Manalyze report for 1748d1b302ee110962f6cac51ac2836c

Summary

Architecture	`IMAGE_FILE_MACHINE_AMD64`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
Compilation Date	2024-Feb-10 12:53:19
TLS Callbacks	2 callback(s) detected.
Debug artifacts	Embedded COFF debugging symbols

Plugin Output

Suspicious	The PE is possibly packed.	`Unusual section name found: .xdata` `Unusual section name found: /4` `Unusual section name found: /19` `Unusual section name found: /31` `Unusual section name found: /45` `Unusual section name found: /57` `Unusual section name found: /70` `Unusual section name found: /81` `Unusual section name found: /97` `Unusual section name found: /113`
Info	The PE contains common functions which appear in legitimate applications.	`[!] The program may be hiding some of its imports: GetProcAddress LoadLibraryW` `Can create temporary files: CreateFileW GetTempPathW` `Enumerates local disk drives: GetVolumeInformationW`
Suspicious	The file contains overlay data.	`1439037 bytes of data starting at offset 0x151a00.`
Suspicious	VirusTotal score: 1/71 (Scanned on 2024-03-28 13:32:43)	`APEX: Malicious`

Hashes

MD5	`1748d1b302ee110962f6cac51ac2836c`
SHA1	`67a266832aa1256e3acc5921a9415e8883cf5bec`
SHA256	`c567cde86807ec3a15cf6bd241692dc9f36161ba97ebce535f8da924b0faae45`
SHA3	`fd97fc4166c6286313699bc37ffabc3ad6292c220dba337f533db0237daf33e1`
SSDeep	`49152:IvQfgB4hnT2J+Nz8Ec/jMBZJSnK5Q44/ix:7fnnT2J+NzeuHSK5Q44/ix`
Imports Hash	`572947428697f0f301513cd28947bc5e`

DOS Header

e_magic	`MZ`
e_cblp	`0x90`
e_cp	`0x3`
e_crlc	`0`
e_cparhdr	`0x4`
e_minalloc	`0`
e_maxalloc	`0xffff`
e_ss	`0`
e_sp	`0xb8`
e_csum	`0`
e_ip	`0`
e_cs	`0`
e_ovno	`0`
e_oemid	`0`
e_oeminfo	`0`
e_lfanew	`0x80`

PE Header

Signature	`PE`
Machine	`IMAGE_FILE_MACHINE_AMD64`
NumberofSections	`19`
TimeDateStamp	2024-Feb-10 12:53:19
PointerToSymbolTable	`0x151a00`
NumberOfSymbols	`28385`
SizeOfOptionalHeader	`0xf0`
Characteristics	`IMAGE_FILE_EXECUTABLE_IMAGE` `IMAGE_FILE_LARGE_ADDRESS_AWARE` `IMAGE_FILE_LINE_NUMS_STRIPPED`

Image Optional Header

Magic	`PE32+`
LinkerVersion	`2.0`
SizeOfCode	`0xdba00`
SizeOfInitializedData	`0x113a00`
SizeOfUninitializedData	`0xe00`
AddressOfEntryPoint	`0x00000000000013F0 (Section: .text)`
BaseOfCode	`0x1000`
ImageBase	`0x140000000`
SectionAlignment	`0x1000`
FileAlignment	`0x200`
OperatingSystemVersion	`4.0`
ImageVersion	`0.0`
SubsystemVersion	`5.2`
Win32VersionValue	`0`
SizeOfImage	`0x15d000`
SizeOfHeaders	`0x600`
Checksum	`0x2b653e`
Subsystem	`IMAGE_SUBSYSTEM_WINDOWS_CUI`
DllCharacteristics	`IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE` `IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA` `IMAGE_DLLCHARACTERISTICS_NX_COMPAT`
SizeofStackReserve	`0x200000`
SizeofStackCommit	`0x1000`
SizeofHeapReserve	`0x100000`
SizeofHeapCommit	`0x1000`
LoaderFlags	`0`
NumberOfRvaAndSizes	`16`

