Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Overview
overview
6Static
static
3Install_Xf...b9.exe
windows10-2004-x64
3$DOCUMENTS...17.wav
windows10-2004-x64
6$DOCUMENTS...18.wav
windows10-2004-x64
6$DOCUMENTS...19.wav
windows10-2004-x64
6$DOCUMENTS...20.wav
windows10-2004-x64
6$DOCUMENTS...21.wav
windows10-2004-x64
6$DOCUMENTS...22.wav
windows10-2004-x64
6$DOCUMENTS...23.wav
windows10-2004-x64
6$DOCUMENTS...24.wav
windows10-2004-x64
6$DOCUMENTS...25.wav
windows10-2004-x64
6$DOCUMENTS...26.wav
windows10-2004-x64
6$DOCUMENTS...27.wav
windows10-2004-x64
6$DOCUMENTS...28.wav
windows10-2004-x64
6$DOCUMENTS...29.wav
windows10-2004-x64
6$DOCUMENTS...30.wav
windows10-2004-x64
6$DOCUMENTS...31.wav
windows10-2004-x64
6$DOCUMENTS...32.wav
windows10-2004-x64
6$DOCUMENTS...33.wav
windows10-2004-x64
6$DOCUMENTS...34.wav
windows10-2004-x64
6$DOCUMENTS...35.wav
windows10-2004-x64
6$DOCUMENTS...36.wav
windows10-2004-x64
6$DOCUMENTS...37.wav
windows10-2004-x64
6$DOCUMENTS...38.wav
windows10-2004-x64
6$DOCUMENTS...39.wav
windows10-2004-x64
6$DOCUMENTS...40.wav
windows10-2004-x64
6$DOCUMENTS...41.wav
windows10-2004-x64
6$DOCUMENTS...42.wav
windows10-2004-x64
6$DOCUMENTS...43.wav
windows10-2004-x64
6$DOCUMENTS...44.wav
windows10-2004-x64
6$DOCUMENTS...45.wav
windows10-2004-x64
6$DOCUMENTS...46.wav
windows10-2004-x64
6$DOCUMENTS...47.wav
windows10-2004-x64
6Static task
static1
Behavioral task
behavioral1
Sample
Install_Xfer_Serum_130b9.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_17.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_18.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral4
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_19.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_20.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral6
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_21.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_22.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral8
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_23.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_24.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral10
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_25.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_26.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral12
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_27.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_28.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral14
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_29.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_30.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral16
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_31.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_32.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral18
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_33.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_34.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral20
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_35.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_36.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral22
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_37.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_38.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral24
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_39.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_40.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral26
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_41.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_42.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral28
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_43.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_44.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral30
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_45.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_46.wav
Resource
win10v2004-20240709-en
Behavioral task
behavioral32
Sample
$DOCUMENTS/Xfer/Serum Presets/Noises/Attacks_Kick/XF_KikAtk_47.wav
Resource
win10v2004-20240709-en
Target
Install_Xfer_Serum_130b9.exe
Size
163.1MB
MD5
6e7787ab41826e9acdf9378a24f027ba
SHA1
ddd67849aa40ca862678eda961554b88b7972ad0
SHA256
4a1d9fb8010eb2bb10119039346282421af599c13e96b1a014c5da83257de8d3
SHA512
05659ac605ff077e243a8d97fcd1a346255b9774f912e7513371876bc7984c67afcc990e8df6285699c1780ce9c317c67fd43800c32ae601af9dd6dbd09b3905
SSDEEP
1572864:JqAyAaedwbXnLh8JKKa9sSDqrcT6HrQfrfIJgRyVAr/Z5JiOd4TM9Dm+I5F5G:oAaedu2Da9lDX5Lf4G4TM9KxjG
Checks for missing Authenticode signature.
