23820c9cc9aeef62267d864421e8ea106fce3bedce7aa2dcea0d4dfc31a387b6

Sharing

Copy URL Twitter E-mail

General

Target

23820c9cc9aeef62267d864421e8ea106fce3bedce7aa2dcea0d4dfc31a387b6
Size

289KB
MD5

bd1b06172e3e5b2025010d80836b8f9d
SHA1

14aa0bb01ec759639e50d43495f7d1ef1bc49ebd
SHA256

23820c9cc9aeef62267d864421e8ea106fce3bedce7aa2dcea0d4dfc31a387b6
SHA512

48fc1d0a8259ff0ba17c67a061eb7dbbde9d0582a01b24adf9a3a05587e521d43caaca851aaff032a41ebccd73638d1b55c1b181689082107434d7b80b523b8f
SSDEEP

6144:UVdb5rXZ1KaN1C2T9LRw8nTnp1jQoLCRPGSckIuEvlxNe/tEp2Blc:q5rHN1C2he+p1pj

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
sample	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/out.upx

Files

23820c9cc9aeef62267d864421e8ea106fce3bedce7aa2dcea0d4dfc31a387b6
.dll windows:4 windows x86 arch:x86

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

63:6c:c6:88:3f:2b:c2:25:15:21:9b:0b:65:82:d5:a1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

10/08/2007, 00:00

Not After

09/08/2010, 23:59

Subject

CN=The Codemasters Software Company Limited,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=The Codemasters Software Company Limited,L=Southam,ST=Warwickshire,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