.text

MD5	`0a686f3d56b03e4d5aaa6608ad256329`
SHA1	`a250578877689933cd982658370bc5365df6fb4d`
SHA256	`cb9d152738268c6f6893665a7fca20051d0c225e8478b61e794bf0c71c706ce5`
SHA3	`4447e1df9233067e383d166d0f343a74bd9b66ca73865a2fbc4bbb4458d71e25`
VirtualSize	`0xdb8a8`
VirtualAddress	`0x1000`
SizeOfRawData	`0xdba00`
PointerToRawData	`0x600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_CODE` `IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_EXECUTE` `IMAGE_SCN_MEM_READ`
Entropy	`6.15853`

.data

MD5	`1f44bb025150f81e72689cf9a74cc324`
SHA1	`3f555713ea9795c1d78f46cfb277763bbd276bb9`
SHA256	`cc22a7e98d257b63e20d6f443c25e6a0b23255492544b0cf5593f5abdaefd2de`
SHA3	`96d50c4eb4b70a34f2d9c9e5fcb26abf5ffee101c091b595c0689d6be422133d`
VirtualSize	`0x2fc0`
VirtualAddress	`0xdd000`
SizeOfRawData	`0x3000`
PointerToRawData	`0xdc000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0.299068`

.rdata

MD5	`5e3ae3e18a2bbfa49f34fa0cd7fcc3f3`
SHA1	`383f14909148f15425f65b10ebbf187b3d74ae23`
SHA256	`3f347c21d0deed33d13b9c63da34d18fc2c6282823f647cf6e9e84fd3f1f2d73`
SHA3	`8928baefe6442117bfa427af272f5272f589c843f65f963f0b56338759dd8b83`
VirtualSize	`0x12360`
VirtualAddress	`0xe0000`
SizeOfRawData	`0x12400`
PointerToRawData	`0xdf000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.82392`

.pdata

MD5	`05d85c53031571181d2168045096bf9d`
SHA1	`1d1ec6707d97c324fb2c22c18a2a7bff935cfc85`
SHA256	`c0a92b6f0bde3448f9509d7f33818f90db79b8f606eb1195accab9ec4cab17f0`
SHA3	`d31d40cd9af42b63e3ff5292e0305ca44d7f821fb7cc9cf605d7ab0a72d85ec5`
VirtualSize	`0xce7c`
VirtualAddress	`0xf3000`
SizeOfRawData	`0xd000`
PointerToRawData	`0xf1400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`5.94038`

.xdata

MD5	`85dfec594ce76811d528c443a44abd71`
SHA1	`aeffdb9e5f4c3d6a20c2d8b2fda588bf2a33942c`
SHA256	`149654d995013cfce16d86ba20c56b93396a6fed70c47b6f47cc53b217147d81`
SHA3	`8d473cebff4d9ca143baad616b1b6e5422785c15003f92372abe91cf92c08e3f`
VirtualSize	`0x12a78`
VirtualAddress	`0x100000`
SizeOfRawData	`0x12c00`
PointerToRawData	`0xfe400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ`
Entropy	`4.96286`

.bss

MD5	`d41d8cd98f00b204e9800998ecf8427e`
SHA1	`da39a3ee5e6b4b0d3255bfef95601890afd80709`
SHA256	`e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855`
SHA3	`a7ffc6f8bf1ed76651c14756a061d662f580ff4de43b49fa82d80a4b80f8434a`
VirtualSize	`0xcd0`
VirtualAddress	`0x113000`
SizeOfRawData	`0`
PointerToRawData	`0`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_UNINITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`

