FreeLibrary16
GetProcAddress16
LoadLibrary16
Overview
overview
3Static
static
3GUI win32/...ch.exe
windows7-x64
1GUI win32/...ch.exe
windows10-2004-x64
1GUI win32/dev32.dll
windows7-x64
1GUI win32/dev32.dll
windows10-2004-x64
1GUI win32/dev9x.dll
windows7-x64
1GUI win32/dev9x.dll
windows10-2004-x64
1GUI win32/dmde.exe
windows7-x64
1GUI win32/dmde.exe
windows10-2004-x64
1GUI win32/dmde_en.chm
windows7-x64
1GUI win32/dmde_en.chm
windows10-2004-x64
1GUI win32/...pl.chm
windows7-x64
1GUI win32/...pl.chm
windows10-2004-x64
1GUI win32/...ru.chm
windows7-x64
1GUI win32/...ru.chm
windows10-2004-x64
1GUI win64/...ch.exe
windows7-x64
1GUI win64/...ch.exe
windows10-2004-x64
1GUI win64/dmde.exe
windows7-x64
1GUI win64/dmde.exe
windows10-2004-x64
1GUI win64/dmde_en.chm
windows7-x64
1GUI win64/dmde_en.chm
windows10-2004-x64
1GUI win64/...pl.chm
windows7-x64
1GUI win64/...pl.chm
windows10-2004-x64
1GUI win64/...ru.chm
windows7-x64
1GUI win64/...ru.chm
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
GUI win32/GUI-x86_Patch.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
GUI win32/GUI-x86_Patch.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
GUI win32/dev32.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
GUI win32/dev32.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
GUI win32/dev9x.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
GUI win32/dev9x.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
GUI win32/dmde.exe
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
GUI win32/dmde.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
GUI win32/dmde_en.chm
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
GUI win32/dmde_en.chm
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
GUI win32/locals/dmde_pl.chm
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
GUI win32/locals/dmde_pl.chm
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
GUI win32/locals/dmde_ru.chm
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
GUI win32/locals/dmde_ru.chm
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
GUI win64/GUI-x64_Patch.exe
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
GUI win64/GUI-x64_Patch.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
GUI win64/dmde.exe
Resource
win7-20240419-en
Behavioral task
behavioral18
Sample
GUI win64/dmde.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral19
Sample
GUI win64/dmde_en.chm
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
GUI win64/dmde_en.chm
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
GUI win64/locals/dmde_pl.chm
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
GUI win64/locals/dmde_pl.chm
Resource
win10v2004-20240426-en
Behavioral task
behavioral23
Sample
GUI win64/locals/dmde_ru.chm
Resource
win7-20240508-en
Behavioral task
behavioral24
Sample
GUI win64/locals/dmde_ru.chm
Resource
win10v2004-20240426-en
Target
4fc3139e0b455b20e7571982237f2472_JaffaCakes118
Size
1.7MB
MD5
4fc3139e0b455b20e7571982237f2472
SHA1
e278ea3cfd30a5fbf5080483eefce5fdbf77e264
SHA256
9f3594ac7daf71feb54038b218c15207570558d5fc5cbe5b39eae801135bd8ac
SHA512
24825d111ca3f2bf6ee92ff9338c8b251af8257c0a069977158b1d23029a7f377b33fb4df72052211806aec4a861e79750f4f9389edb75072d07a03a3831839a
SSDEEP
49152:M5hwLHN+9Ah9TTNvybNmzoA0BwyN2nch5kWaj:MsLDh/CmzHEh2nchyF
Checks for missing Authenticode signature.
