Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
f0a8a1eef5920facdba4c8d148337a20_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0a8a1eef5920facdba4c8d148337a20_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
f0a8a1eef5920facdba4c8d148337a20_JaffaCakes118
Size
3.9MB
MD5
f0a8a1eef5920facdba4c8d148337a20
SHA1
5814502e2795abe48c56ab95751eb63f3754c100
SHA256
b674b4b65474b8752354198c4b332dbaeeb10b100d8117c56d76f9df79d70734
SHA512
7daea2d001d2c5efefd62f9c903087af88e2398f06c20d18e2439799070793ec39e6d601a5b17f7c439f8947cd484a1919d8a2717606b8e7228584608a3c738c
SSDEEP
98304:piHaONo0r392j8yPY82AJYsGpVKYrJiNmJ:Qs0L92Qs92hsGpVLJJ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\jenkins\workspace\minibaidu_tag_20160121_2.3.0_Normal\Basic\Output\BinRelease\LogicMisc.pdb
GdipCreateBitmapFromScan0
GdipAlloc
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipCloneImage
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToFile
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipFree
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
InterlockedDecrement
InterlockedCompareExchange
ConnectNamedPipe
OutputDebugStringW
WriteFile
TerminateThread
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapAlloc
CreateEventA
HeapFree
WaitForSingleObject
SetEvent
GetSystemTimeAsFileTime
LeaveCriticalSection
ReadFile
DisconnectNamedPipe
FlushFileBuffers
InterlockedExchange
GetLastError
QueueUserAPC
EnterCriticalSection
InterlockedExchangeAdd
CreateEventW
PostQueuedCompletionStatus
WaitForMultipleObjects
CreateIoCompletionPort
DeleteCriticalSection
OutputDebugStringA
TlsAlloc
CloseHandle
TlsFree
TlsGetValue
TlsSetValue
WideCharToMultiByte
GetTickCount
Sleep
InitializeCriticalSection
CreateFileW
SetLastError
MultiByteToWideChar
GetProcAddress
GetCurrentThreadId
lstrlenW
lstrlenA
SleepEx
CreateWaitableTimerW
LocalFree
FormatMessageW
GetQueuedCompletionStatus
GetCurrentProcessId
GetFileSize
CreateSemaphoreA
ReleaseSemaphore
GlobalAlloc
GlobalFree
LoadLibraryW
GetModuleFileNameW
FreeLibrary
GetPrivateProfileStringW
GlobalLock
GlobalUnlock
GetLocalTime
GetTempPathW
FormatMessageA
GetModuleHandleA
GetSystemInfo
OpenMutexW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
DeleteFileW
GetFileAttributesW
CreateDirectoryW
GetLogicalDriveStringsW
GetDriveTypeW
QueryPerformanceFrequency
QueryPerformanceCounter
VirtualQuery
GetModuleFileNameA
GetCurrentProcess
DeviceIoControl
FindFirstFileW
FindNextFileW
AreFileApisANSI
GetDiskFreeSpaceExW
MoveFileExW
InterlockedIncrement
SetWaitableTimer
CreateFileA
RemoveDirectoryW
FindClose
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
DecodePointer
EncodePointer
LCMapStringW
CreateWaitableTimerA
LCMapStringA
GetStringTypeExW
GetStringTypeExA
SystemTimeToFileTime
ResumeThread
ResetEvent
OpenEventA
RaiseException
LoadLibraryA
GetTempPathA
LocalAlloc
GetUserDefaultLCID
MessageBoxW
GetWindowRect
GetDC
FindWindowW
PostMessageW
ReleaseDC
DrawIconEx
GetIconInfo
LoadImageW
LoadStringA
LoadStringW
EmptyClipboard
SetClipboardData
OpenClipboard
