f0e6a2ab42e12a0c5fc667dd9fb25aa5b6ccf458908cfed8e2ed2fe7670e96ad

Sharing

Copy URL Twitter E-mail

General

Target

f0e6a2ab42e12a0c5fc667dd9fb25aa5b6ccf458908cfed8e2ed2fe7670e96ad
Size

5.6MB
MD5

0084f9953a819859feaa0631bad714b7
SHA1

2fb22745dceb55f3b8646b39d01aa08187008382
SHA256

f0e6a2ab42e12a0c5fc667dd9fb25aa5b6ccf458908cfed8e2ed2fe7670e96ad
SHA512

bd77e1ba5722d5581fb13bc766b934efb8628b3623c1420b0372af71ac56360049cef3a70e88b29b9caffc39a12b142abb81ce63ccbe153ab4c6b274858f2500
SSDEEP

98304:wmaBXB0GgnxCgFc2cj+EJO/+CMXBwjmYQR1JKxdXBHj9AzeTY4:wlXBknxCgFclde+xYLjXBDuzeT7

Score

1^/10

Malware Config

Signatures

Files

f0e6a2ab42e12a0c5fc667dd9fb25aa5b6ccf458908cfed8e2ed2fe7670e96ad
.exe windows:5 windows x86

b7c4688817ac0b7a44b08523b26f8f67

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8b:6b:86:23:d0:7b:86:b7:75:16:ca:6b:69:62:2c:8d
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

27/07/2021, 00:00

Not After

26/07/2024, 23:59

Subject

CN=Gazing Tai Technology Co.\, Ltd.,O=Gazing Tai Technology Co.\, Ltd.,L=Zhuhai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

8b:6b:86:23:d0:7b:86:b7:75:16:ca:6b:69:62:2c:8d
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

27/07/2021, 00:00

Not After

26/07/2024, 23:59

Subject

CN=Gazing Tai Technology Co.\, Ltd.,O=Gazing Tai Technology Co.\, Ltd.,L=Zhuhai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7a:b3:a9:51:02:68:b1:1a:4d:2e:57:a1:0d:4a:aa:55:6c:20:41:69:2e:b9:a1:75:0a:85:61:03:9b:2a:11:a9
Signer

Actual PE Digest

7a:b3:a9:51:02:68:b1:1a:4d:2e:57:a1:0d:4a:aa:55:6c:20:41:69:2e:b9:a1:75:0a:85:61:03:9b:2a:11:a9

Digest Algorithm

sha256

PE Digest Matches

false

34:88:9f:e2:a9:94:d3:c9:09:25:48:59:a8:4a:ac:89:1c:31:8f:e1
Signer

Actual PE Digest

34:88:9f:e2:a9:94:d3:c9:09:25:48:59:a8:4a:ac:89:1c:31:8f:e1

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeKillEvent
mciSendStringW
timeSetEvent

wtsapi32

WTSRegisterSessionNotification
WTSUnRegisterSessionNotification

kernel32

DeleteFileW
GetFileAttributesExW
GetCurrentDirectoryW
MapViewOfFile
GetVolumeInformationW
GetFileAttributesW
SetFilePointerEx
SetEndOfFile
FlushFileBuffers
GetFileInformationByHandle
CreateToolhelp32Snapshot
GetFileSizeEx
FormatMessageW
SystemTimeToFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetVersionExW
GetSystemInfo
GetSystemDirectoryW
GetTimeZoneInformation
GetUserDefaultLangID
FindFirstChangeNotificationW
FindCloseChangeNotification
WaitForMultipleObjects
FindNextChangeNotification
Process32FirstW
Process32NextW
ResetEvent
OpenFileMappingW
IsBadReadPtr
GetSystemTime
GetCurrentDirectoryA
GetModuleFileNameA
GetVersionExA
HeapCreate
FreeResource
GetFullPathNameW
SleepEx
VerSetConditionMask
QueryPerformanceFrequency
VerifyVersionInfoW
QueryPerformanceCounter
MoveFileExA
GetSystemTimeAsFileTime
CompareFileTime
GetFileType
GetStdHandle
PeekNamedPipe
FormatMessageA
InterlockedDecrement
CreateFileMappingW
GetFileSize
WriteFile
UnmapViewOfFile
SuspendThread
lstrlenA
InterlockedIncrement
GlobalAlloc
GlobalLock
GetThreadContext
VirtualFree
VirtualAlloc
FlushInstructionCache
VirtualProtect
GetEnvironmentVariableW
GetEnvironmentVariableA
CreateProcessW
ResumeThread
TerminateProcess
ReadProcessMemory
LoadLibraryExA
LoadLibraryA
FindNextFileW
ConvertThreadToFiber
ConvertFiberToThread
CreateFiber
DeleteFiber
SwitchToFiber
ReadConsoleA
SetConsoleMode
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExW
SetConsoleCtrlHandler
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetConsoleCP
ReadConsoleW
GetConsoleMode
GetACP
GetDriveTypeW
SetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
GetStartupInfoW
UnhandledExceptionFilter
GetCPInfo
LocalFree
InitializeCriticalSectionEx
GetStringTypeW
GetExitCodeThread
WaitForSingleObjectEx
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
IsDebuggerPresent
GetLocalTime
OutputDebugStringW
IsBadWritePtr
SetLastError
lstrcmpW
GetCurrentThreadId
ExitProcess
GlobalAddAtomA
Sleep
GetTickCount
InterlockedCompareExchange
FindFirstFileW
FindClose
ReadFile
CreateFileW
GlobalUnlock
MulDiv
GetComputerNameA
WideCharToMultiByte
OutputDebugStringA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateThread
GetProcAddress
FreeLibrary
GetLastError
GetCurrentProcess
GetCurrentProcessId
GetCommandLineA
LoadLibraryW
GetModuleHandleA
CloseHandle
SetEvent
CreateEventW
WaitForSingleObject
InitializeCriticalSection
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
GetCommandLineW
GetModuleHandleW
SetCurrentDirectoryW
InitializeCriticalSectionAndSpinCount
lstrcmpiW
LockResource
SizeofResource
FindResourceExW
DecodePointer
RaiseException
MultiByteToWideChar
LoadResource
FindResourceW
LoadLibraryExW
GetCurrentThread
GetModuleFileNameW
VirtualQuery
SetUnhandledExceptionFilter

