NEAS[.]5de8ff8330a9abf6fddab31b1f0bd940[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.5de8ff8330a9abf6fddab31b1f0bd940.exe
Size

172KB
MD5

5de8ff8330a9abf6fddab31b1f0bd940
SHA1

dc9d5f90f90ccd42471c1a8d869b54bffcc6d3a6
SHA256

9efcf468ff891f441cedf93495cba99bcb87bc317df105cdcf312bb4a3a7b806
SHA512

8e2e1fb88065af71df71fff8bd08cf183226d3a3e702b0ffa7f36e5ce4dd5842e4e8a64cbf3704387080f9e5a6efe671ea7d8571f3e8dad34d23e3521e1ceb71
SSDEEP

3072:8Q/VBTS1i+y6Bj02rB4oonLFbA/7dDhD0xGrDU:8Q/V1S1O2rJonLFs/7sxGrw

Score

1^/10

Malware Config

Signatures

Files

NEAS.5de8ff8330a9abf6fddab31b1f0bd940.exe
.dll windows:6 windows x64

9ca79f100b8491786ea92d8eebcabf17

Code Sign

05:55:56:bc:f2:5e:a4:35:35:c3:a4:0f:d5:ab:45:72
Certificate

Issuer

CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2013, 12:00

Not After

15/01/2038, 12:00

Subject

CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:b8:a7:40:b9:15:8d:03:51:43:bc:59:d9:f0:40:29
Certificate

Issuer

CN=DigiCert Global Root G3,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:f6:73:c6:05:5d:d2:cc:39:bd:24:ef:77:43:3f:cb
Certificate

Issuer

CN=DigiCert Global G3 Code Signing ECC SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

07/07/2021, 00:00

Not After

12/08/2024, 23:59

Subject

SERIALNUMBER=913100006972689465,CN=上海大智慧信息科技有限公司,O=上海大智慧信息科技有限公司,ST=上海市,C=CN,1.3.6.1.4.1.311.60.2.1.1=#0c27e4b8ade59bbdefbc88e4b88ae6b5b7efbc89e887aae794b1e8b4b8e69893e8af95e9aa8ce58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

dc:15:bd:8c:b4:23:4c:c2:db:b3:db:3a:7a:36:2c:f9:87:79:1a:ce:22:eb:ae:ee:ef:1f:69:23:f0:ef:e3:47
Signer

Actual PE Digest

dc:15:bd:8c:b4:23:4c:c2:db:b3:db:3a:7a:36:2c:f9:87:79:1a:ce:22:eb:ae:ee:ef:1f:69:23:f0:ef:e3:47

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

sqlite3

sqlite3_errmsg
sqlite3_changes
sqlite3_reset
sqlite3_bind_text
sqlite3_bind_int
sqlite3_bind_double
sqlite3_bind_blob
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_index
sqlite3_open
sqlite3_close
sqlite3_exec
sqlite3_get_table
sqlite3_last_insert_rowid
sqlite3_busy_timeout
sqlite3_finalize
sqlite3_prepare_v2
sqlite3_get_autocommit
sqlite3_free_table
sqlite3_step
sqlite3_column_type
sqlite3_column_decltype
sqlite3_column_name
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_double
sqlite3_column_int64
sqlite3_column_int
sqlite3_column_text
sqlite3_column_count
sqlite3_vmprintf
sqlite3_free
sqlite3_mprintf
sqlite3_libversion_number
sqlite3_libversion
sqlite3_interrupt

shlwapi

PathIsRelativeW
PathFileExistsW
PathIsDirectoryW

kernel32

MultiByteToWideChar
WideCharToMultiByte
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
DeleteFileW
GetFullPathNameW
GetModuleFileNameW
MoveFileW
CreateDirectoryW
CreateFileW
K32GetModuleFileNameExA
K32EnumProcessModules
OpenProcess
GetCurrentProcessId
SetFilePointer
MoveFileA
SetLastError
CreateDirectoryA
CopyFileA
RemoveDirectoryA
FindClose
FindNextFileA
GetLastError
DeleteFileA
GetFileAttributesA
SetFileAttributesA
CreateFileA
GetFileSize
ReadFile
CloseHandle
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
FindFirstFileA

user32

MessageBoxW

shell32

SHFileOperationW

msvcp140

?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

memmove
wcsrchr
wcschr
memcpy
memchr
__C_specific_handler
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memset
__std_type_info_destroy_list
__CxxFrameHandler3
memcmp
strchr

api-ms-win-crt-stdio-l1-1-0

fclose
__stdio_common_vsprintf
fopen
__stdio_common_vsprintf_s
__stdio_common_vsscanf
fgets
fread
__stdio_common_vswprintf_s

