star-xyzchese[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

star-xyzchese.zip
Size

28.7MB
MD5

2a0b90ff1bc521d0bb27799374010ae1
SHA1

d3ad09f56e5a01d8fbc4f65452e6751a5d292343
SHA256

e6fd2099efd1ae071df95b8dd82302eddb13d7ac182426048adbd7a6bc782daa
SHA512

2a4dbff1173e91b50cb954ad000274e1ef0df76e2f3efe054972c5382d731b14ad2b7c5460458b5d72f7141b366d6383d4f3d1d6afa3657264c26f58da55bd8d
SSDEEP

786432:WHc2guv6ngUyVx+Mdv1XyNyauREMR7fqN/1H:scgWgzyoMNu1BqN/9

Score

1^/10

Malware Config

Signatures

Files

star-xyzchese.zip
.zip
chese/.vs/star.xyz/FileContentIndex/932b7c26-0983-4c81-aeaa-6953fb149932.vsidx
chese/.vs/star.xyz/v17/.suo
chese/.vs/star.xyz/v17/Browse.VC.db
chese/.vs/star.xyz/v17/Solution.VC.db
chese/main/Driver/direct_io.asm
chese/main/Driver/driver.cpp
chese/main/Driver/driver.hpp
chese/main/Private.aps
chese/main/Private.rc
chese/main/SkCrypt.h
chese/main/d3d11.lib
chese/main/dependencies/gui/burbank.hpp
chese/main/dependencies/gui/imconfig.h
chese/main/dependencies/gui/imgui.cpp
chese/main/dependencies/gui/imgui.h
chese/main/dependencies/gui/imgui_demo.cpp
chese/main/dependencies/gui/imgui_draw.cpp
chese/main/dependencies/gui/imgui_impl_dx11.cpp
chese/main/dependencies/gui/imgui_impl_dx11.h
chese/main/dependencies/gui/imgui_impl_win32.cpp
chese/main/dependencies/gui/imgui_impl_win32.h
chese/main/dependencies/gui/imgui_internal.h
chese/main/dependencies/gui/imgui_tables.cpp
chese/main/dependencies/gui/imgui_tricks.hpp
chese/main/dependencies/gui/imgui_widgets.cpp
chese/main/dependencies/gui/imstb_rectpack.h
chese/main/dependencies/gui/imstb_textedit.h
chese/main/dependencies/gui/imstb_truetype.h
chese/main/fonts.h
chese/main/general.h
chese/main/images.h
chese/main/includes/game/g_math.hpp
chese/main/includes/game/game.hpp
chese/main/includes/globals.hpp
chese/main/includes/hexarray.hpp
chese/main/includes/hooks/hooks.hpp
chese/main/includes/images.h
chese/main/includes/importer.hpp
chese/main/includes/includes.hpp
chese/main/includes/render/d3dx.lib
chese/main/includes/render/d3dx9.h
chese/main/includes/render/d3dx9.lib
chese/main/includes/render/d3dx9anim.h
chese/main/includes/render/d3dx9core.h
chese/main/includes/render/d3dx9effect.h
chese/main/includes/render/d3dx9math.h
chese/main/includes/render/d3dx9math.inl
chese/main/includes/render/d3dx9mesh.h
chese/main/includes/render/d3dx9shader.h
chese/main/includes/render/d3dx9shape.h
chese/main/includes/render/d3dx9tex.h
chese/main/includes/render/d3dx9xof.h
chese/main/includes/render/fonts.h
chese/main/includes/render/render.hpp
chese/main/includes/skcrypt.hpp
chese/main/includes/utilities/utilities.hpp
chese/main/includes/utils.h
chese/main/includes/utils.hpp
chese/main/lazy.h
chese/main/libcurl.lib
chese/main/library_x64.lib
chese/main/main.cpp
chese/main/protect/SDK/keygen64.dll
.dll windows:6 windows x64 arch:x64

