mystic | mkpub_part_b[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

mkpub_part_b.zip
Size

644KB
MD5

575885786d079750919aafe0f47785a2
SHA1

35dba4d9781c705eea072caf1ca7844dd241ccc6
SHA256

0a775c196299f276df502a546abce3fef0359e80fd2fc84cdde6dc9c91870de0
SHA512

ef0292381dadcdee4659a282e5f0635aee1790f16b55d24fcc8335d316dbf6a23dabfcecd9125b16a2f3f42a9f96a69923eee1454dd0cfc9d698a09ecb7ad14f
SSDEEP

12288:ZdMqfZaSgVk4CPmKbScpLvujuYI5WEEl4qgmFUqvCW9DDE4+NzTb:zpSpCPTuOvpYII1PghqaW9DDQ

Score

10^/10

mystic

Malware Config

Signatures

Detect Mystic stealer payload 1 IoCs

resource	yara_rule
static1/unpack001/4e0e4660d283270ae7abac2520b0bbd19324ff879c079ddb771c072bc7bbf60e.bin	family_mystic

Mystic family
mystic

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4e0e4660d283270ae7abac2520b0bbd19324ff879c079ddb771c072bc7bbf60e.bin
unpack001/4e1e7978279a0ae65856db0180a0fde56b17572d1483f15bf56a6875ac0c045a.bin
unpack001/4f78fafd88db3a202cd19735892319e7de50ff4c8d949239316f8ea5270578ce.bin
unpack001/53b125ce63cb17baee9c49fd3d7ae834ecac6168313ef7a92e46639262d96be3.bin

Files

mkpub_part_b.zip
.zip

Password: infected
36b5af66f601502999214171c0f4d217a65fcbbd7d2a6b93df13b8a39bd0250c.bin
.exe windows:4 windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:f9:d5:0a:6c:79:2c:9f:d3:9d:47:2e:98:37:b5:ff
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

14-03-2023 00:00

Not After

05-04-2025 23:59

Subject

SERIALNUMBER=4559077,CN=Now.gg\, INC,O=Now.gg\, INC,L=Campbell,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

ee:38:5f:8b:85:bf:38:9a:0f:aa:e1:e8:db:90:e3:1c:42:31:0a:60:48:01:7e:2d:f0:b9:4d:5e:24:88:6e:a4
Signer

Actual PE Digest

ee:38:5f:8b:85:bf:38:9a:0f:aa:e1:e8:db:90:e3:1c:42:31:0a:60:48:01:7e:2d:f0:b9:4d:5e:24:88:6e:a4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
4e0e4660d283270ae7abac2520b0bbd19324ff879c079ddb771c072bc7bbf60e.bin
.exe windows:5 windows x86

Password: infected

0139538a651a21148db92c7ae213c5f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
GetLastError
WriteConsoleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
GetStdHandle
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
HeapReAlloc
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
GetProcessHeap
HeapSize
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
DecodePointer

Sections

.text
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
4e1e7978279a0ae65856db0180a0fde56b17572d1483f15bf56a6875ac0c045a.bin
.exe windows:5 windows x86

Password: infected

e9df9444a99e49eb51fccc88bae85d1a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleInputW
GetConsoleAliasesLengthW
GetConsoleAliasExesA
ReadConsoleA
GetNamedPipeHandleStateA
GetModuleHandleExW
GetComputerNameW
FreeEnvironmentStringsA
FindNextVolumeMountPointA
EnumTimeFormatsW
GetCommandLineA
GetDriveTypeA
GetEnvironmentStrings
FindResourceExA
GetConsoleCP
LoadLibraryW
GetLocaleInfoW
SwitchToFiber
DeleteVolumeMountPointW
InterlockedPopEntrySList
GetFileAttributesA
HeapQueryInformation
SetSystemPowerState
GetCompressedFileSizeA
MultiByteToWideChar
GetVolumePathNameA
GetStartupInfoW
DisconnectNamedPipe
FlushFileBuffers
GetShortPathNameA
SetDefaultCommConfigA
GetLastError
GetCurrentDirectoryW
SetLastError
PeekConsoleInputW
MoveFileW
RemoveDirectoryA
EnumSystemCodePagesW
SetComputerNameA
GetTempFileNameA
LoadLibraryA
LocalAlloc
SetCalendarInfoW
CreateHardLinkW
AddAtomW
OpenJobObjectW
FindAtomA
GetTapeParameters
GetModuleHandleA
FindNextFileW
GetStringTypeW
VirtualProtect
PurgeComm
QueryPerformanceFrequency
GetShortPathNameW
FindFirstVolumeA
GetWindowsDirectoryW
GetCurrentProcessId
AddConsoleAliasA
ReadConsoleOutputCharacterW
GetCommandLineW
GetConsoleAliasesW
GetVolumeNameForVolumeMountPointA
WideCharToMultiByte
HeapFree
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
DeleteFileA
HeapReAlloc
HeapSetInformation
RaiseException
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapAlloc
IsProcessorFeaturePresent
HeapCreate
EnterCriticalSection
LeaveCriticalSection
SetFilePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LCMapStringW
Sleep
SetStdHandle
GetConsoleMode
RtlUnwind
HeapSize
WriteConsoleW
ReadFile
CloseHandle
CreateFileW

