Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
8Static
static
3input.zip
windows7-x64
1input.zip
windows10-2004-x64
1Create TRS_500.bat
windows7-x64
8Create TRS_500.bat
windows10-2004-x64
8DPC.exe
windows7-x64
8DPC.exe
windows10-2004-x64
8MeasureSleep.exe
windows7-x64
1MeasureSleep.exe
windows10-2004-x64
1RBtray/RBHook.dll
windows7-x64
1RBtray/RBHook.dll
windows10-2004-x64
1RBtray/RBTray.exe
windows7-x64
1RBtray/RBTray.exe
windows10-2004-x64
1SetTimerRe...ce.exe
windows7-x64
1SetTimerRe...ce.exe
windows10-2004-x64
1hpet.txt
windows7-x64
1hpet.txt
windows10-2004-x64
1pytb.txt
windows7-x64
1pytb.txt
windows10-2004-x64
1startup.txt
windows7-x64
1startup.txt
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
input.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
input.zip
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Create TRS_500.bat
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
Create TRS_500.bat
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
DPC.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
DPC.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
MeasureSleep.exe
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
MeasureSleep.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
RBtray/RBHook.dll
Resource
win7-20240419-en
Behavioral task
behavioral10
Sample
RBtray/RBHook.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
RBtray/RBTray.exe
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
RBtray/RBTray.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
SetTimerResolutionService.exe
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
SetTimerResolutionService.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
hpet.txt
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
hpet.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
pytb.txt
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
pytb.txt
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
startup.txt
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
startup.txt
Resource
win10v2004-20240226-en
Target
input.zip
Size
234KB
MD5
4edebd17f87ca82bf73592e4d092f4b0
SHA1
9acbad9c316e0f7257516fe1f7af36a774358ead
SHA256
907a589834514c29adf984323b2de72dba666c4a5586b92fbd167dd01421351d
SHA512
1fde0f5b72641fc95b78c36e26e764b8da86db59bf5e8e66995440c2ab2dfadca3eecf386802fb1bcd157340676d1bdc8a66b1bbd02a96a0e624ed15ce735ab7
SSDEEP
6144:K2QtSx8li+SUmhKOGZEVZcCKqH4bxvcQa/y:ZQtu82plXfNfyEQa/y
Checks for missing Authenticode signature.
resource |
---|
unpack001/MeasureSleep.exe |
unpack001/RBtray/RBHook.dll |
unpack001/RBtray/RBTray.exe |
unpack001/SetTimerResolutionService.exe |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetFileType
SetHandleCount
GetStdHandle
ExitProcess
HeapCreate
HeapDestroy
GetConsoleMode
GetConsoleCP
WriteFile
GetStringTypeW
GetStringTypeA
IsValidCodePage
GetOEMCP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoA
GetCommandLineA
HeapReAlloc
VirtualQuery
GetSystemInfo
VirtualProtect
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LoadLibraryExA
FlushFileBuffers
SetEndOfFile
lstrcpyA
MulDiv
DeleteCriticalSection
lstrcpynA
CompareStringA
InitializeCriticalSection
lstrcpynW
GetCurrentThreadId
FlushInstructionCache
GetModuleFileNameA
IsDBCSLeadByte
EnterCriticalSection
SetLastError
CreateMutexA
MultiByteToWideChar
InterlockedIncrement
GetVersionExA
lstrlenW
RaiseException
lstrcmpiA
SetStdHandle
WideCharToMultiByte
LeaveCriticalSection
GetCurrentProcessId
lstrcmpA
FreeLibrary
GetCurrentProcess
GetProcAddress
GetModuleHandleA
GetSystemDirectoryA
Sleep
DeleteFileA
SizeofResource
LockResource
LoadResource
FindResourceA
DeviceIoControl
GetOverlappedResult
ReadFile
GetLastError
CreateFileA
CloseHandle
CreateEventA
InterlockedDecrement
lstrlenA
OutputDebugStringA
RtlUnwind
DebugBreak
SetMenuDefaultItem
RegisterWindowMessageA
CharLowerA
LoadAcceleratorsA
SetFocus
EndDialog
LoadMenuA
GetWindowDC
LoadBitmapA
CreateDialogParamA
PostQuitMessage
IsDialogMessageA
DestroyWindow
IsMenu
GetWindowTextA
UnhookWindowsHookEx
CreateWindowExA
WindowFromPoint
FillRect
ReleaseCapture
GetSubMenu
SetForegroundWindow
SendMessageA
ShowWindow
LoadStringW
GetWindowThreadProcessId
GetMenuItemCount
SetMenu
DrawTextA
GetCapture
SetWindowTextA
IsIconic
GetDlgCtrlID
InflateRect
OffsetRect
IsWindowEnabled
CreatePopupMenu
SetRectEmpty
SetDlgItemTextA
IsWindow
IsWindowVisible
GetSysColor
GetLastActivePopup
GetMenuItemInfoA
MoveWindow
SetMenuItemInfoA
GetClassNameA
GetFocus
AppendMenuA
FindWindowA
GetCursorPos
DrawFocusRect
MessageBeep
KillTimer
GetKeyState
ScreenToClient
TranslateAcceleratorA
UpdateWindow
PeekMessageA
LoadCursorA
GetMessageA
GetMenu
DrawEdge
wsprintfA
TranslateMessage
GetDC
DispatchMessageA
SetWindowsHookExA
FrameRect
