koki[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

koki.exe
Size

1.8MB
MD5

7cb8069dbebc46828a7e0964cba20cec
SHA1

23ee888c1cdbf8bcbb75a1d5ccbb972c7467319d
SHA256

38d40a73f028ff93eb50319848e90b8720a54d129eae0176b2d6748bb2f02d13
SHA512

38415182342c31ba61db37b68a3e7a68763b6a10461873447aa49788623b187a06f72ad37ad4e61e4e67f1ab0a5138f23a36a18bf8a321d5b5b64b3868d04da5
SSDEEP

49152:mTpqqjalTfVmTJSm3YgAVFHkuuwu3KsNf+4+xUTIkQgkt1qhRdYV8e4ZHvfQp4:chalj0wm3YgAVauuwu3KsNf+4+xUTzak

Score

1^/10

Malware Config

Signatures

Files

koki.exe
.exe windows x86

b37ec7c3856778cc0861dc1d564632ce

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25/11/2020, 00:00

Not After

22/02/2024, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

25/11/2020, 00:00

Not After

22/02/2024, 23:59

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

25:07:e2:38:9e:70:8c:21:4e:1c:ad:df:16:a3:60:84:21:c5:b1:af:da:ea:da:ce:0e:1e:93:06:a1:ce:a1:d7
Signer

Actual PE Digest

25:07:e2:38:9e:70:8c:21:4e:1c:ad:df:16:a3:60:84:21:c5:b1:af:da:ea:da:ce:0e:1e:93:06:a1:ce:a1:d7

Digest Algorithm

sha256

PE Digest Matches

false

9f:83:ed:16:ee:81:74:d0:25:53:26:e2:bc:d9:e4:6a:56:78:c6:97
Signer

Actual PE Digest

9f:83:ed:16:ee:81:74:d0:25:53:26:e2:bc:d9:e4:6a:56:78:c6:97

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileInformationByHandle
GetDriveTypeA
FindFirstFileExA
GetCurrentDirectoryW
ActivateActCtx
DeactivateActCtx
SetLastError
GetModuleHandleA
GetLocaleInfoA
GlobalAddAtomA
GetTickCount
GetTempPathA
SetErrorMode
DeleteFileA
GetVersion
SetFileTime
WriteFile
CreateDirectoryA
GetFileAttributesA
LocalFileTimeToFileTime
lstrcatA
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
SetFilePointer
GlobalSize
FindResourceA
CreateEventA
GetProcAddress
FreeLibrary
SetEvent
ResetEvent
LoadLibraryA
lstrcpyA
GlobalGetAtomNameA
MulDiv
lstrcmpA
FindClose
FindFirstFileA
UnmapViewOfFile
CloseHandle
GetLastError
CreateFileA
VirtualProtect
VirtualAlloc
GetSystemInfo
OpenFile
lstrcmpiA
GetUserDefaultLCID
GlobalUnlock
GlobalLock
GlobalAlloc
MultiByteToWideChar
lstrlenA
GlobalFree
FindResourceW
GetDriveTypeW
ExpandEnvironmentStringsA
WaitForMultipleObjects
PeekNamedPipe
GetSystemDirectoryA
VerSetConditionMask
VerifyVersionInfoA
SleepEx
SetEnvironmentVariableA
CreateFileW
GetProcessHeap
WriteConsoleW
GetTimeZoneInformation
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetStringTypeW
IsValidLocale
lstrlenW
LocalFree
FormatMessageA
CopyFileA
GetModuleFileNameA
GetCurrentProcessId
lstrcmpW
LoadLibraryW
CompareStringA
GetVersionExA
GlobalDeleteAtom
GlobalFindAtomA
GetCurrentThreadId
FreeResource
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetFileAttributesExA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
GetProfileIntA
SetThreadPriority
ResumeThread
WaitForSingleObject
SuspendThread
GetModuleHandleW
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
InterlockedExchange
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
GetACP
FindResourceExW
GetTempFileNameA
GetWindowsDirectoryA
GetNumberFormatA
InitializeCriticalSectionAndSpinCount
Sleep
SearchPathA
DecodePointer
EncodePointer
HeapFree
HeapAlloc
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
HeapReAlloc
RaiseException
VirtualQuery
ExitThread
CreateThread
HeapSize
HeapQueryInformation
GetSystemTimeAsFileTime
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetLocaleInfoW
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
IsValidCodePage
CompareStringW
LCMapStringW
HeapCreate
EnumSystemLocalesA

user32

SetActiveWindow
GetForegroundWindow
GetWindowTextLengthA
SetFocus
IsWindow
RemovePropA
GetPropA
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
SendDlgItemMessageA
CheckDlgButton
IsDialogMessageA
MoveWindow
ShowWindow
CheckMenuItem
EnableMenuItem
ModifyMenuA
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EndDialog
CreateDialogIndirectParamA
GetActiveWindow
GetDesktopWindow
GetAsyncKeyState
MapDialogRect
MessageBeep
IsClipboardFormatAvailable
CountClipboardFormats
IsRectEmpty
SendNotifyMessageA
CopyAcceleratorTableA
InflateRect
GetMenuItemInfoA
DestroyMenu
SystemParametersInfoA
CharUpperA
GetKeyNameTextA
MapVirtualKeyA
SetTimer
KillTimer
WindowFromPoint
GetCursorPos
TranslateAcceleratorA
InsertMenuItemA
IsIconic
LoadAcceleratorsA
SetCursor
DestroyIcon
LoadMenuA
ReuseDDElParam
UnpackDDElParam
CreateMenu
PostThreadMessageA
DeleteMenu
GetSystemMenu
SetParent
MonitorFromPoint
IsZoomed
ShowOwnedPopups
ValidateRect
TranslateMessage
GetMessageA
GetMessagePos
GetSysColorBrush
RealChildWindowFromPoint
UnregisterClassA
LoadCursorW
WaitMessage
EnumDisplayMonitors
SetLayeredWindowAttributes
UnionRect
LockWindowUpdate
LoadAcceleratorsW
LoadMenuW
GetMenuDefaultItem
InvertRect
HideCaret
EnableScrollBar
NotifyWinEvent
GetIconInfo
CopyImage
GetNextDlgGroupItem
DrawIconEx
SetWindowRgn
DispatchMessageA
SetClassLongA
DrawStateA
DrawEdge
DrawFrameControl
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableA
SetCursorPos
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
IsCharLowerA
MapVirtualKeyExA
UpdateLayeredWindow
IsMenu
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
SetMenuDefaultItem
FrameRect
GetUpdateRect
CopyIcon
CharUpperBuffA
GetDoubleClickTime
SubtractRect
DrawIcon
DestroyCursor
GetWindowRgn
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
IsWindowVisible
PostMessageA
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
SetWindowPos
GetWindow
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
EndPaint
BeginPaint
GetWindowDC
OemToCharA
GetMenuState
GetMenuStringA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
SetRect
DrawTextA
GrayStringA
DrawTextExA
TabbedTextOutA
WinHelpA
CreatePopupMenu
AppendMenuA
GetSysColor
CopyRect
DrawFocusRect
FillRect
GetWindowTextA
SetWindowTextA
GetFocus
IsChild
GetParent
GetWindowRect
wsprintfA
GetNextDlgTabItem
GetKeyState
BringWindowToTop
InvalidateRect
PtInRect
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
DestroyAcceleratorTable
GetMessageTime
GetSystemMetrics
GetDlgItem
LoadIconA
GetClassInfoA
UpdateWindow
MsgWaitForMultipleObjects
SendMessageA
EnableWindow
CharToOemA
PostQuitMessage
DeferWindowPos
RedrawWindow
LoadImageA
LoadIconW
IntersectRect
RegisterClipboardFormatA
SetForegroundWindow
GetClassNameA
ReleaseDC
GetDC
RegisterWindowMessageA
ReleaseCapture
GetCapture
SetCapture
EqualRect
LoadCursorA
SetRectEmpty
ScreenToClient
ClientToScreen
GetClientRect
OffsetRect
PeekMessageA

