2024-02-23_c2bc42f59838357fc161cbc8ba492c1f_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-02-23_c2bc42f59838357fc161cbc8ba492c1f_mafia
Size

7.6MB
MD5

c2bc42f59838357fc161cbc8ba492c1f
SHA1

1fee0f69efa3e8f186f1235ee4bfba4164f3a470
SHA256

3f2d346a424bbd8ae2a44a239228d395e2e08a59093f80ffaec8718e5a969eb1
SHA512

2bf88ce9da8075aa34ebe273e54a1d3a0894632a95743d29869e1595bec4f738f1226627976428dd29387103a94067ce4964cda0a54f73c998d4d5c1214f4c15
SSDEEP

196608:ojjjQERlfNuJ0E0d1BejTI0ixgHtojDIg9Cbk/V8ZJI3x:ojjjQeeJ0dWHHEDOJ6

Score

1^/10

Malware Config

Signatures

Files

2024-02-23_c2bc42f59838357fc161cbc8ba492c1f_mafia
.exe windows:5 windows x86 arch:x86

33b8bea86acfcf3d04de1791032709af

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

43:46:47:ac:c9:1f:0e:c2:e0:82:e9:52:0c:77:a7:63
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

21/12/2018, 00:00

Not After

19/12/2020, 23:59

Subject

CN=Critical Tools\, Inc.,O=Critical Tools\, Inc.,L=Austin,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

c8:eb:84:1d:b7:9a:1e:7f:e0:91:bf:87:03:b7:05:e1:5f:13:c9:19
Signer

Actual PE Digest

c8:eb:84:1d:b7:9a:1e:7f:e0:91:bf:87:03:b7:05:e1:5f:13:c9:19

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Jim\Documents\Visual Studio 2010\Projects\WBS5\Release\WBSSchedulePro.pdb

Imports

chartctrl

ChartCtrlEntry

xmlproc

XML_SetCharacterDataHandler
XML_ParserFree
XML_SetUserData
XML_ParserCreate
XML_SetElementHandler
XML_Parse

_isource

_ISWrite8BitToPNG
_ISQuantizeRGBTo8Bit
_ISWriteRGBToBMP
_ISWriteRGBToJPG
_ISWriteRGBToPCX
_ISWriteRGBToPNG
_ISWriteRGBToTIFF
_ISWriteRGBToTGA
_ISWriteRGBToWMF
_ISWriteRGBToEMF
_ISRGBToGrayScale8Bit
_ISWrite8BitGrayscaleToJPG
_ISGetLastError
_ISCloseDest
_ISWrite8BitToBMP
_ISWrite8BitToPCX
_ISWrite8BitToTIFF
_ISWrite8BitToTGA
_ISOpenFileDest
_ISGet8BitPaletteFromRGB
_ISInitialize
_ISPNGSetAllowAlphaPalette
_ISHBITMAPToRGB
_ISSetPNGOutputDPI
_ISSetTIFFOutputDPI
_ISSetJPGOutputDPI

ssce5532

SSCE_OptionsDlg
SSCE_GetMinSuggestDepth
SSCE_GetSid
SSCE_GetUserLexFiles
SSCE_GetUserLexPath
SSCE_GetStringWord
SSCE_AddToLex
SSCE_ReplaceStringWord
SSCE_DelStringWord
SSCE_OpenLex
SSCE_CloseLex
SSCE_Suggest
SSCE_CheckString
SSCE_DelStringText
SSCE_InsertStringText
SSCE_GetMainLexPath
SSCE_GetMainLexFiles
SSCE_GetLexInfo
SSCE_SetKey
SSCE_SetMainLexPath
SSCE_SetMainLexFiles
SSCE_SetRegTreeName
SSCE_SetSelUserLexFile
SSCE_SetUserLexFiles
SSCE_SetUserLexPath
SSCE_CreateLex
SSCE_GetLexId

