General

Malware Config

Signatures

Files

• 2024-06-28_e75fd06133419369a04776ce8ea7775e_ryuk

  .exe windows:6 windows x64 arch:x64

  0e8ebd45245edf1ee6144b7250a920a6

  
  

  Code Sign

  1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

  Certificate

  Issuer

  CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  31-05-2021 06:43

  Not After

  17-09-2029 06:43

  Subject

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31

  Certificate

  Issuer

  CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Not Before

  02-11-2023 08:32

  Not After

  30-10-2034 08:32

  Subject

  CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

  Certificate

  Issuer

  CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

  Not Before

  19-05-2021 05:32

  Not After

  18-05-2036 05:32

  Subject

  CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0d:6a:73:d0:15:d3:84:9c:e5:43:01:d1:77:5c:08:f4

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  20-10-2023 00:00

  Not After

  22-10-2026 23:59

  Subject

  CN=Beijing Duyou Science and Technology Co.\,Ltd.,O=Beijing Duyou Science and Technology Co.\,Ltd.,ST=Beijing,C=CN

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

  Certificate

  Issuer

  CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  29-04-2021 00:00

  Not After

  28-04-2036 23:59

  Subject

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0d:6a:73:d0:15:d3:84:9c:e5:43:01:d1:77:5c:08:f4

  Certificate

  Issuer

  CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

  Not Before

  20-10-2023 00:00

  Not After

  22-10-2026 23:59

  Subject

  CN=Beijing Duyou Science and Technology Co.\,Ltd.,O=Beijing Duyou Science and Technology Co.\,Ltd.,ST=Beijing,C=CN

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4

  Certificate

  Issuer

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Not Before

  03-05-2023 00:00

  Not After

  02-08-2034 23:59

  Subject

  CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9

  Certificate

  Issuer

  CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

  Not Before

  02-05-2019 00:00

  Not After

  18-01-2038 23:59

  Subject

  CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  78:2c:c7:bf:8f:fd:7c:6d:94:83:f1:8a:d9:fe:14:46:0b:6d:22:f0:e2:58:4f:1c:10:f3:5d:87:8a:96:4d:8e

  Signer

  Actual PE Digest

  78:2c:c7:bf:8f:fd:7c:6d:94:83:f1:8a:d9:fe:14:46:0b:6d:22:f0:e2:58:4f:1c:10:f3:5d:87:8a:96:4d:8e

