NEAS[.]11003e3efe71452e6a87269e0c522600_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.11003e3efe71452e6a87269e0c522600_JC.exe
Size

3.0MB
MD5

11003e3efe71452e6a87269e0c522600
SHA1

085dca6b62e42690b401c67d99d0b4ce1bedbb96
SHA256

1c94b40604d933f83f3e285dd38393105eb0257b46cad6752b18e759a152c1cc
SHA512

572f4baa3a7d9e5fe8f1a881651a0d6d3f603fe4536cb4353cb7f7d80d75afeb89fdb28a0380d01723ba05b2107fe417099504286af94b374716d80621142cb2
SSDEEP

49152:9iNSgTeyORA+qU2Pp+QkV8MlF3+DGEx30p1wxf6Lv7D7KEJ1haYLyylrqdYZ86:9iNPjOpqU2Pg57D+SDFXtLyorR

Score

1^/10

Malware Config

Signatures

Files

NEAS.11003e3efe71452e6a87269e0c522600_JC.exe
.dll windows:6 windows x86

ba09d0b1687349f04fbe00663eb48e93

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

11:da:e3:e0:e4:97:fc:d9:d0:27:2f:9d
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

18/04/2023, 07:18

Not After

31/05/2024, 08:29

Subject

SERIALNUMBER=91510100MA69HFUX05,CN=四川云时网络科技有限公司,OU=IT,O=四川云时网络科技有限公司,STREET=高新区德华路333号1号楼16层1601号,L=成都市,ST=四川省,C=CN,1.3.6.1.4.1.311.60.2.1.1=#13074348454e474455,1.3.6.1.4.1.311.60.2.1.2=#13075349434855414e,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7c:3a:a3:07:89:9c:52:16:68:3c:22:2a:c7:7e:98:9f:c2:f6:73:e1:29:d1:69:29:98:c0:d6:bb:6e:d8:96:39
Signer

Actual PE Digest

7c:3a:a3:07:89:9c:52:16:68:3c:22:2a:c7:7e:98:9f:c2:f6:73:e1:29:d1:69:29:98:c0:d6:bb:6e:d8:96:39

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ws2_32

WSAStartup
getaddrinfo
freeaddrinfo
closesocket
ioctlsocket
WSAAsyncSelect
sendto
recvfrom
bind
__WSAFDIsSet
WSAStringToAddressW
select
recv
ntohl
WSAStringToAddressA
WSAAddressToStringA
WSAGetLastError
socket
setsockopt
ntohs
htons
getsockname
inet_ntoa

advapi32

RegCloseKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptDecrypt
CryptEncrypt
CryptGetKeyParam
CryptDestroyKey
CryptDeriveKey
CryptReleaseContext
CryptAcquireContextW
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyExA

crypt32

CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertCreateCertificateContext
CertFreeCertificateContext
CertAddCertificateContextToStore
CertDeleteCertificateFromStore
CertGetNameStringW

kernel32

CreateTimerQueue
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
GetModuleHandleA
VirtualAlloc
VirtualFree
VirtualProtect
ReleaseSemaphore
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
GetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryW
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesExW
GetTempFileNameW
ReadFile
WriteFile
GetTempPathW
DecodePointer
CloseHandle
RaiseException
HeapFree
GetProcessHeap
DeviceIoControl
InitializeCriticalSectionAndSpinCount
WaitForSingleObject
Sleep
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
GetCurrentThreadId
CreateProcessW
GetStartupInfoW
GetVersionExW
FreeLibrary
SetEndOfFile
GetModuleHandleW
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryW
CopyFileW
MoveFileW
MoveFileExW
SetEvent
ResetEvent
CreateEventW
OutputDebugStringA
OutputDebugStringW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTickCount
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
EncodePointer
GetExitCodeThread
GetCurrentThread
DuplicateHandle
TryEnterCriticalSection
QueryPerformanceFrequency
WriteConsoleW
SetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
InitializeSListHead
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
WaitForSingleObjectEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
HeapSize
SetEnvironmentVariableA
GetModuleFileNameW
FreeEnvironmentStringsW
HeapAlloc
GetCommandLineA
GetCommandLineW
GetModuleFileNameA
HeapReAlloc
GetTimeZoneInformation
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetACP
GetConsoleMode
ReadConsoleW
GetTimeFormatW
GetDateFormatW
GetFileType
GetStdHandle
SetFilePointerEx
LoadLibraryExW

