C:\fcw7\make\obj\FCW7.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1c8f186de1caaf8758ec6bb510d3e986.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1c8f186de1caaf8758ec6bb510d3e986.exe
Resource
win10v2004-20240226-en
General
-
Target
1c8f186de1caaf8758ec6bb510d3e986
-
Size
1.4MB
-
MD5
1c8f186de1caaf8758ec6bb510d3e986
-
SHA1
417999ad12baba30e3a25523c9bad88d59581c09
-
SHA256
70ec234233c15079714db02af8c36de77ec3583d0a1a40df5c348adf98e11d9c
-
SHA512
932581f2a1b20a14a9460a9897d5c7332276ba616bcb2ff17c80c7fe05b2eb72b59891d602ce46904f01d6de1c27fae3000f90b97c2d449e967924b6531aa9dc
-
SSDEEP
24576:TizgzEAVL+u7mA60o2iNRAP8kVnxtd0+NtGXg2W58xCZ0:TizgzIQ1i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c8f186de1caaf8758ec6bb510d3e986
Files
-
1c8f186de1caaf8758ec6bb510d3e986.exe windows:5 windows x86 arch:x86
2862dc81ed762bbd3b30ede973563053
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
winmm
PlaySoundA
iphlpapi
GetAdaptersInfo
kernel32
SetCurrentDirectoryA
ExitProcess
GlobalReAlloc
GlobalFree
MultiByteToWideChar
CreateDirectoryA
WriteFile
SetFilePointer
ReadFile
GetFullPathNameA
GetFileSize
GetCurrentDirectoryA
DeleteFileA
GetModuleFileNameA
GetComputerNameA
GetSystemTimeAsFileTime
SetFileTime
GetFileTime
CreateFileA
CloseHandle
FindClose
FindNextFileA
FindFirstFileA
LoadLibraryA
Sleep
GetVersion
GlobalUnlock
FreeLibrary
GlobalLock
GlobalAlloc
GetCommandLineA
GetCurrentThreadId
GetStartupInfoA
WinExec
GetTickCount
GetProfileStringA
GetLocalTime
GetLastError
GetTempFileNameA
GetTempPathA
GetProcAddress
GetModuleHandleA
user32
MoveWindow
GetMessagePos
GetClipboardData
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
RegisterClipboardFormatA
GetDesktopWindow
ShowScrollBar
SetActiveWindow
SetScrollRange
MessageBoxA
CallNextHookEx
UnhookWindowsHookEx
TrackPopupMenu
LoadMenuA
GetSubMenu
mouse_event
SetMenu
DrawMenuBar
DestroyMenu
CreatePopupMenu
CreateMenu
CheckMenuItem
ModifyMenuA
AppendMenuA
GetAsyncKeyState
GetKeyState
SetCursorPos
SetWindowPos
GetCursorPos
DestroyIcon
SendMessageA
GetDlgItem
DrawEdge
SetFocus
SendDlgItemMessageA
IsDialogMessage
GetWindowRect
GetClientRect
