Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
68c3609e8bd9ec7b4e3363171150699686163a4afedefd4d2e65971bff7b49a0.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
68c3609e8bd9ec7b4e3363171150699686163a4afedefd4d2e65971bff7b49a0.dll
Resource
win10v2004-20230220-en
Target
68c3609e8bd9ec7b4e3363171150699686163a4afedefd4d2e65971bff7b49a0
Size
5.3MB
MD5
0908725f78ebbb1c6423538a5fdf102e
SHA1
dad9ebcedd8125a25b88c21b327e6a526e3accef
SHA256
68c3609e8bd9ec7b4e3363171150699686163a4afedefd4d2e65971bff7b49a0
SHA512
06a56c9fccb572ac5b543774d1e4cccf1522d83b1b1480844da2fd4dae024de1db54d7460be1efae0eeddc174dd725d84ce7feb04562098fba260850096ec36b
SSDEEP
98304:FRTqeoV/HdWU1gWth54FTucV5fbTmQ3mHYJqJN5PCC:Fdqlzn54FTucVhb0pNwC
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GdipDrawString
GdipCreateFont
GdipDeleteFontFamily
GdipDeleteFont
GdipSetTextRenderingHint
GdipMeasureString
GdipTransformMatrixPointsI
GdipRestoreGraphics
GdipBitmapLockBits
GdipDeleteMatrix
GdipCreateRegion
GdipTranslateWorldTransform
GdipGetWorldTransform
GdipCreateImageAttributes
GdipTransformPointsI
GdipDeleteRegion
GdipGetClipBoundsI
GdipSaveGraphics
GdipDisposeImageAttributes
GdipBitmapUnlockBits
GdipGraphicsClear
GdipGetMatrixElements
GdipSetClipRectI
GdipGetClip
GdipCreateMatrix
GdipScaleWorldTransform
GdipDrawImageRectRectI
GdipSetImageAttributesColorMatrix
GdipSetImageAttributesWrapMode
GdipReleaseDC
GdipGetDC
GdipFillRectangleI
GdipImageGetFrameDimensionsList
GdipCloneStringFormat
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameDimensionsCount
GdipImageGetFrameCount
GdipDeletePen
GdipDrawImageI
GdipRotateWorldTransform
GdipCreateFontFromLogfontW
GdipCreatePen1
GdipDrawRectangleI
GdipLoadImageFromFile
GdipCreateBitmapFromResource
GdipSetImageAttributesColorKeys
GdipCreateSolidFill
GdipCreateTexture
GdipCloneBrush
GdipDeleteBrush
GdipDeleteStringFormat
GdipCreateStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipDrawImageRectI
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipDrawImagePointRectI
GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipCloneBitmapAreaI
GdipCreateFontFamilyFromName
GdipImageSelectActiveFrame
GdipStringFormatGetGenericTypographic
GdipGetRegionHRgn
GdipFree
GdipGetImageHeight
GdipCreateBitmapFromStream
GdipAlloc
GdipDisposeImage
GdipCreateHBITMAPFromBitmap
GdipCloneImage
GdipGetImageWidth
GdiplusStartup
GdipSetPixelOffsetMode
GdipSetCompositingQuality
GdipCreateBitmapFromHBITMAP
GdipSetPageUnit
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipDrawImageRectRect
GdipDeleteGraphics
GdipCreateFromHDC
GdiplusShutdown
ntohl
ntohs
GetExtendedTcpTable
ImmAssociateContext
ImmGetVirtualKey
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
InternetConnectW
InternetReadFile
HttpSendRequestExW
InternetCloseHandle
HttpEndRequestW
HttpOpenRequestW
InternetWriteFile
IsDebuggerPresent
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
EncodePointer
lstrcatW
lstrcpyW
GetFileSizeEx
FreeResource
InitializeCriticalSectionAndSpinCount
RaiseException
GetLastError
DecodePointer
WaitForMultipleObjects
DeleteCriticalSection
CreateDirectoryW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
FindResourceW
GetModuleHandleW
GetVersionExW
GetCurrentProcess
FlushInstructionCache
SetLastError
GetTickCount
GetPrivateProfileStringW
WritePrivateProfileStringW
Sleep
FreeLibrary
LoadResource
LoadLibraryExW
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
OpenProcess
SizeofResource
GetFileAttributesW
GetModuleFileNameW
MultiByteToWideChar
IsBadReadPtr
GetProcAddress
lstrcmpiW
GetCommandLineW
SetErrorMode
SetUnhandledExceptionFilter
CopyFileW
CloseHandle
DeleteFileW
ResumeThread
TryEnterCriticalSection
SetEvent
ResetEvent
CreateEventW
FindFirstFileW
CreateFileW
GetLongPathNameW
GetFileAttributesExW