749e98e56844c5a066e829cd37b6dee6

Code Sign

f3:bd:80:d8:bf:c9:ce:d7:21:49:ba:d0:a7:a2:5b:cc
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/11/2020, 00:00

Not After

19/11/2022, 23:59

Subject

CN=Martin Tofall,O=Martin Tofall,POSTALCODE=33175,STREET=Paul-Fürstenberg-Straße 14,L=Bad Lippspringe,ST=Nordrhein-Westfalen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/03/2019, 00:00

Not After

31/12/2028, 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

60:84:ae:1e:98:03:fd:9b:5a:bf:9c:2c:2b:25:d6:d3:6a:5b:0d:d4:ec:86:8e:43:a2:fc:cf:b2:77:1f:3a:c2
Signer

Actual PE Digest

60:84:ae:1e:98:03:fd:9b:5a:bf:9c:2c:2b:25:d6:d3:6a:5b:0d:d4:ec:86:8e:43:a2:fc:cf:b2:77:1f:3a:c2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

setupapi

CM_Get_Parent

version

GetFileVersionInfoW

kernel32

GetTimeFormatW
GetModuleHandleA

user32

DestroyIcon
CreateWindowExW

advapi32

CryptGenRandom
RegisterEventSourceW

shell32

SHGetFileInfoW
ShellAboutW

ole32

StringFromGUID2

shlwapi

StrCmpLogicalW

Exports

Exports

CompareSystemIds
CompareSystemIdsW
ConvertLicenseLongToBin
ConvertLicenseLongToStr
GenerateAppCertificate
GenerateLicenseLong
GenerateLicenseLongW
GenerateLicenseShort
GenerateLicenseShortW
GenerateServerConfiguration
GenerateSignature
GenerateSignatureFromFile
GenerateSignatureFromFileW
GenerateSignatureW
GetLicenseHash
VerifyLicenseLong
VerifyLicenseLongW
VerifyLicenseShort
VerifyLicenseShortW
VerifySignature
VerifySignatureFromFile
VerifySignatureFromFileW
VerifySignatureW

Sections

.text
Size: - Virtual size: 955KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

.data
Size: - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
chese/main/protect/SDK/keygen64.h
chese/main/protect/SDK/obsidium.h
chese/main/protect/SDK/obsidium64.a
chese/main/protect/SDK/obsidium64.def
chese/main/protect/SDK/obsidium64.dll
.dll windows:6 windows x64 arch:x64

d7abc9f08ea9c7772ea0a9736b2816f4

Code Sign

f3:bd:80:d8:bf:c9:ce:d7:21:49:ba:d0:a7:a2:5b:cc
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

19/11/2020, 00:00

Not After

19/11/2022, 23:59

Subject

CN=Martin Tofall,O=Martin Tofall,POSTALCODE=33175,STREET=Paul-Fürstenberg-Straße 14,L=Bad Lippspringe,ST=Nordrhein-Westfalen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

12/03/2019, 00:00

Not After

31/12/2028, 23:59

Subject

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

1f:14:85:03:59:d1:71:a7:0c:75:2e:e1:3f:9c:fe:94:1c:df:fd:c1:a9:44:ff:c3:06:e0:3a:0c:19:d0:d7:62
Signer

Actual PE Digest

1f:14:85:03:59:d1:71:a7:0c:75:2e:e1:3f:9c:fe:94:1c:df:fd:c1:a9:44:ff:c3:06:e0:3a:0c:19:d0:d7:62

