Extended Key Usages
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
Static task
static1
Behavioral task
behavioral1
Sample
bd8b9ddf3b17f4f40630e6730b85e2f0.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd8b9ddf3b17f4f40630e6730b85e2f0.dll
Resource
win10v2004-20240226-en
Target
bd8b9ddf3b17f4f40630e6730b85e2f0
Size
2.0MB
MD5
bd8b9ddf3b17f4f40630e6730b85e2f0
SHA1
1dd982b63f943825caea8e1d3a5ad963fc4bbf68
SHA256
dddec088341975e63e07e7a1d39d526ba8ee5cfce71a7899f9000e855805fadc
SHA512
52095863b8b31a8a4531055feb3af907c913da91b14820484dae4c1dec57100b50d49a1e6e0d0d8342ba710ffb0d4691fc1abc8efa246cafff2107592c059ee8
SSDEEP
24576:8B7xVCeRP7pb8iYBQmIrQ+L5yWHPV/vGFMlUpptq7DAD:8B7WeROiYyrQ+L5VHPVmZpptuAD
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
KeyUsageDigitalSignature
KeyUsageCertSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateIoCompletionPort
CreateThread
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsW
GetConsoleMode
GetEnvironmentStringsW
GetLastError
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatusEx
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetThreadContext
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
OpenProcess
PostQueuedCompletionStatus
ProcessIdToSessionId
QueryFullProcessImageNameA
ResumeThread
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetProcessPriorityBoost
SetThreadContext
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SuspendThread
SwitchToThread
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_beginthread
_errno
_initterm
_lock
_unlock
abort
calloc
fputc
free
fwrite
localeconv
malloc
memcpy
memset
realloc
strerror
strlen
strncmp
vfprintf
wcslen
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Start
_cgo_get_context_function
_cgo_init
_cgo_is_runtime_initialized
_cgo_maybe_run_preinit
_cgo_notify_runtime_init_done
_cgo_panic
_cgo_preinit_init
_cgo_release_context
_cgo_sys_thread_create
_cgo_sys_thread_start
_cgo_thread_start
_cgo_topofstack
_cgo_wait_runtime_init_done
_cgo_yield
_cgoexp_2b8bfb338fe8_DllGetClassObject
_cgoexp_2b8bfb338fe8_DllRegisterServer
_cgoexp_2b8bfb338fe8_DllUnregisterServer
_cgoexp_2b8bfb338fe8_Start
_rt0_amd64_windows_lib
_rt0_amd64_windows_lib.ptr
_rt0_amd64_windows_lib_go
bufio..inittask
bufio.ErrAdvanceTooFar
bufio.ErrBadReadCount
bufio.ErrBufferFull
bufio.ErrFinalToken
bufio.ErrInvalidUnreadByte
bufio.ErrInvalidUnreadRune
bufio.ErrNegativeAdvance
bufio.ErrNegativeCount
bufio.ErrTooLong
bufio.errNegativeRead
bufio.errNegativeWrite
bufio.init
bytes.(*Buffer).Len
bytes.(*Buffer).Read
bytes.(*Buffer).ReadFrom
bytes.(*Buffer).String
bytes.(*Buffer).Write
bytes.(*Buffer).grow
bytes..inittask
bytes.ErrTooLarge
bytes.errNegativeRead
bytes.errUnreadByte
bytes.init
bytes.makeSlice
bytes.makeSlice.func1
compress/flate.(*byFreq).Len
compress/flate.(*byFreq).Less
compress/flate.(*byFreq).Swap
compress/flate.(*byLiteral).Len
compress/flate.(*byLiteral).Less
compress/flate.(*byLiteral).Swap
