UzpFreeMemBuffer
UzpVersion
UzpVersion2
Wiz_Grep
Wiz_Init
Wiz_NoPrinting
Wiz_SetOpts
Wiz_SingleEntryUnzip
Wiz_Unzip
Wiz_UnzipToMemory
Wiz_Validate
Overview
overview
3Static
static
3cvery.comd...rls.js
windows7-x64
3cvery.comd...rls.js
windows10-2004-x64
3cvery.comd...ata.js
windows7-x64
3cvery.comd...ata.js
windows10-2004-x64
3cvery.comd...ids.js
windows7-x64
3cvery.comd...ids.js
windows10-2004-x64
3cvery.comd...int.js
windows7-x64
3cvery.comd...int.js
windows10-2004-x64
3cvery.comd...Zip.js
windows7-x64
3cvery.comd...Zip.js
windows10-2004-x64
3cvery.comd...Zip.js
windows7-x64
3cvery.comd...Zip.js
windows10-2004-x64
3cvery.comd...ids.js
windows7-x64
3cvery.comd...ids.js
windows10-2004-x64
3cvery.comd...lib.js
windows7-x64
3cvery.comd...lib.js
windows10-2004-x64
3cvery.comd...ess.js
windows7-x64
3cvery.comd...ess.js
windows10-2004-x64
3cvery.comd...rm.chm
windows7-x64
1cvery.comd...rm.chm
windows10-2004-x64
1cvery.comd...mo.exe
windows7-x64
3cvery.comd...mo.exe
windows10-2004-x64
3cvery.comd...mo.exe
windows7-x64
1cvery.comd...mo.exe
windows10-2004-x64
1cvery.comd...mo.exe
windows7-x64
1cvery.comd...mo.exe
windows10-2004-x64
1cvery.comd...nit.js
windows7-x64
3cvery.comd...nit.js
windows10-2004-x64
3cvery.comd...or.exe
windows7-x64
1cvery.comd...or.exe
windows10-2004-x64
1cvery.comd...er.exe
windows7-x64
1cvery.comd...er.exe
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
cvery.comdel6283545723124/Source/bsColorCtrls.js
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
cvery.comdel6283545723124/Source/bsColorCtrls.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
cvery.comdel6283545723124/Source/bsSkinData.js
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
cvery.comdel6283545723124/Source/bsSkinData.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
cvery.comdel6283545723124/Source/bsSkinGrids.js
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
cvery.comdel6283545723124/Source/bsSkinGrids.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
cvery.comdel6283545723124/Source/bsSkinHint.js
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
cvery.comdel6283545723124/Source/bsSkinHint.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
cvery.comdel6283545723124/Source/bsSkinUnZip.js
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
cvery.comdel6283545723124/Source/bsSkinUnZip.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
cvery.comdel6283545723124/Source/bsSkinZip.js
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
cvery.comdel6283545723124/Source/bsSkinZip.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
cvery.comdel6283545723124/Source/bsdbgrids.js
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
cvery.comdel6283545723124/Source/bsdbgrids.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
cvery.comdel6283545723124/Source/bszlib.js
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
cvery.comdel6283545723124/Source/bszlib.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
cvery.comdel6283545723124/Source/bszlibcompress.js
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
cvery.comdel6283545723124/Source/bszlibcompress.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
cvery.comdel6283545723124/help/BusinessSkinForm.chm
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
cvery.comdel6283545723124/help/BusinessSkinForm.chm
Resource
win10v2004-20240704-en
Behavioral task
behavioral21
Sample
cvery.comdel6283545723124/samples/DBDemo/DBDemo.exe
