Steam Account Generator.rar
- SHA256 b64af0282dc752c1dccf4267c8abd0f2bcf9c791f944baf3cb4bb47efa208fbb
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Steam Account Generator/SteamAccCreator.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
19 signatures
300 seconds
General
- Target Steam Account Generator.rar
- Size 6.4MB
- Sample260603-tj5bkabv21
- SHA256 b64af0282dc752c1dccf4267c8abd0f2bcf9c791f944baf3cb4bb47efa208fbb
- MD5 6da941dd3dc5148c76483e9e5fcc920d
- SHA1 f02e7b4edb49fc05f4384edc6b5ee09de26847d9
- SHA512 c4e600fde14c450eb6291cf92fa4ff52394e65f6e501803d91d668d402bf14bb8d1966d6ba3549dd112370d1e6541b797f6a31a1a9601097a24158b371c21470
- SSDEEP 98304:EfF+sFdZS9SHuIuRG09bvqOJBibTtr+WhK5l75Kj+TeqSqIW/xdSblFf4uhFz:Ef4Kd0Szuw05yGibTty8CtTe5ri4D4Gz
- TLSH T1BC663393617BD77916AC22EDB0C85E25C59370B42D1C3138838F686BB65F7981C63B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- SmartAssembly .NET packer 1 IoCs
Detects SmartAssembly .NET packer.
resource yara_rule static1/unpack001/Steam Account Generator/data/Launcher.exe SmartAssembly - Unsigned PE 6 IoCs
Checks for missing Authenticode signature.
resource unpack001/Steam Account Generator/CaptchaHelper.dll unpack001/Steam Account Generator/SteamAccCreator.exe unpack001/Steam Account Generator/data/CaptchaHelper.dll unpack001/Steam Account Generator/data/Ionic.Zip.dll unpack001/Steam Account Generator/data/Launcher.exe unpack001/Steam Account Generator/data/softSteam.exe
File Explorer
-
Steam Account Generator.rar.rar 6.4MB
-
Steam Account Generator/CaptchaHelper.dll.dll 365KB
-
Steam Account Generator/LICENSE1KB
-
Steam Account Generator/Note on captcha Service.txt109B
-
Steam Account Generator/SteamAccCreator.exe.exe 182KB
-
Steam Account Generator/Virus Total/desktop.ini44B
-
Steam Account Generator/Virus Total/scan.txt109B
-
Steam Account Generator/accounts.txt804B
-
Steam Account Generator/data/CaptchaHelper.dll.dll 365KB
-
Steam Account Generator/data/Ionic.Zip.dll.dll 480KB
-
Steam Account Generator/data/LICENCE.dat.zip 74KB
-
Steam Account Generator/data/LICENSE1KB
-
Steam Account Generator/data/Launcher.exe.exe 53KB
-
Steam Account Generator/data/Note on captcha Service.txt109B
-
Steam Account Generator/data/accounts.txt804B
-
Steam Account Generator/data/softSteam.exe.exe 7.3MB
Steam Account Generator/CaptchaHelper.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b5b616355415ef91e47de69bbb79166c97484d87a66184b7091b4eacce9ea0b9
- MD5 474ec9b5e8abca60a9ed693f8cd34301
- SHA1 89f8ff7e1f526ebb2ddb612a4bce84c5ff221521
- SHA512 d4f5294937e7e50787f5e4227f203b3f8ce62f7f622eaddd9c5c6fb417fd0e28e5f76a2b4bfcff58a437e0ece0559b8f1796b237680ef9f66e7816462e8a9b67
- SSDEEP 6144:hSYBOyfnrsT1HX2xkgxGxXjzkFE1Cle95gMAWTBlLgZHW9aCa7muTBbDdQZTAzK7:oAsT1HX2xkgxGFjzkFE1Cle95gMAWTBR
- TLSH T18F84621817268B49E87606BC0953851093F8597A126AFB095FC35AF2FE5FBC29D8CCC7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
