ac16ae9bd06ad2d2f2246e8a3ca9cd5c6b1867387aae90a6bc299dafb59cd1b5

Sharing

Copy URL

Twitter E-mail

General

Target

ac16ae9bd06ad2d2f2246e8a3ca9cd5c6b1867387aae90a6bc299dafb59cd1b5
Size

9.9MB
MD5

91c62456318590946e8cd36539a249a9
SHA1

50369852776c41c8ddf97fd8e446d0c4d981dcd4
SHA256

ac16ae9bd06ad2d2f2246e8a3ca9cd5c6b1867387aae90a6bc299dafb59cd1b5
SHA512

47662c2bb1cd6584ff66c289d6143d1431f91355e9ecdf1160d4d424a62e2d7ca8394f908249db0128c004895a0122ffaf6448f4ab5a36caed115ef8c81c1e6c
SSDEEP

98304:3l9h+jbFYm1hJYl2Y75WPA+hbSsDRbzdF/hyE9QtbwRSn0ZSO/DGveU:3Xh+fFJ1bm28IAGFdF/hMUZ/oeU

Score

N/A

Malware Config

Signatures

Files

ac16ae9bd06ad2d2f2246e8a3ca9cd5c6b1867387aae90a6bc299dafb59cd1b5
.exe windows x86

a9b575ca12aaa8ee9093fceb70bde33f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

32:6f:f0:2b:88:00:31:7e:02:a8:d7:59:f4:50:0b:b2
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

18-12-2019 00:00

Not After

27-01-2021 23:59

Subject

CN=Mail.Ru LLC,O=Mail.Ru LLC,L=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

32:6f:f0:2b:88:00:31:7e:02:a8:d7:59:f4:50:0b:b2
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

18-12-2019 00:00

Not After

27-01-2021 23:59

Subject

CN=Mail.Ru LLC,O=Mail.Ru LLC,L=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23-12-2017 00:00

Not After

22-03-2029 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

cd:c2:e2:2d:7b:f7:6a:7a:d4:75:c9:40:8f:b9:45:ec:9f:b6:0f:5f:9e:0b:74:cf:c5:8b:68:26:8f:9e:28:71
Signer

Actual PE Digest

cd:c2:e2:2d:7b:f7:6a:7a:d4:75:c9:40:8f:b9:45:ec:9f:b6:0f:5f:9e:0b:74:cf:c5:8b:68:26:8f:9e:28:71

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Mail.Ru LLC,O=Mail.Ru LLC,L=Moscow,C=RU

13-03-2020 11:37
Valid: false

52:63:c3:f1:a7:a3:c6:79:7f:8b:a7:71:d3:f8:b8:a0:3a:66:b5:35
Signer

Actual PE Digest

52:63:c3:f1:a7:a3:c6:79:7f:8b:a7:71:d3:f8:b8:a0:3a:66:b5:35

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Mail.Ru LLC,O=Mail.Ru LLC,L=Moscow,C=RU

13-03-2020 11:36
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

icmp

IcmpCloseHandle
IcmpSendEcho
IcmpCreateFile

shlwapi

PathCreateFromUrlW
StrRetToStrW
PathCombineW

wininet

InternetCloseHandle
InternetCrackUrlW
HttpOpenRequestW
HttpSendRequestW
InternetConnectW
InternetOpenA
InternetSetOptionW
HttpQueryInfoW

comdlg32

GetSaveFileNameW
GetOpenFileNameW

authz

AuthzAccessCheck
AuthzFreeResourceManager
AuthzInitializeResourceManager
AuthzFreeContext
AuthzInitializeContextFromSid

msimg32

AlphaBlend

ws2_32

htons
htonl
freeaddrinfo
setsockopt
WSAAddressToStringW
WSCGetProviderPath
getsockname
gethostbyname
listen
getaddrinfo
bind
closesocket
socket
inet_ntoa
ioctlsocket
WSAGetLastError
connect
inet_addr
getnameinfo
WSCEnumProtocols

shell32

SHBindToParent
DragQueryFileW
DragAcceptFiles
Shell_NotifyIconW
SHCreateStdEnumFmtEtc
ShellExecuteExW
DragFinish
SHGetFolderPathW
SHGetFileInfoW
SHChangeNotify
SHFileOperationW
SHAppBarMessage
ShellExecuteW

