TeamViewer[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

TeamViewer.exe
Size

9.7MB
MD5

41e0728b59a9bf10b56738b1c3ae083f
SHA1

b5d5abead91eedee4e6b4f408f058af0f350607a
SHA256

c742d0dabe9059b52fdf7906c3e580e16858f41622e95fdfdeba0f891a7745a3
SHA512

21ceda0f2731225ab7734765b5ebdcbe7aefecafa907b7d8d70dd8ee6104b0827b70c69188c52f181c8fb1430e560d7a1f69259386d69ef310539c5938efc3e4
SSDEEP

196608:VacoYgDNnxMaLu+3xCX1QAvMWxg9RPZSU8:IcoZ7u+wQAvd8ZSU8

Score

1^/10

Malware Config

Signatures

Files

TeamViewer.exe
.exe windows x86

e33c41946fafacdbe8735308ccff9b28

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

3d:27:af:be:a5:99:6f:13:e5:b5:62:44:21:f1:62:95
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

08/08/2011, 00:00

Not After

07/08/2014, 23:59

Subject

CN=TeamViewer,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=TeamViewer,L=Goeppingen,ST=Baden Wuerttemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:67:54:7f:d1:4b:3d:63:06:c1:48:76:e1:ed:e8:66:48:dd:d6:93
Signer

Actual PE Digest

41:67:54:7f:d1:4b:3d:63:06:c1:48:76:e1:ed:e8:66:48:dd:d6:93

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

avicap32

capGetDriverDescriptionW

msvfw32

DrawDibOpen
DrawDibDraw
DrawDibClose

winmm

waveInOpen
mixerGetControlDetailsW
waveInPrepareHeader
mixerSetControlDetails
waveOutPause
waveOutPrepareHeader
waveOutOpen
waveInStart
waveInReset
waveInClose
waveInUnprepareHeader
waveInGetDevCapsW
waveOutGetDevCapsW
mixerGetID
mixerGetLineInfoW
mixerGetLineControlsW
waveOutWrite
waveOutUnprepareHeader
waveOutClose
waveOutReset
waveOutRestart
waveInGetNumDevs
waveOutGetNumDevs
timeBeginPeriod
timeEndPeriod
mixerGetDevCapsW
mixerOpen
mixerClose
waveInAddBuffer

