6d30f2b6ea13a561e3a1a18b635e9c4db6b65d957724e3ed1e05ab3c5717daf5[.]exe[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

6d30f2b6ea13a561e3a1a18b635e9c4db6b65d957724e3ed1e05ab3c5717daf5.exe.zip
Size

84.0MB
MD5

8fabe44fe3b7edcf61ab1dcc984c14f6
SHA1

90a73d00b868cb1e6323da5e5dc7829357b742b2
SHA256

afbbb6aa7c67cb12c5900411ea8c3496f3415624aa5ce4d329755a04dfa523fb
SHA512

094d78c412dc82549e3996aa3f898fc5d71be44a1fbe7f06dd96b57cf1a6315057f09fa17aa9f7339f1cc80a603e0649e3ff7fd42cb36955b0825a2aee33a715
SSDEEP

1572864:biRaLeTqxbZ3Lab9Ca8H8eNkS699bSaYFSw/w451QOGaCjUY:biRaKsV3Ob9gHtdyenY4Y1UY

Score

1^/10

Malware Config

Signatures

Files

6d30f2b6ea13a561e3a1a18b635e9c4db6b65d957724e3ed1e05ab3c5717daf5.exe.zip
.zip

Password: infected
6d30f2b6ea13a561e3a1a18b635e9c4db6b65d957724e3ed1e05ab3c5717daf5.exe
.exe windows:5 windows x86 arch:x86

4089040ba5206e2879cf46841dd1e485

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:1f:3a:05:7a:1d:ce:4b:f7:d7:6d:0c:7a:df:83:7e
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/11/2019, 00:00

Not After

04/02/2023, 12:00

Subject

CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:1c:b2:8a:00:00:00:00:00:26
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:41

Not After

15/04/2021, 19:51

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:1c:b2:8a:00:00:00:00:00:26
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:41

Not After

15/04/2021, 19:51

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:83:09:ba:16:54:68:50:e6:05:e7:5d:77:3e:56:de
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/11/2019, 00:00

Not After

04/02/2023, 12:00

Subject

CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

28/01/2021, 11:08

Not After

01/03/2032, 11:08

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

df:44:72:6b:b4:81:19:59:5a:62:b1:ad:3e:67:8f:e4:ee:22:1a:bb:75:23:fc:f2:fa:88:29:0d:4f:c9:a8:0e
Signer

Actual PE Digest

df:44:72:6b:b4:81:19:59:5a:62:b1:ad:3e:67:8f:e4:ee:22:1a:bb:75:23:fc:f2:fa:88:29:0d:4f:c9:a8:0e

