HappyWars[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

HappyWars.exe
Size

19.6MB
MD5

3c1c1c099f8d8898aef3364dc47c8463
SHA1

2b6289c9135c120166356034227cf8889a932748
SHA256

41a7ca8510e26de2d394f37e70b3459e5c055d6a6b9289d24f7887b8ee9b8c29
SHA512

c061a025b910a46567241cb1a93ee5e191e21dd8fbbcdeb26d932428a109301b1eb89fb526c87d79febd161b3e0f515be3f0e9c1c828830050fd9b527705f9ca
SSDEEP

393216:0iLeXu/cxX4kGvvMn6midkr56zbqosGgr/KZXs4mRWgjpr75gNM8J7BOKo+V4MzZ:5Mn6m3xV0Vq2sT5c

Score

1^/10

Malware Config

Signatures

Files

HappyWars.exe
.exe windows:5 windows x86 arch:x86

c22638ce6e49c200036ec45c08a43cfd

Code Sign

33:00:00:00:5b:43:3c:72:41:c5:6c:c0:ee:00:00:00:00:00:5b
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

23/05/2014, 17:13

Not After

23/08/2015, 17:13

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:31C5-30BA-7C91,O=Microsoft Corporation,L=Redmond,ST=WA,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

22/04/2014, 17:39

Not After

22/07/2015, 17:39

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

7e:88:d6:1c:24:f5:43:09:e7:62:38:31:be:ff:cd:df:df:c2:d6:8a
Signer

Actual PE Digest

7e:88:d6:1c:24:f5:43:09:e7:62:38:31:be:ff:cd:df:df:c2:d6:8a

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

W:\Gemini\Program\Gemini\win32\vs2010\Gemini\Win32\ShippingSteamOnline\HappyWars.pdb

Imports

launcherdll

_HW_LoadStringToMemory@8
_HW_UnloadStringFromMemory@4
_HW_SteamAPI_GetSteamAuthTicket@8
_HW_SteamAPI_GetSteamIDConvertToUint64@0
_HW_LoadString@12
_HW_IsStaging@0
_HW_SteamAPI_CatUserFilePath@12
_HW_GetSystemInformation@8
_HW_RightDWORD@8
_HW_RightBinary@16
_HW_Decode@20
_HW_RightAddress@8

steam_api

SteamNetworking
SteamMatchmaking
SteamAPI_UnregisterCallResult
SteamAPI_RegisterCallResult
SteamFriends
SteamApps
SteamRemoteStorage
SteamAPI_Shutdown
SteamAPI_Init
SteamUtils
SteamUser
SteamAPI_RunCallbacks
SteamAPI_RegisterCallback
SteamUserStats
SteamAPI_UnregisterCallback

ws2_32

htons
inet_ntoa
closesocket
WSAGetLastError
gethostbyname
gethostname
WSACleanup
WSAStartup
socket
setsockopt
bind
htonl
getsockopt
ioctlsocket
listen

winmm

timeGetTime

d3d9

Direct3DCreate9

d3dx9_43

D3DXGetImageInfoFromFileInMemory
D3DXCreateCubeTextureFromFileInMemoryEx
D3DXMatrixTranspose
D3DXLoadSurfaceFromMemory
D3DXCompileShader
D3DXCreateTextureFromFileInMemoryEx
D3DXLoadSurfaceFromFileInMemory
D3DXLoadSurfaceFromSurface

