qt_plugin_instance
qt_plugin_query_metadata
Static task
static1
Behavioral task
behavioral1
Sample
b2d4aac1e151f61c10941100fc849400N.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b2d4aac1e151f61c10941100fc849400N.dll
Resource
win10v2004-20240802-en
Target
b2d4aac1e151f61c10941100fc849400N.exe
Size
177KB
MD5
b2d4aac1e151f61c10941100fc849400
SHA1
d5333496b31872e06dc2fea1d258273243b8b414
SHA256
28d9196ee3e690449b24e4d635eb9bb6c8ed4ecde7c4ce1ddeaf4babb4a1ca8f
SHA512
7ddbe56966ac65333b168a3bc30be256f8640b033d9aaa57b1ec6cba810aa48b887a2734abba4542d2a6456e63d5122e5c23d71ad4715883ebc9f281f8ae0e94
SSDEEP
3072:pdGzwPF4rH6/ikqlyeTMMmACukifjvEhiaiWi:f94meTMMmAQifjvEhiaiW
Checks for missing Authenticode signature.
resource |
---|
b2d4aac1e151f61c10941100fc849400N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
_Z5qHashRK7QStringj
_Z6qIsNaNd
_Z7qstrcmpRK10QByteArrayPKc
_Z9qIsFinited
_ZN10QArrayData10deallocateEPS_yy
_ZN10QArrayData11shared_nullE
_ZN10QArrayData8allocateEyyy6QFlagsINS_16AllocationOptionEE
_ZN10QByteArray11reallocDataEj6QFlagsIN10QArrayData16AllocationOptionEE
_ZN10QByteArray6numberEii
_ZN10QByteArray8truncateEi
_ZN10QByteArrayC1EPKci
_ZN10QJsonArray6appendERK10QJsonValue
_ZN10QJsonArrayC1ERKS_
_ZN10QJsonArrayC1Ev
_ZN10QJsonArrayD1Ev
_ZN10QJsonValue4swapERS_
_ZN10QJsonValueC1E13QLatin1String
_ZN10QJsonValueC1ENS_4TypeE
_ZN10QJsonValueC1ERK10QJsonArray
_ZN10QJsonValueC1ERK11QJsonObject
_ZN10QJsonValueC1ERK7QString
_ZN10QJsonValueC1Eb
_ZN10QJsonValueC1Ed
_ZN10QJsonValueC1Ei
_ZN10QJsonValueC1Ex
_ZN10QJsonValueD1Ev
_ZN11QDataStream9setDeviceEP9QIODevice
_ZN11QDataStreamC1EP9QIODevice
_ZN11QDataStreamC2Ev
_ZN11QDataStreamD1Ev
_ZN11QDataStreamD2Ev
_ZN11QDataStreamlsEb
_ZN11QDataStreamlsEi
_ZN11QDataStreamrsERb
_ZN11QDataStreamrsERi
_ZN11QJsonObject6insertE13QLatin1StringRK10QJsonValue
_ZN11QJsonObject6insertERK7QStringRK10QJsonValue
_ZN11QJsonObjectC1ERKS_
_ZN11QJsonObjectC1Ev
_ZN11QJsonObjectD1Ev
_ZN11QJsonObjectaSERKS_
_ZN11QJsonObjectixE13QLatin1String
_ZN11QJsonObjectixERK7QString
_ZN11QMetaObject10ConnectionD1Ev
_ZN11QMetaObject14normalizedTypeEPKc
_ZN11QMetaObject8activateEP7QObjectPKS_iPPv
_ZN11QTextStreamlsERK7QString
_ZN11QTextStreamlsEc
_ZN12QMapDataBase10createDataEv
_ZN12QMapDataBase10createNodeEiiP12QMapNodeBaseb
_ZN12QMapDataBase11shared_nullE
_ZN12QMapDataBase18recalcMostLeftNodeEv
_ZN12QMapDataBase8freeDataEPS_
_ZN12QMapDataBase8freeTreeEP12QMapNodeBasei
_ZN13QJsonDocument8fromJsonERK10QByteArrayP15QJsonParseError
_ZN13QJsonDocument9setObjectERK11QJsonObject
_ZN13QJsonDocumentC1Ev
_ZN13QJsonDocumentD1Ev
_ZN13QJsonValueRefaSERK10QJsonValue
_ZN13QMetaPropertyC1Ev
_ZN14QWaitCondition4waitEP6QMutex14QDeadlineTimer
_ZN14QWaitCondition7wakeAllEv
_ZN14QWaitConditionC1Ev
_ZN14QWaitConditionD1Ev
