- DOS Header
- NT Header
- Sections
- Export
- Imports
- Resource
- Exceptions
- Certificate
- Relocations
- TLS
- Load config
- IAT
.text
| Entropy | 0x0 | 0 |
| Characteristics | 0x60000020 | 1610612768 |
| Number of line numbers | 0x0 | 0 |
| Number of relocations | 0x0 | 0 |
| Pointer to line numbers | 0x0 | 0 |
| Pointer to raw data | 0x0 | 0 |
| Pointer to relocations | 0x0 | 0 |
| Size of raw data | 0x0 | 0B |
| Virtual address | 0x1000 | 4096 |
| Virtual size | 0x39604 | 229.50KB |
.rdata
| Entropy | 0x0 | 0 |
| Characteristics | 0x40000040 | 1073741888 |
| Number of line numbers | 0x0 | 0 |
| Number of relocations | 0x0 | 0 |
| Pointer to line numbers | 0x0 | 0 |
| Pointer to raw data | 0x0 | 0 |
| Pointer to relocations | 0x0 | 0 |
| Size of raw data | 0x0 | 0B |
| Virtual address | 0x3b000 | 241664 |
| Virtual size | 0x71064 | 452.10KB |
.data
| Entropy | 0x0 | 0 |
| Characteristics | 0xc0000040 | 3221225536 |
| Number of line numbers | 0x0 | 0 |
| Number of relocations | 0x0 | 0 |
| Pointer to line numbers | 0x0 | 0 |
| Pointer to raw data | 0x0 | 0 |
| Pointer to relocations | 0x0 | 0 |
| Size of raw data | 0x0 | 0B |
| Virtual address | 0xad000 | 708608 |
| Virtual size | 0x202b8 | 128.68KB |
.pdata
| Entropy | 0x0 | 0 |
| Characteristics | 0x40000040 | 1073741888 |
| Number of line numbers | 0x0 | 0 |
| Number of relocations | 0x0 | 0 |
| Pointer to line numbers | 0x0 | 0 |
| Pointer to raw data | 0x0 | 0 |
| Pointer to relocations | 0x0 | 0 |
| Size of raw data | 0x0 | 0B |
| Virtual address | 0xce000 | 843776 |
| Virtual size | 0x2af0 | 10.73KB |
.E<m
| Entropy | 0x0 | 0 |
| Characteristics | 0x60000020 | 1610612768 |
| Number of line numbers | 0x0 | 0 |
| Number of relocations | 0x0 | 0 |
| Pointer to line numbers | 0x0 | 0 |
| Pointer to raw data | 0x0 | 0 |
| Pointer to relocations | 0x0 | 0 |
| Size of raw data | 0x0 | 0B |
| Virtual address | 0xd1000 | 856064 |
| Virtual size | 0x3bb29f | 3.73MB |
.&cF
| Entropy | 0x0.5975d5468d9404 | 0.3494542405365593 |
| Characteristics | 0xc0000040 | 3221225536 |
| Number of line numbers | 0x0 | 0 |
| Number of relocations | 0x0 | 0 |
| Pointer to line numbers | 0x0 | 0 |
| Pointer to raw data | 0x400 | 1024 |
| Pointer to relocations | 0x0 | 0 |
| Size of raw data | 0xe00 | 3.50KB |
| Virtual address | 0x48d000 | 4771840 |
| Virtual size | 0xe00 | 3.50KB |
.c1Y
| Entropy | 0x7.efc4c39083d8c | 7.936596129209508 |
| Characteristics | 0x68000060 | 1744830560 |
| Number of line numbers | 0x0 | 0 |
| Number of relocations | 0x0 | 0 |
| Pointer to line numbers | 0x0 | 0 |
| Pointer to raw data | 0x1200 | 4608 |
| Pointer to relocations | 0x0 | 0 |
| Size of raw data | 0x6a4600 | 6.64MB |
| Virtual address | 0x48e000 | 4775936 |
| Virtual size | 0x6a445c | 6.64MB |
.reloc
| Entropy | 0x2.0efe7020248da | 2.0585699156259154 |
| Characteristics | 0x40000040 | 1073741888 |
| Number of line numbers | 0x0 | 0 |
| Number of relocations | 0x0 | 0 |
| Pointer to line numbers | 0x0 | 0 |
| Pointer to raw data | 0x6a5800 | 6969344 |
| Pointer to relocations | 0x0 | 0 |
| Size of raw data | 0x200 | 512B |
| Virtual address | 0xb33000 | 11743232 |
| Virtual size | 0xd0 | 208B |
.rsrc
| Entropy | 0x4.0bbed8221617c | 4.045880802461482 |
| Characteristics | 0x40000040 | 1073741888 |
| Number of line numbers | 0x0 | 0 |
| Number of relocations | 0x0 | 0 |
| Pointer to line numbers | 0x0 | 0 |
| Pointer to raw data | 0x6a5a00 | 6969856 |
| Pointer to relocations | 0x0 | 0 |
| Size of raw data | 0x600 | 1.50KB |
| Virtual address | 0xb34000 | 11747328 |
| Virtual size | 0x5e5 | 1.47KB |