.idata

MD5	`d64ae4f34b6b0348834a64ce1099f7ca`
SHA1	`1bd6f0da4773188a77e77617ab5e78190a6eb7bd`
SHA256	`7a67f605fc8e81ad260cc601cd31b000aee239dbcbb15bc36cb97b0daa7af263`
SHA3	`3bdb1c3390c3a89ccf45979af1b178f3d5e86783b2751d89de63c88d8d1caf81`
VirtualSize	`0x132c`
VirtualAddress	`0x114000`
SizeOfRawData	`0x1400`
PointerToRawData	`0x111000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`4.33215`

.CRT

MD5	`c959658eed0e537e902124d865bc6a7a`
SHA1	`6d94dc92ba2b32ffbf9a375545d7b9bce3e6d447`
SHA256	`0623ab352170555d680b362f6a24a1236d86adf32d2664b71d9327603b8e01b8`
SHA3	`e54b7d8662bd67c8848e6865cae5a10b09ea38286b89cca6f8b6051a7053f524`
VirtualSize	`0x60`
VirtualAddress	`0x116000`
SizeOfRawData	`0x200`
PointerToRawData	`0x112400`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0.28656`

.tls

MD5	`bf619eac0cdf3f68d496ea9344137e8b`
SHA1	`5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5`
SHA256	`076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560`
SHA3	`622de1e1568ddef36c4b89b706b05201c13481c3575d0fc804ff8224787fcb59`
VirtualSize	`0x10`
VirtualAddress	`0x117000`
SizeOfRawData	`0x200`
PointerToRawData	`0x112600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_READ` `IMAGE_SCN_MEM_WRITE`
Entropy	`0`

.reloc

MD5	`83637a77a4a8a740ae6db60c7fa0fbe7`
SHA1	`f1c680ec0881ac7188d543c6eb9a9db02fb97464`
SHA256	`d2d8856ffa5f5542bd1326cb77d248c32da3a68ac24fae419a940892c0903200`
SHA3	`e71f89ab7c564163dd192aa4c26f5693ef4db38f0e5bc1aff227700b2fa06e00`
VirtualSize	`0x17f0`
VirtualAddress	`0x118000`
SizeOfRawData	`0x1800`
PointerToRawData	`0x112800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.44746`

/4

MD5	`1eb4fbdb7fba419055c694ff68c77c8b`
SHA1	`089eb0caf98a358ec26f84e710058aa3597e79ef`
SHA256	`577738972b46ed0d6e24703002e6dec4cdc9ecf5c6c137eb9bf14c12c1a7e617`
SHA3	`55edd7e93c4d0649b23f073f55656cdec5a286879aaa7830a01b4ccde8bc8427`
VirtualSize	`0xa70`
VirtualAddress	`0x11a000`
SizeOfRawData	`0xc00`
PointerToRawData	`0x114000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`1.74833`

/19

MD5	`a2d004d1fa5877a9472c9f4a89b5d1b5`
SHA1	`c1d0b5aa0b6a4eb081c08148f1114f0ad3369728`
SHA256	`9b0745746941d5b88b377d80a14b57c45d9097f5667ffd173bb6992ee3cf86e1`
SHA3	`74667fbd156e8451b30d2e6eca6c247682f564d7974f841e8b96c69e7e8a4ef2`
VirtualSize	`0x1a013`
VirtualAddress	`0x11b000`
SizeOfRawData	`0x1a200`
PointerToRawData	`0x114c00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.79037`

/31

MD5	`45280157f8f266194bed9d86d4e8a741`
SHA1	`9e556f62892b6b9b533d6577799d17c0b6a2e9ae`
SHA256	`24c650b011490a837d3af1b8635099b55da55762fc3e280be2ded612101a5a2d`
SHA3	`3375c6d1406d6d2330a534f8b550cb04efdb17d71e6c356801d4e9c689d35cc6`
VirtualSize	`0x5134`
VirtualAddress	`0x136000`
SizeOfRawData	`0x5200`
PointerToRawData	`0x12ee00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`4.82321`

