SKS.zip
- SHA256 e2fe14b730f98b428ad5d23542f6b2c8dcfc3266b7ed648f893e5432355ef212
Overview
overview
3Static
static
3SKS.exe
windows10-2004-x64
3SKS.exe
windows11-ltsc_2024-x64
3UpgradeHel...ls.dll
windows10-2004-x64
1UpgradeHel...ls.dll
windows11-ltsc_2024-x64
1UpgradeHel...DO.dll
windows10-2004-x64
1UpgradeHel...DO.dll
windows11-ltsc_2024-x64
1UpgradeHel...AO.dll
windows10-2004-x64
1UpgradeHel...AO.dll
windows11-ltsc_2024-x64
1UpgradeHel...ls.dll
windows10-2004-x64
1UpgradeHel...ls.dll
windows11-ltsc_2024-x64
1UpgradeHel...ls.dll
windows10-2004-x64
1UpgradeHel...ls.dll
windows11-ltsc_2024-x64
1UpgradeHel...on.dll
windows10-2004-x64
1UpgradeHel...on.dll
windows11-ltsc_2024-x64
1UpgradeHel...ex.dll
windows10-2004-x64
1UpgradeHel...ex.dll
windows11-ltsc_2024-x64
1UpgradeHel...er.dll
windows10-2004-x64
1UpgradeHel...er.dll
windows11-ltsc_2024-x64
1UpgradeHel...cs.dll
windows10-2004-x64
1UpgradeHel...cs.dll
windows11-ltsc_2024-x64
1UpgradeHel...ui.dll
windows10-2004-x64
1UpgradeHel...ui.dll
windows11-ltsc_2024-x64
1UpgradeHel...er.dll
windows10-2004-x64
1UpgradeHel...er.dll
windows11-ltsc_2024-x64
1UpgradeHel...er.dll
windows10-2004-x64
1UpgradeHel...er.dll
windows11-ltsc_2024-x64
1UpgradeHel...ls.dll
windows10-2004-x64
1UpgradeHel...ls.dll
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SKS.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
SKS.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
UpgradeHelpers.DB.ADO.Controls.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
UpgradeHelpers.DB.ADO.Controls.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
UpgradeHelpers.DB.ADO.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
UpgradeHelpers.DB.ADO.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
UpgradeHelpers.DB.DAO.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
UpgradeHelpers.DB.DAO.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
UpgradeHelpers.DB.Essentials.Controls.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
UpgradeHelpers.DB.Essentials.Controls.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
UpgradeHelpers.DB.Essentials.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
UpgradeHelpers.DB.Essentials.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
UpgradeHelpers.DataGridViewCommon.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
UpgradeHelpers.DataGridViewCommon.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
UpgradeHelpers.DataGridViewFlex.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
UpgradeHelpers.DataGridViewFlex.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
UpgradeHelpers.Gui.ContainerHelper.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
UpgradeHelpers.Gui.ContainerHelper.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
UpgradeHelpers.Gui.Graphics.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
UpgradeHelpers.Gui.Graphics.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
UpgradeHelpers.Gui.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
UpgradeHelpers.Gui.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
UpgradeHelpers.SupportHelper.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
UpgradeHelpers.SupportHelper.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
UpgradeHelpers.Utils.ReflectionHelper.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
UpgradeHelpers.Utils.ReflectionHelper.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
UpgradeHelpers.Utils.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
UpgradeHelpers.Utils.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target SKS.zip
- Size 1.9MB
- Sample261107-vbwvwszwcy
- SHA256 e2fe14b730f98b428ad5d23542f6b2c8dcfc3266b7ed648f893e5432355ef212
- MD5 b96ab4d5fbe18fe5fd8a75d2304cc790
- SHA1 826d1c8bf58986fd8fb9a5624d6e4b0590815171
- SHA512 49bcf3007ff62d47e7dd995a6dbfe2b87e050d13b749bc161d32500ca0de2c16cc0aed67ab25d4f0ae8b876dad7ee7467677ccdcda8fd81d70e086d72f306305
- SSDEEP 49152:pNFij2GhKijIKOPUi8vKMQOa5mlIYPVplf1It92Z8MG8:pDiLhKiMPqCNMWy7lf1ItYZ8MG8
- TLSH T1E99533A9805C5B55F811833272AD0A279A8667EC0F36457F23B47508DC9FC1E1F89EBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 14 IoCs
Checks for missing Authenticode signature.
