Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
a9796b3006d8d2d583ea084e423ab561dd316c027fafe055eb0cb87add233b9e.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9796b3006d8d2d583ea084e423ab561dd316c027fafe055eb0cb87add233b9e.dll
Resource
win10v2004-20221111-en
Target
a9796b3006d8d2d583ea084e423ab561dd316c027fafe055eb0cb87add233b9e
Size
5.1MB
MD5
2d88cdba47585550d767ec966e9edccd
SHA1
39152d82f511632143f7c2581cffc80881df3556
SHA256
a9796b3006d8d2d583ea084e423ab561dd316c027fafe055eb0cb87add233b9e
SHA512
67d1adf2da4afb00b5fca0063e868e264157f01d12dbd97d3752b4d8961214e42a7d53fb05c404aae7fd2e2e56f8623bb1a0e6f59dcb811b9db1279b9f47d3d7
SSDEEP
98304:EuO8xTu9DjMpwu/AlwnTIbvqT6kg7ivBFWaYaLpyDkZ:oiSwnTIbCzg2BFWaYkpd
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,OU=IT,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,L=Shanghai,C=CN
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetSystemDirectoryW
SetFileAttributesW
DeleteFileW
GetCurrentDirectoryW
GetWindowsDirectoryW
MoveFileExW
CopyFileW
GetTempFileNameW
LockResource
GetSystemInfo
lstrcatW
lstrcpyW
GetFileSizeEx
GlobalAlloc
GetVolumeInformationW
GetDiskFreeSpaceW
GetLogicalDriveStringsW
GetEnvironmentVariableW
DeviceIoControl
GlobalMemoryStatusEx
FreeResource
IsBadWritePtr
IsBadReadPtr
IsBadStringPtrW
GetLocalTime
HeapSize
HeapReAlloc
HeapDestroy
GetPrivateProfileStructW
WritePrivateProfileStringW
GetPrivateProfileIntW
WritePrivateProfileStructW
lstrcpynW
LocalAlloc
AreFileApisANSI
HeapCreate
InterlockedCompareExchange
LockFile
GetFullPathNameA
UnlockFileEx
HeapValidate
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
OutputDebugStringW
FlushViewOfFile
CreateFileA
WaitForSingleObjectEx
GetVersionExA
DeleteFileA
HeapCompact
UnlockFile
CreateFileMappingA
LockFileEx
GetSystemTimeAsFileTime
FormatMessageA
QueryPerformanceCounter
FlushFileBuffers
TerminateThread
CreateThread
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetTempPathW
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
LoadLibraryExA
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetComputerNameW
LeaveCriticalSection
GetCurrentThreadId
GetLastError
RaiseException
DecodePointer
DeleteCriticalSection
Sleep
GlobalFree
InterlockedDecrement
InterlockedIncrement
GetTickCount
GetCurrentProcess
CloseHandle
OutputDebugStringA
LoadLibraryW
GetProcAddress
FreeLibrary
SizeofResource
InterlockedExchange
GetCommandLineW
GetModuleFileNameW
SetErrorMode
MultiByteToWideChar
LoadResource
FindResourceW
LocalFree
GetModuleHandleW
lstrcmpiW
LoadLibraryExW
SetUnhandledExceptionFilter
GetLongPathNameW
MoveFileW
WaitForMultipleObjects
CreateEventW
SetEvent
SetCurrentDirectoryW
WaitForSingleObject
CreateFileW
GetOverlappedResult
ReadDirectoryChangesW
ResetEvent
GetDriveTypeW
SwitchToThread
WriteProcessMemory
VirtualProtect
GetVersionExW
HeapFree
HeapAlloc
GetProcessHeap
MulDiv
CompareStringW
lstrlenW
GlobalLock
GlobalUnlock
GetACP
WideCharToMultiByte
FindFirstFileW
GetShortPathNameW
GetFileAttributesExW
FindNextFileW
FindClose
FormatMessageW
InterlockedExchangeAdd
