D:\16.全国医保局\libSSSE_GS\SSSE\SSSEDemo\bin\Release\SSCardDriver.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9ac33aad8a41f262a13961a1080680808df7a1214920835fd74c7f3072bf0ee9.dll
Resource
win7-20240215-en
General
-
Target
9ac33aad8a41f262a13961a1080680808df7a1214920835fd74c7f3072bf0ee9
-
Size
2.9MB
-
MD5
d633014b2b4cd5e701d5caf96343a2b1
-
SHA1
df894665562f37286a77bdc6b8356b07b34fe66f
-
SHA256
9ac33aad8a41f262a13961a1080680808df7a1214920835fd74c7f3072bf0ee9
-
SHA512
380e26acfcbe6f37055cb72776b48b0302a02d0543285ec1d097b7b54c6260cb951323f8f72acf6d0df35c3c76d0418cda51e3b316696d46c240551b6e4ffb76
-
SSDEEP
49152:lVEJhX7C5M/B6DfRhS+TgBISSKMSOluoubEUmAcY1dyayqDWaKuxar9RV2hUZ4Qq:lVEJhXV23S+T+IyMSOluoubEUmAJ1+aR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ac33aad8a41f262a13961a1080680808df7a1214920835fd74c7f3072bf0ee9
Files
-
9ac33aad8a41f262a13961a1080680808df7a1214920835fd74c7f3072bf0ee9.dll windows:5 windows x86 arch:x86
ebb268cc09d4c4ac3597f1d7c69183e5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
SetupComm
ReleaseMutex
CancelIo
GetOverlappedResult
CreateMutexW
DeleteFileA
HeapAlloc
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetCommState
CreateFileA
RtlUnwind
RaiseException
HeapReAlloc
ExitThread
CreateThread
HeapSize
HeapQueryInformation
ExitProcess
VirtualAlloc
GetSystemInfo
SetCommState
SetCommTimeouts
InterlockedCompareExchange
PurgeComm
GetStringTypeW
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
HeapFree
CopyFileA
GetCommandLineA
VirtualQuery
SetStdHandle
GetFileType
GetCPInfo
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
GetStdHandle
HeapCreate
HeapDestroy
SetHandleCount
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathW
Sleep
GetProfileIntW
GetTickCount
InitializeCriticalSectionAndSpinCount
GetTempPathW
GetTempFileNameW
GetNumberFormatW
GetWindowsDirectoryW
lstrcpyW
GetCurrentDirectoryW
GetFileTime
GetFileSizeEx
GetFileAttributesW
FileTimeToLocalFileTime
GetFileAttributesExW
GetUserDefaultUILanguage
GetLocaleInfoW
InterlockedExchange
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
lstrcmpiW
GlobalFlags
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
LoadLibraryW
lstrcmpW
FileTimeToSystemTime
lstrlenA
lstrcmpA
GlobalGetAtomNameW
CompareStringW
InterlockedIncrement
GetProcAddress
CreateEventW
InitializeCriticalSection
WaitForSingleObject
GetCurrentThreadId
ResumeThread
SetThreadPriority
CloseHandle
MultiByteToWideChar
CopyFileW
GlobalSize
MulDiv
lstrlenW
WideCharToMultiByte
GetCurrentProcessId
FreeLibrary
FindResourceW
LoadResource
LockResource
SizeofResource
InterlockedDecrement
ActivateActCtx
ReleaseActCtx
DeactivateActCtx
TlsFree
GlobalFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalAlloc
GlobalHandle
GlobalUnlock
GlobalReAlloc
GlobalLock
TlsGetValue
LocalFree
LocalAlloc
GetLastError
SetLastError
GetModuleFileNameW
GetModuleHandleW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetTempPathA
user32
NotifyWinEvent
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
ReleaseCapture
GetAsyncKeyState
SetCapture
MapVirtualKeyW
IsRectEmpty
CreatePopupMenu
GetMenuDefaultItem
RedrawWindow
SetLayeredWindowAttributes
EnumDisplayMonitors
KillTimer
SetTimer
DeleteMenu
ShowOwnedPopups
SetCursor
IntersectRect
InvalidateRect
SetRectEmpty
IsIconic
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
CharUpperW
DestroyIcon
GetDesktopWindow
RealChildWindowFromPoint
ClientToScreen
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
IsWindowEnabled
GetLastActivePopup
GetWindowLongW