user32

LoadIconW
LoadCursorW
CreateWindowExW
RegisterClassExW
DefWindowProcW
PostMessageW
DispatchMessageW
TranslateMessage
GetMessageW
MessageBoxW
PostQuitMessage

gdi32

GetStockObject

ole32

CoCreateGuid

shlwapi

StrCmpW
PathFileExistsW
PathIsDirectoryW

iphlpapi

GetIfTable
GetIpForwardTable
GetUniDirectionalAdapterInfo
GetAdaptersInfo

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

winmm

timeEndPeriod
timeBeginPeriod

Exports

Exports

Kernel_AddGameToFavorite
Kernel_AddRouteTable
Kernel_ChangeUserTime
Kernel_CheckGameAreaSvrCustom
Kernel_CheckGameAreaSvrModeValid
Kernel_CheckGameAreaSvrModeValidExip
Kernel_CheckGameAreaSvrNodeModeValid
Kernel_CheckGameAreaSvrNodeModeValidExip
Kernel_CheckGameAreaSvrNodeValid
Kernel_CheckGameAreaSvrNodeValidExip
Kernel_CheckGameAreaSvrValid
Kernel_CheckGameAreaSvrValidExip
Kernel_CheckGameCustomProcessIsLegal
Kernel_DeleteMail
Kernel_DeleteUserAccount
Kernel_DoRealNameAuthentication
Kernel_DownLoadStartupActivities
Kernel_DownLoadToolBoxList
Kernel_DownLoadYbRankListInfo
Kernel_DownLoadYbUserAdditionalInfo
Kernel_DownProductListForHour
Kernel_DownProductListForSvip
Kernel_DownProductListSaoMaPackage
Kernel_DownProductListTimePackage
Kernel_DownloadAdvertNotice
Kernel_DownloadAllGameDataList
Kernel_DownloadBanner
Kernel_DownloadClientTabItems
Kernel_DownloadDefaultGameDataList
Kernel_DownloadFile
Kernel_DownloadGameDataFromGameID
Kernel_DownloadMail
Kernel_DownloadMsgCenterFromLabel
Kernel_DownloadOfficialNotice
Kernel_DownloadQQHelpFromGameID
Kernel_ExcutePhoneBind
Kernel_ExcutePhoneLogin
Kernel_ExecGameSetting
Kernel_GetAccelBoxList
Kernel_GetAccelData
Kernel_GetAccelState
Kernel_GetActivities
Kernel_GetAdvertNoticeData
Kernel_GetAllUserAccount
Kernel_GetAutoCreateShotcutSetting
Kernel_GetAutoRunSetting
Kernel_GetAutoZoomSetting
Kernel_GetBannerAdvertData
Kernel_GetBindPhoneCode
Kernel_GetBirdUserAdditionalInfo
Kernel_GetClientAdditionField
Kernel_GetClientChannelNumber
Kernel_GetClientGUID
Kernel_GetClientTabItemList
Kernel_GetClientTips
Kernel_GetClientType
Kernel_GetClientVersion
Kernel_GetClientVersionEx
Kernel_GetCloseMinSetting
Kernel_GetConsoleData
Kernel_GetConsoleOldMode
Kernel_GetFreeRankList
Kernel_GetGameAreaData
Kernel_GetGameAreaDataList
Kernel_GetGameAreaDataListExip
Kernel_GetGameAreaFirstServerID
Kernel_GetGameAreaServerRealData
Kernel_GetGameAreaServerRealInfo
Kernel_GetGameAreaSvrCustomProcess
Kernel_GetGameCategoryDataList
Kernel_GetGameDataFromGameID
Kernel_GetGameDataListFromCategoryID
Kernel_GetGameDataListFromSubCategoryID
Kernel_GetGameDefaultAccelMode
Kernel_GetGameExipState
Kernel_GetGameFirstAreaServerID
Kernel_GetGameFirstAreaServerIDExip
Kernel_GetGameLastAccelInfo
Kernel_GetGameLastAccelInfoEx
Kernel_GetGameListFromDefault
Kernel_GetGameListFromMy
Kernel_GetGameListFromMyDefault
Kernel_GetGameListFromSearch
Kernel_GetGameLocalSetting
Kernel_GetGameMessage
Kernel_GetGameMessageUrl