user32

CharUpperBuffA
CharUpperA

gdi32

GetCharWidthA
GetKerningPairsA

Sections

.text
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 30.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
4f78fafd88db3a202cd19735892319e7de50ff4c8d949239316f8ea5270578ce.bin
.dll windows:6 windows x64

Password: infected

edff42e34b3d86147cd19fb16d27e61c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceCounter
IsDebuggerPresent
CreateEventW
GetModuleHandleA
DeleteFileA
DeleteFileW
CloseHandle
GetLastError
SetEvent
ResetEvent
CreateEventA
Sleep
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount64
VirtualAlloc
VirtualFree
FreeLibrary
GetProcAddress
LoadLibraryW
FormatMessageA
FormatMessageW
MoveFileExA
MoveFileExW
MultiByteToWideChar
WideCharToMultiByte
GetACP
GetConsoleMode
SetConsoleMode
SetConsoleCP
SetConsoleOutputCP
GetSystemInfo
WaitForSingleObjectEx
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
DisableThreadLibraryCalls
InitializeSListHead
GetCurrentProcess
VirtualProtect
VirtualQuery
GetModuleHandleW
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
EnterCriticalSection
RaiseException

advapi32

SystemFunction036

msvcp140

_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_signal
?_Throw_C_error@std@@YAXH@Z
?_Xbad_function_call@std@@YAXXZ
_Cnd_init_in_situ
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Thrd_id
?_Xlength_error@std@@YAXPEBD@Z
_Mtx_unlock

vcruntime140

__std_type_info_destroy_list
memmove
memcpy
memcmp
_CxxThrowException
__current_exception_context
__std_exception_copy
strchr
__current_exception
__C_specific_handler
__std_exception_destroy
_purecall
__std_terminate
memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

abort
_initialize_narrow_environment
_register_onexit_function
_seh_filter_dll
_crt_atexit
_cexit
_initterm
_initterm_e
_execute_onexit_table
_errno
_invalid_parameter_noinfo_noreturn
strerror
terminate
_initialize_onexit_table
_configure_narrow_argv

api-ms-win-crt-heap-l1-1-0

free
malloc
realloc
_callnewh

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-stdio-l1-1-0

_get_osfhandle
_setmode
fwrite
fputc
_fileno
fflush
__acrt_iob_func
fclose
__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

strnlen
_stricmp
strcmp

Exports

Exports

_register_koffi_

Sections

.text
Size: 403KB - Virtual size: 402KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
53b125ce63cb17baee9c49fd3d7ae834ecac6168313ef7a92e46639262d96be3.bin
.exe windows:5 windows x86