GetParent
SendMessageW
CheckDlgButton
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
DrawIconEx
EndDialog
CreateDialogIndirectParamW
TranslateAcceleratorW
BringWindowToTop
InsertMenuItemW
LoadAcceleratorsW
LoadMenuW
ReuseDDElParam
UnpackDDElParam
SetRect
WindowFromPoint
IsZoomed
GetWindowThreadProcessId
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuW
GetMenuItemID
AppendMenuW
GetMenuStringW
GetMenuState
ValidateRect
GetCursorPos
PeekMessageW
GetKeyState
IsWindowVisible
GetActiveWindow
DispatchMessageW
TranslateMessage
GetMessageW
CallNextHookEx
SetWindowsHookExW
GetSysColorBrush
GetSysColor
ReleaseDC
MessageBeep
GetSystemMetrics
LoadCursorW
GetWindowTextW
GetWindowTextLengthW
CheckMenuItem
EnableMenuItem
ModifyMenuW
GetFocus
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetWindow
SetWindowPos
SetWindowLongW
GetMenu
CallWindowProcW
DefWindowProcW
GetDlgCtrlID
GetWindowPlacement
SetWindowPlacement
PtInRect
CopyRect
SetScrollInfo
GetScrollInfo
DeferWindowPos
EqualRect
ScreenToClient
GetWindowRect
EnableWindow
AdjustWindowRectEx
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
PostMessageW
GetClientRect
UpdateWindow
ShowScrollBar
SetForegroundWindow
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
SetMenu
TrackPopupMenu
ScrollWindow
MapWindowPoints
MessageBoxW
UnhookWindowsHookEx
GetMonitorInfoW
MonitorFromWindow
GetMessagePos
SetWindowRgn
SetParent
DestroyAcceleratorTable
SetClassLongW
GetSystemMenu
DrawStateW
DrawEdge
DrawFrameControl
CopyAcceleratorTableW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
SetCursorPos
LockWindowUpdate
GetKeyNameTextW
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
IsCharLowerW
MapVirtualKeyExW
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
PostThreadMessageW
WaitMessage
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
CreateMenu
SetMenuDefaultItem
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
RegisterClipboardFormatW
CopyIcon
IsWindow
SetFocus
GetForegroundWindow
CharUpperBuffW
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDoubleClickTime
GetDlgItem
GetTopWindow
SubtractRect
DestroyWindow
GetNextDlgTabItem
OffsetRect
GetIconInfo
CopyImage
LoadImageW
GetDC
GetNextDlgGroupItem
MapDialogRect
DrawIcon
DestroyCursor
GetMessageTime
GetWindowRgn
gdi32
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
CreateCompatibleBitmap
CreateRectRgnIndirect
SetRectRgn
CombineRgn
PatBlt
DPtoLP
CreateDIBitmap
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
GetBkColor
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
OffsetRgn
GetRgnBox
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceW
ExcludeClipRect
IntersectClipRect
GetClipBox
SetMapMode
SetROP2
GetDeviceCaps
CopyMetaFileW
CreateDCW
CreateBitmap
SetTextColor
SetBkColor
GetObjectW
DeleteObject
CreateFontIndirectW
CreateCompatibleDC
BitBlt
ExtTextOutW
GetTextExtentPoint32W
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
comdlg32
GetFileTitleW
advapi32
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegEnumKeyExW
shell32
SHAppBarMessage
SHBrowseForFolderW
DragQueryFileW
DragFinish
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetDesktopFolder
SHGetFileInfoW
ole32
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
DoDragDrop
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
StgCreateDocfile
CreateStreamOnHGlobal
CoInitializeEx
CoInitialize
CoUninitialize
CoCreateInstance
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
oleaut32
SysAllocString
VariantInit
VarBstrFromDate