user32

IsWindowVisible
GetFocus
GetDlgItem
GetDlgCtrlID
IsChild
GetWindow
SetFocus
RedrawWindow
GetActiveWindow
RegisterClassExW
MessageBoxW
UpdateLayeredWindow
MapVirtualKeyA
CharLowerBuffW
SystemParametersInfoA
DrawTextW
MsgWaitForMultipleObjects
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
ReleaseDC
GetDC
LoadCursorW
GetClassInfoExW
RegisterWindowMessageW
DefWindowProcW
CreateAcceleratorTableW
FillRect
DestroyAcceleratorTable
GetSysColor
GetParent
ShowWindow
SetWindowPos
DestroyWindow
SendMessageW
UnregisterClassW
CharNextW
OffsetRect
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsWindow
FindWindowW
GetWindowRect
MonitorFromRect
PostMessageW
UnhookWinEvent
SetWinEventHook
GetForegroundWindow
BringWindowToTop
SetWindowLongW
GetCursorPos
PtInRect
SetForegroundWindow
GetUserObjectInformationW
GetProcessWindowStation
DrawIconEx
CallWindowProcW
WindowFromPoint
EqualRect
IsIconic
MonitorFromPoint
GetSystemMetrics
GetMonitorInfoW
GetAsyncKeyState
UnregisterHotKey
RegisterHotKey
EnumDisplayMonitors
CopyRect
ScreenToClient
GetWindowLongW
MonitorFromWindow
GetClassNameW
GetShellWindow
GetAncestor
ClientToScreen
GetWindowThreadProcessId
SystemParametersInfoW
AttachThreadInput
LockWorkStation
SetCursor
SetCapture
ReleaseCapture
GetDesktopWindow
CreateWindowExW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
MoveWindow
GetClientRect
BeginPaint
EndPaint
SetClassLongW
GetClassLongW
RemovePropW
GetPropW
SetPropW
SetMenuContextHelpId
GetMenuItemInfoW
SetMenuInfo
GetMenuInfo
TrackPopupMenu
AppendMenuW
GetMenuItemCount
DestroyMenu
CreatePopupMenu
IsMenu
GetIconInfo
SetLayeredWindowAttributes
EnumDisplayDevicesW
SetTimer
KillTimer
DestroyIcon
SendMessageA
GetWindowDC
GetWindowRgn
IsZoomed
SetSysColors
DestroyCursor
GetKeyState
EnableMenuItem
SetRect
InflateRect
InvalidateRect
SetActiveWindow
IsWindowEnabled
EnableWindow
LoadImageW
CreateIconFromResource
LoadBitmapW
MapWindowPoints
SetCaretPos
HideCaret
GetCaretBlinkTime
CreateCaret
UpdateWindow
GetCapture
AnimateWindow
PostQuitMessage
TrackMouseEvent
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
IsRectEmpty
UnionRect
IntersectRect
InvalidateRgn

gdi32

ExcludeClipRect
CreateRoundRectRgn
SetGraphicsMode
Rectangle
FrameRgn
SetROP2
CreateRectRgn
SetDeviceGammaRamp
RestoreDC
GetObjectW
GetStockObject
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
DeleteObject
GetDeviceCaps
SaveDC
EnumFontsW
CreateBitmap
CreateFontIndirectW
SetBkMode
StretchBlt
SetViewportOrgEx
ExtCreateRegion
GetRegionData
IntersectClipRect
SelectClipRgn
CreateDIBSection
GetCurrentObject
GetViewportOrgEx
GetGlyphIndicesW
GetTextExtentPointI
AddFontMemResourceEx
RemoveFontMemResourceEx
SetTextColor
SetTextAlign
GetTextMetricsW
CreatePen
SetWorldTransform
ExtTextOutW
GetTextFaceW
GdiFlush
SelectObject
CreateHatchBrush
EnumFontFamiliesExW
GetCharABCWidthsW
GetFontData
GetGlyphOutlineW
GetOutlineTextMetricsW
GetFontUnicodeRanges