GetCurrentProcessId
ExpandEnvironmentStringsW
GetFileAttributesW
LoadLibraryA
CreateProcessW
GetExitCodeProcess
CreateMutexW
ReleaseMutex
QueryDosDeviceW
OpenProcess
OpenFileMappingW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
TryEnterCriticalSection
InitializeCriticalSection
ResumeThread
FileTimeToSystemTime
FileTimeToLocalFileTime
SystemTimeToFileTime
GetSystemTime
ReadFile
WriteFile
SetFileTime
SetFilePointer
SetEndOfFile
GetFileSize
GetFileTime
CreateDirectoryW
GetFullPathNameW
RemoveDirectoryW
SetLastError
GetWindow
EndPaint
BeginPaint
InvalidateRect
RegisterWindowMessageW
UpdateWindow
DialogBoxParamW
SetWindowLongW
UnregisterClassW
IsWindow
LoadIconW
PostMessageW
RegisterHotKey
UnregisterHotKey
EmptyClipboard
CloseClipboard
OpenClipboard
GetActiveWindow
GetKeyState
SetDlgItemInt
GetDlgItem
GetDlgItemInt
SetCursor
GetWindowDC
BringWindowToTop
FillRect
RedrawWindow
OffsetRect
ShowWindow
MsgWaitForMultipleObjects
EndDialog
ScreenToClient
SetWindowRgn
MonitorFromWindow
CharLowerBuffW
GetKeyNameTextW
GetKeyboardLayout
MapVirtualKeyExW
SetTimer
SetDlgItemTextW
GetFocus
FindWindowW
GetCursorPos
DestroyIcon
PostQuitMessage
KillTimer
IsZoomed
IsRectEmpty
DestroyMenu
SetWindowPlacement
CallWindowProcW
GetSubMenu
GetWindowPlacement
DeleteMenu
LoadMenuW
ModifyMenuW
GetMenuItemInfoW
SetFocus
IsWindowUnicode
DrawTextW
SetCapture
IntersectRect
IsWindowVisible
GetDC
InflateRect
DispatchMessageA
GetMessageA
GetRawInputData
GetMenuStringW
GetMenuItemCount
GetMenuState
TrackMouseEvent
GetAsyncKeyState
GetScrollPos
EqualRect
PostThreadMessageW
SetRect
SetPropW
GetSysColor
RemovePropW
GetPropW
SendMessageW
CheckMenuRadioItem
SetMenuDefaultItem
IsDialogMessageW
CreateDialogParamW
CreateIconFromResourceEx
CreateIconFromResource
GetMessageExtraInfo
RegisterRawInputDevices
GetWindowThreadProcessId
GetLastActivePopup
AttachThreadInput
GetForegroundWindow
MessageBoxW
wsprintfW
CreateMenu
RegisterClipboardFormatW
GetClipboardData
SetClipboardData
WaitMessage
MonitorFromRect
DrawIconEx
CreatePopupMenu
GetUpdateRect
InsertMenuW
AppendMenuW
UnionRect
MonitorFromPoint
GetMenuItemID
GetCursor
WindowFromPoint
IsMenu
TrackPopupMenuEx
LoadStringW
UpdateLayeredWindow
GetWindowTextLengthW
GetCapture
GetDlgCtrlID
MoveWindow
GetWindowTextW
ReleaseDC
SetForegroundWindow
PtInRect
SetMenuItemInfoW
GetParent
IsWindowEnabled
EnableWindow
SendMessageTimeoutW
EnumWindows
GetMessageW
DefWindowProcW
DestroyWindow
DispatchMessageW
PeekMessageW
CharNextW
TranslateMessage
CopyRect
GetClientRect
CreateWindowExW
DrawFocusRect
SetRectEmpty
RegisterClassExW
LoadCursorW
IsIconic
SetClassLongW
SetWindowTextW
MapWindowPoints
ClientToScreen
ReleaseCapture
GetMonitorInfoW
GetWindowRect
GetWindowLongW
FindWindowExW
GetSystemMetrics
SetWindowPos
GetClassNameW
GetClassInfoExW
SystemParametersInfoW
GetDesktopWindow
GetObjectW
CreatePolygonRgn
DeleteDC
StretchDIBits
Polyline
CreateBitmap
FillRgn
SetBrushOrgEx
SetArcDirection
SetROP2
SetDCPenColor
SetDCBrushColor
GetTextColor
SetDIBColorTable
GetBitmapBits
CreatePatternBrush
SetBitmapBits
CreateDIBSection
