82dc4ada
- SHA512 4243b6c0d34a952709d3487f2382f6900eaa1cc05588106895fd56af294fba93f08864956c3c41a2956607f6dbcf42ccd589de8c4b0b8ae38e0a4d79461f1186
- MD5 SHA1 SHA512
WalshComboMaker/requirements.txt
- SHA256 42704d023f640149334a2a1cc5198a3be42a4aada8ad01b91b21c72bfcaeaf60
- MD5 d5c716f0d269b7624810f3c7b5c84c56
- SHA1 b0933354f824526f8057d2b3b921cc2e32462ebf
- SHA512 b525cdf3ce8f40a170c236e18d8b1ff89fae5cc5489bfd76a0a1e25a8b1046718ca7c02c88e115cc6066da80d3b85a8e41a76449724f9087ca1445b01595766d
- TLSH T110B012031950B8214264F184444F72310CAE79329A6720A4448C144D530EAF10832838
- MD5 SHA1 SHA512 TLSH
WalshComboMaker/walsh-combo-maker.exe
- IMPHASH 62272d2244cd4cff05c75fc3bc1a3df5
- SHA256 c7bf8b76cb981603ae72cfc210b496eb8b9c720452ad7e6faf613dbb43793846
- MD5 9526cce26570e315d7e1d62f4ace35ab
- SHA1 93734dea1260708f5edb4e0b4931fe8c6858cc45
- SHA512 e113c37c265f93d991e129a8e7585aebe34707d4afde7ac9a1ae30c989d3f0508ce55dbe7f9ad810748366eda38912ff9b55f79744967cca532747a24c9d8dc0
- SSDEEP 98304:JBuP2M/Qjh0H98NBS39fKax6v/iVJlBiLgR8kWXEmgB/++GL8A+u0Efkh6XMMo2E:zuY0H98NBSw8b1A/0kkh6XMMlBalgHNu
- TLSH T113477D43B71509DEC267DA3B427B227EB2713752762027AB4D984F3ABF1A7C18B05748
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4144
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
AddVectoredExceptionHandler
CancelIo
CompareStringOrdinal
CopyFileExW
CreateDirectoryW
CreateEventW
CreateFileMappingA
CreateFileW
CreateHardLinkW
CreateProcessW
CreateSymbolicLinkW
CreateThread
CreateToolhelp32Snapshot
CreateWaitableTimerExW
DeleteFileW
DeleteProcThreadAttributeList
DeviceIoControl
DuplicateHandle
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
GetCommandLineW
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetFileInformationByHandleEx
GetFileSizeEx
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameW
GetModuleFileNameW
GetModuleHandleExW
GetOverlappedResult
GetProcessId
GetStdHandle
GetSystemDirectoryW
GetSystemInfo
GetSystemTimePreciseAsFileTime
GetTempPathW
GetWindowsDirectoryW
HeapReAlloc
InitOnceBeginInitialize
InitOnceComplete
InitializeProcThreadAttributeList
IsThreadAFiber
LockFileEx
MapViewOfFile
Module32FirstW
Module32NextW
MoveFileExW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleW
ReadFile
ReadFileEx
RemoveDirectoryW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetCurrentDirectoryW
SetEnvironmentVariableW
SetFileAttributesW
SetFileInformationByHandle
SetFilePointerEx
SetFileTime
SetHandleInformation
SetLastError
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWaitableTimer
SleepEx
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
UnlockFile
UnmapViewOfFile
UpdateProcThreadAttribute
WaitForMultipleObjects
WideCharToMultiByte
WriteConsoleW
WriteFileEx
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
RaiseException
RtlUnwindEx
VirtualProtect
VirtualQuery
__C_specific_handler
CloseHandle
GetModuleHandleA
GetProcAddress
Sleep
FreeLibrary
GetCurrentThreadId
GetModuleHandleW
GetUserDefaultUILanguage
HeapFree
LCIDToLocaleName
LoadLibraryA
LoadLibraryW
TlsGetValue
TlsSetValue
WaitForSingleObject
lstrlenW
LoadLibraryExA
FormatMessageW
GetLastError
GetProcessHeap
HeapAlloc
CreatePipe
GetComputerNameExW
GetConsoleMode
GetConsoleScreenBufferInfo
GetFileInformationByHandle
SetConsoleMode
SetConsoleTextAttribute
ntdll
NtCreateFile
NtOpenFile
NtReadFile
NtWriteFile
RtlNtStatusToDosError
NtCreateNamedPipeFile
RtlGetVersion
userenv
GetUserProfileDirectoryW
ws2_32
GetHostNameW
WSACleanup
WSADuplicateSocketW
WSAGetLastError
WSARecv
WSASend
WSASocketW
WSAStartup
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
getpeername
getsockname
getsockopt
ioctlsocket
listen
recv
recvfrom
select
send
sendto
setsockopt
shutdown
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
api-ms-win-crt-environment-l1-1-0
__p__environ
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
malloc
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-math-l1-1-0
__setusermatherr
floor
fmod
fmodf
pow
round
roundf
