388f05159120d9cd84700deae70d8540_dll32_JC[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

388f05159120d9cd84700deae70d8540_dll32_JC.dll
Size

280KB
MD5

388f05159120d9cd84700deae70d8540
SHA1

80bf21c87eb4df79c4816fddb9a443c68e256f51
SHA256

b789496e1e6d07916ef4ec543511ff1a45b8e577bb0717c369ff8f8d0bff4bc9
SHA512

05eab793e14005b4d147821551dbf7ef32effd732d5831f41e56198455a82cf58df898466fc5a7225fdea30c77495ccf71ccb351784a27031e51083fb5104c63
SSDEEP

6144:2X6sM9p4udTNCTKz/ZCCSQRd/0jK7akI2PSBVbHvTU5AYZhoDpTBJDOKvOdxwd:2qrP1sTChCPQ/0e7VIMwYAYEDpTrg8d

Score

1^/10

Malware Config

Signatures

Files

388f05159120d9cd84700deae70d8540_dll32_JC.dll
.dll windows:5 windows x86

71b67fd9c78e58afcf3d233c8bbe8546

Code Sign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3e:6b:e9:8f:73:7a:9c:11:d6:9c:e0:b3:16:69:6e:eb
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/12/2009, 00:00

Not After

21/12/2012, 23:59

Subject

CN=Duowan Entertainment Information Technology (Beijing) Co.\, Ltd.,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Duowan Entertainment Information Technology (Beijing) Co.\, Ltd.,L=beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

f8:fa:46:88:ff:e6:44:5b:a3:37:d8:23:3a:20:03:2b:8e:8c:ec:67
Signer

Actual PE Digest

f8:fa:46:88:ff:e6:44:5b:a3:37:d8:23:3a:20:03:2b:8e:8c:ec:67

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

sesscomm

?getSign@ProtoUInfo@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getGender@ProtoUInfo@@QAEHXZ
?setProxy@ProtoLink@@UAEXPAUIProxy@protocol@@@Z
?getLinkHandler@ProtoLink@@UAEPAVIProtoLinkHandler@@XZ
?getNick@ProtoUInfo@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getImid@ProtoUInfo@@QAEIXZ
?getRecvBytes@ProtoLink@@UBE_KXZ
?getLastRecvTime@ProtoLink@@UBEIXZ
?isSameLink@ProtoLink@@UBE_NI@Z
?isTcpLink@ProtoLink@@UBE_NXZ
?isReady@ProtoLink@@UBE_NXZ
?isConnecting@ProtoLink@@UBE_NXZ
?isConnected@ProtoLink@@UBE_NXZ
?getLastRtt@ProtoLink@@UBEIXZ
?getAvgRtt@ProtoLink@@UBEIXZ
?addRtt@ProtoLink@@UAEXH@Z
?getConnId@ProtoLink@@UBEIXZ
?getLocalPort@ProtoLink@@UBEGXZ
?getPeerPort@ProtoLink@@UBEGXZ
?getLocalIp@ProtoLink@@UBEIXZ
?getPeerIp@ProtoLink@@UBEIXZ
?getLastError@ProtoLink@@UBEIXZ
?startKeepAlive@ProtoLink@@UAEXI@Z
?getStatus@ProtoLink@@UAE?AW4LinkStatus@IProtoLink@@XZ
?setStatus@ProtoLink@@UAEXW4LinkStatus@IProtoLink@@@Z
?close@ProtoLink@@UAEXXZ
?send@ProtoLink@@UAEXPAVIProtoPacket@@@Z
?send@ProtoLink@@UAEXPBDI@Z
?send@ProtoLink@@UAEXIAAUMarshallable@sox@@@Z
?reconnect@ProtoLink@@UAE_NXZ
?connect@ProtoLink@@UAE_NIABV?$vector@GV?$allocator@G@std@@@std@@@Z
?connect@ProtoLink@@UAE_NV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@GV?$allocator@G@std@@@3@@Z
??0ProtoTcpLink@@QAE@HPAVIProtoLinkHandler@@@Z
??1ProtoLink@@UAE@XZ
?getSpendTime@ProtoStatData@@QAEIIII@Z
?newPacket@ProtoPacketPool@@QAEPAVIProtoPacket@@PBDHH@Z
?freePacket@ProtoPacketPool@@QAEXPAVIProtoPacket@@@Z
?unpack@ProtoHelper@@SAXPBDHAAUMarshallable@sox@@@Z
?probeTime@ProtoStatData@@QAEXII@Z
?IPToString@ProtoHelper@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z
?getInstance@ProtoStatData@@SAPAV1@XZ
?getInt@ProtoStatData@@QAEIII@Z
?setInt@ProtoStatData@@QAEXIII@Z
??0ProtoIPInfo@@QAE@XZ
?getIP@ProtoIPInfo@@QAEIXZ
?getPorts@ProtoIPInfo@@QAEABV?$vector@GV?$allocator@G@std@@@std@@XZ
?getIspType@ProtoUInfo@@QAEHXZ
??0ProtoIPInfo@@QAE@_NIABV?$vector@GV?$allocator@G@std@@@std@@@Z
?clone@ProtoIPInfo@@QAEXAAV1@@Z
?ProtoToString@ProtoHelper@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IABUMarshallable@sox@@@Z
??0ProtoUInfo@@QAE@XZ
?setNick@ProtoUInfo@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setSign@ProtoUInfo@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setGender@ProtoUInfo@@QAEXH@Z
?setPid@ProtoUInfo@@QAEXI@Z
?setUid@ProtoUInfo@@QAEXI@Z
?setSid@ProtoUInfo@@QAEXI@Z
?setImid@ProtoUInfo@@QAEXI@Z
?setIspType@ProtoUInfo@@QAEXH@Z
?setCookie@ProtoUInfo@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?setAsid@ProtoUInfo@@QAEXI@Z
?UnZipString@ProtoHelper@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV23@I@Z
?getCookie@ProtoUInfo@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?getSid@ProtoUInfo@@QAEIXZ
?getUid@ProtoUInfo@@QAEIXZ
?currentSystemTime@ProtoTime@@SAIXZ
?getPid@ProtoUInfo@@QAEIXZ

