3 AddressOfEntryPoint: 4512
7 MajorOperatingSystemVersion: 6
8 MinorOperatingSystemVersion: 0
11 MajorSubsystemVersion: 6
12 MinorSubsystemVersion: 0
13 Subsystem: IMAGE_SUBSYSTEM_WINDOWS_GUI
14 DLLCharacteristics: [ IMAGE_DLL_CHARACTERISTICS_HIGH_ENTROPY_VA, IMAGE_DLL_CHARACTERISTICS_DYNAMIC_BASE, IMAGE_DLL_CHARACTERISTICS_NX_COMPAT ]
15 SizeOfStackReserve: 1048576
16 SizeOfStackCommit: 4096
17 SizeOfHeapReserve: 1048576
18 SizeOfHeapCommit: 4096
20 RelativeVirtualAddress: 6962976
23 RelativeVirtualAddress: 6963051
26 RelativeVirtualAddress: 0
29 RelativeVirtualAddress: 6995968
32 RelativeVirtualAddress: 0
35 RelativeVirtualAddress: 7004160
38 RelativeVirtualAddress: 6987776
41 RelativeVirtualAddress: 0
44 RelativeVirtualAddress: 0
47 RelativeVirtualAddress: 6962168
50 RelativeVirtualAddress: 0
53 RelativeVirtualAddress: 0
56 RelativeVirtualAddress: 6965496
58 DelayImportDescriptor:
59 RelativeVirtualAddress: 0
62 RelativeVirtualAddress: 0
65 Machine: IMAGE_FILE_MACHINE_AMD64
66 Characteristics: [ IMAGE_FILE_EXECUTABLE_IMAGE, IMAGE_FILE_LARGE_ADDRESS_AWARE, IMAGE_FILE_DLL ]
69 Characteristics: [ IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ ]
74 Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ ]
79 Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ ]
80 VirtualAddress: 6987776
82 SectionData: 00000000A9D795620000000002000000190000001CA06A001C040000525344535450075756EAA5DB4C4C44205044422E0100000000
84 Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE ]
85 VirtualAddress: 6991872
89 Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ ]
90 VirtualAddress: 6995968
94 Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE ]
95 VirtualAddress: 7000064
99 Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ ]
100 VirtualAddress: 7004160
104 Characteristics: [ IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ ]
105 VirtualAddress: 7008256
107 SectionData: DEADBEEFBAADF00D