user32

MoveWindow
CreateWindowExW
PeekMessageW
MonitorFromWindow
MessageBoxA
SetTimer
AllowSetForegroundWindow
WindowFromPoint
BeginPaint
FrameRect
RegisterWindowMessageW
FillRect
DispatchMessageW
EnumWindows
GetClassInfoW
SetActiveWindow
GetActiveWindow
GetKeyboardLayoutList
EnumChildWindows
ReleaseCapture
LoadCursorW
SetCapture
GetCapture
GetCursorInfo
CharLowerBuffW
GetSystemMetrics
PostMessageW
SetWindowLongW
CharUpperBuffW
GetClientRect
LoadImageA
ShowCursor
SetClipboardData
GetClipboardData
ClientToScreen
IsIconic
GetMonitorInfoW
ShowWindow
CharUpperW
DefWindowProcW
SetForegroundWindow
GetForegroundWindow
GetAsyncKeyState
MapVirtualKeyExW
EnableWindow
GetShellWindow
DestroyWindow
RegisterClassW
CharNextW
GetWindowThreadProcessId
RedrawWindow
GetDC
SetFocus
ReleaseDC
EndPaint
TrackMouseEvent
GetParent
MessageBeep
MessageBoxW
SetClassLongW
RegisterHotKey
MsgWaitForMultipleObjects
DestroyIcon
IsWindowVisible
EmptyClipboard
FlashWindowEx
PtInRect
UnregisterClassW
SendMessageW
GetLastInputInfo
IsWindow
EnumThreadWindows
InvalidateRect
ScreenToClient
GetWindowInfo
SendMessageTimeoutW
BringWindowToTop
SetCursor
LoadStringW
SetWindowPos
OpenClipboard
TranslateMessage
EnumDisplayMonitors
CallWindowProcW
CloseClipboard
UpdateLayeredWindow
keybd_event
DrawIconEx
GetClassNameW
GetIconInfo
GetKeyNameTextW
GetDesktopWindow
GetCursorPos
DeferWindowPos
EndDeferWindowPos
UnregisterHotKey
GetKeyState
MonitorFromPoint
SystemParametersInfoW
CreateIconFromResourceEx
GetWindow
GetWindowLongW
GetWindowRect
KillTimer
BeginDeferWindowPos
PostThreadMessageW
IsWindowEnabled
GetWindowPlacement
CreateIconIndirect
FindWindowW
GetKeyboardLayout

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

oleaut32

SafeArrayPutElement
SysFreeString
VariantClear
VariantInit
SysReAllocStringLen
SysAllocString
SafeArrayCreate
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayCreateVector
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorA
CloseServiceHandle
RegSetValueExW
AddAccessDeniedObjectAce
AddAccessAllowedObjectAce
AddAuditAccessAceEx
AddAce
OpenThreadToken
CloseEventLog
RegQueryInfoKeyW
IsValidSid
CreateWellKnownSid
GetLengthSid
AddAccessAllowedAceEx
OpenEventLogW
GetTokenInformation
ReadEventLogW
RegCreateKeyExW
SetSecurityDescriptorDacl
OpenServiceW
InitializeAcl
RegEnumKeyExW
AdjustTokenPrivileges
QueryServiceConfigW
CopySid
SetSecurityInfo
AddAuditAccessObjectAce
RegDeleteKeyW
LookupPrivilegeValueW
OpenSCManagerW
RegOpenKeyExW
OpenProcessToken
RegDeleteValueW
RegNotifyChangeKeyValue
AddAccessDeniedAceEx
GetNamedSecurityInfoW
SetNamedSecurityInfoW
RegFlushKey
RegEnumValueW
RegQueryValueExW
ConvertSidToStringSidW
RegCloseKey
InitializeSecurityDescriptor
EnumServicesStatusW

