CloseDuplicate
CloseOldInstance
GetProcessId
LoadPassword
RollSetup
SavePassword
StartProcess
Update
Uri
Overview
overview
8Static
static
3DLL/MegaDLL.dll
windows7-x64
1DLL/MegaDLL.dll
windows10-2004-x64
1DLL/RollMQTT.dll
windows7-x64
8DLL/RollMQTT.dll
windows10-2004-x64
8DLL/updater.exe
windows7-x64
1DLL/updater.exe
windows10-2004-x64
1MegaMaker.exe
windows7-x64
1MegaMaker.exe
windows10-2004-x64
6Shortcut to Gifs.lnk
windows7-x64
3Shortcut to Gifs.lnk
windows10-2004-x64
3Shortcut t...ls.lnk
windows7-x64
3Shortcut t...ls.lnk
windows10-2004-x64
3buffer_zlib.dll
windows7-x64
1buffer_zlib.dll
windows10-2004-x64
1gme.dll
windows7-x64
1gme.dll
windows10-2004-x64
1rousrDissonance.dll
windows7-x64
1rousrDissonance.dll
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
DLL/MegaDLL.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
DLL/MegaDLL.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
DLL/RollMQTT.dll
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
DLL/RollMQTT.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral5
Sample
DLL/updater.exe
Resource
win7-20230831-en
Behavioral task
behavioral6
Sample
DLL/updater.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral7
Sample
MegaMaker.exe
Resource
win7-20230831-en
Behavioral task
behavioral8
Sample
MegaMaker.exe
Resource
win10v2004-20230915-en
Behavioral task
behavioral9
Sample
Shortcut to Gifs.lnk
Resource
win7-20230831-en
Behavioral task
behavioral10
Sample
Shortcut to Gifs.lnk
Resource
win10v2004-20230915-en
Behavioral task
behavioral11
Sample
Shortcut to Levels.lnk
Resource
win7-20230831-en
Behavioral task
behavioral12
Sample
Shortcut to Levels.lnk
Resource
win10v2004-20230915-en
Behavioral task
behavioral13
Sample
buffer_zlib.dll
Resource
win7-20230831-en
Behavioral task
behavioral14
Sample
buffer_zlib.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral15
Sample
gme.dll
Resource
win7-20230831-en
Behavioral task
behavioral16
Sample
gme.dll
Resource
win10v2004-20230915-en
Behavioral task
behavioral17
Sample
rousrDissonance.dll
Resource
win7-20230831-en
Behavioral task
behavioral18
Sample
rousrDissonance.dll
Resource
win10v2004-20230915-en
Target
MegaManMaker_v1_8_5_2.zip
Size
45.5MB
MD5
fcfd752bf73143bd77c1da9a30fcd238
SHA1
ec611c57aa10708c9a727d1a2acce31cd47d80f5
SHA256
6ec79179c1e61df21e38b754017b672d559f0537ce0a3b64afe7df97025fd01d
SHA512
0b416fa5da42428a19da5f000433bff34fddcbb8a932cb4679972d3cc03229dafe3cbfb59e99907d13c9f9a31c3866be18976c01ce69e531cf066caff6d8624f
SSDEEP
786432:40vFw5nZ0Xsr/r+J8nNql74+ZmnvHwwClFbdNKdZw+ChDCdQAL8uxBoQ+ssmfG65:pvFw5Nr+JB7vwn2lfNbIn3onMGCA+X
Checks for missing Authenticode signature.