GetTextExtentPointW
ExtCreatePen
SelectClipRgn
GetWorldTransform
SetGraphicsMode
SetWorldTransform
StartPage
EndDoc
CreateDCW
GetDeviceCaps
StartDocW
EndPage
PatBlt
GetTextExtentPoint32W
GetStockObject
StretchBlt
SaveDC
RestoreDC
LineTo
MoveToEx
EnumFontFamiliesExW
CreateFontIndirectW
SetTextColor
SetBkMode
CreateCompatibleDC
SetBkColor
ExtTextOutW
CreatePen
CreateRectRgn
CreateCompatibleBitmap
SetViewportOrgEx
DeleteObject
CreateSolidBrush
BitBlt
SelectObject
SetStretchBltMode
PageSetupDlgW
GetOpenFileNameW
GetSaveFileNameW
ChooseColorW
GetUserNameW
RegCloseKey
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegOpenCurrentUser
RegEnumValueW
SystemFunction036
SHGetFolderPathW
SHGetSpecialFolderLocation
ord644
ord2
SHChangeNotify
CommandLineToArgvW
ord645
SHGetFileInfoW
SHGetSpecialFolderPathW
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW
ShellExecuteExW
SHGetSettings
ord155
ord190
SHGetDesktopFolder
DragQueryFileW
DragAcceptFiles
DragFinish
Shell_NotifyIconW
CoCreateInstance
CoUninitialize
CoInitialize
CoInitializeSecurity
ReleaseStgMedium
RevokeDragDrop
RegisterDragDrop
CreateStreamOnHGlobal
DoDragDrop
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
OleDuplicateData
VarBstrCmp
VariantInit
VariantChangeType
VariantClear
SysAllocString
VarUI4FromStr
SysFreeString
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Xbad_alloc@std@@YAXXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0_Locinfo@std@@QAE@HPBD@Z
??1_Locinfo@std@@QAE@XZ
??Bid@locale@std@@QAEIXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?global@locale@std@@SA?AV12@ABV12@@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?_Xruntime_error@std@@YAXPBD@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
SHDeleteKeyW
StrCmpIW
PathFindFileNameW
PathRemoveFileSpecW
ImageList_Replace
ImageList_GetIconSize
ImageList_SetImageCount
ImageList_GetImageInfo
ImageList_Create
ImageList_Destroy
ImageList_Remove
ImageList_ReplaceIcon
ImageList_Draw
ImageList_GetIcon
_TrackMouseEvent
InitCommonControlsEx
AlphaBlend
CryptBinaryToStringW
waveInGetDevCapsA
waveOutRestart
waveOutReset
waveOutGetVolume
waveOutClose
waveOutOpen
waveOutPrepareHeader
waveOutGetDevCapsA
mciSendCommandW
waveOutUnprepareHeader
waveInGetNumDevs
waveOutGetNumDevs
waveOutSetVolume
waveOutWrite
waveInAddBuffer
mixerOpen
mixerGetLineControlsW
waveInClose
waveInPrepareHeader
mixerGetLineInfoA
mixerGetControlDetailsW
mixerGetControlDetailsA
mixerGetDevCapsW
mixerGetLineInfoW
mixerClose
waveInReset
waveInUnprepareHeader
waveInOpen
mixerSetControlDetails
waveInStart
waveOutPause
GdipCreateBitmapFromResource
GdipDeleteFontFamily
GdipSetImageAttributesColorMatrix
GdipLoadImageFromFile
GdipFree
GdipCreateFromHDC
GdipDeleteGraphics
GdipGetImageWidth
GdipGetRegionHRgn
GdipSetCompositingMode
GdipSetClipRectI
GdipCreateBitmapFromStream
GdipDrawRectangleI
GdipCreatePen1
GdipImageRotateFlip
GdipCreateFontFamilyFromName
GdipSaveGraphics
GdipCreateMatrix
GdipGetImagePaletteSize
GdipFillRectangle
GdipDrawImageI
GdipDeleteBrush
GdipDisposeImageAttributes