?addCallback@AsyncThread@FMOD@@SG?AW4FMOD_RESULT@@P6G?AW43@XZPAPAV12@@Z
?addDSP@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAVDSP@2@@Z
?addDSP@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAVDSP@2@@Z
?addDSP@System@FMOD@@QAG?AW4FMOD_RESULT@@PAVDSP@2@@Z
?addGroup@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAV12@@Z
?addInput@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAV12@@Z
?addPolygon@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@MM_NHPBUFMOD_VECTOR@@PAH@Z
?addSyncPoint@Sound@FMOD@@QAG?AW4FMOD_RESULT@@IIPBDPAPAUFMOD_SYNCPOINT@@@Z
?attachFileSystem@System@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW43@PBDHPAIPAPAX2@ZP6G?AW43@PAX4@ZP6G?AW43@44I14@ZP6G?AW43@4I4@Z@Z
?cancel@File@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?close@File@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?close@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?createChannelGroup@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVChannelGroup@2@@Z
?createCodec@System@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_CODEC_DESCRIPTION@@@Z
?createDSP@System@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_DSP_DESCRIPTION@@PAPAVDSP@2@@Z
?createDSPByIndex@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAVDSP@2@@Z
?createDSPByType@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_DSP_TYPE@@PAPAVDSP@2@@Z
?createFile@SystemI@FMOD@@SG?AW4FMOD_RESULT@@PAPAVFile@2@@Z
?createGeometry@System@FMOD@@QAG?AW4FMOD_RESULT@@HHPAPAVGeometry@2@@Z
?createSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
?createStream@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
?deleteSyncPoint@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_SYNCPOINT@@@Z
?disconnectAll@DSP@FMOD@@QAG?AW4FMOD_RESULT@@_N0@Z
?disconnectFrom@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAV12@@Z
?get3DAttributes@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_VECTOR@@0@Z
?get3DConeOrientation@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_VECTOR@@@Z
?get3DConeSettings@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAM00@Z
?get3DConeSettings@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAM00@Z
?get3DCustomRolloff@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAPAUFMOD_VECTOR@@PAH@Z
?get3DCustomRolloff@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAPAUFMOD_VECTOR@@PAH@Z
?get3DDopplerLevel@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?get3DListenerAttributes@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAUFMOD_VECTOR@@000@Z
?get3DMinMaxDistance@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAM0@Z
?get3DMinMaxDistance@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAM0@Z
?get3DNumListeners@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?get3DOcclusion@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAM0@Z
?get3DPanLevel@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?get3DSettings@System@FMOD@@QAG?AW4FMOD_RESULT@@PAM00@Z
?get3DSpread@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getActive@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?getActive@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?getAdvancedSettings@System@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_ADVANCEDSETTINGS@@@Z
?getAudibility@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getBypass@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?getCDROMDriveName@System@FMOD@@QAG?AW4FMOD_RESULT@@HPADH0H0H@Z
?getCPUUsage@System@FMOD@@QAG?AW4FMOD_RESULT@@PAM000@Z
?getChannel@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAVChannel@2@@Z
?getChannel@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAVChannel@2@@Z
?getChannelGroup@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVChannelGroup@2@@Z
?getChannelList@SystemI@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVChannelI@2@@Z
?getChannelsPlaying@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getCurrentSound@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSound@2@@Z
?getDSPBufferSize@System@FMOD@@QAG?AW4FMOD_RESULT@@PAIPAH@Z
?getDSPHead@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVDSP@2@@Z
?getDSPHead@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVDSP@2@@Z
?getDSPHead@System@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVDSP@2@@Z
?getDefaults@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAM00PAH@Z
?getDefaults@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAM00PAH@Z
?getDelay@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAI0@Z
