- DOS Header
- NT Header
- Rich Header
- Sections
- Imports
- Resource
- Exceptions
- Certificate
- Relocations
- Debugs
- Load config
- IAT
.text
| Entropy | 0x6.6fc58e443f41 | 6.4366082111948835 |
| Characteristics | 0x60000020 | 1610612768 |
| Number of line numbers | 0x0 | 0 |
| Number of relocations | 0x0 | 0 |
| Pointer to line numbers | 0x0 | 0 |
| Pointer to raw data | 0x400 | 1024 |
| Pointer to relocations | 0x0 | 0 |
| Size of raw data | 0x15200 | 84.50KB |
| Virtual address | 0x1000 | 4096 |
| Virtual size | 0x150a0 | 84.16KB |
.rdata
| Entropy | 0x5.36b8be984abc | 5.213756477528236 |
| Characteristics | 0x40000040 | 1073741888 |
| Number of line numbers | 0x0 | 0 |
| Number of relocations | 0x0 | 0 |
| Pointer to line numbers | 0x0 | 0 |
| Pointer to raw data | 0x15600 | 87552 |
| Pointer to relocations | 0x0 | 0 |
| Size of raw data | 0xc400 | 49.00KB |
| Virtual address | 0x17000 | 94208 |
| Virtual size | 0xc242 | 48.56KB |
.data
| Entropy | 0x2.512d8cffd21dc | 2.3171012997209948 |
| Characteristics | 0xc0000040 | 3221225536 |
| Number of line numbers | 0x0 | 0 |
| Number of relocations | 0x0 | 0 |
| Pointer to line numbers | 0x0 | 0 |
| Pointer to raw data | 0x21a00 | 137728 |
| Pointer to relocations | 0x0 | 0 |
| Size of raw data | 0x1400 | 5.00KB |
| Virtual address | 0x24000 | 147456 |
| Virtual size | 0x2ab8 | 10.68KB |
.pdata
| Entropy | 0x5.09d87115b20a8 | 5.0384588888137305 |
| Characteristics | 0x40000040 | 1073741888 |
| Number of line numbers | 0x0 | 0 |
| Number of relocations | 0x0 | 0 |
| Pointer to line numbers | 0x0 | 0 |
| Pointer to raw data | 0x22e00 | 142848 |
| Pointer to relocations | 0x0 | 0 |
| Size of raw data | 0x1600 | 5.50KB |
| Virtual address | 0x27000 | 159744 |
| Virtual size | 0x14c4 | 5.19KB |
.gfids
| Entropy | 0x1.95a44a9ecb735 | 1.5845381391222422 |
| Characteristics | 0x40000040 | 1073741888 |
| Number of line numbers | 0x0 | 0 |
| Number of relocations | 0x0 | 0 |
| Pointer to line numbers | 0x0 | 0 |
| Pointer to raw data | 0x24400 | 148480 |
| Pointer to relocations | 0x0 | 0 |
| Size of raw data | 0x200 | 512B |
| Virtual address | 0x29000 | 167936 |
| Virtual size | 0xc4 | 196B |
.rsrc
| Entropy | 0x5.51a15df0dcee4 | 5.318868514351316 |
| Characteristics | 0x40000040 | 1073741888 |
| Number of line numbers | 0x0 | 0 |
| Number of relocations | 0x0 | 0 |
| Pointer to line numbers | 0x0 | 0 |
| Pointer to raw data | 0x24600 | 148992 |
| Pointer to relocations | 0x0 | 0 |
| Size of raw data | 0xe1000 | 900.00KB |
| Virtual address | 0x2a000 | 172032 |
| Virtual size | 0xe0f78 | 899.87KB |
.reloc
| Entropy | 0x5.5196c6e2fa9e8 | 5.318706922926703 |
| Characteristics | 0x42000040 | 1107296320 |
| Number of line numbers | 0x0 | 0 |
| Number of relocations | 0x0 | 0 |
| Pointer to line numbers | 0x0 | 0 |
| Pointer to raw data | 0x105600 | 1070592 |
| Pointer to relocations | 0x0 | 0 |
| Size of raw data | 0x800 | 2.00KB |
| Virtual address | 0x10b000 | 1093632 |
| Virtual size | 0x78c | 1.89KB |