2024-01-29_4ea9d4e7dcb401d95d9a3ac927e7b123_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-01-29_4ea9d4e7dcb401d95d9a3ac927e7b123_mafia
Size

2.9MB
MD5

4ea9d4e7dcb401d95d9a3ac927e7b123
SHA1

763fe150204cce98ebe25ee0e7868bf03604a71e
SHA256

4dd098100a9f5f90ad570ae6518ddac5a4a385e2b0520822db0ac22391a0261d
SHA512

7be2f96b53e544f49a5b5e9bcafeb46dba68593f1a11d703701c40e5ec52c911dc4fc11d0a5ae3d9225a12935ecfa314d15dcf0c7db2342121af20ce715a9d51
SSDEEP

49152:J4CiUOrftmk1pki8LJh5BdYYnK8k3sN9wUyOo6a6q5UPMMleMf5Vyw1ejyZqN3S+:mCiU4tmCki8LJh5BvnK8kcN9wUyOo6ax

Score

1^/10

Malware Config

Signatures

Files

2024-01-29_4ea9d4e7dcb401d95d9a3ac927e7b123_mafia
.exe windows:5 windows x86 arch:x86

8b2fac382ecaa65d478c89bd826238a1

Code Sign

04:6e:e0:3b:12:93:2b
Certificate

Issuer

CN=WoSign Class 3 Code Signing CA,O=WoSign eCommerce Services Limited,C=CN

Not Before

28/11/2013, 05:15

Not After

01/12/2016, 08:54

Subject

CN=Huawei Software Technologies Co.\, LTD.,O=Huawei Software Technologies Co.\, LTD.,L=Nanjing,ST=Jiangsu,C=CN,1.2.840.113549.1.9.1=#0c13746f2e7775666569406875617765692e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageDigitalSignature

73:c2:51:3b:21:3a:54:65:01:62:3c:e0:ca:0f:21:db:f9:d4:24:bc
Signer

Actual PE Digest

73:c2:51:3b:21:3a:54:65:01:62:3c:e0:ca:0f:21:db:f9:d4:24:bc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\HiSuiteDownloader\Release\HiSuiteDownLoader.pdb

Imports

setupapi

SetupDiGetDeviceInstanceIdA
CM_Get_Parent
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA

shlwapi

PathFindExtensionA
PathFileExistsW
PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFileExistsA
PathAppendA

wininet

FindNextUrlCacheEntryA
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
HttpQueryInfoA
InternetReadFile
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
DeleteUrlCacheEntry
FindFirstUrlCacheEntryA

urlmon

URLDownloadToFileA

kernel32

LocalLock
RaiseException
RtlUnwind
EncodePointer
DecodePointer
GetLogicalDrives
GetTimeZoneInformation
HeapReAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
VirtualProtect
GetCommandLineA
HeapSetInformation
GetStartupInfoW
ExitThread
HeapQueryInformation
HeapSize
GetSystemTimeAsFileTime
SetStdHandle
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
UnhandledExceptionFilter
IsDebuggerPresent
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
FatalAppExitA
HeapCreate
HeapDestroy
GetLocaleInfoW
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
SetConsoleCtrlHandler
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetDriveTypeW
CompareStringW
WriteConsoleW
GetCurrentDirectoryW
SetCurrentDirectoryW
CreateFileW
SetEnvironmentVariableA
SearchPathA
GetProfileIntA
GetTickCount
InitializeCriticalSectionAndSpinCount
GetTempFileNameA
GetFileTime
GetFileSizeEx
LocalFileTimeToFileTime
GetFileAttributesExA
GetNumberFormatA
GetWindowsDirectoryA
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetStringTypeExA
lstrcpyA
GetACP
GetOEMCP
GetCPInfo
GlobalFlags
GetThreadLocale
GetAtomNameA
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GetPrivateProfileIntA
CreateEventA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetModuleHandleW
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
CompareStringA
LoadLibraryW
ActivateActCtx
DeactivateActCtx
LocalUnlock
FileTimeToLocalFileTime
GlobalSize
FormatMessageA
lstrlenW
MulDiv
FindFirstFileA
FindNextFileA
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
GetFileInformationByHandle
GetSystemTime
FileTimeToDosDateTime
FileTimeToSystemTime
SetFileTime
GetCurrentDirectoryA
DosDateTimeToFileTime
SystemTimeToFileTime
ReadFile
DuplicateHandle
GetFileType
SetFilePointer
SetUnhandledExceptionFilter
InitializeCriticalSection
SetErrorMode
GetCurrentThreadId
EnterCriticalSection
GetCurrentProcessId
LeaveCriticalSection
GetLocalTime
GetCurrentThread
DeleteCriticalSection
DeviceIoControl
CreateThread
TerminateThread
WritePrivateProfileStringA
GetModuleFileNameW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
WriteFile
RemoveDirectoryW
FindFirstFileW
CreateDirectoryW
CopyFileW
FindNextFileW
FindClose
GetFileAttributesW
SetFileAttributesW
DeleteFileW
CreateProcessW
CreateProcessA
Process32FirstW
Process32NextW
GetLogicalDriveStringsA
LoadLibraryA
ProcessIdToSessionId
SetLastError
GetDiskFreeSpaceA
GetModuleHandleA
GetProcAddress
VerSetConditionMask
VerifyVersionInfoA
GetProcessHeap
HeapAlloc
HeapFree
MultiByteToWideChar
WinExec
OpenProcess
TerminateProcess
GetPrivateProfileStringA
CreateDirectoryA
RemoveDirectoryA
GetModuleFileNameA
CreateFileA
GetFileSize
WaitForSingleObject
GetExitCodeProcess
LocalFree
LocalAlloc
lstrlenA
GetCurrentProcess
FindResourceA
FreeResource
GetFileAttributesA
SetFileAttributesA
GetCommandLineW
GetDriveTypeA
MoveFileA
CreateMutexA
GetLastError
GetTempPathA
DeleteFileA
CopyFileA
GetSystemDefaultLangID
Sleep
CreateToolhelp32Snapshot
Process32First
lstrcmpiA
Process32Next
WideCharToMultiByte
CloseHandle
FreeLibrary
FindResourceW
LoadResource
LockResource
SizeofResource
FindResourceExW
ReplaceFileA
lstrcmpW
GetUserDefaultLCID
ExitProcess

user32

MonitorFromPoint
UpdateLayeredWindow
UnionRect
MapVirtualKeyExA
IsCharLowerA
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
UnpackDDElParam
ReuseDDElParam
LoadMenuA
GetMenuBarInfo
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
LockWindowUpdate
BringWindowToTop
SetCursorPos
SetRect
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
DrawFrameControl
DrawEdge
DrawStateA
GetSystemMenu
LoadMenuW
SetClassLongA
DestroyAcceleratorTable
SetParent
IsZoomed
DrawIconEx
GetNextDlgGroupItem
LoadImageA
CopyImage
GetIconInfo
OffsetRect
MessageBeep
NotifyWinEvent
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
GetAsyncKeyState
IsRectEmpty
CreatePopupMenu
GetMenuDefaultItem
RedrawWindow
UnregisterClassA
GetDialogBaseUnits
CharUpperA
DestroyIcon
WaitMessage
ReleaseCapture
SetCapture
LoadCursorW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
KillTimer
SetTimer
DeleteMenu
RealChildWindowFromPoint
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
LoadCursorA
GetSysColorBrush
MapVirtualKeyA
GetKeyNameTextA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
ShowOwnedPopups
SetCursor
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
PostQuitMessage
GetCursorPos
WindowFromPoint
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
EnableMenuItem
CheckMenuItem
IsMenu
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
IntersectRect
InflateRect
GetWindowThreadProcessId
IsWindowEnabled
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
FillRect
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
PostThreadMessageA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
GetUpdateRect
InSendMessage
CreateMenu
SetMenuDefaultItem
IsClipboardFormatAvailable
SendNotifyMessageA
FrameRect
GetTabbedTextExtentA
GetTabbedTextExtentW
GetDCEx
GetWindowRgn
WindowFromDC
DestroyCursor
MapDialogRect
SubtractRect
GetWindowLongA
SetWindowLongA
SetWindowPos
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
GetDoubleClickTime
CharUpperBuffA
CopyIcon
RegisterClipboardFormatA
ScrollWindowEx
PostMessageA
SwitchToThisWindow
ShowWindow
IsWindow
GetPropW
GetWindowTextA
GetWindow
GetDesktopWindow
MessageBoxExA
SendMessageTimeoutA
GetClassNameA
EnumChildWindows
EnumDesktopWindows
SetUserObjectSecurity
GetUserObjectSecurity
GetWindowRect
UpdateWindow
InvalidateRect
SendMessageA
EqualRect
GetClientRect
GetParent
EnableWindow
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
PtInRect
DrawIcon
IsIconic
SetWindowRgn
LoadIconW
GetSystemMetrics
MessageBoxA
CreateAcceleratorTableA