ws2_32

inet_ntoa
inet_addr

winmm

timeGetTime

dwutility

?GetUserAppDataDir@ufile@DwUtility@@SA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ
?dwUtilitym2@dwBaseFunc@DwUtility@@SAPAEPBEIPAE@Z

dwbase

??0CFilterOption@Data@@QAE@XZ
?DoLog@@YAXGPBD0G0PBG@Z
?queryDatabase@Data@@YA?AV?$comptr@UIDatabase@Data@@@@K@Z
insert_name_id
??1CFilterOption@Data@@QAE@XZ
?orderBy@CFilterOption@Data@@QAEAAV12@ABUNAME_ID@@H@Z
??BCFilterOption@Data@@QBEPBV01@XZ

kernel32

MultiByteToWideChar
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
InterlockedIncrement
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateDirectoryW
QueryPerformanceCounter
InterlockedDecrement
WideCharToMultiByte

msvcp90

??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
?length@?$char_traits@D@std@@SAIPBD@Z
?width@ios_base@std@@QBEHXZ
?flags@ios_base@std@@QBEHXZ
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?eof@?$char_traits@D@std@@SAHXZ
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?width@ios_base@std@@QAEHH@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?good@ios_base@std@@QBE_NXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?data@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setf@ios_base@std@@QAEHHH@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$allocator@G@std@@QAE@XZ
??0?$allocator@G@std@@QAE@ABV01@@Z
?deallocate@?$allocator@G@std@@QAEXPAGI@Z
?allocate@?$allocator@G@std@@QAEPAGI@Z
?max_size@?$allocator@G@std@@QBEIXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ

shlwapi

PathFileExistsW

msvcr90

_purecall
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
__CxxFrameHandler3
??_V@YAXPAX@Z
memcpy
_invalid_parameter_noinfo
??2@YAPAXI@Z
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
free
malloc
_snwprintf_s
strlen
memmove
memset
memmove_s
atoi
rand
_vswprintf
fclose
fwrite
_wfopen
_atoi64
_itoa
_ui64toa
wcslen
?terminate@@YAXXZ
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
??3@YAXPAX@Z

