Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
b3252615eb78997a618c529e8178f8e3.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b3252615eb78997a618c529e8178f8e3.dll
Resource
win10v2004-20231215-en
Target
b3252615eb78997a618c529e8178f8e3
Size
1.1MB
MD5
b3252615eb78997a618c529e8178f8e3
SHA1
7985aa19011ed3a28a72096d88f2f12fe38a99a9
SHA256
abf03c0c60411d619f8e8a7ec16a41cce2f5e3cf50fd226213464c10ee1b9cbd
SHA512
8195270b7d108d38f5372108923467676c940fbc2dfb541251babe207a962aff0d6e90c84e90770727ace27ddd552520972fed6cc015d3ead8ce0d8700500f3c
SSDEEP
24576:TyEHhWnGOnugkitg2dtkus3sRHfU9n1RjZXdAhSB8f59FPg4xbDyqUm7AZ9VPeEi:gGOugkitg2dtkus3sRHfU9n1RjZXdAhL
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_SLConvertACPToUnicode@16
_SLConvertUnicodeToACP@16
SetTimer
KillTimer
DefWindowProcW
CreateWindowExW
RegisterClassExW
IsWindow
GetCurrentProcessId
GetTempPathW
GetLongPathNameW
GetLastError
FormatMessageA
TlsSetValue
CreateSemaphoreA
GetCurrentProcess
DuplicateHandle
GetModuleHandleA
GetTickCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WaitForSingleObjectEx
GetCurrentThreadId
SetEvent
CreateEventA
CloseHandle
Sleep
GetProcAddress
GetModuleHandleW
FormatMessageW
LocalFree
TlsGetValue
TlsAlloc
TlsFree
GetSystemTimeAsFileTime
CreateWaitableTimerA
SystemTimeToFileTime
HeapFree
InitializeCriticalSectionAndSpinCount
CreateEventW
QueryPerformanceCounter
SetWaitableTimer
OpenEventA
WaitForMultipleObjectsEx
ResetEvent
GetProcessHeap
WideCharToMultiByte
MultiByteToWideChar
AreFileApisANSI
LCMapStringW
MoveFileExW
DeviceIoControl
RemoveDirectoryW
GetFileAttributesW
DeleteFileW
CreateFileW
CreateDirectoryW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
_CreateSingletonStaticData@16
_GetSingletonStaticData@12
_IsSingletonStaticDataStorageAvailable@0
_SLGetAtomFromString@8
_SLGetStringFromAtom@8
_CalculateSequenceHash@12
_ServiceProviderRegService@20
_ServiceProviderUnregService@16
_ServiceProviderGetServiceObject@12
_PDFieldGetNumWidgets@8
_PDAnnotGetSubtype@8
_PDChoiceWidgetAnnotHitTestOption@12
_PDChoiceWidgetAnnotGetTopLine@8
_PDChoiceWidgetAnnotSetTopLine@8
_PDChoiceWidgetAnnotGetNumVisibleLines@8
_PDChoiceWidgetAnnotGetNumLines@8
_PDDocImportFormFDF@8
_PDActionFieldsDataRelease@4
_PDDocExportFormFDF@16
_PDCreateActionFieldsData@16
_PDFieldGetChildByIndex@12
_PDFieldGetNumChildren@8
_PDFieldIsTerminal@8
_PDFieldGetDefaultValue@16
_PDFieldGetType@8
_PDFieldSetEValue@12
_PDDocGetField@12
_PDTextWidgetAnnotSetText@12
_PDTextWidgetAnnotGetText@16
_PDTextWidgetAnnotGetNumLines@8
_PDTextWidgetAnnotGetNumVisibleLines@8
_PDTextWidgetAnnotSetTopLine@8
_PDDocGetNumFields@8
_PDFieldSetValue@16
_PDFieldGetCalculateAction@8
_PDTextWidgetAnnotGetTopLine@8
_PDTextWidgetAnnotGetLineWithChar@12
_PDTextWidgetAnnotGetFirstCharOnLine@12
_PDTextWidgetAnnotGetCharQuad@12
_PDTextWidgetAnnotHitTestChar@12
_PDTextWidgetAnnotGetLineSpacing@8
_PDCalculationOrderGetField@12
_PDTextWidgetAnnotKeystroke@20
_PDAnnotHasAppearance@16
_PDFieldGetEValue@16
_PDCalculationOrderGetNumFields@8
_PDFieldGetFormatAction@8
_PDWidgetAnnotGetFocusAction@8
_PDFieldGetValidateAction@8
_PDWidgetAnnotGetBlurAction@8
_PDWidgetAnnotGetMouseEnterAction@8
_PDWidgetAnnotGetMouseExitAction@8
_PDWidgetAnnotGetMouseDownAction@8
_PDWidgetAnnotGetMouseUpAction@8
_PDPageRelease@4
_PDDocFindField@12
_PDEElementGetBBox@8
_PDActionGetType@8
_PDFieldGetModifyAction@8
_PDSignFieldIsBlank@8
_PDActionJavaScriptGetScript@16
_PDFieldGetName@16
_PDEFormXObjectSetMatrix@8
_PDEFormXObjectSetBBox@8
_PDECreateFormXObject@12
_PDEElementSetClip@8
_PDEGStateSetFillAlpha@8
_PDEClipInsertElement@12
_PDECreateClip@4
_PDEContentInsertElement@12
_PDEPathAddSegment@32
_PDEElementSetGState@8
_PDEGStateSetLineWidth@8
_PDEPathSetPaintOp@8
_PDECreatePath@4
_PDEGStateSetStrokeColor@8
