c0d13004e25ffb111031b049d5ebeb1d45d9371b1f52a149886c21410208771d

Sharing

Copy URL Twitter E-mail

General

Target

c0d13004e25ffb111031b049d5ebeb1d45d9371b1f52a149886c21410208771d
Size

1.6MB
MD5

8c392fbba988aa94ae63cc6171e1e345
SHA1

09220e42257a8a98fb3e751dce9f5c4a81d33688
SHA256

c0d13004e25ffb111031b049d5ebeb1d45d9371b1f52a149886c21410208771d
SHA512

5188ed12a192f30ca61fa00af997827265e51bce8f58ca47002fb0428e8b276054fc9d847c06dfd4ad3affedb7f74a321cf02b98f4a7dacd4238022f81203448
SSDEEP

24576:EedIJcNVXu2hBHfU+eraM8kOJAoy2eXWDhhOqRP8HE+9EJfE9iQsnL44Euxo2UT2:dJHflhr3qkDJfEHKLZEux3U6

Score

1^/10

Malware Config

Signatures

Files

c0d13004e25ffb111031b049d5ebeb1d45d9371b1f52a149886c21410208771d
.dll windows:5 windows x86 arch:x86

f31759abf103a0624fc5ba72c056dfe9

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:dd:a3:fa:e1:5d:dc:b3:77:ef:dc:e3:aa:6b:c2:a5
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

10/01/2022, 00:00

Not After

07/01/2023, 23:59

Subject

SERIALNUMBER=110111-1138985,CN=AhnLab\, Inc.,O=AhnLab\, Inc.,L=Seongnam-si,ST=Gyeonggi-do,C=KR,1.3.6.1.4.1.311.60.2.1.1=#130b53656f6e676e616d2d7369,1.3.6.1.4.1.311.60.2.1.2=#130b4779656f6e6767692d646f,1.3.6.1.4.1.311.60.2.1.3=#13024b52,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2b:62:81:dd:f8:a1:82:bb:81:a2:7d:b2:9e:8d:48:8a:76:4f:b0:ad:f7:44:08:88:de:17:af:07:a4:58:ba:7b
Signer

Actual PE Digest

2b:62:81:dd:f8:a1:82:bb:81:a2:7d:b2:9e:8d:48:8a:76:4f:b0:ad:f7:44:08:88:de:17:af:07:a4:58:ba:7b

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

ws2_32

send
WSASetLastError
recv
closesocket
WSACleanup
WSAGetLastError

kernel32

SetFileAttributesW
GetShortPathNameW
CompareFileTime
FindNextFileW
HeapFree
DeviceIoControl
HeapAlloc
GetProcessHeap
GetFileInformationByHandle
CreateFileW
ExpandEnvironmentStringsW
GetDriveTypeW
QueryDosDeviceW
MoveFileW
CreateDirectoryW
CopyFileW
HeapReAlloc
HeapSize
GetCommandLineW
GetTempPathW
GetSystemDirectoryW
GetTimeFormatW
GetDateFormatW
EnumResourceLanguagesW
GetLocaleInfoW
MoveFileExW
ReadFile
GetFileSize
lstrlenW
GetWindowsDirectoryW
GetCurrentProcess
GetExitCodeProcess
CreateProcessW
OpenMutexW
CreateMutexW
GetCurrentThread
LocalFree
GetCurrentDirectoryW
CreatePipe
WaitForSingleObject
TerminateProcess
WriteFile
GetVersionExW
GetDiskFreeSpaceW
FreeResource
LoadResource
FindResourceExW
GlobalAddAtomW
MultiByteToWideChar
SizeofResource
LockResource
FindResourceW
RemoveDirectoryW
lstrcmpA
InterlockedCompareExchange
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
InterlockedExchangeAdd
GetVersion
GetFileType
GetStdHandle
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
GetEnvironmentVariableW
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetModuleHandleA
GetModuleFileNameA
VirtualAlloc
VirtualFree
HeapDestroy
HeapCreate
InterlockedDecrement
InterlockedIncrement
FindFirstFileA
GetDriveTypeA
SetConsoleCtrlHandler
ExitProcess
GetFileAttributesW
PeekNamedPipe
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCommandLineA
RaiseException
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Sleep
FindFirstFileW
FindClose
GetTickCount
DeleteFileW
GetModuleHandleW
GlobalAlloc
GlobalFree
OpenProcess
CloseHandle
lstrcmpiW
GetCurrentProcessId
lstrcmpW
GlobalGetAtomNameW
GlobalDeleteAtom
LoadLibraryW
GetProcAddress
FreeLibrary
GetLocalTime
GetPrivateProfileStringW
GetPrivateProfileIntW
WritePrivateProfileStringW
GetLastError
GetModuleFileNameW
SetLastError
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
GetTimeZoneInformation
LCMapStringA
LCMapStringW
LoadLibraryA
GetFullPathNameA
CreateFileA
GetCurrentDirectoryA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
SetEnvironmentVariableA
WideCharToMultiByte
InitializeCriticalSection
RtlUnwind
SetFilePointer
SetEndOfFile
FlushFileBuffers
ReleaseMutex
GetConsoleCP
FreeEnvironmentStringsA
GetEnvironmentStrings
GetStartupInfoA