378990
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Dropbox\Dev\ag.v66\Libraries\VMRuntime\obj\Release\AgileDotNet.VMRuntime.pdb
mscoree
_CorDllMain
Name
.text
Size
362KB
Virtual Size
362KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Steam Account Generator/LICENSE
- SHA256 83e4dd21429a91fb7cea67a476032a9641425e5355df2e0f589a738b6ec9fd2c
- MD5 c25dca6f05d3d0d952c7fe9373c8b429
- SHA1 92a340eb569b2580706dbdf1057f0796df7cc29f
- SHA512 315dd0b0b9d3e310c1a78a0b451a4374f1caa9397027a4c0474d7f6e8ba2ac9199132ab82a285dccf6da3f4dd2689da383649cb8c7f4c4e387e9cc6cb13441cd
- TLSH T1EA11751E72510B72289B13605578ACD5F23BB25F7A5F2A84146DF345233A06CD5FB840
- MD5 SHA1 SHA512 TLSH
Steam Account Generator/Note on captcha Service.txt
- SHA256 adcfa6810102e0a7340c4922e774dd901ec7cd3003b273b528514111e60d76c6
- MD5 a3f8b62377d0fd855e27d1e6fc84598b
- SHA1 17cefb7053df022a5842695e70305d6322815563
- SHA512 86123cd00b36213b31c727209349e9c0beced71316f247f80917e0f6d4e760d3661a12204be920b3caa41dce370d2405e312c8c7c3324b8b6b01303b550a3335
- TLSH T11DB09273055846210F07029A24433608F28AA468B4E8708CA6F6802423D4DA94085D4B
- MD5 SHA1 SHA512 TLSH
Steam Account Generator/SteamAccCreator.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 af8391284e328f9637a8ae6ff5a47fb41e7999ee326afc34377c9e4f5a348f78
- MD5 c4ff1db06b241321b6599871a029db64
- SHA1 a9337ac2f4f21edb4a4c72b4f11b7b6f45a9b4df
- SHA512 356354e21558a1005e28e6b07f199a54ea790f806adee102889f97e07052ab3b6895312fc2f4d2282a5c2817267d251c639e132f3b7d3158f94aae7d31223573
- SSDEEP 768:mec4lj/7ePn4bn+MqnQJLsu2OaLURzI/CIBhvYz5j7ZHF7:24l/ePon+5nEsu2V+zgCXz5n7
- TLSH T192048D096DC94E2EC9F44A79F9BD70E212415FE87FA387997E6CF0E216B11243E42643
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19414
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb
mscoree
_CorExeMain
Name
.text
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
170KB
Virtual Size
170KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Steam Account Generator/Virus Total/desktop.ini
- SHA256 d80758a34364cab9de42ff6ed57bcc753a0936ddddf9952c5b4fb9ff0d7966c9
- MD5 c279803b27f13369aa54fc9b84b72468
- SHA1 01d430e118952d9e077fdcd7ff13084d375995dc
- SHA512 2ba7cfe2fd561a0cc4fdc39ab7e6fe9ea9aee8618afe31030a0a79af06542b83ef66ec4817c646f027e1733263cb46a9a9b6432f01f6a938fa29080a59e44678
- MD5 SHA1 SHA512
Steam Account Generator/Virus Total/scan.txt
- SHA256 f2f02c614c4a88b423ad0a404f7f5e7c1d33c5445e75f3d6f651ae6e791cdd57
- MD5 2e99fbaf1ad4f921ebe1ba0adb710c25
- SHA1 6335db361e4666581ca3fd9d594ab1827dba734c
- SHA512 ac7ccfcc0fd077218cfc8130d587ef03f2e2ca539b052e1f8c224f46a000884b1da1c7daa43600f767b8f3c4da545e0a3832f75caa771022281dbf75ef1ea175
- TLSH T14AB012F7942A609DCB3308B7F4D8CBDC57634D56C9C46CC0E3E31BA480E01685850092
- MD5 SHA1 SHA512 TLSH
Steam Account Generator/accounts.txt
