Static task
static1
General
-
Target
MCBE.DLL.Injector.exe
-
Size
4.3MB
-
MD5
5ee3b4c7de74da5a6b0a9429a2d30f63
-
SHA1
13882967260b298149131acf3302b1c7fc441394
-
SHA256
35b9c743cab069d7fb3eb3229d9f3b8999e9a9a8aa8b052c14ac005083595515
-
SHA512
29a555be777d6f225023cb59eb5457d2f7e6a61a33f2fdf4f033ca3b62fe82af159aed49054d0a61a11048a0e15841dcb227d569e1fc6d18b87898b8a8d241bc
-
SSDEEP
49152:CAacOsHD1+liNL5XRgbOxhniepjf8xfB85IOqmlGR:CApUleR4wAsflG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource MCBE.DLL.Injector.exe
Files
-
MCBE.DLL.Injector.exe.exe windows:6 windows x64 arch:x64
81e8cba30e214a85f898be35f1578e6b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
WaitForSingleObjectEx
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
IsBadStringPtrA
IsBadReadPtr
ResetEvent
GetACP
RtlCaptureContext
GetLogicalDriveStringsW
GetDriveTypeW
QueryPerformanceFrequency
QueryPerformanceCounter
WaitForMultipleObjects
LocalFree
ExpandEnvironmentStringsW
GetTempFileNameW
GetLongPathNameW
FindFirstFileW
FindClose
CopyFileW
GetFileType
GetFileAttributesW
CreateFileW
SetCurrentDirectoryW
CreateEventW
SetEvent
GetProcAddress
GetCPInfo
IsValidCodePage
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleFileNameW
GetNativeSystemInfo
GetVersionExW
TerminateProcess
IsDebuggerPresent
GetEnvironmentVariableW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsAlloc
GetCurrentThread
GetCurrentProcess
WaitForSingleObject
OutputDebugStringW
GetModuleHandleW
GetCurrentProcessId
GetTempPathW
WideCharToMultiByte
MultiByteToWideChar
FormatMessageW
SetErrorMode
GlobalHandle
GlobalSize
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
FreeLibrary
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCurrentThreadId
ExitProcess
SetLastError
GetLastError
MulDiv
ReadConsoleOutputCharacterA
SetConsoleCursorPosition
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterW
WriteConsoleW
WriteConsoleA
AttachConsole
FreeConsole
GetStdHandle
GetCommandLineW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
LoadLibraryW
WriteProcessMemory
VirtualAllocEx
OpenProcess
CreateRemoteThread
CloseHandle
InitializeCriticalSectionAndSpinCount
InitializeSListHead
user32
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
SetParent
GetParent
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
PtInRect
InflateRect
FillRect
GetSysColor
ChildWindowFromPointEx
WindowFromPoint
MapWindowPoints
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
GetClientRect
SetWindowTextW
EnableScrollBar
ScrollWindow
RedrawWindow
InvalidateRect
GetUpdateRgn
UpdateWindow
GetMenuItemInfoW
CallNextHookEx
GetMenuItemCount
GetSystemMetrics
IsWindowEnabled
EnableWindow
ReleaseCapture
SetCapture
GetCapture
MapVirtualKeyW
VkKeyScanW
GetAsyncKeyState
ChangeDisplaySettingsExW
RegisterClassW
UnregisterClassW
GetKeyState
MessageBoxW
SystemParametersInfoW
CreateDialogParamW
GetDlgItem
SetWindowRgn
GetWindowPlacement
SetLayeredWindowAttributes
FlashWindowEx
IsIconic
BringWindowToTop
IsZoomed
CreateDialogIndirectParamW
GetDialogBaseUnits
DrawMenuBar
GetSystemMenu
IsDialogMessageW
SetScrollInfo
TrackPopupMenu
GetScrollInfo
GetFocus
GetActiveWindow
SetFocus
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPos
MoveWindow
AnimateWindow
ShowWindow
DestroyWindow
IsWindow
CreateWindowExW
CallWindowProcW
GetProcessDefaultLayout
LoadCursorW
RegisterWindowMessageW
SendMessageW
EnumDisplaySettingsW
MonitorFromPoint