resource unpack001/SKS.exe unpack001/UpgradeHelpers.DB.ADO.Controls.dll unpack001/UpgradeHelpers.DB.ADO.dll unpack001/UpgradeHelpers.DB.DAO.dll unpack001/UpgradeHelpers.DB.Essentials.Controls.dll unpack001/UpgradeHelpers.DB.Essentials.dll unpack001/UpgradeHelpers.DataGridViewCommon.dll unpack001/UpgradeHelpers.DataGridViewFlex.dll unpack001/UpgradeHelpers.Gui.ContainerHelper.dll unpack001/UpgradeHelpers.Gui.Graphics.dll unpack001/UpgradeHelpers.Gui.dll unpack001/UpgradeHelpers.SupportHelper.dll unpack001/UpgradeHelpers.Utils.ReflectionHelper.dll unpack001/UpgradeHelpers.Utils.dll
File Explorer
-
SKS.zip.zip 1.9MB
-
Orders.mdb4.4MB
-
SKS.exe.exe 1.6MB
-
SKS.exe.config.xml 163B
-
SKS.exe.manifest13KB
-
SKS.pdb289KB
-
UpgradeHelpers.DB.ADO.Controls.dll.dll 15KB
-
UpgradeHelpers.DB.ADO.dll.dll 54KB
-
UpgradeHelpers.DB.DAO.dll.dll 53KB
-
UpgradeHelpers.DB.Essentials.Controls.dll.dll 28KB
-
UpgradeHelpers.DB.Essentials.dll.dll 113KB
-
UpgradeHelpers.DataGridViewCommon.dll.dll 9KB
-
UpgradeHelpers.DataGridViewFlex.dll.dll 64KB
-
UpgradeHelpers.Gui.ContainerHelper.dll.dll 39KB
-
UpgradeHelpers.Gui.Graphics.dll.dll 20KB
-
UpgradeHelpers.Gui.dll.dll 128KB
-
UpgradeHelpers.SupportHelper.dll.dll 10KB
-
UpgradeHelpers.Utils.ReflectionHelper.dll.dll 144KB
-
UpgradeHelpers.Utils.dll.dll 38KB
Orders.mdb
- SHA256 e4c9c09c3c61b983ad1cfdcf6c823a9b9843a3aa63c629ebd576666606825ae4
- MD5 437b6d30986fb005e6ffe50a8318f40a
- SHA1 03697deda15f0f583ec5a0ea1be50c6c33ede48c
- SHA512 038289ab99514f864276f116fb8268b4ce8cf85ea38cdd13b0e6e1b86c60d5087fb1d910dad38238a1fcad72536037d557d929b5efbd7dcc860021daf9dd70aa
- SSDEEP 12288:nEcUASk/6DkWqC259RaW7DfkLzW/fpVQj0s5nYDPea6XuQI7RnhssVPrbZeHdnSY:tPkO2
- TLSH T1EF26CE12BBED4134F9F31A7029F66346867ABE110E2DDB4E3508514EB8F6EC4DD22396
- MD5 SHA1 SHA512 SSDEEP TLSH
SKS.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 d6087485261bdc348ab062fcb5aa03e87de7e0fb1844eea368af8804988f78ec
- MD5 573cfc5f4ffbb3890668f0883a58c466
- SHA1 6b40ddafd9d9f3ca056f4ad1390fb0c0efec2d8b
- SHA512 df35c261f69e32a700e819d9d5dfd1b5248d8607b7755738553fc66817e5782d8e887a6b5562cf5dc341d097db528b0745b72a35b4a411383e7d4a8d4db46b42
- SSDEEP 24576:S5E1MJoEiv/bsYNDub0MaP0fBuD8BM2QiBN9Ozgf0WmYo81BlKpp484:3Ei7lUaP0Q8BM2Qi8zmJmYl1Bl
- TLSH T16775011422B92F29FA7E17F40071060087F57E5F99ADE79E0DC260EE2EA9F468641F53
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1654386
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
F:\SKSWinForms\obj\x86\Debug\SKS.pdb
mscoree
_CorExeMain
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
51KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
SKS.exe.config
- SHA256 97f54f7cda9454d4083f240408cd315a54c99be0d770f3a77baa18b00a410c8a
- MD5 9a3d99ab612161dfe2116f5939b8bc05
- SHA1 a0f4570011c4e5add32b247889eb1036c9f1cfa1
- SHA512 4701a79ae88d0164c87930d35fc3e2ebab016e6bb7ea794f90b67268782b298ab65288b8364afcaadb5c4ce6b22630179426f5a53da60dde81cb6c90a88d8590
- TLSH T1C4C08C5940247C2BDC234F239260C926FBF83262A424000CE06BAB660A6011E82063A6
- MD5 SHA1 SHA512 TLSH