?getDriver@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getDriverCaps@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAIPAH1PAW4FMOD_SPEAKERMODE@@@Z
?getDriverName@System@FMOD@@QAG?AW4FMOD_RESULT@@HPADH@Z
?getFormat@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAW4FMOD_SOUND_TYPE@@PAW4FMOD_SOUND_FORMAT@@PAH2@Z
?getFrequency@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getGeometrySettings@System@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getGlobals@SystemI@FMOD@@SG?AW4FMOD_RESULT@@PAPAVGlobal@2@@Z
?getGroup@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAV12@@Z
?getHardwareChannels@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH00@Z
?getIndex@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getInfo@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PADPAIPAH22@Z
?getInput@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAV12@@Z
?getInputLevels@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HW4FMOD_SPEAKER@@PAMH@Z
?getInputMix@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAM@Z
?getLength@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAII@Z
?getLoopCount@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getLoopCount@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getLoopPoints@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAII0I@Z
?getLoopPoints@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAII0I@Z
?getMasterChannelGroup@System@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVChannelGroup@2@@Z
?getMaxPolygons@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PAH0@Z
?getMode@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?getMode@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?getMute@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?getMute@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?getName@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PADH@Z
?getName@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PADH@Z
?getNetworkProxy@System@FMOD@@QAG?AW4FMOD_RESULT@@PADH@Z
?getNetworkTimeout@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumCDROMDrives@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumChannels@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumDrivers@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumGroups@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumInputs@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumOutputs@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumParameters@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumPlugins@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_PLUGINTYPE@@PAH@Z
?getNumPolygons@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumSubSounds@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumSyncPoints@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getNumTags@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAH0@Z
?getOpenState@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAW4FMOD_OPENSTATE@@PAIPA_N@Z
?getOutput@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAV12@@Z
?getOutput@System@FMOD@@QAG?AW4FMOD_RESULT@@PAW4FMOD_OUTPUTTYPE@@@Z
?getOutputByPlugin@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getOutputHandle@System@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getOutputLevels@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HW4FMOD_SPEAKER@@PAMH@Z
?getOutputMix@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAM@Z
?getPan@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getParameter@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAMPADH@Z
?getParameterInfo@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAD00HPAM1@Z
?getPaused@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?getPaused@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?getPitch@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getPluginInfo@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_PLUGINTYPE@@HPADHPAI@Z
?getPolygonAttributes@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@HPAM0PA_N@Z
?getPolygonNumVertices@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@HPAH@Z
?getPolygonVertex@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@HHPAUFMOD_VECTOR@@@Z
?getPosition@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAII@Z
?getPosition@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_VECTOR@@@Z
?getPriority@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getRecordDriver@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getRecordDriverName@System@FMOD@@QAG?AW4FMOD_RESULT@@HPADH@Z
