2024-02-12_80f23fb037842d400cdf71dd13162ba3_magniber_revil

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-12_80f23fb037842d400cdf71dd13162ba3_magniber_revil
Size

30.4MB
MD5

80f23fb037842d400cdf71dd13162ba3
SHA1

3ba225a6ee23f1c30c298764992a8257934aa121
SHA256

bed3a8d2778c22ff932dde4fa0a236907ef4af8449f68e9b21ab40ccf33e1f85
SHA512

12f3e96a69cdfa46b9be6681af8a17d2d662b7c82bcf3c89776e66abdcc79ee8dc79f6ff100e5ebac018f8f358484cab564f5b5ce252c2198693682cc70b5c0c
SSDEEP

786432:jUUCPC/o/JQzNhISFn5PYLfwQmA4IxWYRMl:lCqQ/JwhISIfVLrRK

Score

1^/10

Malware Config

Signatures

Files

2024-02-12_80f23fb037842d400cdf71dd13162ba3_magniber_revil
.exe windows:6 windows x86 arch:x86

9863b7c23060d6b0011c467978bda783

Code Sign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:de:fb:a9:6f:2d:2c:c5:fc:63:71:38:35:45:00:7f
Certificate

Issuer

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

30/11/2020, 00:00

Not After

07/12/2021, 23:59

Subject

SERIALNUMBER=91440300MA5G7LR830,CN=青葱教育科技（深圳）有限责任公司,O=青葱教育科技（深圳）有限责任公司,L=深圳市,ST=广东省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e6b7b1e59cb3e5b882,1.3.6.1.4.1.311.60.2.1.2=#0c09e5b9bfe4b89ce79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:20:4d:b4:00:00:00:00:00:27
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/04/2011, 19:45

Not After

15/04/2021, 19:55

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:3d:f8:9d:cc:a9:36:2a:27:af:47:d0:e4:ae:10:d9
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

30/11/2020, 00:00

Not After

07/12/2021, 23:59

Subject

SERIALNUMBER=91440300MA5G7LR830,CN=青葱教育科技（深圳）有限责任公司,O=青葱教育科技（深圳）有限责任公司,L=深圳市,ST=广东省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c09e6b7b1e59cb3e5b882,1.3.6.1.4.1.311.60.2.1.2=#0c09e5b9bfe4b89ce79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d6:93:d2:2c:9a:24:69:77:be:6d:80:90:4c:6d:33:81:5f:0c:ce:d0:e6:1c:d6:e0:69:d0:4d:bd:2a:d5:31:ae
Signer

Actual PE Digest

d6:93:d2:2c:9a:24:69:77:be:6d:80:90:4c:6d:33:81:5f:0c:ce:d0:e6:1c:d6:e0:69:d0:4d:bd:2a:d5:31:ae

Digest Algorithm

sha256

PE Digest Matches

true

a5:52:92:14:08:b3:a2:cb:07:0a:ea:6d:cc:f5:ec:ce:3c:c9:16:79
Signer

Actual PE Digest

a5:52:92:14:08:b3:a2:cb:07:0a:ea:6d:cc:f5:ec:ce:3c:c9:16:79

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\work\source\work_source\gelei-pc7.0\trunk\src\Release\Installer.pdb

Imports

ws2_32

freeaddrinfo
getaddrinfo
WSAIoctl
shutdown
socket
gethostname
gethostbyname
inet_ntoa
WSACleanup
htons
inet_addr
WSAGetLastError
ntohl
WSAStartup