compress/flate.(*huffmanEncoder).assignEncodingAndSize
compress/flate.(*huffmanEncoder).bitCounts
compress/flate.(*huffmanEncoder).generate
compress/flate..inittask
compress/flate..stmp_4
compress/flate..stmp_5
compress/flate.byFreq.Len
compress/flate.byFreq.Less
compress/flate.byFreq.Swap
compress/flate.byLiteral.Len
compress/flate.byLiteral.Less
compress/flate.byLiteral.Swap
compress/flate.fixedLiteralEncoding
compress/flate.fixedOffsetEncoding
compress/flate.generateFixedLiteralEncoding
compress/flate.generateFixedOffsetEncoding
compress/flate.huffOffset
compress/flate.init
compress/flate.init.0
compress/zlib..inittask
compress/zlib.ErrChecksum
compress/zlib.ErrDictionary
compress/zlib.ErrHeader
compress/zlib.init
context.(*emptyCtx).String
context..inittask
context.Canceled
context.background
context.closedchan
context.init
context.init.0
context.todo
crosscall2
crosscall_amd64
crypto/aes.(*KeySizeError).Error
crypto/aes.(*aesCipher).BlockSize
crypto/aes.(*aesCipher).Decrypt
crypto/aes.(*aesCipher).Encrypt
crypto/aes.(*aesCipherAsm).BlockSize
crypto/aes.(*aesCipherAsm).Decrypt
crypto/aes.(*aesCipherAsm).Encrypt
crypto/aes.(*aesCipherGCM).BlockSize
crypto/aes.(*aesCipherGCM).Decrypt
crypto/aes.(*aesCipherGCM).Encrypt
crypto/aes..inittask
crypto/aes..stmp_10
crypto/aes..stmp_11
crypto/aes..stmp_12
crypto/aes..stmp_13
crypto/aes..stmp_14
crypto/aes..stmp_15
crypto/aes..stmp_16
crypto/aes..stmp_17
crypto/aes..stmp_6
crypto/aes..stmp_7
crypto/aes..stmp_8
crypto/aes..stmp_9
crypto/aes.KeySizeError.Error
crypto/aes.NewCipher
crypto/aes.decryptBlockAsm
crypto/aes.decryptBlockGo
crypto/aes.encryptBlockAsm
crypto/aes.encryptBlockGo
crypto/aes.errOpen
crypto/aes.expandKeyAsm
crypto/aes.expandKeyGo
crypto/aes.init
crypto/aes.newCipher
crypto/aes.newCipherGeneric
crypto/aes.powx
crypto/aes.sbox0
crypto/aes.sbox1
crypto/aes.supportsAES
crypto/aes.supportsGFMUL
crypto/aes.td0
crypto/aes.td1
crypto/aes.td2
crypto/aes.td3
crypto/aes.te0
crypto/aes.te1
crypto/aes.te2
crypto/aes.te3
crypto/cipher.(*cbcDecrypter).BlockSize
crypto/cipher.(*cbcDecrypter).CryptBlocks
crypto/cipher..inittask
crypto/cipher..stmp_5
crypto/cipher..stmp_6
crypto/cipher..stmp_7
crypto/cipher..stmp_8
crypto/cipher.NewCBCDecrypter
crypto/cipher.errOpen
crypto/cipher.init
crypto/cipher.newCBC
crypto/cipher.xorBytes
crypto/cipher.xorBytesSSE2
debug/dwarf.(*Attr).GoString
debug/dwarf.(*Attr).String
debug/dwarf.(*Class).GoString
debug/dwarf.(*Class).String
debug/dwarf..inittask
debug/dwarf.Attr.GoString
debug/dwarf.Attr.String
debug/dwarf.Class.GoString
debug/dwarf.Class.String
debug/dwarf.ErrUnknownPC
debug/dwarf._Attr_map
debug/dwarf._Class_index
debug/dwarf.attrIsExprloc
debug/dwarf.attrPtrClass
debug/dwarf.init
debug/dwarf.knownOpcodeLengths
debug/pe.(*COFFSymbol).FullName
debug/pe.(*File).Close
debug/pe.(*File).Section
debug/pe.(*Section).ReadAt
debug/pe.(*SectionHeader32).fullName
debug/pe.(*zeroReaderAt).ReadAt
