262c5476f4b4adafc8478971e5af745f34bbbcf335958b0040aafa92be6b08b9[.]zip[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

262c5476f4b4adafc8478971e5af745f34bbbcf335958b0040aafa92be6b08b9.zip.zip
Size

1.5MB
MD5

e5661a6c4acc1ee74b29ff927dab4b20
SHA1

4999302783352806bcf1615dbc5beef81383fc10
SHA256

2ceffa0991f3d9f9a50e7eba2c5e939be6a0e8cf6a7ee7bb0c2b16ae2f7c3ca9
SHA512

34e159c11fedf4fff36c0a204051f6f65010677a86a8dd980fac7e5dca2b6253efe57641c079e52ba86abd60e8c9460f1485176e3c397091c64b6f0853260ec7
SSDEEP

24576:ol1f+55fhSZC0XRa9wVs50rRbN/LRLaL0wwjG6mvgKekogtHtkUvP6knCs:+w55IZLA9osqd1FLaQjGlgKekDtHvHnz

Score

1^/10

Malware Config

Signatures

Files

262c5476f4b4adafc8478971e5af745f34bbbcf335958b0040aafa92be6b08b9.zip.zip
.zip

Password: infected
262c5476f4b4adafc8478971e5af745f34bbbcf335958b0040aafa92be6b08b9.zip
.zip
JTIClientRules.xml
JcmContent.dat
.dll windows:6 windows x86

e4ac618d79a8ebeda5b0d9ff56c5882c

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28-07-2020 00:00

Not After

28-07-2030 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7d:9e:98:88:d0:f9:7a:54:32:82:7a:5e
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

04-10-2021 17:33

Not After

04-10-2024 17:33

Subject

SERIALNUMBER=2306741,CN=McAfee\, LLC,O=McAfee\, LLC,STREET=6220 America Ctr Dr,L=San Jose,ST=California,C=US,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

13:a1:91:c0:eb:27:ae:85:ea:99:d7:29:14:b6:91:e4
Certificate

Issuer

CN=McAfee Code Signing CA 2,O=McAfee\, Inc.,L=Santa Clara,ST=CA,C=US

Not Before

12-03-2021 00:00

Not After

11-03-2024 23:59

Subject

CN=McAfee\, LLC,OU=Engineering,O=McAfee\, LLC,POSTALCODE=95054,STREET=2821 Mission College Blvd,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

ca:c1:f1:dd:01:7e:80:f1:2b:4d:17:c1:69:6d:9b:a5
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

27-10-2014 00:00

Not After

26-10-2024 23:59

Subject

CN=McAfee Code Signing CA 2,O=McAfee\, Inc.,L=Santa Clara,ST=CA,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22-07-2015 21:03

Not After

22-07-2025 21:03

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21-09-2022 00:00

Not After

21-11-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

4c:d2:30:11:ca:f3:ca:a0:a9:6f:51:fc:c7:77:ea:75:4a:3a:20:bc:4a:77:17:e3:85:d0:ef:c7:de:53:e3:56
Signer

Actual PE Digest

4c:d2:30:11:ca:f3:ca:a0:a9:6f:51:fc:c7:77:ea:75:4a:3a:20:bc:4a:77:17:e3:85:d0:ef:c7:de:53:e3:56

Digest Algorithm

sha256

PE Digest Matches

true

4c:d2:30:11:ca:f3:ca:a0:a9:6f:51:fc:c7:77:ea:75:4a:3a:20:bc:4a:77:17:e3:85:d0:ef:c7:de:53:e3:56
Signer

Actual PE Digest

4c:d2:30:11:ca:f3:ca:a0:a9:6f:51:fc:c7:77:ea:75:4a:3a:20:bc:4a:77:17:e3:85:d0:ef:c7:de:53:e3:56