?getRecordNumDrivers@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getRecordPosition@System@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?getReverbProperties@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_REVERB_CHANNELPROPERTIES@@@Z
?getReverbProperties@System@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_REVERB_PROPERTIES@@@Z
?getRotation@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_VECTOR@@0@Z
?getScale@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_VECTOR@@@Z
?getSoftwareChannels@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getSoftwareFormat@System@FMOD@@QAG?AW4FMOD_RESULT@@PAHPAW4FMOD_SOUND_FORMAT@@00PAW4FMOD_DSP_RESAMPLER@@0@Z
?getSoundList@SystemI@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSoundI@2@@Z
?getSoundRAM@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH00@Z
?getSpeakerLevels@Channel@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_SPEAKER@@PAMH@Z
?getSpeakerMix@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAM0000000@Z
?getSpeakerMode@System@FMOD@@QAG?AW4FMOD_RESULT@@PAW4FMOD_SPEAKERMODE@@@Z
?getSpeakerPosition@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_SPEAKER@@PAM1@Z
?getSpectrum@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAMHHW4FMOD_DSP_FFT_WINDOW@@@Z
?getSpectrum@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAMHHW4FMOD_DSP_FFT_WINDOW@@@Z
?getSpectrum@System@FMOD@@QAG?AW4FMOD_RESULT@@PAMHHW4FMOD_DSP_FFT_WINDOW@@@Z
?getStreamBufferSize@System@FMOD@@QAG?AW4FMOD_RESULT@@PAI0@Z
?getSubSound@Sound@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAV12@@Z
?getSyncPoint@Sound@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAUFMOD_SYNCPOINT@@@Z
?getSyncPointInfo@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_SYNCPOINT@@PADHPAII@Z
?getSystemObject@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSystem@2@@Z
?getSystemObject@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSystem@2@@Z
?getSystemObject@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSystem@2@@Z
?getSystemObject@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSystem@2@@Z
?getTag@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PBDHPAUFMOD_TAG@@@Z
?getType@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAW4FMOD_DSP_TYPE@@@Z
?getUserData@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@GeometryI@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getUserData@System@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?getVariations@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAM00@Z
?getVersion@System@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?getVolume@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getVolume@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?getWaveData@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAMHH@Z
?getWaveData@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAMHH@Z
?getWaveData@System@FMOD@@QAG?AW4FMOD_RESULT@@PAMHH@Z
?init@System@FMOD@@QAG?AW4FMOD_RESULT@@HIPAX@Z
?isPlaying@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?isRecording@System@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?isVirtual@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?loadGeometry@System@FMOD@@QAG?AW4FMOD_RESULT@@PBXHPAPAVGeometry@2@@Z
?loadPlugin@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAW4FMOD_PLUGINTYPE@@PAH@Z
?lock@Sound@FMOD@@QAG?AW4FMOD_RESULT@@IIPAPAX0PAI1@Z
?lockDSP@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?open@File@FMOD@@QAG?AW4FMOD_RESULT@@PBDI_N0@Z
?override3DAttributes@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@0@Z
?overrideFrequency@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?overrideMute@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?overridePan@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?overridePaused@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?overrideReverbProperties@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_REVERB_CHANNELPROPERTIES@@@Z
?overrideSpeakerMix@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@MMMMMMMM@Z
?overrideVolume@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?playDSP@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_CHANNELINDEX@@PAVDSP@2@_NPAPAVChannel@2@@Z
?playSound@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_CHANNELINDEX@@PAVSound@2@_NPAPAVChannel@2@@Z
?read@File@FMOD@@QAG?AW4FMOD_RESULT@@PAXIIPAI@Z