comdlg32

ChooseColorW
GetOpenFileNameW

advapi32

CryptGetUserKey
CryptSignHashW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegNotifyChangeKeyValue
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
RegQueryValueExW
GetUserNameA
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegDeleteKeyW
DeregisterEventSource
CryptEnumProvidersW

shell32

ShellExecuteW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
ord680
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetPathFromIDListW
SHFileOperationW
Shell_NotifyIconW

ole32

CreateStreamOnHGlobal
IIDFromString
CreateBindCtx
CoCreateGuid
OleLockRunning
StringFromGUID2
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoTaskMemRealloc
OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance

oleaut32

LoadTypeLi
LoadRegTypeLi
VariantClear
OleCreateFontIndirect
DispCallFunc
VarUdateFromDate
SysStringLen
VariantInit
SysAllocStringLen
SysFreeString
SysAllocString
VarUI4FromStr
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate

shlwapi

PathAppendW
PathRemoveFileSpecW
PathFindExtensionW
PathIsDirectoryW
PathFileExistsW
StrToIntExW
PathQuoteSpacesW

gdiplus

GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipSaveImageToFile
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipGraphicsClear
GdipImageGetFrameCount
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCreateBitmapFromFile
GdipGetImageEncodersSize
GdipAlloc
GdipFree
GdipGetImageEncoders
GdipImageSelectActiveFrame

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoA

dwmapi

DwmGetWindowAttribute

ws2_32

getnameinfo
gethostname
sendto
recvfrom
freeaddrinfo
getaddrinfo
select
__WSAFDIsSet
ioctlsocket
listen
htonl
accept
WSACleanup
WSAStartup
WSAIoctl
WSASetLastError
socket
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
bind
WSAGetLastError
send
recv
closesocket
shutdown

iphlpapi

GetAdaptersInfo

imm32

ImmReleaseContext
ImmAssociateContext
ImmGetContext

crypt32

CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertFindCertificateInStore
CertOpenStore
CertOpenSystemStoreA
CertGetIntendedKeyUsage
CertGetEnhancedKeyUsage
CertFreeCertificateContext
CertEnumCertificatesInStore
CertCloseStore

wldap32

ord127
ord167
ord145
ord208
ord219
ord26
ord14
ord216
ord27
ord117
ord142
ord79
ord133
ord147
ord46
ord41
ord301

usp10

ScriptItemize
ScriptFreeCache
ScriptShape

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 560KB - Virtual size: 559KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7c4688817ac0b7a44b08523b26f8f67

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

8b:6b:86:23:d0:7b:86:b7:75:16:ca:6b:69:62:2c:8dCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

8b:6b:86:23:d0:7b:86:b7:75:16:ca:6b:69:62:2c:8dCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

7a:b3:a9:51:02:68:b1:1a:4d:2e:57:a1:0d:4a:aa:55:6c:20:41:69:2e:b9:a1:75:0a:85:61:03:9b:2a:11:a9Signer

34:88:9f:e2:a9:94:d3:c9:09:25:48:59:a8:4a:ac:89:1c:31:8f:e1Signer

Headers

DLL Characteristics

File Characteristics

Imports

winmm

wtsapi32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

gdiplus

version

dwmapi

ws2_32

iphlpapi

imm32

crypt32

wldap32

usp10

Sections

.text Size: 3.5MB - Virtual size: 3.5MB

.rdata Size: 1.2MB - Virtual size: 1.2MB

.data Size: 86KB - Virtual size: 190KB

.rsrc Size: 560KB - Virtual size: 559KB

.reloc Size: 204KB - Virtual size: 204KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

8b:6b:86:23:d0:7b:86:b7:75:16:ca:6b:69:62:2c:8d
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

8b:6b:86:23:d0:7b:86:b7:75:16:ca:6b:69:62:2c:8d
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

7a:b3:a9:51:02:68:b1:1a:4d:2e:57:a1:0d:4a:aa:55:6c:20:41:69:2e:b9:a1:75:0a:85:61:03:9b:2a:11:a9
Signer

34:88:9f:e2:a9:94:d3:c9:09:25:48:59:a8:4a:ac:89:1c:31:8f:e1
Signer

.text
Size: 3.5MB - Virtual size: 3.5MB

.rdata
Size: 1.2MB - Virtual size: 1.2MB

.data
Size: 86KB - Virtual size: 190KB

.rsrc
Size: 560KB - Virtual size: 559KB

.reloc
Size: 204KB - Virtual size: 204KB