{
  "id": 12615,
  "title": "About the file size",
  "url": "/competitions/malware-classification/discussion/12615",
  "author_name": "",
  "post_date": "2015-02-26T09:19:21.753Z",
  "votes": null,
  "comment_count": 1,
  "views": 1076,
  "content": "<p>Hi, all</p>\n<p>Normally we can found that asm file size &gt; bytes file. Anyone know why the following asm file size &lt; bytes file? External lib included?</p>\n<p>./train/BFmbPXnMtl9oVyI1SYvT.asm&nbsp;&nbsp;&nbsp;&nbsp; 18.4KB<br>./train/BFmbPXnMtl9oVyI1SYvT.bytes&nbsp;&nbsp; 1.3MB</p>",
  "messages": [
    {
      "id": "64923",
      "postDate": "02/26/2015 09:19:21",
      "content": "<p>Hi, all</p>\n<p>Normally we can found that asm file size &gt; bytes file. Anyone know why the following asm file size &lt; bytes file? External lib included?</p>\n<p>./train/BFmbPXnMtl9oVyI1SYvT.asm&nbsp;&nbsp;&nbsp;&nbsp; 18.4KB<br>./train/BFmbPXnMtl9oVyI1SYvT.bytes&nbsp;&nbsp; 1.3MB</p>",
      "rawMarkdown": "",
      "votes": null
    },
    {
      "id": "65081",
      "postDate": "02/27/2015 23:09:40",
      "content": "<p>Looks like the bulk of the executable's data is contained in the .rsrc (resource) segment (starting at 00404000). This segment shows up fully in the binary .bytes file, but it is not parsed by the disassembler. In the .asm file the whole .rsrc segment is collapsed, which is why the .asm file is much smaller.</p>",
      "rawMarkdown": "",
      "votes": null
    }
  ],
  "comments": [
    {
      "id": 65081,
      "author_name": "davidtran",
      "author_url": "",
      "post_date": "02/27/2015 23:09:40",
      "content": "<p>Looks like the bulk of the executable's data is contained in the .rsrc (resource) segment (starting at 00404000). This segment shows up fully in the binary .bytes file, but it is not parsed by the disassembler. In the .asm file the whole .rsrc segment is collapsed, which is why the .asm file is much smaller.</p>",
      "votes": null,
      "replies": []
    }
  ],
  "raw_markdown_by_id": {
    "64923": "",
    "65081": ""
  },
  "source": "meta"
}