user32

GetProcessWindowStation
GetUserObjectInformationW
IsWindow
MessageBoxW
SetWindowTextW
ExitWindowsEx
GetSystemMetrics
IsWindowVisible
IsCharUpperW
CharLowerW
CharPrevW
PeekMessageW
MsgWaitForMultipleObjects
DispatchMessageW
PostQuitMessage
SendMessageW
FindWindowExW
GetDlgItem
GetWindowTextW
IsCharAlphaW
RegisterWindowMessageW
GetClassInfoExW
RegisterClassExW
CreateWindowExW
DestroyWindow
DefWindowProcW
CharNextW

advapi32

RegisterEventSourceW
ReportEventW
DeregisterEventSource
DeleteAce
CryptReleaseContext
CryptAcquireContextW
LookupAccountNameW
GetFileSecurityW
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
AddAce
AddAccessAllowedAce
GetSecurityDescriptorControl
SetFileSecurityW
OpenThreadToken
RegDeleteKeyW
RegEnumValueW
RegCreateKeyExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
DeleteService
ControlService
StartServiceW
QueryServiceStatus
CreateServiceW
OpenSCManagerW
OpenServiceW
CloseServiceHandle
LookupPrivilegeValueW
AdjustTokenPrivileges
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegSetValueExW
CreateProcessAsUserW
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
CryptGenRandom

shell32

SHGetMalloc
SHFileOperationW
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
FindExecutableW