MonitorFromWindow
EnableMenuItem
GetMonitorInfoW
EnumDisplayMonitors
IsClipboardFormatAvailable
SetForegroundWindow
DrawTextW
DrawFocusRect
CreateIconIndirect
DrawStateW
PostQuitMessage
DefWindowProcW
GetMessageTime
GetMessagePos
UnregisterHotKey
RegisterHotKey
PeekMessageW
DispatchMessageW
TranslateMessage
ReleaseDC
GetDC
DestroyIcon
GetIconInfo
LoadImageW
LoadIconW
LoadBitmapW
GetWindowRect
SetMenu
PostMessageW
wsprintfW
SetRect
SetRectEmpty
MsgWaitForMultipleObjects
SetTimer
KillTimer
DdeInitializeW
DdeUninitialize
DdeConnect
DdeDisconnect
DdePostAdvise
DdeNameService
DdeClientTransaction
DdeCreateDataHandle
DdeGetData
DdeFreeDataHandle
DdeGetLastError
DdeCreateStringHandleW
DdeQueryStringW
DdeFreeStringHandle
RegisterClipboardFormatW
CopyRect
OffsetRect
IsMenu
keybd_event
GetWindowTextLengthW
HideCaret
DrawEdge
DrawFrameControl
GetMenuState
CheckMenuItem
GetSubMenu
GetMenuItemID
SetMenuItemInfoW
GetSysColorBrush
CheckMenuRadioItem
CreateMenu
CreatePopupMenu
DestroyMenu
InsertMenuW
AppendMenuW
ModifyMenuW
RemoveMenu
SetMenuInfo
InsertMenuItemW
GetWindowTextW
MessageBeep
GetClassNameW
GetMessageW
PostThreadMessageW
ValidateRect
DrawIconEx
CreateAcceleratorTableW
DestroyAcceleratorTable
TranslateAcceleratorW
GetDoubleClickTime
GetCaretBlinkTime
DestroyCursor
ValidateRgn
IsRectEmpty
GetWindowDC
BeginPaint
EndPaint
UnionRect
GetDesktopWindow
GetComboBoxInfo
ChildWindowFromPoint
FindWindowExW
GetClipboardFormatNameW
gdi32
GetStockObject
MaskBlt
Pie
PolyPolygon
Rectangle
RoundRect
SelectClipRgn
ExtSelectClipRgn
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPixel
SetPolyFillMode
StretchBlt
StretchDIBits
SetROP2
SetStretchBltMode
GetWorldTransform
SetWorldTransform
ModifyWorldTransform
CreatePolygonRgn
DPtoLP
LPtoDP
Polygon
Polyline
PolyBezier
SetViewportExtEx
SetWindowExtEx
SetWindowOrgEx
CreatePen
ExtCreatePen
CreatePalette
GetNearestPaletteIndex
GetPixel
SetBkColor
CreatePatternBrush
CreateDIBitmap
GetDIBits
CreateDIBSection
GetDIBColorTable
SetDIBColorTable
CombineRgn
EqualRgn
GetRgnBox
PtInRegion
RectInRegion
CreateRectRgnIndirect
GetCharABCWidthsW
GetTextExtentExPointW
CreateICW
CreateDCW
GetSystemPaletteEntries
SetViewportOrgEx
CloseEnhMetaFile
CreateEnhMetaFileW
DeleteEnhMetaFile
GetEnhMetaFileW
GetEnhMetaFileHeader
PlayEnhMetaFile
EnumFontFamiliesExW
StartDocW
EndDoc
StartPage
EndPage
GetObjectType
GetClipBox
ExtFloodFill
Ellipse
Arc
MoveToEx
ExtTextOutW
LineTo
GetBkColor
GetTextExtentPoint32W
GetWindowExtEx
GetViewportExtEx
GetGraphicsMode
CreateSolidBrush
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmapIndirect
CreateBitmap
BitBlt
SetTextColor
GetPaletteEntries
OffsetRgn
GetRegionData
SetBkMode
ExtCreateRegion
GdiFlush
SetBrushOrgEx
SelectPalette
RealizePalette
ExcludeClipRect
CreateRectRgn
GetTextMetricsW
SetAbortProc
SelectObject
GetOutlineTextMetricsW
GetDeviceCaps
CreateFontIndirectW
GetObjectW
CreateHatchBrush
DeleteObject
comdlg32
PrintDlgW
ChooseFontW
CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW
PageSetupDlgW
winspool.drv
OpenPrinterW
GetPrinterW
DocumentPropertiesW
ClosePrinter
shell32
SHGetFolderPathW
ord6
SHGetFileInfoW
DragAcceptFiles
DragFinish
DragQueryPoint
DragQueryFileW
ExtractIconExW
ExtractIconW
CommandLineToArgvW
shlwapi
SHAutoComplete
comctl32
ImageList_GetImageInfo
ImageList_GetIconSize
ImageList_Replace
ImageList_Draw
ImageList_SetBkColor
ImageList_Add