SysAllocStringLen
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantChangeType
VariantClear
SysFreeString
hid
HidD_FlushQueue
HidD_GetSerialNumberString
HidD_SetFeature
HidD_GetManufacturerString
HidD_GetAttributes
HidD_GetHidGuid
HidD_GetIndexedString
HidD_GetFeature
setupapi
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
shlwapi
PathFindExtensionW
PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathRemoveFileSpecW
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
gdiplus
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCloneImage
GdipDrawImageI
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipLoadImageFromStream
GdipSaveImageToFile
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipGetImageGraphicsContext
GdipCreateBitmapFromHBITMAP
msimg32
TransparentBlt
AlphaBlend
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundW
comctl32
ImageList_GetIconSize
Exports
Exports
?Java_com_mwcard_Reader_mwCloseCard@@YGJPAUJNIEnv_@@PAV_jobject@@_J@Z
GetAddress
GetAgency
GetBirthDate
GetCode
GetFolk
GetJPGPhotoBuf
GetName
GetPhotobuf
GetSAMID
GetSex
GetValid
ReadCard
_Java_com_mwcard_Reader_SIReaderBankCard@16
_Java_com_mwcard_Reader_getErrDescription@16
_Java_com_mwcard_Reader_mwAnticoll@16
_Java_com_mwcard_Reader_mwChangePassword102@24
_Java_com_mwcard_Reader_mwChangePassword1604@28
_Java_com_mwcard_Reader_mwChangePassword4428@20
_Java_com_mwcard_Reader_mwChangePassword4442@20
_Java_com_mwcard_Reader_mwCheckCard@16
_Java_com_mwcard_Reader_mwCheckPwd153@28
_Java_com_mwcard_Reader_mwCheckPwd1608@28
_Java_com_mwcard_Reader_mwDevBeep@28
_Java_com_mwcard_Reader_mwDevClose@16
_Java_com_mwcard_Reader_mwDevConfigBLE@24
_Java_com_mwcard_Reader_mwDevGetHardwareVer@16
_Java_com_mwcard_Reader_mwDevGetRemark@16
_Java_com_mwcard_Reader_mwDevGetSerialNumber@16
_Java_com_mwcard_Reader_mwDevLed@32
_Java_com_mwcard_Reader_mwDevOpen@16
_Java_com_mwcard_Reader_mwDevRFControl@20
_Java_com_mwcard_Reader_mwDevReadConfig@32
_Java_com_mwcard_Reader_mwDevSetBaud@20
_Java_com_mwcard_Reader_mwDevSetTransferMode@20
_Java_com_mwcard_Reader_mwDevWriteConfig@28
_Java_com_mwcard_Reader_mwErase102@24
_Java_com_mwcard_Reader_mwErase1604@24
_Java_com_mwcard_Reader_mwFelicaCardCommandHEX@24
_Java_com_mwcard_Reader_mwGetCardStatus@20
_Java_com_mwcard_Reader_mwGetErrorCounter4428@16
_Java_com_mwcard_Reader_mwGetErrorCounter4442@16
_Java_com_mwcard_Reader_mwHalt@16
_Java_com_mwcard_Reader_mwInitReadControl102@20
_Java_com_mwcard_Reader_mwInitReadControl1604@20
_Java_com_mwcard_Reader_mwInitWriteControl102@20
_Java_com_mwcard_Reader_mwInitWriteControl1604@20
_Java_com_mwcard_Reader_mwKeyPadActiveKey@24
_Java_com_mwcard_Reader_mwKeyPadDownLoadMasterKey@24
_Java_com_mwcard_Reader_mwKeyPadDownLoadWorkkey@24
_Java_com_mwcard_Reader_mwLcdClear@20
_Java_com_mwcard_Reader_mwLcdCtlBackLight@20
_Java_com_mwcard_Reader_mwLcdDispFixedInfo@28
_Java_com_mwcard_Reader_mwLcdDispInfo@28
_Java_com_mwcard_Reader_mwMifareAuth@28
_Java_com_mwcard_Reader_mwMifareBlockAbs@12
_Java_com_mwcard_Reader_mwMifareDecrement@28
_Java_com_mwcard_Reader_mwMifareIncrement@28
_Java_com_mwcard_Reader_mwMifareInitVal@28
_Java_com_mwcard_Reader_mwMifareRead@20
_Java_com_mwcard_Reader_mwMifareReadVal@20
_Java_com_mwcard_Reader_mwMifareRestore@20
_Java_com_mwcard_Reader_mwMifareTransfer@20
_Java_com_mwcard_Reader_mwMifareWrite@24
_Java_com_mwcard_Reader_mwModifyPwd153@28
_Java_com_mwcard_Reader_mwModifyPwd1608@28
_Java_com_mwcard_Reader_mwOpenCard@20
_Java_com_mwcard_Reader_mwPRead4442@24