trunc
api-ms-win-crt-private-l1-1-0
memcmp
memcpy
memmove
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
_cexit
_configure_narrow_argv
_crt_atexit
_exit
_fpreset
_initialize_narrow_environment
_set_app_type
_initterm
_initterm_e
_set_invalid_parameter_handler
abort
exit
signal
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
fflush
setvbuf
api-ms-win-crt-string-l1-1-0
memset
strlen
strncmp
wcslen
shell32
ILCreateFromPathW
ILFree
SHOpenFolderAndSelectItems
DragFinish
DragQueryFileW
SHAppBarMessage
SHCreateItemFromParsingName
SHGetKnownFolderPath
ShellExecuteExW
ShellExecuteW
webview2loader
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
bcryptprimitives
ProcessPrng
advapi32
RegGetValueW
RegGetValueA
comctl32
DefSubclassProc
RemoveWindowSubclass
SetWindowSubclass
TaskDialogIndirect
dwmapi
DwmEnableBlurBehindWindow
DwmGetWindowAttribute
DwmSetWindowAttribute
gdi32
BitBlt
CombineRgn
CreateCompatibleDC
CreateDIBSection
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
GetDeviceCaps
SelectObject
SetBkMode
SetTextColor
imm32
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
ole32
CoCreateInstance
CoInitialize
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
OleInitialize
PropVariantClear
PropVariantCopy
RegisterDragDrop
RevokeDragDrop
CoCreateFreeThreadedMarshaler
CoCreateGuid
oleaut32
VariantClear
VariantCopy
GetErrorInfo
SetErrorInfo
SysAllocStringLen
SysFreeString
SysStringLen
propsys
PropVariantCompareEx
PropVariantToBSTR
PropVariantToBoolean
PropVariantToDouble
PropVariantToInt16
PropVariantToInt32
PropVariantToInt64
PropVariantToUInt16
PropVariantToUInt32
PropVariantToUInt64
PropVariantToVariant
VariantToBoolean
VariantToDouble
VariantToInt16
VariantToInt32
VariantToInt64
VariantToPropVariant
VariantToUInt16
VariantToUInt32
VariantToUInt64
shlwapi
SHCreateMemStream
user32
AdjustWindowRect
AdjustWindowRectEx
AppendMenuW
ChangeDisplaySettingsExW
CheckMenuItem
ClientToScreen
ClipCursor
CloseTouchInputHandle
CreateAcceleratorTableW
CreateIcon
CreateMenu
CreatePopupMenu
CreateWindowExW
DefWindowProcW
DestroyAcceleratorTable
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DispatchMessageW
DrawIconEx
DrawMenuBar
DrawTextW
EnableMenuItem
EnableWindow
EnumChildWindows
EnumDisplayMonitors
FillRect
FindWindowExW
FlashWindowEx
GetActiveWindow
GetAsyncKeyState
GetClientRect
GetClipCursor
GetCursorPos
GetDC
GetForegroundWindow
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetMenu
GetMenuBarInfo
GetMenuItemInfoW
GetMessageA
GetMessageW
GetMonitorInfoW
GetParent
GetRawInputData
GetRawInputDeviceInfoW
GetSystemMenu
GetSystemMetrics
GetTouchInputInfo
GetUpdateRect
GetWindow
GetWindowDC
GetWindowLongPtrW
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
InsertMenuW
InvalidateRect
InvalidateRgn
IsIconic
IsProcessDPIAware
IsWindow
IsWindowEnabled
IsWindowVisible
LoadCursorW
LoadImageW
MapVirtualKeyExW
MapVirtualKeyW
MapWindowPoints
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MsgWaitForMultipleObjectsEx
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
RedrawWindow
RegisterClassExW
RegisterRawInputDevices
RegisterTouchWindow
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
ScreenToClient
SendInput
SendMessageW
SetCapture
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoW
SetParent
SetPropW
SetWindowDisplayAffinity
SetWindowLongPtrW
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
ShowCursor
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
ToUnicodeEx
TrackMouseEvent
TrackPopupMenu
TranslateAcceleratorW
TranslateMessage
UpdateWindow
ValidateRect
VkKeyScanW
api-ms-win-core-winrt-error-l1-1-0
RoOriginateErrorW
Name
.text
Size
10.8MB
Virtual Size
10.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.eh_fram
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
300KB
Virtual Size
299KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
79KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
54KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