_PDEGStateSetFillColor@8
_PDECreateColorFromValue@8
_PDECreateGState@4
_PDECreateContent@4
_PDEElementSetMatrix@8
_PDETextLayout@20
_PDEFormXObjectGetBBox@8
_PDEFormXObjectGetMatrix@8
_PDEGStateRelease@4
_PDChoiceFieldGetOptionValue@20
_PDChoiceFieldGetNumOptions@8
_PDEColorRelease@4
_PDEClipRelease@4
_PDEContentRelease@4
_PDEElementRelease@4
_PDWidgetAnnotGetFontAttrs@8
_PDWidgetAnnotGetBgColor@8
_PDWidgetAnnotGetBorderColor@8
_PDWidgetAnnotGetRotate@8
_PDEXObjectRelease@4
_PDChoiceWidgetAnnotKeystroke@20
_PDChoiceWidgetAnnotSetSelection@8
_PDChoiceFieldFindOptionByValue@16
_PDFieldGetValue@16
_PDChoiceWidgetAnnotGetSelection@8
_PDChoiceWidgetAnnotGetNumOptions@8
_PDChoiceWidgetAnnotHitTestChar@12
_PDChoiceWidgetAnnotGetCharQuad@12
_PDChoiceWidgetAnnotGetText@16
_PDChoiceWidgetAnnotSetText@12
_PDAnnotAcquire@4
_PDWidgetAnnotGetHighlight@8
_PDAtomGetString@8
_PDAnnotGetAppearanceState@8
_PDButtonWidgetAnnotToggle@4
_PDButtonWidgetAnnotGetAction@8
_PDFieldGetFlags@8
_PDFieldRelease@4
_PDFieldAcquire@4
_PDWidgetAnnotGetParent@8
_PDWidgetAnnotGetBorderStyle@8
_PDAnnotGetRect@8
_PDAnnotRelease@4
_PDActionRelease@4
_PDSignFieldDocModifiedAfterSign@12
_PDFieldGetUIName@16
_PDSignFieldGetRevision@8
_PDSignFieldSaveSignedVersion@8
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAM@Z
?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@PBD3@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAG@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAI@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAK@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAM@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAN@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAO@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
?tolower@?$ctype@D@std@@QBEDD@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?id@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?classic@locale@std@@SAABV12@XZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?imbue@ios_base@std@@QAE?AVlocale@2@ABV32@@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Syserror_map@std@@YAPBDH@Z
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Xlength_error@std@@YAXPBD@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Xout_of_range@std@@YAXPBD@Z
?narrow@?$ctype@_W@std@@QBED_WD@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?id@?$ctype@_W@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?exceptions@ios_base@std@@QAEXH@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?_BADOFF@std@@3_JB
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?_Xbad_function_call@std@@YAXXZ
?_Xbad_alloc@std@@YAXXZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?toupper@?$ctype@_W@std@@QBE_W_W@Z
?toupper@?$ctype@D@std@@QBEDD@Z
memset
__RTDynamicCast
__std_type_info_destroy_list
_except_handler4_common
memcpy
_CxxThrowException
__std_type_info_compare
__std_type_info_name
memmove
__CxxFrameHandler3
__std_terminate
_purecall
__std_exception_copy
__std_exception_destroy
terminate
abort
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
strerror
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm_e
_initterm
tolower
isspace
_wcsnicmp
strnlen
wcsnlen
wcsncpy_s
isdigit
calloc
free
_callnewh
malloc
__stdio_common_vsnprintf_s
ferror
fclose
fwrite
_wfopen
_ftelli64
fread
_fseeki64
_gmtime64_s
clock
_time64
_gmtime64
rand
_except1
_libm_sse2_cos_precise
_libm_sse2_sin_precise
ceil
floor
CreateServiceObject
PluginMain
ReflectServiceObjectInfo
ServiceObjectModuleInitialize
ServiceObjectModuleOnCleanup
ServiceObjectModuleOnFree
_CreateServiceObject@8
_PluginMain@8
_ReflectServiceObjectInfo@8
_ServiceObjectModuleInitialize@0
_ServiceObjectModuleOnCleanup@0
_ServiceObjectModuleOnFree@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