  Digest Algorithm

  sha256

  PE Digest Matches

  false

  4e:ab:db:ba:c9:ab:08:bd:18:eb:2a:3d:05:47:0f:a4:5f:17:49:66

  Signer

  Actual PE Digest

  4e:ab:db:ba:c9:ab:08:bd:18:eb:2a:3d:05:47:0f:a4:5f:17:49:66

  Digest Algorithm

  sha1

  PE Digest Matches

  false

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  kernel32

  AcquireSRWLockExclusive

  ActivateActCtx

  CloseHandle

  CompareStringW

  CopyFileW

  CreateActCtxW

  CreateFileA

  CreateFileMappingW

  CreateFileW

  CreateMutexW

  CreateThread

  DeactivateActCtx

  DecodePointer

  DeleteCriticalSection

  DeleteFileW

  DuplicateHandle

  EncodePointer

  EnterCriticalSection

  EnumSystemLocalesW

  ExitProcess

  ExitThread

  FileTimeToLocalFileTime

  FileTimeToSystemTime

  FindActCtxSectionStringW

  FindClose

  FindFirstFileExW

  FindFirstFileW

  FindNextFileW

  FindResourceExW

  FindResourceW

  FlsAlloc

  FlsFree

  FlsGetValue

  FlsSetValue

  FlushFileBuffers

  FormatMessageW

  FreeEnvironmentStringsW

  FreeLibrary

  FreeLibraryAndExitThread

  GetACP

  GetCPInfo

  GetCommandLineA

  GetCommandLineW

  GetConsoleMode

  GetConsoleOutputCP

  GetCurrentDirectoryW

  GetCurrentProcess

  GetCurrentProcessId

  GetCurrentThread

  GetCurrentThreadId

  GetEnvironmentStringsW

  GetFileAttributesExW

  GetFileAttributesW

  GetFileSize

  GetFileSizeEx

  GetFileTime

  GetFileType

  GetFullPathNameW

  GetLastError

  GetLocaleInfoW

  GetModuleFileNameW

  GetModuleHandleA

  GetModuleHandleExW

  GetModuleHandleW

  GetOEMCP

  GetPrivateProfileIntW

  GetPrivateProfileStringW

  GetProcAddress

  GetProcessHeap

  GetProfileIntW

  GetStartupInfoW

  GetStdHandle

  GetStringTypeW

  GetSystemDefaultUILanguage

  GetSystemDirectoryW

  GetSystemInfo

  GetSystemTimeAsFileTime

  GetTempFileNameW

  GetTempPathW

  GetThreadLocale

  GetTickCount64

  GetTimeZoneInformation

  GetUserDefaultLCID

  GetUserDefaultUILanguage

  GetVersionExW

  GetVolumeInformationW

  GetWindowsDirectoryW

  GlobalAddAtomW

  GlobalAlloc

  GlobalDeleteAtom

  GlobalFindAtomW

  GlobalFlags

  GlobalFree

  GlobalGetAtomNameW

  GlobalHandle

  GlobalLock

  GlobalReAlloc

  GlobalSize

  GlobalUnlock

  HeapAlloc

  HeapDestroy

  HeapFree

  HeapQueryInformation

  HeapReAlloc

  HeapSize

  InitializeCriticalSection

  InitializeCriticalSectionAndSpinCount

  InitializeCriticalSectionEx

  InitializeSListHead

  IsDebuggerPresent

  IsProcessorFeaturePresent

  IsValidCodePage

  IsValidLocale

  K32GetModuleInformation

  LCMapStringEx

  LCMapStringW

  LeaveCriticalSection

  LoadLibraryExW

  LoadLibraryW

  LoadResource

  LocalAlloc

  LocalFree

  LocalReAlloc

  LockFile

  LockResource

  MapViewOfFile

  MulDiv

  MultiByteToWideChar

  OutputDebugStringA

  OutputDebugStringW

  QueryActCtxW

  QueryPerformanceCounter

  QueryPerformanceFrequency

  RaiseException

  ReadConsoleW

  ReadFile

  ReleaseSRWLockExclusive

  ResumeThread

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlPcToFileHeader

  RtlUnwind

  RtlUnwindEx

  RtlVirtualUnwind

  SearchPathW

  SetEndOfFile

  SetEnvironmentVariableW

  SetErrorMode

  SetFilePointer

  SetFilePointerEx

  SetLastError

  SetStdHandle

  SetThreadPriority

  SetUnhandledExceptionFilter

  SizeofResource

  Sleep

  SleepConditionVariableSRW