_ZN15QRecursiveMutexC1Ev
_ZN15QRecursiveMutexD1Ev
_ZN15QtSharedPointer20ExternalRefCountData9getAndRefEPK7QObject
_ZN18QMetaObjectPrivate6signalEPK11QMetaObjecti
_ZN4QUrlC1ERK7QStringNS_11ParsingModeE
_ZN4QUrlC1Ev
_ZN4QUrlD1Ev
_ZN5QChar15isLetter_helperEj
_ZN5QChar7toLowerEj
_ZN5QChar7toUpperEj
_ZN5QChar8categoryEj
_ZN6QDebug9putStringEPK5QChary
_ZN6QDebugD1Ev
_ZN6QMutex4lockEv
_ZN6QMutex6unlockEv
_ZN6QMutexD1Ev
_ZN7QBuffer4openE6QFlagsIN9QIODevice12OpenModeFlagEE
_ZN7QBuffer6bufferEv
_ZN7QBuffer7setDataERK10QByteArray
_ZN7QBufferC1EP7QObject
_ZN7QBufferD1Ev
_ZN7QObject10childEventEP11QChildEvent
_ZN7QObject10timerEventEP11QTimerEvent
_ZN7QObject11connectImplEPKS_PPvS1_S3_PN9QtPrivate15QSlotObjectBaseEN2Qt14ConnectionTypeEPKiPK11QMetaObject
_ZN7QObject11customEventEP6QEvent
_ZN7QObject11eventFilterEPS_P6QEvent
_ZN7QObject11qt_metacallEN11QMetaObject4CallEiPPv
_ZN7QObject11qt_metacastEPKc
_ZN7QObject12moveToThreadEP7QThread
_ZN7QObject13connectNotifyERK11QMetaMethod
_ZN7QObject14disconnectImplEPKS_PPvS1_S3_PK11QMetaObject
_ZN7QObject16disconnectNotifyERK11QMetaMethod
_ZN7QObject16staticMetaObjectE
_ZN7QObject5eventEP6QEvent
_ZN7QObject9destroyedEPS_
_ZN7QObject9setParentEPS_
_ZN7QObjectC1EPS_
_ZN7QObjectC2EPS_
_ZN7QObjectD2Ev
_ZN7QString11reallocDataEjb
_ZN7QString14toLower_helperERS_
_ZN7QString15fromUtf8_helperEPKci
_ZN7QString15toLatin1_helperERKS_
_ZN7QString17fromLatin1_helperEPKci
_ZN7QString6appendE5QChar
_ZN7QString6appendERKS_
_ZN7QString6numberEji
_ZN7QString6resizeEi5QChar
_ZN7QStringaSERKS_
_ZN8QVariant4dataEv
_ZN8QVariantC1ERK4QMapI7QStringS_E
_ZN8QVariantC1ERK5QListIS_E
_ZN8QVariantC1ERK7QString
_ZN8QVariantC1ERKS_
_ZN8QVariantD1Ev
_ZN8QVariantaSERKS_
_ZN9QFileInfoC1ERK7QString
_ZN9QFileInfoD1Ev
_ZN9QHashData11free_helperEPFvPNS_4NodeEE
_ZN9QHashData11shared_nullE
_ZN9QHashData12allocateNodeEi
_ZN9QHashData13detach_helperEPFvPNS_4NodeEPvEPFvS1_Eii
_ZN9QHashData6rehashEi
_ZN9QHashData8freeNodeEPv
_ZN9QHashData8nextNodeEPNS_4NodeE
_ZN9QIODevice11qt_metacallEN11QMetaObject4CallEiPPv
_ZN9QIODevice11qt_metacastEPKc
_ZN9QIODevice12readLineDataEPcx
_ZN9QIODevice16waitForReadyReadEi
_ZN9QIODevice19waitForBytesWrittenEi
_ZN9QIODevice4openE6QFlagsINS_12OpenModeFlagEE
_ZN9QIODevice4seekEx
_ZN9QIODevice5closeEv
_ZN9QIODevice5resetEv
_ZN9QIODeviceC2Ev
_ZN9QIODeviceD2Ev
_ZN9QListData11detach_growEPii
_ZN9QListData11shared_nullE
_ZN9QListData6appendEv
_ZN9QListData6detachEi
_ZN9QListData6removeEi
_ZN9QListData7disposeEPNS_4DataE
_ZN9QListData7reallocEi
_ZN9QMetaType22registerNormalizedTypeERK10QByteArrayPFvPvEPFS3_S3_PKvEi6QFlagsINS_8TypeFlagEEPK11QMetaObject
_ZN9QMetaType4saveER11QDataStreamiPKv
_ZNK10QByteArray6isNullEv
_ZNK10QJsonArray13toVariantListEv
_ZNK10QJsonArray2atEi
_ZNK10QJsonArray4sizeEv
