HackTheGame121[.]zip

Resubmissions

06-02-2023 16:27

230206-tx6fsaab2s 1

06-02-2023 16:22

230206-tvn4qaaa8w 1

Sharing

Copy URL

Twitter E-mail

General

Target

HackTheGame121.zip
Size

1.1MB
MD5

8ac886ed7823b74c84861077b5fde6a9
SHA1

83f6f36269abda4d2cd3d047d47acf6b72d4109f
SHA256

d6292010c9b014922b6b47a83b47ffa8ab0e3ccf52db918b98c7145b46c95af5
SHA512

60c4fa30a3d2b3cb7f683bb2dd1c0d1ba93193dfbb11554d79c2b8317acfa827278070920b4436f4bc865019fee87ef5acb0456acd7ef303babfe527628c4c76
SSDEEP

24576:dJ/wt/6jluilPQK0Jy+Yb5f3NYDPwQuP7gV5FICIjUaA1mxToUXdVVv:d6UjluilYK9bd3NYDoQ5FZFKo6xv

Score

1^/10

Malware Config

Signatures

Files

HackTheGame121.zip
.zip
FileSystem/defaultfs.htg
HackTheGame.exe
.exe windows x86

c2e91a5d3d9488e628757ea4a44ae849

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarTstGt
__vbaVarSub
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaVarVargNofree
__vbaFreeVar
ord588
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
ord621
__vbaFreeObjList
ord516
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaAryVar
__vbaAryDestruct
ord593
__vbaBoolStr
__vbaExitProc
__vbaVarForInit
ord594
__vbaOnError
__vbaObjSet
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
ord520
__vbaRefVarAry
__vbaBoolVarNull
__vbaFpR8
_CIsin
ord632
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
ord528
__vbaStrCmp
__vbaVarTstEq
__vbaPrintObj
__vbaI2I4
DllFunctionCall
__vbaVarOr
__vbaStrR4
__vbaRedimPreserve
_adj_fpatan
__vbaLateIdCallLd
__vbaRedim
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
__vbaInputFile
ord712
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
ord608
__vbaFPException
__vbaUbound
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaInStr
ord648
__vbaNew2
__vbaR8Str
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
__vbaFreeStrList
__vbaVarNot
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
ord100
ord579
__vbaVarTstNe
__vbaI4Var
__vbaVarCmpEq
__vbaVarAdd
__vbaAryLock
__vbaVarDup
__vbaStrToAnsi
ord613
__vbaFpI2
__vbaVarCopy
__vbaFpI4
__vbaR8IntI2
ord617
_CIatan
__vbaStrMove
__vbaAryCopy
ord619
__vbaStrVarCopy
__vbaR8IntI4
_allmul
_CItan
ord546
__vbaFPInt
__vbaAryUnlock
__vbaVarForNext
_CIexp
__vbaFreeStr
__vbaFreeObj
ord581

Sections

.text
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
HackTheGame.htg
HackTheGame.ini
Lang/Dutch.htg
Lang/English.htg
Lang/Frensh.htg
Lang/German.htg
Lang/Indonesian.htg
Lang/Macedonian.htg
Lang/Norwegian.htg
Lang/Spanish.htg
MissionPack/MissionPackCreator.exe
.exe windows x86

