Init
UnInit
Overview
overview
10Static
static
8MirServer/...er.exe
windows7-x64
1MirServer/...er.exe
windows10-2004-x64
1MirServer/...er.exe
windows7-x64
1MirServer/...er.exe
windows10-2004-x64
1MirServer/...er.exe
windows7-x64
7MirServer/...er.exe
windows10-2004-x64
7MirServer/...te.exe
windows7-x64
1MirServer/...te.exe
windows10-2004-x64
1MirServer/...rv.exe
windows7-x64
1MirServer/...rv.exe
windows10-2004-x64
3MirServer/...al.dll
windows7-x64
1MirServer/...al.dll
windows10-2004-x64
1MirServer/...er.exe
windows7-x64
MirServer/...er.exe
windows10-2004-x64
MirServer/...��.htm
windows7-x64
10MirServer/...��.htm
windows10-2004-x64
10MirServer/...te.exe
windows7-x64
1MirServer/...te.exe
windows10-2004-x64
1MirServer/...te.exe
windows7-x64
1MirServer/...te.exe
windows10-2004-x64
1MirServer/...��.url
windows7-x64
1MirServer/...��.url
windows10-2004-x64
1MirServer/...��.url
windows7-x64
1MirServer/...��.url
windows10-2004-x64
1Behavioral task
behavioral1
Sample
MirServer/DBServer/DBServer.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
MirServer/DBServer/DBServer.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
MirServer/GameCenter.exe
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
MirServer/GameCenter.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
MirServer/LogServer/LogDataServer.exe
Resource
win7-20220812-en
Behavioral task
behavioral6
Sample
MirServer/LogServer/LogDataServer.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
MirServer/LoginGate/LoginGate.exe
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
MirServer/LoginGate/LoginGate.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral9
Sample
MirServer/LoginSrv/LoginSrv.exe
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
MirServer/LoginSrv/LoginSrv.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
MirServer/Mir200/IPLocal.dll
Resource
win7-20220812-en
Behavioral task
behavioral12
Sample
MirServer/Mir200/IPLocal.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
MirServer/Mir200/M2Server.exe
Resource
win7-20221111-en
Behavioral task
behavioral14
Sample
MirServer/Mir200/M2Server.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral15
Sample
MirServer/Readme-说明.htm
Resource
win7-20220812-en
Behavioral task
behavioral16
Sample
MirServer/Readme-说明.htm
Resource
win10v2004-20220901-en
Behavioral task
behavioral17
Sample
MirServer/RunGate/RunGate.exe
Resource
win7-20221111-en
Behavioral task
behavioral18
Sample
MirServer/RunGate/RunGate.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
MirServer/SelGate/SelGate.exe
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
MirServer/SelGate/SelGate.exe
Resource
win10v2004-20221111-en
Behavioral task
behavioral21
Sample
MirServer/好服务端下载站.url
Resource
win7-20221111-en
Behavioral task
behavioral22
Sample
MirServer/好服务端下载站.url
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
MirServer/完美科技信誉一条龙.url
Resource
win7-20221111-en
Behavioral task
behavioral24
Sample
MirServer/完美科技信誉一条龙.url
Resource
win10v2004-20221111-en
Target
bdfc91a4bd37d52d6c11bdfabf5cb8ef3ca113b246e8d0319d730e7822e8e237
Size
25.2MB
MD5
1001740cc77cc2da78ff1a25a5cc3086
SHA1
2957a22701a1db50fd2414dbae0737e437723634
SHA256
bdfc91a4bd37d52d6c11bdfabf5cb8ef3ca113b246e8d0319d730e7822e8e237
SHA512
413efafb1fa496e9c212f86cf7d6eaa72075a3f2014bd683256b79062455b499eb1b1616ecbc7b6a4c76af9df2b87194b5947388611a69e374a8114f6bda2cc0
SSDEEP
786432:5AkIZakId/6Jc+0Xa/+n0rBV32a7QjDUNCBKluW6Uc7:G5J2+8a/GCH317NVluW/c7