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleExW
GetModuleHandleA

shell32

PathMakeUniqueName

advapi32

GetUserNameA

user32

PeekMessageA

Exports

Exports

obsBlacklistLicenses
obsConvertLicenseToBinary
obsConvertLicenseToString
obsDecTrialCounter
obsDeleteLicenseData
obsDeleteTrialData
obsDisableLicense
obsEncDecData
obsGetActiveLicensingSystem
obsGetCustomValue
obsGetExpirationDate
obsGetInitialTrialCounter
obsGetInitialTrialDays
obsGetInitialTrialRuns
obsGetInstanceCount
obsGetLicenseCreation
obsGetLicenseData
obsGetLicenseExpiration
obsGetLicenseHash
obsGetLicenseInfo
obsGetLicenseInfoEx
obsGetLicenseInfoExW
obsGetLicenseInfoW
obsGetLicenseStatus
obsGetLicenseSystemId
obsGetProtectionDate
obsGetSystemId
obsGetTrialCounter
obsGetTrialDays
obsGetTrialEndDate
obsGetTrialIdentifier
obsGetTrialRuns
obsIsLicensed
obsIsProtected
obsIsVm
obsNetLicConnect
obsNetLicDisconnect
obsNetLicGetAppCertId
obsNetLicGetAppCertName
obsNetLicGetAppCertUserData
obsNetLicRegisterCallback
obsReloadLicense
obsReprotectString
obsSecureString
obsSecureStringW
obsSetExternalKey
obsSetLicense
obsSetLicenseShort
obsSetLicenseShortW
obsSetLicenseW
obsStoreLicense
obsStoreLicenseShort
obsStoreLicenseShortW
obsStoreLicenseW
obsUsbDecrypt
obsUsbEncrypt
obsUsbEnumDevices
obsUsbExecute
obsUsbGetDeviceId
obsUsbGetLicenseDeviceId
obsUsbReadData
obsUsbRegisterCallback
obsUsbWriteData
obsVerifyLicense
obsVerifyLicenseShort
obsVerifyLicenseShortW
obsVerifySignatureData
obsVerifySignatureFile
obsVerifySignatureFileW

Sections

.reloc
Size: - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE

.pexe
Size: - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
chese/main/protect/SDK/obsidium64.h
chese/main/protect/SDK/obsidiumlib.obj
chese/main/protect/antiDbg.h
chese/main/protect/anti_vm.h
chese/main/protect/auth.hpp
chese/main/protect/blowfish/blowfish.cpp
chese/main/protect/blowfish/blowfish.h
chese/main/protect/obfuscator.hpp
chese/main/protect/process.h
chese/main/resource.h
chese/main/resource1.h
chese/main/resource2.h
chese/main/security/encryption.hpp
chese/main/security/spoofer.h
chese/main/skaza.vcxproj
.xml
chese/main/skaza.vcxproj.filters
chese/main/skaza.vcxproj.user
chese/main/x64/Debug/Private.tlog/.vcxproj
.xml
chese/main/x64/Debug/Private.tlog/.vcxproj.filters
chese/main/x64/Debug/Private.tlog/.vcxproj.user
chese/main/x64/Debug/Private.tlog/.vs/.vcxproj/v17/.suo
chese/main/x64/Debug/Private.tlog/.vs/.vcxproj/v17/Browse.VC.db
chese/main/x64/Debug/Private.tlog/.vs/.vcxproj/v17/Solution.VC.db
chese/main/x64/Debug/Private.tlog/CL.command.1.tlog
chese/main/x64/Debug/Private.tlog/Masm.read.1u.tlog
chese/main/x64/Debug/Private.tlog/Masm.write.1u.tlog
chese/main/x64/Debug/Private.tlog/Private.lastbuildstate
chese/main/x64/Debug/VANGUARD.tlog/CL.command.1.tlog
chese/main/x64/Debug/VANGUARD.tlog/Masm.read.1u.tlog
chese/main/x64/Debug/VANGUARD.tlog/Masm.write.1u.tlog
chese/main/x64/Debug/VANGUARD.tlog/VANGUARD.lastbuildstate
chese/main/x64/Debug/Vanguard.46de74b7.tlog/CL.command.1.tlog
chese/main/x64/Debug/Vanguard.46de74b7.tlog/Masm.read.1u.tlog
chese/main/x64/Debug/Vanguard.46de74b7.tlog/Masm.write.1u.tlog
chese/main/x64/Debug/Vanguard.46de74b7.tlog/Vanguard tray notification..lastbuildstate
chese/main/x64/Debug/direct.obj
chese/main/x64/Debug/direct_io.obj
chese/main/x64/Debug/driver.obj
chese/main/x64/Debug/imgui.obj
chese/main/x64/Debug/imgui_demo.obj
chese/main/x64/Debug/imgui_draw.obj
chese/main/x64/Debug/imgui_impl_dx11.obj
chese/main/x64/Debug/imgui_impl_win32.obj
chese/main/x64/Debug/imgui_tables.obj
chese/main/x64/Debug/imgui_tricks.obj
chese/main/x64/Debug/imgui_widgets.obj
chese/main/x64/Debug/pe.obj
chese/main/x64/Debug/skaza.log
chese/main/x64/Debug/swind2.obj
chese/main/x64/Debug/vc143.idb
chese/main/x64/Debug/vc143.pdb
chese/main/xorst.h
chese/star.xyz.sln