Kernel_GetGameMsgBarList
Kernel_GetGameNodeDataList
Kernel_GetGameNodeDataListExip
Kernel_GetGameNodeDataListFromFilter
Kernel_GetGameNodeDataListFromFilterBatch
Kernel_GetGameNodeDataListFromFilterBatchExip
Kernel_GetGameNodeDataListFromFilterExip
Kernel_GetGameProductInfoList
Kernel_GetGameServerData
Kernel_GetGameServerDataList
Kernel_GetGameServerDataListExip
Kernel_GetGameSettingDataList
Kernel_GetGameStartupPath
Kernel_GetGameStartupPathSelectPlatID
Kernel_GetGameStrategy
Kernel_GetGameStrategyFromSearch
Kernel_GetGameSubCategoryDataList
Kernel_GetGameSupportAccelMode
Kernel_GetGameSupportAccelPlatform
Kernel_GetGameTips
Kernel_GetGameToolItemList
Kernel_GetLimitTimeFreeGameTime
Kernel_GetMailItemData
Kernel_GetMode4Enhance
Kernel_GetMsgCenterData
Kernel_GetMsgCenterDataTotalCount
Kernel_GetMsgCodeString
Kernel_GetNodeData
Kernel_GetNodeRouteData
Kernel_GetNotReminSetting
Kernel_GetOfficialNoticeData
Kernel_GetPayRankList
Kernel_GetPhoneCode
Kernel_GetPlayerStationProductInfo
Kernel_GetProductList_Hour
Kernel_GetProductList_SaoMaPackage
Kernel_GetProductList_Svip
Kernel_GetProductList_TimePackage
Kernel_GetQQHelpFromGameID
Kernel_GetRecallRewardList
Kernel_GetRemindProcessData
Kernel_GetTestSpeedData
Kernel_GetToolBoxList
Kernel_GetUdpToTcp
Kernel_GetUserData
Kernel_GetUserExipInfoList
Kernel_GetUserGameExipInfoList
Kernel_GetUserGameExipNodeList
Kernel_GetUserGameSingleInfoList
Kernel_GetUserNetbarInfo
Kernel_GetUserOriginalExipInfoList
Kernel_GetUserRedeemCardList
Kernel_GetYbUserAdditionalInfo
Kernel_GetZZUserAdditionalInfo
Kernel_HttpPost
Kernel_Init
Kernel_IsAllAreaServerGame
Kernel_IsBaoYueSwitchToSaoMaClientVersion
Kernel_IsCDNGame
Kernel_IsConsoleGame
Kernel_IsDetailGameData
Kernel_IsExipGame
Kernel_IsExipGameNode
Kernel_IsFreeGame
Kernel_IsGameExistAllAreaServer
Kernel_IsLimitTimeFreeGame
Kernel_IsNationalGame
Kernel_IsNetBarBaoYueClientVersion
Kernel_IsNetBarClientVersion
Kernel_IsNetBarEnv
Kernel_IsNetBarSaoMaClientVersion
Kernel_IsOverseasGame
Kernel_IsPersonalVersionClientVersion
Kernel_IsPsGame
Kernel_IsSteamDeckGame
Kernel_IsStudioBaoYueClientVersion
Kernel_IsStudioClientVersion
Kernel_IsStudioSaoMaClientVersion
Kernel_IsSwitchGame
Kernel_IsXboxGame
Kernel_MoreTestSpeedBatch
Kernel_NewUserGiveTime
Kernel_NextTestSpeedBatch
Kernel_Pay_QueryOrder
Kernel_Pay_ScanOrder
Kernel_Pay_ScanOrderNew
Kernel_QueryClientTipsEx
Kernel_QueryGameDetailInfo
Kernel_QueryGameMsgBar
Kernel_QueryGameStrategy
Kernel_QueryGameToolItem
Kernel_QueryPlayerStationProductInfo
Kernel_QueryRealNameAuthentication
Kernel_QueryRecallReward
Kernel_QueryTimeLimitedActivities
Kernel_QueryUserCoupon
Kernel_QueryUserSeasonCard
Kernel_QueryWechatBindCheck
Kernel_QueryWechatBindPhoneCode
Kernel_QueryWechatBindPhoneLogin
Kernel_QueryWechatChangeBind
Kernel_QueryWechatQrcode
Kernel_QueryWechatTicketUser
Kernel_QueryWechatUnbind
Kernel_ReadMail
Kernel_ReceiveRecallReward
Kernel_RefreshToken
Kernel_RegisterMsg