GdipSetStringFormatLineAlign
GdipGetWorldTransform
GdipTransformPointsI
GdipDrawLineI
GdipCreateFont
GdipDeletePen
GdipSetSmoothingMode
GdipSetInterpolationMode
GdipSetPenColor
GdipCreateSolidFill
GdipGetDC
GdipCreateRegion
GdipGraphicsClear
GdipScaleWorldTransform
GdipGetClipBoundsI
GdipGetMatrixElements
GdipReleaseDC
GdipDrawLinesI
GdipCreateFromHWND
GdipSetPixelOffsetMode
GdipGetClip
GdipRestoreGraphics
GdipDeleteRegion
GdipDeleteMatrix
GdiplusStartup
GdipCreateImageAttributes
GdipNewInstalledFontCollection
GdiplusShutdown
GdipDrawString
GdipCreateBitmapFromHBITMAP
GdipResetWorldTransform
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipBitmapUnlockBits
GdipGetPropertyItem
GdipBitmapLockBits
GdipSetPropertyItem
GdipGetPropertyItemSize
GdipGetFontCollectionFamilyList
GdipCreateFontFromLogfontW
GdipCreateHBITMAPFromBitmap
GdipSetTextRenderingHint
GdipSetImageAttributesColorKeys
GdipDrawImagePointRectI
GdipRotateWorldTransform
GdipCreateStringFormat
GdipCloneBrush
GdipMeasureString
GdipGetImageGraphicsContext
GdipFillRectangleI
GdipGetFontCollectionFamilyCount
GdipGetImagePalette
GdipDeleteStringFormat
GdipDeleteFont
GdipTranslateWorldTransform
GdipCloneFontFamily
GdipSetStringFormatAlign
GdipDrawImageRectRectI
GdipGetFamilyName
GdipGetFontHeight
GdipGetImageRawFormat
GdipCreateBitmapFromScan0
GdipSaveImageToFile
GdipCreateBitmapFromFile
GdipGetImageHeight
GdipDrawImageRectRect
GdipCloneImage
GdipAlloc
GdipDisposeImage
GdipGetImagePixelFormat
GdipCloneBitmapAreaI
ImageRemoveCertificate
ImageEnumerateCertificates
ImmAssociateContext
ImmGetVirtualKey
ImmDisableIME
_except_handler4_common
_CxxThrowException
memmove
memcpy
memset
strrchr
wcsrchr
strchr
__std_type_info_destroy_list
__std_exception_copy
__std_exception_destroy
wcschr
__CxxFrameHandler3
wcsstr
_purecall
memchr
__RTDynamicCast
strstr
malloc
_recalloc
free
_msize
realloc
calloc
_callnewh
_invalid_parameter_noinfo
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_errno
exit
_beginthreadex
_resetstkoflw
_endthreadex
_invalid_parameter_noinfo_noreturn
_wcsupr
_strdup
_wcsdup
strtok
strncmp
strcspn
strncpy
wcsncpy
isalnum
_stricmp
_wcsicmp
tolower
toupper
_wcsnicmp
wcsncpy_s
towupper
wcsncmp
towlower
wcscpy_s
wcscat_s
wcstok
__stdio_common_vsprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vsscanf
__stdio_common_vswscanf
_get_stream_buffer_pointers
_fseeki64
fread
fsetpos
ungetc
__stdio_common_vfprintf
fgetpos
fwrite
fgetc
fclose
fflush
fputc
__stdio_common_vswprintf
setvbuf
__stdio_common_vsprintf
__stdio_common_vswprintf_s
__acrt_iob_func
atoi
_wtof
_wtoi
wcstoul
srand
ldiv
qsort
rand
_localtime64
_localtime64_s
_time64
_mktime64
_unlock_file
_lock_file
_splitpath_s
_dtest
round
_libm_sse2_sin_precise
_libm_sse2_pow_precise
_libm_sse2_log_precise
_libm_sse2_log10_precise
_libm_sse2_exp_precise
_libm_sse2_cos_precise
_except1
_libm_sse2_atan_precise
modf
_libm_sse2_sqrt_precise
ceil
floor
_nextafter
CreateImageFileMgr
ImageExplorerMain
ImageLoaderMain
ImageUpdateMain
ImageViewerMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