_ZNK10QJsonArray7isEmptyEv
_ZNK10QJsonValue4typeEv
_ZNK10QJsonValue5toIntEi
_ZNK10QJsonValue6toBoolEb
_ZNK10QJsonValue7toArrayEv
_ZNK10QJsonValue8toObjectEv
_ZNK10QJsonValue8toStringEv
_ZNK10QJsonValue9toVariantEv
_ZNK10QStringRef4leftEi
_ZNK10QStringRef7indexOfE5QChariN2Qt15CaseSensitivityE
_ZNK10QStringRef8toLatin1Ev
_ZNK11QDataStream5atEndEv
_ZNK11QJsonObject12toVariantMapEv
_ZNK11QJsonObject5valueE13QLatin1String
_ZNK11QJsonObject5valueERK7QString
_ZNK11QJsonObject7isEmptyEv
_ZNK11QMetaMethod11methodIndexEv
_ZNK11QMetaMethod14invokeOnGadgetEPv22QGenericReturnArgument16QGenericArgumentS2_S2_S2_S2_S2_S2_S2_S2_S2_
_ZNK11QMetaMethod14parameterNamesEv
_ZNK11QMetaMethod4nameEv
_ZNK11QMetaObject13indexOfMethodEPKc
_ZNK11QMetaObject13propertyCountEv
_ZNK11QMetaObject15indexOfPropertyEPKc
_ZNK11QMetaObject4castEP7QObject
_ZNK11QMetaObject6methodEi
_ZNK11QMetaObject8propertyEi
_ZNK11QObjectData17dynamicMetaObjectEv
_ZNK12QMapNodeBase8nextNodeEv
_ZNK13QJsonDocument6objectEv
_ZNK13QJsonDocument6toJsonENS_10JsonFormatE
_ZNK13QJsonDocument9toVariantEv
_ZNK13QMetaProperty12isScriptableEPK7QObject
_ZNK13QMetaProperty15hasNotifySignalEv
_ZNK13QMetaProperty17notifySignalIndexEv
_ZNK13QMetaProperty4nameEv
_ZNK13QMetaProperty4readEPK7QObject
_ZNK13QMetaProperty8typeNameEv
_ZNK13QMetaProperty8userTypeEv
_ZNK14QMessageLogger7warningEv
_ZNK4QUrl8fileNameE6QFlagsINS_25ComponentFormattingOptionEE
_ZNK7QBuffer4dataEv
_ZNK7QObject10objectNameEv
_ZNK7QObject6threadEv
_ZNK7QObject8propertyEPKc
_ZNK7QString10startsWithE13QLatin1StringN2Qt15CaseSensitivityE
_ZNK7QString11lastIndexOfE5QChariN2Qt15CaseSensitivityE
_ZNK7QString3argERKS_i5QChar
_ZNK7QString3argEyii5QChar
_ZNK7QString3midEii
_ZNK7QString4leftEi
_ZNK7QString7indexOfE5QChariN2Qt15CaseSensitivityE
_ZNK7QString8endsWithERKS_N2Qt15CaseSensitivityE
_ZNK7QStringeqE13QLatin1String
_ZNK8QVariant11toJsonArrayEv
_ZNK8QVariant11toJsonValueEv
_ZNK8QVariant12toJsonObjectEv
_ZNK8QVariant14toJsonDocumentEv
_ZNK8QVariant5toMapEv
_ZNK8QVariant6toListEv
_ZNK8QVariant7convertEiPv
_ZNK8QVariant8toStringEv
_ZNK8QVariant8userTypeEv
_ZNK8QVariant9constDataEv
_ZNK9QFileInfo8fileNameEv
_ZNK9QIODevice10metaObjectEv
_ZNK9QIODevice11canReadLineEv
_ZNK9QIODevice12bytesToWriteEv
_ZNK9QIODevice12isSequentialEv
_ZNK9QIODevice14bytesAvailableEv
_ZNK9QIODevice3posEv
_ZNK9QIODevice4sizeEv
_ZNK9QIODevice5atEndEv
_ZeqRK7QStringS1_
_Zls6QDebugPK7QObject
_ZlsR11QDataStreamRK10QByteArray
_ZlsR11QDataStreamRK4QUrl
_ZlsR11QDataStreamRK7QString
_ZlsR11QDataStreamRK8QVariant
_ZltRK7QStringS1_
_ZrsR11QDataStreamR10QByteArray
_ZrsR11QDataStreamR4QUrl
_ZrsR11QDataStreamR7QString
_ZrsR11QDataStreamR8QVariant
_ZN10QQmlEngine16staticMetaObjectE
_ZN11QQmlBinding6createEPK16QQmlPropertyDataRK7QStringP7QObjectP15QQmlContextDataS5_t