Digest Algorithm

sha256

PE Digest Matches

true

42:1f:76:a0:d0:a9:90:80:b4:0a:74:03:f2:7b:9a:de:d5:4a:c2:93
Signer

Actual PE Digest

42:1f:76:a0:d0:a9:90:80:b4:0a:74:03:f2:7b:9a:de:d5:4a:c2:93

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessW
GetCurrentThread
TerminateProcess
GetSystemTime
SetEvent
CreateEventW
FindAtomW
GlobalAddAtomW
WideCharToMultiByte
GetDiskFreeSpaceExW
GetVolumeNameForVolumeMountPointW
QueryDosDeviceW
lstrcatW
GetLocalTime
InterlockedCompareExchange
QueryPerformanceCounter
QueryPerformanceFrequency
lstrlenA
SystemTimeToFileTime
GetFileTime
InterlockedExchange
FlushInstructionCache
GlobalAlloc
GlobalFree
GetTickCount
GetCommandLineW
LoadLibraryExW
MultiByteToWideChar
lstrcmpiW
FreeResource
GetSystemWindowsDirectoryW
lstrcmpiA
lstrcmpA
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoA
SetHandleCount
GetFileType
SetStdHandle
GetStringTypeW
GetStringTypeA
IsValidLocale
LeaveCriticalSection
GetLocaleInfoA
GetUserDefaultLCID
GetTimeZoneInformation
GetModuleHandleA
HeapCreate
InitializeCriticalSectionAndSpinCount
GetModuleFileNameA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
GetStartupInfoW
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
ExitThread
TlsFree
ReleaseMutex
HeapWalk
HeapLock
OpenThread
HeapUnlock
GlobalDeleteAtom
GetSystemTimeAsFileTime
CreateFileA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapSize
HeapReAlloc
HeapDestroy
TlsAlloc
CreateMutexW
PostQueuedCompletionStatus
CreateIoCompletionPort
GetQueuedCompletionStatus
CreateThread
TerminateThread
OutputDebugStringW
GetFileSizeEx
CompareFileTime
OpenProcess
GetVolumeInformationW
FormatMessageW
SetFileTime
SetEndOfFile
UnmapViewOfFile
GetFileSize
EnterCriticalSection
GetFullPathNameW
SetLastError
lstrlenW
lstrcpyW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
FindFirstFileW
FindNextFileW
FindClose
LocalAlloc
GetVersionExW
CopyFileW
MoveFileW
MoveFileExW
GetPrivateProfileStringW
WritePrivateProfileStringW
GlobalFindAtomW
Sleep
GetFileAttributesW
WriteFile
CreateDirectoryW
GetTempPathW
GetTempFileNameW
SetFileAttributesW
InterlockedDecrement
RemoveDirectoryW
DeleteFileW
GetLastError
GetProcessHeap
HeapAlloc
HeapFree
GetSystemDirectoryW
ReadFile
SetFilePointer
GetCurrentProcessId
CreateFileW
DeviceIoControl
LoadLibraryW
InterlockedIncrement
GetModuleFileNameW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CloseHandle
WaitForSingleObject
GetModuleHandleW
GetProcAddress
GetSystemInfo
GlobalMemoryStatusEx
FreeLibrary
LocalFree
FindResourceExW
FindResourceW
LoadResource
LockResource
LockFile
MapViewOfFile
GetStdHandle
SetConsoleTextAttribute
LocalFileTimeToFileTime
DosDateTimeToFileTime
TlsGetValue
TlsSetValue
ResetEvent
ReadProcessMemory
OpenMutexW
GetExitCodeProcess
GetLongPathNameW
FindNextFileA
FindFirstFileA
LockFileEx
GetFileAttributesExW
UnlockFile
GetVersion
CreateFileMappingW
GetEnvironmentVariableW
GetLogicalDriveStringsW
GetWindowsDirectoryW
GetDriveTypeW
GetCurrentThreadId
MulDiv
SetFilePointerEx
GetCurrentProcess
EnumSystemLocalesA
SizeofResource

user32

EndDialog
GetWindowLongW
SetWindowTextW
MoveWindow
SetWindowPos
GetClientRect
ScreenToClient
MapWindowPoints
GetMonitorInfoW
MonitorFromWindow
GetWindowRect
GetWindow
GetParent
GetDC
ReleaseDC
SetWindowLongW
IsWindowVisible
FindWindowExW
InvalidateRect
RedrawWindow
GetDlgCtrlID
SetFocus
MessageBeep
GetWindowTextLengthW
CreateDialogParamW
SetWindowRgn
SetTimer
KillTimer
CopyRect
DefWindowProcW
CallWindowProcW
BeginPaint
EndPaint
DialogBoxParamW
EnableMenuItem
DestroyWindow
GetSystemMenu
SetDlgItemTextW
GetClassInfoExW
LoadCursorW
InflateRect
ShowWindow
IsWindowEnabled
wsprintfW
ExitWindowsEx
UnregisterClassA
GetDlgItem
PostQuitMessage
IsIconic
SystemParametersInfoW
LoadIconW
RegisterClassExW
CreateWindowExW
LoadImageW
GetSystemMetrics
EnableWindow
IsWindow
CharNextW
FindWindowW
SendMessageTimeoutW
SendMessageW
GetActiveWindow
TranslateMessage
MessageBoxW
PostMessageW
wvsprintfW
DispatchMessageW
BringWindowToTop
GetCursorPos
GetWindowTextW
TrackMouseEvent
GetShellWindow
PostThreadMessageW
SetForegroundWindow
UpdateLayeredWindow
GetWindowThreadProcessId
PeekMessageW
GetMessageW
PtInRect