ole32

CoCreateInstance
CoTaskMemFree

shlwapi

PathAppendW
PathFileExistsW

Exports

Exports

AI_AddAccessRightsToDir
AI_AddArchivedFile
AI_AddArchivedFile2
AI_AddUpdateProduct
AI_CheckComponentState
AI_CheckError
AI_CheckMultiOsAc
AI_CheckMultiOsLn
AI_CheckReboot
AI_CheckSystemRebootFlag
AI_ClearError
AI_CompareFileVersion
AI_CopyFile
AI_CopyFile2
AI_CopyFiles
AI_CreateArchivedFileList
AI_CreateChildSetup
AI_CreateDir
AI_CreateDir2
AI_CreateService2
AI_CreateShortcut
AI_CutBackslash
AI_DeleteAc
AI_DeleteDirAndFiles
AI_DeleteFile
AI_DeleteService
AI_DeleteUserInfo
AI_DeleteUserInfoEx
AI_DetailPrint
AI_DetailPrintErr
AI_EnableDetailPrint
AI_EnableMsgBox
AI_EnableWow64FsRedirection
AI_EnableWow64RegRedirection
AI_Exec
AI_Exec2
AI_ExecAsAdmin
AI_ExecCloneOfUninstaller
AI_ExecWait
AI_ExecWebLink
AI_ExitWindows
AI_ExpandRelatedPath
AI_ExtractFile
AI_ExtractFile2
AI_ExtractSubString
AI_ExtractWithList
AI_Free
AI_GenClientId
AI_GetComponentFlag
AI_GetComponentInfo
AI_GetCtrlText
AI_GetDateTimeFormat
AI_GetDefComponentState
AI_GetDiskFreeSpace
AI_GetFileVersionInfo
AI_GetLicenseVersion
AI_GetMode
AI_GetOS
AI_GetOS2
AI_GetParentProcess
AI_GetProfileInt
AI_GetProfileStr
AI_GetSecProfileInt
AI_GetSecProfileStringEx
AI_GetUserInfoEx
AI_Init
AI_InitEx
AI_InitExtraComponentInfo
AI_Is
AI_IsAdmin
AI_IsAnotherInstanceRunning
AI_IsDir
AI_IsFileExist
AI_IsFileRunning
AI_IsLocalSystem
AI_IsProcessorAMD64
AI_IsProcessorARM64
AI_IsProcessorIA64
AI_IsRegKeyExist
AI_IsServiceInstalled
AI_IsSupportSHA256
AI_IsT
AI_IsWin
AI_IsWin2
AI_IsWin3
AI_IsWinNT
AI_IsWinNTOrLater
AI_IsWinNTOrLater2
AI_IsWinNTOrLater3
AI_IsWinOrLater
AI_IsWinsockLater
AI_IsWorkstation
AI_IsWow64Process
AI_Ln2Ac
AI_LoadAc
AI_LoadClientId
AI_LoadUserInfo
AI_LogAction
AI_LogComment
AI_LogDbg
AI_LogEnter
AI_LogErr
AI_LogFlush
AI_LogHeader
AI_LogLeave
AI_LogLeaveAll
AI_LogWarn
AI_MsgBox
AI_OnShowLicense
AI_OnShowPage
AI_PBCallbackControl
AI_PBCallbackSetPos
AI_PBCallbackSetRange
AI_PBInit
AI_PickFileVer
AI_RegDeleteKey
AI_RegDeleteValue
AI_RegEnumKey
AI_RegEnumValue
AI_RegGetDWord
AI_RegGetString
AI_RegSetDWord
AI_RegSetString
AI_RegSetVolatileDWord
AI_RegSetVolatileString
AI_RegisterRebootMsgForAPC
AI_RemoveUpdateProduct
AI_RemoveUserInfo
AI_RenameDirToCreateFileWithSameName
AI_RenameFileToCreateDirWithSameName
AI_ReplaceFileOnReboot
AI_SaveAc
AI_SaveUserInfo
AI_SetArchiveFile
AI_SetCatalog
AI_SetComponentFlag
AI_SetCopyFlag
AI_SetCurrentArchivedFileList
AI_SetDeleteFlag
AI_SetError
AI_SetLanguage
AI_SetLogFile
AI_SetLogFlag
AI_SetLogLevel
AI_SetMode
AI_SetOutPath
AI_SetReboot
AI_SetSharedCount
AI_SetSystemRebootFlag
AI_SetSystemRebootFlag2
AI_SetUserInfo
AI_SetUserInfoEx
AI_SplitPath
AI_StartService
AI_StopService
AI_StrAdd
AI_StrFormat
AI_StrGet
AI_StrReplace
AI_StrTrace
AI_System64
AI_Un_CheckComponentState
AI_Un_GetComponentInfo
AI_UpdateUserInfo
AI_VerifyArgument
AI_VerifyComponentFlag
AI_VerifyDirectory
AI_VerifyIEVersion
AI_VerifyLn
AI_VerifyParent
AI_VerifyStartMenu
AI_VerifyUserInfo
AI_VerifyWinSuite
AI_WriteComponentInfo
AI_WriteUninstallInfo
AI_vf
AhnIEx_AddAccessRightsToDir
AhnIEx_AddAccessRightsToFile
AhnIEx_AddArchivedFile
AhnIEx_AddArchivedFile2
AhnIEx_AddUpdateProduct
AhnIEx_CheckError
AhnIEx_CheckReboot
AhnIEx_CheckSystemRebootFlag
AhnIEx_ClearError
AhnIEx_CompareFileVersion
AhnIEx_ConcealSerial
AhnIEx_CopyFile
AhnIEx_CopyFile2
AhnIEx_CopyFiles
AhnIEx_CreateArchivedFileList
AhnIEx_CreateDir
AhnIEx_CreateDir2
AhnIEx_CreateService
AhnIEx_CreateService2
AhnIEx_CreateShortcut
AhnIEx_CutBackslash
AhnIEx_DeleteDirAndFiles
AhnIEx_DeleteFile
AhnIEx_DeleteService
AhnIEx_DeleteUserInfo
AhnIEx_DetailPrint
AhnIEx_DetailPrintErr
AhnIEx_EnableMsgBox
AhnIEx_EnableWow64FsRedirection
AhnIEx_EnableWow64RegRedirection
AhnIEx_Exec
AhnIEx_Exec2
AhnIEx_ExecAsAdmin
