Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
dnmultiplayerex.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
dnmultiplayerex.exe
Resource
win10v2004-20230703-en
Target
dnmultiplayerex.exe
Size
1.5MB
MD5
da743a83c80b1eeaa7225f5c9aa884e8
SHA1
c91360cbe5d6f556a3eca8fc7c1e48afd20d8027
SHA256
c2a30668621bc110de0acc173c7d4b1353419f4a797b3cf2311eb0c4181ad8ff
SHA512
ba41f513e97d27d682f36a4054b80eadf070029fc586b360465bc09f373c9b018a44630a88466ec40dd1d5e2c332f0b5aef6bc9c7e349f1a1110306bba418f06
SSDEEP
24576:Mor1UNI/63JyLs6rigQ+IVnzRpRMnGufl6spgRxLC0DRk70DRkhn3oPW:MiMaC+ynzRpRMnh6spgan3oPW
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?Draw@CxImage@@QAEHPAUHDC__@@ABUtagRECT@@PAU3@_N3@Z
?AlphaCopy@CxImage@@QAE_NAAV1@@Z
?Resample2@CxImage@@QAE_NHHW4InterpolationMethod@1@W4OverflowMethod@1@QAV1@_N@Z
?Crop@CxImage@@QAE_NABUtagRECT@@PAV1@@Z
?GetHeight@CxImage@@QBEIXZ
?GetWidth@CxImage@@QBEIXZ
??0CxImage@@QAE@I@Z
curl_easy_cleanup
curl_global_init
curl_global_cleanup
curl_easy_init
curl_easy_setopt
curl_easy_strerror
curl_easy_perform
curl_slist_append
SetFilePointer
TerminateProcess
GetFileSize
CopyFileW
RemoveDirectoryW
TerminateThread
ExitProcess
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceW
MulDiv
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
DeleteFileW
GlobalAlloc
GlobalFree
GetVersionExW
WriteFile
GetTickCount
GetLastError
CreateFileW
CloseHandle
GetPrivateProfileStringW
MultiByteToWideChar
GetLocalTime
GetUserDefaultUILanguage
LoadLibraryW
GetProcAddress
GetModuleFileNameW
FreeLibrary
WideCharToMultiByte
Sleep
GetFileTime
WritePrivateProfileStringW
OpenMutexW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventW
WaitForSingleObject
GetCurrentProcessId
GetSystemInfo
GetModuleHandleW
GlobalMemoryStatusEx
GetSystemDirectoryW
CreatePipe
GetStartupInfoW
CreateProcessW
ReadFile
GetExitCodeProcess
OpenProcess
K32EnumProcessModules
K32GetModuleFileNameExW
GetWindowsDirectoryW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetCurrentThreadId
CreateSemaphoreW
ReleaseSemaphore
CreateThread
CreateMutexW
SetEvent
GetSystemTimeAsFileTime
FindFirstFileW
FindNextFileW
FindClose
GlobalLock
GlobalUnlock
ShowWindow
GetPropW
GetDC
ReleaseDC
MoveWindow
EnableWindow
GetMonitorInfoW
SetPropW
GetWindowRect
SetTimer
KillTimer
EnumDisplaySettingsW
ClientToScreen
MapVirtualKeyW
IsWindow
RegisterClassW
GetWindowLongW
DestroyWindow
SetWindowLongW
GetKeyState
wsprintfW
GetSystemMetrics
SetWindowTextW
IsIconic
SendMessageW
SetForegroundWindow
BringWindowToTop
SetWindowPos
SystemParametersInfoW
EnumDisplayMonitors
GetDesktopWindow
PostQuitMessage
CreateWindowExW
PostMessageW
DefWindowProcW
EnumWindows
GetClassNameW
FindWindowExW
GetWindowThreadProcessId
DispatchMessageW
TranslateMessage
MonitorFromWindow
LoadCursorW
GetGUIThreadInfo
InvalidateRgn
CreateAcceleratorTableW
GetSysColor
SetCaretPos
ShowCaret
HideCaret
CreateCaret
SetRect
FillRect
DrawTextW
CharPrevW
GetCaretPos
GetCaretBlinkTime
GetWindowTextLengthW
GetWindowTextW
LoadImageW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
GetWindow
GetParent
IsRectEmpty
IntersectRect
MapWindowPoints
InvalidateRect
GetUpdateRect
EndPaint
BeginPaint
ReleaseCapture
SetCapture
GetFocus
GetActiveWindow
SetFocus
CharNextW
IsWindowVisible
OffsetRect
UnionRect
SetCursor
wvsprintfW
ScreenToClient
MessageBoxW
GetClientRect
SetWindowRgn
IsZoomed
PtInRect
GetCursorPos
GetMessageW
GdiFlush
ExtTextOutW
TextOutW
MoveToEx
CreateDIBSection
SetStretchBltMode
StretchBlt
SetBkColor
ExtSelectClipRgn
SelectClipRgn
RoundRect
LineTo
GetTextExtentPoint32W
GetClipBox
GetCharABCWidthsW
CreateRectRgnIndirect
CreatePenIndirect
CombineRgn
SetTextColor
SetBkMode
CreateSolidBrush
CreatePatternBrush
GetObjectA
SetWindowOrgEx
GetTextMetricsW
SaveDC
RestoreDC
Rectangle
CreatePen
CreateFontIndirectW
DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
GetObjectW
DeleteDC
GetDeviceCaps
CreateRoundRectRgn
GetSaveFileNameW
GetOpenFileNameW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
DuplicateTokenEx
OpenProcessToken
RegOpenKeyW
RegCloseKey
ShellExecuteW
ShellExecuteExW
ord165
SHGetFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
CreateStreamOnHGlobal
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoCreateInstance
CoUninitialize
OleUninitialize
CoInitializeSecurity
OleInitialize
CoInitialize
VariantClear
VariantInit
SysFreeString
SysAllocString
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_BADOFF@std@@3_JB
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Statvfs@sys@tr2@std@@YA?AUspace_info@123@PB_W@Z
_Mtx_lock
_Mtx_unlock
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_Future_error_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Unlink@sys@tr2@std@@YAHPB_W@Z