EndPaint
EnableWindow
DrawTextA
CreateDialogParamA
BeginPaint
KillTimer
SetTimer
SetCursor
LoadImageA
FillRect
DrawIconEx
SystemParametersInfoA
MapWindowPoints
SetWindowsHookExA
TranslateMessage
ShowWindow
SetWindowTextA
SetCapture
ReleaseDC
ReleaseCapture
RegisterClassA
PostQuitMessage
PostMessageA
PeekMessageA
LoadIconA
LoadCursorA
LoadBitmapA
ValidateRect
GetWindowPlacement
GetSystemMetrics
EndDialog
DialogBoxParamA
InvalidateRect
GetPriorityClipboardFormat
GetSysColor
GetMessageA
GetDC
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
CheckDlgButton
RegisterWindowMessageA
ClientToScreen
SetScrollPos
gdi32
EnumFontsA
CreateFontIndirectA
DeleteDC
SelectObject
SetROP2
SetTextAlign
SetTextColor
ExtTextOutA
SetBkMode
SetDIBitsToDevice
CreateDIBSection
SelectClipRgn
CreateRectRgnIndirect
CombineRgn
CreatePen
CreateSolidBrush
CreateFontA
SetBkColor
SetPixelV
TextOutA
CreateCompatibleBitmap
StretchDIBits
StretchBlt
Ellipse
Polyline
Polygon
PolyPolygon
CreateBitmapIndirect
CreatePatternBrush
CreatePolygonRgn
CreatePolyPolygonRgn
GetObjectA
GetStockObject
SetStretchBltMode
GetDeviceCaps
DeleteObject
CreateCompatibleDC
Rectangle
BeginPath
EndPath
GdiFlush
DeleteMetaFile
CloseMetaFile
CreateMetaFileA
SetMapMode
DeleteEnhMetaFile
CloseEnhMetaFile
CreateEnhMetaFileA
CreateRectRgn
GetTextExtentPointA
MoveToEx
LineTo
GetTextExtentExPointA
GetTextExtentPoint32A
CreateDCA
StartPage
StartDocA
SetAbortProc
GetTextMetricsA
EndPage
EndDoc
AbortDoc
GetDIBits
SetDIBits
CreateICA
GetRgnBox
FillPath
BitBlt
winspool.drv
DocumentPropertiesA
GetPrinterA
ClosePrinter
OpenPrinterA
EnumPrintersA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
advapi32
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA
RegSetValueExA
shell32
ShellExecuteA
SHGetPathFromIDListA
SHBrowseForFolderA
comctl32
CreatePropertySheetPageA
ole32
OleInitialize
OleUninitialize
CoCreateInstance
CoGetMalloc
OleBuildVersion
Exports
Exports
?AddCmbStr@@YGXKK@Z
?AddLstStr@@YGXKK@Z
?AskNUTran@@YGHPAY0BA@N@Z
?CALOA3@@YGXXZ
?CALOA3P@@YGXXZ
?CTMI2@@YGXXZ
?CTMI3@@YGXXZ
?CTMMUL2@@YGXPAY0BA@N@Z
?CTMMUL3@@YGXPAY0BA@N@Z
?CTMPOP@@YGXXZ