InterlockedExchangeAdd
GetDriveTypeW
GetFileSize
SetFilePointer
SetEndOfFile
SetFileTime
WriteFile
ReadFile
GetFileTime
LoadLibraryW
FindClose
FindNextFileW
CreateMutexW
ReleaseMutex
WideCharToMultiByte
GetACP
lstrlenW
SystemTimeToFileTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
DosDateTimeToFileTime
FileTimeToSystemTime
GetSystemTime
TerminateThread
OpenThread
GetExitCodeThread
SuspendThread
SwitchToThread
HeapAlloc
HeapFree
GetProcessHeap
FormatMessageW
LocalFree
GlobalAlloc
GlobalFree
GetFullPathNameW
GetTempFileNameW
MoveFileExW
GetSystemDirectoryW
GetTempPathW
GetCurrentDirectoryW
MoveFileW
RemoveDirectoryW
GetWindowsDirectoryW
SetFileAttributesW
DeviceIoControl
GetComputerNameW
LockResource
GetSystemInfo
GlobalMemoryStatusEx
QueryPerformanceCounter
QueryPerformanceFrequency
ExpandEnvironmentStringsW
GetEnvironmentVariableW
QueryDosDeviceW
GetLogicalDriveStringsW
GetDiskFreeSpaceW
GetVolumeInformationW
GetVersion
GlobalUnlock
GetDiskFreeSpaceExW
TerminateProcess
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
CreateProcessW
GetExitCodeProcess
GetStartupInfoW
CreatePipe
GetFileType
GlobalLock
GlobalAddAtomW
lstrlenA
MulDiv
lstrcmpW
GetFullPathNameA
HeapReAlloc
CreateFileA
HeapCompact
InterlockedCompareExchange
UnlockFile
FlushViewOfFile
LockFile
WaitForSingleObjectEx
OutputDebugStringW
UnlockFileEx
GetSystemTimeAsFileTime
FormatMessageA
HeapDestroy
GetFileAttributesA
HeapCreate
HeapValidate
FlushFileBuffers
HeapSize
LockFileEx
LoadLibraryA
CreateFileMappingA
GetDiskFreeSpaceA
OutputDebugStringA
GetVersionExA
GetTempPathA
AreFileApisANSI
DeleteFileA
IsBadWritePtr
IsBadStringPtrW
InterlockedExchange
UnionRect
EqualRect
SetLayeredWindowAttributes
SetRectEmpty
IntersectRect
EnableScrollBar
RemovePropW
AppendMenuW
CreatePopupMenu
InsertMenuW
FrameRect
UpdateWindow
SetParent
DestroyAcceleratorTable
FillRect
IsChild
CloseClipboard
CreateAcceleratorTableW
GetSysColor
TrackMouseEvent
SetScrollPos
SetScrollInfo
ValidateRect
SetCapture
GetScrollInfo
DrawIconEx
GetFocus
ShowScrollBar
ExitWindowsEx
SetFocus
InflateRect
GetAsyncKeyState
GetMenuItemID
GetMenuStringW
SetRect
GetMenuState
GetMenuItemCount
UnregisterHotKey
RegisterHotKey
SetCursor
DrawTextW
AnimateWindow
CheckMenuItem
EndPaint
UpdateLayeredWindow
GetWindowDC
BeginPaint
MonitorFromRect
MoveWindow
ScreenToClient
PostQuitMessage
IsWindowEnabled
OffsetRect
RedrawWindow
GetWindowTextLengthW
IsIconic
IsZoomed
GetLastActivePopup
AttachThreadInput
GetUpdateRect
WaitMessage
DeleteMenu
GetCapture
InvalidateRgn
GetWindowTextW
ReleaseCapture
EnableWindow
CopyRect
EnumWindows
IsMenu
TrackPopupMenu
RegisterWindowMessageW
LoadImageW
GetSubMenu
SetForegroundWindow
GetMenuDefaultItem
GetDC
LoadMenuW
ReleaseDC
GetCursorPos
DestroyMenu
CallWindowProcW
GetDlgItem
GetForegroundWindow
GetMessageW
WindowFromPoint
TranslateMessage
PeekMessageW
GetWindowThreadProcessId
DispatchMessageW
SetWindowPlacement
IsWindowVisible
DestroyIcon
LoadIconW
ClientToScreen
SetTimer
GetWindowRect
KillTimer
GetClientRect
PtInRect
InvalidateRect
GetWindowLongW
MonitorFromWindow
EndDialog
SetWindowPos
MapWindowPoints
GetMonitorInfoW
GetWindow
DestroyWindow
CharNextW
FindWindowW
SendMessageTimeoutW
MessageBoxW
DefWindowProcW
ShowWindow
CreateDialogParamW
GetActiveWindow
LoadCursorW
GetClassInfoExW
RegisterClassExW
SystemParametersInfoW
GetDesktopWindow
CreateWindowExW
SetWindowTextW
IsWindow
DialogBoxParamW
SetWindowLongW
GetKeyState
GetParent
GetMenuItemInfoW
GetClassNameW
SendMessageW
SetMenuItemInfoW
GetSystemMetrics
IsRectEmpty
LoadStringW
UnregisterClassW
PostMessageW
OpenClipboard
SetClipboardData
MsgWaitForMultipleObjects
GetKeyNameTextW
MapVirtualKeyExW
GetKeyboardLayout
MonitorFromPoint
SetWindowRgn
CreateCompatibleBitmap
LineTo
CreateCompatibleDC
ExtCreatePen
GetTextExtentPointW
DeleteObject