/45

MD5	`a3799590d5451affc673d379c72e542d`
SHA1	`f18e7d2cbd5ec793b50632cc336ac3c2624526b7`
SHA256	`b64b69d2bf0aecc0d38e50041cd502e4e2216abc53dcf89c52d7ee77ed685273`
SHA3	`caca39efdfa28b6a6698223a813293bae4560b58d2097bb2a355c028c62baf27`
VirtualSize	`0xa5b5`
VirtualAddress	`0x13c000`
SizeOfRawData	`0xa600`
PointerToRawData	`0x134000`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.0535`

/57

MD5	`13207f9c42130399675e21d60991a3d8`
SHA1	`f019e544e19d42c78cd4f8cdc4949a247992e54a`
SHA256	`b0708eff48b1ec3ef25d52c17cb3aa7fa599f873d6f575023b52efbfbe3c13aa`
SHA3	`1627ba817e601a742241c98b1b722f5780d5ed0e1aad64d4203bb1679568f989`
VirtualSize	`0x30c8`
VirtualAddress	`0x147000`
SizeOfRawData	`0x3200`
PointerToRawData	`0x13e600`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`3.6469`

/70

MD5	`421bae777c354aa9ef112a8d01cb6177`
SHA1	`eb9952910b40c8b61737b7ce2e0d0ef16e38c179`
SHA256	`2c5b9840fcdae204b22e449a16f632abe8037ebaf257b17e961340938fcddd9d`
SHA3	`4023f2265eefbd83575f24a7690e1068424e0a137be0b346e592e2ef8feb7655`
VirtualSize	`0x432`
VirtualAddress	`0x14b000`
SizeOfRawData	`0x600`
PointerToRawData	`0x141800`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`3.9938`

/81

MD5	`78ee641d2e56115a95b125ee9d473915`
SHA1	`1ee3d5ed7bc4691250c6b5f1f8ccb795bff81cbf`
SHA256	`f271d870bbd27cfe4de17a31a1e5ad38999fcceee804f17f8d574e28730979cb`
SHA3	`bec827f85c7146ecb093be984d9cec06a7c1de9e8bd22215cf471efa46b4b8cd`
VirtualSize	`0x2350`
VirtualAddress	`0x14c000`
SizeOfRawData	`0x2400`
PointerToRawData	`0x141e00`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`4.67572`

/97

MD5	`ce2e3e824d74b5a8c7b5ef12b9820643`
SHA1	`b405e54b4b65105b823e9a1d0e0ea9bff12f2b86`
SHA256	`a6ad6f302c4b31d370c290dc3bc950439417e22c896c297bfa4b45d14a1dc89a`
SHA3	`a5f50d81564a18b9834ed820b9ae428b23e8fbcc8de454971065045864e30784`
VirtualSize	`0xce9b`
VirtualAddress	`0x14f000`
SizeOfRawData	`0xd000`
PointerToRawData	`0x144200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`5.86867`

/113

MD5	`f2222efb824347620b4c05548891badd`
SHA1	`c8f9566d4fa66112ab54e82d5fc1196c33b03ee4`
SHA256	`019df1dd006bfa898f52a8d1d91b99bc6d3cdf4c0edc5e03a0aaf11bb3b187cf`
SHA3	`db3b760be1c35bc7c6e37d34f02ad26f27974217d594f93124e9e76bcec7d3b2`
VirtualSize	`0x648`
VirtualAddress	`0x15c000`
SizeOfRawData	`0x800`
PointerToRawData	`0x151200`
PointerToRelocations	`0`
PointerToLineNumbers	`0`
NumberOfLineNumbers	`0`
NumberOfRelocations	`0`
Characteristics	`IMAGE_SCN_CNT_INITIALIZED_DATA` `IMAGE_SCN_MEM_DISCARDABLE` `IMAGE_SCN_MEM_READ`
Entropy	`4.95291`