?readData@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAXIPAI@Z
?recordStart@System@FMOD@@QAG?AW4FMOD_RESULT@@PAVSound@2@_N@Z
?recordStop@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@DSP@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@Sound@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?release@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?remove@DSP@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?removeCallback@AsyncThread@FMOD@@SG?AW4FMOD_RESULT@@P6G?AW43@XZ@Z
?reset@DSP@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?save@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PAXPAH@Z
?seek@File@FMOD@@QAG?AW4FMOD_RESULT@@HH@Z
?seekData@Sound@FMOD@@QAG?AW4FMOD_RESULT@@I@Z
?set3DAttributes@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@0@Z
?set3DConeOrientation@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_VECTOR@@@Z
?set3DConeSettings@Channel@FMOD@@QAG?AW4FMOD_RESULT@@MMM@Z
?set3DConeSettings@Sound@FMOD@@QAG?AW4FMOD_RESULT@@MMM@Z
?set3DCustomRolloff@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_VECTOR@@H@Z
?set3DCustomRolloff@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_VECTOR@@H@Z
?set3DDopplerLevel@Channel@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?set3DListenerAttributes@System@FMOD@@QAG?AW4FMOD_RESULT@@HPBUFMOD_VECTOR@@000@Z
?set3DMinMaxDistance@Channel@FMOD@@QAG?AW4FMOD_RESULT@@MM@Z
?set3DMinMaxDistance@Sound@FMOD@@QAG?AW4FMOD_RESULT@@MM@Z
?set3DNumListeners@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?set3DOcclusion@Channel@FMOD@@QAG?AW4FMOD_RESULT@@MM@Z
?set3DPanLevel@Channel@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?set3DSettings@System@FMOD@@QAG?AW4FMOD_RESULT@@MMM@Z
?set3DSpread@Channel@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setActive@DSP@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setActive@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setAdvancedSettings@System@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_ADVANCEDSETTINGS@@@Z
?setBypass@DSP@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setCallback@Channel@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_CHANNEL_CALLBACKTYPE@@P6G?AW43@PAUFMOD_CHANNEL@@0HII@ZH@Z
?setChannelGroup@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAVChannelGroup@2@@Z
?setDSPBufferSize@System@FMOD@@QAG?AW4FMOD_RESULT@@IH@Z
?setDefaults@DSP@FMOD@@QAG?AW4FMOD_RESULT@@MMMH@Z
?setDefaults@Sound@FMOD@@QAG?AW4FMOD_RESULT@@MMMH@Z
?setDelay@Channel@FMOD@@QAG?AW4FMOD_RESULT@@II@Z
?setDriver@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setFileSystem@System@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW43@PBDHPAIPAPAX2@ZP6G?AW43@PAX4@ZP6G?AW43@44I14@ZP6G?AW43@4I4@ZH@Z
?setFrequency@Channel@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setGeometrySettings@System@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setHardwareChannels@System@FMOD@@QAG?AW4FMOD_RESULT@@HHHH@Z
?setInputLevels@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HW4FMOD_SPEAKER@@PAMH@Z
?setInputMix@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HM@Z
?setLoopCount@Channel@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setLoopCount@Sound@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setLoopPoints@Channel@FMOD@@QAG?AW4FMOD_RESULT@@IIII@Z
?setLoopPoints@Sound@FMOD@@QAG?AW4FMOD_RESULT@@IIII@Z
?setMode@Channel@FMOD@@QAG?AW4FMOD_RESULT@@I@Z
?setMode@Sound@FMOD@@QAG?AW4FMOD_RESULT@@I@Z
?setMute@Channel@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setMute@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setNetworkProxy@System@FMOD@@QAG?AW4FMOD_RESULT@@PBD@Z
?setNetworkTimeout@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setOutput@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_OUTPUTTYPE@@@Z
?setOutputByPlugin@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setOutputLevels@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HW4FMOD_SPEAKER@@PAMH@Z
?setOutputMix@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HM@Z
?setPan@Channel@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setParameter@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HM@Z
?setPaused@Channel@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setPaused@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?setPitch@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setPluginPath@System@FMOD@@QAG?AW4FMOD_RESULT@@PBD@Z
?setPolygonAttributes@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@HMM_N@Z