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

jcmrts

?JcmFree@Jcm@@YAXPAX@Z
?JcmAlloc@Jcm@@YAPAXI@Z

kernel32

InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
GetModuleHandleExW
LoadLibraryExW
GetModuleFileNameW
DeleteFileW
GetFileSize
SetFilePointer
WriteFile
SetEvent
ResetEvent
WaitForSingleObject
GetFinalPathNameByHandleW
WaitForMultipleObjects
GetCurrentThreadId
MoveFileW
MultiByteToWideChar
WideCharToMultiByte
ExpandEnvironmentStringsW
GetFileAttributesW
HeapAlloc
HeapFree
GetProcessHeap
OpenProcess
GetModuleHandleA
FileTimeToSystemTime
SystemTimeToFileTime
WriteConsoleW
ReadConsoleW
ReadFile
GetDriveTypeW
FindNextFileW
FindFirstFileExW
FindClose
CreateFileW
GetProcAddress
GetModuleHandleW
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
RaiseException
DecodePointer
CreateDirectoryW
CloseHandle
CreateEventW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetStdHandle
SetFilePointerEx
GetFileSizeEx
HeapSize
SetConsoleCtrlHandler
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
FormatMessageA
GetStringTypeW
QueryPerformanceFrequency
EncodePointer
LocalFree
CompareStringEx
GetCPInfo
LCMapStringEx
SetFileInformationByHandle
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitOnceExecuteOnce
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetTickCount64
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetFileInformationByHandleEx
CreateSymbolicLinkW
GetLocaleInfoEx
OutputDebugStringW
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
ExitProcess
GetCurrentThread
HeapReAlloc
GetStdHandle
GetFileType
GetTempPathW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA

user32

UnregisterClassW

advapi32

GetTraceLoggerHandle
RegEnumKeyExW
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
GetTraceEnableFlags
GetTraceEnableLevel
RegCloseKey
UnregisterTraceGuids
RegisterTraceGuidsW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW

shell32

SHGetFolderPathW

ole32

CoCreateInstance
CoSetProxyBlanket

oleaut32

VariantClear
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysFreeString
SysAllocString
SetErrorInfo
VariantChangeType
VariantInit
GetErrorInfo
CreateErrorInfo

Exports

Exports

GetInterface

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 487KB - Virtual size: 487KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 194KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
JcmProfiler.dat
.dll windows:6 windows x86

5d043e65a4d2f7702ddb11fee89ba77d

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

15-06-2016 00:00

Not After

15-06-2024 00:00

Subject

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

36:89:c4:13:24:8e:63:d3:a2:78:b4:ea
Certificate

Issuer

CN=GlobalSign CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE

Not Before

12-07-2019 18:58

Not After

12-07-2022 18:58

Subject

CN=McAfee\, Inc.,OU=Engineering,O=McAfee\, Inc.,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Not Before

19-02-2018 00:00

Not After

18-03-2029 10:00

Subject

CN=GlobalSign TSA for Advanced - G2

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

04:00:00:00:00:01:31:89:c6:50:04
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

02-08-2011 10:00

Not After

29-03-2029 10:00

Subject

CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:bb:b7:f7:3a:04:da:6b:d7:be:4b:b7:10:91:79:46:5d:e8:5d:3a:c6:38:8a:b6:dd:34:48:63:49:37:a0:fb
Signer

Actual PE Digest

25:bb:b7:f7:3a:04:da:6b:d7:be:4b:b7:10:91:79:46:5d:e8:5d:3a:c6:38:8a:b6:dd:34:48:63:49:37:a0:fb

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetDriveTypeW
GetEnvironmentVariableW
GetPrivateProfileStringW
FindNextFileW
VirtualAllocEx
ReadProcessMemory
VirtualFreeEx
CreateToolhelp32Snapshot
Thread32First
Thread32Next
ReadFile
ExpandEnvironmentStringsW
LocalFree
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
DuplicateHandle
WaitForSingleObjectEx
Sleep
GetCurrentProcess
GetCurrentThread
GetExitCodeThread
QueryPerformanceCounter
WideCharToMultiByte
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
SetEvent
ResetEvent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
CreateFileW
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
OutputDebugStringW
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LoadLibraryW
RtlUnwind
RaiseException
HeapAlloc
HeapFree
ExitThread
GetModuleHandleExW
HeapReAlloc
ExitProcess
GetModuleFileNameA
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
GetACP
GetProcessHeap
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
HeapSize
WriteConsoleW
InitializeCriticalSectionEx
InitializeCriticalSection
Process32NextW
Process32FirstW
K32EnumProcessModulesEx
FileTimeToSystemTime
DosDateTimeToFileTime
CompareFileTime
SystemTimeToFileTime
GetSystemTime
CloseHandle
OpenProcess
FindClose
FindFirstFileW
GetCurrentProcessId
K32EnumProcesses
GetLastError
DeleteTimerQueueTimer
GetModuleFileNameW
K32GetModuleFileNameExW
GetFileAttributesW
GetFullPathNameW
GetFinalPathNameByHandleW
GetCurrentDirectoryW

advapi32

GetTokenInformation
OpenSCManagerW
ConvertSidToStringSidW
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceEnableFlags
GetTraceLoggerHandle
CloseServiceHandle
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegQueryInfoKeyW
TraceMessage
OpenProcessToken
QueryServiceConfigW
OpenServiceW
RegEnumKeyW
RegEnumValueW
RegEnumKeyExW