SKS.exe.manifest
- SHA256 0412687164ed1c496fb3217f45f0ddbd9357217afa04f7f5cce8996294885e76
- MD5 ac0de00045806d85f41044ac470952e5
- SHA1 4ca0691b624078bff8b1053e2e8ed75b168405f4
- SHA512 82f313d141a7389aaf552c94bae23b1491abaccc4e01bbb4985f522e510abf359093b2c31621c1738cf01ded74b49c6c8e2e0509ddba974abd12323e4b7c12a5
- SSDEEP 192:oR+HU5tUeIwDI9OMzoVieEXZc0uW13iIaY+NjbldtfY5JaqD:HHU5tUeIw0FzQEXihW13ZaY+NvljwKw
- TLSH T1EF52CE4288C0BE21533640C4FFE3D928EF456763466E108BBC5C5AEF9F9654C9A832B7
- MD5 SHA1 SHA512 SSDEEP TLSH
SKS.pdb
- SHA256 dad895ac97dfe4868b0c85c2044061e8b15badf75fcb4e2d8edabfb844459a6e
- MD5 68b7ff464e6f826410f454a04e2bbe58
- SHA1 c5d34b92f0f1d7a9aacaead6ec34015aff8d36a8
- SHA512 85bdc98adcb187d3cd7c423460790b05f9374620140f365323e4e820649be1ec47cc1a87c96ee0ce6f6778c77be8ccb923346b37b76d796c057481c320a43000
- SSDEEP 3072:1LHZ5Ic49a7Y/w4P048wYLFyI4wlOEZ/EbzM0ePpgrVMmQAzKqugpIMH13rGVFFC:vxE/Nc96CUI0RxCPLMHH+fOz+f2h6m
- TLSH T118548226FBC48973D42A853997BB9F29433DD8991F428B8F0795F07C7EA13821E46358
- MD5 SHA1 SHA512 SSDEEP TLSH
UpgradeHelpers.DB.ADO.Controls.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 401734be53cf4d60690dcefbdc985c81d25f287b9ae13ef7dff02ab43170f418
- MD5 10cfbc4b6cb6b705aec27a806bfa721b
- SHA1 38577244d1857a4a14a9492773ea22a3b3f889d6
- SHA512 0a13be21f75b6ecc41a5c09947ccfc4cb78651606b2d362d0b1b1e142dd8e3f4cfda7c3218f6e31fcd8ac10c25fffcce726bb2657eaca97bfb961a596eea8825
- SSDEEP 384:a/rD1QFvQ4ExQkAMIJEiJKdKb5xRA3xokwf/wAPwA0wAfnwA1uV:a/uFvQ4ExQkOwdKbVAmV
- TLSH T19662FB195BCCAB26D57D0E36E9B352105374EAC4B787DB0F0E5D519B2C9B3341A03DA2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
21302
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
S:\agent-1\_work\51\s\src\Helpers\UpgradeHelpers.DB.ADO.Controls\obj\Debug\UpgradeHelpers.DB.ADO.Controls.pdb
mscoree
_CorDllMain
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
UpgradeHelpers.DB.ADO.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ec469f4c1239924cf66939d335e58c7cbe0312cc5d8f6472c06a6f882b2b8ef3
- MD5 cc8ec799868ba2726e8140efc7edf6e7
- SHA1 7af7fcd70b806fc40a7afae44a69200dd85cea60
- SHA512 c454fe3e635af991ccb16e43f6ea9391f47c7c0b8a8002df6487f4420702b788cc0a007ce19ab34788a4dbdd6334edd17e443b293d30cdd476c01bc426ad514a
- SSDEEP 768:WYnD+KiwAqJiWySVS9JA441RJ9R5vz//URUUUUUUU4W7GHSdVE9PJ+ydOiD:WY7iW5S9JKRJr5vz/FGKKB+ydO0
- TLSH T14D43184573D98F2AE57F077AE171911003B4F629B623E30E2ED1A0FE19737808E45BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
61074
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
S:\agent-1\_work\51\s\src\Helpers\UpgradeHelpers.DB.ADO\obj\Debug\UpgradeHelpers.DB.ADO.pdb
mscoree
_CorDllMain
Name
.text
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
UpgradeHelpers.DB.DAO.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 071f2af33ce7ba5837f9f4ee930b1e5aa814232bddeea8df86fcd85464047f4d
- MD5 e96f3c9aa6a1c4f127f24e88c8af6a8a
- SHA1 4293f0e3bb93bc83e36fc312601b6fc037d41e9e
- SHA512 17419f1ce90b10e340a6c5bc4a92052a7ca3fd5f55f455d6745ca0ad0ee1d5678ad6edb171f5f1d4d89c8cbd2374bd8d95f8705f42b5ba38fb2d387f3e0efd87