_Java_com_mwcard_Reader_mwPReadData4428@24
_Java_com_mwcard_Reader_mwPWrite4428@24
_Java_com_mwcard_Reader_mwPWrite4442@24
_Java_com_mwcard_Reader_mwPWriteData4428@24
_Java_com_mwcard_Reader_mwPassCancel@16
_Java_com_mwcard_Reader_mwPassGet@16
_Java_com_mwcard_Reader_mwPassGetInputExt__JIII@28
_Java_com_mwcard_Reader_mwPassGetInputExt__JIIILjava_lang_String_2@32
_Java_com_mwcard_Reader_mwPassIn@28
_Java_com_mwcard_Reader_mwPersonalization102@16
_Java_com_mwcard_Reader_mwPersonalization1604@16
_Java_com_mwcard_Reader_mwRats@16
_Java_com_mwcard_Reader_mwRead102@24
_Java_com_mwcard_Reader_mwRead153@28
_Java_com_mwcard_Reader_mwRead1604@24
_Java_com_mwcard_Reader_mwRead4428@24
_Java_com_mwcard_Reader_mwRead4442@24
_Java_com_mwcard_Reader_mwReadAccess153@20
_Java_com_mwcard_Reader_mwReadAccess1608@20
_Java_com_mwcard_Reader_mwReadConfigZone1608@24
_Java_com_mwcard_Reader_mwReadCount1604@24
_Java_com_mwcard_Reader_mwReadEraseCount102@16
_Java_com_mwcard_Reader_mwReadErrorCount102@16
_Java_com_mwcard_Reader_mwReadFuse153@16
_Java_com_mwcard_Reader_mwReadFuse1608@16
_Java_com_mwcard_Reader_mwReadMagCard@20
_Java_com_mwcard_Reader_mwReadPAC153@24
_Java_com_mwcard_Reader_mwReadPAC1608@24
_Java_com_mwcard_Reader_mwReadPartition102@28
_Java_com_mwcard_Reader_mwReadPartition1604@28
_Java_com_mwcard_Reader_mwReadPassword102@20
_Java_com_mwcard_Reader_mwReadPassword1604@24
_Java_com_mwcard_Reader_mwReadPassword4428@16
_Java_com_mwcard_Reader_mwReadPassword4442@16
_Java_com_mwcard_Reader_mwReadUserZone1608@24
_Java_com_mwcard_Reader_mwRequest@20
_Java_com_mwcard_Reader_mwReset153@16
_Java_com_mwcard_Reader_mwReset1608@16
_Java_com_mwcard_Reader_mwSelect@20
_Java_com_mwcard_Reader_mwSelectZone1608@20
_Java_com_mwcard_Reader_mwSimulationPersonalization102@20
_Java_com_mwcard_Reader_mwSimulationPersonalization1604@20
_Java_com_mwcard_Reader_mwSmartCardCommandHEX@24
_Java_com_mwcard_Reader_mwSmartCardPowerDown@20
_Java_com_mwcard_Reader_mwSmartCardResetHex@24
_Java_com_mwcard_Reader_mwVerifyPassword102@24
_Java_com_mwcard_Reader_mwVerifyPassword1604@28
_Java_com_mwcard_Reader_mwVerifyPassword4428@20
_Java_com_mwcard_Reader_mwVerifyPassword4442@20
_Java_com_mwcard_Reader_mwVoiceControl@20
_Java_com_mwcard_Reader_mwWrite102@24
_Java_com_mwcard_Reader_mwWrite153@28
_Java_com_mwcard_Reader_mwWrite1604@24
_Java_com_mwcard_Reader_mwWrite4428@24
_Java_com_mwcard_Reader_mwWrite4442@24
_Java_com_mwcard_Reader_mwWriteAccess153@24
_Java_com_mwcard_Reader_mwWriteAccess1608@24
_Java_com_mwcard_Reader_mwWriteConfigZone1608@24
_Java_com_mwcard_Reader_mwWriteFuse153@20
_Java_com_mwcard_Reader_mwWriteFuse1608@16
_Java_com_mwcard_Reader_mwWritePartition102@28
_Java_com_mwcard_Reader_mwWritePartition1604@28
_Java_com_mwcard_Reader_mwWriteUserZone1608@24
iChangePIN
iDoDebit
iDoDebit_HSM_Step1
iDoDebit_HSM_Step2
iGetPassword
iGetQRBase
iGetTwoBarCodes
iReadCard
iReadCardBas
iReadCardBas_HSM_Step1
iReadCardBas_HSM_Step2
iReadCardUnclassifiedBas
iReadCard_HSM_Step1
iReadCard_HSM_Step2
iReadDebitRecord
iReadICCardGZ
iReadIDCardGZ
iReadMedicalCardGZ
iReadSFZ
iReloadPIN
iReloadPIN_HSM_Step1
iReloadPIN_HSM_Step2
iReloadPIN_HSM_Step3
iUnblockPIN
iUnblockPIN_HSM_Step1
iUnblockPIN_HSM_Step2
iUnblockPIN_HSM_Step3
iVerifyPIN
iWriteCard
iWriteCard_HSM_Step1
iWriteCard_HSM_Step2
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 932KB - Virtual size: 932KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 198KB - Virtual size: 198KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE