3c9fbeff6afff4248b2100c92f24da331fed5e889b097b15095707fb660767c1

Sharing

Copy URL Twitter E-mail

General

Target

3c9fbeff6afff4248b2100c92f24da331fed5e889b097b15095707fb660767c1
Size

9.7MB
MD5

c41098f78a696a50c28292e3d9b852f7
SHA1

698224d4f3e4b8f5d531e793ea421192629c3146
SHA256

3c9fbeff6afff4248b2100c92f24da331fed5e889b097b15095707fb660767c1
SHA512

78f59e8005d103e928945e3084e5da66eb38cee45040b7ce750f7c4b08b47febd03320ea38325cd03147a23aec33acd0daec476b13753c9772641ed95d59f75f
SSDEEP

196608:5CT3jCXQ+6gEq6qBKnHw1OIaZEF+D/yYvoLgbA1k31HGvUOyF:43CXqg2Q1O5ZfILgbA1u1HGvUnF

Score

1^/10

Malware Config

Signatures

Files

3c9fbeff6afff4248b2100c92f24da331fed5e889b097b15095707fb660767c1
.exe windows:5 windows x86 arch:x86

1dea672b4f96b47b4ee3ea00ded57af4

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:01:be:78:37:0d:4e:c7:ad:b4:a6:01:a4:f0:f7:e4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

10/11/2022, 00:00

Not After

09/11/2023, 23:59

Subject

CN=Beijing Xiaoshu Germination Network Technology Co.\, Ltd,O=Beijing Xiaoshu Germination Network Technology Co.\, Ltd,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:01:be:78:37:0d:4e:c7:ad:b4:a6:01:a4:f0:f7:e4
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

10/11/2022, 00:00

Not After

09/11/2023, 23:59

Subject

CN=Beijing Xiaoshu Germination Network Technology Co.\, Ltd,O=Beijing Xiaoshu Germination Network Technology Co.\, Ltd,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

75:ba:01:fb:30:56:3f:c4:b4:ac:c0:dd:b5:d0:aa:42:92:3a:32:fa:d1:5c:47:36:6a:c3:12:63:b0:1b:97:71
Signer

Actual PE Digest

75:ba:01:fb:30:56:3f:c4:b4:ac:c0:dd:b5:d0:aa:42:92:3a:32:fa:d1:5c:47:36:6a:c3:12:63:b0:1b:97:71

Digest Algorithm

sha256

PE Digest Matches

false

04:91:ac:a6:cb:9d:34:05:a9:6d:ed:b8:59:3a:94:a8:fc:e0:14:7d
Signer

Actual PE Digest

04:91:ac:a6:cb:9d:34:05:a9:6d:ed:b8:59:3a:94:a8:fc:e0:14:7d

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\hudson\jobs\PopBlock_1.0.5.230317\workspace\PopBlock\Software\PopBlock\Bin\Release\PopBlock.pdb

Imports

kernel32

SleepEx
GetSystemDirectoryW
CompareFileTime
GetEnvironmentVariableA
WaitForMultipleObjects
PeekNamedPipe
CreateEventA
CreateSemaphoreA
ReadConsoleA
SetConsoleMode
SwitchToFiber
DeleteFiber
CreateFiber
GlobalMemoryStatus
ConvertFiberToThread
ConvertThreadToFiber
GetSystemTime
GetEnvironmentVariableW
GetVersionExW
GetFullPathNameW
Sleep
ReleaseMutex
GlobalDeleteAtom
GlobalAddAtomW
GetCommandLineW
LocalFree
LocalAlloc
DecodePointer
InterlockedIncrement
InterlockedDecrement
LoadLibraryExW
CreateMutexW
SetUnhandledExceptionFilter
FreeResource
ExitProcess
GetCurrentProcess
GetModuleFileNameA
CreateThread
GetNativeSystemInfo
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExpandEnvironmentStringsW
GetModuleHandleW
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
MultiByteToWideChar
GetCurrentProcessId
SetLastError
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
DeleteCriticalSection
RaiseException
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
VirtualProtect
GetModuleHandleA
ResetEvent
TerminateThread
GetExitCodeThread
WaitForSingleObject
SetEvent
CreateEventW
GetModuleFileNameW
WideCharToMultiByte
ReadFile
GetFileSize
CreateFileW
GetWindowsDirectoryW
FreeLibrary
CloseHandle
GetProcAddress
UnregisterWaitEx
QueryDepthSList
ReleaseSemaphore
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
LoadLibraryW
OpenProcess
lstrlenW
QueryDosDeviceW
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SignalObjectAndWait
CreateTimerQueue
FlushFileBuffers
WriteConsoleW
SetEndOfFile
GetFileAttributesExW
ReadConsoleW
SetStdHandle
SetConsoleCtrlHandler
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
lstrcmpiW
GetLogicalDriveStringsW
IsValidCodePage
FindFirstFileExW
SwitchToThread
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
WaitForSingleObjectEx
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
EncodePointer
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
VirtualAlloc
VirtualFree
LoadLibraryExA
TryEnterCriticalSection
FormatMessageW
GetStringTypeW
DuplicateHandle
GetCurrentThread
QueryPerformanceFrequency
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
GetACP
GlobalLock
GlobalUnlock
GetCurrentDirectoryW
GlobalAlloc
WriteFile
SetFilePointer
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
CreateDirectoryW
GetFileAttributesW
MulDiv
VerSetConditionMask
VerifyVersionInfoW
GetLocalTime
lstrcpynW
lstrcpyW
GlobalFree
CreateProcessW
GetDriveTypeW
GetTempPathW
VirtualQuery
MoveFileW
InitializeCriticalSection
CreateFileA
MoveFileExW
DeviceIoControl
GetSystemDirectoryA
RtlUnwind
InterlockedFlushSList
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetTimeZoneInformation
GetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW

user32

SetCapture
ReleaseCapture
GetUpdateRect
GetSysColor
CharPrevW
DrawTextW
FillRect
wsprintfW
UpdateWindow
PrivateExtractIconsW
DrawIconEx
UpdateLayeredWindow
GetWindowRgn
CreatePopupMenu
DestroyMenu
EnableMenuItem
AppendMenuW
TrackPopupMenu
CreateCaret
GetCaretBlinkTime
HideCaret
ShowCaret
SetCaretPos
GetCaretPos
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
IsWindowEnabled
wsprintfA
DrawTextA
CreateAcceleratorTableW
InvalidateRgn
GetGUIThreadInfo
GetKeyboardLayout
GetKeyNameTextW
MapVirtualKeyExW
RegisterClassW
SetPropW
GetPropW
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
GetKeyState
GetFocus
GetActiveWindow
GetMessageW
SetFocus
IsWindowVisible
GetWindowRect
GetWindowThreadProcessId
PostMessageW
TranslateMessage
DispatchMessageW
InflateRect
GetParent
PostQuitMessage
ReleaseDC
GetDC
PrintWindow
EndPaint
BeginPaint
SystemParametersInfoW
GetAsyncKeyState
EnumWindows
UnregisterHotKey
RegisterHotKey
DestroyIcon
LoadImageW
UnregisterClassW
KillTimer
InvalidateRect
BringWindowToTop
RegisterWindowMessageW
SendMessageW
SetForegroundWindow
FindWindowW
GetDesktopWindow
GetClassNameW
PtInRect
EqualRect
IsRectEmpty
MoveWindow
DestroyWindow
ClientToScreen
SetTimer
SetWindowRgn
IsIconic
ScreenToClient
OffsetRect
CopyRect
IsZoomed
CallWindowProcW
SetWindowLongW
DefWindowProcW
IsChild
SetCursor
LoadCursorW
MessageBoxA
IntersectRect
CharNextW
GetSystemMetrics
RegisterClassExW
ShowWindow
GetWindow
GetWindowLongW
GetClientRect
MapWindowPoints
SetWindowPos
GetClassInfoExW
CreateWindowExW
UnionRect
SetRectEmpty
MonitorFromWindow
MonitorFromPoint
MonitorFromRect
EnumDisplayMonitors
EnumDisplaySettingsW
PeekMessageW
IsWindow
EnableWindow
SetRect
GetMonitorInfoW
GetCursorPos

gdi32

TextOutW
GdiFlush
CreateRectRgn
PtInRegion
CreatePatternBrush
GetTextExtentPointA
GetBitmapBits
MoveToEx
GetObjectA
SetTextColor
GetTextExtentPoint32W
GetClipBox
SetStretchBltMode
CreateSolidBrush
CreateDIBSection
CreatePenIndirect
CombineRgn
SetWindowOrgEx
SetBkColor
PlayEnhMetaFile
GetEnhMetaFileHeader
CreateEnhMetaFileW
CloseEnhMetaFile
SaveDC
RestoreDC
Rectangle
SetBitmapBits
RemoveFontMemResourceEx
CreateCompatibleBitmap
StretchBlt
SetBkMode
GetObjectW
ExtSelectClipRgn
SelectClipRgn
LineTo
DeleteDC
DeleteObject
CreateCompatibleDC
BitBlt
SelectObject
GetCharABCWidthsW
CreateRoundRectRgn
AddFontMemResourceEx
GetStockObject
GetDeviceCaps
CreatePen
CreateFontIndirectW
CreateDIBitmap
CreateRectRgnIndirect
GetTextMetricsW

advapi32

ImpersonateLoggedOnUser
GetUserNameW
RevertToSelf
DuplicateTokenEx
LookupAccountSidW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetTokenInformation
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashW
CryptEnumProvidersW
CryptGenRandom
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegDeleteKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW

shell32

DragQueryFileW
ShellExecuteW
SHGetSpecialFolderPathW
Shell_NotifyIconW
SHGetFileInfoW
ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW

ole32

CoTaskMemFree
CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoTaskMemRealloc
DoDragDrop
OleDuplicateData
CreateStreamOnHGlobal
ReleaseStgMedium
CLSIDFromString
CoTaskMemAlloc
CoCreateInstance
CLSIDFromProgID
OleLockRunning

oleaut32

SysAllocString
VariantClear
VariantInit
VarUI4FromStr
SysFreeString

shlwapi

PathCombineW
PathIsDirectoryW
PathFindFileNameW
PathRemoveFileSpecW
PathIsSameRootW
SHDeleteKeyW
PathFileExistsW

comctl32

ord17
InitCommonControlsEx
_TrackMouseEvent

crypt32

CertEnumCertificatesInStore
CertFreeCertificateContext
CertGetEnhancedKeyUsage
CertGetIntendedKeyUsage
CertOpenSystemStoreW
CertGetNameStringA
CertGetNameStringW
CertFindCertificateInStore
CryptMsgGetParam
CryptQueryObject
CertCloseStore
CertDuplicateCertificateContext
CertOpenStore
CertGetCertificateContextProperty

gdiplus

GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipMeasureString
GdipDrawString
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipFillPath
GdipFillRectangleI
GdipDrawPath
GdipGetPropertyItemSize
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipSetPenMode
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
ord1
GdipAddPathLine
GdipDeletePath
GdipCreatePath
GdiplusShutdown
GdiplusStartup
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipImageSelectActiveFrame
GdipDrawRectangleI
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCloneBitmapAreaI
GdipSaveImageToFile
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipDisposeImage
GdipCloneImage
GdipGetPropertyItem
GdipAlloc
GdipFree
GdipCreateBitmapFromScan0

imm32

ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow

msi

ord70

dbghelp

MiniDumpWriteDump

psapi

EnumProcesses
GetProcessImageFileNameW

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

urlmon

ObtainUserAgentString
URLDownloadToFileW

ws2_32

WSAIoctl
WSASetLastError
accept
setsockopt
ntohs
htons
getsockopt
htonl
getpeername
connect
bind
WSAGetLastError
send
recv
closesocket
listen
ioctlsocket
__WSAFDIsSet
select
getaddrinfo
freeaddrinfo
WSACloseEvent
WSACreateEvent
WSAStartup
WSAEnumNetworkEvents
WSACleanup
gethostname
gethostbyname
WSAEventSelect
recvfrom
sendto
shutdown
getsockname
getnameinfo
socket

wldap32

ord46
ord219
ord145
ord41
ord117
ord26
ord301
ord208
ord147
ord133
ord79
ord142
ord167
ord127
ord27
ord14
ord216

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 642KB - Virtual size: 641KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.2MB - Virtual size: 6.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1dea672b4f96b47b4ee3ea00ded57af4

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

02:01:be:78:37:0d:4e:c7:ad:b4:a6:01:a4:f0:f7:e4Certificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

02:01:be:78:37:0d:4e:c7:ad:b4:a6:01:a4:f0:f7:e4Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

75:ba:01:fb:30:56:3f:c4:b4:ac:c0:dd:b5:d0:aa:42:92:3a:32:fa:d1:5c:47:36:6a:c3:12:63:b0:1b:97:71Signer

04:91:ac:a6:cb:9d:34:05:a9:6d:ed:b8:59:3a:94:a8:fc:e0:14:7dSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

crypt32

gdiplus

imm32

msi

dbghelp

psapi

version

urlmon

ws2_32

wldap32

Sections

.text Size: 2.7MB - Virtual size: 2.7MB

.rdata Size: 642KB - Virtual size: 641KB

.data Size: 59KB - Virtual size: 95KB

.rsrc Size: 6.2MB - Virtual size: 6.2MB

.reloc Size: 136KB - Virtual size: 136KB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

02:01:be:78:37:0d:4e:c7:ad:b4:a6:01:a4:f0:f7:e4
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

02:01:be:78:37:0d:4e:c7:ad:b4:a6:01:a4:f0:f7:e4
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

75:ba:01:fb:30:56:3f:c4:b4:ac:c0:dd:b5:d0:aa:42:92:3a:32:fa:d1:5c:47:36:6a:c3:12:63:b0:1b:97:71
Signer

04:91:ac:a6:cb:9d:34:05:a9:6d:ed:b8:59:3a:94:a8:fc:e0:14:7d
Signer

.text
Size: 2.7MB - Virtual size: 2.7MB

.rdata
Size: 642KB - Virtual size: 641KB

.data
Size: 59KB - Virtual size: 95KB

.rsrc
Size: 6.2MB - Virtual size: 6.2MB

.reloc
Size: 136KB - Virtual size: 136KB