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetFileType
SetHandleCount
GetStringTypeA
IsValidCodePage
GetOEMCP
GetACP
HeapCreate
GetModuleFileNameA
GetStdHandle
CompareStringA
GetStringTypeW
GetDateFormatA
GetTimeFormatA
FindFirstFileA
GetDriveTypeA
ExitProcess
GetStartupInfoA
GetCommandLineA
ExitThread
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
RtlUnwind
CreateWaitableTimerA
CreateFileMappingA
MapViewOfFileEx
CreateFileA
UnmapViewOfFile
AreFileApisANSI
GetModuleHandleA
GetFileTime
GetFileInformationByHandle
RemoveDirectoryW
LCMapStringW
LCMapStringA
GetStringTypeExA
GetUserDefaultLCID
GetLocaleInfoA
HeapSize
GetFullPathNameA
HeapDestroy
IsProcessorFeaturePresent
SetFileAttributesW
SetEnvironmentVariableA
ReadFileEx
GetOverlappedResult
CancelIo
WaitForMultipleObjectsEx
GetFileAttributesExW
SetFileTime
GetCurrentDirectoryW
LocalFileTimeToFileTime
GlobalSize
GetSystemTime
WaitForSingleObjectEx
GetLogicalDriveStringsW
DeviceIoControl
GetDateFormatW
SystemTimeToFileTime
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
FormatMessageW
MoveFileExW
GetTempPathW
GetFileAttributesW
GetPrivateProfileIntW
InterlockedCompareExchange
GetQueuedCompletionStatus
TerminateThread
QueueUserAPC
CreateIoCompletionPort
OpenEventA
TlsSetValue
TlsGetValue
InitializeCriticalSectionAndSpinCount
CreateProcessW
ProcessIdToSessionId
TerminateProcess
WaitNamedPipeW
OpenProcess
ExpandEnvironmentStringsW
SetThreadAffinityMask
GetWindowsDirectoryW
MoveFileW
SetFilePointer
GetSystemDirectoryW
SetUnhandledExceptionFilter
FileTimeToLocalFileTime
LocalAlloc
lstrcpyW
GetThreadTimes
QueryPerformanceFrequency
PeekNamedPipe
GetCurrentDirectoryA
SetStdHandle
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapReAlloc
QueryPerformanceCounter
CreateSemaphoreW
GetSystemInfo
FormatMessageA
GetSystemDirectoryA
LoadLibraryA
ExpandEnvironmentStringsA
CompareFileTime
CompareStringW
GetVolumeInformationW
GetDriveTypeW
FindFirstFileW
GetFullPathNameW
FindClose
FindNextFileW
GetCurrentThread
GetCurrentProcess
GetLastError
lstrlenW
GetModuleFileNameW
GetProcAddress
GetModuleHandleW
LocalFree
CloseHandle
CreateEventA
WaitForSingleObject
SetEvent
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
RaiseException
FlushInstructionCache
ResetEvent
GetPriorityClass
SetPriorityClass
VirtualAlloc
VirtualFree
GetLocaleInfoW
DuplicateHandle
GetLocalTime
GetTimeFormatW
DeleteFileW
GetComputerNameW
GetCurrentProcessId
CopyFileW
GetCommandLineW
LoadLibraryExW
lstrcmpiW
CreateMutexW
ReleaseMutex
TlsAlloc
TlsFree
lstrlenA
MultiByteToWideChar
GlobalHandle
lstrcmpW
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
CreateThread
ResumeThread
GetExitCodeThread
SetThreadPriority
CreateDirectoryW
SetErrorMode
SetProcessShutdownParameters
GetTimeZoneInformation
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetVersionExW
WritePrivateProfileStringW
GetFileSize
ReadFile
GetPrivateProfileStringW
CreateWaitableTimerW
CreateEventW
InterlockedExchangeAdd
InterlockedExchange
PostQueuedCompletionStatus
SetWaitableTimer
SleepEx
MulDiv
LoadLibraryW
FreeLibrary
WideCharToMultiByte
GlobalAlloc
GlobalLock
CreateFileW
WriteFile
GlobalUnlock
GlobalFree
Sleep
GetTickCount
WaitForMultipleObjects
HeapAlloc
SetLastError
GetCurrentThreadId
GetProcessHeap
HeapFree
ReleaseSemaphore
CreateSemaphoreA
GetSystemTimeAsFileTime
SetEndOfFile