xinput1_3

ord2
ord5
ord3

x3daudio1_7

X3DAudioInitialize
X3DAudioCalculate

kernel32

GetTimeZoneInformation
SetErrorMode
FreeLibrary
SetEndOfFile
SetStdHandle
WriteConsoleW
LoadLibraryW
GetFullPathNameW
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetCurrentDirectoryW
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameA
FlushFileBuffers
GetFileType
SetHandleCount
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
IsBadWritePtr
IsProcessorFeaturePresent
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
SetLastError
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetLocaleInfoW
GetModuleFileNameW
GetStdHandle
CompareStringW
LCMapStringW
FindFirstFileExW
GetDriveTypeW
GetStartupInfoW
HeapSetInformation
FindFirstFileExA
GetDriveTypeA
FindClose
GetCPInfo
MoveFileA
DeleteFileA
HeapReAlloc
CreateThread
ExitThread
RaiseException
RtlUnwind
DecodePointer
EncodePointer
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
GetACP
CreateEventA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
WaitForSingleObject
SetEvent
ResetEvent
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
GetVersionExA
GetLastError
CreateMutexA
LocalFree
GetCommandLineA
WriteProcessMemory
ReadProcessMemory
OpenProcess
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleA
CreateFileA
GetSystemTimeAsFileTime
SystemTimeToFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTickCount
GetCurrentThreadId
InterlockedExchange
SetThreadPriority
GetNativeSystemInfo
GlobalMemoryStatusEx
GetLocaleInfoA
DebugBreak
GetCurrentProcessorNumber
InterlockedExchangeAdd
GlobalFree
GlobalMemoryStatus
GetSystemTime
CreateFileW
GetFileSize
ReadFile
lstrlenW
HeapCreate
HeapDestroy
HeapFree
HeapSize
GetProcessHeap
HeapAlloc
ReleaseMutex
TryEnterCriticalSection
CreateSemaphoreA
ReleaseSemaphore
ResumeThread
OpenThread
OutputDebugStringA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
WriteFile
SetFilePointer
InterlockedCompareExchange
GetProcAddress
LoadLibraryA
SetEnvironmentVariableA

user32

CallWindowProcA
SetFocus
GetWindowTextA
GetKeyState
LoadImageA
SetCursor
SetCursorPos
ClipCursor
ClientToScreen
GetDesktopWindow
GetForegroundWindow
GetCursorPos
ShowCursor
EnumDisplayDevicesA
SetWindowPos
AdjustWindowRect
GetMenu
SendMessageTimeoutA
UpdateWindow
PostQuitMessage
RegisterClassExA
UnregisterClassA
GetWindowRect
SetRect
TranslateMessage
TranslateAcceleratorA
GetMessageA
PeekMessageA
LoadAcceleratorsA
LoadStringA
IsWindowEnabled
RegisterRawInputDevices
GetRegisteredRawInputDevices
ReleaseCapture
SetCapture
GetRawInputData
GetKeyboardLayout
MoveWindow
DefWindowProcA
CreateWindowExA
SetWindowLongA
SetWindowTextA
MessageBoxA
DestroyWindow
SendMessageA
GetWindowLongA
CreateDialogParamA
DispatchMessageA
GetClientRect
DestroyAcceleratorTable
ShowWindow
PostMessageA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
CryptAcquireContextA
CryptReleaseContext
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam

shell32

CommandLineToArgvW

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx

winhttp

WinHttpCloseHandle
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpWriteData
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpSetOption
WinHttpOpenRequest
WinHttpConnect
WinHttpCrackUrl
WinHttpSetTimeouts
WinHttpOpen
WinHttpQueryOption