debug/pe..inittask
debug/pe.NewFile
debug/pe.NewFile.stkobj
debug/pe.Open
debug/pe.Section.ReadAt
debug/pe.StringTable.String
debug/pe.StringTable.String.stkobj
debug/pe.cstring
debug/pe.readCOFFSymbols
debug/pe.readCOFFSymbols.stkobj
debug/pe.readDataDirectories
debug/pe.readDataDirectories.stkobj
debug/pe.readOptionalHeader
debug/pe.readOptionalHeader.stkobj
debug/pe.readRelocs
debug/pe.readRelocs.stkobj
debug/pe.readStringTable
debug/pe.readStringTable.stkobj
debug/pe.removeAuxSymbols
debug/pe.zeroReaderAt.ReadAt
encoding/base64.(*CorruptInputError).Error
encoding/base64.(*Encoding).Decode
encoding/base64.(*Encoding).DecodeString
encoding/base64.(*Encoding).decodeQuantum
encoding/base64..inittask
encoding/base64..stmp_0
encoding/base64..stmp_1
encoding/base64..stmp_2
encoding/base64..stmp_3
encoding/base64.CorruptInputError.Error
encoding/base64.Encoding.WithPadding
encoding/base64.NewEncoding
encoding/base64.RawStdEncoding
encoding/base64.RawURLEncoding
encoding/base64.StdEncoding
encoding/base64.URLEncoding
encoding/base64.init
encoding/binary.(*decoder).int16
encoding/binary.(*decoder).int32
encoding/binary.(*decoder).int64
encoding/binary.(*decoder).value
encoding/binary.(*littleEndian).GoString
encoding/binary.(*littleEndian).PutUint16
encoding/binary.(*littleEndian).PutUint32
encoding/binary.(*littleEndian).PutUint64
encoding/binary.(*littleEndian).String
encoding/binary.(*littleEndian).Uint16
encoding/binary.(*littleEndian).Uint32
encoding/binary.(*littleEndian).Uint64
encoding/binary..inittask
encoding/binary.Read
encoding/binary.Read.stkobj
encoding/binary.Size
encoding/binary.Size.stkobj
encoding/binary.dataSize
encoding/binary.init
encoding/binary.intDataSize
encoding/binary.littleEndian.GoString
encoding/binary.littleEndian.PutUint16
encoding/binary.littleEndian.PutUint32
encoding/binary.littleEndian.PutUint64
encoding/binary.littleEndian.String
encoding/binary.littleEndian.Uint16
encoding/binary.littleEndian.Uint32
encoding/binary.littleEndian.Uint64
encoding/binary.overflow
encoding/binary.sizeof
encoding/binary.structSize
encoding/hex.(*InvalidByteError).Error
encoding/hex.(*InvalidByteError).Error.stkobj
encoding/hex..inittask
encoding/hex.Decode
encoding/hex.ErrLength
encoding/hex.InvalidByteError.Error
encoding/hex.InvalidByteError.Error.stkobj
encoding/hex.init
errors.(*errorString).Error
errors..inittask
errors.New
errors.errorType
errors.init
fmt.(*buffer).writeRune
fmt.(*fmt).fmtBoolean
fmt.(*fmt).fmtBs
fmt.(*fmt).fmtC
fmt.(*fmt).fmtFloat
fmt.(*fmt).fmtInteger
fmt.(*fmt).fmtQ
fmt.(*fmt).fmtQc
fmt.(*fmt).fmtS
fmt.(*fmt).fmtSbx
fmt.(*fmt).fmtUnicode
fmt.(*fmt).pad
fmt.(*fmt).padString
fmt.(*fmt).truncate
fmt.(*fmt).truncateString
fmt.(*fmt).writePadding
fmt.(*pp).Flag
fmt.(*pp).Precision
fmt.(*pp).Width
fmt.(*pp).Write
fmt.(*pp).argNumber
fmt.(*pp).badArgNum
fmt.(*pp).badVerb
fmt.(*pp).badVerb.stkobj
fmt.(*pp).catchPanic
fmt.(*pp).catchPanic.stkobj
fmt.(*pp).doPrintf
