Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-15_c3e8aee40c57fb157938a79e339c0d0b_magniber.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-05-15_c3e8aee40c57fb157938a79e339c0d0b_magniber.exe
Resource
win10v2004-20240426-en
Target
2024-05-15_c3e8aee40c57fb157938a79e339c0d0b_magniber
Size
27.4MB
MD5
c3e8aee40c57fb157938a79e339c0d0b
SHA1
8b45901c5ccebcb2f68ef3059fb1e6000df7f7cd
SHA256
28f14f394ae436632c867686b4d0cdaebade9bccdc2dffcb8d7c34f7ec403c5a
SHA512
1f3fabd7217c12acec766f3bf9ffe47f8e31cf30971d2fb2877c35980a42cf481ef48d03eb79d75e664634283ce5e328156650dce2d0a2cb3493790f97a84a6e
SSDEEP
786432:2wjsGfQ8E0i2a3Y/rWCm2XQ/XiT4xaRN230D50A5V:2wjxfQ8E0i24Y6C0/XiT4IR830D50YV
resource | yara_rule |
---|---|
sample | INDICATOR_EXE_Packed_VMProtect |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
C:\BuildAgent\work\28c9b33a6b85af1d\build.msvc\Win32\Client-Release\WindowsClient\RobloxPlayerBeta.pdb
IsNetworkAlive
UrlMkSetSessionOption
?getUserData@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?set3DListenerAttributes@System@FMOD@@QAG?AW4FMOD_RESULT@@HPBUFMOD_VECTOR@@000@Z
?setBypass@DSP@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setParameterFloat@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HM@Z
?getParameterFloat@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAMPADH@Z
FMOD_Memory_Initialize
FMOD_Memory_GetStats
FMOD_System_Create
?release@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?setOutput@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_OUTPUTTYPE@@@Z
?getNumDrivers@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getDriverInfo@System@FMOD@@QAG?AW4FMOD_RESULT@@HPADHPAUFMOD_GUID@@PAHPAW4FMOD_SPEAKERMODE@@2@Z
?setDriver@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?getDriver@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?setSoftwareFormat@System@FMOD@@QAG?AW4FMOD_RESULT@@HW4FMOD_SPEAKERMODE@@H@Z
?getSoftwareFormat@System@FMOD@@QAG?AW4FMOD_RESULT@@PAHPAW4FMOD_SPEAKERMODE@@0@Z
?init@System@FMOD@@QAG?AW4FMOD_RESULT@@HIPAX@Z
?update@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?set3DSettings@System@FMOD@@QAG?AW4FMOD_RESULT@@MMM@Z
?setUserData@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?unlock@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAX0II@Z
?lock@Sound@FMOD@@QAG?AW4FMOD_RESULT@@IIPAPAX0PAI1@Z
?isRecording@System@FMOD@@QAG?AW4FMOD_RESULT@@HPA_N@Z
?recordStart@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAVSound@2@_N@Z
?getRecordPosition@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAI@Z
?getRecordDriverInfo@System@FMOD@@QAG?AW4FMOD_RESULT@@HPADHPAUFMOD_GUID@@PAHPAW4FMOD_SPEAKERMODE@@2PAI@Z
?getRecordNumDrivers@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH0@Z
?getMeteringInfo@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_DSP_METERING_INFO@@0@Z
?getMeteringEnabled@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PA_N0@Z
?setMeteringEnabled@DSP@FMOD@@QAG?AW4FMOD_RESULT@@_N0@Z
?setParameterData@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAXI@Z
?disconnectFrom@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAV12@PAVDSPConnection@2@@Z
?addInput@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAV12@PAPAVDSPConnection@2@W4FMOD_DSPCONNECTION_TYPE@@@Z
?release@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?getCurrentSound@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSound@2@@Z
?setLoopCount@Channel@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setChannelGroup@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAVChannelGroup@2@@Z