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
ord16
ord17
ole32
CoTaskMemFree
ReleaseStgMedium
RegisterDragDrop
CoLockObjectExternal
CoTaskMemAlloc
CoCreateInstance
OleUninitialize
OleInitialize
OleSetClipboard
OleGetClipboard
OleFlushClipboard
OleIsCurrentClipboard
RevokeDragDrop
rpcrt4
UuidToStringW
RpcStringFreeW
advapi32
RegCreateKeyExW
ConvertStringSidToSidW
GetUserNameW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
GetNamedSecurityInfoW
SetEntriesInAclW
SetNamedSecurityInfoW
oleacc
LresultFromObject
uxtheme
GetCurrentThemeName
GetThemeBackgroundExtent
IsThemePartDefined
SetWindowTheme
GetThemeFont
IsAppThemed
IsThemeActive
GetThemeSysFont
GetThemeSysColor
GetThemeInt
GetThemePartSize
GetThemeMargins
DrawThemeParentBackground
GetThemeColor
IsThemeBackgroundPartiallyTransparent
GetThemeBackgroundContentRect
DrawThemeBackground
CloseThemeData
OpenThemeData
msvcp140
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAJ@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?uncaught_exceptions@std@@YAHXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??Bid@locale@std@@QEAA_KXZ
?_Xout_of_range@std@@YAXPEBD@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Xlength_error@std@@YAXPEBD@Z
msimg32
GradientFill
AlphaBlend
vcruntime140
memset
__C_specific_handler
wcschr
memcmp
__std_type_info_compare
__intrinsic_setjmp
__current_exception_context
__current_exception
_set_se_translator
wcsstr
longjmp
strchr
strstr
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__RTtypeid
memcpy
memmove
_purecall
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_errno
exit
_set_app_type
_get_narrow_winmain_command_line
_initterm
abort
_register_thread_local_exe_atexit_callback
_initterm_e
_c_exit
terminate
_configure_narrow_argv
_initialize_narrow_environment
_exit
_invalid_parameter_noinfo_noreturn
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
api-ms-win-crt-heap-l1-1-0
_callnewh
calloc
_set_new_mode
realloc
malloc
free
api-ms-win-crt-stdio-l1-1-0
_get_stream_buffer_pointers
fclose
_set_fmode
fflush
__stdio_common_vfprintf
fgetc
__stdio_common_vfwprintf
__p__commode
_getcwd
fread
__stdio_common_vsscanf
__stdio_common_vswscanf
fsetpos
fwrite
_wfopen
fgetpos
clearerr
feof
ferror
_ftelli64
__acrt_iob_func
__stdio_common_vsprintf
fputc
_fseeki64
_fileno
_get_osfhandle
ungetwc
_wsopen_dispatch
fputwc
_open_osfhandle
fgetwc
_close
_read
_write
_lseeki64
_telli64
ungetc
setvbuf
__stdio_common_vswprintf
__stdio_common_vswprintf_p
api-ms-win-crt-filesystem-l1-1-0
_wrename
_wremove
_lock_file
_unlock_file
api-ms-win-crt-convert-l1-1-0
atof
_wcstoui64
_wcstoi64
wcstoul
_wcstod_l
wcstod
_wtol
strtoll
strtol
_wtoi
wcstol
api-ms-win-crt-string-l1-1-0
tolower
_stricmp
strncmp
towupper
toupper
iswprint
isspace
_strdup
strncpy
iswalnum
iswalpha
iswdigit
wcsncpy
_wcsicmp
wcspbrk
towlower
strcmp
iswspace
iswxdigit
api-ms-win-crt-math-l1-1-0
sin
sqrt
ceil
floor
lroundf
lround
cos
atan2
fmod
_fdopen
sinf
tanf
__setusermatherr
sqrtf
pow
fmodf
floorf
cosf
acosf
atan2f
ceilf
api-ms-win-crt-time-l1-1-0
_get_timezone
_gmtime64
_localtime64
_mktime64
_time64
_tzset
wcsftime
api-ms-win-crt-utility-l1-1-0
qsort
bsearch
api-ms-win-crt-environment-l1-1-0
getenv
_wgetenv
_wgetcwd
api-ms-win-crt-locale-l1-1-0
_free_locale
_create_locale
_configthreadlocale
setlocale
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 249KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