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList

Exports

Exports

_CreateCharaCustomWorkArea@4
_CreateDebugCheatWorkArea@4
_CreateDebugItemGetAllWorkArea@4
_CreateDebugItemGetWorkArea@4
_CreateGameResultWorkArea@4
_CreateItemEnhanceWorkArea@4
_CreateItemEquipWorkArea@4
_CreateItemSynthesisWorkArea@4
_CreateLoadingGameEndWorkArea@4
_CreateLoadingGameStartWorkArea@4
_CreateMissionWorkArea@4
_CreatePresentResultWorkArea@4
_CreateSaveDataCreateWorkArea@4
_CreateSaveDataLoadWorkArea@4
_CreateSpinnerWorkArea@4
_CreateStyleSelectWorkArea@4
_CreateTitleLoginWorkArea@4
_CreateWorkEnvironment@4
_DestroyWorkArea@4
_GetStaticTypes@0
_MasterCommonGetMasterDataGameModeSetting@8
_MasterCommonGetMasterDataItemData@8
_MasterCommonGetMasterDataItemDetail@8
_MasterCommonGetMasterDataItemDetailLocal@8
_MasterCommonGetMasterDataItemEnhancement@8
_MasterCommonGetMasterDataItemSet@8
_MasterCommonGetMasterDataItemSetLocal@8
_MasterCommonGetMasterDataLotteryBuff@8
_MasterCommonGetMasterDataLotteryBuffRarityTableLuckyTable@8
_MasterCommonGetMasterDataLotteryBuffRarityTableLuckyValue@8
_MasterCommonGetMasterDataLotteryBuffTotalRarity@8
_MasterCommonGetMasterDataLotteryItem@8
_MasterCommonGetMasterDataLotteryItemAppearTableLuckyTable@8
_MasterCommonGetMasterDataLotteryItemAppearTableLuckyValue@8
_MasterCommonGetMasterDataLotteryItemAppearValue@8
_MasterCommonGetMasterDataLotteryStar@8
_MasterCommonGetMasterDataMedalRankData@8
_MasterCommonGetMasterDataRewardSet@8
_MasterCommonGetMasterDataRewardSetLocal@8
_MasterCommonGetMasterDataStarToTicket@8
_MasterCommonGetMasterDataUnlockJobStyleInfo@8
_MasterCommonGetMasterDataUserRankInfoData@8
_MasterCommonGetMasterDataUserRankInfoDataList@8
_MasterCommonResultLotteryItem@8
_MasterDebugItemGetAllGetMasterData@8
_MasterDebugItemGetAllGetMasterDataItemSeedData@8
_MasterDeleteBuffCalcDeleteBuffCost@8
_MasterDeleteBuffCheckFixedBuff@8
_MasterDeleteBuffGetBuffData@8
_MasterGameResultGetMasterData@8
_MasterGameResultGetMasterDataBoostItem@8
_MasterGameResultGetMasterDataCampaignComplete@8
_MasterGameResultGetMasterDataItemFriendBonus@8
_MasterGameResultGetMasterDataItemGrowthParam@8
_MasterGameResultGetMasterDataItemHotTime@8
_MasterGameResultGetMasterDataLotteryReward@8
_MasterGameResultGetMasterDataMergeLeague@8
_MasterGameResultPostGetMasterDataCampaignComplete@8
_MasterItemEnhanceCalcEnhanceCost@8
_MasterItemEnhanceCalcItemPoint@8
_MasterItemEnhanceGetBonusRate@8
_MasterItemEnhanceGetBuffData@8
_MasterItemEnhanceGetItemData@8
_MasterItemEnhanceGetLimitBreakBonusPoint@8
_MasterItemEnhanceLotteryOfSuccessType@8
_MasterItemEquipGetWorkParam@8
_MasterItemSynthesisCalcSynthesisCost@8
_MasterItemSynthesisCheckFixedBuff@8
_MasterItemSynthesisGetBuffData@8
_MasterMissionGetMasterData@8
_MasterMissionGetMasterDataCampaign@8
_MasterSaveDataCreateGetMasterData@8
_MasterSpinnerGetMasterData@8
_MasterSpinnerGetMasterDataCategory@8
_MasterSpinnerGetMasterDataLotteryBonus@8
_MasterSpinnerGetMasterDataLotteryHappyPoint@8
_MasterSpinnerGetMasterDataLotteryHappyPointTable@8
_MasterSpinnerGetMasterDataLotteryTable@8
_MasterSpinnerGetMasterDataMultiLotteryTable@8
_MasterStyleSelectGetWorkParam@8
_MasterTitleLoginLeagueRankingGetMasterData@8
_MasterTitleLoginPresentationGetMasterData@8
_ProcessCharaCustomManagement@8
_ProcessCommonManagementGameModeSetting@8
_ProcessCommonManagementItemAddSetting@8
_ProcessCommonManagementItemAddToUserData@12
_ProcessCommonManagementItemData@8
_ProcessCommonManagementItemDetail@16
_ProcessCommonManagementItemEnhancement@8
_ProcessCommonManagementItemSet@12
_ProcessCommonManagementLotteryBuff@8
_ProcessCommonManagementLotteryItem@8
_ProcessCommonManagementLotteryStar@8
_ProcessCommonManagementMedalRankData@8
_ProcessCommonManagementPlayerProfile@12
_ProcessCommonManagementRewardSet@12
_ProcessCommonManagementStarToTicket@8
_ProcessCommonManagementUnlockJobStyleInfo@8
_ProcessCommonManagementUserEvaluationValue@8
_ProcessCommonManagementUserInfo@4
_ProcessCommonManagementUserRankInfo@12
_ProcessDebugCheatManagement@8