?getPosition@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAII@Z
?setPosition@Channel@FMOD@@QAG?AW4FMOD_RESULT@@II@Z
?setFrequency@Channel@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?set3DMinMaxDistance@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@MM@Z
?set3DAttributes@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@00@Z
?getNumDSPs@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?removeDSP@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAVDSP@2@@Z
?getDSP@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAVDSP@2@@Z
?getMode@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?setMode@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@I@Z
?getPaused@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?setPaused@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?stop@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?getOpenState@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAW4FMOD_OPENSTATE@@PAIPA_N2@Z
?getLength@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAII@Z
?getDefaults@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAMPAH@Z
?release@Sound@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?playSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PAVSound@2@PAVChannelGroup@2@_NPAPAVChannel@2@@Z
?createSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
FMOD_Sound_GetUserData
FMOD_Sound_Release
?setChannelFormat@DSP@FMOD@@QAG?AW4FMOD_RESULT@@IHW4FMOD_SPEAKERMODE@@@Z
?addGroup@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAV12@_NPAPAVDSPConnection@2@@Z
?addDSP@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@HPAVDSP@2@@Z
?getMute@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?setMute@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?getVolume@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?setVolume@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?getSystemObject@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSystem@2@@Z
?setReverbProperties@System@FMOD@@QAG?AW4FMOD_RESULT@@HPBUFMOD_REVERB_PROPERTIES@@@Z
?getMasterChannelGroup@System@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVChannelGroup@2@@Z
?createChannelGroup@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVChannelGroup@2@@Z
?createDSPByType@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_DSP_TYPE@@PAPAVDSP@2@@Z
?createDSP@System@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_DSP_DESCRIPTION@@PAPAVDSP@2@@Z
?getCPUUsage@System@FMOD@@QAG?AW4FMOD_RESULT@@PAM0000@Z
?getChannelsPlaying@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH0@Z
?getVersion@System@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?release@DSP@FMOD@@QAG?AW4FMOD_RESULT@@XZ
GetUserGeoID
GetSystemTimeAsFileTime
GetTickCount
LocalAlloc
LocalFree
FileTimeToSystemTime
lstrcpynW
lstrcpyW
InterlockedExchange
VirtualAlloc
VirtualFree
GetCurrentProcess
CreateThread
GetCurrentThread
SetThreadPriority
GetThreadPriority
SetErrorMode
InitializeCriticalSection
ReleaseSemaphore
DuplicateHandle
GetSystemInfo
lstrcmpiA
lstrlenW
CreateSemaphoreA
GetACP
GetLocalTime
SizeofResource
FindResourceW
FindResourceExW
DeleteFileA
MoveFileA
WriteProcessMemory
WriteFile
CompareFileTime
CreateFileA
FindFirstFileA
FindNextFileA
ExitProcess
IsDebuggerPresent
LoadLibraryExA
IsDBCSLeadByte
DecodePointer
GetShortPathNameW
IsWow64Process
ReplaceFileW
GetModuleHandleExA
SearchPathW
OpenEventW
CreateFileMappingW
WriteProfileStringW
VerSetConditionMask
TryEnterCriticalSection
GetFileSizeEx
GetStdHandle
ReadFile
SetFilePointer