?CTMPSH@@YGXXZ
?CTMR2@@YGXN@Z
?CTMRXY@@YGXN@Z
?CTMRXYS@@YGXXZ
?CTMRYZ@@YGXN@Z
?CTMRYZS@@YGXXZ
?CTMRZX@@YGXN@Z
?CTMRZXS@@YGXXZ
?CTMS2@@YGXNN@Z
?CTMS3@@YGXNNN@Z
?CTMS3S@@YGXXZ
?CTMSpec3@@YGPAUTSPEC3@@XZ
?CTMT2@@YGXNN@Z
?CTMT2S@@YGXXZ
?CTMT3@@YGXNNN@Z
?CTMT3S@@YGXXZ
?ClearSelect@@YGXXZ
?ClrCmbStr@@YGXK@Z
?ClrLstStr@@YGXK@Z
?CmdEnd@@YGXXZ
?CopyCStuff@@YGXPAT__unnamed@@0@Z
?CopyColor@@YGXPAT__unnamed@@0@Z
?CreateDList@@YGPAUIDList@@PADH@Z
?DIndexAdd@@YGXKK@Z
?DIndexApnd@@YGXKK@Z
?DIndexInit@@YGXK@Z
?DIndexRel@@YGXK@Z
?DWRendEnd@@YGXPAX@Z
?DWRendStart@@YGXPAX@Z
?DWRendVector@@YGXPAXHHHH@Z
?DWScanLine@@YGXPAXHPAD@Z
?Dialog@@YGXKKK@Z
?DiscardReq@@YGXXZ
?DsAbCtl@@YGXK@Z
?EAct@@YGXPAT__unnamed@@K@Z
?EBreak@@YGXKK@Z
?EDraw@@YGXPAXPAT__unnamed@@@Z
?EDrawM@@YGXPAXPAT__unnamed@@@Z
?EDynEdit@@YGXPAT__unnamed@@@Z
?EEdge3@@YGXPAT__unnamed@@K@Z
?EEdit@@YGXPAT__unnamed@@@Z
?EErase@@YGXPAXPAT__unnamed@@@Z
?EExplode@@YGXPAT__unnamed@@K@Z
?EExtrude@@YGXPAT__unnamed@@PAY0BA@NPAUIDList@@@Z
?EGet@@YGXPAT__unnamed@@KKK@Z
?EInfo@@YGXPAT__unnamed@@K@Z
?EList@@YGXPAT__unnamed@@@Z
?EMake3d@@YGXPAT__unnamed@@@Z
?EMark@@YGXPAXPAT__unnamed@@@Z
?ENList3@@YGXKKKKK@Z
?EOffset@@YGXPAT__unnamed@@KK@Z
?EPick@@YGXPAT__unnamed@@@Z
?EPlace@@YGXPAT__unnamed@@K@Z
?ERender@@YGXPAXPAT__unnamed@@@Z
?ESplit@@YGXPAT__unnamed@@NKK@Z
?EStdPlace@@YGXKK@Z
?EStretch@@YGXPAT__unnamed@@@Z
?ETran@@YGXPAT__unnamed@@PAY0BA@N@Z
?ETrim@@YGXPAT__unnamed@@NN@Z
?EXCheck@@YGXPAT__unnamed@@K@Z
?EnAbCtl@@YGXK@Z
?EndHelpContext@@YGXXZ
?EndSymTM@@YGXXZ
?FDNSame3@@YGHPAUGPOINT3@@0@Z
?FindStgListEnd@@YGXK@Z
?FindStgListItem@@YGXKK@Z
?FndCmbStr@@YGXKK@Z
?FndLstStr@@YGXKK@Z
?FocusCtl@@YGXK@Z
?ForceCsrSnap@@YGXK@Z
?FormSt@@YGHPAX00PAD@Z
?FormSt@@YGXPAX00PAD@Z
?FullFilePath@@YGPADPAD0@Z
?GXCheckP2@@YGXKK@Z
?GXCheckP2S@@YGXK@Z
?GetBkgndColor@@YGHPAX@Z
?GetBkgndColor@@YGKPAT__unnamed@@@Z
?GetCmbData@@YGXKK@Z
?GetCmbStr@@YGXKK@Z
?GetCurColor@@YGKXZ
?GetDlgDig@@YGXKK@Z
?GetDlgWin@@YGXXZ
?GetDrawMode@@YGXXZ
?GetLstData@@YGXKK@Z
?GetLstMSel@@YGXKKK@Z
?GetLstStr@@YGXKK@Z
?GetLstStrN@@YGXKKK@Z
?GetMainWin@@YGPAUHWND__@@XZ
?GetPrintData@@YGXPAPAUHDC__@@PAH111@Z