jcmrts

?JcmFree@Jcm@@YAXPAX@Z
?JcmAlloc@Jcm@@YAPAXI@Z
??0ImpersonateProcess@@QAE@ABUImpersonateId@@@Z
??1ImpersonateProcess@@QAE@XZ

iphlpapi

GetExtendedUdpTable
GetExtendedTcpTable

userenv

ExpandEnvironmentStringsForUserW

user32

CharLowerBuffW
GetWindowThreadProcessId
SendMessageW
GetDesktopWindow
GetWindowInfo
GetTopWindow
FindWindowExW
FindWindowW
IsWindowVisible
GetWindow

sfc

SfcIsFileProtected

shlwapi

StrStrIW

wintrust

WinVerifyTrust

version

VerQueryValueW
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoW

Exports

Exports

CreateIJcmProfiler
NewFileVersionInfo

Sections

.text
Size: 420KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

e4ac618d79a8ebeda5b0d9ff56c5882c

Code Sign

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

7d:9e:98:88:d0:f9:7a:54:32:82:7a:5eCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

13:a1:91:c0:eb:27:ae:85:ea:99:d7:29:14:b6:91:e4Certificate

Extended Key Usages

Key Usages

ca:c1:f1:dd:01:7e:80:f1:2b:4d:17:c1:69:6d:9b:a5Certificate

Extended Key Usages

Key Usages

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

4c:d2:30:11:ca:f3:ca:a0:a9:6f:51:fc:c7:77:ea:75:4a:3a:20:bc:4a:77:17:e3:85:d0:ef:c7:de:53:e3:56Signer

4c:d2:30:11:ca:f3:ca:a0:a9:6f:51:fc:c7:77:ea:75:4a:3a:20:bc:4a:77:17:e3:85:d0:ef:c7:de:53:e3:56Signer

Headers

DLL Characteristics

File Characteristics

Imports

jcmrts

kernel32

user32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 487KB - Virtual size: 487KB

.data Size: 194KB - Virtual size: 315KB

.rsrc Size: 60KB - Virtual size: 59KB

.reloc Size: 194KB - Virtual size: 194KB

5d043e65a4d2f7702ddb11fee89ba77d

Code Sign

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cdCertificate

Extended Key Usages

Key Usages

36:89:c4:13:24:8e:63:d3:a2:78:b4:eaCertificate

Extended Key Usages

Key Usages

0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3aCertificate

Extended Key Usages

Key Usages

04:00:00:00:00:01:31:89:c6:50:04Certificate

Key Usages

25:bb:b7:f7:3a:04:da:6b:d7:be:4b:b7:10:91:79:46:5d:e8:5d:3a:c6:38:8a:b6:dd:34:48:63:49:37:a0:fbSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

7d:9e:98:88:d0:f9:7a:54:32:82:7a:5e
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

13:a1:91:c0:eb:27:ae:85:ea:99:d7:29:14:b6:91:e4
Certificate

ca:c1:f1:dd:01:7e:80:f1:2b:4d:17:c1:69:6d:9b:a5
Certificate

33:00:00:00:44:b7:3f:fc:ef:5a:cf:a2:7a:00:00:00:00:00:44
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

4c:d2:30:11:ca:f3:ca:a0:a9:6f:51:fc:c7:77:ea:75:4a:3a:20:bc:4a:77:17:e3:85:d0:ef:c7:de:53:e3:56
Signer

4c:d2:30:11:ca:f3:ca:a0:a9:6f:51:fc:c7:77:ea:75:4a:3a:20:bc:4a:77:17:e3:85:d0:ef:c7:de:53:e3:56
Signer

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 487KB - Virtual size: 487KB

.data
Size: 194KB - Virtual size: 315KB

.rsrc
Size: 60KB - Virtual size: 59KB

.reloc
Size: 194KB - Virtual size: 194KB

48:1b:6a:07:26:d2:e8:3f:26:02:d4:82:5a:cd
Certificate

36:89:c4:13:24:8e:63:d3:a2:78:b4:ea
Certificate

0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Certificate

04:00:00:00:00:01:31:89:c6:50:04
Certificate

25:bb:b7:f7:3a:04:da:6b:d7:be:4b:b7:10:91:79:46:5d:e8:5d:3a:c6:38:8a:b6:dd:34:48:63:49:37:a0:fb
Signer

.text
Size: 420KB - Virtual size: 420KB

.rdata
Size: 116KB - Virtual size: 116KB

.data
Size: 11KB - Virtual size: 16KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 24KB - Virtual size: 24KB