Exports

Exports

??0CPerfRecord@Perf@@QAE@XZ
??0IAudioMod@@QAE@ABV0@@Z
??0IAudioMod@@QAE@XZ
??0IProtoLink@@QAE@ABV0@@Z
??0IProtoLink@@QAE@XZ
??0IProtoLinkHandler@@QAE@ABV0@@Z
??0IProtoLinkHandler@@QAE@XZ
??0IProtoPacket@@QAE@ABV0@@Z
??0IProtoPacket@@QAE@XZ
??0IProtoTaskThread@@QAE@ABV0@@Z
??0IProtoTaskThread@@QAE@XZ
??0ISInfoMod@@QAE@ABV0@@Z
??0ISInfoMod@@QAE@XZ
??0IServiceMod@@QAE@ABV0@@Z
??0IServiceMod@@QAE@XZ
??0ISessionMod@@QAE@ABV0@@Z
??0ISessionMod@@QAE@XZ
??0ProtoIPInfo@@QAE@ABV0@@Z
??0ProtoLink@@QAE@ABV0@@Z
??0ProtoTcpLink@@QAE@ABV0@@Z
??0ProtoUInfo@@QAE@ABV0@@Z
??0ProtoUdpLink@@QAE@ABV0@@Z
??1IAudioMod@@UAE@XZ
??1IProtoLink@@UAE@XZ
??1IProtoPacket@@UAE@XZ
??1IProtoTaskThread@@UAE@XZ
??1ISInfoMod@@UAE@XZ
??1IServiceMod@@UAE@XZ
??1ISessionMod@@UAE@XZ
??1ProtoIPInfo@@QAE@XZ
??1ProtoTcpLink@@UAE@XZ
??1ProtoUInfo@@QAE@XZ
??1ProtoUdpLink@@UAE@XZ
??4CPerfRecord@Perf@@QAEAAV01@ABV01@@Z
??4IAudioMod@@QAEAAV0@ABV0@@Z
??4IProtoLink@@QAEAAV0@ABV0@@Z
??4IProtoLinkHandler@@QAEAAV0@ABV0@@Z
??4IProtoPacket@@QAEAAV0@ABV0@@Z
??4IProtoTaskThread@@QAEAAV0@ABV0@@Z
??4ISInfoMod@@QAEAAV0@ABV0@@Z
??4IServiceMod@@QAEAAV0@ABV0@@Z
??4ISessionMod@@QAEAAV0@ABV0@@Z
??4ProtoA2U@@QAEAAV0@ABV0@@Z
??4ProtoHelper@@QAEAAV0@ABV0@@Z
??4ProtoIPInfo@@QAEAAV0@ABV0@@Z
??4ProtoLink@@QAEAAV0@ABV0@@Z
??4ProtoPacketPool@@QAEAAV0@ABV0@@Z
??4ProtoStatData@@QAEAAV0@ABV0@@Z
??4ProtoTcpLink@@QAEAAV0@ABV0@@Z
??4ProtoTime@@QAEAAV0@ABV0@@Z
??4ProtoUInfo@@QAEAAV0@ABV0@@Z
??4ProtoUdpLink@@QAEAAV0@ABV0@@Z
??_7IAudioMod@@6B@
??_7IProtoLink@@6B@
??_7IProtoLinkHandler@@6B@
??_7IProtoPacket@@6B@
??_7IProtoTaskThread@@6B@
??_7ISInfoMod@@6B@
??_7IServiceMod@@6B@
??_7ISessionMod@@6B@
??_7ProtoLink@@6B@
??_7ProtoTcpLink@@6B@
??_7ProtoUdpLink@@6B@
?GetInstance@CPerfRecord@Perf@@SAPAV12@XZ
?addr_ntoa@ProtoA2U@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@K@Z
?app2net@ProtoA2U@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@3@H@Z
?app2net@ProtoA2U@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBGH@Z
?net2app@ProtoA2U@@SA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z
?net2app@ProtoA2U@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAPAGH@Z
?s_pImpl@?1??GetInstance@CPerfRecord@Perf@@SAPAV23@XZ@4PAV23@A
?uitow10@ProtoA2U@@SA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@I@Z
_getModule@4
releaseModule

Sections

.text
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71b67fd9c78e58afcf3d233c8bbe8546

Code Sign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

3e:6b:e9:8f:73:7a:9c:11:d6:9c:e0:b3:16:69:6e:ebCertificate

Extended Key Usages

Key Usages

f8:fa:46:88:ff:e6:44:5b:a3:37:d8:23:3a:20:03:2b:8e:8c:ec:67Signer

Headers

DLL Characteristics

File Characteristics

Imports

sesscomm

ws2_32

winmm

dwutility

dwbase

kernel32

msvcp90

shlwapi

msvcr90

Exports

Exports

Sections

.text Size: 191KB - Virtual size: 191KB

.rdata Size: 65KB - Virtual size: 64KB

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 17KB - Virtual size: 17KB

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

3e:6b:e9:8f:73:7a:9c:11:d6:9c:e0:b3:16:69:6e:eb
Certificate

f8:fa:46:88:ff:e6:44:5b:a3:37:d8:23:3a:20:03:2b:8e:8c:ec:67
Signer

.text
Size: 191KB - Virtual size: 191KB

.rdata
Size: 65KB - Virtual size: 64KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 17KB - Virtual size: 17KB