_ProcessDebugItemGetAllManagement@8
_ProcessDebugItemGetManagement@8
_ProcessGameResultDeployParam_AchievedQuest@4
_ProcessGameResultDeployParam_UseGimmick@4
_ProcessGameResultDeployParam_UseSkill@4
_ProcessGameResultManagement@8
_ProcessItemEnhanceManagement@8
_ProcessItemEquipManagement@8
_ProcessItemSynthesisManagement@8
_ProcessLoadingGameEndManagement@8
_ProcessLoadingGameStartManagement@8
_ProcessManagementWorkStatus@4
_ProcessMissionDeployParam_InGameModeHistory@4
_ProcessMissionManagement@8
_ProcessSaveDataCreateManagement@8
_ProcessSaveDataLoadManagement@8
_ProcessSpinnerManagement@8
_ProcessStyleSelectManagement@8
_ProcessTitleLoginManagement@8
_SampleProcess@4
_UserCharaCustomGetPermission@8
_UserCharaCustomGetServerUserData@8
_UserCharaCustomSetUserData@8
_UserCommonGetUserDataItemAddSetting@8
_UserCommonGetUserDataItemData@8
_UserCommonGetUserDataPlayerProfile@8
_UserCommonGetUserDataUnlockJobStyleInfo@8
_UserCommonGetUserDataUserEvaluationValue@8
_UserCommonGetUserDataUserRankInfoLeaguePoint@8
_UserCommonGetUserInfo@4
_UserCommonSetUserDataItemAddToUserData@8
_UserCommonSetUserDataUserEvaluationValue@8
_UserDebugCheatSetUserDataCampaignComplete@8
_UserDebugCheatSetUserDataFreeBoostSpawnTicket@8
_UserDebugCheatSetUserDataFreeCardTicket@8
_UserDebugCheatSetUserDataHappyStar@8
_UserDebugCheatSetUserDataHappyTicket@8
_UserDebugCheatSetUserDataJobSealCleric@8
_UserDebugCheatSetUserDataJobSealMage@8
_UserDebugCheatSetUserDataJobSealWarrior@8
_UserDebugCheatSetUserDataLeaguePoint@8
_UserDebugCheatSetUserDataMedalRank@8
_UserDebugCheatSetUserDataStarDust@8
_UserDebugCheatSetUserDataUseHappyTicket@8
_UserDebugItemGetAllSetUserDataItemSeed@8
_UserDebugItemGetSetUserData@8
_UserDeleteBuffCheckOwnedItem@8
_UserDeleteBuffGetHappyPointAndHappyTicket@8
_UserDeleteBuffGetUsersItemData@8
_UserDeleteBuffSaveResult@8
_UserGameResultGetUserData@8
_UserGameResultGetUserDataCampaignComplete@8
_UserGameResultSetUserData@8
_UserGameResultSetUserDataCampaignComplete@8
_UserGameResultSetUserDataCampaignCompleteCooperative@8
_UserGameResultSetUserDataCampaignCompleteCooperativeSuccess@8
_UserGameResultSetUserDataCampaignCompleteNormalMission@8
_UserGameResultSetUserDataCampaignCompleteNormalMissionClear@8
_UserGameResultSetUserDataCampaignCompleteSpecialChallenge@8
_UserGameResultSetUserDataCampaignCompleteSpecialChallengeClear@8
_UserGameResultSetUserDataItemGrowth@8
_UserGameResultSetUserDataMergeBattleRecord@8
_UserGameResultSetUserDataMergeBattleRecordForce@8
_UserGameResultSetUserDataMergeRankLeague@8
_UserGameResultSetUserDataQuestAchievement@8
_UserItemEnhanceCheckOwnedItem@8
_UserItemEnhanceCheckPremiumUser@8
_UserItemEnhanceGetHappyPointAndHappyTicket@8
_UserItemEnhanceGetUsersItemData@8
_UserItemEnhanceSaveResult@8
_UserItemEquipExecute@8
_UserItemEquipGetWorkParam@8
_UserItemSynthesisCheckOwnedItem@8
_UserItemSynthesisGetHappyPointAndHappyTicket@8
_UserItemSynthesisGetUsersItemData@8
_UserItemSynthesisSaveResult@8
_UserLoadingGameEndSetUserData@8
_UserLoadingGameStartGetUserData@8
_UserLoadingGameStartSetUserData@8
_UserMissionGetUserData@8
_UserMissionGetUserData_AchieveQuest@8
_UserMissionGetUserData_ClearCampaignMission@8
_UserMissionGetUserData_Cooperative@8
_UserMissionGetUserData_GamePlayCount@8
_UserMissionGetUserData_GameWinCount@8
_UserMissionGetUserData_HaveLevelBreakItem@8
_UserMissionGetUserData_InGameHistory@8
_UserMissionGetUserData_ItemCustomize@8
_UserMissionGetUserData_PlaySpinnerCount@8
_UserMissionGetUserData_PlayTime@8
_UserMissionGetUserData_ToHappyTime@8
_UserMissionGetUserData_UseBoostSpawn@8
_UserMissionSetUserData@8
_UserSaveDataCreateInitUserData@8
_UserSaveDataCreateSetUserData@8
_UserSaveDataLoadGetUserData@8
_UserSaveDataLoadSetUserData@8
_UserSpinnerGetUserData@8
_UserSpinnerSetUserData@8
_UserStyleSelectExecute@8
_UserStyleSelectGetWorkParam@8
_UserTitleLoginGetUserData@8
_UserTitleLoginPostGetUserData@8
_UserTitleLoginSetUserData@8
_UserTitleLoginSetUserDataNewLeagueSeason@8
_file_cipher_decode@28
_file_cipher_encode@20
_file_cipher_get_encode_size@4

