GetFunAddr
Init
UnInit
Overview
overview
8Static
static
8ff842cb887...b5.rar
windows7-x64
3ff842cb887...b5.rar
windows10-2004-x64
367pp-6-680...��.url
windows7-x64
167pp-6-680...��.url
windows10-2004-x64
167pp-6-680...��.url
windows7-x64
167pp-6-680...��.url
windows10-2004-x64
167pp-6-680...er.dll
windows7-x64
167pp-6-680...er.dll
windows10-2004-x64
167pp-6-680...er.exe
windows7-x64
167pp-6-680...er.exe
windows10-2004-x64
167pp-6-680...er.exe
windows7-x64
167pp-6-680...er.exe
windows10-2004-x64
167pp-6-680...te.dll
windows7-x64
167pp-6-680...te.dll
windows10-2004-x64
367pp-6-680...te.exe
windows7-x64
167pp-6-680...te.exe
windows10-2004-x64
167pp-6-680...rv.exe
windows7-x64
167pp-6-680...rv.exe
windows10-2004-x64
167pp-6-680...ef.exe
windows7-x64
867pp-6-680...ef.exe
windows10-2004-x64
867pp-6-680...��.exe
windows7-x64
167pp-6-680...��.exe
windows10-2004-x64
167pp-6-680...nt.dll
windows7-x64
167pp-6-680...nt.dll
windows10-2004-x64
167pp-6-680...ll.dll
windows7-x64
167pp-6-680...ll.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
ff842cb8870fe885f00279948014d7f786c9461e3e3916bd8a50984e42b460b5.rar
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ff842cb8870fe885f00279948014d7f786c9461e3e3916bd8a50984e42b460b5.rar
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/67PP私服下载站.url
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/67PP私服下载站.url
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/DBServer/67PP私服下载站.url
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/DBServer/67PP私服下载站.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/DBServer/DBServer.dll
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/DBServer/DBServer.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/DBServer/DBServer.exe
Resource
win7-20220901-en
Behavioral task
behavioral10
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/DBServer/DBServer.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral11
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/LogServer/LogDataServer.exe
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/LogServer/LogDataServer.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/LoginGate/LoginGate.dll
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/LoginGate/LoginGate.dll
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/LoginGate/LoginGate.exe
Resource
win7-20221111-en
Behavioral task
behavioral16
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/LoginGate/LoginGate.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/LoginSrv/LoginSrv.exe
Resource
win7-20220901-en
Behavioral task
behavioral18
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/LoginSrv/LoginSrv.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/Mir200/Envir/MonItems/mondef.exe
Resource
win7-20221111-en
Behavioral task
behavioral20
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/Mir200/Envir/MonItems/mondef.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/Mir200/Envir/MonItems/暴率调整.exe
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/Mir200/Envir/MonItems/暴率调整.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/Mir200/Event.dll
Resource
win7-20220812-en
Behavioral task
behavioral24
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/Mir200/Event.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/Mir200/firewall.dll
Resource
win7-20220812-en
Behavioral task
behavioral26
Sample
67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/Mir200/firewall.dll
Resource
win10v2004-20220812-en
Target
ff842cb8870fe885f00279948014d7f786c9461e3e3916bd8a50984e42b460b5
Size
8.2MB
MD5
8bf3694edf096107a668d352c04c9973
SHA1
4d38de3ee641018d6a11871aa2597f4754f3597c
SHA256
ff842cb8870fe885f00279948014d7f786c9461e3e3916bd8a50984e42b460b5
SHA512
3005c70cf0d62c2fdfe914a96ef6db1b048812eba8ef30906f714a7c9a4ed48418b6f93d6f29065729e30a02807437ddd1bb90303be0ad6d965d085cab6c4a1a
SSDEEP
196608:7u5eLwWan1K2WRcvapMmF/c2znTwh876h6V5P:7uywhn1K2WRcCMw/c2zsh8m6VJ
resource | yara_rule |
---|---|
static1/unpack001/67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/DBServer/DBServer.dll | aspack_v212_v242 |
resource | yara_rule |
---|---|
static1/unpack001/67pp-6-680/超级变态之独步天下(装备超绚版)/mirserver/Mir200/Envir/MonItems/mondef.exe | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetFunAddr
Init
UnInit
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
GetModuleHandleA
LoadLibraryA
GlobalSessionManagerGetSession
MainEngineCreate
MainEngineDestroy
MainEngineGetGlobalSessionManager
MainEngineGetThreadArr
MainEngineGetVariable
MainEngineStart
MainEngineStop
MainEngineStopAndWait
SetGlobalData
VariableGetLong
VariableSetLong
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
CreateDirectoryA
GetTempPathA
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetStringTypeA
LCMapStringW
LCMapStringA
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW
MessageBoxA
wsprintfA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
0
1
10
11
12
13
14
15
16
17
18
19
2
20
21
22
23
24
25
26
27
28
29
3
30
31
32
33
34
35
36
37
4
5
6
7
8
9
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Init
UnInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