  SystemTimeToTzSpecificLocalTime

  TerminateProcess

  TlsAlloc

  TlsFree

  TlsGetValue

  TlsSetValue

  UnhandledExceptionFilter

  UnlockFile

  UnmapViewOfFile

  VerSetConditionMask

  VerifyVersionInfoW

  VirtualAlloc

  VirtualProtect

  VirtualQuery

  WaitForSingleObject

  WakeAllConditionVariable

  WideCharToMultiByte

  WriteConsoleW

  WriteFile

  WritePrivateProfileStringW

  lstrcmpA

  lstrcmpW

  lstrcmpiW

  lstrcpyW

  user32

  AdjustWindowRectEx

  AppendMenuW

  BeginDeferWindowPos

  BeginPaint

  BringWindowToTop

  CallNextHookEx

  CallWindowProcW

  CharNextW

  CharUpperBuffW

  CharUpperW

  CheckDlgButton

  CheckMenuItem

  ClientToScreen

  CloseClipboard

  CopyAcceleratorTableW

  CopyIcon

  CopyImage

  CopyRect

  CreateAcceleratorTableW

  CreateDialogIndirectParamW

  CreateMenu

  CreatePopupMenu

  CreateWindowExW

  DefFrameProcW

  DefMDIChildProcW

  DefWindowProcW

  DeferWindowPos

  DeleteMenu

  DestroyAcceleratorTable

  DestroyCursor

  DestroyIcon

  DestroyMenu

  DestroyWindow

  DispatchMessageW

  DrawEdge

  DrawFocusRect

  DrawFrameControl

  DrawIcon

  DrawIconEx

  DrawMenuBar

  DrawStateW

  DrawTextExW

  DrawTextW

  EmptyClipboard

  EnableMenuItem

  EnableScrollBar

  EnableWindow

  EndDeferWindowPos

  EndDialog

  EndPaint

  EnumDisplayMonitors

  EqualRect

  FillRect

  FrameRect

  GetActiveWindow

  GetAsyncKeyState

  GetCapture

  GetClassInfoExW

  GetClassInfoW

  GetClassLongPtrW

  GetClassNameW

  GetClientRect

  GetComboBoxInfo

  GetCursorPos

  GetDC

  GetDesktopWindow

  GetDlgCtrlID

  GetDlgItem

  GetDoubleClickTime

  GetFocus

  GetForegroundWindow

  GetIconInfo

  GetKeyNameTextW

  GetKeyState

  GetKeyboardLayout

  GetKeyboardState

  GetLastActivePopup

  GetMenu

  GetMenuCheckMarkDimensions

  GetMenuDefaultItem

  GetMenuItemCount

  GetMenuItemID

  GetMenuItemInfoW

  GetMenuState

  GetMenuStringW

  GetMessagePos

  GetMessageTime

  GetMessageW

  GetMonitorInfoW

  GetNextDlgGroupItem

  GetNextDlgTabItem

  GetParent

  GetPropW

  GetScrollInfo

  GetScrollPos

  GetScrollRange

  GetSubMenu

  GetSysColor

  GetSysColorBrush

  GetSystemMenu

  GetSystemMetrics

  GetTopWindow

  GetUpdateRect

  GetWindow

  GetWindowDC

  GetWindowLongPtrW

  GetWindowLongW

  GetWindowPlacement

  GetWindowRect

  GetWindowRgn

  GetWindowTextLengthW

  GetWindowTextW

  GetWindowThreadProcessId

  GrayStringW

  HideCaret

  InflateRect

  InsertMenuItemW

  InsertMenuW

  IntersectRect

  InvalidateRect

  InvalidateRgn

  InvertRect

  IsCharLowerW

  IsChild

  IsClipboardFormatAvailable

  IsDialogMessageW

  IsIconic

  IsMenu

  IsRectEmpty

  IsWindow

  IsWindowEnabled

  IsWindowVisible

  IsZoomed

  KillTimer

  LoadAcceleratorsW

  LoadBitmapW

  LoadCursorW

  LoadIconW

  LoadImageW

  LoadMenuW

  LockWindowUpdate

  MapDialogRect

  MapVirtualKeyExW

  MapVirtualKeyW

  MapWindowPoints

  MessageBeep

  MessageBoxA

  MessageBoxW

  ModifyMenuW

  MonitorFromPoint

  MonitorFromWindow

  MoveWindow

  NotifyWinEvent

  OffsetRect

  OpenClipboard

  PeekMessageW

  PostMessageW

  PostQuitMessage

  PostThreadMessageW

  PtInRect

  RealChildWindowFromPoint

  RedrawWindow

  RegisterClassW

  RegisterClipboardFormatW

  RegisterWindowMessageW

  ReleaseCapture