CloseClipboard
SetDIBColorTable
CreateDIBSection
GetObjectW
DeleteDC
CreateCompatibleDC
DeleteObject
SelectObject
GetDIBits
MapGenericMask
DuplicateToken
OpenProcessToken
GetFileSecurityW
RegEnumKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AccessCheck
SHGetSpecialFolderPathW
SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW
ExtractIconExW
SHGetFolderPathW
CoCreateInstance
CoInitialize
CoTaskMemFree
InternetSetCookieExW
InternetGetCookieW
?do_length@?$codecvt@_WDH@std@@MBEHABHPBD1I@Z
??1?$codecvt@_WDH@std@@MAE@XZ
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@_WDH@std@@2V0locale@2@A
??0_Locimp@locale@std@@AAE@ABV012@@Z
??1_Locimp@locale@std@@MAE@XZ
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
??0?$codecvt@DDH@std@@QAE@I@Z
?do_max_length@codecvt_base@std@@MBEHXZ
?do_encoding@codecvt_base@std@@MBEHXZ
?do_in@?$codecvt@DDH@std@@MBEHAAHPBD1AAPBDPAD3AAPAD@Z
?do_out@?$codecvt@DDH@std@@MBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?id@?$ctype@_W@std@@2V0locale@2@A
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Incref@facet@locale@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
??1_Container_base12@std@@QAE@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_BADOFF@std@@3_JB
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xinvalid_argument@std@@YAXPBD@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPAD_J@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?tolower@?$ctype@D@std@@QBEDD@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
?do_unshift@?$codecvt@DDH@std@@MBEHAAHPAD1AAPAD@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
_Stollx
?toupper@?$ctype@_W@std@@QBE_W_W@Z
_Mbrtowc
?classic@locale@std@@SAABV12@XZ
?id@?$numpunct@_W@std@@2V0locale@2@A
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@UAE@XZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
_Inf
_Nan
_FNan
_FInf
?do_length@?$codecvt@DDH@std@@MBEHABHPBD1I@Z
??1?$codecvt@DDH@std@@MAE@XZ
?pubimbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??0?$codecvt@_WDH@std@@QAE@I@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
closesocket
WSASetLastError
WSACleanup
setsockopt
WSAGetLastError
select
WSASend
WSAStartup
ioctlsocket
gethostname
gethostbyname
inet_ntoa
_stricmp
?before@type_info@@QBEHABV1@@Z
_CIpow
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
_vsnprintf
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
__clean_type_info_names_internal
sprintf
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
_gmtime64
??8type_info@@QBE_NABV0@@Z
memmove
??_V@YAXPAX@Z
_purecall
??3@YAXPAX@Z
??2@YAPAXI@Z
free
malloc
strchr
sprintf_s
??0exception@std@@QAE@XZ
atoi
_vsnwprintf_s
_snwprintf_s
_wcstoui64
_time64
??9type_info@@QBE_NABV0@@Z
strncmp
tolower
strstr
_beginthreadex
memchr
fgetc
fopen_s
fseek
ftell
towlower
_wfopen_s
fprintf
fflush
fclose
toupper
fread
_wtof
_vscwprintf
_atoi64
srand
rand
memcpy_s
_resetstkoflw
calloc
_recalloc
_wfopen
fwrite
setlocale
wcsncpy
_wtoi
_vswprintf_c_l
wctob
_waccess
towupper
fopen
_snprintf
_wtoi64