wininet

InternetGetConnectedState
InternetCrackUrlA

iphlpapi

GetAdaptersInfo

kernel32

QueryInformationJobObject
SetInformationJobObject
AssignProcessToJobObject
ResumeThread
WTSGetActiveConsoleSessionId
GetModuleHandleA
GetCurrentProcessId
ProcessIdToSessionId
WinExec
SystemTimeToFileTime
FileTimeToSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
GetCurrentDirectoryW
LocalFileTimeToFileTime
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
FindResourceW
LoadResource
FreeResource
SizeofResource
LockResource
QueryDosDeviceW
GetWindowsDirectoryW
OpenMutexW
CreateMutexW
SetNamedPipeHandleState
GetSystemDirectoryW
GetSystemDirectoryA
SuspendThread
SetCurrentDirectoryW
GetDiskFreeSpaceExW
HeapReAlloc
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSectionAndSpinCount
HeapDestroy
RaiseException
HeapSize
DecodePointer
MulDiv
GetFullPathNameW
HeapCreate
FlushInstructionCache
FreeLibrary
LoadLibraryW
GetStdHandle
GetFileType
QueryPerformanceCounter
GlobalMemoryStatus
FlushConsoleInputBuffer
VerSetConditionMask
SleepEx
VerifyVersionInfoA
FormatMessageA
PeekNamedPipe
ExpandEnvironmentStringsA
VirtualFreeEx
CreateRemoteThread
GetModuleHandleW
WriteProcessMemory
VirtualAllocEx
OpenProcess
Module32NextW
Module32FirstW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetCurrentProcess
GetTickCount
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
WritePrivateProfileSectionW
GetSystemTime
SetEndOfFile
WaitForMultipleObjectsEx
SetEnvironmentVariableA
WriteConsoleW
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
SetProcessAffinityMask
VirtualProtect
VirtualFree
VirtualAlloc
FreeLibraryAndExitThread
GetThreadTimes
GetDriveTypeW
FindFirstFileExW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
ReadConsoleW
FlushFileBuffers
GetConsoleCP
GetOEMCP
GetACP
IsValidCodePage
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
CreateSemaphoreW
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateJobObjectA
GetLogicalProcessorInformation
TlsFree
GetThreadPriority
SwitchToThread
SignalObjectAndWait
WaitForSingleObjectEx
SetEvent
RtlCaptureStackBackTrace
CreateTimerQueue
TryEnterCriticalSection
GetCPInfo
FatalAppExitA
FileTimeToLocalFileTime
SetFilePointerEx
LoadLibraryExW
ExitThread
SetConsoleMode
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetConsoleMode
SetConsoleCtrlHandler
AreFileApisANSI
GetModuleHandleExW
ExitProcess
RtlUnwind
GetCommandLineW
IsProcessorFeaturePresent
OutputDebugStringW
IsDebuggerPresent
lstrlenW
lstrlenA
GetStringTypeW
GetExitCodeThread
GetCurrentThread
DuplicateHandle
EncodePointer
GetSystemTimeAsFileTime
CreateProcessW
TerminateProcess
GetVersionExA
WritePrivateProfileSectionA
WritePrivateProfileStringW
WritePrivateProfileStringA
GetPrivateProfileSectionW
GetPrivateProfileSectionA
GetPrivateProfileStringW
GetPrivateProfileStringA
GetPrivateProfileIntW
GetPrivateProfileIntA
SetFilePointer
SetFileTime
GetFileTime
GetLongPathNameW
GetLongPathNameA
GetShortPathNameW
GetShortPathNameA
GetFileInformationByHandle
GetFileSize
RemoveDirectoryW
RemoveDirectoryA
MoveFileExW
MoveFileW
SetFileAttributesW
DeleteFileW
MoveFileExA
MoveFileA
SetFileAttributesA
DeleteFileA
SetThreadPriority
CreateProcessA
FindNextFileW
GetFileAttributesExW
FindFirstFileW
FindNextFileA
FindClose
FindFirstFileA
CopyFileW
CopyFileA
CreateDirectoryW
CreateDirectoryA
GetModuleFileNameW
GetTempPathW
GetTempPathA
GetFileAttributesW
GetFileAttributesA
LocalAlloc
CreateFileW
GetProcAddress
LoadLibraryA
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetVersionExW
GetSystemInfo
DeviceIoControl
GetModuleFileNameA
SetLastError
ResetEvent
TlsAlloc
TlsSetValue
TlsGetValue
WaitNamedPipeA
CreateFileA
CallNamedPipeA
WriteFile
ReadFile
Sleep
TerminateThread
DisconnectNamedPipe
GetOverlappedResult
WaitForMultipleObjects
ConnectNamedPipe
CreateThread
CreateEventW
CreateNamedPipeA
GetLocalTime
CloseHandle
ReleaseMutex
WaitForSingleObject
GetLastError
CreateMutexA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetExitCodeProcess
CreateTimerQueueTimer
GetFullPathNameA