- SSDEEP 1536:EOFkQKF5k8X+LULSKnskthDPK0jrPM5YVt:EO0Xk4+LULSIthDPK0fyGt
- TLSH T1E133294973E8CE26E5BE17BEB671512403B4F5147A92D31D0DD1B0FA2C73B809E06BA5
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
60858
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
S:\agent-1\_work\51\s\src\Helpers\UpgradeHelpers.DB.DAO\obj\Debug\UpgradeHelpers.DB.DAO.pdb
mscoree
_CorDllMain
Name
.text
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
UpgradeHelpers.DB.Essentials.Controls.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 78d310770a93b6db72c9469e5043192fac417674539d18c56fc95970890256e7
- MD5 71577161a25e2efba5400cb1597ef957
- SHA1 cb3148ae4abf988896815d65b69420bbc37979fb
- SHA512 1db2ffa9c84cfd8c4f403081c863537f7be79859295b082d0f4d89ae8fe58ae84c8cf3cbf4fb726f00c4483570cc348eb83484304c88f7b9de1d6cd145ff17f4
- SSDEEP 384:HIM3nptjqHM7pOEd8Zyx7/1GC5dPpZhGletrhNLCf0WbY6GGMONr2N0uPTJXA1XU:nQM7pOfMfceRhNRWbY9JL0udAOR9v
- TLSH T167D22A293AA9533EC6AE07B994B0415013B0D712BB53E7056F9170EEAEB37508743EDB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
34258
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
S:\agent-1\_work\51\s\src\Helpers\UpgradeHelpers.DB.Essentials.Controls\obj\Debug\UpgradeHelpers.DB.Essentials.Controls.pdb
mscoree
_CorDllMain
Name
.text
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
UpgradeHelpers.DB.Essentials.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b82e91f8058d71103d2f1891afd2e1385e335b4b4e120249617710946d99b7f7
- MD5 971d8e9ec8475c0c976c92c5986d8866
- SHA1 1e984698386ac21884fd8efbd92d453d78dfbe09
- SHA512 67d12e7845809c74d0a871c765832519e07c96d5e8f123d60ce81386746c43498c782af634dffde17e812f5d7d5eaa4a959c64b13c435688ff92a8a73d869847
- SSDEEP 1536:agb/g1riLHHvvgRfNjKVaAfQlOsZBl4j4a4FoqxBDsgDlLdr3nt9quwr6Ssei:3/kR5KVaAYlrcj4HnhxdLquwr6pei
- TLSH T151B3294473E88D26C4BE5B7DE4B629100335E1136116E35E1FE0A0FE0D63BE29E1A79B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
121238
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
S:\agent-1\_work\51\s\src\Helpers\UpgradeHelpers.DB.Essentials\obj\Debug\UpgradeHelpers.DB.Essentials.pdb
mscoree
_CorDllMain
Name
.text
Size
110KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
UpgradeHelpers.DataGridViewCommon.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 026c791ed123f1d70bfa580f0fd66f75e2955b9b6195459ad235d9de3b0e0d6e
- MD5 1e79a0668f125424f45812134d35a3c4
- SHA1 551c710f1cddb9be0190686a94d554ec9aa60f05
- SHA512 411921862d581d916060df3b7259f8dd4bb8bdddf53158d449e71f738532bdb89e238e914f04ec37fbbd7e1f4a08fbd45f800ba7e2ea6e4088d5272bfb18bd93
- SSDEEP 192:27vsBZmW/xB+LyE1r+26KJf6q/R+SYMRA3:8UZH/ql1r+26KEq4Mu3
- TLSH T10C12A70593B8CB2BD8F60A319C62632803F66E549F83EA5E0DD570DFB85731013A57E6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
S:\agent-1\_work\51\s\src\Helpers\ThirdParty\DataGridViewCommon\obj\Debug\UpgradeHelpers.DataGridViewCommon.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1024B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