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateBitmap
SelectPalette
GetObjectType
CreateHatchBrush
GetWindowOrgEx
CreateCompatibleBitmap
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
GetWindowExtEx
GetPixel
DPtoLP
GetBkColor
GetTextFaceA
SetPixelV
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetViewportOrgEx
LPtoDP
GetRgnBox
OffsetRgn
SetPixel
StretchBlt
SetDIBColorTable
Polygon
Ellipse
Polyline
CreateEllipticRgn
CreatePolygonRgn
CreateRoundRectRgn
CreateDIBSection
CreateFontIndirectA
GetTextExtentPoint32A
GetDeviceCaps
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetTextMetricsA
GetStockObject
GetPaletteEntries
GetTextColor
Rectangle
EnumFontFamiliesExA
EnumFontFamiliesA
CreateSolidBrush
CreateCompatibleDC
BitBlt
GetObjectA
DeleteObject
SelectObject
CreatePen
SetTextColor
SetROP2
SetPolyFillMode
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
CreatePalette
GetTextCharsetInfo
CreateDIBitmap
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
PatBlt
GetViewportExtEx
GetMapMode
CombineRgn
SetRectRgn
CreateRectRgnIndirect

advapi32

RegCreateKeyExA
CryptEncrypt
CryptDestroyKey
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegSetValueA
RegOpenKeyExA
RegOpenKeyExW
CryptImportKey
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegEnumKeyExA

shell32

SHAppBarMessage
SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetDesktopFolder
SHGetFileInfoA
ExtractIconA
DragAcceptFiles
ShellAboutA
ShellExecuteA
DragQueryFileA
DragFinish

ole32

OleSetMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoDisconnectObject
CoCreateGuid
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
CoCreateInstance
CoInitializeEx
OleGetClipboard
DoDragDrop
CoInitialize
CreateGenericComposite
CreateItemMoniker
OleGetIconOfClass
OleCreateLinkToFile
OleCreateFromFile
OleSetContainedObject
GetHGlobalFromILockBytes
StgOpenStorageOnILockBytes
OleLoad
OleCreate
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleLockRunning
CreateStreamOnHGlobal
OleSaveToStream
WriteClassStm
OleSave
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleDuplicateData
CoTaskMemAlloc
CreateBindCtx
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
ReleaseStgMedium
OleUninitialize
OleInitialize
CreateFileMoniker
StgOpenStorage

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize

shlwapi

PathStripToRootA
PathFindExtensionA
PathRemoveFileSpecW
PathFindFileNameA
PathIsUNCA

oledlg

ord4
ord3
ord11

wldap32

ord60
ord143
ord211
ord50
ord26
ord30
ord200
ord32
ord35
ord79
ord33
ord301
ord22
ord27
ord46
ord41

ws2_32

accept
sendto
getaddrinfo
freeaddrinfo
connect
socket
closesocket
getpeername
getsockopt
htons
bind
ntohs
getsockname
recvfrom
WSAGetLastError
WSACleanup
WSAStartup
WSASetLastError
__WSAFDIsSet
select
recv
send
WSAIoctl
listen
ioctlsocket
gethostname
htonl
ntohl
setsockopt

crypt32

CertFreeCertificateContext

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

gdiplus

GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipGetImageGraphicsContext
GdipDrawImageI
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipCreateBitmapFromHBITMAP
GdipGetImagePalette

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

winmm

PlaySoundA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

comdlg32

GetFileTitleA

oleaut32

SysAllocString
VarBstrFromDate
SysStringByteLen
SysFreeString
VariantTimeToSystemTime
VariantClear
VariantChangeType
VariantInit
SysAllocStringLen
SysStringLen
SystemTimeToVariantTime

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b37ec7c3856778cc0861dc1d564632ce

Code Sign

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40Certificate

Extended Key Usages

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6Certificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

25:07:e2:38:9e:70:8c:21:4e:1c:ad:df:16:a3:60:84:21:c5:b1:af:da:ea:da:ce:0e:1e:93:06:a1:ce:a1:d7Signer

9f:83:ed:16:ee:81:74:d0:25:53:26:e2:bc:d9:e4:6a:56:78:c6:97Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

msimg32

comctl32

shlwapi

oledlg

wldap32

ws2_32

crypt32

oleacc

gdiplus

imm32

winmm

winspool.drv

comdlg32

oleaut32

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 328KB - Virtual size: 328KB

.data Size: 25KB - Virtual size: 56KB

.rsrc Size: 53KB - Virtual size: 53KB

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

25:07:e2:38:9e:70:8c:21:4e:1c:ad:df:16:a3:60:84:21:c5:b1:af:da:ea:da:ce:0e:1e:93:06:a1:ce:a1:d7
Signer

9f:83:ed:16:ee:81:74:d0:25:53:26:e2:bc:d9:e4:6a:56:78:c6:97
Signer

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 328KB - Virtual size: 328KB

.data
Size: 25KB - Virtual size: 56KB

.rsrc
Size: 53KB - Virtual size: 53KB