Sharing

General

Malware Config

Signatures

Files

749e98e56844c5a066e829cd37b6dee6

Code Sign

f3:bd:80:d8:bf:c9:ce:d7:21:49:ba:d0:a7:a2:5b:ccCertificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

60:84:ae:1e:98:03:fd:9b:5a:bf:9c:2c:2b:25:d6:d3:6a:5b:0d:d4:ec:86:8e:43:a2:fc:cf:b2:77:1f:3a:c2Signer

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

version

kernel32

user32

advapi32

shell32

ole32

shlwapi

Exports

Exports

Sections

.text Size: - Virtual size: 955KB

.rsrc Size: - Virtual size: 194KB

.rdata Size: - Virtual size: 41KB

.reloc Size: - Virtual size: 52KB

.data Size: - Virtual size: 348B

.rsrc Size: 2KB - Virtual size: 1KB

.rdata Size: 97KB - Virtual size: 96KB

d7abc9f08ea9c7772ea0a9736b2816f4

Code Sign

f3:bd:80:d8:bf:c9:ce:d7:21:49:ba:d0:a7:a2:5b:ccCertificate

Extended Key Usages

Key Usages

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95Certificate

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

1f:14:85:03:59:d1:71:a7:0c:75:2e:e1:3f:9c:fe:94:1c:df:fd:c1:a9:44:ff:c3:06:e0:3a:0c:19:d0:d7:62Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

advapi32

user32

Exports

Exports

Sections

.reloc Size: - Virtual size: 174KB

.rsrc Size: - Virtual size: 77KB

.text Size: - Virtual size: 138KB

.text Size: - Virtual size: 12KB

f3:bd:80:d8:bf:c9:ce:d7:21:49:ba:d0:a7:a2:5b:cc
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

60:84:ae:1e:98:03:fd:9b:5a:bf:9c:2c:2b:25:d6:d3:6a:5b:0d:d4:ec:86:8e:43:a2:fc:cf:b2:77:1f:3a:c2
Signer

.text
Size: - Virtual size: 955KB

.rsrc
Size: - Virtual size: 194KB

.rdata
Size: - Virtual size: 41KB

.reloc
Size: - Virtual size: 52KB

.data
Size: - Virtual size: 348B

.rsrc
Size: 2KB - Virtual size: 1KB

.rdata
Size: 97KB - Virtual size: 96KB

f3:bd:80:d8:bf:c9:ce:d7:21:49:ba:d0:a7:a2:5b:cc
Certificate

39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

1f:14:85:03:59:d1:71:a7:0c:75:2e:e1:3f:9c:fe:94:1c:df:fd:c1:a9:44:ff:c3:06:e0:3a:0c:19:d0:d7:62
Signer

.reloc
Size: - Virtual size: 174KB

.rsrc
Size: - Virtual size: 77KB

.text
Size: - Virtual size: 138KB

.text
Size: - Virtual size: 12KB

.pexe
Size: - Virtual size: 348B

.rsrc
Size: 1KB - Virtual size: 1KB

.data
Size: 97KB - Virtual size: 97KB