16f908fc1a4138e07273bd2bb085c117

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarTstGt
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaFreeVarList
_adj_fdiv_m64
ord621
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaAryVar
__vbaAryDestruct
__vbaExitProc
__vbaObjSet
__vbaOnError
ord595
_adj_fdiv_m16i
ord303
__vbaObjSetAddref
_adj_fdivr_m16i
ord520
ord309
__vbaBoolVarNull
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
ord528
__vbaStrCmp
__vbaVarTstEq
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaI2Str
ord608
ord531
__vbaFPException
__vbaStrVarVal
__vbaUbound
__vbaVarCat
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
ord648
__vbaNew2
ord571
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
__vbaVarNot
__vbaDerefAry1
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
ord579
__vbaVarTstNe
__vbaVarCmpEq
__vbaVarAdd
__vbaVarDup
ord617
_CIatan
__vbaStrMove
__vbaAryCopy
_allmul
__vbaLateIdSt
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MissionPack/MissionPackCreator.htg
MissionPack/Original-Dutch/m1.htg
MissionPack/Original-Dutch/m10.htg
MissionPack/Original-Dutch/m11.htg
MissionPack/Original-Dutch/m2.htg
MissionPack/Original-Dutch/m3.htg
MissionPack/Original-Dutch/m4.htg
MissionPack/Original-Dutch/m5.htg
MissionPack/Original-Dutch/m6.htg
MissionPack/Original-Dutch/m7.htg
MissionPack/Original-Dutch/m8.htg
MissionPack/Original-Dutch/m9.htg
MissionPack/Original-English/m1.htg
MissionPack/Original-English/m10.htg
MissionPack/Original-English/m11.htg
MissionPack/Original-English/m2.htg
MissionPack/Original-English/m3.htg
MissionPack/Original-English/m4.htg
MissionPack/Original-English/m5.htg
MissionPack/Original-English/m6.htg
MissionPack/Original-English/m7.htg
MissionPack/Original-English/m8.htg
MissionPack/Original-English/m9.htg
MissionPack/Original-Frensh/m1.htg
MissionPack/Original-Frensh/m10.htg
MissionPack/Original-Frensh/m11.htg
MissionPack/Original-Frensh/m2.htg
MissionPack/Original-Frensh/m3.htg
MissionPack/Original-Frensh/m4.htg
MissionPack/Original-Frensh/m5.htg
MissionPack/Original-Frensh/m6.htg
MissionPack/Original-Frensh/m7.htg
MissionPack/Original-Frensh/m8.htg
MissionPack/Original-Frensh/m9.htg
MissionPack/Original-German/m1.htg
MissionPack/Original-German/m10.htg
MissionPack/Original-German/m11.htg
MissionPack/Original-German/m2.htg
MissionPack/Original-German/m3.htg
MissionPack/Original-German/m4.htg
MissionPack/Original-German/m5.htg
MissionPack/Original-German/m6.htg
MissionPack/Original-German/m7.htg
MissionPack/Original-German/m8.htg
MissionPack/Original-German/m9.htg
MissionPack/Original-Indonesian/m1.htg
MissionPack/Original-Indonesian/m10.htg
MissionPack/Original-Indonesian/m11.htg
MissionPack/Original-Indonesian/m2.htg
MissionPack/Original-Indonesian/m3.htg
MissionPack/Original-Indonesian/m4.htg
MissionPack/Original-Indonesian/m5.htg
MissionPack/Original-Indonesian/m6.htg
MissionPack/Original-Indonesian/m7.htg
MissionPack/Original-Indonesian/m8.htg
MissionPack/Original-Indonesian/m9.htg
MissionPack/Original-Macedonian/m1.htg
MissionPack/Original-Macedonian/m10.htg
MissionPack/Original-Macedonian/m11.htg
MissionPack/Original-Macedonian/m2.htg
MissionPack/Original-Macedonian/m3.htg
MissionPack/Original-Macedonian/m4.htg
MissionPack/Original-Macedonian/m5.htg
MissionPack/Original-Macedonian/m6.htg
MissionPack/Original-Macedonian/m7.htg
MissionPack/Original-Macedonian/m8.htg
MissionPack/Original-Macedonian/m9.htg
MissionPack/Original-Norwegian/m1.htg
MissionPack/Original-Norwegian/m10.htg
MissionPack/Original-Norwegian/m11.htg
MissionPack/Original-Norwegian/m2.htg
MissionPack/Original-Norwegian/m3.htg
MissionPack/Original-Norwegian/m4.htg
MissionPack/Original-Norwegian/m5.htg
MissionPack/Original-Norwegian/m6.htg
MissionPack/Original-Norwegian/m7.htg
MissionPack/Original-Norwegian/m8.htg
MissionPack/Original-Norwegian/m9.htg
MissionPack/Original-Spanish/m1.htg
MissionPack/Original-Spanish/m10.htg
MissionPack/Original-Spanish/m11.htg
MissionPack/Original-Spanish/m2.htg
MissionPack/Original-Spanish/m3.htg
MissionPack/Original-Spanish/m4.htg
MissionPack/Original-Spanish/m5.htg
MissionPack/Original-Spanish/m6.htg
MissionPack/Original-Spanish/m7.htg
MissionPack/Original-Spanish/m8.htg
MissionPack/Original-Spanish/m9.htg
MissionPack/TABCTL32.OCX
.dll regsvr32 windows x86

e0cb36c66e5c120ef20ebc4f30366345

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04-12-2003 00:00

Not After

03-12-2013 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04-12-2003 00:00

Not After

03-12-2008 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-01-1997 07:00

Not After

31-12-2020 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10-12-2000 08:00

Not After

12-11-2005 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:0e:7d:a7:00:00:00:00:00:48
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25-10-2003 05:59