netapi32

NetWkstaGetInfo
NetApiBufferFree

kernel32

ReadFileEx
SetFileTime
GetFileTime
GetACP
Process32FirstW
GetExitCodeProcess
CloseHandle
LocalFree
SizeofResource
GetCurrentProcessId
TerminateThread
SetHandleInformation
GetHandleInformation
GetFullPathNameW
FindNextFileW
WriteProcessMemory
SetUnhandledExceptionFilter
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
FreeLibrary
SetDllDirectoryW
GetUserDefaultLCID
SetLastError
WaitNamedPipeW
GetModuleFileNameW
GetLastError
GlobalAlloc
GlobalUnlock
OpenMutexW
CreateThread
CompareStringW
GetGeoInfoW
LoadLibraryA
CreateMutexW
ResetEvent
GetVolumeInformationW
RaiseException
FormatMessageW
OpenJobObjectW
GetCurrentThread
GetLogicalDrives
IsBadReadPtr
ExpandEnvironmentStringsW
LoadLibraryExW
MoveFileWithProgressW
FileTimeToSystemTime
GetShortPathNameW
VirtualQuery
VirtualQueryEx
Sleep
SetFilePointer
FlushFileBuffers
LoadResource
SuspendThread
GetTickCount
WritePrivateProfileStringW
GetFileSize
GetStartupInfoW
GetFileAttributesW
SetThreadPriority
VirtualAlloc
GetSystemInfo
GetTempPathW
LeaveCriticalSection
VerSetConditionMask
GetDiskFreeSpaceW
GetUserDefaultUILanguage
WriteFileEx
GetModuleFileNameA
CompareStringA
WaitForSingleObjectEx
GetCompressedFileSizeW
WideCharToMultiByte
MultiByteToWideChar
FindClose
LoadLibraryW
SetEvent
FreeEnvironmentStringsW
GetLocaleInfoW
ConnectNamedPipe
GetLocalTime
WaitForSingleObject
GetSystemPowerStatus
DeleteCriticalSection
OpenThread
SetErrorMode
TzSpecificLocalTimeToSystemTime
SleepEx
IsValidLocale
LocalAlloc
WaitForMultipleObjectsEx
GetVolumePathNameW
SetFileAttributesW
VirtualProtect
SetEnvironmentVariableW
ReadProcessMemory
QueryPerformanceFrequency
SetThreadContext
VirtualFree
GetThreadContext
FlushInstructionCache
ExitProcess
GetLongPathNameW
RtlUnwind
GetCPInfo
GetStdHandle
DisconnectNamedPipe
GetModuleHandleW
SetInformationJobObject
ReadFile
CreateProcessW
CreateRemoteThread
FindResourceW
GetUserGeoID
CopyFileW
CheckRemoteDebuggerPresent
MapViewOfFile
MulDiv
CreateFileA
GetVersion
GetDriveTypeW
FreeResource
Module32NextW
MoveFileW
SetThreadExecutionState
GlobalAddAtomW
GetSystemTimeAsFileTime
OpenProcess
SwitchToThread
GetExitCodeThread
GetEnvironmentVariableA
OutputDebugStringW
GetFileAttributesExW
SetNamedPipeHandleState
GlobalMemoryStatusEx
LockResource
TerminateProcess
QueryInformationJobObject
GetCurrentThreadId
MoveFileExW
UnhandledExceptionFilter
PeekNamedPipe
GlobalFree
EnterCriticalSection
GetDiskFreeSpaceExW
ReleaseMutex
EnumResourceLanguagesW
GlobalDeleteAtom
SetCurrentDirectoryW
GetCurrentDirectoryW
InitializeCriticalSection
GlobalLock
GetCurrentProcess
GetCommandLineW
ResumeThread
GetProcAddress
VirtualAllocEx
FindResourceExW
GetVersionExW
VerifyVersionInfoW
GetEnvironmentStringsW
DeviceIoControl
FindFirstFileW
UnmapViewOfFile
Process32NextW
lstrlenW
SetEndOfFile
QueryPerformanceCounter
GetVolumeNameForVolumeMountPointW
CreateToolhelp32Snapshot
SystemTimeToFileTime
CreateFileW
GetSystemDirectoryW
EnumResourceNamesW
DeleteFileW
GetEnvironmentVariableW
WriteFile
GetFileInformationByHandle
Module32FirstW
FindFirstFileExW
ExitThread
CreateNamedPipeW
CreateFileMappingW
CreatePipe
TlsGetValue
GetDateFormatW
TlsSetValue
GetSystemDefaultUILanguage
GetOverlappedResult
CreateDirectoryW
EnumCalendarInfoW
RemoveDirectoryW
CreateEventW
SetThreadLocale
GetThreadLocale

