Static task
static1
Behavioral task
behavioral1
Sample
2b2f2cd83a8b6e462b82077ee8da150a3d74c0df391f54e5571605286e844f0f.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
2b2f2cd83a8b6e462b82077ee8da150a3d74c0df391f54e5571605286e844f0f.exe
Resource
win10v2004-20231023-en
General
-
Target
2b2f2cd83a8b6e462b82077ee8da150a3d74c0df391f54e5571605286e844f0f
-
Size
10.0MB
-
MD5
adf3f84c29504bac6dbd6b7ff70be36d
-
SHA1
a5c5092ec4ffa50da397af9b1b1b802081404ed9
-
SHA256
2b2f2cd83a8b6e462b82077ee8da150a3d74c0df391f54e5571605286e844f0f
-
SHA512
19112c8dbda115c209be77a24746b6bec89a4f4ff4fdd10bf94ccc00a7b0856d95c308d39e05be93ffdc96468821800b305b43dd7cbf1f25c4a232dbd43da9e8
-
SSDEEP
196608:4y3Ab3g/XmJNC/9MBjjVayyqFLOyomFHKnPqN/kRskPFT:nAb3KmK/9ByyqFNi9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b2f2cd83a8b6e462b82077ee8da150a3d74c0df391f54e5571605286e844f0f
Files
-
2b2f2cd83a8b6e462b82077ee8da150a3d74c0df391f54e5571605286e844f0f.exe windows:5 windows x86
4a9c71dfe50533b607ea231f8f7283ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetVersionExA
GetVersionExW
GetTickCount
MulDiv
GetFullPathNameW
SetLastError
InitializeCriticalSection
HeapCreate
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
GetSystemDirectoryW
CreateMutexW
GetTempPathW
OutputDebugStringA
GetCurrentThreadId
lstrcpyW
TerminateProcess
CreateEventW
SetEvent
ResumeThread
SuspendThread
GetExitCodeThread
TerminateThread
SetThreadPriority
CreateThread
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
WTSGetActiveConsoleSessionId
ProcessIdToSessionId
SetCurrentDirectoryW
WaitForSingleObject
GetExitCodeProcess
GetCurrentProcess
OpenProcess
WriteFile
GetFileAttributesW
GetModuleHandleW
DeleteCriticalSection
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
DecodePointer
InitializeCriticalSectionAndSpinCount
GetLastError
LocalFree
WritePrivateProfileStringW
WideCharToMultiByte
MultiByteToWideChar
FindNextFileW
FindFirstFileW
DeleteFileW
SetFileAttributesW
CreateFileW
RemoveDirectoryW
CreateDirectoryW
GetDiskFreeSpaceExW
GetDriveTypeW
GetPrivateProfileStringW
FindResourceW
ExpandEnvironmentStringsW
GetModuleFileNameW
GetLogicalDriveStringsW
GetLocalTime
CloseHandle
FindClose
SizeofResource
LoadResource
GlobalFree
GlobalAlloc
LockResource
FreeResource
LoadLibraryW
WaitForMultipleObjectsEx
UnregisterWaitEx
QueryDepthSList
InterlockedPopEntrySList
SetProcessAffinityMask
VirtualFree
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
IsBadReadPtr
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
WriteConsoleW
SetConsoleCtrlHandler
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExW
FindFirstFileExA
GetTimeZoneInformation
GetConsoleCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
MoveFileExW
EnumSystemLocalesW
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetACP
ExitProcess
VirtualQuery
VirtualAlloc
GetSystemInfo
GetCommandLineW
GetCommandLineA
HeapQueryInformation
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
GetFullPathNameA
GetFileType
SetStdHandle
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
CreateDirectoryA
GetModuleHandleExA
GetModuleFileNameA
CreateSemaphoreW
GetStdHandle
ReleaseSemaphore
LCMapStringW
GetCPInfo
QueryPerformanceFrequency
GetStringTypeW
TryEnterCriticalSection
GetNativeSystemInfo
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LocalUnlock
LocalLock
GetUserDefaultLCID
ReplaceFileW
GetDiskFreeSpaceW
SearchPathW
GetProfileIntW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