Password: infected

e9df9444a99e49eb51fccc88bae85d1a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleInputW
GetConsoleAliasesLengthW
GetConsoleAliasExesA
ReadConsoleA
GetNamedPipeHandleStateA
GetModuleHandleExW
GetComputerNameW
FreeEnvironmentStringsA
FindNextVolumeMountPointA
EnumTimeFormatsW
GetCommandLineA
GetDriveTypeA
GetEnvironmentStrings
FindResourceExA
GetConsoleCP
LoadLibraryW
GetLocaleInfoW
SwitchToFiber
DeleteVolumeMountPointW
InterlockedPopEntrySList
GetFileAttributesA
HeapQueryInformation
SetSystemPowerState
GetCompressedFileSizeA
MultiByteToWideChar
GetVolumePathNameA
GetStartupInfoW
DisconnectNamedPipe
FlushFileBuffers
GetShortPathNameA
SetDefaultCommConfigA
GetLastError
GetCurrentDirectoryW
SetLastError
PeekConsoleInputW
MoveFileW
RemoveDirectoryA
EnumSystemCodePagesW
SetComputerNameA
GetTempFileNameA
LoadLibraryA
LocalAlloc
SetCalendarInfoW
CreateHardLinkW
AddAtomW
OpenJobObjectW
FindAtomA
GetTapeParameters
GetModuleHandleA
FindNextFileW
GetStringTypeW
VirtualProtect
PurgeComm
QueryPerformanceFrequency
GetShortPathNameW
FindFirstVolumeA
GetWindowsDirectoryW
GetCurrentProcessId
AddConsoleAliasA
ReadConsoleOutputCharacterW
GetCommandLineW
GetConsoleAliasesW
GetVolumeNameForVolumeMountPointA
WideCharToMultiByte
HeapFree
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
DeleteFileA
HeapReAlloc
HeapSetInformation
RaiseException
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
HeapAlloc
IsProcessorFeaturePresent
HeapCreate
EnterCriticalSection
LeaveCriticalSection
SetFilePointer
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
LCMapStringW
Sleep
SetStdHandle
GetConsoleMode
RtlUnwind
HeapSize
WriteConsoleW
ReadFile
CloseHandle
CreateFileW

user32

CharUpperBuffA
CharUpperA

gdi32

GetCharWidthA
GetKerningPairsA

Sections

.text
Size: 233KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 30.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

04:f9:d5:0a:6c:79:2c:9f:d3:9d:47:2e:98:37:b5:ffCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

ee:38:5f:8b:85:bf:38:9a:0f:aa:e1:e8:db:90:e3:1c:42:31:0a:60:48:01:7e:2d:f0:b9:4d:5e:24:88:6e:a4Signer

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 151KB - Virtual size: 150KB

.rsrc Size: 133KB - Virtual size: 133KB

.reloc Size: 512B - Virtual size: 12B

Password: infected

0139538a651a21148db92c7ae213c5f3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 107KB - Virtual size: 106KB

.rdata Size: 24KB - Virtual size: 24KB

.data Size: 2KB - Virtual size: 7KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 4KB - Virtual size: 4KB

Password: infected

e9df9444a99e49eb51fccc88bae85d1a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 233KB - Virtual size: 232KB

.data Size: 15KB - Virtual size: 30.3MB

.rsrc Size: 45KB - Virtual size: 45KB

Password: infected

edff42e34b3d86147cd19fb16d27e61c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

Exports

Exports

Sections

.text Size: 403KB - Virtual size: 402KB

.rdata Size: 72KB - Virtual size: 71KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

04:f9:d5:0a:6c:79:2c:9f:d3:9d:47:2e:98:37:b5:ff
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

ee:38:5f:8b:85:bf:38:9a:0f:aa:e1:e8:db:90:e3:1c:42:31:0a:60:48:01:7e:2d:f0:b9:4d:5e:24:88:6e:a4
Signer

.text
Size: 151KB - Virtual size: 150KB

.rsrc
Size: 133KB - Virtual size: 133KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 107KB - Virtual size: 106KB

.rdata
Size: 24KB - Virtual size: 24KB

.data
Size: 2KB - Virtual size: 7KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 4KB

.text
Size: 233KB - Virtual size: 232KB

.data
Size: 15KB - Virtual size: 30.3MB

.rsrc
Size: 45KB - Virtual size: 45KB

.text
Size: 403KB - Virtual size: 402KB

.rdata
Size: 72KB - Virtual size: 71KB

.data
Size: 1KB - Virtual size: 78KB

.pdata
Size: 31KB - Virtual size: 30KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 5KB - Virtual size: 4KB

.text
Size: 233KB - Virtual size: 233KB

.data
Size: 15KB - Virtual size: 30.3MB

.rsrc
Size: 45KB - Virtual size: 45KB