Not After

25-01-2005 06:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

07:16:79:f2:31:8b:3f:8a:bf:35:d8:e9:f0:71:c6:c1:69:48:39:b7
Signer

Actual PE Digest

07:16:79:f2:31:8b:3f:8a:bf:35:d8:e9:f0:71:c6:c1:69:48:39:b7

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

02-02-2023 17:58
Valid: false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetStringTypeW
GetStringTypeA
VirtualAlloc
LCMapStringW
LCMapStringA
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentProcess
TerminateProcess
ExitProcess
RaiseException
GetOEMCP
GetACP
GetCPInfo
GetModuleHandleA
GetCommandLineA
lstrcpynA
GetFileAttributesA
GetVersion
DisableThreadLibraryCalls
FindResourceA
LoadResource
LockResource
GetLastError
InterlockedDecrement
InterlockedIncrement
GetProcAddress
GetLocaleInfoA
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA
MultiByteToWideChar
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
lstrcmpiA
lstrlenA
GlobalSize
IsDBCSLeadByte
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
HeapAlloc
lstrcpyA
EnterCriticalSection
GetProcessHeap
HeapReAlloc
lstrcmpA
InitializeCriticalSection
lstrcatA

user32

BeginPaint
GetClientRect
MoveWindow
IntersectRect
PtInRect
CreateWindowExA
SetWindowPos
SetFocus
SetWindowRgn
FillRect
CopyRect
DrawFocusRect
GetSysColor
IsWindowEnabled
GetWindowRect
GetWindowDC
DestroyWindow
GetWindowLongA
SetWindowLongA
CallWindowProcA
CharNextA
OffsetRect
SetRectEmpty
ShowWindow
IsDialogMessageA
ScreenToClient
GetClipboardFormatNameA
RegisterClipboardFormatA
MapWindowPoints
SetCursorPos
InvalidateRect
UnregisterClassA
ReleaseCapture
GetNextDlgTabItem
CreateDialogIndirectParamA
IsChild
SetParent
IsWindowVisible
WinHelpA
InflateRect
EndDialog
GetActiveWindow
DialogBoxParamA
GetCursorPos
IsIconic
GetParent
LockWindowUpdate
EqualRect
IsWindow
MessageBeep
MessageBoxA
GetDlgItemInt
GetDlgItemTextA
IsDlgButtonChecked
SendDlgItemMessageA
SetDlgItemTextA
SetDlgItemInt
CheckDlgButton
GetDlgItem
wsprintfA
GetKeyState
DefWindowProcA
SetCursor
PeekMessageA
SendMessageA
GetFocus
GetDC
ReleaseDC
SetRect
IsCharAlphaNumericA
VkKeyScanA
CreateAcceleratorTableA
EnableWindow
LoadCursorA
RegisterClassA
DestroyAcceleratorTable
LoadStringA
GetWindow
GetSystemMetrics
EndPaint
ClientToScreen

ole32

ReleaseStgMedium
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CreateOleAdviseHolder
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
OleSaveToStream
OleLoadFromStream

advapi32

RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

SysAllocStringLen
OleCreatePropertyFrame
LoadTypeLi
SafeArrayCopy
SafeArrayRedim
SafeArrayGetElement
SafeArrayCreate
SafeArrayPutElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayDestroy
SafeArrayUnaccessData
VariantCopyInd
SafeArrayAccessData
LoadTypeLibEx
UnRegisterTypeLi
VariantCopy
CreateErrorInfo
SetErrorInfo
RegisterTypeLi
VariantInit
SysStringLen
VariantChangeType
GetErrorInfo
OleLoadPicture
OleTranslateColor
LoadRegTypeLi
SysAllocStringByteLen
SysStringByteLen
OleCreatePictureIndirect
OleCreateFontIndirect
VariantClear
SysFreeString
SysAllocString