GetClassInfoExA
DestroyMenu
ReleaseDC
LoadImageA
ModifyMenuA
MonitorFromPoint
RegisterClassExA
GetWindow
PtInRect
CallNextHookEx
GetDlgItem
GetMonitorInfoA
SetTimer
GetSysColorBrush
SystemParametersInfoA
SetCursor
DialogBoxParamA
TrackPopupMenuEx
GetWindowRect
GetActiveWindow
MapWindowPoints
GetWindowTextLengthA
RemoveMenu
GetSystemMetrics
DrawFrameControl
GetMessagePos
PostMessageA
MessageBoxA
EndPaint
InvalidateRect
LoadStringA
BeginPaint
GetClientRect
RedrawWindow
DefWindowProcA
GetWindowLongA
SetWindowLongA
CharNextA
wvsprintfA
CallWindowProcA
SetWindowPos
GetParent
SetCapture
UnregisterClassA
CreateDIBSection
CreateBitmap
GetStockObject
CreatePatternBrush
GetObjectA
CreateFontIndirectA
SetBrushOrgEx
PatBlt
SelectObject
SetTextColor
SetBkMode
IntersectClipRect
MoveToEx
CreatePen
LineTo
TextOutA
CreateCompatibleDC
SetBkColor
ExtTextOutA
CreateCompatibleBitmap
BitBlt
DeleteDC
GetTextExtentPoint32A
DeleteObject
OpenServiceA
DeleteService
ControlService
StartServiceA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCloseKey
FreeSid
CheckTokenMembership
RegQueryValueExA
RegDeleteKeyA
AllocateAndInitializeSid
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
ShellExecuteA
CoCreateInstance
CoTaskMemAlloc
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
VarUI4FromStr
ImageList_Destroy
ImageList_Draw
ord6
InitCommonControlsEx
ImageList_GetImageCount
ImageList_AddMasked
ImageList_Create
_TrackMouseEvent
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
D:\a\TimerResolution\TimerResolution\MeasureSleep\x64\Release\MeasureSleep.pdb
RtlCaptureContext
RtlLookupFunctionEntry
NtQueryTimerResolution
RtlVirtualUnwind
Sleep
SetPriorityClass
CloseHandle
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
QueryPerformanceFrequency
GetCurrentProcess
GetModuleHandleW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
GetTokenInformation
OpenProcessToken
?_Xbad_function_call@std@@YAXXZ
?id@?$ctype@D@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPEBD@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?in_avail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Xout_of_range@std@@YAXPEBD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?good@ios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Xbad_alloc@std@@YAXXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exceptions@std@@YAHXZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??Bid@locale@std@@QEAA_KXZ
__CxxFrameHandler4
memset
_CxxThrowException
__std_exception_destroy
__std_exception_copy
_purecall
memmove
__std_terminate
__current_exception
memcpy
__current_exception_context
memcmp
memchr
__C_specific_handler
_callnewh
malloc
free
_set_new_mode
isspace
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_register_thread_local_exe_atexit_callback
_invalid_parameter_noinfo_noreturn
_get_initial_narrow_environment
__p___argv
terminate
_c_exit
_seh_filter_exe
_set_app_type
_configure_narrow_argv
_cexit
_initterm
__p___argc
_initterm_e
_exit
exit
_initialize_narrow_environment
pow
sqrt
__setusermatherr
ceilf
__p__commode
_set_fmode
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
J:\Stuff\Code\RBTray\x64\RBHook.pdb
PostMessageW
CallNextHookEx
FindWindowW
SetWindowsHookExW
UnhookWindowsHookEx
GetFileType
HeapSize
GetStringTypeW
MultiByteToWideChar
LCMapStringW
GetModuleFileNameW
GetCurrentThreadId
FlsSetValue
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
EncodePointer
FlsGetValue
FlsFree
SetLastError
GetLastError
FlsAlloc
HeapFree
Sleep
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
HeapReAlloc
LoadLibraryW
WriteFile
?RegisterHook@@YAHPEAUHINSTANCE__@@@Z
?UnRegisterHook@@YAXXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
J:\Stuff\Code\RBTray\x64\RBTray.pdb
FreeLibrary
LoadLibraryW
Sleep
HeapAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
HeapFree
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
GetVersion
HeapSetInformation
FlsAlloc
GetLastError
GetCurrentThreadId
SetLastError
FlsFree
FlsSetValue
FlsGetValue
EncodePointer
DeleteCriticalSection
GetFileType
GetCommandLineA
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
RtlUnwindEx
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
HeapReAlloc
GetMessageW
PostQuitMessage
TrackPopupMenu
RegisterWindowMessageW
PostMessageW
DialogBoxParamW
FindWindowW
GetWindowLongPtrW
TranslateMessage
LoadIconW
SetForegroundWindow
GetAncestor
GetClassLongPtrW
GetWindowTextW
EndDialog
GetCursorPos
ShowWindow
CreatePopupMenu
IsWindow
CreateWindowExW
MessageBoxW
RegisterClassW
IsWindowVisible
SendMessageW
DestroyMenu
DefWindowProcW
DispatchMessageW
AppendMenuW
Shell_NotifyIconW
?UnRegisterHook@@YAXXZ
?RegisterHook@@YAHPEAUHINSTANCE__@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