resource |
---|
unpack001/GUI win32/GUI-x86_Patch.exe |
unpack001/GUI win32/dev32.dll |
unpack001/GUI win64/GUI-x64_Patch.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetKeyboardType
DestroyWindow
MessageBoxA
GetACP
Sleep
VirtualFree
VirtualAlloc
GetCurrentThreadId
VirtualQuery
GetStartupInfoA
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
ord37
ord36
ord35
FreeLibrary16
GetProcAddress16
LoadLibrary16
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
FreeSid
AllocateAndInitializeSid
GetKeyboardType
DestroyWindow
LoadStringA
MessageBoxA
CharNextA
CreateWindowExW
CreateWindowExA
WaitMessage
UpdateWindow
TranslateMessage
TranslateMDISysAccel
TranslateAcceleratorW
TranslateAcceleratorA
TrackPopupMenu
SystemParametersInfoA
ShowWindow
SetWindowTextW
SetWindowTextA
SetWindowPos
SetWindowLongA
SetTimer
SetScrollInfo
SetMenuItemInfoW
SetMenuItemInfoA
SetMenuDefaultItem
SetFocus
SetDlgItemTextW
SetDlgItemTextA
SetCursor
SetClipboardData
SetClassLongA
SetCapture
SetActiveWindow
SendNotifyMessageA
SendMessageW
SendMessageA
ScreenToClient
ReleaseDC
ReleaseCapture
RegisterClassExW
RegisterClassExA
RedrawWindow
PtInRect
PostThreadMessageA
PostQuitMessage
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
OemToCharBuffA
MsgWaitForMultipleObjects
MessageBoxA
MapDialogRect
LoadStringA
LoadMenuIndirectA
LoadImageA
LoadIconA
LoadCursorA
KillTimer
IsZoomed
IsWindowVisible
IsWindowEnabled
IsIconic
IsDialogMessageW
IsDialogMessageA
IsChild
InvertRect
InvalidateRgn
InvalidateRect
InsertMenuW
InsertMenuA
GetWindowThreadProcessId
GetWindowTextW
GetWindowTextA
GetWindowRect
GetWindowLongA
GetUpdateRect
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollInfo
GetParent
GetWindow
GetMessagePos
GetMessageW
GetMessageA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyState
GetFocus
GetDlgItem
GetDesktopWindow
GetDC
GetClientRect
GetClassInfoExW
GetClassInfoExA
GetCaretBlinkTime
GetCapture
GetActiveWindow
FillRect
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextA
DrawMenuBar
DrawFrameControl
DrawFocusRect
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DeferWindowPos
DefWindowProcW
DefWindowProcA
DefMDIChildProcW
DefMDIChildProcA
DefFrameProcW
DefFrameProcA
CreatePopupMenu
CreateDialogIndirectParamW
CreateDialogIndirectParamA
CreateAcceleratorTableA
CloseClipboard
ClipCursor
ClientToScreen
CheckMenuItem
BringWindowToTop
BeginPaint
BeginDeferWindowPos
CharNextA
CharToOemBuffA
CharToOemA
AdjustWindowRectEx
AdjustWindowRect
GetACP
Sleep
VirtualFree
VirtualAlloc
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
lstrcpynA
LoadLibraryExA
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitProcess
ExitThread
CreateThread
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjects
VirtualQuery
VirtualFree
VirtualAlloc
SuspendThread
SetFileTime
SetFilePointer
SetFileAttributesW
SetFileAttributesA
SetEvent
SetEndOfFile
ResetEvent
ReadFile
MultiByteToWideChar
MulDiv
LocalFileTimeToFileTime
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetVolumeInformationA
GetVersionExA
GetUserDefaultLCID
GetTickCount
GetThreadLocale
GetStdHandle
GetProcAddress
GetOverlappedResult
GetOEMCP
GetModuleHandleA
GetModuleFileNameA
GetLogicalDrives
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameA
GetFileTime
GetFileSize
GetFileAttributesW
GetFileAttributesA
GetExitCodeThread
GetExitCodeProcess
GetDriveTypeA
GetDiskFreeSpaceA
GetDateFormatA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentDirectoryA
GetCPInfo
GetACP
FreeLibrary
FormatMessageW
FormatMessageA
FindNextFileA
FindFirstFileA
FindClose
EnumCalendarInfoA
EnterCriticalSection
DosDateTimeToFileTime
DeviceIoControl
DeleteFileW
DeleteFileA
DeleteCriticalSection
CreateProcessA
CreateFileW
CreateFileA
CreateEventA
CreateDirectoryW
CreateDirectoryA
CompareStringW
CompareStringA
CloseHandle
UnrealizeObject
TextOutA
SetTextColor
SetBrushOrgEx
SetBkMode
SetBkColor
SelectObject
RoundRect
Polyline
Polygon
PatBlt
GetTextMetricsA
GetTextExtentPoint32W
GetTextExtentPoint32A
GetTextColor
GetStockObject
GetObjectA
GetDeviceCaps
GetBoundsRect
ExtTextOutA
EnumFontFamiliesExA
EnumFontFamiliesA
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreatePatternBrush
CreateICA
CreateFontIndirectA
CreateBitmapIndirect
CreateStatusWindowA
CreateMappedBitmap
ImageList_Remove
ImageList_AddMasked
ImageList_Draw