gdi32

GetCharWidthA
CreateFontA
StretchDIBits
GetBkColor
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
GetCurrentObject
CreateDIBSection
CreatePolygonRgn
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
GetDIBits
StretchBlt
SetPixel
Rectangle
OffsetRgn
GetRgnBox
EnumFontFamiliesExA
RoundRect
LPtoDP
GetWindowOrgEx
GetTextCharsetInfo
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetTextExtentPointA
GetTextExtentPoint32W
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
GetTextMetricsA
EnumFontFamiliesA
CreateDIBitmap
GetTextExtentPoint32A
DPtoLP
PatBlt
GetMapMode
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
CreateBitmap
CreatePatternBrush
CreateDIBPatternBrushPt
DeleteDC
ExtSelectClipRgn
PolyBezierTo
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
CreateDCA
CopyMetaFileA
GetDeviceCaps
CreateRoundRectRgn
GetStockObject
Escape
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ExtTextOutA
TextOutA
RectVisible
PtVisible
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
GetViewportOrgEx
CreateFontIndirectA
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
StartDocA
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
DeleteObject
SetColorAdjustment
SetArcDirection
SetLayout
GetLayout
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
ScaleWindowExtEx

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

GetJobA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

LookupPrivilegeValueA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
GetTokenInformation
OpenProcessToken
CheckTokenMembership
CreateWellKnownSid
SetSecurityDescriptorDacl
CopySid
GetFileSecurityA
SetFileSecurityA
RegEnumKeyExA
RegOpenKeyExW
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegSetValueA
GetUserNameA
OpenThreadToken
RegEnumValueA
DuplicateTokenEx
SetTokenInformation
AdjustTokenPrivileges
CreateProcessAsUserA
ConvertStringSecurityDescriptorToSecurityDescriptorA
AddAccessAllowedAce
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
GetAce
AddAce

shell32

ShellExecuteA
ShellExecuteExA
SHGetFolderPathA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHAppBarMessage
SHBrowseForFolderA
SHGetMalloc
DragQueryFileA
DragFinish
SHGetDesktopFolder
SHGetFileInfoA
ExtractIconA
SHAddToRecentDocs
CommandLineToArgvW

comctl32

_TrackMouseEvent
ImageList_GetIconSize
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Create
ImageList_GetImageCount
ImageList_Destroy
ImageList_AddMasked
ImageList_Remove
ImageList_DrawEx

ole32

CoUninitialize
CLSIDFromString
CoDisconnectObject
StringFromGUID2
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CreateBindCtx
CoTreatAsClass
GetRunningObjectTable
ReadClassStg
CoInitializeEx
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
OleIsRunning
OleQueryLinkFromData
OleQueryCreateFromData
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
OleRun
OleRegGetMiscStatus
OleRegEnumVerbs
StgCreateDocfile
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CreateFileMoniker
StgOpenStorage
StgIsStorageFile
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleSetMenuDescriptor
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
PropVariantCopy
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateDataAdviseHolder
CreateOleAdviseHolder
ReadFmtUserTypeStg
CoGetMalloc
CreateGenericComposite
CreateItemMoniker
OleGetIconOfClass
OleCreateLinkToFile
OleCreateFromFile
OleSetContainedObject
GetHGlobalFromILockBytes
OleLoad
OleCreate
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleSaveToStream
SetConvertStg
CoTaskMemFree
WriteClassStm
OleSave
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
StringFromCLSID
StgCreateDocfileOnILockBytes

oleaut32

SysAllocStringByteLen
SysStringByteLen
VariantChangeType
VariantInit
SysStringLen
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SysAllocString
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysReAllocStringLen
VarDateFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromDate
SysAllocStringLen
VariantClear
SysFreeString
SetErrorInfo
GetErrorInfo
CreateErrorInfo

oledlg

ord8

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDrawImageRectRect
GdipCreateFromHDC
GdipSetImageAttributesColorMatrix
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipAlloc
GdipFree
GdipDrawImageI

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 491KB - Virtual size: 490KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 195KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8b2fac382ecaa65d478c89bd826238a1

Code Sign

04:6e:e0:3b:12:93:2bCertificate

Extended Key Usages

Key Usages

73:c2:51:3b:21:3a:54:65:01:62:3c:e0:ca:0f:21:db:f9:d4:24:bcSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

setupapi

shlwapi

wininet

urlmon

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

oledlg

gdiplus

userenv

version

oleacc

imm32

winmm

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 491KB - Virtual size: 490KB

.data Size: 32KB - Virtual size: 63KB

.rsrc Size: 195KB - Virtual size: 194KB

.reloc Size: 172KB - Virtual size: 171KB

04:6e:e0:3b:12:93:2b
Certificate

73:c2:51:3b:21:3a:54:65:01:62:3c:e0:ca:0f:21:db:f9:d4:24:bc
Signer

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 491KB - Virtual size: 490KB

.data
Size: 32KB - Virtual size: 63KB

.rsrc
Size: 195KB - Virtual size: 194KB

.reloc
Size: 172KB - Virtual size: 171KB