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-convert-l1-1-0

atoi
atof

api-ms-win-crt-string-l1-1-0

wcsncpy_s
wcscpy_s
strcpy_s
strncpy
wcscat_s
toupper
isdigit
isalnum
isalpha

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_register_onexit_function
terminate
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_crt_atexit
_cexit
_initterm
_initterm_e

api-ms-win-crt-filesystem-l1-1-0

_splitpath
_wsplitpath_s
_wmakepath_s
_makepath
_stat64i32

api-ms-win-crt-time-l1-1-0

strftime
_gmtime64
_mktime64
_gmtime64_s
_localtime64_s
__dstbias
__timezone

Exports

Exports

??0AnsiToUtf@dzh_util@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0AnsiToUtf@dzh_util@@QEAA@PEBD@Z
??0AnsiToUtf@dzh_util@@QEAA@XZ
??0CExeTimeGuard@dzh_util@@QEAA@AEBV01@@Z
??0CExeTimeGuard@dzh_util@@QEAA@PEBDP6AX0N@Z@Z
??0CHighTimer@dzh_util@@QEAA@AEBV01@@Z
??0CHighTimer@dzh_util@@QEAA@XZ
??0CHighTimerStack@dzh_util@@QEAA@AEBV01@@Z
??0CHighTimerStack@dzh_util@@QEAA@XZ
??0CRC32@dzh_util@@AEAA@XZ
??0CTimeCus@dzh_util@@QEAA@AEBU_SYSTEMTIME@@H@Z
??0CTimeCus@dzh_util@@QEAA@GGH@Z
??0CTimeCus@dzh_util@@QEAA@HHHHHHH@Z
??0CTimeCus@dzh_util@@QEAA@XZ
??0CTimeCus@dzh_util@@QEAA@_J@Z
??0CppSQLite3Binary@@QEAA@XZ
??0CppSQLite3Buffer@@QEAA@XZ
??0CppSQLite3DB@@AEAA@AEBV0@@Z
??0CppSQLite3DB@@QEAA@XZ
??0CppSQLite3Exception@@QEAA@AEBV0@@Z
??0CppSQLite3Exception@@QEAA@HPEAD_N@Z
??0CppSQLite3Query@@QEAA@AEBV0@@Z
??0CppSQLite3Query@@QEAA@PEAUsqlite3@@PEAUsqlite3_stmt@@_N2@Z
??0CppSQLite3Query@@QEAA@XZ
??0CppSQLite3Statement@@QEAA@AEBV0@@Z
??0CppSQLite3Statement@@QEAA@PEAUsqlite3@@PEAUsqlite3_stmt@@@Z
??0CppSQLite3Statement@@QEAA@XZ
??0CppSQLite3Table@@QEAA@AEBV0@@Z
??0CppSQLite3Table@@QEAA@PEAPEADHH@Z
??0CppSQLite3Table@@QEAA@XZ
??0GDirInfo@dzh_util@@QEAA@PEB_W@Z
??0GFileInfo@dzh_util@@QEAA@PEB_W@Z
??0GFileStream@dzh_util@@QEAA@PEB_W@Z
??0GFullPath@dzh_util@@QEAA@AEBV01@@Z
??0GFullPath@dzh_util@@QEAA@PEB_W@Z
??0GPathInfo@dzh_util@@QEAA@PEB_W@Z
??0PFloat@@QEAA@AEBV0@@Z
??0PFloat@@QEAA@PEBD@Z
??0PFloat@@QEAA@XZ
??0PFloat@@QEAA@_J@Z
??0PFloat@@QEAA@_JG@Z
??0PinYin@dzh_util@@AEAA@XZ
??0PinYin@dzh_util@@QEAA@AEBV01@@Z
??0TimeConvert@dzh_util@@AEAA@XZ
??0UtfToAnsi@dzh_util@@QEAA@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0UtfToAnsi@dzh_util@@QEAA@PEB_W@Z
??0UtfToAnsi@dzh_util@@QEAA@XZ
??0VFloat@@QEAA@AEBV0@@Z
??0VFloat@@QEAA@PEBD@Z
??0VFloat@@QEAA@XZ
??0VFloat@@QEAA@_J@Z
??0VFloat@@QEAA@_JG@Z
??0dzh_time_t@@QEAA@AEA_J@Z
??0dzh_time_t@@QEAA@AEBV0@@Z
??0dzh_time_t@@QEAA@HHHHHHHHF@Z
??0dzh_time_t@@QEAA@IIF@Z
??0dzh_time_t@@QEAA@PEAUtm@@F@Z
??0dzh_time_t@@QEAA@PEBD0000000F@Z
??0dzh_time_t@@QEAA@PEBDF@Z
??0dzh_time_t@@QEAA@XZ
??0dzh_time_t@@QEAA@_K@Z
??0dzh_time_t@@QEAA@_KGG@Z
??1AnsiToUtf@dzh_util@@QEAA@XZ
??1CExeTimeGuard@dzh_util@@QEAA@XZ
??1CHighTimer@dzh_util@@UEAA@XZ
??1CHighTimerStack@dzh_util@@UEAA@XZ
??1CRC32@dzh_util@@AEAA@XZ
??1CppSQLite3Binary@@QEAA@XZ
??1CppSQLite3Buffer@@QEAA@XZ
??1CppSQLite3DB@@UEAA@XZ
??1CppSQLite3Exception@@UEAA@XZ
??1CppSQLite3Query@@UEAA@XZ
??1CppSQLite3Statement@@UEAA@XZ
??1CppSQLite3Table@@UEAA@XZ
??1GDirInfo@dzh_util@@UEAA@XZ
??1GFileInfo@dzh_util@@UEAA@XZ
??1GFileStream@dzh_util@@QEAA@XZ
??1GFullPath@dzh_util@@QEAA@XZ
??1GPathInfo@dzh_util@@UEAA@XZ
??1PinYin@dzh_util@@AEAA@XZ
??1TimeConvert@dzh_util@@AEAA@XZ
??1UtfToAnsi@dzh_util@@QEAA@XZ
??4CExeTimeGuard@dzh_util@@QEAAAEAV01@AEBV01@@Z
??4CHighTimer@dzh_util@@QEAAAEAV01@AEBV01@@Z
??4CHighTimerStack@dzh_util@@QEAAAEAV01@AEBV01@@Z
??4CRC32@dzh_util@@QEAAAEAV01@AEBV01@@Z
??4CTimeCus@dzh_util@@QEAAAEAV01@$$QEAV01@@Z
??4CTimeCus@dzh_util@@QEAAAEAV01@AEBV01@@Z
??4CTimeCus@dzh_util@@QEAAAEAV01@_J@Z
??4CppSQLite3Binary@@QEAAAEAV0@AEBV0@@Z
??4CppSQLite3Buffer@@QEAAAEAV0@AEBV0@@Z
??4CppSQLite3DB@@AEAAAEAV0@AEBV0@@Z
??4CppSQLite3Exception@@QEAAAEAV0@AEBV0@@Z
??4CppSQLite3Query@@QEAAAEAV0@AEBV0@@Z
??4CppSQLite3Statement@@QEAAAEAV0@AEBV0@@Z
??4CppSQLite3Table@@QEAAAEAV0@AEBV0@@Z
??4FileDir@dzh_util@@QEAAAEAV01@$$QEAV01@@Z
??4FileDir@dzh_util@@QEAAAEAV01@AEBV01@@Z
??4GDirectory@dzh_util@@QEAAAEAV01@$$QEAV01@@Z
??4GDirectory@dzh_util@@QEAAAEAV01@AEBV01@@Z
??4GFile@dzh_util@@QEAAAEAV01@$$QEAV01@@Z
??4GFile@dzh_util@@QEAAAEAV01@AEBV01@@Z
??4GFileStream@dzh_util@@QEAAAEAV01@AEBV01@@Z
??4GFullPath@dzh_util@@QEAAAEAV01@AEBV01@@Z
??4PFloat@@QEBAAEBV0@AEBV0@@Z
??4PFloat@@QEBAAEBV0@PEBD@Z
??4PFloat@@QEBAAEBV0@_J@Z
??4PinYin@dzh_util@@QEAAAEAV01@AEBV01@@Z
??4TimeConvert@dzh_util@@QEAAAEAV01@AEBV01@@Z
??4VFloat@@QEBAAEBV0@AEBV0@@Z
??4VFloat@@QEBAAEBV0@PEBD@Z
??4VFloat@@QEBAAEBV0@_J@Z
??4crpty@dzh_util@@QEAAAEAV01@$$QEAV01@@Z
??4crpty@dzh_util@@QEAAAEAV01@AEBV01@@Z
??4dzh_time_t@@QEBAAEBV0@AEBV0@@Z
??4dzh_time_t@@QEBAAEBV0@AEB_K@Z
??8CTimeCus@dzh_util@@QEBA_NV01@@Z
??8PFloat@@QEBA_NAEBV0@@Z
??8PFloat@@QEBA_NPEBD@Z
??8PFloat@@QEBA_N_J@Z
??8VFloat@@QEBA_NAEBV0@@Z
??8VFloat@@QEBA_NPEBD@Z
??8VFloat@@QEBA_N_J@Z
??8dzh_time_t@@QEBA_NAEBV0@@Z
??8dzh_time_t@@QEBA_NAEB_K@Z
??9CTimeCus@dzh_util@@QEBA_NV01@@Z
??9PFloat@@QEBA_NAEBV0@@Z
??9PFloat@@QEBA_NPEBD@Z
??9PFloat@@QEBA_N_J@Z
??9VFloat@@QEBA_NAEBV0@@Z
??9VFloat@@QEBA_NPEBD@Z
??9VFloat@@QEBA_N_J@Z
??9dzh_time_t@@QEBA_NAEBV0@@Z
??9dzh_time_t@@QEBA_NAEB_K@Z
??BAnsiToUtf@dzh_util@@QEAAPEB_WXZ
??BCppSQLite3Buffer@@QEAAPEBDXZ
??BGFullPath@dzh_util@@QEAAPEB_WXZ
??BPFloat@@QEBANXZ
??BUtfToAnsi@dzh_util@@QEAAPEBDXZ
??BVFloat@@QEBANXZ
??DPFloat@@QEBA?AV0@AEBV0@@Z
??DPFloat@@QEBA?AV0@PEBD@Z
??DPFloat@@QEBA?AV0@_J@Z
??DVFloat@@QEBA?AV0@AEBV0@@Z
??DVFloat@@QEBA?AV0@PEBD@Z
??DVFloat@@QEBA?AV0@_J@Z
??Ddzh_time_t@@AEBA?AV0@AEBV0@@Z
??Ddzh_time_t@@AEBA?AV0@AEB_K@Z
??GPFloat@@QEBA?AV0@AEBV0@@Z
??GPFloat@@QEBA?AV0@PEBD@Z
??GPFloat@@QEBA?AV0@_J@Z
??GVFloat@@QEBA?AV0@AEBV0@@Z
??GVFloat@@QEBA?AV0@PEBD@Z
??GVFloat@@QEBA?AV0@_J@Z
??Gdzh_time_t@@QEAA?AV0@AEBV0@@Z
??Gdzh_time_t@@QEAA?AV0@AEB_K@Z
??HPFloat@@QEBA?AV0@AEBV0@@Z
??HPFloat@@QEBA?AV0@PEBD@Z
??HPFloat@@QEBA?AV0@_J@Z
??HVFloat@@QEBA?AV0@AEBV0@@Z
??HVFloat@@QEBA?AV0@PEBD@Z
??HVFloat@@QEBA?AV0@_J@Z
??Hdzh_time_t@@QEAA?AV0@AEBV0@@Z
??Hdzh_time_t@@QEAA?AV0@AEB_K@Z
??KPFloat@@QEBA?AV0@AEBV0@@Z
??KPFloat@@QEBA?AV0@PEBD@Z
??KPFloat@@QEBA?AV0@_J@Z
??KVFloat@@QEBA?AV0@AEBV0@@Z
??KVFloat@@QEBA?AV0@PEBD@Z
??KVFloat@@QEBA?AV0@_J@Z
??Kdzh_time_t@@AEBA?AV0@AEBV0@@Z
??Kdzh_time_t@@AEBA?AV0@AEB_K@Z
??MCTimeCus@dzh_util@@QEBA_NV01@@Z
??MPFloat@@QEBA_NAEBV0@@Z
??MPFloat@@QEBA_NPEBD@Z
??MPFloat@@QEBA_N_J@Z
??MVFloat@@QEBA_NAEBV0@@Z
??MVFloat@@QEBA_NPEBD@Z
??MVFloat@@QEBA_N_J@Z
??Mdzh_time_t@@QEBA_NAEBV0@@Z
??Mdzh_time_t@@QEBA_NAEB_K@Z
??NCTimeCus@dzh_util@@QEBA_NV01@@Z
??Ndzh_time_t@@QEBA_NAEBV0@@Z
??Ndzh_time_t@@QEBA_NAEB_K@Z
??OCTimeCus@dzh_util@@QEBA_NV01@@Z
??OPFloat@@QEBA_NAEBV0@@Z
??OPFloat@@QEBA_NPEBD@Z
??OPFloat@@QEBA_N_J@Z
??OVFloat@@QEBA_NAEBV0@@Z
??OVFloat@@QEBA_NPEBD@Z
??OVFloat@@QEBA_N_J@Z
??Odzh_time_t@@QEBA_NAEBV0@@Z
??Odzh_time_t@@QEBA_NAEB_K@Z
??PCTimeCus@dzh_util@@QEBA_NV01@@Z
??Pdzh_time_t@@QEBA_NAEBV0@@Z
??Pdzh_time_t@@QEBA_NAEB_K@Z
??XPFloat@@QEBAAEBV0@AEBV0@@Z
??XPFloat@@QEBAAEBV0@PEBD@Z
??XPFloat@@QEBAAEBV0@_J@Z
??XVFloat@@QEBAAEBV0@AEBV0@@Z
??XVFloat@@QEBAAEBV0@PEBD@Z
??XVFloat@@QEBAAEBV0@_J@Z
??Xdzh_time_t@@AEBA?AV0@AEBV0@@Z
??Xdzh_time_t@@AEBA?AV0@AEB_K@Z
??YPFloat@@QEBAAEBV0@AEBV0@@Z
??YPFloat@@QEBAAEBV0@PEBD@Z
??YPFloat@@QEBAAEBV0@_J@Z
??YVFloat@@QEBAAEBV0@AEBV0@@Z
??YVFloat@@QEBAAEBV0@PEBD@Z
??YVFloat@@QEBAAEBV0@_J@Z
??Ydzh_time_t@@QEAAAEBV0@AEBV0@@Z
??Ydzh_time_t@@QEAAAEBV0@AEB_K@Z
??ZPFloat@@QEBAAEBV0@AEBV0@@Z
??ZPFloat@@QEBAAEBV0@PEBD@Z
??ZPFloat@@QEBAAEBV0@_J@Z
??ZVFloat@@QEBAAEBV0@AEBV0@@Z
??ZVFloat@@QEBAAEBV0@PEBD@Z
??ZVFloat@@QEBAAEBV0@_J@Z
??Zdzh_time_t@@QEAAAEBV0@AEBV0@@Z
??Zdzh_time_t@@QEAAAEBV0@AEB_K@Z
??_0PFloat@@QEBAAEBV0@AEBV0@@Z
??_0PFloat@@QEBAAEBV0@PEBD@Z
??_0PFloat@@QEBAAEBV0@_J@Z
??_0VFloat@@QEBAAEBV0@AEBV0@@Z
??_0VFloat@@QEBAAEBV0@PEBD@Z
??_0VFloat@@QEBAAEBV0@_J@Z
??_0dzh_time_t@@AEBA?AV0@AEBV0@@Z
??_0dzh_time_t@@AEBA?AV0@AEB_K@Z
??_7CHighTimer@dzh_util@@6B@
??_7CHighTimerStack@dzh_util@@6B@
??_7CppSQLite3DB@@6B@
??_7CppSQLite3Exception@@6B@
??_7CppSQLite3Query@@6B@
??_7CppSQLite3Statement@@6B@
??_7CppSQLite3Table@@6B@
??_7GDirInfo@dzh_util@@6B@
??_7GFileInfo@dzh_util@@6B@
??_7GPathInfo@dzh_util@@6B@
??_FGDirInfo@dzh_util@@QEAAXXZ
??_FGFileInfo@dzh_util@@QEAAXXZ
??_FGFullPath@dzh_util@@QEAAXXZ
??_FGPathInfo@dzh_util@@QEAAXXZ
?AddDay@dzh_time_t@@QEAAAEAV1@I@Z
?AddHour@dzh_time_t@@QEAAAEAV1@I@Z
?AddMicroSecond@dzh_time_t@@QEAAAEAV1@I@Z
?AddMilliSecond@dzh_time_t@@QEAAAEAV1@G@Z
?AddMinute@dzh_time_t@@QEAAAEAV1@I@Z
?AddSecond@dzh_time_t@@QEAAAEAV1@_K@Z
?Anchor@CHighTimer@dzh_util@@QEAAXXZ
?Append@GDirInfo@dzh_util@@QEAAXPEB_W@Z
?Append_@GPathInfo@dzh_util@@IEAAXPEB_W@Z
?Base64Decode@crpty@dzh_util@@SAHPEBDHPEAEH@Z
?Base64Encode@crpty@dzh_util@@SAHPEBEHPEADH@Z
?BigtoGB@PinYin@dzh_util@@QEAA_NAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?CS1PY@PinYin@dzh_util@@0PAGA
?CallBackReset@GDirInfo@dzh_util@@MEAAXXZ
?CallBackReset@GFileInfo@dzh_util@@MEAAXXZ
?CallBackReset@GPathInfo@dzh_util@@MEAAXXZ
?ChangePrec@PFloat@@QEAAXF@Z
?ChangePrec@VFloat@@QEAAXF@Z
?CheckValid@PFloat@@AEBA_NPEBD@Z
?CheckValid@VFloat@@AEBA_NPEBD@Z
?CheckValid@dzh_time_t@@QEBA_NXZ
?Close@GFileStream@dzh_util@@QEAAXXZ
?CopyAFile@FileDir@dzh_util@@SA_NPEBD0_N@Z
?CopyDir@FileDir@dzh_util@@SA_NPEBD0_N@Z
?CopyDir@GDirectory@dzh_util@@SA_NPEB_W0@Z
?CopyFileW@GFile@dzh_util@@SA_NPEB_W0@Z
?CopyTo@GDirInfo@dzh_util@@UEAA_NPEB_W@Z
?CopyTo@GFileInfo@dzh_util@@UEAA_NPEB_W@Z
?CopyTo@GPathInfo@dzh_util@@MEAA_NPEB_W@Z
?Create@GDirInfo@dzh_util@@QEAA_NPEAU_SECURITY_ATTRIBUTES@@@Z
?CreateDir@FileDir@dzh_util@@SA_NPEBD@Z
?CreateDir@GDirectory@dzh_util@@SA_NPEB_WPEAU_SECURITY_ATTRIBUTES@@@Z
?CreateDirFile@FileDir@dzh_util@@SA_NPEBD_NPEAPEAX@Z
?CreateStream@GFileInfo@dzh_util@@QEAAPEAVGFileStream@2@XZ
?DayDifference@TimeConvert@dzh_util@@SAH_J0@Z
?DayDifferenceLocalTime@TimeConvert@dzh_util@@SAH_J0@Z
?DecrptyAES@crpty@dzh_util@@SAXPEAEH0@Z
?Delete@GDirInfo@dzh_util@@UEAA_NXZ
?Delete@GFileInfo@dzh_util@@UEAA_NXZ
?Delete@GPathInfo@dzh_util@@MEAA_NXZ
?DeleteDir@FileDir@dzh_util@@SA_NPEBD@Z
?DeleteDir@GDirectory@dzh_util@@SA_NPEB_W@Z
?DeleteFileW@GFile@dzh_util@@SA_NPEB_W@Z
?DeleteStream@GFileStream@dzh_util@@QEAAXXZ
?DzhTM@dzh_time_t@@QEAA?AUTDzhTimeNumStruct@@XZ
?DzhTM@dzh_time_t@@SA?AUTDzhTimeNumStruct@@AEAV1@@Z
?DzhTimeNumStruct2DzhTime@dzh_time_t@@SA?AV1@AEBUTDzhTimeNumStruct@@@Z
?Elapsed@CHighTimer@dzh_util@@QEAANH@Z
?EncrptyAES@crpty@dzh_util@@SAXPEAEH0@Z
?Exist@GDirInfo@dzh_util@@UEAA_NXZ
?Exist@GDirectory@dzh_util@@SA_NPEB_W@Z
?Exist@GFile@dzh_util@@SA_NPEB_W@Z
?Exist@GFileInfo@dzh_util@@UEAA_NXZ
?Exist@GPathInfo@dzh_util@@MEAA_NXZ
?Ext@GFileInfo@dzh_util@@QEBAPEB_WXZ
?Format@CTimeCus@dzh_util@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD@Z
?FormatGmt@CTimeCus@dzh_util@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD@Z
?FormatGmt@TimeConvert@dzh_util@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_JAEBV34@@Z
?FormatHHMMSS@TimeConvert@dzh_util@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?FormatSecond@TimeConvert@dzh_util@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?FormatTime@TimeConvert@dzh_util@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_JAEBV34@@Z
?FormatTimeToString@dzh_time_t@@QEAAPEBDPEBDPEADHF@Z
?FormatTimeToString@dzh_time_t@@SAPEBDAEAV1@PEBDPEADHF@Z
?FullPath@GFullPath@dzh_util@@QEBAPEB_WXZ
?FullPath@GPathInfo@dzh_util@@QEBAPEB_WXZ
?GBorBig5@PinYin@dzh_util@@SAHPEBD@Z
?GBtoBig@PinYin@dzh_util@@QEAA_NAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetABSValue@PFloat@@QEBANXZ
?GetABSValue@VFloat@@QEBANXZ
?GetAFileSize@FileDir@dzh_util@@SA_KPEBD@Z
?GetBase@PFloat@@QEAA_JXZ
?GetBase@VFloat@@QEAA_JXZ
?GetCRC@CRC32@dzh_util@@AEAAXAEAKPEBEK@Z
?GetCRC@CRC32@dzh_util@@QEAAKPEBEK@Z
?GetDay@CTimeCus@dzh_util@@QEBAHXZ
?GetDayOfWeek@CTimeCus@dzh_util@@QEBAHXZ
?GetDirFiles@FileDir@dzh_util@@SAXPEBD0_NAEAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z
?GetExeDir@FileDir@dzh_util@@SA_NAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetExeDir@GDirectory@dzh_util@@SAPEB_WXZ
?GetFileCRC@CRC32@dzh_util@@QEAAKPEBDPEA_K@Z
?GetGmtTm@CTimeCus@dzh_util@@QEBAPEAUtm@@PEAU3@@Z
?GetHour@CTimeCus@dzh_util@@QEBAHXZ
?GetIns@CRC32@dzh_util@@SAPEAV12@XZ
?GetIns@PinYin@dzh_util@@SAPEAV12@PEBD@Z
?GetLocalTm@CTimeCus@dzh_util@@QEBAPEAUtm@@PEAU3@@Z
?GetMinute@CTimeCus@dzh_util@@QEBAHXZ
?GetMonth@CTimeCus@dzh_util@@QEBAHXZ
?GetOtherTimeString@TimeConvert@dzh_util@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@H@Z
?GetPinyin@PinYin@dzh_util@@QEAAHPEBDAEAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z
?GetPrec@PFloat@@QEAAFXZ
?GetPrec@VFloat@@QEAAFXZ
?GetSecond@CTimeCus@dzh_util@@QEBAHXZ
?GetStrValue@PFloat@@QEAAPEBDQEAD@Z
?GetStrValue@VFloat@@QEAAPEBDQEAD@Z
?GetTickCount@dzh_time_t@@SA?AV1@XZ
?GetTime@CTimeCus@dzh_util@@QEBA_JXZ
?GetTimeFromString@TimeConvert@dzh_util@@SA_JAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetValue@PFloat@@QEBANXZ
?GetValue@VFloat@@QEBANXZ
?GetWeekDay@TimeConvert@dzh_util@@SAH_J@Z
?GetYear@CTimeCus@dzh_util@@QEBAHXZ
?GmToHMS@TimeConvert@dzh_util@@SAH_J@Z
?GmToYMD@TimeConvert@dzh_util@@SAH_J@Z
?HHMMSSToTime@TimeConvert@dzh_util@@SAHH@Z
?HMSToSecond@TimeConvert@dzh_util@@SAHH@Z
?Init@CRC32@dzh_util@@AEAAXXZ
?Init@PinYin@dzh_util@@AEAA_NPEBD@Z
?InitCRC32Table@CRC32@dzh_util@@AEAAXXZ
?IsAlNum@PinYin@dzh_util@@CAHH@Z
?IsAlNum@PinYin@dzh_util@@SA_NPEBD@Z
?IsAlpha@PinYin@dzh_util@@CAHH@Z
?IsAlpha@PinYin@dzh_util@@SA_NPEBD@Z
?IsAutoCommitOn@CppSQLite3DB@@QEAA_NXZ
?IsDigit@PinYin@dzh_util@@CAHH@Z
?IsDigit@PinYin@dzh_util@@SA_NPEBD@Z
?IsDirValid@FileDir@dzh_util@@SA_NPEBD@Z
?IsFileExsist@FileDir@dzh_util@@SA_NPEBD@Z
?IsHighResolution@CHighTimer@dzh_util@@QEAAHXZ
?IsMinus@PFloat@@QEBA_NXZ
?IsMinus@VFloat@@QEBA_NXZ
?IsRoot@GDirInfo@dzh_util@@QEAA_NXZ
?IsRoot_@GPathInfo@dzh_util@@IEAA_NXZ
?IsTradeDay@TimeConvert@dzh_util@@SA_N_J@Z
?IsValidTm@TimeConvert@dzh_util@@SA_NPEAUtm@@@Z
?IsZero@PFloat@@QEBA_NXZ
?IsZero@VFloat@@QEBA_NXZ
?Len@AnsiToUtf@dzh_util@@QEAAHXZ
?Len@UtfToAnsi@dzh_util@@QEAAHXZ
?LocalToYMD@TimeConvert@dzh_util@@SAH_J@Z
?MD5Data@crpty@dzh_util@@SAXPEBEHQEAE@Z
?MD5File@crpty@dzh_util@@SAHPEBDQEAE@Z
?MD5String@crpty@dzh_util@@SAXPEBDQEAE@Z
?MatchPinyin@PinYin@dzh_util@@QEAA_NPEBD0_N@Z
?MicroSecond@dzh_time_t@@QEBAGXZ
?MilliSecond@dzh_time_t@@QEBAGXZ
?MoveAFile@FileDir@dzh_util@@SA_NPEBD0@Z
?MoveDir@FileDir@dzh_util@@SA_NPEBD0@Z
?MoveDir@GDirectory@dzh_util@@SA_NPEB_W0@Z
?MoveFileW@GFile@dzh_util@@SA_NPEB_W0@Z
?MoveTo@GDirInfo@dzh_util@@UEAA_NPEB_W@Z
?MoveTo@GFileInfo@dzh_util@@UEAA_NPEB_W@Z
?MoveTo@GPathInfo@dzh_util@@MEAA_NPEB_W@Z
?Name@GFileInfo@dzh_util@@QEBAPEB_WXZ
?NameExt@GFileInfo@dzh_util@@QEBAPEB_WXZ
?NextDay@TimeConvert@dzh_util@@SA_J_J@Z
?NextHalfYear@TimeConvert@dzh_util@@SA_J_JH@Z
?NextMonth@TimeConvert@dzh_util@@SA_J_JH@Z
?NextQuater@TimeConvert@dzh_util@@SA_J_JH@Z
?NextWeek@TimeConvert@dzh_util@@SA_J_J@Z
?NextYear@TimeConvert@dzh_util@@SA_J_JH@Z
?Open@GFileStream@dzh_util@@QEAA_NPEB_W@Z
?OpenFile@FileDir@dzh_util@@SA_NPEBDPEA_KPEAPEAX@Z
?Parent@GPathInfo@dzh_util@@QEAAPEAV12@XZ
?Pause@CHighTimerStack@dzh_util@@QEAAXXZ
?Pop@CHighTimerStack@dzh_util@@QEAA_JXZ
?PopTime@CHighTimerStack@dzh_util@@QEAANH@Z
?Power10@PFloat@@AEBAHF@Z
?Power10@VFloat@@AEBAHF@Z
?Push@CHighTimerStack@dzh_util@@QEAAXXZ
?Read@GFileStream@dzh_util@@QEAAKPEBEK@Z
?Reflect@CRC32@dzh_util@@AEAAKKD@Z
?Release@GFullPath@dzh_util@@AEAAXXZ
?Reset@AnsiToUtf@dzh_util@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Reset@AnsiToUtf@dzh_util@@QEAAXPEBD@Z
?Reset@GFullPath@dzh_util@@QEAAXAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?Reset@GFullPath@dzh_util@@QEAAXPEB_W@Z
?Reset@GPathInfo@dzh_util@@QEAAXPEB_W@Z
?Reset@UtfToAnsi@dzh_util@@QEAAXAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?Reset@UtfToAnsi@dzh_util@@QEAAXPEB_W@Z
?ResetParent@GPathInfo@dzh_util@@AEAAXXZ
?Resume@CHighTimerStack@dzh_util@@QEAAXXZ
?SQLiteHeaderVersion@CppSQLite3DB@@SAPEBDXZ
?SQLiteLibraryVersion@CppSQLite3DB@@SAPEBDXZ
?SQLiteLibraryVersionNumber@CppSQLite3DB@@SAHXZ
?SQLiteVersion@CppSQLite3DB@@SAPEBDXZ
?Second@dzh_time_t@@QEBA_KXZ
?SetBase@PFloat@@QEAAX_J@Z
?SetBase@VFloat@@QEAAX_J@Z
?SetMicroSecond@dzh_time_t@@QEAAAEAV1@I@Z
?SetMilliSecond@dzh_time_t@@QEAAAEAV1@G@Z
?SetName@GFileInfo@dzh_util@@AEAA_NXZ
?SetPrec@PFloat@@QEAAXF@Z
?SetPrec@VFloat@@QEAAXF@Z
?SetSecond@dzh_time_t@@QEAAAEAV1@_K@Z
?SetValue@dzh_time_t@@QEAAAEAV1@_K@Z
?Size@GFileInfo@dzh_util@@QEAA_KXZ
?Str2PFloat@PFloat@@AEBA?AV1@AEAV1@PEBD@Z
?Str2VFloat@VFloat@@AEBA?AV1@AEAV1@PEBD@Z
?StringToHHMMSS@TimeConvert@dzh_util@@SAKAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?StringToTime@dzh_time_t@@SA?AV1@PEBD0F@Z
?StringToTime@dzh_time_t@@SA?AV1@PEBDF@Z
?SubDay@dzh_time_t@@QEAAAEAV1@I@Z
?SubHour@dzh_time_t@@QEAAAEAV1@I@Z
?SubMicroSecond@dzh_time_t@@QEAAAEAV1@I@Z
?SubMilliSecond@dzh_time_t@@QEAAAEAV1@G@Z
?SubMinute@dzh_time_t@@QEAAAEAV1@I@Z
?SubSecond@dzh_time_t@@QEAAAEAV1@_K@Z
?TM2DzhTime@dzh_time_t@@AEAAXPEAUtm@@@Z
?TYPESECOND@TimeConvert@dzh_util@@CAHW4DATA_TYPE_CUS@12@@Z
?ThisHalfYear@TimeConvert@dzh_util@@SA_J_J@Z
?ThisMonth@TimeConvert@dzh_util@@SA_J_J@Z
?ThisQuater@TimeConvert@dzh_util@@SA_J_J@Z
?ThisWeek@TimeConvert@dzh_util@@SA_J_J@Z
?ThisYear@TimeConvert@dzh_util@@SA_J_J@Z
?Time2DzhTime@dzh_time_t@@AEAAXAEA_J@Z
?TimeToString@dzh_time_t@@SAPEBDV1@PEADHF@Z
?TimeToYYYYMMDD@TimeConvert@dzh_util@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J@Z
?To64@dzh_time_t@@QEBA_KXZ
?ToGMTime@dzh_time_t@@QEAAPEAUtm@@AEAU2@@Z
?ToInt64@PFloat@@QEAA_JXZ
?ToInt64@VFloat@@QEAA_JXZ
?ToLocalTime@dzh_time_t@@QEAAPEAUtm@@AEAU2@F@Z
?ToTime@dzh_time_t@@QEBA_JXZ
?TodayLocalTime@TimeConvert@dzh_util@@SA_J_J@Z
?TodayTime@TimeConvert@dzh_util@@SA_J_J@Z
?WeekDay@TimeConvert@dzh_util@@SA_J_J@Z
?Write@GFileStream@dzh_util@@QEAAKPEBEK@Z
?YMDToGm@TimeConvert@dzh_util@@SA_JH@Z
?YMDToLocal@TimeConvert@dzh_util@@SA_JH@Z
?YYYYMMDDHHMMSSToTime@TimeConvert@dzh_util@@SA_J_K@Z
?YYYYMMDDToTime@TimeConvert@dzh_util@@SA_JH@Z
?_FormatTimeToString@dzh_time_t@@AEAAPEBDAEAV1@PEBDPEADHF@Z
?_GetCurrentTime@dzh_time_t@@AEAAXXZ
?_GetElapsedTick@CHighTimer@dzh_util@@IEAA_JXZ
?_GetTickCount@CHighTimer@dzh_util@@IEAA_JXZ
?_StringToDzhTime@dzh_time_t@@AEAAXPEBDF@Z
?_TimeToString@dzh_time_t@@AEAAPEBDAEAV1@PEADHF@Z
?allocBuffer@CppSQLite3Binary@@QEAAPEAEH@Z
?bind@CppSQLite3Statement@@QEAAXHH@Z
?bind@CppSQLite3Statement@@QEAAXHN@Z
?bind@CppSQLite3Statement@@QEAAXHPEBD@Z
?bind@CppSQLite3Statement@@QEAAXHPEBEH@Z
?bind@CppSQLite3Statement@@QEAAXH_J@Z
?bind@CppSQLite3Statement@@QEAAXPEBD0@Z
?bind@CppSQLite3Statement@@QEAAXPEBDH@Z
?bind@CppSQLite3Statement@@QEAAXPEBDN@Z
?bind@CppSQLite3Statement@@QEAAXPEBDPEBEH@Z
?bind@CppSQLite3Statement@@QEAAXPEBD_J@Z
?bindNull@CppSQLite3Statement@@QEAAXH@Z
?bindNull@CppSQLite3Statement@@QEAAXPEBD@Z
?bindParameterIndex@CppSQLite3Statement@@QEAAHPEBD@Z
?checkDB@CppSQLite3DB@@AEAAXXZ
?checkDB@CppSQLite3Statement@@AEAAXXZ
?checkResults@CppSQLite3Table@@AEAAXXZ
?checkVM@CppSQLite3Query@@AEAAXXZ
?checkVM@CppSQLite3Statement@@AEAAXXZ
?clear@CppSQLite3Binary@@QEAAXXZ
?clear@CppSQLite3Buffer@@QEAAXXZ
?close@CppSQLite3DB@@QEAAXXZ
?compile@CppSQLite3DB@@AEAAPEAUsqlite3_stmt@@PEBD@Z
?compileStatement@CppSQLite3DB@@QEAA?AVCppSQLite3Statement@@PEBD@Z
?current_directory_@GDirectory@dzh_util@@0PA_WA
?eof@CppSQLite3Query@@QEAA_NXZ
?errorCode@CppSQLite3Exception@@QEAA?BHXZ
?errorCodeAsString@CppSQLite3Exception@@SAPEBDH@Z
?errorMessage@CppSQLite3Exception@@QEAAPEBDXZ
?execDML@CppSQLite3DB@@QEAAHPEBD@Z
?execDML@CppSQLite3Statement@@QEAAHXZ