SetFilePointerEx
FormatMessageW
TlsAlloc
TlsGetValue
TlsSetValue
CreateSemaphoreW
LoadLibraryW
GetModuleHandleW
GetEnvironmentVariableA
SetEnvironmentVariableA
OutputDebugStringW
CreateFileW
QueryPerformanceCounter
QueryPerformanceFrequency
AttachConsole
WriteConsoleW
VirtualQuery
GetThreadContext
SetThreadContext
ResumeThread
GetTempPathA
FindFirstChangeNotificationA
GlobalMemoryStatusEx
GetVersion
FormatMessageA
SleepEx
GlobalUnlock
VerifyVersionInfoA
TlsFree
CreateWaitableTimerA
SetWaitableTimer
GetLogicalProcessorInformation
DeviceIoControl
SetEndOfFile
FindClose
GetFileTime
SetFileTime
GetCurrentDirectoryW
GetDiskFreeSpaceExW
CreateDirectoryW
GlobalHandle
GlobalLock
FindNextFileW
GetProcAddress
FreeLibrary
LockResource
InterlockedDecrement
GetGeoInfoA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExA
SetStdHandle
FlushFileBuffers
WaitForMultipleObjectsEx
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetConsoleCP
ReadConsoleW
GetConsoleMode
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetDriveTypeW
GetModuleHandleExW
ExitThread
SetConsoleCtrlHandler
RtlUnwind
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
GetVersionExW
LoadLibraryExW
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
FindFirstFileW
DeleteFileW
SetCurrentDirectoryW
GetTempPathW
GetProfileStringA
FindResourceA
OutputDebugStringA
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
LoadLibraryA
CreateFileMappingA
CreateMutexA
lstrcmpA
UnmapViewOfFile
MapViewOfFile
SystemTimeToFileTime
GetSystemTime
MulDiv
LoadResource
Sleep
WaitForMultipleObjects
WaitForSingleObject
ReleaseMutex
SetLastError
GetCurrentThreadId
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
ResetEvent
SetEvent
GetCurrentProcessId
WaitForSingleObjectEx
CloseHandle
OpenEventA
CreateEventA
LeaveCriticalSection
EnterCriticalSection
RemoveDirectoryW
GetFullPathNameW
SetThreadAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
TerminateProcess
GetStartupInfoW
UnhandledExceptionFilter
GetStringTypeW
LCMapStringW
CompareStringW
GetCPInfo
CreateEventW
GetNativeSystemInfo
GetFileAttributesW
CopyFileW
MoveFileExW
WideCharToMultiByte
MultiByteToWideChar
InterlockedIncrement
GetVersionExA
SetUnhandledExceptionFilter
CreateProcessA
FreeConsole
GetProcessAffinityMask
InterlockedExchangeAdd
InterlockedCompareExchange
EncodePointer
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
VirtualProtect
GlobalAlloc
GlobalFree
GetLocaleInfoW
ExpandEnvironmentStringsA
EnumSystemLocalesW
VirtualQuery
GetSystemTimeAsFileTime
GetModuleHandleA
CreateEventA
GetModuleFileNameW
LoadLibraryA
FreeLibrary
TerminateProcess
GetCurrentProcess
GetSystemInfo
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
GetTickCount
GlobalFree
GetProcAddress
LocalAlloc
LocalFree
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
LoadResource
MultiByteToWideChar
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetCommandLineA
RaiseException
RtlUnwind
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapReAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
DestroyWindow
ShowWindowAsync
MoveWindow
SetWindowPos
CreateDialogIndirectParamA
GetDlgItem
CharNextA
SetFocus
GetFocus
SetCapture
ReleaseCapture
CreateAcceleratorTableA
DestroyAcceleratorTable
GetDC
ReleaseDC
BeginPaint
EndPaint
InvalidateRect
InvalidateRgn
RedrawWindow
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
GetClientRect
MessageBoxA
ClientToScreen
ScreenToClient
GetSysColor
FillRect
GetWindowLongA
SetWindowLongA
GetDesktopWindow
GetParent
GetClassNameA
GetWindow
DefWindowProcW