fmt.(*pp).doPrintf.stkobj
fmt.(*pp).fmt0x64
fmt.(*pp).fmtBool
fmt.(*pp).fmtBytes
fmt.(*pp).fmtBytes.stkobj
fmt.(*pp).fmtComplex
fmt.(*pp).fmtFloat
fmt.(*pp).fmtInteger
fmt.(*pp).fmtPointer
fmt.(*pp).fmtString
fmt.(*pp).free
fmt.(*pp).handleMethods
fmt.(*pp).missingArg
fmt.(*pp).printArg
fmt.(*pp).printArg.stkobj
fmt.(*pp).printValue
fmt.(*pp).unknownType
fmt.(*wrapError).Error
fmt..inittask
fmt..stmp_0
fmt.Errorf
fmt.Sprintf
fmt.boolError
fmt.complexError
fmt.getField
fmt.glob..func1
fmt.init
fmt.intFromArg
fmt.intFromArg.stkobj
fmt.newPrinter
fmt.parseArgNumber
fmt.parsenum
fmt.ppFree
go.buildid
go.itab.*compress/flate.byFreq,sort.Interface
go.itab.*compress/flate.byLiteral,sort.Interface
go.itab.*crypto/aes.aesCipher,crypto/cipher.Block
go.itab.*crypto/aes.aesCipherAsm,crypto/cipher.Block
go.itab.*crypto/aes.aesCipherGCM,crypto/cipher.Block
go.itab.*crypto/cipher.cbcDecrypter,crypto/cipher.BlockMode
go.itab.*errors.errorString,error
go.itab.*fmt.pp,fmt.State
go.itab.*fmt.wrapError,error
go.itab.*golang.org/x/sys/windows.DLLError,error
go.itab.*internal/fmtsort.SortedMap,sort.Interface
go.itab.*internal/poll.DeadlineExceededError,error
go.itab.*internal/reflectlite.rtype,internal/reflectlite.Type
go.itab.*io.SectionReader,io.ReadSeeker
go.itab.*io.SectionReader,io.Reader
go.itab.*io.SectionReader,io.ReaderAt
go.itab.*math/rand.lockedSource,math/rand.Source
go.itab.*math/rand.rngSource,math/rand.Source
go.itab.*os.File,io.Closer
go.itab.*os.File,io.Reader
go.itab.*os.File,io.ReaderAt
go.itab.*os.PathError,error
go.itab.*os.fileStat,os.FileInfo
go.itab.*reflect.rtype,reflect.Type
go.itab.*strconv.NumError,error
go.itab.*syscall.DLLError,error
go.itab.crypto/aes.KeySizeError,error
go.itab.debug/pe.zeroReaderAt,io.ReaderAt
go.itab.encoding/base64.CorruptInputError,error
go.itab.encoding/binary.littleEndian,encoding/binary.ByteOrder
go.itab.encoding/hex.InvalidByteError,error
go.itab.runtime.errorString,error
go.itab.syscall.Errno,error
golang.org/x/sys/windows.(*DLL).FindProc
golang.org/x/sys/windows.(*DLL).FindProc.stkobj
golang.org/x/sys/windows.(*DLLError).Error
golang.org/x/sys/windows.(*LazyDLL).Load
golang.org/x/sys/windows.(*LazyDLL).NewProc
golang.org/x/sys/windows.(*LazyProc).Find
golang.org/x/sys/windows..inittask
golang.org/x/sys/windows..stmp_10
golang.org/x/sys/windows..stmp_177
golang.org/x/sys/windows..stmp_178
golang.org/x/sys/windows..stmp_8
golang.org/x/sys/windows.ByteSliceFromString
golang.org/x/sys/windows.GetStdHandle
golang.org/x/sys/windows.GetSystemDirectory
golang.org/x/sys/windows.LoadDLL
golang.org/x/sys/windows.LoadLibraryEx
golang.org/x/sys/windows.NewLazySystemDLL
golang.org/x/sys/windows.SetHandleInformation
golang.org/x/sys/windows.Stderr
golang.org/x/sys/windows.Stdin
golang.org/x/sys/windows.Stdout
golang.org/x/sys/windows.UTF16FromString
golang.org/x/sys/windows.UTF16ToString
golang.org/x/sys/windows._LoadLibraryEx
golang.org/x/sys/windows._LoadLibraryEx.stkobj
golang.org/x/sys/windows.canDoSearchSystem32Once
golang.org/x/sys/windows.errERROR_EINVAL
golang.org/x/sys/windows.errERROR_IO_PENDING
golang.org/x/sys/windows.getStdHandle
golang.org/x/sys/windows.getSystemDirectory
golang.org/x/sys/windows.getSystemDirectory.stkobj
golang.org/x/sys/windows.init
golang.org/x/sys/windows.initCanDoSearchSystem32
golang.org/x/sys/windows.isBaseName
golang.org/x/sys/windows.loadLibraryEx
golang.org/x/sys/windows.modadvapi32
golang.org/x/sys/windows.modcrypt32
golang.org/x/sys/windows.moddnsapi
golang.org/x/sys/windows.modiphlpapi
golang.org/x/sys/windows.modkernel32
golang.org/x/sys/windows.modmswsock
golang.org/x/sys/windows.modnetapi32
golang.org/x/sys/windows.modntdll
golang.org/x/sys/windows.modole32
golang.org/x/sys/windows.modpsapi
golang.org/x/sys/windows.modsechost
golang.org/x/sys/windows.modsecur32
golang.org/x/sys/windows.modshell32
golang.org/x/sys/windows.moduser32
golang.org/x/sys/windows.moduserenv
golang.org/x/sys/windows.modwintrust
golang.org/x/sys/windows.modws2_32
golang.org/x/sys/windows.modwtsapi32
golang.org/x/sys/windows.procAcceptEx
golang.org/x/sys/windows.procAdjustTokenGroups
golang.org/x/sys/windows.procAdjustTokenPrivileges
golang.org/x/sys/windows.procAllocateAndInitializeSid
golang.org/x/sys/windows.procAssignProcessToJobObject
golang.org/x/sys/windows.procBuildSecurityDescriptorW
golang.org/x/sys/windows.procCLSIDFromString
golang.org/x/sys/windows.procCancelIo
golang.org/x/sys/windows.procCancelIoEx
golang.org/x/sys/windows.procCertAddCertificateContextToStore
golang.org/x/sys/windows.procCertCloseStore
golang.org/x/sys/windows.procCertCreateCertificateContext
golang.org/x/sys/windows.procCertDeleteCertificateFromStore
golang.org/x/sys/windows.procCertDuplicateCertificateContext
golang.org/x/sys/windows.procCertEnumCertificatesInStore
golang.org/x/sys/windows.procCertFindExtension
golang.org/x/sys/windows.procCertFreeCertificateChain
golang.org/x/sys/windows.procCertFreeCertificateContext
golang.org/x/sys/windows.procCertGetCertificateChain
golang.org/x/sys/windows.procCertGetNameStringW
golang.org/x/sys/windows.procCertOpenStore
golang.org/x/sys/windows.procCertOpenSystemStoreW
golang.org/x/sys/windows.procCertVerifyCertificateChainPolicy
golang.org/x/sys/windows.procChangeServiceConfig2W
golang.org/x/sys/windows.procChangeServiceConfigW
golang.org/x/sys/windows.procCheckTokenMembership
golang.org/x/sys/windows.procCloseHandle
golang.org/x/sys/windows.procCloseServiceHandle
golang.org/x/sys/windows.procCoCreateGuid
golang.org/x/sys/windows.procCoTaskMemFree
golang.org/x/sys/windows.procCommandLineToArgvW
golang.org/x/sys/windows.procControlService
golang.org/x/sys/windows.procConvertSecurityDescriptorToStringSecurityDescriptorW
golang.org/x/sys/windows.procConvertSidToStringSidW
golang.org/x/sys/windows.procConvertStringSecurityDescriptorToSecurityDescriptorW
golang.org/x/sys/windows.procConvertStringSidToSidW
golang.org/x/sys/windows.procCopySid
golang.org/x/sys/windows.procCreateDirectoryW
golang.org/x/sys/windows.procCreateEnvironmentBlock
golang.org/x/sys/windows.procCreateEventExW
golang.org/x/sys/windows.procCreateEventW
golang.org/x/sys/windows.procCreateFileMappingW
golang.org/x/sys/windows.procCreateFileW
golang.org/x/sys/windows.procCreateHardLinkW
golang.org/x/sys/windows.procCreateIoCompletionPort
golang.org/x/sys/windows.procCreateJobObjectW
golang.org/x/sys/windows.procCreateMutexExW
golang.org/x/sys/windows.procCreateMutexW
golang.org/x/sys/windows.procCreatePipe
golang.org/x/sys/windows.procCreateProcessW
golang.org/x/sys/windows.procCreateServiceW
golang.org/x/sys/windows.procCreateSymbolicLinkW
golang.org/x/sys/windows.procCreateToolhelp32Snapshot
golang.org/x/sys/windows.procCreateWellKnownSid
golang.org/x/sys/windows.procCryptAcquireContextW
golang.org/x/sys/windows.procCryptDecodeObject
golang.org/x/sys/windows.procCryptGenRandom
golang.org/x/sys/windows.procCryptProtectData
golang.org/x/sys/windows.procCryptQueryObject
golang.org/x/sys/windows.procCryptReleaseContext
golang.org/x/sys/windows.procCryptUnprotectData
golang.org/x/sys/windows.procDefineDosDeviceW
golang.org/x/sys/windows.procDeleteFileW
golang.org/x/sys/windows.procDeleteService
golang.org/x/sys/windows.procDeleteVolumeMountPointW
golang.org/x/sys/windows.procDeregisterEventSource
golang.org/x/sys/windows.procDestroyEnvironmentBlock
golang.org/x/sys/windows.procDeviceIoControl
golang.org/x/sys/windows.procDnsNameCompare_W
golang.org/x/sys/windows.procDnsQuery_W
golang.org/x/sys/windows.procDnsRecordListFree
golang.org/x/sys/windows.procDuplicateHandle
golang.org/x/sys/windows.procDuplicateTokenEx
golang.org/x/sys/windows.procEnumProcesses
golang.org/x/sys/windows.procEnumServicesStatusExW
golang.org/x/sys/windows.procEqualSid
golang.org/x/sys/windows.procExitProcess
golang.org/x/sys/windows.procExitWindowsEx
golang.org/x/sys/windows.procFindClose
golang.org/x/sys/windows.procFindCloseChangeNotification
golang.org/x/sys/windows.procFindFirstChangeNotificationW
golang.org/x/sys/windows.procFindFirstFileW
golang.org/x/sys/windows.procFindFirstVolumeMountPointW
golang.org/x/sys/windows.procFindFirstVolumeW
golang.org/x/sys/windows.procFindNextChangeNotification
golang.org/x/sys/windows.procFindNextFileW
golang.org/x/sys/windows.procFindNextVolumeMountPointW
golang.org/x/sys/windows.procFindNextVolumeW
golang.org/x/sys/windows.procFindVolumeClose
golang.org/x/sys/windows.procFindVolumeMountPointClose
golang.org/x/sys/windows.procFlushFileBuffers
golang.org/x/sys/windows.procFlushViewOfFile
golang.org/x/sys/windows.procFormatMessageW
golang.org/x/sys/windows.procFreeAddrInfoW
golang.org/x/sys/windows.procFreeEnvironmentStringsW
golang.org/x/sys/windows.procFreeLibrary
golang.org/x/sys/windows.procFreeSid
golang.org/x/sys/windows.procGenerateConsoleCtrlEvent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