?_Winerror_map@std@@YAPBDH@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0facet@locale@std@@IAE@I@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?width@ios_base@std@@QAE_J_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Open_dir@sys@tr2@std@@YAPAXAAY0BAE@_WPB_WAAHAAW4file_type@123@@Z
?_Close_dir@sys@tr2@std@@YAXPAX@Z
?_Read_dir@sys@tr2@std@@YAPA_WAAY0BAE@_WPAXAAW4file_type@123@@Z
?_Make_dir@sys@tr2@std@@YAHPB_W@Z
?_Stat@sys@tr2@std@@YA?AW4file_type@123@PB_WAAH@Z
?_Remove_dir@sys@tr2@std@@YA_NPB_W@Z
?_Copy_file@sys@tr2@std@@YAHPB_W0_N@Z
_Xtime_get_ticks
?_2@placeholders@std@@3V?$_Ph@$01@2@A
?_1@placeholders@std@@3V?$_Ph@$00@2@A
_Call_onceEx
_Do_call
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
_Thrd_join
_Cnd_timedwait
_Mtx_current_owns
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_current
_Thrd_equal
??Bios_base@std@@QBE_NXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Launch@_Pad@std@@QAEXPAU_Thrd_imp_t@@@Z
??1_Pad@std@@QAE@XZ
?_Release@_Pad@std@@QAEXXZ
??0_Pad@std@@QAE@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
_Cnd_wait
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
_Cnd_register_at_thread_exit
_Cnd_broadcast
_Cnd_unregister_at_thread_exit
_Cnd_destroy
_Cnd_init
?_Throw_C_error@std@@YAXH@Z
_Mtx_init
_Mtx_destroy
?_Xinvalid_argument@std@@YAXPBD@Z
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
_Wcscoll
?id@?$collate@_W@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??_7facet@locale@std@@6B@
??1facet@locale@std@@MAE@XZ
??0_Lockit@std@@QAE@H@Z
??0_Locinfo@std@@QAE@PBD@Z
??1_Lockit@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Incref@facet@locale@std@@UAEXXZ
_Wcsxfrm
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
??_7_Facet_base@std@@6B@
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
GdipImageGetFrameDimensionsList
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipGraphicsClear
GdipDrawImage
GdipDrawImageRectI
GdipDeleteFontFamily
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipGetFamily
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushI
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDrawString
GdipCreateStringFormat
GdipCreateBitmapFromScan0
GdipCreateFromHDC
GdipDeleteGraphics
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipSetCompositingQuality
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipGetImageWidth
GdipLoadImageFromStream
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
??0exception@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
_snwprintf_s
_snprintf_s
?terminate@@YAXXZ
sprintf_s
_wtoi
_setjmp3
_time64
_errno
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
??_V@YAXPAX@Z
rand
?wait@event@Concurrency@@QAEII@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?_GetCurrentInlineDepth@_StackGuard@details@Concurrency@@CAAAIXZ
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?_Oversubscribe@_Context@details@Concurrency@@SAX_N@Z
?set@event@Concurrency@@QAEXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
??0exception@std@@QAE@ABQBDH@Z
??1scoped_lock@critical_section@Concurrency@@QAE@XZ
??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z
?Free@Concurrency@@YAXPAX@Z
?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_NewCollection@_AsyncTaskCollection@details@Concurrency@@SAPAV123@PAV_CancellationTokenState@23@@Z
?_ScheduleTask@_CurrentScheduler@details@Concurrency@@SAXP6AXPAX@Z0@Z
?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ
??1event@Concurrency@@QAE@XZ
??1critical_section@Concurrency@@QAE@XZ
??0event@Concurrency@@QAE@XZ
??0critical_section@Concurrency@@QAE@XZ
?Alloc@Concurrency@@YAPAXI@Z
longjmp
_snwprintf
fclose
fwrite
fputc
fflush
setvbuf
fgetpos
_fseeki64
fsetpos
memcpy_s
ungetc
fgetc
_unlock_file
_lock_file
??0exception@std@@QAE@ABQBD@Z
wcsrchr
_vswprintf
_wcslwr
vswprintf_s
??8type_info@@QBE_NABV0@@Z
srand
sscanf_s
wcscpy_s
isalnum
sprintf
atoi
wcschr
tolower
_wcsnicmp
_wcsicmp
toupper
_vswprintf_c_l
isdigit
_beginthreadex
vsprintf_s
_CxxThrowException
__CxxFrameHandler3
memcpy
memset
wcsncpy
wcsstr
_vsnwprintf
_itow
wcstod
_wtof
iswalnum
wcsncmp
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__wgetmainargs
__set_app_type
exit
_exit
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_wcmdln
_fmode
_commode
_except1
_except_handler4_common
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
strchr
swscanf_s
malloc
realloc
wcstol
iswdigit
swprintf_s
wcstoul
mbstowcs_s
free
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
GetAdaptersInfo
GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoSizeW
PathFileExistsW
InternetCrackUrlW
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetReadFile
HttpQueryInfoW
InternetCloseHandle
ord173
ord217
_TrackMouseEvent
ord17
ImmGetVirtualKey
ImmGetContext
ImmReleaseContext
ImmSetCompositionFontW
ImmSetCompositionWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