?GetWorkDL@@YGPAUIDList@@XZ
?HelpRequest@@YGXXZ
?HideCtl@@YGXK@Z
?HowManyVisEnts@@YGHPAUIDList@@@Z
?IndexAdd@@YGXKKK@Z
?IndexFind@@YGXKK@Z
?IndexRmv@@YGXKK@Z
?InitDialogHelp@@YGXKK@Z
?LDCTM@@YGXPAY0BA@N@Z
?LDSymTM@@YGXPAY0BA@N@Z
?LSUAsk0@@YGHHH@Z
?MATINV2@@YGXKK@Z
?MATMUL3@@YGXKKK@Z
?MATTRN2@@YGXKK@Z
?MaterialScale@@YGMH@Z
?NPONL3@@YGXPAUGLINE3@@PAUGPNT3@@1@Z
?PREMUL2@@YGXPAY0BA@N@Z
?PREMUL3@@YGXPAY0BA@N@Z
?PREOA3@@YGXXZ
?PRER2@@YGXN@Z
?PRERXY@@YGXN@Z
?PRERYZ@@YGXN@Z
?PRERZX@@YGXN@Z
?PRES2@@YGXNN@Z
?PRES3@@YGXNNN@Z
?PRES3S@@YGXXZ
?PRET2@@YGXNN@Z
?PRET3@@YGXNNN@Z
?PRET3S@@YGXXZ
?PadLMargin@@YGXHD@Z
?PostSelect@@YGXXZ
?ProcCsrSnap@@YGXK@Z
?ProcCsrSnapEx@@YGXKK@Z
?ProgressMsg@@YGXPAD@Z
?ReceiveBad@@YGXXZ
?ReceiveChar@@YGXH@Z
?ReceiveClear@@YGXXZ
?ReceiveRDig3@@YGXNNN@Z
?RegXPPMProc@@YGXPAUPMLink@@@Z
?RemoveCursor@@YGXXZ
?ReqData@@YGXHPAXPAD0P6GXH@ZHH@Z
?ReqDataX@@YGXHPAXPAD0P6GXH@ZHHPAUGLINE3@@@Z
?RscAdr@@YGPAXK@Z
?RscInit@@YGXKKK@Z
?RscSetPtr@@YGXKK@Z
?STCTM@@YGXPAY0BA@N@Z
?STSymTM@@YGXPAY0BA@N@Z
?SetAFmt@@YGXK@Z
?SetAltDFmt@@YGXK@Z
?SetBkgndColor@@YGXPAT__unnamed@@@Z
?SetCStuff@@YGXPAT__unnamed@@@Z
?SetCStuff@@YGXPAX@Z
?SetCmbData@@YGXKKK@Z
?SetCtlText@@YGXKK@Z
?SetCurColor@@YGXPAT__unnamed@@@Z
?SetCursorOrg2@@YGXNN@Z
?SetCursorOrg3@@YGXNNN@Z
?SetCursorType@@YGXK@Z
?SetDFmt@@YGXK@Z
?SetDecP@@YGXK@Z
?SetDlgTitle@@YGXK@Z
?SetFRnd@@YGXK@Z
?SetFSUnitV@@YGXN@Z
?SetHelpContext@@YGXKK@Z
?SetLstData@@YGXKKK@Z
?SetMWRectCsr@@YGXK@Z
?SetMousePos@@YGXKKK@Z
?SetNewTag@@YGXPAT__unnamed@@@Z
?ShowChanges@@YGXXZ
?ShowCtl@@YGXK@Z
?ShowProgress@@YGXHH@Z
?SpecRendObj@@YGXPAX@Z
?StApnd@@YGHPAD0@Z
?StApnd@@YGXKK@Z
?StComp@@YGXKK@Z
?StCopy@@YGHPAD0@Z
?StCopy@@YGXKK@Z
?StCopyCR@@YGXKK@Z
?StIndex@@YGXKK@Z
?StLen@@YGXK@Z
?StMatch@@YGHPAD0@Z
?StMatch@@YGXKK@Z
?StSkipLine@@YGXK@Z
?StUCase@@YGXK@Z
?StatusMsg@@YGXPAD@Z
?StrP2@@YGXK@Z
?StrP3@@YGXK@Z
?SwitchMainDL@@YGXPAT__unnamed@@@Z
?SwitchRefDL@@YGXPAT__unnamed@@@Z
?TRNBA2@@YGXN@Z
?TRNP2@@YGXK@Z
?TRNP2M@@YGXKPAY0BA@N@Z
?TRNP3@@YGXK@Z
?TRNP3M@@YGXKPAY0BA@N@Z
?TRNSP2@@YGXXZ
?TRNSP2M@@YGXPAY0BA@N@Z
?TRNSP3@@YGXXZ
?TRNSP3M@@YGXPAY0BA@N@Z
?TrnSymTM@@YGXPAY0M@N@Z
?TrnSymTMM@@YGXPAY0M@NPAY0BA@N@Z