user32

ShowWindow
LoadStringA
UnregisterClassA
BlockInput
GetClassInfoW
RegisterClassW
RegisterClipboardFormatW
EnumDisplayMonitors
EnumDisplayDevicesW
EnumDisplaySettingsW
SetWindowsHookExW
CallNextHookEx
ActivateKeyboardLayout
GetKeyboardLayout
SendInput
BringWindowToTop
SendNotifyMessageW
SendMessageW
DestroyCursor
GetCursor
IsChild
DestroyAcceleratorTable
CreateAcceleratorTableW
CreateDialogIndirectParamW
MapDialogRect
SendDlgItemMessageW
SetWindowContextHelpId
MessageBoxA
SetMenuInfo
ChildWindowFromPointEx
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
CopyIcon
WindowFromPoint
GetKeyState
UpdateLayeredWindow
SetLayeredWindowAttributes
GetSysColor
GetDialogBaseUnits
MsgWaitForMultipleObjects
GetClassLongW
PostQuitMessage
GetMenuItemID
GetMenuItemCount
RemoveMenu
TrackPopupMenuEx
MessageBoxW
MessageBeep
SetDlgItemTextW
FindWindowExW
GetSysColorBrush
TrackPopupMenu
GetKeyboardState
VkKeyScanExW
UnhookWindowsHookEx
MapVirtualKeyW
GetDC
OpenDesktopW
SetThreadDesktop
CloseDesktop
LoadStringW
SetFocus
IsWindow
DestroyWindow
ReleaseDC
GetAsyncKeyState
CreateDialogParamW
GetActiveWindow
SetClassLongW
LoadCursorW
CreatePopupMenu
AppendMenuW
InsertMenuW
InsertMenuItemW
IsMenu
CreateMenu
DestroyMenu
PostMessageW
InvalidateRect
IsWindowVisible
PtInRect
GetCursorPos
GetWindowLongW
CallWindowProcW
DefWindowProcW
MoveWindow
GetClientRect
ClientToScreen
ScreenToClient
SetTimer
KillTimer
SetCapture
ScrollWindowEx
SetParent
SetScrollInfo
GetDlgItemTextW
DrawStateW
DrawFocusRect
FrameRect
SetWindowLongW
CharNextW
ExitWindowsEx
GetCapture
DrawEdge
DrawIcon
GetCursorInfo
GetMessageW
TranslateAcceleratorW
SetWindowPlacement
GetNextDlgTabItem
LoadAcceleratorsW
GetMessagePos
GetSystemMenu
ToUnicode
GetWindowRect
GetClassInfoExW
CopyRect
IsRectEmpty
SetRectEmpty
InflateRect
OffsetRect
IntersectRect
UnionRect
EqualRect
DestroyIcon
SetWindowPos
MapWindowPoints
GetWindow
RegisterClassExW
CreateWindowExW
SetCursorPos
TrackMouseEvent
SystemParametersInfoW
UpdateWindow
EmptyClipboard
SetClipboardData
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
OpenClipboard
GetClipboardViewer
SetClipboardViewer
ChangeClipboardChain
FindWindowW
SetScrollPos
GetScrollInfo
BeginPaint
EndPaint
RegisterWindowMessageW
SetActiveWindow
GetLastInputInfo
GetWindowPlacement
GetFocus
SetRect
SetCursor
CreateIconIndirect
ReleaseCapture
CheckMenuItem
EnableMenuItem
GetMenuItemInfoW
SetMenuItemInfoW
GetParent
SetWindowRgn
DeleteMenu
GetMenuState
GetMenuStringW
CheckMenuRadioItem
LoadMenuW
GetSubMenu
DialogBoxParamW
SetWindowTextW
GetWindowTextW
DrawTextW
GetDlgCtrlID
GetWindowTextLengthW
EnableWindow
IsWindowEnabled
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
EnumChildWindows
GetUpdateRgn
RedrawWindow
InvalidateRgn
LoadBitmapW
MonitorFromWindow
MonitorFromPoint
SetForegroundWindow
SwitchToThisWindow
IsIconic
DrawTextExW
PeekMessageW
MsgWaitForMultipleObjectsEx
TranslateMessage
DispatchMessageW
PostThreadMessageW
GetClassNameW
GetWindowDC
EndDialog
LoadImageW
FillRect
LoadIconW
MonitorFromRect
GetMonitorInfoW
AdjustWindowRect
GetSystemMetrics
ShowScrollBar
IsDialogMessageW
GetDesktopWindow
GetDlgItem

gdi32

SetTextColor
SetPixel
SetViewportOrgEx
SetBrushOrgEx
CreateSolidBrush
CreateCompatibleBitmap
BitBlt
SelectObject
CreateCompatibleDC
GetObjectW
CreatePalette
GetRegionData
GetRgnBox
CombineRgn
CreateRectRgnIndirect
CreateRectRgn
StretchBlt
FillRgn
SetStretchBltMode
CreateDIBSection
SetBkColor
RealizePalette
SelectPalette
DeleteDC
GetDeviceCaps
DeleteObject
SetDIBColorTable
Polygon
GetViewportOrgEx
CreateFontW
SetWindowOrgEx
CreateBitmap
BeginPath
EndPath
StrokeAndFillPath
DPtoLP
RoundRect
CreateRoundRectRgn
PatBlt
GetObjectType
ExtTextOutW
SetLayout
CreatePolygonRgn
SetBkMode
GetDIBits
SelectClipRgn
GetTextMetricsW
GetTextExtentPoint32W
GetBkMode
GetTextColor
CreatePen
MoveToEx
LineTo
GetPixel
GetStockObject
Rectangle
GetCurrentObject
TextOutW
GetClipBox
CreatePatternBrush
ExtCreatePen
SetRectRgn
CreateFontIndirectW
OffsetRgn
StretchDIBits
CreateDCW
ExtEscape
GetBitmapBits
GetLayout
Ellipse