  ReleaseDC

  RemoveMenu

  RemovePropW

  ReuseDDElParam

  ScreenToClient

  ScrollWindow

  SendDlgItemMessageA

  SendMessageW

  SetActiveWindow

  SetCapture

  SetClassLongPtrW

  SetClipboardData

  SetCursor

  SetCursorPos

  SetFocus

  SetForegroundWindow

  SetLayeredWindowAttributes

  SetMenu

  SetMenuDefaultItem

  SetMenuItemBitmaps

  SetMenuItemInfoW

  SetParent

  SetPropW

  SetRect

  SetRectEmpty

  SetScrollInfo

  SetScrollPos

  SetScrollRange

  SetTimer

  SetWindowContextHelpId

  SetWindowLongPtrW

  SetWindowLongW

  SetWindowPlacement

  SetWindowPos

  SetWindowRgn

  SetWindowTextW

  SetWindowsHookExW

  ShowOwnedPopups

  ShowScrollBar

  ShowWindow

  SubtractRect

  SystemParametersInfoW

  TabbedTextOutW

  ToUnicodeEx

  TrackMouseEvent

  TrackPopupMenu

  TranslateAcceleratorW

  TranslateMDISysAccel

  TranslateMessage

  UnhookWindowsHookEx

  UnionRect

  UnpackDDElParam

  UnregisterClassW

  UpdateLayeredWindow

  UpdateWindow

  ValidateRect

  WaitMessage

  WinHelpW

  WindowFromPoint

  gdi32

  BitBlt

  CombineRgn

  CopyMetaFileW

  CreateBitmap

  CreateCompatibleBitmap

  CreateCompatibleDC

  CreateDCW

  CreateDIBSection

  CreateDIBitmap

  CreateEllipticRgn

  CreateFontIndirectW

  CreateHatchBrush

  CreatePalette

  CreatePatternBrush

  CreatePen

  CreatePolygonRgn

  CreateRectRgn

  CreateRectRgnIndirect

  CreateRoundRectRgn

  CreateSolidBrush

  DPtoLP

  DeleteDC

  DeleteObject

  Ellipse

  EnumFontFamiliesExW

  EnumFontFamiliesW

  Escape

  ExcludeClipRect

  ExtFloodFill

  ExtSelectClipRgn

  ExtTextOutW

  FillRgn

  FrameRgn

  GetBkColor

  GetBoundsRect

  GetClipBox

  GetDIBits

  GetDeviceCaps

  GetLayout

  GetMapMode

  GetNearestPaletteIndex

  GetObjectType

  GetObjectW

  GetPaletteEntries

  GetPixel

  GetRgnBox

  GetStockObject

  GetSystemPaletteEntries

  GetTextCharsetInfo

  GetTextColor

  GetTextExtentPoint32W

  GetTextFaceW

  GetTextMetricsW

  GetViewportExtEx

  GetViewportOrgEx

  GetWindowExtEx

  GetWindowOrgEx

  IntersectClipRect

  LPtoDP

  LineTo

  MoveToEx

  OffsetRgn

  OffsetViewportOrgEx

  OffsetWindowOrgEx

  PatBlt

  Polygon

  Polyline

  PtInRegion

  PtVisible

  RealizePalette

  RectVisible

  Rectangle

  RestoreDC

  RoundRect

  SaveDC

  ScaleViewportExtEx

  ScaleWindowExtEx

  SelectClipRgn

  SelectObject

  SelectPalette

  SetBkColor

  SetBkMode

  SetDIBColorTable

  SetLayout

  SetMapMode

  SetPaletteEntries

  SetPixel

  SetPixelV

  SetPolyFillMode

  SetROP2

  SetRectRgn

  SetTextAlign

  SetTextColor

  SetViewportExtEx

  SetViewportOrgEx

  SetWindowExtEx

  SetWindowOrgEx

  StretchBlt

  TextOutW

  advapi32

  RegCloseKey

  RegCreateKeyExW

  RegDeleteKeyW

  RegDeleteValueW

  RegEnumKeyExW

  RegEnumKeyW

  RegEnumValueW

  RegOpenKeyA

  RegOpenKeyExW

  RegQueryValueExW

  RegQueryValueW

  RegSetValueExW

  shell32

  DragFinish

  DragQueryFileW

  SHAppBarMessage

  SHBrowseForFolderW

  SHGetDesktopFolder

  SHGetFileInfoW

  SHGetFolderPathW

  SHGetKnownFolderPath

  SHGetMalloc

  SHGetPathFromIDListW

  SHGetSpecialFolderLocation

  ShellExecuteW

  comctl32

  InitCommonControlsEx

  ole32

  CLSIDFromProgID

  CLSIDFromString

  CoCreateGuid

  CoCreateInstance

  CoDisconnectObject

  CoFreeUnusedLibraries