?UnRegXPPMProc@@YGXPAUPMLink@@@Z
?UpdCtl@@YGXK@Z
?UpdCtlA@@YGXXZ
?UpdateCursor@@YGXKNNN@Z
?UpdateMWC@@YGXKK@Z
?UseSymTM3@@YGXPAY0BA@NK@Z
?UseSymTM@@YGXPAY0BA@N@Z
?ViewCalc@@YGHPAXPAUGPOINT3@@11PANPAH3@Z
?XHReqCsr3@@YGXK@Z
?XHReqCsr@@YGXK@Z
?XPRegister@@YGXPAX@Z
?XPUnRegister@@YGXPAX@Z
_ACOS@0
_ANorm@0
_ASIN@0
_AScan@4
_ATAN2@0
_ATAN@0
_AbortAllScripts@0
_AbortScript@0
_AbortToLiveCmd@0
_AddCmbStr@8
_AddFileCmd@0
_AddLstStr@8
_AllocMem@4
_Angle2@8
_Angle4@32
_Angle@0
_AskLayerFrozen@4
_AskLayerHidden@4
_AskNUTran@4
_AskProtected@8
_AskPtInRect@12
_AskScript@0
_AutoSave@8
_BLText2@8
_BoxText2@12
_C2EAngleS@0
_CALOA3@0
_CALOA3P@0
_CTMI2@0
_CTMI3@0
_CTMMUL2@4
_CTMMUL3@4
_CTMPOP@0
_CTMPSH@0
_CTMR2@8
_CTMRXY@8
_CTMRXYS@0
_CTMRYZ@8
_CTMRYZS@0
_CTMRZX@8
_CTMRZXS@0
_CTMS2@16
_CTMS3@24
_CTMS3S@0
_CTMSpec3@0
_CTMT2@16
_CTMT2S@0
_CTMT3@24
_CTMT3S@0
_CalcExtents@0
_CalcGPlane3@16
_CalcNormV@8
_ClearSelect@0
_CloneMem@4
_ClrCmbStr@4
_ClrLstStr@4
_CmdEnd@0
_Copy2dP@8
_Copy3dP@8
_CopyCStuff@8
_CopyColor@8
_CopyCurDStyle@4
_CopyCurTStyle@4
_CreateDList@8
_CreateHSBar@20
_CreateReadBfr@8
_CreateSAList@12
_CreateSBar@20
_CreateStList@8
_CreateToolTip@16
_CreateVSBar@20
_CreateWriteBfr@8
_CreateXWCtrl@12
_CsrArrow@4
_CsrRXH2f@4
_CvtP2V@12
_CvtP2VX@12
_DANorm@8
_DEG@0
_DIndexAdd@8
_DIndexApnd@8
_DIndexInit@4
_DIndexRel@4
_DListFindDL@4
_DNSame@16
_DSIBScale@8
_DWRendEnd@4
_DWRendStart@4
_DWRendVector@20
_DWScanLine@12
_DWinBackDV@8
_DWinClipGWin2@12
_DWinFwdDV@8
_DefDlg@24
_DestroyReadBfr@4
_DestroyWriteBfr@4
_Dialog@12
_DiscardReq@0
_Dist2P3@12
_Dist2P3S@0
_Dist2P@0
_DistP2L@8
_DotP3@12
_DrawAH@8
_DrawDDBitmap@12
_DrawDWinBitmap@16
_DrawDWinDIBI@16
_DsAbCtl@4
_DupRect@8
_E2CAngleS@0
_EAct@8
_EBreak@8
_EDraw@8
_EDrawM@8
_EDynEdit@4
_EEdge3@8
_EEdit@4
_EErase@8
_EExplode@8
_EExtrude@12
_EGet@16
_EInfo@8
_EList@4
_EMake3d@4
_EMark@8
_ENList3@20
_EOffset@12
_EPick@4
_EPlace@8
_ERender@8
_ESplit@20
_EStdPlace@8
_EStretch@4
_ETran@8
_ETrim@20
_EXCheck@8
_EdSymDefSvc@4
_EnAbCtl@4
_EndHelpContext@0
_EndSymTM@0
_EnumSTools@4
_ExecProgram@4
_ExecScriptCopy@4
_ExecScriptFile@4
_ExecScriptMem@8