- SHA256 520c0e37a368f110c5e66bb87e8439e060b9a8cb15a60ff840b89d9df920cd80
- MD5 a433c0c837bce015f1addad501fbaaf3
- SHA1 bda4c3ed5df84f8a45fd5c334216fc8e1207948f
- SHA512 74d80b360044ebdfbaa5ff0355d555057edd5f4701e3b16b502fa588e7737774ab76a85a9f4ca2caebc486bda53a3aac083f844c5e259d7af626569f690d5b6f
- TLSH T1E801CE021125675F47C1F7F12E871156C3829422AA62A4F7C26A6B0D43DFCC52A97968
- MD5 SHA1 SHA512 TLSH
Steam Account Generator/data/CaptchaHelper.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b5b616355415ef91e47de69bbb79166c97484d87a66184b7091b4eacce9ea0b9
- MD5 474ec9b5e8abca60a9ed693f8cd34301
- SHA1 89f8ff7e1f526ebb2ddb612a4bce84c5ff221521
- SHA512 d4f5294937e7e50787f5e4227f203b3f8ce62f7f622eaddd9c5c6fb417fd0e28e5f76a2b4bfcff58a437e0ece0559b8f1796b237680ef9f66e7816462e8a9b67
- SSDEEP 6144:hSYBOyfnrsT1HX2xkgxGxXjzkFE1Cle95gMAWTBlLgZHW9aCa7muTBbDdQZTAzK7:oAsT1HX2xkgxGFjzkFE1Cle95gMAWTBR
- TLSH T18F84621817268B49E87606BC0953851093F8597A126AFB095FC35AF2FE5FBC29D8CCC7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
378990
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Dropbox\Dev\ag.v66\Libraries\VMRuntime\obj\Release\AgileDotNet.VMRuntime.pdb
mscoree
_CorDllMain
Name
.text
Size
362KB
Virtual Size
362KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Steam Account Generator/data/Ionic.Zip.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 17bb0c9be45289a2be56a5f5a68ec9891d7792b886e0054bc86d57fe84d01c89
- MD5 f6933bf7cee0fd6c80cdf207ff15a523
- SHA1 039eeb1169e1defe387c7d4ca4021bce9d11786d
- SHA512 88675512daa41e17ce4daf6ca764ccb17cd9633a7c2b7545875089cae60f6918909a947f3b1692d16ec5fa209e18e84bc0ff3594f72c3e677a6cca9f3a70b8d6
- SSDEEP 6144:OhagC/Mq25o9sXGtSV41OJDsTDDVUMle6ZjxLV/kHu4Bht79I9:iagxWS4msNUCe65fkHdBf9
- TLSH T183A4AD0427E90A55F4BE5BBAC0B69260C3B1B4166D6FD70F4EE020EE2D37790D9147AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
497294
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb
mscoree
_CorDllMain
Name
.text
Size
478KB
Virtual Size
477KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Steam Account Generator/data/LICENCE.dat
- SHA256 3147a9c9015f7e54c8acdb8d413da93ef3e4b04fb27ec578dcd188a70bb53301
- MD5 f7d55578b3709f1519805272e3e64c33
- SHA1 5f1f8f05a629052ef5289c0f7e438625c559339d
- SHA512 3a853dd66f731dc0c929b1f65f28a64a51e47c82058e05689e6ca0877d50bcd32503c734bf1e4f246f3cf341029496685cf4c741d0af54f0428f07ded24b65fd
- SSDEEP 1536:e+tepwZ57dDgyzGa3RgTsQcnP7oF/si4JZbDDm4X16PZfisWNADQ0bVC86WGTmL:dzBxzV37TnsZs7UPliFR6gWGa
- TLSH T1D7731203EB1DECF9C2A8D86F516ED379AF68641F7A4F0F2A754102D15331D8608F2696
- MD5 SHA1 SHA512 SSDEEP TLSH
Steam Account Generator/data/LICENSE
- SHA256 83e4dd21429a91fb7cea67a476032a9641425e5355df2e0f589a738b6ec9fd2c
- MD5 c25dca6f05d3d0d952c7fe9373c8b429
- SHA1 92a340eb569b2580706dbdf1057f0796df7cc29f