rpcrt4

UuidToStringA
RpcStringFreeA

kernel32

GetShortPathNameA
SetThreadPriority
ResumeThread
WaitForSingleObject
SetEndOfFile
VirtualProtect
FileTimeToSystemTime
GetModuleHandleW
GetTickCount
GetProfileIntA
GetFileAttributesExA
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetFileSizeEx
GetFileTime
ReplaceFileA
GetDiskFreeSpaceA
LoadLibraryExA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
LocalAlloc
TlsGetValue
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
GetACP
Sleep
SetErrorMode
FindResourceExW
SearchPathA
GetWindowsDirectoryA
GetNumberFormatA
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
GetTimeFormatA
GetDateFormatA
HeapReAlloc
GetDriveTypeW
SetEnvironmentVariableA
SetCurrentDirectoryA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
RaiseException
ExitThread
CreateThread
SetStdHandle
GetFileType
HeapSize
ExitProcess
HeapQueryInformation
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetConsoleCP
GetConsoleMode
IsValidCodePage
GetLocaleInfoW
LCMapStringW
HeapCreate
IsProcessorFeaturePresent
GetTimeZoneInformation
GetStringTypeW
GetCurrentDirectoryW
GetFullPathNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
CompareStringW
WriteConsoleW
EnumSystemLocalesA
IsValidLocale
CreateFileW
GetProcessHeap
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
GetStringTypeExA
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetSystemDirectoryW
GetFileSize
GetFileAttributesA
InterlockedExchange
FindResourceA
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
lstrcmpW
LoadLibraryW
FormatMessageA
LocalFree
lstrlenW
RemoveDirectoryA
GetCurrentProcessId
SystemTimeToFileTime
CreateDirectoryA
CopyFileA
GetCurrentDirectoryA
GlobalAddAtomA
GetComputerNameA
FindClose
FindNextFileA
InterlockedDecrement
InterlockedIncrement
GlobalSize
CloseHandle
SetFileTime
CreateFileA
SetFileAttributesA
MoveFileA
DeleteFileA
FindFirstFileA
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
GetUserDefaultLCID
lstrcmpiA
lstrlenA
MultiByteToWideChar
GetVersionExA
FreeLibrary
lstrcpyA
GlobalFree
GlobalReAlloc
GlobalUnlock
ActivateActCtx
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetLastError
DeactivateActCtx
SetLastError
GetLocaleInfoA
GlobalLock
GlobalAlloc
MulDiv
lstrcmpA
lstrcpynA
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle

user32

GetWindowThreadProcessId
PostThreadMessageA
WaitMessage
TranslateAcceleratorA
BringWindowToTop
InsertMenuItemA
LoadAcceleratorsA
GetActiveWindow
CopyAcceleratorTableA
ToAsciiEx
MapVirtualKeyA
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableA
GetIconInfo
GetNextDlgTabItem
GetKeyNameTextA
EndDialog
CreateDialogIndirectParamA
MapDialogRect
DefFrameProcA
DefMDIChildProcA
TranslateMDISysAccel
GetMenuDefaultItem
LockWindowUpdate
GetTabbedTextExtentW
ShowOwnedPopups
SetCursorPos
DrawIcon
CreateMenu
PostQuitMessage
SetWindowContextHelpId
RealChildWindowFromPoint
GetNextDlgGroupItem
UnregisterClassA
IsCharLowerA
MapVirtualKeyExA
SubtractRect
CharUpperBuffA
EnumChildWindows
CharNextA
InvalidateRgn
HideCaret
GetWindowRgn
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
MonitorFromWindow
ScrollWindow
SetMenu
GetScrollRange
ValidateRect
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetMenu
SetWindowPos
MapWindowPoints
SetWindowRgn
DestroyIcon
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
GetMenuStringA
GetMenuItemID
InsertMenuA
RemoveMenu
DestroyCursor
GetDCEx
SetFocus
DrawTextExA
GetWindowTextLengthA
UnionRect
GetWindowContextHelpId
DrawMenuBar
LoadMenuA
DestroyMenu
LockSetForegroundWindow
ShowWindow
IsIconic
SetForegroundWindow
GetLastActivePopup
RemovePropA
LoadIconW
ShowScrollBar
ReuseDDElParam
UnpackDDElParam
CopyIcon
GetMessageA
GetDlgCtrlID
GetCapture
ClipCursor
InvertRect
DefWindowProcA
GetClassInfoA
TranslateMessage
FrameRect
GetUpdateRect
LoadCursorW
DrawIconEx
LoadImageA
SetClipboardData
EmptyClipboard
GetWindowDC
GetDesktopWindow
DispatchMessageA
PeekMessageA
MessageBeep
GetSysColorBrush
GetWindow
wsprintfA
ReleaseDC
FillRect
RegisterClipboardFormatA
LoadBitmapW
DrawFocusRect
DrawTextA
DrawFrameControl
SetWindowLongA
CallWindowProcA
ReleaseCapture
SetRect
GetMessagePos
DrawEdge
GetSysColor
SetCapture
SetScrollPos
GetScrollPos
SetScrollRange
GetSubMenu
LoadMenuW
GetWindowTextA
GetDlgItem
GetDC
DrawStateA
CloseClipboard
GetClipboardData
OpenClipboard
SystemParametersInfoA
CopyRect
MonitorFromPoint
GetMonitorInfoA
GetDoubleClickTime
EnableWindow
IntersectRect
GetKeyState
IsWindowVisible
IsClipboardFormatAvailable
LoadCursorA
SetCursor
GetMenuItemInfoA
GetWindowLongA
IsMenu
GetMenuItemCount
CheckMenuItem
AppendMenuA
CreatePopupMenu
GetAsyncKeyState
TrackPopupMenu
DeleteMenu
EnableMenuItem
SetMenuDefaultItem
GetWindowRect
GetSystemMenu
EqualRect
OffsetRect
IsChild
GetFocus
UpdateWindow
InvalidateRect
ScreenToClient
GetCursorPos
IsWindow
KillTimer
SetTimer
InflateRect
ClientToScreen
PtInRect
GetClientRect
IsZoomed
IsRectEmpty
GetSystemMetrics
GetParent
PostMessageA
RedrawWindow
RegisterWindowMessageA
SetRectEmpty
SendMessageA
WindowFromPoint
DestroyAcceleratorTable
SetParent
UpdateLayeredWindow
EnableScrollBar
NotifyWinEvent
CharUpperA
EndPaint
BeginPaint
GrayStringA
TabbedTextOutA
IsWindowEnabled
MoveWindow
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
GetDlgItemTextA
CheckRadioButton
CheckDlgButton
SetLayeredWindowAttributes
EnumDisplayMonitors
LoadImageW
CopyImage
SendDlgItemMessageA
LoadIconA
WinHelpA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
FindWindowA
GetPropA
SetWindowTextA
SetClassLongA

gdi32

GetCurrentObject
StartDocA
CloseEnhMetaFile
CreateEnhMetaFileA
LPtoDP
CreateBitmap
DPtoLP
GetBkColor
DeleteObject
BitBlt
CreatePen
SetMapMode
GetClipBox
ExcludeClipRect
StartPage
EndPage
EndDoc
AbortDoc
GetDIBits
RealizePalette
ExtCreatePen
GetNearestColor
Ellipse
GetViewportOrgEx
CreateSolidBrush
Polygon
DeleteEnhMetaFile
PatBlt
CopyMetaFileA
CreateDCA
CreateHatchBrush
CreateRectRgn
CreateEllipticRgn
CreatePolygonRgn
CombineRgn
Polyline
DeleteDC
SelectPalette
CreatePalette
CreateCompatibleBitmap
CreateCompatibleDC
GetObjectA
ExtTextOutA
SetTextColor
SetBkColor
Rectangle
GetStockObject
CreateFontIndirectA
CreateFontA
EnumFontFamiliesExA
GetViewportExtEx
GetDeviceCaps
GetWindowOrgEx
GetWindowExtEx
GetTextColor
GetTextExtentPoint32A
SelectObject
SetDIBColorTable
StretchBlt
GetPixel
SetPixel
CreateDIBSection
CreateDIBitmap
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
PtVisible
RectVisible
TextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
GetObjectType
SetRectRgn
GetMapMode
CreateRoundRectRgn
RoundRect
SetAbortProc
GetCharWidthA
StretchDIBits
GetTextAlign
CloseMetaFile
DeleteMetaFile
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextFaceA
GetTextExtentPointA
GetTextExtentPoint32W
UnrealizeObject
OffsetRgn
GetRgnBox
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
CreateRectRgnIndirect
GetTextMetricsA
RestoreDC
SaveDC
GetTextCharsetInfo
EnumFontFamiliesA
CreatePatternBrush