gdi32

DeleteObject
EnumFontFamiliesW
CreateDIBSection
SetViewportOrgEx
CreateRectRgn
CombineRgn
DeleteDC
SetBkColor
CreateSolidBrush
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
BitBlt

advapi32

RegEnumKeyExW
ImpersonateLoggedOnUser
RevertToSelf
OpenProcessToken
DuplicateTokenEx
OpenSCManagerW
OpenServiceW
QueryServiceStatusEx
CloseServiceHandle
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenThreadToken
ImpersonateSelf
AllocateAndInitializeSid
FreeSid
SetSecurityInfo
GetSecurityInfo
GetSecurityDescriptorSacl
IsValidSid
CopySid
RegQueryValueExW
RegQueryInfoKeyW
GetExplicitEntriesFromAclW
GetTrusteeNameW
DeleteAce
LookupAccountSidW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyW
GetTokenInformation
RegOpenKeyExW
RegDeleteValueW
RegEnumValueW
RegCloseKey
RegDeleteKeyW
GetUserNameW
LookupAccountNameW
GetFileSecurityW
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
EqualSid
AddAce
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
SetFileSecurityW
GetNamedSecurityInfoW
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetNamedSecurityInfoW
ControlService
RegOpenKeyExA
RegQueryValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegEnumValueA
ChangeServiceConfigW

shell32

SHBrowseForFolderW
SHCreateDirectoryExW
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetSpecialFolderPathW
ShellExecuteW
SHChangeNotify
SHFileOperationW
ShellExecuteExW
ord680
CommandLineToArgvW
SHGetSpecialFolderPathA
ord165

ole32

CoInitializeEx
CoTaskMemAlloc
OleRun
CoTaskMemRealloc
CoInitializeSecurity
CoSetProxyBlanket
CoInitialize
CoUninitialize
CoCreateGuid
CreateStreamOnHGlobal
CoTaskMemFree
CoCreateInstance

oleaut32

SysAllocString
SysStringLen
SysFreeString
VariantInit
SysAllocStringByteLen
SysStringByteLen
VarUI4FromStr
SysAllocStringLen
VariantChangeType
VariantClear

shlwapi

PathRemoveFileSpecW
SHGetValueA
PathCombineW
PathAppendW
PathIsRelativeW
SHDeleteKeyW
StrStrIW
StrStrIA
StrCmpNIW
StrTrimA
wnsprintfW
StrCmpW
PathAppendA
PathUnquoteSpacesW
PathCombineA
SHSetValueA
SHSetValueW
PathFileExistsW
SHGetValueW
SHDeleteValueW
StrCmpIW
PathFindExtensionW
PathCommonPrefixW
PathIsDirectoryW
PathAddBackslashW
PathFindFileNameW
PathRemoveExtensionW
PathMatchSpecW
StrRetToStrW
PathIsSameRootW
StrCatW
StrCpyW
PathIsPrefixW
PathIsDirectoryEmptyW
PathFileExistsA

comctl32

InitCommonControlsEx

crypt32

CertDeleteCertificateFromStore
CertDuplicateCertificateContext
CertCloseStore
CertGetNameStringW
CertEnumCertificatesInStore
CertOpenStore
CertCompareCertificate