AhnIEx_ExecWait
AhnIEx_ExecWebLink
AhnIEx_ExitWindows
AhnIEx_ExpandRelatedPath
AhnIEx_ExtractFile
AhnIEx_ExtractFile2
AhnIEx_ExtractSubString
AhnIEx_ExtractWithList
AhnIEx_Free
AhnIEx_GetDateTimeFormat
AhnIEx_GetDiskFreeSpace
AhnIEx_GetFileVersionInfo
AhnIEx_GetMode
AhnIEx_GetOS
AhnIEx_GetOS2
AhnIEx_GetParentProcess
AhnIEx_GetProfileInt
AhnIEx_GetProfileStr
AhnIEx_GetSecProfileInt
AhnIEx_GetSecProfileString
AhnIEx_GetSecProfileStringEx
AhnIEx_GetSpecialFolder
AhnIEx_GetUserInfo
AhnIEx_Init
AhnIEx_InitEx
AhnIEx_InvalidSerialNum
AhnIEx_InvalidSerialNum2
AhnIEx_Is
AhnIEx_IsAdmin
AhnIEx_IsDir
AhnIEx_IsEvaluationExpired
AhnIEx_IsFileExist
AhnIEx_IsFileRunning
AhnIEx_IsLocalSystem
AhnIEx_IsProcessorAMD64
AhnIEx_IsProcessorARM64
AhnIEx_IsProcessorIA64
AhnIEx_IsRegKeyExist
AhnIEx_IsServiceInstalled
AhnIEx_IsSupportSHA256
AhnIEx_IsWin
AhnIEx_IsWin2
AhnIEx_IsWin3
AhnIEx_IsWinNT
AhnIEx_IsWinNTOrLater
AhnIEx_IsWinNTOrLater2
AhnIEx_IsWinNTOrLater3
AhnIEx_IsWinOrLater
AhnIEx_IsWinsockLater
AhnIEx_IsWorkstation
AhnIEx_IsWow64Process
AhnIEx_LoadString
AhnIEx_LogAction
AhnIEx_LogActionf
AhnIEx_LogComment
AhnIEx_LogCommentf
AhnIEx_LogContinue
AhnIEx_LogDbg
AhnIEx_LogDbgf
AhnIEx_LogEnter
AhnIEx_LogErr
AhnIEx_LogErrf
AhnIEx_LogFlush
AhnIEx_LogHeader
AhnIEx_LogLeave
AhnIEx_LogLeaveAll
AhnIEx_LogPause
AhnIEx_LogWarn
AhnIEx_LogWarnf
AhnIEx_MsgBox
AhnIEx_PBCallbackSetPos
AhnIEx_PBCallbackSetRange
AhnIEx_PickFileVer
AhnIEx_RebuildSerial
AhnIEx_RegDeleteKey
AhnIEx_RegDeleteValue
AhnIEx_RegEnumKey
AhnIEx_RegEnumValue
AhnIEx_RegGetBinary
AhnIEx_RegGetDWord
AhnIEx_RegGetString
AhnIEx_RegSetBinary
AhnIEx_RegSetDWord
AhnIEx_RegSetString
AhnIEx_RegSetVolatileBinary
AhnIEx_RegSetVolatileDWord
AhnIEx_RegSetVolatileString
AhnIEx_RegisterRebootMsgForAPC
AhnIEx_RemoveUpdateProduct
AhnIEx_RenameDirToCreateFileWithSameName
AhnIEx_RenameFileToCreateDirWithSameName
AhnIEx_ReplaceFileOnReboot
AhnIEx_SetArchiveFile
AhnIEx_SetCatalog
AhnIEx_SetCopyFlag
AhnIEx_SetCurrentArchivedFileList
AhnIEx_SetDeleteFlag
AhnIEx_SetError
AhnIEx_SetLanguage
AhnIEx_SetLogFile
AhnIEx_SetLogLevel
AhnIEx_SetMode
AhnIEx_SetOutPath
AhnIEx_SetReboot
AhnIEx_SetSharedCount
AhnIEx_SetSystemRebootFlag
AhnIEx_SetUserInfo
AhnIEx_SplitPath
AhnIEx_StartService
AhnIEx_StopService
AhnIEx_StrAdd
AhnIEx_StrCatF
AhnIEx_StrCatN
AhnIEx_StrCpyF
AhnIEx_StrFormat
AhnIEx_StrGet
AhnIEx_StrReplace
AhnIEx_StrStrI
AhnIEx_StrTrace
AhnIEx_VerifyArgument
AhnIEx_VerifyDirectory
AhnIEx_VerifyIEVersion
AhnIEx_VerifyParent
AhnIEx_VerifyStartMenu
AhnIEx_VerifyWinSuite
AhnIEx_WriteComponentInfo
AhnIEx_WriteUninstallInfo
AhnIEx_snprintf
AhnIEx_vf

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 354KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f31759abf103a0624fc5ba72c056dfe9

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0d:dd:a3:fa:e1:5d:dc:b3:77:ef:dc:e3:aa:6b:c2:a5Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

2b:62:81:dd:f8:a1:82:bb:81:a2:7d:b2:9e:8d:48:8a:76:4f:b0:ad:f7:44:08:88:de:17:af:07:a4:58:ba:7bSigner

Headers

File Characteristics

Imports

version

ws2_32

kernel32

user32

advapi32

shell32

ole32

shlwapi

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 354KB - Virtual size: 354KB

.data Size: 9KB - Virtual size: 49KB

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 56KB - Virtual size: 55KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0d:dd:a3:fa:e1:5d:dc:b3:77:ef:dc:e3:aa:6b:c2:a5
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

2b:62:81:dd:f8:a1:82:bb:81:a2:7d:b2:9e:8d:48:8a:76:4f:b0:ad:f7:44:08:88:de:17:af:07:a4:58:ba:7b
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 354KB - Virtual size: 354KB

.data
Size: 9KB - Virtual size: 49KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 56KB - Virtual size: 55KB