Imports

KERNEL32.dll	`CloseHandle` `CreateFileW` `CreateHardLinkW` `CreateSemaphoreW` `DeleteCriticalSection` `DeleteFileW` `EnterCriticalSection` `FindFirstVolumeW` `FindNextVolumeW` `FindVolumeClose` `FormatMessageA` `GetCurrentThreadId` `GetDiskFreeSpaceExW` `GetFileAttributesW` `GetFileInformationByHandle` `GetFileSizeEx` `GetFileType` `GetFullPathNameW` `GetLastError` `GetModuleHandleW` `GetProcAddress` `GetTempPathW` `GetVolumeInformationW` `InitializeCriticalSection` `IsDBCSLeadByteEx` `LeaveCriticalSection` `LoadLibraryW` `LocalFree` `MoveFileExW` `MultiByteToWideChar` `RaiseException` `ReleaseSemaphore` `RemoveDirectoryW` `RtlCaptureContext` `RtlLookupFunctionEntry` `RtlUnwindEx` `RtlVirtualUnwind` `SetEndOfFile` `SetFilePointer` `SetLastError` `SetUnhandledExceptionFilter` `Sleep` `TlsAlloc` `TlsFree` `TlsGetValue` `TlsSetValue` `VirtualProtect` `VirtualQuery` `WaitForSingleObject` `WideCharToMultiByte`
msvcrt.dll	`__C_specific_handler` `___lc_codepage_func` `___mb_cur_max_func` `__getmainargs` `__initenv` `__iob_func` `__set_app_type` `__setusermatherr` `_amsg_exit` `_cexit` `_close` `_commode` `_errno` `_filelengthi64` `_fileno` `_findclose` `_fmode` `_fstat64` `_get_osfhandle` `_initterm` `_lseeki64` `_onexit` `_telli64` `_wchdir` `_wchmod` `_wfindnext64` `_wfopen` `_wfullpath` `_wgetcwd` `_wmkdir` `_wopen` `_wstat64` `_wutime64` `abort` `calloc` `exit` `fclose` `fflush` `fgetpos` `fopen` `fprintf` `fputc` `fputs` `fread` `free` `fsetpos` `fwrite` `getc` `getwc` `isalpha` `islower` `isupper` `iswctype` `localeconv` `malloc` `memchr` `memcmp` `memcpy` `memmove` `memset` `putc` `putwc` `realloc` `setlocale` `setvbuf` `signal` `strcmp` `strcoll` `strerror` `strftime` `strlen` `strncmp` `strxfrm` `towlower` `towupper` `ungetc` `ungetwc` `vfprintf` `wcscat` `wcscmp` `wcscoll` `wcscpy` `wcsftime` `wcslen` `wcsxfrm` `_wfindfirst64` `_write` `_read` `_fileno` `_fdopen` `_close`

Delayed Imports

Version Info

TLS Callbacks

StartAddressOfRawData	`0x140117000`
EndAddressOfRawData	`0x140117008`
AddressOfIndex	`0x14011308c`
AddressOfCallbacks	`0x140116038`
SizeOfZeroFill	`0`
Characteristics	`IMAGE_SCN_TYPE_REG`
Callbacks	`0x000000014000B8A0` `0x000000014000B870`

Load Configuration

RICH Header

Errors

[*] Warning: Tried to read outside the COFF string table to get the name of section /4!
[*] Warning: Tried to read outside the COFF string table to get the name of section /19!
[*] Warning: Tried to read outside the COFF string table to get the name of section /31!
[*] Warning: Tried to read outside the COFF string table to get the name of section /45!
[*] Warning: Tried to read outside the COFF string table to get the name of section /57!
[*] Warning: Tried to read outside the COFF string table to get the name of section /70!
[*] Warning: Tried to read outside the COFF string table to get the name of section /81!
[*] Warning: Tried to read outside the COFF string table to get the name of section /97!
[*] Warning: Tried to read outside the COFF string table to get the name of section /113!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF symbol's section number is bigger than the number of sections!
[*] Warning: COFF String Table's reported size is bigger than the remaining bytes!
[*] Warning: Section .bss has a size of 0!