user32

CloseWindowStation
SetThreadDesktop
OpenDesktopA
SetProcessWindowStation
OpenWindowStationA
OffsetRect
UpdateWindow
ReleaseCapture
GetMenuItemInfoW
EnableWindow
IsWindowEnabled
SetActiveWindow
BeginPaint
GetProcessWindowStation
EndPaint
InvalidateRect
SetWindowTextW
GetCursorPos
CreateCaret
GetCaretBlinkTime
HideCaret
CloseDesktop
GetUserObjectInformationW
GetIconInfo
GetDC
ReleaseDC
ExitWindowsEx
wsprintfW
GetDesktopWindow
PostMessageW
FindWindowW
GetForegroundWindow
DrawIconEx
InvertRect
FillRect
GetWindowThreadProcessId
AttachThreadInput
ShowWindow
SetWindowPos
SetForegroundWindow
GetActiveWindow
SendMessageW
MapWindowPoints
GetClientRect
GetParent
GetWindowRect
GetMonitorInfoW
TrackPopupMenu
AppendMenuW
InsertMenuW
MonitorFromWindow
GetWindowLongW
GetWindow
DestroyWindow
UnregisterClassW
SetTimer
KillTimer
SetCursor
SetRect
CopyRect
InflateRect
IntersectRect
UnionRect
IsRectEmpty
EqualRect
PtInRect
IsWindow
LoadCursorW
DestroyCursor
LoadBitmapW
CreateIconFromResource
LoadImageW
TrackMouseEvent
PostQuitMessage
AnimateWindow
SetLayeredWindowAttributes
IsIconic
MessageBoxA
GetSystemMetrics
IsZoomed
SetFocus
GetCapture
SetCaretPos
ScreenToClient
SetWindowLongW
GetClassNameW
DestroyIcon
DefWindowProcW
CallWindowProcW
RegisterClassExW
CreateWindowExW
GetDlgItem
GetFocus
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
CharNextW
ClientToScreen
GetMenuItemCount
GetSubMenu
DestroyMenu
CreatePopupMenu
IsMenu
UpdateLayeredWindow
MapVirtualKeyA
CharLowerBuffW
SystemParametersInfoA
DrawTextW
IsWindowVisible
GetWindowPlacement
LoadIconW
MessageBoxW
GetSysColor
EnableMenuItem
GetKeyState
SetCapture

gdi32

RestoreDC
RoundRect
SaveDC
ExtSelectClipRgn
SetRectRgn
GetObjectA
SetViewportOrgEx
StretchBlt
GetDCOrgEx
SetBkMode
Rectangle
GetClipBox
CreateSolidBrush
CreateFontIndirectW
SetGraphicsMode
GetDeviceCaps
SelectObject
DeleteDC
CreateCompatibleDC
CreateBitmap
EnumFontsW
BitBlt
CreateRoundRectRgn
GetDIBits
RealizePalette
SelectPalette
GetPaletteEntries
GetStockObject
GetObjectW
DeleteObject
SetTextColor
GetWorldTransform
SetWorldTransform
CreateDIBSection
Polyline
GetCurrentObject
GetViewportOrgEx
RectInRegion
Arc
CombineRgn
CreateEllipticRgnIndirect
CreatePen
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect
Ellipse
ExcludeClipRect
GetClipRgn
GetRgnBox
GetTextColor
GetTextExtentPoint32W
IntersectClipRect
OffsetRgn
Pie
PtInRegion
CreateCompatibleBitmap

advapi32

LookupAccountSidW
ReportEventA
RegisterEventSourceA
DeregisterEventSource
StartServiceW
CreateServiceW
OpenServiceW
GetUserNameA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyW
GetTokenInformation
ImpersonateLoggedOnUser
CreateProcessAsUserW
SetSecurityDescriptorSacl
GetSecurityDescriptorDacl
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorA
ControlService
DeleteService
StartServiceA
QueryServiceStatus
OpenSCManagerW
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW
RegEnumValueW
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextA
CreateServiceA
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
SetServiceStatus
UnlockServiceDatabase
CloseServiceHandle
ChangeServiceConfig2A
OpenServiceA
LockServiceDatabase
OpenSCManagerA
RegCreateKeyA
RegEnumValueA
RegDeleteKeyW
RegEnumKeyExW
RegDeleteKeyA
RegEnumKeyExA
RegDeleteValueW
RegDeleteValueA
RegOpenKeyA
RegSetValueExW
RegCreateKeyExW
RegFlushKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExW
RegOpenKeyExW