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
cvery.comdel6283545723124/samples/DBDemo/DBDemo.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral23
Sample
cvery.comdel6283545723124/samples/MDIDemo/MDIDemo.exe
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
cvery.comdel6283545723124/samples/MDIDemo/MDIDemo.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral25
Sample
cvery.comdel6283545723124/samples/maindemo/MainDemo.exe
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
cvery.comdel6283545723124/samples/maindemo/MainDemo.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral27
Sample
cvery.comdel6283545723124/samples/maindemo/MainUnit.js
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
cvery.comdel6283545723124/samples/maindemo/MainUnit.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral29
Sample
cvery.comdel6283545723124/samples/zlibcompressor/ZlibCompressor.exe
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
cvery.comdel6283545723124/samples/zlibcompressor/ZlibCompressor.exe
Resource
win10v2004-20240704-en
Behavioral task
behavioral31
Sample
cvery.comdel6283545723124/skinbuilder/skinbuilder.exe
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
cvery.comdel6283545723124/skinbuilder/skinbuilder.exe
Resource
win10v2004-20240704-en
Target
2b393f5110e7d91b6cf2ee668ed714fe_JaffaCakes118
Size
5.4MB
MD5
2b393f5110e7d91b6cf2ee668ed714fe
SHA1
0e1dfd431d298444e97e042e8f7cea9fdc35ba90
SHA256
eaf96ca38f890e27c864fae59fc55cc999c5c881af33ac71ef4cd0bcc25e336e
SHA512
6d94ff3b7bc8e1d8b77044d17dec049b156e3196a3f6ec253a412b8aef27e56be92c974d4fe865cd17cb19ed9344a370e1d18f650bbc12be689e5f87fa6d9ef3
SSDEEP
98304:Mp52nyj03zRK/t8PqOIM6QbKC0U4iEhDFxxis5HOw0BjGkFyLRZphdUTnJlik:s52nfs/t8CFM6ekU4/htis5HiBqkiRjo
Checks for missing Authenticode signature.
resource |
---|
unpack001/cvery.comdel6283545723124/samples/DBDemo/DBDemo.exe |
unpack001/cvery.comdel6283545723124/samples/MDIDemo/MDIDemo.exe |
unpack001/cvery.comdel6283545723124/samples/maindemo/MainDemo.exe |
unpack001/cvery.comdel6283545723124/samples/zlibcompressor/ZlibCompressor.exe |
unpack001/cvery.comdel6283545723124/skinbuilder/skinbuilder.exe |
unpack001/cvery.comdel6283545723124/zipunzip/samples/builder/unzip32.dll |
unpack001/cvery.comdel6283545723124/zipunzip/zipcompressor/unzip32.dll |
unpack001/cvery.comdel6283545723124/zipunzip/zipcompressor/zip32.dll |
unpack001/cvery.comdel6283545723124/zipunzip/zipcompressor/zipcompressor.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
free
__lconv_init
toupper
_adjust_fdiv
mktime
time
_initterm
_get_osfhandle
setlocale
fclose
strncpy
gmtime
_mbsrchr
tolower
_isctype
_pctype
localtime
putc
fflush
longjmp
fopen
mblen
__mb_cur_max
_mbschr
_mbsinc
_iob
fgets
strncmp
sprintf
_setjmp3
realloc
malloc
_chmod
_isatty
_mkdir
_read
_lseek
_setmode
_fileno
_open
_unlink
_stat
_write
_tzset
_putenv
_close
_strnicmp
_strupr
FileTimeToSystemTime
InitializeCriticalSection
ReleaseMutex
FindFirstFileA
FindNextFileA
GlobalFree
GlobalAlloc
GlobalUnlock
lstrcpyA
GetCurrentProcess
GlobalLock
CreateMutexA
InterlockedExchange
HeapAlloc
GetFullPathNameA
lstrlenA
lstrcmpiA
lstrcpynA
EnterCriticalSection
GetVersion
SetEndOfFile
SetFilePointer
CloseHandle
SetFileTime
GetLastError
SetFileAttributesA
CreateFileA
FileTimeToLocalFileTime
GetVolumeInformationA
GetProcessHeap
GetLocaleInfoA
WaitForSingleObject
FindClose
SetVolumeLabelA
GetDriveTypeA
GetFileAttributesA
GetFileTime
LeaveCriticalSection
HeapFree
SetKernelObjectSecurity