LoadCursorA
LoadStringA
MonitorFromWindow
GetMonitorInfoA
IsChild
ShowWindow
GetWindowPlacement
EnumDisplayDevicesA
GetWindowInfo
EnumWindows
UnregisterDeviceNotification
RegisterDeviceNotificationW
LoadCursorW
GetClassInfoExW
PostMessageW
SendMessageW
PeekMessageW
UnregisterClassW
GetSystemMetrics
GetWindowRect
MapWindowPoints
SetRectEmpty
GetWindowThreadProcessId
LoadStringW
LoadKeyboardLayoutA
OpenClipboard
CloseClipboard
GetClipboardData
MapVirtualKeyA
MapVirtualKeyExA
SetCursor
GetCursorPos
ClipCursor
SetRect
GetRawInputData
RegisterRawInputDevices
GetMessageW
TranslateMessage
DispatchMessageW
PostQuitMessage
RegisterClassExW
CreateWindowExW
SetTimer
UpdateWindow
LoadIconW
EndDialog
SetWindowContextHelpId
LoadIconA
MapDialogRect
FindWindowA
RegisterClassExA
DefWindowProcA
PostMessageA
SendMessageA
RegisterWindowMessageA
UnregisterClassA
GetClassInfoExA
CreateWindowExA
IsWindow
GetAsyncKeyState
EnumDisplaySettingsExA
ChangeDisplaySettingsExA
SetWindowPlacement
CallWindowProcA
GetUserObjectInformationW
CharUpperBuffW
MessageBoxW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
SwapBuffers
ChoosePixelFormat
GetDIBits
GetObjectA
SelectObject
GetStockObject
GetDeviceCaps
DeleteObject
DeleteDC
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SetPixelFormat
RegDeleteKeyA
CryptImportKey
CryptGenRandom
CryptDestroyKey
CryptDestroyHash
RegQueryInfoKeyW
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
CryptVerifySignatureA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
ShellExecuteA
ShellExecuteW
SHGetFolderPathAndSubDirW
SHGetFolderPathW
CoCreateGuid
CoUninitialize
CoInitializeEx
CoGetClassObject
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
OleInitialize
OleUninitialize
OleLockRunning
CreateStreamOnHGlobal
CoInitialize
CoFreeUnusedLibraries
CoTaskMemRealloc
StringFromGUID2
GetErrorInfo
SysFreeString
SysAllocString
SysAllocStringLen
VarUI4FromStr
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VariantClear
VariantInit
SysStringLen
PathRemoveFileSpecA
StrCmpW
PathAppendA
PathFileExistsA
PathStripPathA
PathAddBackslashA
MiniDumpWriteDump
VerQueryValueA
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
CryptQueryObject
CryptDecodeObject
CryptMsgClose
CryptMsgGetParam
CertCloseStore
CertFindCertificateInStore
CertGetNameStringA
CertFreeCertificateContext
WinVerifyTrust
IcmpCreateFile
GetAdaptersAddresses
IcmpSendEcho
InternetSetCookieA
GetModuleInformation
GetProcessMemoryInfo
timeGetDevCaps
timeGetTime
timeEndPeriod
timeSetEvent
timeBeginPeriod
CallNtPowerInformation
recvfrom
getnameinfo
__WSAFDIsSet
gethostbyname
WSAStartup
WSACleanup
closesocket
connect
htons
send
sendto
socket
WSAGetLastError
getaddrinfo
freeaddrinfo
htonl
bind
ioctlsocket
getpeername
getsockname
getsockopt
ntohs
recv
select
setsockopt
gethostname
WSASetLastError
WSAIoctl
inet_addr
inet_ntoa
glTexParameteri
glTexParameterf
glReadPixels
wglGetProcAddress
wglCreateContext
wglDeleteContext
glTexImage2D
glPixelStorei
glGetTexImage
glGenTextures
glDeleteTextures
glDrawElements
wglGetCurrentContext
wglMakeCurrent
glTexSubImage2D
glClearStencil
glGetIntegerv
glGetString
glBindTexture
glBlendFunc
glClear
glClearColor
glClearDepth
glDrawArrays
glColorMask
glCopyTexSubImage2D
glCullFace
glDepthFunc
glDepthMask
glDisable
glEnable
glPolygonOffset
glReadBuffer
glStencilFunc
glStencilMask
glStencilOp
glViewport
wglGetCurrentDC
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
WTSSendMessageW
?g_postStaticInitFn@@3P6AHXZA
?g_preStaticInitFn@@3P6AHXZA
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