gdi32

SetMapMode
GetWindowExtEx
GetViewportExtEx
LPtoDP
GetNearestColor
CreatePalette
GetBitmapBits
CreateDIBitmap
GetDIBits
CopyEnhMetaFileA
CopyMetaFileA
CreateDCA
SetWindowOrgEx
SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
GetDeviceCaps
DeleteDC
DeleteObject
StretchBlt
SelectObject
CreateBitmap
CreateCompatibleDC
RealizePalette
SelectPalette
GetOutlineTextMetricsA
BitBlt
CreateCompatibleBitmap
SetTextColor
SetBkColor
CreateRectRgn
CreateFontIndirectA
GetObjectA
SelectClipRgn
CombineRgn
CreatePolygonRgn
SetBkMode
CreatePen
TextOutA
GetTextColor
LineTo
MoveToEx
GetTextExtentPoint32A
GetCharWidthA
GetCurrentPositionEx
SetTextAlign
GetStockObject
CreateSolidBrush
OffsetRgn
SetBrushOrgEx
UnrealizeObject
GetPaletteEntries
CreateRectRgnIndirect
CreateICA

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 140KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Sound/alert.wav
Sound/applause.wav
Sound/click.wav
Sound/exit.wav
Sound/failed.wav
Sound/gameover.wav
Sound/halleluya.wav
Sound/knock.wav
Sound/modem.wav
Sound/newmail.wav
Sound/ok.wav
Sound/pc.wav
Sound/phone.wav
Sound/police.wav
Sound/shutdown.wav
Sound/sirene.wav
Sound/standby.wav
Sound/tone.wav
Tool/image2txt.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 349KB - Virtual size: 349KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 357KB - Virtual size: 357KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

c2e91a5d3d9488e628757ea4a44ae849

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 288KB - Virtual size: 287KB

.data Size: 4KB - Virtual size: 23KB

.rsrc Size: 4KB - Virtual size: 1KB

16f908fc1a4138e07273bd2bb085c117

Headers

File Characteristics

Imports

msvbvm60

Sections

.text Size: 36KB - Virtual size: 33KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 1KB

e0cb36c66e5c120ef20ebc4f30366345

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate

Extended Key Usages

Key Usages

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6Certificate

Extended Key Usages

Key Usages

61:0e:7d:a7:00:00:00:00:00:48Certificate

Extended Key Usages

Key Usages

07:16:79:f2:31:8b:3f:8a:bf:35:d8:e9:f0:71:c6:c1:69:48:39:b7Signer

Signature Validations

Verification

02-02-2023 17:58 Valid: false

Headers

File Characteristics

Imports

kernel32

user32

ole32

advapi32

oleaut32

gdi32

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 136KB

.data Size: 16KB - Virtual size: 13KB

.rsrc Size: 40KB - Virtual size: 39KB

.reloc Size: 8KB - Virtual size: 7KB

Headers

File Characteristics

Sections

CODE Size: 349KB - Virtual size: 349KB

DATA Size: 6KB - Virtual size: 5KB

BSS Size: - Virtual size: 2KB

.idata Size: 8KB - Virtual size: 7KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: 19KB - Virtual size: 19KB

.rsrc Size: 357KB - Virtual size: 357KB

.text
Size: 288KB - Virtual size: 287KB

.data
Size: 4KB - Virtual size: 23KB

.rsrc
Size: 4KB - Virtual size: 1KB

.text
Size: 36KB - Virtual size: 33KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 1KB

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

61:0e:7d:a7:00:00:00:00:00:48
Certificate

07:16:79:f2:31:8b:3f:8a:bf:35:d8:e9:f0:71:c6:c1:69:48:39:b7
Signer

02-02-2023 17:58
Valid: false

.text
Size: 140KB - Virtual size: 136KB

.data
Size: 16KB - Virtual size: 13KB

.rsrc
Size: 40KB - Virtual size: 39KB

.reloc
Size: 8KB - Virtual size: 7KB

CODE
Size: 349KB - Virtual size: 349KB

DATA
Size: 6KB - Virtual size: 5KB

BSS
Size: - Virtual size: 2KB

.idata
Size: 8KB - Virtual size: 7KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: 19KB - Virtual size: 19KB

.rsrc
Size: 357KB - Virtual size: 357KB