_ExpElA2@8
_ExpElp2@8
_ExpScan@4
_ExpScanA@4
_FClose@4
_FCreate@4
_FDNSame2@8
_FDNSame3@8
_FDNSame@8
_FDNZero@4
_FDelete@4
_FExist@4
_FOpen@4
_FOpenRO@4
_FRead@12
_FSeek@8
_FSize@4
_FStyleAppend@12
_FWrite@12
_FileTypeAdr@4
_FindAllInts@12
_FindAllIntsN@12
_FindFStyleID@4
_FindFStyleName@4
_FindFontID@4
_FindFontName@4
_FindLStyleID@4
_FindLStyleName@4
_FindLayerID@4
_FindLayerName@4
_FindNearInt@16
_FindNearIntN@16
_FindSDef@4
_FindStgListEnd@4
_FindStgListItem@8
_FlipDV@4
_FlushBfr@4
_FndCmbStr@8
_FndLstStr@8
_FocusCtl@4
_ForceCsrSnap@4
_FormSt@16
_FullFileName@8
_FullFilePath@8
_GDrawUseFill@4
_GDrawUsePen@4
_GGetL2@16
_GXCheckP2@8
_GXCheckP2S@4
_GXCheckP3@8
_GXCheckP3S@4
_GetADWin@0
_GetActiveDWin@0
_GetAtchStatus@0
_GetBkgndColor@4
_GetCmbData@8
_GetCmbStr@8
_GetCurColor@0
_GetCurFStyle@0
_GetCurFont@0
_GetCurGridObj@0
_GetCurLStyle@0
_GetCurLayer@0
_GetDDBitmap@8
_GetDIBImage@4
_GetDLMaster@0
_GetDlgDig@8
_GetDlgWin@0
_GetDrawMode@0
_GetFCWVersion@4
_GetGDraw2@0
_GetGDraw3@0
_GetLstData@8
_GetLstMSel@12
_GetLstStr@8
_GetLstStrN@12
_GetMWObj@0
_GetMainWin@0
_GetMasterDWin@0
_GetOpenFN@8
_GetOurPath@0
_GetPFree@4
_GetPWinO@4
_GetPrintData@20
_GetSaveFN@8
_GetWorkDL@0
_GetXPSvc@4
_HelpRequest@0
_HideCtl@4
_HowManyVisEnts@4
_IBlocksInvalid@4
_IL3PlnS@0
_IL3XYPS@0
_IScan@4
_IndexAdd@12
_IndexFind@8
_IndexRmv@8
_InitDialogHelp@8
_InsSymDCmd@0
_InsSymInst@4
_InsSymInstEx@8
_InsertBytes@16
_InsetRect@16
_IntGPlane3@12
_IntL2@12
_IntPln3S@0
_InvertColorTbl@4
_LDCTM@4
_LDSymTM@4
_LOG@0
_LSIBScale@8
_LSUAsk0@8
_LScan@8
_LenText2@8
_LoadFile@12
_LoadFileAt@12
_LoadInit@4
_LoadMenuFile@4
_LoadSetup@4
_LoadSymDef@4
_LookupColor@4
_MATINV2@8
_MATMUL3@12
_MATTRN2@8
_MLineSplit@12
_MacroCmdChk@4
_MatchColor@8
_MatchColorTbl@12
_MaterialScale@4
_NPONL3@12
_NPOnL2@12
_NPOnL3@12
_NearestP2@16
_NewDrawing@4
_NormCrossP@12
_NormCrossPPts@16
_NormalizeV@4
_OpenCmd@0
_P2TL2@12
_PConv2@0
_PConv2X@36
_PREMUL2@4
_PREMUL3@4
_PREOA3@0
Sections
.text Size: 647KB - Virtual size: 646KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 645KB - Virtual size: 644KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