?setPolygonVertex@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@HHPBUFMOD_VECTOR@@@Z
?setPosition@Channel@FMOD@@QAG?AW4FMOD_RESULT@@II@Z
?setPosition@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@@Z
?setPriority@Channel@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setRecordDriver@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setReverbProperties@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_REVERB_CHANNELPROPERTIES@@@Z
?setReverbProperties@System@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_REVERB_PROPERTIES@@@Z
?setRotation@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@0@Z
?setScale@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@@Z
?setSoftwareChannels@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setSoftwareFormat@System@FMOD@@QAG?AW4FMOD_RESULT@@HW4FMOD_SOUND_FORMAT@@HHW4FMOD_DSP_RESAMPLER@@@Z
?setSpeakerLevels@Channel@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_SPEAKER@@PAMH@Z
?setSpeakerMix@Channel@FMOD@@QAG?AW4FMOD_RESULT@@MMMMMMMM@Z
?setSpeakerMode@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_SPEAKERMODE@@@Z
?setSpeakerPosition@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_SPEAKER@@MM@Z
?setStreamBufferSize@System@FMOD@@QAG?AW4FMOD_RESULT@@II@Z
?setSubSound@Sound@FMOD@@QAG?AW4FMOD_RESULT@@HPAV12@@Z
?setSubSoundSentence@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAHH@Z
?setUserData@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@Geometry@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@GeometryI@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setUserData@System@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?setVariations@Sound@FMOD@@QAG?AW4FMOD_RESULT@@MMM@Z
?setVolume@Channel@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?setVolume@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?showConfigDialog@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAX_N@Z
?stop@Channel@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?stop@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?tell@File@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?unloadPlugin@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_PLUGINTYPE@@H@Z
?unlock@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAX0II@Z
?unlockDSP@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?update@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?wakeupThread@AsyncThread@FMOD@@QAG?AW4FMOD_RESULT@@XZ
FMOD_ChannelGroup_AddDSP
FMOD_ChannelGroup_AddGroup
FMOD_ChannelGroup_GetChannel
FMOD_ChannelGroup_GetDSPHead
FMOD_ChannelGroup_GetGroup
FMOD_ChannelGroup_GetMute
FMOD_ChannelGroup_GetName
FMOD_ChannelGroup_GetNumChannels
FMOD_ChannelGroup_GetNumGroups
FMOD_ChannelGroup_GetPaused
FMOD_ChannelGroup_GetPitch
FMOD_ChannelGroup_GetSpectrum
FMOD_ChannelGroup_GetSystemObject
FMOD_ChannelGroup_GetUserData
FMOD_ChannelGroup_GetVolume
FMOD_ChannelGroup_GetWaveData
FMOD_ChannelGroup_Override3DAttributes
FMOD_ChannelGroup_OverrideFrequency
FMOD_ChannelGroup_OverrideMute
FMOD_ChannelGroup_OverridePan
FMOD_ChannelGroup_OverridePaused
FMOD_ChannelGroup_OverrideReverbProperties
FMOD_ChannelGroup_OverrideSpeakerMix
FMOD_ChannelGroup_OverrideVolume
FMOD_ChannelGroup_Release
FMOD_ChannelGroup_SetMute
FMOD_ChannelGroup_SetPaused
FMOD_ChannelGroup_SetPitch
FMOD_ChannelGroup_SetUserData
FMOD_ChannelGroup_SetVolume
FMOD_ChannelGroup_Stop
FMOD_Channel_AddDSP
FMOD_Channel_Get3DAttributes
FMOD_Channel_Get3DConeOrientation
FMOD_Channel_Get3DConeSettings
FMOD_Channel_Get3DCustomRolloff
FMOD_Channel_Get3DDopplerLevel
FMOD_Channel_Get3DMinMaxDistance
FMOD_Channel_Get3DOcclusion
FMOD_Channel_Get3DPanLevel
FMOD_Channel_Get3DSpread
FMOD_Channel_GetAudibility
FMOD_Channel_GetChannelGroup
FMOD_Channel_GetCurrentSound
FMOD_Channel_GetDSPHead
FMOD_Channel_GetDelay
FMOD_Channel_GetFrequency
FMOD_Channel_GetIndex
FMOD_Channel_GetLoopCount
FMOD_Channel_GetLoopPoints
FMOD_Channel_GetMode
FMOD_Channel_GetMute
FMOD_Channel_GetPan
FMOD_Channel_GetPaused
FMOD_Channel_GetPosition
FMOD_Channel_GetPriority
FMOD_Channel_GetReverbProperties
FMOD_Channel_GetSpeakerLevels
FMOD_Channel_GetSpeakerMix
FMOD_Channel_GetSpectrum
FMOD_Channel_GetSystemObject
FMOD_Channel_GetUserData
FMOD_Channel_GetVolume
FMOD_Channel_GetWaveData
FMOD_Channel_IsPlaying
FMOD_Channel_IsVirtual
FMOD_Channel_Set3DAttributes
FMOD_Channel_Set3DConeOrientation
FMOD_Channel_Set3DConeSettings
FMOD_Channel_Set3DCustomRolloff
FMOD_Channel_Set3DDopplerLevel
FMOD_Channel_Set3DMinMaxDistance