UpgradeHelpers.DataGridViewFlex.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 7a068dd0d08b59f986e925e61bd935de6edf5ebf9b3ca9c40994ce06a579f008
- MD5 0823689dce1ac6de06dcf65ff0afdd12
- SHA1 4fac9f21c25f3a36a5fade3e17e765e431360279
- SHA512 4a4db12933dfba874d54333176f2318a0ce97173d763209d02eefab21e900eac5ad571094d1e8b24e6c530ebf32f85a730c1e539622df1502c7322146d1af41e
- SSDEEP 1536:oCiFXrjXl5/okFbR07QU2gqRoSDi/97ri1z1NX8E:iXHl5wSd297ri3X8E
- TLSH T14C531A0623A1CF2DC47E4775D87106580371AE267A53F36F4EE571EE2CB3391CA09A9A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
71626
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
S:\agent-1\_work\51\s\src\Helpers\ThirdParty\DataGridViewFlex\obj\Debug\UpgradeHelpers.DataGridViewFlex.pdb
mscoree
_CorDllMain
Name
.text
Size
62KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
824B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
UpgradeHelpers.Gui.ContainerHelper.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1bd2bfa2ae0f2a287b86a55050dfca783995c6c6ba70da0e0de876f2c99ec71b
- MD5 7b5784eab589dc2de403932d86df6d1d
- SHA1 55ddb5af9e462cee9501ffcf491b042045b07a13
- SHA512 6dc1efc2552cf4c61543606eb112ab78725f679b8fadbe9b9102bdcab99587beb4ab305de0df10af1a6995c251ddd9f03afe100b74d05662794607a34f6870e3
- SSDEEP 384:lzT5bS6c0eyMkGQJZFLnzbTQ8K4QqAImXze4JiWF6uDGBNunHmde3JzO:vSDyMvQJjRQjZzc7/3MzO
- TLSH T1620354586BF5E17AD8AE53F1AFB0013603F851D21326EF110D8970BE68F2B194D82B97
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
45582
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
S:\agent-1\_work\51\s\src\Helpers\UpgradeHelpers.Gui.ContainerHelper\obj\Debug\UpgradeHelpers.Gui.ContainerHelper.pdb
mscoree
_CorDllMain
Name
.text
Size
37KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
UpgradeHelpers.Gui.Graphics.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 376d79f7b62a750a597140787911c7d37cf7c49c27d95ea841d477c8eb6ed900
- MD5 5b398a5161ee97e9325e8611029f1f29
- SHA1 a83eb39cff21e506d55c2f54d672b4b82bcda690
- SHA512 41411cdcb22df2f28b057eed2e677e6c688f59b56313b7b7d77f7953ca71b8c4ec8c698c051dcda70d0536a33af68bd0b63dd585fe97fe6d7619e88a91610e3d
- SSDEEP 384:zSDjGm0pR2kxMN8KOmv7DjGvX0gEXuB2tJnnnnnnnnnnnnntnKn3bJ3I3rIlvwRC:aGCkxM6KOh6tJnnnnnnnnnnnnntnKnrb
- TLSH T11692D702B3C8871AF47F0B796C7328105739F796FB46DB1F6AE0205E1D663148A12B6A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
26062
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
S:\agent-1\_work\51\s\src\Helpers\UpgradeHelpers.Gui.Graphics\obj\Debug\UpgradeHelpers.Gui.Graphics.pdb
mscoree
_CorDllMain
Name
.text
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
UpgradeHelpers.Gui.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d2351e2b41f4014635987bd046800d2903b876cf3ef5a154eb1b169b26afe52d
- MD5 9c0c300dfb3384ca3225585862644098
- SHA1 d05d6e8930a57abe9e153f930ade9d2deb44bf25
- SHA512 2f4b77eb4979512be0af280891c542345f06e81b224d7ddac25184366cbf4e6ca6bb0b9308fe6b22d725ab38e3df9c9122cfd9147955363d7591a5851b8595c3