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

psapi

GetProcessImageFileNameW
EnumProcesses
GetModuleFileNameExW

rpcrt4

NdrServerCall2
NdrClientCall2
NdrAsyncClientCall
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcStringFreeW
RpcBindingFree
NdrAsyncServerCall

gdiplus

GdipAlloc
GdipCreateImageAttributes
GdipFree
GdipDisposeImageAttributes
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromStream
GdipCloneBrush
GdipRestoreGraphics
GdipSaveGraphics
GdipDrawString
GdipFillPath
GdipGraphicsClear
GdipRotateWorldTransform
GdipScaleWorldTransform
GdipTranslateWorldTransform
GdipSetSmoothingMode
GdipSetTextRenderingHint
GdipAddPathBezierI
GdipAddPathArcI
GdipClosePathFigure
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipCreateSolidFill
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipDeletePath
GdipCreatePath
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteBrush
GdiplusStartup
GdiplusShutdown
GdipDrawImageRectRectI
GdipDrawImagePointRectI
GdipCreateFromHDC
GdipDeleteGraphics
GdipCloneImage
GdipDrawImageRectRect
GdipSetImageAttributesColorMatrix
GdipCreateBitmapFromStreamICM

urlmon

URLDownloadToFileW
URLDownloadToCacheFileW

iphlpapi

GetAdaptersInfo

wininet

InternetOpenW
InternetSetOptionW
InternetQueryOptionW
HttpSendRequestW
HttpOpenRequestW
InternetCloseHandle
InternetConnectW
InternetCrackUrlW
InternetGetConnectedState
HttpQueryInfoW

netapi32

NetWkstaGetInfo
NetApiBufferFree

Sections

.text
Size: 614KB - Virtual size: 613KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.7MB - Virtual size: 6.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

4089040ba5206e2879cf46841dd1e485

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:1f:3a:05:7a:1d:ce:4b:f7:d7:6d:0c:7a:df:83:7eCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

61:1c:b2:8a:00:00:00:00:00:26Certificate

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

61:1c:b2:8a:00:00:00:00:00:26Certificate

Key Usages

0c:83:09:ba:16:54:68:50:e6:05:e7:5d:77:3e:56:deCertificate

Extended Key Usages

Key Usages

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37Certificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

df:44:72:6b:b4:81:19:59:5a:62:b1:ad:3e:67:8f:e4:ee:22:1a:bb:75:23:fc:f2:fa:88:29:0d:4f:c9:a8:0eSigner

42:1f:76:a0:d0:a9:90:80:b4:0a:74:03:f2:7b:9a:de:d5:4a:c2:93Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

crypt32

version

psapi

rpcrt4

gdiplus

urlmon

iphlpapi

wininet

netapi32

Sections

.text Size: 614KB - Virtual size: 613KB

.rdata Size: 167KB - Virtual size: 167KB

.data Size: 50KB - Virtual size: 70KB

.rsrc Size: 6.7MB - Virtual size: 6.7MB

.reloc Size: 66KB - Virtual size: 66KB

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:1f:3a:05:7a:1d:ce:4b:f7:d7:6d:0c:7a:df:83:7e
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

61:1c:b2:8a:00:00:00:00:00:26
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

61:1c:b2:8a:00:00:00:00:00:26
Certificate

0c:83:09:ba:16:54:68:50:e6:05:e7:5d:77:3e:56:de
Certificate

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

df:44:72:6b:b4:81:19:59:5a:62:b1:ad:3e:67:8f:e4:ee:22:1a:bb:75:23:fc:f2:fa:88:29:0d:4f:c9:a8:0e
Signer

42:1f:76:a0:d0:a9:90:80:b4:0a:74:03:f2:7b:9a:de:d5:4a:c2:93
Signer

.text
Size: 614KB - Virtual size: 613KB

.rdata
Size: 167KB - Virtual size: 167KB

.data
Size: 50KB - Virtual size: 70KB

.rsrc
Size: 6.7MB - Virtual size: 6.7MB

.reloc
Size: 66KB - Virtual size: 66KB