wintrust

WinVerifyTrust

shfolder

SHGetFolderPathA

wsock32

accept
htonl
htons
setsockopt
select
WSAStartup
__WSAFDIsSet
WSACleanup
getsockname
listen
bind
closesocket
socket
recv
ioctlsocket
WSAGetLastError
shutdown
send

crypt32

CertGetNameStringW
CryptQueryObject
CertFindCertificateInStore
CertFreeCertificateContext
CertCloseStore
CryptMsgGetParam
CryptMsgClose

dnsapi

DnsQuery_W
DnsRecordListFree

ole32

OleInitialize
CoSetProxyBlanket
PropVariantClear
OleUninitialize
CoInitialize
CoCreateGuid
CoInitializeSecurity
CoCreateInstance
CoUninitialize
CoTaskMemFree
DoDragDrop

iphlpapi

GetAdaptersAddresses

gdi32

SetBkMode
GetObjectW
CreateCompatibleBitmap
CreateDIBSection
SetMapMode
CreateSolidBrush
SelectObject
DeleteObject
DeleteDC
BitBlt
GetDeviceCaps
CreateCompatibleDC

Exports

Exports

NoGCLayPipe
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 631KB - Virtual size: 630KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 93KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 56B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 400KB - Virtual size: 399KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a9b575ca12aaa8ee9093fceb70bde33f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

32:6f:f0:2b:88:00:31:7e:02:a8:d7:59:f4:50:0b:b2Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

32:6f:f0:2b:88:00:31:7e:02:a8:d7:59:f4:50:0b:b2Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

cd:c2:e2:2d:7b:f7:6a:7a:d4:75:c9:40:8f:b9:45:ec:9f:b6:0f:5f:9e:0b:74:cf:c5:8b:68:26:8f:9e:28:71Signer

Signature Validations

Verification

13-03-2020 11:37 Valid: false

52:63:c3:f1:a7:a3:c6:79:7f:8b:a7:71:d3:f8:b8:a0:3a:66:b5:35Signer

Signature Validations

Verification

13-03-2020 11:36 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

icmp

shlwapi

wininet

comdlg32

authz

msimg32

ws2_32

shell32

user32

version

oleaut32

advapi32

netapi32

kernel32

wintrust

shfolder

wsock32

crypt32

dnsapi

ole32

iphlpapi

gdi32

Exports

Exports

Sections

.text Size: 5.7MB - Virtual size: 5.7MB

.itext Size: 13KB - Virtual size: 13KB

.data Size: 631KB - Virtual size: 630KB

.bss Size: - Virtual size: 93KB

.idata Size: 13KB - Virtual size: 13KB

.didata Size: 512B - Virtual size: 420B

.edata Size: 512B - Virtual size: 137B

.tls Size: - Virtual size: 56B

.rdata Size: 512B - Virtual size: 93B

.reloc Size: 400KB - Virtual size: 399KB

.rsrc Size: 3.1MB - Virtual size: 3.1MB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

32:6f:f0:2b:88:00:31:7e:02:a8:d7:59:f4:50:0b:b2
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

32:6f:f0:2b:88:00:31:7e:02:a8:d7:59:f4:50:0b:b2
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

cd:c2:e2:2d:7b:f7:6a:7a:d4:75:c9:40:8f:b9:45:ec:9f:b6:0f:5f:9e:0b:74:cf:c5:8b:68:26:8f:9e:28:71
Signer

13-03-2020 11:37
Valid: false

52:63:c3:f1:a7:a3:c6:79:7f:8b:a7:71:d3:f8:b8:a0:3a:66:b5:35
Signer

13-03-2020 11:36
Valid: false

.text
Size: 5.7MB - Virtual size: 5.7MB

.itext
Size: 13KB - Virtual size: 13KB

.data
Size: 631KB - Virtual size: 630KB

.bss
Size: - Virtual size: 93KB

.idata
Size: 13KB - Virtual size: 13KB

.didata
Size: 512B - Virtual size: 420B

.edata
Size: 512B - Virtual size: 137B

.tls
Size: - Virtual size: 56B

.rdata
Size: 512B - Virtual size: 93B

.reloc
Size: 400KB - Virtual size: 399KB

.rsrc
Size: 3.1MB - Virtual size: 3.1MB