- SSDEEP 3072:WR9buCimfHjA8kM4D3Y7mO1a7kvsIjGtBvjLnvm:Y9jii7L4bYp07kvsIIjLv
- TLSH T1E5D3195523D88E11CDBB177A91B51AD08331AA67D693F38E2DD4B5BD5CF33808A01AE3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
136946
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
S:\agent-1\_work\51\s\src\Helpers\UpgradeHelpers.Gui\obj\Debug\UpgradeHelpers.Gui.pdb
mscoree
_CorDllMain
Name
.text
Size
126KB
Virtual Size
125KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
UpgradeHelpers.SupportHelper.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ab2bded186e21d3d4c07e2f0b638c3c1d6356d277afe189d8fbc5278335d1980
- MD5 71df8b59f8ab1b06bac50723c61a5eb0
- SHA1 8f995b542059b0658757de92b562307b24253400
- SHA512 0bc79c40fb849ef67ca4e0a854d04877cd944c60b41a5606bcd6bca5a531e8af4173b8af450c137e44039d57268b0a60cdc002891f476348bef178b5badfbc97
- SSDEEP 192:7K1haen8pVqqojIt49ElGI6Sjzh9YPVEcp:7K1haen8vvojL9E8I6OFi
- TLSH T17B22E829B7FCA137D96B1FB1ACF3170143BCF1105B53AB6F1128402B6CA57A88667B90
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
15538
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
S:\agent-1\_work\51\s\src\Helpers\UpgradeHelpers.SupportHelper\obj\Debug\UpgradeHelpers.SupportHelper.pdb
mscoree
_CorDllMain
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
UpgradeHelpers.Utils.ReflectionHelper.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6cdbe35577978d4a20eb5e9103e08e7ff0ea3792439a18f2e127f6d9b62350e9
- MD5 a1a52f890c769461864bd936837cb24c
- SHA1 474a695f898e72587e9a53478dc5913089cbf318
- SHA512 4e8f9070616215022daccf235b0f4b886201bc9d26a17a1dad60ae1944d8387eb5a4bf72a3f3d8dae602faf170ad47350c96b175af60f5c8f643dc1bd335be99
- SSDEEP 1536:Q8ZNf45s7YiXWieyDBJAiM7M7M7M3MsMFVA0t6:Q8X5YJ5t6
- TLSH T1A9E309E011B94DA6CEF8277FBD7485512590DA31F749481EF9A6B81BC861CA2333B783
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
153306
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
S:\agent-1\_work\51\s\src\Helpers\UpgradeHelpers.Utils.ReflectionHelper\obj\Debug\UpgradeHelpers.Utils.ReflectionHelper.pdb
mscoree
_CorDllMain
Name
.text
Size
142KB
Virtual Size
141KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
UpgradeHelpers.Utils.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 1e6e49c1a96631f51633648c7ffb909db1967dbcc1bcd311c49a01324af5e657
- MD5 aefdf63db2d65b9f0d7433b865c7b6f5
- SHA1 ed03dbaa271c396f1e1738fae0921536ba448330
- SHA512 158f02e65cca422cdf70c87f1bfa8e1e3fbfb4ca1f25bb59bdb922798ca8d4c4708a25dacaa869a0e0f4607e05cee9d623b39cbcce4ef04bd37d196df00f926f
- SSDEEP 768:BgAQUJBkvHGtcaaDbdF0SDsw7msO4ev2jz2MktRBx5LDQDbr0W8FdyPlrYz+GYVV:ydUJBkvH+aDbd6SDsW/kQDb6FdyPlrIS
- TLSH T16D033A5437F84328D8BD0B7699F102514379F91AAD23E34F2EE890B96C33B588915FB9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
44886
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
S:\agent-1\_work\51\s\src\Helpers\UpgradeHelpers.Utils\obj\Debug\UpgradeHelpers.Utils.pdb
mscoree
_CorDllMain
Name
.text
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