resource |
---|
unpack001/DLL/MegaDLL.dll |
unpack001/DLL/RollMQTT.dll |
unpack001/DLL/updater.exe |
unpack001/MegaMaker.exe |
unpack001/buffer_zlib.dll |
unpack001/gme.dll |
unpack001/rousrDissonance.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
CloseDuplicate
CloseOldInstance
GetProcessId
LoadPassword
RollSetup
SavePassword
StartProcess
Update
Uri
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CorDllMain
HelloThere
Initialize
LastError
Read
Send
Shutdown
Subscribe
Unsubscribe
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
InternetReadFile
InternetWriteFile
HttpOpenRequestA
InternetCloseHandle
InternetCrackUrlA
HttpEndRequestW
HttpQueryInfoA
InternetConnectA
InternetOpenA
InternetCanonicalizeUrlA
HttpSendRequestA
InternetGetConnectedState
D3D11CreateDevice
MiniDumpWriteDump
SymFromAddr
SymInitialize
mciSendStringA
mciGetErrorStringA
joyGetPos
timeGetTime
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
joyGetPosEx
WSAStartup
gethostname
WSAGetLastError
setsockopt
sendto
send
recvfrom
recv
listen
inet_ntoa
inet_addr
getsockopt
ioctlsocket
connect
closesocket
bind
accept
getpeername
select
__WSAFDIsSet
ntohs
ntohl
htons
htonl
WSACleanup
WSAAddressToStringA
getaddrinfo
freeaddrinfo
getsockname
inet_ntop
socket
GdiplusStartup
GdiplusShutdown
InitCommonControlsEx
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
UuidToStringW
UuidCreate
CreateDXGIFactory1
MFCreateMediaSession
MFCreateTopology
MFCreateTopologyNode
MFGetService
MFCreateAudioRendererActivate
MFCreateSampleGrabberSinkActivate
MFStartup
MFShutdown
MFCreateMediaType
MFCreateSourceResolver
GetTimeZoneInformation
SetStdHandle
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
SetConsoleCtrlHandler
WriteFile
GetStdHandle
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
ReadFile
MoveFileExW
SetFileAttributesW
GetFileAttributesExW
GetModuleHandleExW
HeapWalk
HeapValidate
LoadLibraryExW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
InitializeSListHead
RaiseException
GetStartupInfoW
IsDebuggerPresent
TerminateProcess
UnhandledExceptionFilter
CreateEventW
ResetEvent
SetEvent
SetCurrentDirectoryW
IsValidCodePage
IsProcessorFeaturePresent
GetStringTypeW
GetLocaleInfoEx
GetCPInfo
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
CompareStringEx
LCMapStringEx
FreeLibraryWhenCallbackReturns
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
InitOnceExecuteOnce
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetFileInformationByHandle
FormatMessageA
GetProcAddress
LoadLibraryW
WideCharToMultiByte
GetLastError
LoadLibraryA
MultiByteToWideChar
CloseHandle
WaitForSingleObjectEx
CreateEventExW
OutputDebugStringA
GetConsoleWindow
GetACP
DeleteFileW
GetFullPathNameW
SetLastError
CreateThread
GetExitCodeThread
GetModuleHandleW
LocalFree
FormatMessageW
SetCurrentDirectoryA
GetCurrentDirectoryA
FreeLibrary
GetEnvironmentVariableW
CreateDirectoryW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
Sleep
GetExitCodeProcess
CreateProcessW
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
SetWaitableTimer
CreateWaitableTimerW
GetTickCount64
GetFileAttributesA
GetCurrentProcess
GetCurrentThread
SetThreadPriority
SetPriorityClass
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalMemoryStatusEx
GetSystemInfo
GetVersionExW
GetLocaleInfoW
GetUserDefaultLCID
VerSetConditionMask
VerifyVersionInfoW
GetCurrentProcessId
DebugBreak
GetEnvironmentVariableA
ExitProcess
lstrlenA
GetCommandLineW
ExpandEnvironmentStringsW
CreateFileW
GetFinalPathNameByHandleW
SetUnhandledExceptionFilter
SetErrorMode
GetCurrentThreadId
GetModuleFileNameW
MoveFileA
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
TryEnterCriticalSection
InitializeCriticalSectionEx
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
RtlCaptureStackBackTrace
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetFileInformationByHandleEx
CreateSymbolicLinkW
EncodePointer