  CoGetClassObject

  CoInitialize

  CoInitializeEx

  CoLockObjectExternal

  CoRegisterMessageFilter

  CoRevokeClassObject

  CoTaskMemAlloc

  CoTaskMemFree

  CoUninitialize

  CreateILockBytesOnHGlobal

  CreateStreamOnHGlobal

  DoDragDrop

  IsAccelerator

  OleCreateMenuDescriptor

  OleDestroyMenuDescriptor

  OleDuplicateData

  OleFlushClipboard

  OleGetClipboard

  OleInitialize

  OleIsCurrentClipboard

  OleLockRunning

  OleTranslateAccelerator

  OleUninitialize

  RegisterDragDrop

  ReleaseStgMedium

  RevokeDragDrop

  StgCreateDocfileOnILockBytes

  StgOpenStorageOnILockBytes

  gdiplus

  GdipAlloc

  GdipBitmapLockBits

  GdipBitmapUnlockBits

  GdipCloneImage

  GdipCreateBitmapFromHBITMAP

  GdipCreateBitmapFromScan0

  GdipCreateBitmapFromStream

  GdipCreateFromHDC

  GdipDeleteGraphics

  GdipDisposeImage

  GdipDrawImageI

  GdipDrawImageRectI

  GdipFree

  GdipGetImageGraphicsContext

  GdipGetImageHeight

  GdipGetImagePalette

  GdipGetImagePaletteSize

  GdipGetImagePixelFormat

  GdipGetImageWidth

  GdipSetInterpolationMode

  GdiplusShutdown

  GdiplusStartup

  iphlpapi

  GetAdaptersInfo

  wininet

  InternetOpenA

  InternetOpenUrlA

  InternetReadFile

  uxtheme

  CloseThemeData

  DrawThemeBackground

  DrawThemeParentBackground

  DrawThemeText

  GetCurrentThemeName

  GetThemeColor

  GetThemePartSize

  GetThemeSysColor

  GetWindowTheme

  IsAppThemed

  IsThemeBackgroundPartiallyTransparent

  OpenThemeData

  shlwapi

  PathFindExtensionW

  PathFindFileNameW

  PathIsUNCW

  PathRemoveFileSpecW

  PathStripToRootW

  StrFormatKBSizeW

  ws2_32

  WSAAsyncSelect

  WSACleanup

  WSAGetLastError

  WSASetLastError

  WSAStartup

  accept

  bind

  closesocket

  connect

  gethostbyname

  htonl

  htons

  inet_addr

  recv

  recvfrom

  select

  send

  sendto

  socket

  oleaut32

  LoadTypeLi

  OleCreateFontIndirect

  SafeArrayDestroy

  SysAllocString

  SysAllocStringLen

  SysFreeString

  SysStringLen

  SystemTimeToVariantTime

  VarBstrFromDate

  VariantChangeType

  VariantClear

  VariantCopy

  VariantInit

  VariantTimeToSystemTime

  winspool.drv

  ClosePrinter

  DocumentPropertiesW

  OpenPrinterW

  oleacc

  AccessibleObjectFromWindow

  CreateStdAccessibleObject

  LresultFromObject

  msimg32

  AlphaBlend

  TransparentBlt

  imm32

  ImmGetContext

  ImmGetOpenStatus

  ImmReleaseContext

  winmm

  PlaySoundW

  oledlg

  OleUIBusyW

  Sections

  .text

  Size: 1.9MB - Virtual size: 1.9MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 569KB - Virtual size: 568KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 33KB - Virtual size: 64KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 92KB - Virtual size: 92KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .00cfg

  Size: 512B - Virtual size: 56B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .gxfg

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .retplne

  Size: 512B - Virtual size: 84B

  .tls

  Size: 512B - Virtual size: 9B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  _RDATA

  Size: 512B - Virtual size: 500B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 361KB - Virtual size: 360KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 61KB - Virtual size: 60KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