_ZN11QQmlBinding6updateE6QFlagsIN16QQmlPropertyData9WriteFlagEE
_ZN11QQmlBinding9setTargetERK12QQmlProperty
_ZN11QQmlContext16staticMetaObjectE
_ZN12QQmlMetaType14prettyTypeNameEPK7QObject
_ZN12QQmlMetaType6isListEi
_ZN12QQmlMetaType7qmlTypeEPK11QMetaObject
_ZN12QQmlMetaType9isQObjectEi
_ZN12QQmlMetaType9toQObjectERK8QVariantPb
_ZN12QQmlPropertyC1EP7QObjectRK7QString
_ZN12QQmlPropertyC1EP7QObjectRK7QStringP11QQmlContext
_ZN12QQmlPropertyD1Ev
_ZN14QQmlExpression12valueChangedEv
_ZN14QQmlExpression16staticMetaObjectE
_ZN14QQmlExpression23setNotifyOnValueChangedEb
_ZN14QQmlExpression8evaluateEPb
_ZN14QQmlExpressionC1EP11QQmlContextP7QObjectRK7QStringS3_
_ZN14QQmlExpressionD1Ev
_ZN15QQmlContextData13asQQmlContextEv
_ZN15QV4DebugService11qt_metacallEN11QMetaObject4CallEiPPv
_ZN15QV4DebugService11qt_metacastEPKc
_ZN15QV4DebugService16staticMetaObjectE
_ZN15QV4DebugService5s_keyE
_ZN16QQmlDebugService11idForObjectEP7QObject
_ZN16QQmlDebugService13objectsForIdsEv
_ZN16QQmlDebugService15messageToClientERK7QStringRK10QByteArray
_ZN16QQmlDebugService16attachedToEngineEP9QJSEngine
_ZN16QQmlDebugService18detachedFromEngineEP9QJSEngine
_ZN16QQmlDebugServiceC2ERK7QStringfP7QObject
_ZN16QQmlDebugServiceD2Ev
_ZN17QQmlPropertyCache8propertyEP9QJSEngineP7QObjectRK10QStringRefP15QQmlContextDataR16QQmlPropertyData
_ZN17QQmlVMEMetaObject12setVmeMethodEiRKN3QV45ValueE
_ZN18QQmlDebugConnector19s_dataStreamVersionE
_ZN18QQmlDebugConnector8instanceEv
_ZN19QQmlPropertyPrivate10setBindingEP19QQmlAbstractBinding6QFlagsINS_11BindingFlagEES2_IN16QQmlPropertyData9WriteFlagEE
_ZN19QQmlPropertyPrivate13removeBindingERK12QQmlProperty
_ZN19QQmlPropertyPrivate16findSignalByNameEPK11QMetaObjectRK10QByteArray
_ZN19QQmlPropertyPrivate19setSignalExpressionERK12QQmlPropertyP25QQmlBoundSignalExpression
_ZN19QQmlPropertyPrivate20takeSignalExpressionERK12QQmlPropertyP25QQmlBoundSignalExpression
_ZN19QQmlPropertyPrivate7bindingERK12QQmlProperty
_ZN19QQmlPropertyPrivate7connectEPK7QObjectiS2_iiPi
_ZN20QQmlValueTypeFactory11isValueTypeEi
_ZN20QQmlValueTypeFactory21metaObjectForMetaTypeEi
_ZN22QQmlEngineDebugService11qt_metacallEN11QMetaObject4CallEiPPv
_ZN22QQmlEngineDebugService11qt_metacastEPKc
_ZN22QQmlEngineDebugService16staticMetaObjectE
_ZN22QQmlEngineDebugService5s_keyE
_ZN23QQmlDebugServiceFactory11qt_metacallEN11QMetaObject4CallEiPPv
_ZN23QQmlDebugServiceFactory11qt_metacastEPKc
_ZN23QQmlDebugServiceFactory16staticMetaObjectE
_ZN24QQmlJavaScriptExpression12evalFunctionEP15QQmlContextDataP7QObjectRK7QStringS6_t
_ZN25QQmlBoundSignalExpressionC1EP7QObjectiP15QQmlContextDataS1_RK7QStringS6_ttS6_S6_
_ZN3QV410QmlContext6createEPNS_16ExecutionContextEP15QQmlContextDataP7QObject
_ZN3QV414ObjectIterator24nextPropertyNameAsStringEPNS_5ValueE