ImageList_SetOverlayImage
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Create
InitCommonControls
ShellExecuteA
CommDlgExtendedError
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
AllocateAndInitializeSid
FreeSid
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
CreateMappedBitmap
CreateStatusWindowA
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
ImageList_Draw
ImageList_Remove
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetOverlayImage
InitCommonControls
CommDlgExtendedError
GetOpenFileNameA
GetOpenFileNameW
GetSaveFileNameA
GetSaveFileNameW
CreateBitmapIndirect
CreateFontIndirectA
CreateICA
CreatePatternBrush
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
EnumFontFamiliesA
EnumFontFamiliesExA
ExtTextOutA
GetBoundsRect
GetDeviceCaps
GetObjectA
GetStockObject
GetTextColor
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextMetricsA
PatBlt
Polygon
Polyline
RoundRect
SelectObject
SetBkColor
SetBkMode
SetBrushOrgEx
SetTextColor
TextOutA
UnrealizeObject
AddVectoredExceptionHandler
CloseHandle
CompareStringA
CompareStringW
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreateProcessA
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeviceIoControl
DosDateTimeToFileTime
EnterCriticalSection
EnumCalendarInfoA
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
ExitProcess
ExitThread
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FindResourceExA
FormatMessageA
FormatMessageW
FreeLibrary
FreeResource
GetACP
GetCommandLineA
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileTime
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLocaleInfoA
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetThreadLocale
GetThreadPriority
GetTickCount
GetUserDefaultLCID
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LockResource
MulDiv
MultiByteToWideChar
ReadFile
ReadProcessMemory
ResetEvent
ResumeThread
SetEndOfFile
SetEvent
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetLastError
SetThreadPriority
SizeofResource
Sleep
SuspendThread
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualAlloc
VirtualFree
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
SysAllocStringLen
SysFreeString
SysReAllocStringLen
ShellExecuteA
AdjustWindowRect
AdjustWindowRectEx
BeginDeferWindowPos
BeginPaint
BringWindowToTop
CharLowerA
CharLowerBuffA
CharLowerBuffW
CharToOemBuffA
CharUpperA
CharUpperBuffA
CharUpperBuffW
CheckMenuItem
ClientToScreen
ClipCursor
CloseClipboard
CreateAcceleratorTableA
CreateDialogIndirectParamA
CreateDialogIndirectParamW
CreatePopupMenu
CreateWindowExA
CreateWindowExW
DefFrameProcA
DefFrameProcW
DefMDIChildProcA
DefMDIChildProcW
DefWindowProcA
DefWindowProcW
DeferWindowPos
DestroyMenu
DestroyWindow
DispatchMessageA
DispatchMessageW
DrawFocusRect
DrawFrameControl
DrawMenuBar
DrawTextA
DrawTextW
EmptyClipboard
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndDialog
EndPaint
FillRect
GetActiveWindow
GetCapture
GetCaretBlinkTime
GetClassInfoExA
GetClassInfoExW
GetClientRect
GetDC
GetDesktopWindow
GetDlgItem
GetFocus
GetKeyState
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMessageA
GetMessagePos
GetMessageW
GetParent
GetScrollInfo
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetUpdateRect
GetWindow
GetWindowLongA
GetWindowLongPtrA
GetWindowRect
GetWindowTextA
GetWindowTextW
GetWindowThreadProcessId
InsertMenuA
InsertMenuW
InvalidateRect
InvalidateRgn
InvertRect
IsChild
IsDialogMessageA
IsDialogMessageW
IsIconic
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadCursorA
LoadIconA
LoadImageA
LoadMenuIndirectA
MapDialogRect
MessageBoxA
MsgWaitForMultipleObjects
OemToCharBuffA
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageA
PostQuitMessage
PostThreadMessageA
PtInRect
RedrawWindow
RegisterClassExA
RegisterClassExW
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageA
SendMessageW
SendNotifyMessageA
SetActiveWindow
SetCapture
SetClassLongPtrA
SetClipboardData
SetCursor
SetDlgItemTextA
SetDlgItemTextW
SetFocus
SetMenuDefaultItem
SetMenuItemInfoA
SetMenuItemInfoW
SetScrollInfo
SetTimer
SetWindowLongA
SetWindowLongPtrA
SetWindowPos
SetWindowTextA
SetWindowTextW
ShowWindow
SystemParametersInfoA
TrackPopupMenu
TranslateAcceleratorA
TranslateAcceleratorW
TranslateMDISysAccel
TranslateMessage
UpdateWindow
WaitMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