winspool.drv

EnumPortsW
EnumPrintersW
EnumPrinterDriversW
SetPrinterW
AddPrinterW
DeletePrinter
GetPrinterW
ord203
StartDocPrinterW
ClosePrinter
EndDocPrinter
WritePrinter
SetJobW
OpenPrinterW
EnumPrintProcessorsW

comdlg32

CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW

advapi32

SetEntriesInAclW
GetSidIdentifierAuthority
LsaLookupNames
LsaFreeMemory
LsaClose
LsaOpenPolicy
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
OpenThreadToken
RegFlushKey
ImpersonateLoggedOnUser
AllocateAndInitializeSid
GetSecurityInfo
SetSecurityInfo
LogonUserW
LookupAccountSidW
LookupAccountNameW
EqualSid
FreeSid
RegCreateKeyW
RegOpenCurrentUser
CreateProcessAsUserW
GetNamedSecurityInfoW
GetAce
DeleteAce
SetNamedSecurityInfoW
StartServiceW
RevertToSelf
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
GetUserNameW
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
MakeSelfRelativeSD
InitializeSecurityDescriptor
InitiateSystemShutdownW
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
CreateWellKnownSid
SetSecurityDescriptorOwner
OpenSCManagerW
OpenServiceW
CloseServiceHandle
ControlService

shell32

ShellExecuteExW
ShellExecuteW
ExtractIconExW
ord155
SHGetFileInfoW
SHGetSpecialFolderLocation
Shell_NotifyIconW
DragQueryFileW
SHBrowseForFolderW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderPathW
DragFinish
DragAcceptFiles
ExtractIconW
SHAppBarMessage

ole32

CoTaskMemAlloc
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CoTaskMemRealloc
CoInitializeSecurity
IIDFromString
StringFromIID
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CLSIDFromProgID
CoMarshalInterThreadInterfaceInStream
ReleaseStgMedium
DoDragDrop
CoGetInterfaceAndReleaseStream
OleDuplicateData
CoRevokeClassObject
CoRegisterClassObject
ProgIDFromCLSID
CoInitializeEx
CoRevertToSelf
CoImpersonateClient
CoGetClassObject
OleLockRunning
RevokeDragDrop
StringFromGUID2
RegisterDragDrop
PropVariantClear
CoTaskMemFree
CLSIDFromString
CoCreateGuid
CoCreateInstance

oleaut32

LoadTypeLi
SysAllocString
SysFreeString
VariantInit
UnRegisterTypeLi
VarUI4FromStr
DispCallFunc
OleCreateFontIndirect
SysAllocStringLen
OleCreatePropertyFrame
SysStringLen
VarDateFromStr
VariantClear
VariantTimeToSystemTime
SystemTimeToVariantTime
LoadRegTypeLi
RegisterTypeLi

shlwapi

PathCompactPathW
AssocQueryStringW

comctl32

DestroyPropertySheetPage
InitCommonControlsEx
ImageList_Draw
ImageList_GetIconSize
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragMove
ImageList_EndDrag
ImageList_BeginDrag
ImageList_GetIcon
CreatePropertySheetPageW
PropertySheetW
ImageList_SetBkColor
ImageList_Remove
ImageList_Destroy
ImageList_Create
ImageList_ReplaceIcon