shell32

ShellExecuteW
ShellExecuteA
ShellExecuteExA
SHGetSpecialFolderPathW
SHGetSpecialFolderPathA
ExtractIconExW
SHGetFileInfoA
ExtractIconExA
SHGetFileInfoW

ole32

CoSetProxyBlanket
CoCreateGuid
OleInitialize
OleUninitialize
OleLockRunning
CLSIDFromProgID
CreateBindCtx
CreateStreamOnHGlobal
IIDFromString
CoInitializeSecurity
CoInitializeEx
CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromString

oleaut32

SetErrorInfo
SysFreeString
SysAllocString
SysAllocStringLen
SysStringLen
SysStringByteLen
SysAllocStringByteLen
GetErrorInfo
VariantInit
VariantChangeType
VariantClear
CreateErrorInfo

shlwapi

PathCombineA
SHGetValueA
SHSetValueA
StrToIntExW
StrStrIA
PathFileExistsW
PathIsDirectoryW
PathCombineW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeW

wsock32

closesocket
__WSAFDIsSet
select
WSASetLastError
recv
send
bind
recvfrom
connect
getpeername
getsockname
getsockopt
ntohs
setsockopt
sendto
accept
listen
inet_ntoa

wtsapi32

WTSEnumerateSessionsW
WTSQueryUserToken
WTSFreeMemory
WTSEnumerateSessionsA
WTSQuerySessionInformationA
WTSQuerySessionInformationW

imm32

ImmGetContext
ImmReleaseContext

gdiplus

GdipAlloc
GdipCreateBitmapFromFile
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipSaveImageToFile
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipGraphicsClear
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromScan0

msimg32

AlphaBlend
GradientFill

wldap32

ord41
ord50
ord22
ord211
ord46
ord143
ord26
ord27
ord32
ord33
ord35
ord79
ord30
ord200
ord301
ord60

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 714KB - Virtual size: 713KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26.6MB - Virtual size: 26.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9863b7c23060d6b0011c467978bda783

Code Sign

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

0b:de:fb:a9:6f:2d:2c:c5:fc:63:71:38:35:45:00:7fCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

61:20:4d:b4:00:00:00:00:00:27Certificate

Key Usages

01:3d:f8:9d:cc:a9:36:2a:27:af:47:d0:e4:ae:10:d9Certificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

d6:93:d2:2c:9a:24:69:77:be:6d:80:90:4c:6d:33:81:5f:0c:ce:d0:e6:1c:d6:e0:69:d0:4d:bd:2a:d5:31:aeSigner

a5:52:92:14:08:b3:a2:cb:07:0a:ea:6d:cc:f5:ec:ce:3c:c9:16:79Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

wininet

iphlpapi

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

version

wsock32

wtsapi32

imm32

gdiplus

msimg32

wldap32

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 714KB - Virtual size: 713KB

.data Size: 95KB - Virtual size: 195KB

.rsrc Size: 26.6MB - Virtual size: 26.6MB

.reloc Size: 164KB - Virtual size: 163KB

61:20:4d:b4:00:00:00:00:00:27
Certificate

0b:de:fb:a9:6f:2d:2c:c5:fc:63:71:38:35:45:00:7f
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

0d:d0:e3:37:4a:c9:5b:db:fa:6b:43:4b:2a:48:ec:06
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

61:20:4d:b4:00:00:00:00:00:27
Certificate

01:3d:f8:9d:cc:a9:36:2a:27:af:47:d0:e4:ae:10:d9
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

d6:93:d2:2c:9a:24:69:77:be:6d:80:90:4c:6d:33:81:5f:0c:ce:d0:e6:1c:d6:e0:69:d0:4d:bd:2a:d5:31:ae
Signer

a5:52:92:14:08:b3:a2:cb:07:0a:ea:6d:cc:f5:ec:ce:3c:c9:16:79
Signer

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 714KB - Virtual size: 713KB

.data
Size: 95KB - Virtual size: 195KB

.rsrc
Size: 26.6MB - Virtual size: 26.6MB

.reloc
Size: 164KB - Virtual size: 163KB