FindResourceExW
GetCurrentDirectoryW
GetPrivateProfileIntW
VirtualProtect
CompareStringA
GetCurrentThread
GlobalFindAtomW
GlobalDeleteAtom
GetProcessAffinityMask
RtlCaptureStackBackTrace
lstrcmpW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
EncodePointer
GlobalAddAtomW
Sleep
GetProcAddress
FreeLibrary
InterlockedDecrement
InterlockedIncrement
SetErrorMode
SetFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GlobalSize
GlobalLock
GlobalUnlock
FormatMessageW
CopyFileW
FlushFileBuffers
GetFileSize
GetShortPathNameW
GetVolumeInformationW
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
DuplicateHandle
LoadLibraryExW
lstrcmpiW
MoveFileW
GetStringTypeExW
GetThreadLocale
LocalAlloc
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
GetCurrentProcessId
lstrcmpA
GlobalGetAtomNameW
GetAtomNameW
SystemTimeToFileTime
FileTimeToLocalFileTime
lstrlenA
user32
SetForegroundWindow
GetActiveWindow
MessageBoxW
ShowWindow
SetTimer
KillTimer
LoadCursorW
DestroyCursor
IsWindow
GetForegroundWindow
DestroyWindow
AttachThreadInput
PostMessageW
SendMessageW
GetWindowThreadProcessId
FindWindowW
UnregisterClassW
MonitorFromRect
GetWindowRect
ReleaseDC
GetDC
SetWindowPos
SetLayeredWindowAttributes
SetCursor
SetRect
CopyRect
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
RemoveMenu
CharUpperW
UnhookWindowsHookEx
GetLastActivePopup
GetSysColorBrush
GetWindowTextW
GetWindowTextLengthW
ValidateRect
SetWindowsHookExW
CallNextHookEx
GetDlgCtrlID
RealChildWindowFromPoint
SetScrollPos
GetScrollPos
MoveWindow
SetDlgItemInt
GetDlgItemInt
SetDlgItemTextW
GetDlgItemTextW
CheckDlgButton
CheckRadioButton
IsDlgButtonChecked
SendDlgItemMessageW
ScrollWindowEx
IsDialogMessageW
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
FillRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
RegisterWindowMessageW
GetMessagePos
GetMessageTime
RegisterClassW
GetClassInfoW
GetClassInfoExW
IsChild
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetMenu
SetMenu
TrackPopupMenuEx
RedrawWindow
ScrollWindow
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropW
GetPropW
RemovePropW
AdjustWindowRectEx
GetClassLongW
GetTopWindow
SetScrollInfo
GetScrollInfo
WinHelpW
SystemParametersInfoW
CopyImage
SendDlgItemMessageA
SetRectEmpty
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
GetAsyncKeyState
MapDialogRect
ShowOwnedPopups
GetDialogBaseUnits
GetNextDlgGroupItem
WindowFromPoint
DrawFocusRect
DrawIconEx
MessageBeep
EnableScrollBar
InvertRect
NotifyWinEvent
GetMenuDefaultItem
MapVirtualKeyW
GetKeyNameTextW
InflateRect
EnumDisplayMonitors
SetClassLongW
SetWindowRgn
SetParent
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
GetMenuBarInfo
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
LockWindowUpdate
LoadMenuW
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
EnumChildWindows
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
SendNotifyMessageW
InSendMessage
CreateMenu
WindowFromDC
GetWindowRgn
GetDCEx
GetTabbedTextExtentW
IntersectRect
UnionRect
IsRectEmpty
EqualRect
PtInRect
SetFocus
GetFocus
GetKeyState
GetWindowLongW
DefWindowProcW
CallWindowProcW
RegisterClassExW
CreateWindowExW
GetDlgItem
SetMenuDefaultItem
GetClientRect
MapWindowPoints
SetWindowLongW
GetParent
GetWindow
MonitorFromWindow
GetMonitorInfoW
TrackMouseEvent
PostQuitMessage
AnimateWindow
wsprintfW
MsgWaitForMultipleObjects
SetMenuContextHelpId
GetMenuItemInfoW
SetMenuInfo
GetMenuInfo
TrackPopupMenu
DeleteMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
CheckMenuItem
DestroyMenu
CreatePopupMenu
IsMenu
UpdateLayeredWindow
MapVirtualKeyA
CharLowerBuffW
SystemParametersInfoA
DrawTextW
IsWindowVisible
GetWindowPlacement
GetSystemMetrics
GetSysColor
EnableMenuItem
ClientToScreen
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
LoadIconW
LoadImageW
CreateIconFromResource
LoadBitmapW
GetIconInfo
OffsetRect
CharNextW
GetDesktopWindow
SetActiveWindow
IsWindowEnabled
EnableWindow
DestroyIcon
GetClassNameW
ScreenToClient
SetCaretPos
HideCaret
GetCaretBlinkTime
CreateCaret
GetCursorPos
SetWindowTextW
InvalidateRect
EndPaint
BeginPaint
UpdateWindow
ReleaseCapture
SetCapture
GetCapture
IsZoomed
IsIconic
gdi32
SelectClipRgn
RestoreDC
RectVisible
PtVisible
PlayMetaFile
OffsetClipRgn
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetCurrentPositionEx
GetClipRgn
ExcludeClipRect
Escape
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
PolyDraw
SetViewportOrgEx
CreateCompatibleBitmap
StretchBlt
GetDCOrgEx
GetObjectW
SetBkMode
Rectangle
GetStockObject
GetClipBox
CreateSolidBrush
CreateFontIndirectW
SetGraphicsMode
SelectObject
CreateCompatibleDC
CreateBitmap
EnumFontsW
CreateRoundRectRgn
DeleteObject
BitBlt
DeleteDC
GetDeviceCaps
ExtSelectClipRgn
SelectPalette
SetBkColor
SetMapperFlags
SetMapMode
SetLayout
GetLayout
SelectClipPath
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextColor
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
CreateDIBPatternBrushPt
CreateDCW
CopyMetaFileW
ArcTo
SetPolyFillMode
StartDocW
SetColorAdjustment
ModifyWorldTransform
SaveDC
GetWorldTransform
RectInRegion
Pie
CreateEllipticRgnIndirect
Arc
GetTextFaceW
GetTextAlign
GetStretchBltMode
GetPolyFillMode
GetNearestColor
GetBkMode
GetROP2
SetAbortProc
AbortDoc
EndPage
StartPage
EndDoc
DeleteMetaFile
CreateMetaFileW
CloseMetaFile
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
StretchDIBits
GetCharWidthW
CreateFontW
GetCurrentObject
OffsetRgn
GetRgnBox
LPtoDP
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
SetPixel
GetDIBits
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
EnumFontFamiliesExW
GetTextMetricsW
GetTextExtentPoint32W
DPtoLP
SetRectRgn
PatBlt
GetMapMode
CreateRectRgnIndirect
CombineRgn
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportExtEx
PolylineTo
PolyBezierTo
ExtTextOutW
TextOutW
MoveToEx
ExtCreatePen
SetArcDirection
SetWorldTransform
advapi32
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegEnumKeyExW
RegEnumValueW
GetFileSecurityW
SetFileSecurityW
RegCloseKey
RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCreateKeyExW
RegSetValueExW
OpenProcessToken
SetTokenInformation
AdjustTokenPrivileges
AllocateAndInitializeSid
GetLengthSid
LookupPrivilegeValueW
CreateProcessAsUserW
DuplicateTokenEx
GetTokenInformation
EqualSid
FreeSid
RegSetValueW
shell32
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderPathW
SHChangeNotify
ShellExecuteW
SHGetFileInfoW
ExtractIconW
SHAddToRecentDocs
SHGetDesktopFolder
DragQueryFileW
SHGetSpecialFolderLocation
SHFileOperationW
ShellExecuteExW
DragFinish
SHAppBarMessage
ole32
CreateGenericComposite
CreateItemMoniker
OleCreate
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleLoad
OleSave
OleSaveToStream
OleSetContainedObject
OleGetIconOfClass
OleRun
CreateDataAdviseHolder
CreateOleAdviseHolder
GetRunningObjectTable
WriteClassStm
CoGetMalloc
OleQueryLinkFromData
OleQueryCreateFromData
CoFreeUnusedLibraries