CreateRectRgn
SelectObject
GetCurrentObject
CreateRectRgnIndirect
SetBrushOrgEx
SetArcDirection
SelectClipRgn
SetDCPenColor
SetStretchBltMode
SetWorldTransform
SetROP2
GetTextMetricsW
SetGraphicsMode
CreateDIBSection
SaveDC
IntersectClipRect
RestoreDC
StretchBlt
MoveToEx
GetTextExtentPoint32W
EnumFontsW
CreatePen
GetTextColor
CreateFontW
SetDCBrushColor
CreateSolidBrush
SetTextColor
SetBkMode
CreatePolygonRgn
SetViewportOrgEx
BitBlt
SetBkColor
ExtTextOutW
GetObjectW
DeleteDC
GetStockObject
GetDeviceCaps
CreateFontIndirectW
RegCreateKeyExW
CheckTokenMembership
GetUserNameW
RegOpenCurrentUser
AdjustTokenPrivileges
LookupPrivilegeValueW
GetLengthSid
FreeSid
AllocateAndInitializeSid
DuplicateTokenEx
SetTokenInformation
CreateProcessAsUserW
RegQueryValueExW
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
OpenProcessToken
RegSetValueExW
GetTokenInformation
DragQueryFileW
SHGetPathFromIDListW
ShellExecuteW
ShellExecuteExW
SHGetDesktopFolder
SHBrowseForFolderW
DragAcceptFiles
CommandLineToArgvW
SHGetFileInfoW
Shell_NotifyIconW
DragFinish
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
SHGetFolderPathW
SHChangeNotify
SHFileOperationW
OleUninitialize
CoGetClassObject
RegisterDragDrop
RevokeDragDrop
StringFromGUID2
CLSIDFromString
CLSIDFromProgID
OleLockRunning
CreateStreamOnHGlobal
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
OleInitialize
SafeArrayGetUBound
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SysStringByteLen
SysAllocStringByteLen
LoadRegTypeLi
OleCreateFontIndirect
SysAllocStringLen
VariantInit
LoadTypeLi
VariantClear
SysStringLen
DispCallFunc
SysAllocString
VarUI4FromStr
SysFreeString
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
??1_Container_base12@std@@QAE@XZ
?_BADOFF@std@@3_JB
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Xbad_alloc@std@@YAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Xout_of_range@std@@YAXPBD@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??0_Locinfo@std@@QAE@PBD@Z
??0_Locinfo@std@@QAE@HPBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??1_Facet_base@std@@UAE@XZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
??_7_Facet_base@std@@6B@
_Wcsxfrm
_Wcscoll
??_7facet@locale@std@@6B@
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?id@?$collate@_W@std@@2V0locale@2@A
?_Xruntime_error@std@@YAXPBD@Z
SHDeleteKeyW
StrCmpIW
StrToIntW
ImageList_GetIconSize
ImageList_Draw
ImageList_SetImageCount
ImageList_Create
ImageList_Add
ImageList_Destroy
_TrackMouseEvent
InitCommonControlsEx
AlphaBlend
swscanf
wcsncpy
_wcsicmp
fwrite
_lock_file
setvbuf
fsetpos
fgetc
_fseeki64
fgetpos
??3@YAXPAX@Z
memmove
free
strtol
_gmtime32
fgets
fprintf_s
realloc
round
system
_resetstkoflw
strncmp
roundf
_except1
sprintf_s
_dtest
strpbrk
modf
qsort
_msize
rand_s
??8type_info@@QBE_NABV0@@Z
_nextafter
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
__CxxFrameHandler3
_except_handler4_common
__clean_type_info_names_internal
??_V@YAXPAX@Z
_purecall
??2@YAPAXI@Z
_wfopen_s
_wcsupr
_CxxThrowException
__RTDynamicCast
_libm_sse2_pow_precise
ceil
floor
swprintf_s
fwprintf
fflush
_vsnwprintf_s
fclose
malloc
_recalloc
_wtoi64
wcstol
wcsncpy_s
wcsstr
memcpy_s
_time64
memmove_s
?terminate@@YAXXZ
_wtoi
wcschr
towlower
_vsnwprintf
towupper
_beginthreadex
rand
srand
_errno
memchr
_mktime64
_localtime64
_endthreadex
sscanf
_vswprintf_c_l
swscanf_s
strstr
strchr
tolower
toupper
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_stricmp
_splitpath_s
_wcsnicmp
_localtime64_s
wcsrchr
sprintf
isalnum
calloc
wcstoul
memcpy
memset
fputc
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
_unlock_file
ungetc
GetSaveFileNameW
GetOpenFileNameW
MobileLoaderMain
MobileMgrMain
MobilePopupMain
MobileUninit
MobileUpdateMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