msimg32

GradientFill
AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

GetJobA
EnumPrintersA
ClosePrinter
DocumentPropertiesA
OpenPrinterA
ord201
GetPrinterA
DeviceCapabilitiesA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
RegSetValueA
RegCreateKeyA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExW
SetFileSecurityA
GetFileSecurityA

shell32

SHGetSpecialFolderLocation
DragAcceptFiles
ShellExecuteA
SHAddToRecentDocs
ExtractIconA
SHGetDesktopFolder
SHFileOperationA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
DragFinish
DragQueryFileA
SHGetFileInfoA
SHAppBarMessage

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFindFileNameA
PathRemoveExtensionA
PathFindExtensionA
PathRemoveFileSpecW
PathIsUNCA
PathStripToRootA
UrlUnescapeA

ole32

OleIsCurrentClipboard
OleSetClipboard
CoInitializeEx
CoUninitialize
CoInitialize
CoCreateInstance
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID
CreateStreamOnHGlobal
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoCreateGuid
DoDragDrop
CoRegisterMessageFilter
CoRevokeClassObject
CoGetClassObject
StgOpenStorageOnILockBytes
OleLockRunning
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
IsAccelerator
OleTranslateAccelerator
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CLSIDFromProgID
OleRun
CLSIDFromString
OleFlushClipboard

oleaut32

SystemTimeToVariantTime
VarBstrFromDate
SysFreeString
VarDateFromStr
VarUdateFromDate
SafeArrayDestroy
VariantInit
GetActiveObject
OleCreateFontIndirect
VariantChangeType
SysAllocStringByteLen
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysStringLen
SysAllocString
VariantCopy

oledlg

ord8

gdiplus

GdipCreateBitmapFromScan0
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipFree
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

wtsapi32

WTSQuerySessionInformationA
WTSFreeMemory

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

wininet

DeleteUrlCacheEntry
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryDataAvailable
HttpQueryInfoA
InternetCloseHandle
InternetGetLastResponseInfoA
InternetOpenA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
HttpSendRequestA
InternetConnectA
HttpOpenRequestA

winmm

PlaySoundA

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 705KB - Virtual size: 704KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 365KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33b8bea86acfcf3d04de1791032709af

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

43:46:47:ac:c9:1f:0e:c2:e0:82:e9:52:0c:77:a7:63Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

c8:eb:84:1d:b7:9a:1e:7f:e0:91:bf:87:03:b7:05:e1:5f:13:c9:19Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

chartctrl

xmlproc

_isource

ssce5532

rpcrt4

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

version

wtsapi32

oleacc

imm32

wininet

winmm

Sections

.text Size: 4.0MB - Virtual size: 4.0MB

.rdata Size: 705KB - Virtual size: 704KB

.data Size: 72KB - Virtual size: 105KB

.rsrc Size: 2.5MB - Virtual size: 2.5MB

.reloc Size: 365KB - Virtual size: 365KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

43:46:47:ac:c9:1f:0e:c2:e0:82:e9:52:0c:77:a7:63
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

c8:eb:84:1d:b7:9a:1e:7f:e0:91:bf:87:03:b7:05:e1:5f:13:c9:19
Signer

.text
Size: 4.0MB - Virtual size: 4.0MB

.rdata
Size: 705KB - Virtual size: 704KB

.data
Size: 72KB - Virtual size: 105KB

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

.reloc
Size: 365KB - Virtual size: 365KB