wcsncat
wcsstr
wcschr
_itow_s
fputc
ungetc
swprintf_s
wcscpy_s
strncpy
_wrename
_lock_file
_unlock_file
_fseeki64
fgetpos
fsetpos
setvbuf
_itoa
iswspace
_localtime64
_stat64i32
memcpy
memset
__CxxFrameHandler3
_CxxThrowException
__iob_func
ldiv
_strtoi64
_strtoui64
strtoul
strtol
_errno
strerror
strtod
__RTDynamicCast
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
PathAppendW
PathFileExistsW
StrToInt64ExA
StrStrIW
PathRemoveFileSpecW
URLDownloadToFileW
URLDownloadToFileA
??0CChromeCoreHelper@@QAE@ABV0@@Z
??0UIReport@@QAE@ABV0@@Z
??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??1CChromeCoreHelper@@QAE@XZ
??4CChromeCoreHelper@@QAEAAV0@ABV0@@Z
??4UIReport@@QAEAAV0@ABV0@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
?ElapseTickCount@logicmisc@@YAII@Z
?FileHaveAccess@logicmisc@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z
?GetSearchEngineName@logicmisc@@YA_NHPA_WPAI@Z
?GetSearchEngineQueryStr@logicmisc@@YA_NHPA_WPAI@Z
?GetSingleton_AccountLogin@@YAPAVIAccountLogin@@XZ
?GetSingleton_Autocomplete@@YAPAVIAutocomplete@@XZ
?GetSingleton_BaiduServiceMisc@@YAPAVIBaiduServiceMisc@@XZ
?GetSingleton_BlankTabOperator@@YAPAVIBlankTabOperator@@XZ
?GetSingleton_Bookmark@@YA?AV?$shared_ptr@VIBookmarkModel@Bookmarks@@@boost@@XZ
?GetSingleton_DataService@@YAPAVIDataService@DataService@@XZ
?GetSingleton_ExpressionCalculate@@YAPAVIExpressionCalculate@@XZ
?GetSingleton_ExternalService@@YAPAVIExternalService@@XZ
?GetSingleton_ForceSugManager@@YAPAVIForceSugManager@@XZ
?GetSingleton_IconManager@@YAPAVIIconManager@@XZ
?GetSingleton_JPProxyManager@@YAPAUIJPProxyManager@@XZ
?GetSingleton_JsInjectManager@@YAPAVIJsInjectManager@@XZ
?GetSingleton_LapudaApi@@YAPAVILapudaApi@lapuda@@XZ
?GetSingleton_LocalSearch@@YAPAVILocalSearch@@XZ
?GetSingleton_LocationServiceProvider@@YAPAVILocationServiceProvider@@XZ
?GetSingleton_MuteMgr@@YAPAVIMuteMgr@@XZ
?GetSingleton_NonUserDiskAppStorageManager@@YA?AV?$shared_ptr@VIAppStorageManager@@@boost@@XZ
?GetSingleton_NonUserMemoryAppStorageManager@@YA?AV?$shared_ptr@VIAppStorageManager@@@boost@@XZ
?GetSingleton_OpenRecentPage@@YAPAVIOpenRecentPage@@XZ
?GetSingleton_PandoraMgr@@YAPAVIPandoraMgr@@XZ
?GetSingleton_ProgramStateMgr@@YAPAVIProgramStateMgr@@XZ
?GetSingleton_QueryWordsMgr@@YAPAVIQueryKeywordsFromNet@@XZ
?GetSingleton_SearchBarInTipsMgr@@YAPAVISearchBarInTips@@XZ
?GetSingleton_SettingCenterMgr@@YAPAVISettingCenterMgr@@XZ
?GetSingleton_SoftwareMgr@@YAPAVISoftwareManager@@XZ
?GetSingleton_StartUpAppMgr@@YAPAVIStartUpAppMgr@@XZ
?GetSingleton_UserAppStorageManager@@YA?AV?$shared_ptr@VIAppStorageManager@@@boost@@XZ
?GetSingleton_WordListMgr@@YAPAVIWordListManager@@XZ
?GetTestUrl@logicmisc@@YA?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?IsDownloadToolInstalled@logicmisc@@YA_NH@Z
?LogicMiscCreateFactory@@YAJABU_GUID@@PAPAX@Z
?ModifyUrlForBuiltInTest@logicmisc@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV23@@Z
GetErrorNotifyService
LogicMiscDllInit
LogicMiscDllUnInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