Kernel_RememberUserAccount
Kernel_RemoveGameFromFavorite
Kernel_Report
Kernel_Report2
Kernel_ReportSensorsData
Kernel_ResetNetworkEnv
Kernel_RestoreGameSetting
Kernel_SearchGame
Kernel_SearchGameStrategy
Kernel_SendExchangePhoneCode
Kernel_SetAutoCreateShotcutSetting
Kernel_SetAutoRunSetting
Kernel_SetAutoZoomSetting
Kernel_SetClientFreeTime
Kernel_SetCloseMinSetting
Kernel_SetConsoleOldMode
Kernel_SetGameAreaSvrCustomProcess
Kernel_SetGameLocalSetting
Kernel_SetGameStartupPath
Kernel_SetGameStartupPathSelectPlatID
Kernel_SetMode4Enhance
Kernel_SetNotReminSetting
Kernel_SetSdkChannelNumber
Kernel_SetUdpToTcp
Kernel_StartAccel
Kernel_StartAccelEx
Kernel_StartAccelExExip
Kernel_StartAccelExip
Kernel_StartTestSpeed
Kernel_StartTestSpeedBatch
Kernel_StartTestSpeedBatchExip
Kernel_StartTestSpeedExip
Kernel_StopAccel
Kernel_StopAccelSync
Kernel_StopTestSpeed
Kernel_StopTestSpeedBatch
Kernel_SubmitGameHelpIssues
Kernel_SyncDownloadAllGameDataList
Kernel_SyncDownloadFile
Kernel_SyncDownloadGameDataFromGameID
Kernel_SyncStartTestSpeed
Kernel_SyncStartTestSpeedExip
Kernel_SyncUpdateUserExipInfo
Kernel_SyncUserLoginFromAccount
Kernel_SyncUserLoginFromNetbar
Kernel_TMQueueUpEnter
Kernel_TMQueueUpExit
Kernel_TMQueueUpGetUserData
Kernel_TMQueueUpQuery
Kernel_TMQueueUpUseCard
Kernel_UnInit
Kernel_UnRegisterMsg
Kernel_UpdateNodeTestSpeedC
Kernel_UpdateUserExipInfo
Kernel_UpdateUserGameSingleInfo
Kernel_UploadFeedBack
Kernel_UploadUserAvatar
Kernel_UserAutoLogin
Kernel_UserHeartMonitor
Kernel_UserHeartMonitorEx
Kernel_UserLoginFromAccount
Kernel_UserLoginFromNetbar
Kernel_UserLogout
Kernel_UserLogoutFromAccount
Kernel_UserLogoutFromNetbar
Kernel_UserRedeemCode
Kernel_UserUpdateNetbarInfo

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba09d0b1687349f04fbe00663eb48e93

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

11:da:e3:e0:e4:97:fc:d9:d0:27:2f:9dCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

7c:3a:a3:07:89:9c:52:16:68:3c:22:2a:c7:7e:98:9f:c2:f6:73:e1:29:d1:69:29:98:c0:d6:bb:6e:d8:96:39Signer

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

advapi32

crypt32

kernel32

user32

gdi32

ole32

shlwapi

iphlpapi

version

winmm

Exports

Exports

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 404KB - Virtual size: 404KB

.data Size: 65KB - Virtual size: 500KB

.gfids Size: 4KB - Virtual size: 3KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 92KB - Virtual size: 91KB

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

11:da:e3:e0:e4:97:fc:d9:d0:27:2f:9d
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

7c:3a:a3:07:89:9c:52:16:68:3c:22:2a:c7:7e:98:9f:c2:f6:73:e1:29:d1:69:29:98:c0:d6:bb:6e:d8:96:39
Signer

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 404KB - Virtual size: 404KB

.data
Size: 65KB - Virtual size: 500KB

.gfids
Size: 4KB - Virtual size: 3KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 92KB - Virtual size: 91KB