Sections

.text
Size: 15.7MB - Virtual size: 15.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 856KB - Virtual size: 13.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 435KB - Virtual size: 435KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c22638ce6e49c200036ec45c08a43cfd

Code Sign

33:00:00:00:5b:43:3c:72:41:c5:6c:c0:ee:00:00:00:00:00:5bCertificate

Extended Key Usages

33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:caCertificate

Extended Key Usages

61:33:26:1a:00:00:00:00:00:31Certificate

Key Usages

61:16:68:34:00:00:00:00:00:1cCertificate

Extended Key Usages

Key Usages

7e:88:d6:1c:24:f5:43:09:e7:62:38:31:be:ff:cd:df:df:c2:d6:8aSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

launcherdll

steam_api

ws2_32

winmm

d3d9

d3dx9_43

xinput1_3

x3daudio1_7

kernel32

user32

advapi32

shell32

ole32

winhttp

setupapi

Exports

Exports

Sections

.text Size: 15.7MB - Virtual size: 15.7MB

.rdata Size: 1.6MB - Virtual size: 1.6MB

.data Size: 856KB - Virtual size: 13.2MB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 435KB - Virtual size: 435KB

.reloc Size: 1.0MB - Virtual size: 1.0MB

33:00:00:00:5b:43:3c:72:41:c5:6c:c0:ee:00:00:00:00:00:5b
Certificate

33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca
Certificate

61:33:26:1a:00:00:00:00:00:31
Certificate

61:16:68:34:00:00:00:00:00:1c
Certificate

7e:88:d6:1c:24:f5:43:09:e7:62:38:31:be:ff:cd:df:df:c2:d6:8a
Signer

.text
Size: 15.7MB - Virtual size: 15.7MB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 856KB - Virtual size: 13.2MB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 435KB - Virtual size: 435KB

.reloc
Size: 1.0MB - Virtual size: 1.0MB