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
OutputDebugStringW
SetEndOfFile
HeapReAlloc
HeapSize
GetCurrentDirectoryW
WriteConsoleW
DecodePointer
CreateThreadpoolTimer
GetForegroundWindow
UpdateWindow
SetWindowLongW
EnumDisplaySettingsW
MonitorFromWindow
GetMonitorInfoW
ClientToScreen
SetCursorPos
SetProcessDPIAware
ScreenToClient
SetWindowTextW
ReleaseDC
GetDC
DrawTextW
GetDlgItemTextW
SetDlgItemTextW
GetDlgItem
EndDialog
IsDialogMessageW
PeekMessageW
MoveWindow
DialogBoxParamW
TranslateMessage
LoadImageW
LoadCursorW
CallNextHookEx
SetCursor
AdjustWindowRectEx
GetWindowRect
GetClientRect
SetForegroundWindow
GetSystemMetrics
ReleaseCapture
SetCapture
GetKeyState
SetFocus
BringWindowToTop
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
PostMessageW
SendMessageW
MessageBoxW
GetRawInputDeviceList
GetRawInputDeviceInfoA
SetDlgItemTextA
MessageBoxA
GetFocus
IsClipboardFormatAvailable
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
keybd_event
GetAsyncKeyState
wsprintfW
GetCursorPos
DispatchMessageW
GetActiveWindow
CreateDialogParamW
MapWindowPoints
SelectObject
GetStockObject
GetDeviceCaps
GetOpenFileNameW
GetSaveFileNameW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
ShellExecuteW
SHGetFolderPathW
CoCreateInstance
CoCreateFreeThreadedMarshaler
CoTaskMemFree
CoInitialize
DwmGetCompositionTimingInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RaiseException
SetFilePointerEx
CreateFileW
GetFileType
CloseHandle
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetConsoleMode
WriteFile
GetConsoleCP
SetStdHandle
GetStdHandle
HeapFree
HeapAlloc
MultiByteToWideChar
LCMapStringW
WideCharToMultiByte
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
HeapSize
HeapReAlloc
FlushFileBuffers
WriteConsoleW
DecodePointer
buffer_deflate_raw1
buffer_deflate_raw2
buffer_inflate_raw1
buffer_inflate_raw2
buffer_zlib_get_status
buffer_zlib_init_raw
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??2@YAPAXI@Z
strncpy
strncmp
?terminate@@YAXXZ
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
toupper
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
strrchr
fclose
fseek
ftell
??3@YAXPAX@Z
fread
fopen
feof
realloc
memmove
_purecall
malloc
_amsg_exit
free
floor
memset
memcpy
_CIcos
_CIpow
_CIsin
__CxxFrameHandler3
_CIfmod
_CIlog10
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
GameMusicEmu_Free
GameMusicEmu_GetAuthor
GameMusicEmu_GetComment
GameMusicEmu_GetCopyright
GameMusicEmu_GetName
GameMusicEmu_GetPosition
GameMusicEmu_GetTrackLength
GameMusicEmu_LoadBuffer
GameMusicEmu_LoadBufferStr
GameMusicEmu_LoadFile
GameMusicEmu_MuteVoice
GameMusicEmu_MuteVoices
GameMusicEmu_NumTracks
GameMusicEmu_NumVoices
GameMusicEmu_Read
GameMusicEmu_ReadStr
GameMusicEmu_SetPosition
GameMusicEmu_SetTempo
GameMusicEmu_StartTrack
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileW
ReadFile
WriteFile
CloseHandle
GetLastError
PeekNamedPipe
WaitNamedPipeW
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
EncodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
ExitProcess
GetModuleHandleExW
K32GetModuleFileNameExW
WideCharToMultiByte
HeapFree
HeapAlloc
GetCurrentThread
LCMapStringW
DecodePointer
GetStdHandle
GetFileType
GetACP
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW
MultiByteToWideChar
lstrlenW
GetCurrentProcess
GetModuleFileNameA
GetModuleFileNameW
DuplicateHandle
Sleep
GetExitCodeThread
TryEnterCriticalSection
GetTickCount
CreateThread
ExitThread
FreeLibraryAndExitThread
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
GetModuleHandleA
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
LoadLibraryW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegSetKeyValueW
Init
RegisterCallbacks
ResetPresence
Respond
RunCallbacks
SetDetails
SetJoinSecret
SetLargeImage
SetMatchSecret
SetPartyData
SetSmallImage
SetSpectateSecret
SetState
SetTimeStamps
Shutdown
UpdatePresence
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