- SHA512 315dd0b0b9d3e310c1a78a0b451a4374f1caa9397027a4c0474d7f6e8ba2ac9199132ab82a285dccf6da3f4dd2689da383649cb8c7f4c4e387e9cc6cb13441cd
- TLSH T1EA11751E72510B72289B13605578ACD5F23BB25F7A5F2A84146DF345233A06CD5FB840
- MD5 SHA1 SHA512 TLSH
Steam Account Generator/data/Launcher.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 0d87b9b141a592711c52e7409ec64de3ab296cddc890be761d9af57cea381b32
- MD5 c6d4c881112022eb30725978ecd7c6ec
- SHA1 ba4f96dc374195d873b3eebdb28b633d9a1c5bf5
- SHA512 3bece10b65dfda69b6defbf50d067a59d1cd1db403547fdf28a4cbc87c4985a4636acfcff8300bd77fb91f2693084634d940a91517c33b5425258835ab990981
- SSDEEP 768:FKtnBTTQi/YqMFlVt52ftDhKeoNzZq8OujxUu5XEAb4b9yvMzUV5:qBTUgYFveDRuFEAb4b99QV5
- TLSH T11B332A489A4C9773C9ED46BE98E366904375C02B6B47E70FBC8982345E133EA194279F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
SmartAssembly .NET packer
Detects SmartAssembly .NET packer.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
59614
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Steam Account Generator/data/Note on captcha Service.txt
- SHA256 adcfa6810102e0a7340c4922e774dd901ec7cd3003b273b528514111e60d76c6
- MD5 a3f8b62377d0fd855e27d1e6fc84598b
- SHA1 17cefb7053df022a5842695e70305d6322815563
- SHA512 86123cd00b36213b31c727209349e9c0beced71316f247f80917e0f6d4e760d3661a12204be920b3caa41dce370d2405e312c8c7c3324b8b6b01303b550a3335
- TLSH T11DB09273055846210F07029A24433608F28AA468B4E8708CA6F6802423D4DA94085D4B
- MD5 SHA1 SHA512 TLSH
Steam Account Generator/data/accounts.txt
- SHA256 520c0e37a368f110c5e66bb87e8439e060b9a8cb15a60ff840b89d9df920cd80
- MD5 a433c0c837bce015f1addad501fbaaf3
- SHA1 bda4c3ed5df84f8a45fd5c334216fc8e1207948f
- SHA512 74d80b360044ebdfbaa5ff0355d555057edd5f4701e3b16b502fa588e7737774ab76a85a9f4ca2caebc486bda53a3aac083f844c5e259d7af626569f690d5b6f
- TLSH T1E801CE021125675F47C1F7F12E871156C3829422AA62A4F7C26A6B0D43DFCC52A97968
- MD5 SHA1 SHA512 TLSH
Steam Account Generator/data/softSteam.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 9ec1318b4b0092d33698ed1c097cf55864f3198fc6923eb603a3971b2f2a1037
- MD5 6e47d93dfbd753ab0bd5cc204cb3f98f
- SHA1 dfc6bf2d145c0c4fa26b999ae1746d005514fd51
- SHA512 33b36916e6bea2e3ad3850af173b3b6a66f530824bb1ee4aa22e43b546bf4b7e798f6805c974f3a202efc95f53dd70344b9422ac0f1483bd4f39b9e998703401
- SSDEEP 98304:60f9oGecFFmSCusdGmG5Pg+bg44H3dXcxMmw1OPkgIRazP0Mu8I5D/gH3y:60F3FFmfuYTGa44XFcxzkOGXDjD/E
- TLSH T143760148EF87CA3DEBB713F99A7503635EA19C00715393CB5F59B6340DB623016AD28A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7362322
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\ashes\source\repos\Steam-Account-Creator-master\SteamAccCreator\obj\Release\SteamAccCreator.pdb
mscoree
_CorExeMain
Name
.text
Size
7.0MB
Virtual Size
7.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
266KB
Virtual Size
265KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