_ZN3QV414ObjectIterator4nextEPNS_8PropertyEPNS_18PropertyAttributesE
_ZN3QV414QObjectWrapper13wrap_slowPathEPNS_15ExecutionEngineEP7QObject
_ZN3QV415ExecutionEngine11setDebuggerEPNS_9Debugging8DebuggerE
_ZN3QV415ExecutionEngine14catchExceptionEP7QVectorINS_10StackFrameEE
_ZN3QV415ExecutionEngine14newArrayObjectEi
_ZN3QV415ExecutionEngine9newObjectEv
_ZN3QV415ExecutionEngine9newStringERK7QString
_ZN3QV415PersistentValue3setEPNS_15ExecutionEngineEPNS_4Heap4BaseE
_ZN3QV415PersistentValue3setEPNS_15ExecutionEngineEy
_ZN3QV415PersistentValueC1EPNS_15ExecutionEngineERKNS_5ValueE
_ZN3QV415PersistentValueD1Ev
_ZN3QV45Value13toBooleanImplES0_
_ZN3QV46Script3runEPKNS_5ValueE
_ZN3QV46Script5parseEv
_ZN3QV46ScriptD1Ev
_ZN3QV47Runtime11TypeofValue4callEPNS_15ExecutionEngineERKNS_5ValueE
_ZN3QV49Debugging8Debugger11qt_metacallEN11QMetaObject4CallEiPPv
_ZN3QV49Debugging8Debugger11qt_metacastEPKc
_ZN3QV49Debugging8Debugger16staticMetaObjectE
_ZN5QtQml10qmlContextEPK7QObject
_ZN5QtQml18qmlExecuteDeferredEP7QObject
_ZN5QtQml9qmlEngineEPK7QObject
_ZN8QJSValueC1ENS_12SpecialValueE
_ZN8QJSValueC1ERKS_
_ZN8QJSValueD1Ev
_ZN8QQmlTypeD1Ev
_ZNK10QQmlEngine11rootContextEv
_ZNK11QQmlContext13contextObjectEv
_ZNK11QQmlContext6engineEv
_ZNK11QQmlContext7isValidEv
_ZNK12QQmlProperty10isPropertyEv
_ZNK12QQmlProperty12isResettableEv
_ZNK12QQmlProperty4readEv
_ZNK12QQmlProperty5resetEv
_ZNK12QQmlProperty5writeERK8QVariant
_ZNK12QQmlProperty7isValidEv
_ZNK15QQmlBoundSignal10expressionEv
_ZNK15QQmlContextData12findObjectIdEPK7QObject
_ZNK15QQmlContextData3urlEv
_ZNK15QQmlContextData9urlStringEv
_ZNK15QV4DebugService10metaObjectEv
_ZNK16QQmlDebugService4nameEv
_ZNK16QQmlDebugService5stateEv
_ZNK16QQmlDebugService7versionEv
_ZNK17QQmlVMEMetaObject9vmeMethodEi
_ZNK19QQmlPropertyPrivate11signalIndexEv
_ZNK25QQmlBoundSignalExpression10expressionEv
_ZNK3QV413CppStackFrame10lineNumberEv
_ZNK3QV413CppStackFrame10thisObjectEv
_ZNK3QV413CppStackFrame6sourceEv
_ZNK3QV413CppStackFrame8functionEv
_ZNK3QV415ExecutionEngine10qmlContextEv
_ZNK3QV415ExecutionEngine10stackTraceEi
_ZNK3QV415ExecutionEngine14currentContextEv
_ZNK3QV44Heap13InternalClass5keyAtEj
_ZNK3QV44Heap6String14simplifyStringEv
_ZNK3QV45Value16toQStringNoThrowEv
_ZNK3QV46String21createPropertyKeyImplEv
_ZNK8QJSValue9toVariantEv
_ZNK8QQmlType6createEv
_ZTV15QV4DebugService
_ZTV22QQmlEngineDebugService
_ZTV23QQmlDebugServiceFactory
_ZTVN3QV49Debugging8DebuggerE
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
memcpy
realloc
signal
strcmp
strlen
strncmp
vfprintf
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZdlPv
_ZdlPvy
_Znwy
__cxa_guard_acquire
__cxa_guard_release
__cxa_pure_virtual
qt_plugin_instance
qt_plugin_query_metadata
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