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
GetSecurityDescriptorControl
GetKernelObjectSecurity
GetSecurityDescriptorLength
IsValidSecurityDescriptor
GetSecurityDescriptorDacl
IsValidAcl
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
IsValidSid
GetSecurityDescriptorGroup
CharToOemA
OemToCharA
UzpFreeMemBuffer
UzpVersion
UzpVersion2
Wiz_Grep
Wiz_Init
Wiz_NoPrinting
Wiz_SetOpts
Wiz_SingleEntryUnzip
Wiz_Unzip
Wiz_UnzipToMemory
Wiz_Validate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
free
__lconv_init
toupper
_adjust_fdiv
mktime
time
_initterm
_get_osfhandle
setlocale
fclose
strncpy
gmtime
_mbsrchr
tolower
_isctype
_pctype
localtime
putc
fflush
longjmp
fopen
mblen
__mb_cur_max
_mbschr
_mbsinc
_iob
fgets
strncmp
sprintf
_setjmp3
realloc
malloc
_chmod
_isatty
_mkdir
_read
_lseek
_setmode
_fileno
_open
_unlink
_stat
_write
_tzset
_putenv
_close
_strnicmp
_strupr
FileTimeToSystemTime
InitializeCriticalSection
ReleaseMutex
FindFirstFileA
FindNextFileA
GlobalFree
GlobalAlloc
GlobalUnlock
lstrcpyA
GetCurrentProcess
GlobalLock
CreateMutexA
InterlockedExchange
HeapAlloc
GetFullPathNameA
lstrlenA
lstrcmpiA
lstrcpynA
EnterCriticalSection
GetVersion
SetEndOfFile
SetFilePointer
CloseHandle
SetFileTime
GetLastError
SetFileAttributesA
CreateFileA
FileTimeToLocalFileTime
GetVolumeInformationA
GetProcessHeap
GetLocaleInfoA
WaitForSingleObject
FindClose
SetVolumeLabelA
GetDriveTypeA
GetFileAttributesA
GetFileTime
LeaveCriticalSection
HeapFree
SetKernelObjectSecurity
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
GetSecurityDescriptorControl
GetKernelObjectSecurity
GetSecurityDescriptorLength
IsValidSecurityDescriptor
GetSecurityDescriptorDacl
IsValidAcl
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
IsValidSid
GetSecurityDescriptorGroup
CharToOemA
OemToCharA
UzpFreeMemBuffer
UzpVersion
UzpVersion2
Wiz_Grep
Wiz_Init
Wiz_NoPrinting
Wiz_SetOpts
Wiz_SingleEntryUnzip
Wiz_Unzip
Wiz_UnzipToMemory
Wiz_Validate
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetDriveTypeA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
ReleaseMutex
WaitForSingleObject
CloseHandle
InterlockedExchange
CreateMutexA
HeapFree
HeapAlloc
GetProcessHeap
GetLastError
CreateFileA
GetVolumeInformationA
lstrcmpiA
FindClose
FindFirstFileA
GetVersion
GetFileType
GetFileTime
GetFullPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
lstrcpynA
lstrcpyA
lstrcatA
GetFileAttributesA
GetCurrentProcess
GetStringTypeA
ReadFile
MultiByteToWideChar
GetTimeZoneInformation
GetSystemTime
GetLocalTime
MoveFileA
SetStdHandle
HeapReAlloc
Sleep
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
DeleteCriticalSection
ExitProcess
TerminateProcess
lstrlenA
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
RtlUnwind
WideCharToMultiByte
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
WriteFile
PeekNamedPipe
RemoveDirectoryA
GetStringTypeW
SetFilePointer
FlushFileBuffers
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetEndOfFile
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
InterlockedDecrement
InterlockedIncrement
GetProcAddress
LoadLibraryA
LCMapStringA
LCMapStringW
GetLocaleInfoW
GetCurrentDirectoryA
SetCurrentDirectoryA
DeleteFileA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetFileInformationByHandle
wvsprintfA
LookupPrivilegeValueA
AdjustTokenPrivileges
GetSecurityDescriptorLength
GetKernelObjectSecurity
OpenProcessToken
ZpArchive
ZpGetOptions
ZpInit
ZpSetOptions
ZpVersion
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