ws2_32

recv
WSAGetLastError
WSACleanup
WSAStartup
WSACloseEvent
WSAWaitForMultipleEvents
WSAEventSelect
WSASetEvent
WSASetLastError
accept
listen
WSARecv
WSARecvFrom
WSASend
send
WSADuplicateSocketW
WSAAddressToStringA
setsockopt
getsockname
ntohs
bind
htons
getsockopt
inet_addr
gethostbyname
inet_ntoa
htonl
getservbyname
gethostbyaddr
getservbyport
sendto
select
ioctlsocket
gethostname
getpeername
closesocket
socket
WSASocketW
connect
shutdown
ntohl
WSAResetEvent
recvfrom
WSACreateEvent
__WSAFDIsSet

mswsock

AcceptEx
GetAcceptExSockaddrs

msimg32

AlphaBlend

mpr

WNetOpenEnumW
WNetEnumResourceW
WNetCloseEnum

netapi32

NetServerEnum
NetWkstaGetInfo
NetUserModalsGet
NetUserGetInfo
NetApiBufferFree

setupapi

SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo

sensapi

IsNetworkAlive

wininet

HttpSendRequestExA
InternetCloseHandle
InternetSetOptionW
InternetOpenW
HttpQueryInfoW
InternetReadFile
InternetQueryDataAvailable
HttpEndRequestA
InternetWriteFile
InternetErrorDlg
HttpAddRequestHeadersA
HttpOpenRequestA
InternetGoOnlineA
InternetQueryOptionW
HttpSendRequestA
InternetConnectW

iphlpapi

IpRenewAddress
GetIfEntry
GetBestInterface
GetAdaptersInfo
GetAdapterIndex
DeleteIPAddress
FlushIpNetTable
SendARP
GetIpAddrTable

imagehlp

ImageGetCertificateHeader
ImageGetCertificateData
ImageEnumerateCertificates

secur32

GetUserNameExW

crypt32

CryptHashCertificate
CertFreeCertificateContext
CertGetNameStringW
CryptVerifyMessageSignature

wintrust

WinVerifyTrust
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminAcquireContext
CryptCATCatalogInfoFromContext
CryptCATAdminReleaseCatalogContext
CryptCATAdminReleaseContext
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
CryptCATAdminEnumCatalogFromHash

userenv

LoadUserProfileW
CreateEnvironmentBlock
DestroyEnvironmentBlock
UnloadUserProfile

wtsapi32

WTSQuerySessionInformationW
WTSCloseServer
WTSEnumerateProcessesW
WTSFreeMemory
WTSEnumerateSessionsW

Sections

.text
Size: 6.9MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 321KB - Virtual size: 434KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 678KB - Virtual size: 677KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e33c41946fafacdbe8735308ccff9b28

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

3d:27:af:be:a5:99:6f:13:e5:b5:62:44:21:f1:62:95Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

41:67:54:7f:d1:4b:3d:63:06:c1:48:76:e1:ed:e8:66:48:dd:d6:93Signer

Headers

DLL Characteristics

File Characteristics

Imports

avicap32

msvfw32

winmm

version

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

ws2_32

mswsock

msimg32

mpr

netapi32

setupapi

sensapi

wininet

iphlpapi

imagehlp

secur32

crypt32

wintrust

userenv

wtsapi32

Sections

.text Size: 6.9MB - Virtual size: 6.9MB

.rdata Size: 1.8MB - Virtual size: 1.8MB

.data Size: 321KB - Virtual size: 434KB

.tls Size: 512B - Virtual size: 2B

.rodata Size: 3KB - Virtual size: 2KB

.rsrc Size: 40KB - Virtual size: 40KB

.reloc Size: 678KB - Virtual size: 677KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

3d:27:af:be:a5:99:6f:13:e5:b5:62:44:21:f1:62:95
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

41:67:54:7f:d1:4b:3d:63:06:c1:48:76:e1:ed:e8:66:48:dd:d6:93
Signer

.text
Size: 6.9MB - Virtual size: 6.9MB

.rdata
Size: 1.8MB - Virtual size: 1.8MB

.data
Size: 321KB - Virtual size: 434KB

.tls
Size: 512B - Virtual size: 2B

.rodata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 40KB - Virtual size: 40KB

.reloc
Size: 678KB - Virtual size: 677KB