resource |
---|
unpack001/$PLUGINSDIR/System.dll |
unpack001/$PLUGINSDIR/advsplash.dll |
unpack001/$PLUGINSDIR/nsDialogs.dll |
unpack001/C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/-Serum.aaxplugin/Contents/x64/Serum.aaxplugin |
unpack001/C:/Program Files (x86)/Common Files/Avid/Audio/Plug-Ins/Serum.aaxplugin/Contents/x64/Serum.aaxplugin |
unpack001/C:/Program Files/Common Files/Avid/Audio/Plug-Ins/-Serum.aaxplugin/Contents/x64/Serum.aaxplugin |
unpack001/C:/Program Files/Common Files/Avid/Audio/Plug-Ins/Serum.aaxplugin/Contents/x64/Serum.aaxplugin |
resource | yara_rule |
---|---|
sample | nsis_installer_1 |
sample | nsis_installer_2 |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetTempPathA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetEnvironmentVariableA
Sleep
GetTickCount
GetCommandLineA
lstrlenA
GetVersion
SetErrorMode
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GetWindowsDirectoryA
SetCurrentDirectoryA
GetLastError
CreateDirectoryA
CreateProcessA
RemoveDirectoryA
CreateFileA
GetTempFileNameA
ReadFile
WriteFile
lstrcpyA
MoveFileExA
lstrcatA
GetSystemDirectoryA
GetProcAddress
GetExitCodeProcess
WaitForSingleObject
CompareFileTime
SetFileAttributesA
GetFileAttributesA
GetShortPathNameA
MoveFileA
GetFullPathNameA
SetFileTime
SearchPathA
CloseHandle
lstrcmpiA
CreateThread
GlobalLock
lstrcmpA
FindFirstFileA
FindNextFileA
DeleteFileA
SetFilePointer
GetPrivateProfileStringA
FindClose
MultiByteToWideChar
FreeLibrary
MulDiv
WritePrivateProfileStringA
LoadLibraryExA
GetModuleHandleA
GlobalAlloc
GlobalFree
ExpandEnvironmentStringsA
ScreenToClient
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
PostQuitMessage
GetWindowRect
EnableMenuItem
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
ReleaseDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndDialog
RegisterClassA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
ExitWindowsEx
GetDC
CreateDialogParamA
SetTimer
GetDlgItem
SetWindowLongA
SetForegroundWindow
LoadImageA
IsWindow
SendMessageTimeoutA
FindWindowExA
OpenClipboard
TrackPopupMenu
AppendMenuA
EndPaint
DestroyWindow
wsprintfA
ShowWindow
SetWindowTextA
SelectObject
SetBkMode
CreateFontIndirectA
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
SHGetSpecialFolderLocation
ShellExecuteExA
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
SHFileOperationA
AdjustTokenPrivileges
RegCreateKeyExA
RegOpenKeyExA
SetFileSecurityA
OpenProcessToken
LookupPrivilegeValueA
RegEnumValueA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegEnumKeyA
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MultiByteToWideChar
GlobalFree
GlobalSize
lstrcpynA
lstrcpyA
GetProcAddress
VirtualFree
FreeLibrary
lstrlenA
LoadLibraryA
GetModuleHandleA
GlobalAlloc
WideCharToMultiByte
VirtualAlloc
VirtualProtect
GetLastError
wsprintfA
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcpynA
LoadLibraryA
lstrcpyA
lstrcatA
GetProcAddress
GlobalAlloc
GlobalFree
EnumDisplaySettingsA
LoadImageA
BeginPaint
SetWindowLongA
SystemParametersInfoA
EndPaint
GetClientRect
CreateWindowExA
DefWindowProcA
DestroyWindow
IsWindow
GetMessageA
DispatchMessageA
UnregisterClassA
wsprintfA
PostMessageA
SetWindowRgn
RegisterClassA
LoadCursorA
SetWindowPos
BitBlt
DeleteDC
DeleteObject
CombineRgn
GetObjectA
GetDIBits
SelectObject
CreateCompatibleDC
CreateRectRgn
timeSetEvent
PlaySoundA
timeKillEvent
show
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileAttributesA
lstrcpyA
MulDiv
lstrlenA
HeapFree
GetCurrentDirectoryA
lstrcmpiA
GetProcessHeap
HeapReAlloc
GlobalFree
lstrcpynA
GlobalAlloc
SetCurrentDirectoryA
HeapAlloc
DestroyWindow
CallWindowProcA
SetCursor
LoadCursorA
GetPropA
CharPrevA
DrawFocusRect
GetWindowLongA
DrawTextA
GetClientRect
GetDlgItem
GetSysColor
SetWindowLongA
SetWindowPos
CreateDialogParamA
MapDialogRect
GetWindowRect
SetPropA
CreateWindowExA
IsWindow
SetTimer
KillTimer
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
ShowWindow
wsprintfA
CharNextA
SendMessageA
MapWindowPoints
RemovePropA
GetWindowTextA
SetTextColor
SHBrowseForFolderA
SHGetPathFromIDListA
GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError
CoTaskMemFree
Create
CreateControl
CreateItem
CreateTimer
GetUserData
KillTimer
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetRTL
SetUserData
Show
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