FMOD_Channel_Set3DOcclusion
FMOD_Channel_Set3DPanLevel
FMOD_Channel_Set3DSpread
FMOD_Channel_SetCallback
FMOD_Channel_SetChannelGroup
FMOD_Channel_SetDelay
FMOD_Channel_SetFrequency
FMOD_Channel_SetLoopCount
FMOD_Channel_SetLoopPoints
FMOD_Channel_SetMode
FMOD_Channel_SetMute
FMOD_Channel_SetPan
FMOD_Channel_SetPaused
FMOD_Channel_SetPosition
FMOD_Channel_SetPriority
FMOD_Channel_SetReverbProperties
FMOD_Channel_SetSpeakerLevels
FMOD_Channel_SetSpeakerMix
FMOD_Channel_SetUserData
FMOD_Channel_SetVolume
FMOD_Channel_Stop
FMOD_DSP_AddInput
FMOD_DSP_DisconnectAll
FMOD_DSP_DisconnectFrom
FMOD_DSP_GetActive
FMOD_DSP_GetBypass
FMOD_DSP_GetDefaults
FMOD_DSP_GetInfo
FMOD_DSP_GetInput
FMOD_DSP_GetInputLevels
FMOD_DSP_GetInputMix
FMOD_DSP_GetNumInputs
FMOD_DSP_GetNumOutputs
FMOD_DSP_GetNumParameters
FMOD_DSP_GetOutput
FMOD_DSP_GetOutputLevels
FMOD_DSP_GetOutputMix
FMOD_DSP_GetParameter
FMOD_DSP_GetParameterInfo
FMOD_DSP_GetSystemObject
FMOD_DSP_GetType
FMOD_DSP_GetUserData
FMOD_DSP_Release
FMOD_DSP_Remove
FMOD_DSP_Reset
FMOD_DSP_SetActive
FMOD_DSP_SetBypass
FMOD_DSP_SetDefaults
FMOD_DSP_SetInputLevels
FMOD_DSP_SetInputMix
FMOD_DSP_SetOutputLevels
FMOD_DSP_SetOutputMix
FMOD_DSP_SetParameter
FMOD_DSP_SetUserData
FMOD_DSP_ShowConfigDialog
FMOD_Debug_GetLevel
FMOD_Debug_SetLevel
FMOD_File_GetDiskBusy
FMOD_File_SetDiskBusy
FMOD_Geometry_AddPolygon
FMOD_Geometry_GetActive
FMOD_Geometry_GetMaxPolygons
FMOD_Geometry_GetNumPolygons
FMOD_Geometry_GetPolygonAttributes
FMOD_Geometry_GetPolygonNumVertices
FMOD_Geometry_GetPolygonVertex
FMOD_Geometry_GetPosition
FMOD_Geometry_GetRotation
FMOD_Geometry_GetScale
FMOD_Geometry_GetUserData
FMOD_Geometry_Release
FMOD_Geometry_Save
FMOD_Geometry_SetActive
FMOD_Geometry_SetPolygonAttributes
FMOD_Geometry_SetPolygonVertex
FMOD_Geometry_SetPosition
FMOD_Geometry_SetRotation
FMOD_Geometry_SetScale
FMOD_Geometry_SetUserData
FMOD_Memory_GetStats
FMOD_Memory_Initialize
FMOD_Sound_AddSyncPoint
FMOD_Sound_DeleteSyncPoint
FMOD_Sound_Get3DConeSettings
FMOD_Sound_Get3DCustomRolloff
FMOD_Sound_Get3DMinMaxDistance
FMOD_Sound_GetDefaults
FMOD_Sound_GetFormat
FMOD_Sound_GetLength
FMOD_Sound_GetLoopCount
FMOD_Sound_GetLoopPoints
FMOD_Sound_GetMode
FMOD_Sound_GetName
FMOD_Sound_GetNumSubSounds
FMOD_Sound_GetNumSyncPoints
FMOD_Sound_GetNumTags
FMOD_Sound_GetOpenState
FMOD_Sound_GetSubSound
FMOD_Sound_GetSyncPoint
FMOD_Sound_GetSyncPointInfo
FMOD_Sound_GetSystemObject
FMOD_Sound_GetTag
FMOD_Sound_GetUserData
FMOD_Sound_GetVariations
FMOD_Sound_Lock
FMOD_Sound_ReadData
FMOD_Sound_Release
FMOD_Sound_SeekData
FMOD_Sound_Set3DConeSettings
FMOD_Sound_Set3DCustomRolloff
FMOD_Sound_Set3DMinMaxDistance
FMOD_Sound_SetDefaults
FMOD_Sound_SetLoopCount
FMOD_Sound_SetLoopPoints
FMOD_Sound_SetMode
FMOD_Sound_SetSubSound
FMOD_Sound_SetSubSoundSentence
FMOD_Sound_SetUserData
FMOD_Sound_SetVariations
FMOD_Sound_Unlock
FMOD_System_AddDSP
FMOD_System_AttachFileSystem
FMOD_System_Close
FMOD_System_Create
FMOD_System_CreateChannelGroup
FMOD_System_CreateCodec
FMOD_System_CreateDSP
FMOD_System_CreateDSPByIndex
FMOD_System_CreateDSPByType
FMOD_System_CreateGeometry
FMOD_System_CreateSound
FMOD_System_CreateStream
FMOD_System_Get3DListenerAttributes
FMOD_System_Get3DNumListeners
FMOD_System_Get3DSettings
FMOD_System_GetAdvancedSettings
FMOD_System_GetCDROMDriveName
FMOD_System_GetCPUUsage
FMOD_System_GetChannel
FMOD_System_GetChannelsPlaying
FMOD_System_GetDSPBufferSize

Sections

UPX0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 472KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 810KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

63:6c:c6:88:3f:2b:c2:25:15:21:9b:0b:65:82:d5:a1Certificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Exports

Exports

Sections

UPX0 Size: - Virtual size: 1.1MB

UPX1 Size: 252KB - Virtual size: 252KB

.rsrc Size: 31KB - Virtual size: 32KB

Headers

File Characteristics

Sections

.text Size: 472KB - Virtual size: 470KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 72KB - Virtual size: 810KB

.rsrc Size: 4KB - Virtual size: 984B

.reloc Size: 24KB - Virtual size: 21KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

63:6c:c6:88:3f:2b:c2:25:15:21:9b:0b:65:82:d5:a1
Certificate

UPX0
Size: - Virtual size: 1.1MB

UPX1
Size: 252KB - Virtual size: 252KB

.rsrc
Size: 31KB - Virtual size: 32KB

.text
Size: 472KB - Virtual size: 470KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 72KB - Virtual size: 810KB

.rsrc
Size: 4KB - Virtual size: 984B

.reloc
Size: 24KB - Virtual size: 21KB