Sections

.text
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ca79f100b8491786ea92d8eebcabf17

Code Sign

05:55:56:bc:f2:5e:a4:35:35:c3:a4:0f:d5:ab:45:72Certificate

Key Usages

0f:b8:a7:40:b9:15:8d:03:51:43:bc:59:d9:f0:40:29Certificate

Extended Key Usages

Key Usages

0c:f6:73:c6:05:5d:d2:cc:39:bd:24:ef:77:43:3f:cbCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

dc:15:bd:8c:b4:23:4c:c2:db:b3:db:3a:7a:36:2c:f9:87:79:1a:ce:22:eb:ae:ee:ef:1f:69:23:f0:ef:e3:47Signer

Headers

DLL Characteristics

File Characteristics

Imports

sqlite3

shlwapi

kernel32

user32

shell32

msvcp140

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

Exports

Exports

Sections

.text Size: 93KB - Virtual size: 92KB

.rdata Size: 58KB - Virtual size: 57KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 8KB - Virtual size: 7KB

.gfids Size: 512B - Virtual size: 44B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 164B

05:55:56:bc:f2:5e:a4:35:35:c3:a4:0f:d5:ab:45:72
Certificate

0f:b8:a7:40:b9:15:8d:03:51:43:bc:59:d9:f0:40:29
Certificate

0c:f6:73:c6:05:5d:d2:cc:39:bd:24:ef:77:43:3f:cb
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

dc:15:bd:8c:b4:23:4c:c2:db:b3:db:3a:7a:36:2c:f9:87:79:1a:ce:22:eb:ae:ee:ef:1f:69:23:f0:ef:e3:47
Signer

.text
Size: 93KB - Virtual size: 92KB

.rdata
Size: 58KB - Virtual size: 57KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 8KB - Virtual size: 7KB

.gfids
Size: 512B - Virtual size: 44B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 164B