CoGetClassObject
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
OleRegEnumVerbs
OleRegGetMiscStatus
IsAccelerator
OleTranslateAccelerator
CoInitialize
CoUninitialize
CoCreateGuid
OleInitialize
OleUninitialize
OleLockRunning
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateFileMoniker
CreateILockBytesOnHGlobal
StgIsStorageFile
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateDocfile
OleSetMenuDescriptor
PropVariantCopy
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CreateStreamOnHGlobal
CoInitializeEx
CoDisconnectObject
StringFromGUID2
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
GetHGlobalFromILockBytes
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
OleIsRunning
StringFromCLSID
CreateBindCtx
oleaut32
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
VarBstrFromDec
SysStringByteLen
SysAllocStringByteLen
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
VarDecFromStr
VariantInit
GetErrorInfo
VariantChangeType
CreateErrorInfo
VariantCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SysAllocStringLen
SysReAllocStringLen
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCreate
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SysAllocString
SysFreeString
SafeArrayAccessData
SafeArrayUnlock
VariantClear
SafeArrayPtrOfIndex
SetErrorInfo
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayCopy
msimg32
GradientFill
AlphaBlend
TransparentBlt
shlwapi
PathIsDirectoryA
PathFileExistsW
PathIsDirectoryW
PathIsRootW
PathRemoveBackslashW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
UrlUnescapeW
PathFindExtensionW
PathFindFileNameW
PathRemoveExtensionW
StrFormatKBSizeW
StrToIntExW
uxtheme
GetThemePartSize
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
GetWindowTheme
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText
oledlg
OleUIBusyW
gdiplus
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipSaveImageToFile
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetImagePaletteSize
GdipGraphicsClear
GdipGetPropertyItem
wininet
FtpDeleteFileW
FtpPutFileW
FtpGetFileW
FtpFindFirstFileW
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetSetOptionW
FtpSetCurrentDirectoryW
FtpGetCurrentDirectoryW
FtpCommandW
FtpRenameFileW
GopherFindFirstFileW
GopherOpenFileW
GopherGetAttributeW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
HttpSendRequestExW
HttpEndRequestW
InternetGetCookieW
InternetQueryOptionW
InternetErrorDlg
InternetSetCookieW
FtpOpenFileW
FtpCreateDirectoryW
GopherCreateLocatorW
InternetFindNextFileW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetOpenUrlW
InternetConnectW
InternetCloseHandle
InternetOpenW
FtpRemoveDirectoryW
InternetCanonicalizeUrlW
HttpQueryInfoW
InternetCrackUrlW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
iphlpapi
GetAdaptersInfo
wtsapi32
WTSQueryUserToken
userenv
DestroyEnvironmentBlock
CreateEnvironmentBlock
psapi
GetModuleFileNameExW
GetProcessMemoryInfo
imm32
ImmReleaseContext
ImmAssociateContext
ImmGetOpenStatus
ImmGetContext
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
winmm
PlaySoundW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
GetJobW
Sections
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 855KB - Virtual size: 854KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 173.6MB - Virtual size: 173.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 281KB - Virtual size: 281KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