Processes:
resource | yara_rule |
---|---|
static1/unpack001/MirServer/LoginGate/LoginGate.exe | aspack_v212_v242 |
static1/unpack001/MirServer/LoginSrv/LoginSrv.exe | aspack_v212_v242 |
static1/unpack001/MirServer/Mir200/IPLocal.dll | aspack_v212_v242 |
static1/unpack001/MirServer/RunGate/RunGate.exe | aspack_v212_v242 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
GetKeyboardType
RegQueryValueExA
SysFreeString
VerQueryValueA
UnrealizeObject
CoTaskMemAlloc
ImageList_SetIconSize
GetSaveFileNameA
WSACleanup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
SetEndOfFile ��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Init
UnInit
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
��X��\�O��NMq�g�TΙ�� 1|d��H���7�N��T/��C,M���j-v�-��5�^��/������ ������2��֍��۔^L}��@�=i�B��n�F4���q?��]�5�=�k���2�L��� �e�#nk�!�WO��8;` /��j�+�9�F�X��&<�-����'�p �GN��1��FN��5�d�j�Nn����\���+ì,v0C�:�D�sYHl4ԁ� �gS�z£��ML�#�e�(J�u"-ԹcA����Ъ&iiq�p��~�8vu�Y��~��4j�������t�����λۨ��cM�t��~���f���!�d2Gf�����g=�O�p�[I�'�G+x���/��%��BU,��G?ղ��kDk7[LWO�p=�� S�0���������B�~���b��6��d���\��k��:��H�.6�O��Xo�>���*&��nBD�P��R��du4��b���>P�,�?U%�2{v_� f}�?&�#~�ѓ�J��ʷ��X��QHП<�)I�2���� �O���+>p~fL�5B�}�hY�7�Fp�c�5�$s�tci�A �C���I���Lܺ��s�r֪��R����&�ڻ��;!2���ɢWF�Jֲ����kN�B��zp�bP�#X�ޘ��r���ʤ��հ�XzF�)�,��J>�w��Ym��J4KG�"���7&���:o*�"J��i�?9��bF��T�O�X_3c�B G�EE� �+��kG��hhǾ=+���s7/�����¼��n D�zyl�(��c�tk�����P�Z����;b��8LӸc|u��P�B]�V�������4�N�/�¿��m�!i�0x� S��t0[���<|���gd La�l��Y�J�y�T~����0_�ɤr��[�0�Mǐ����=�I;��:��m���6L(�f�"2�l3�4Fǡ1��k�p���D�5V^�z?$�u,���}?V�F%l}���rV�{J�r>�@� ^�&�$�l����-�Ƹ#r�-��H��B�N�xq�:P��h����7P\��o��=�pc�99��<U�[��m�.���h_�-� 1)3m_�2u�6qX'�ۮ16pm�;H�l��C������/s��{Y�����F��w��隡L��[�C'*�p�|�(β`smN��B1G4��B�����E������ӗe����$�,��(>�L�0uI. �p0�^=7(TVOɮ��CK&�!ڡO_r��o������:dv�|�I�2:ϊ��v����z������/?�!��&{")ƽ��*&�W*t��1p��f� �Ω��X�o/�mu5ʬ l��k8�0�Dz��K6w|[���xזX�$��a.��2�3�"Ǒ,!]�>o�2��&�{������?��ũ���-ݽ&��ɄP_�m+����|��=�����P})sD�Z�(�@�A�9�O O+כ`���/QC��v�(F�Ka�ց�7������5Y9�E�ƀ������؇pd~��4�����M�Y��_S��1^��6��v�?�P�������c��}��0����o�As =��Eڈ�A�:�2g`\d���N |���aT@�����j�����$3�[,ԭq�i�8'����� $��o�S$��X�!N��VsCk/�<y��w��LN`cۤ�R� K1�?�Z}�U��m�^�����<�xS�e��iFA�S�t���Ah�77z�ę�Y���SP`���&�ҍ73?��{*T��G�M(@�q���q<����Zҍ?�q_�*ӪF��(/$�*��~+��;KWS����ۖ�ܞ��)J�I[� X\���H�����4���rw ���;|(\ҏ����'=��*D�ܞ,X������@��i�d�S�'�T�6�FM4eg$0<�w�T�f��,66 ��cހP��/ 3�h�5a��4>Fl�A��YwK�n��`� ��Ej��Z�� �EF���7;X�d/o�<�WY_��� JL��7�ީ��ѠtCZ��n�p[��I)�I�m%�f���R=�����f��@^�i̇�pL,�g�(��FQ�ǎ�!1�b�|H�g,�l��·��@6�c�Qr�.���}�s���jt�`��J��n�����l��� �M�d�P\��ӂ�m(gx�7F���=����^�ܶ?\j�+�/9���p2�=l�#��-he_-�~B(���/�� �=9�WQH�&�@1g��-���&�LC���p,�Lc�~�v�̺vw�q��*��8�F^��ޭ6�FTF�O)�����G)�-j�)�+?�w@�(Z$��pwa\I��!x�;��Z��>����<H[� I|��$"o*��{(�G������x�P��/?��]V���i��b��_Lq%���,fΏ"��v)D����4���jGߣI��jڻ_η ���Ȣ����6�'��K~;��[��L�`�%������0�ח���������;���� ����75 �U�w����͆h�y���J�����[�����BQ�*%Қ*^�m�*]������� e��W��[9<�Aܺۻ�ׁ�W����v㦰)�$D���\���Y�E�Y�L՛+�VT�!D2�o^M:���%,E�Z_��ז 32��$�eaM6eu�$��Z�FA�WR{��Ϗ�d,)[��l�?p��7���C-GnPb���Y�X���|�����c�MDZ��ht�_�����/�}������Iހ�D:�~������>������οY)���C��6����"I�~o�=-� `w,���Z�1f"�6��]kw�ﷇ���a��.��'�4m�ݳYg�= ��� ��o�����[z)���#� "a�{J����\���ܳ#�H�����N���!��cZ���z�M�G���X��H�gţ��;���>��K)�O�ff�'~ᅧ��.,�����/hٿ�"h�������5i��]1��;�s_I�� ���7�-�n�nD÷7���^������c�/���^��~,�w�IVH�dq. �-��Z�ADJT�v�E�w�(p���Ы
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE