2024-03-05_480ad91d54bef01c54c1b812200d9b1d_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-05_480ad91d54bef01c54c1b812200d9b1d_icedid
Size

2.6MB
MD5

480ad91d54bef01c54c1b812200d9b1d
SHA1

db35d798355b41f0c1f82779b98c43f3b8531999
SHA256

862acb31b5899671a88207f84f17ef39557e6ba16268e0bf5aa88b298c0745b2
SHA512

29d75d9afb79e0d7a1c384af73ea5b119a66733e3543251900627f5c59263fe224225c44f35ff466469ba5163f7a558a8bfa398029d4afbe98dec424a1fc727c
SSDEEP

24576:etlYbzp/7xGOAHWKnldTxEIBzEQR964I8gWKF8fmcvDYbCFrlplB8ZEyBDnxlXm:eu4dSYO4YzcvDYkhHuZEyBDnxlW

Score

1^/10

Malware Config

Signatures

Files

2024-03-05_480ad91d54bef01c54c1b812200d9b1d_icedid
.exe windows:4 windows x86 arch:x86

c9d9cc3a45dbbb1c77df0fc52a2d1a3b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

16/07/2004, 00:00

Not After

15/07/2014, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7f:01:fb:34:d5:06:90:99:5e:6f:42:c0:77:1c:e8:7f
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Not Before

12/03/2009, 00:00

Not After

02/06/2012, 23:59

Subject

CN=Lenovo Information Products (Shenzhen) Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Lenovo Information Products (Shenzhen) Co.\,Ltd,L=Shenzhen,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

16:79:bf:d7:f6:a5:3f:87:eb:88:eb:9a:35:1b:b4:6c:33:c7:aa:a3
Signer

Actual PE Digest

16:79:bf:d7:f6:a5:3f:87:eb:88:eb:9a:35:1b:b4:6c:33:c7:aa:a3

Digest Algorithm

sha1

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cssuserdatadispatcher

?readData@CUserDataDispatcher@@QAE_NABVCTVTUserInfo@@ABVCTVTID@@AAV?$CTVTBuffer@E@@@Z
?readData@CUserDataDispatcher@@QAE_NABVCTVTWCharString@@ABVCTVTID@@AAV?$CTVTBuffer@E@@@Z
??0CUserDataDispatcher@@QAE@XZ
?writeData@CUserDataDispatcher@@QAE_NABVCTVTWCharString@@ABVCTVTID@@ABV?$CTVTBuffer@E@@@Z
?writeData@CUserDataDispatcher@@QAE_NABVCTVTUserInfo@@ABVCTVTID@@ABV?$CTVTBuffer@E@@@Z
??1CUserDataDispatcher@@QAE@XZ

cssdlgpwentry

?setUserName@CCSSSmartcardAuthPrompt@@QAEXABVCTVTWCharString@@@Z
?setReasonText@CCSSSmartcardAuthPrompt@@QAEXABVCTVTWCharString@@@Z
?showDialog@CCSSSmartcardAuthPrompt@@QAE_NAAJ@Z
??1CCSSSmartcardInsertPrompt@@QAE@XZ
?getSmartcardState@CCSSSmartcardInsertPrompt@@QAE?AW4CSS_SMARTCARD_DLG_STATES@1@XZ
?showDialog@CCSSSmartcardInsertPrompt@@QAE_N_N@Z
?setUserName@CCSSSmartcardInsertPrompt@@QAEXABVCTVTWCharString@@@Z
?setReasonText@CCSSSmartcardInsertPrompt@@QAEXABVCTVTWCharString@@@Z
??0CCSSSmartcardInsertPrompt@@QAE@XZ
?getUserPin@CCSSSmartcardAuthPrompt@@QAE_NAAV?$CTVTSecureBuffer@G@@@Z
??1CCSSSmartcardAuthPrompt@@QAE@XZ
??0CCSSDlgPwEntryPrompt@@QAE@PAVCPWPromptParams@@@Z
?showDialog@CCSSDlgPwEntryPrompt@@QAE_NAAJ@Z
??1CCSSDlgPwEntryPrompt@@QAE@XZ
??0CCSSDlgNewPwEntryPrompt@@QAE@PAVCPWChangePromptParams@@@Z
?showDialog@CCSSDlgNewPwEntryPrompt@@QAE_NAAJ@Z
??1CCSSDlgNewPwEntryPrompt@@QAE@XZ
?showDialog@CCSSDlgAuthorizationFailed@@QAE_NAAJ@Z
??0CCSSSmartcardAuthPrompt@@QAE@XZ

csswait

?CloseWaitDialog@@YAXXZ
?DisplayWaitDialog@@YAXABVCTVTWCharString@@PAUHWND__@@0_N@Z

dlganswerprompt

?showDialog@CDlgAnswerPrompt@@UAE_NAAJ@Z
??0CDlgAnswerPrompt@@QAE@PAVCAnswerPromptParams@@@Z

user32

CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
LoadMenuW
ReuseDDElParam
UnpackDDElParam
CreateDialogIndirectParamW
RegisterClipboardFormatW
GetKeyNameTextW
GetSystemMenu
SetParent
UnionRect
GetDialogBaseUnits
PostThreadMessageW
SetTimer
KillTimer
GetDCEx
LockWindowUpdate
InflateRect
MessageBeep
GetNextDlgTabItem
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
CharUpperW
DestroyIcon
GetSysColorBrush
ScrollWindowEx
MoveWindow
IsDialogMessageW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetClassLongW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetWindowTextLengthW
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
UnregisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
DefWindowProcW
CallWindowProcW
SetWindowLongW
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
SetRectEmpty
GetSystemMetrics
WaitMessage
ReleaseCapture
LoadCursorW
GetCapture
WindowFromPoint
SetCapture
GetLastActivePopup
IsWindowEnabled
GetMenuStringW
AppendMenuW
GetMenuItemID
BringWindowToTop
SetMenu
TranslateAcceleratorW
UnregisterClassW
SystemParametersInfoW
DispatchMessageW
LoadStringW
GetSubMenu
MessageBoxW
GetWindow
GetDlgCtrlID
SetRect
GetComboBoxInfo
GetClientRect
CopyRect
RemoveMenu
EnableWindow
DestroyWindow
GetWindowRect
GetWindowLongW
SetWindowPos
GetClassNameW
PtInRect
GetWindowTextW
GetSysColor
EndPaint
BeginPaint
GetWindowDC
VkKeyScanW
MapVirtualKeyW
ClientToScreen
ScreenToClient
DialogBoxParamW
GetUpdateRect
GetDC
GrayStringW
FillRect
ReleaseDC
IsDlgButtonChecked
EndDialog
SetDlgItemTextW
SetWindowTextW
GetDlgItem
LoadBitmapW
SendMessageW
ShowWindow
GetDesktopWindow
wsprintfW
DrawTextExW
DrawTextW
TabbedTextOutW
UnhookWindowsHookEx
InsertMenuW
GetMenuItemCount
DeleteMenu
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
GetParent
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
PostMessageW
PostQuitMessage
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
DestroyMenu
GetWindowPlacement
GetMenuItemInfoW
GetWindowThreadProcessId
MsgWaitForMultipleObjects
GetCursorPos
RegisterClassW

gdi32

SetBkMode
SetPolyFillMode
SetBkColor
RestoreDC
SaveDC
SetROP2
SetStretchBltMode
SetTextColor
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
GetClipBox
CreateBitmap
ExcludeClipRect
DeleteDC
GetBitmapBits
BitBlt
GetObjectA
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
CreatePen
ExtCreatePen
CreateHatchBrush
CopyMetaFileW
CreateDCW
GetDCOrgEx
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
CreateFontIndirectW
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
CreatePatternBrush
GetCharWidthW
CreateFontW
StretchDIBits
GetTextMetricsW
CreateDIBPatternBrushPt
ExtSelectClipRgn
GetTextExtentPoint32W
GetDeviceCaps
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
CreateSolidBrush
DeleteObject
SelectObject
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
StartDocW
GetPixel
GetWindowExtEx
GetViewportExtEx
GetObjectW
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
GetStockObject

wtsapi32

WTSQuerySessionInformationW
WTSFreeMemory

netapi32

NetApiBufferFree
NetWkstaUserGetInfo
NetUserEnum
NetGroupEnum
NetQueryDisplayInformation

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

shlwapi

SHCopyKeyW
PathFindExtensionW
PathRemoveExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
SHDeleteKeyW

crypt32

CryptQueryObject
CertFindCertificateInStore
CryptMsgClose
CertCloseStore

wintrust

WinVerifyTrust

kernel32

DuplicateHandle
ResetEvent
SetEvent
GetTickCount
QueryPerformanceCounter
GetCurrentProcessId
GlobalMemoryStatus
LoadLibraryA
GetVersionExA
GlobalAlloc
lstrcmpW
GlobalLock
InterlockedExchange
SizeofResource
MultiByteToWideChar
CompareStringA
WideCharToMultiByte
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GlobalDeleteAtom
SetThreadPriority
ResumeThread
SuspendThread
GlobalAddAtomW
GlobalFree
FreeResource
lstrlenW
GetCurrentDirectoryW
InterlockedDecrement
GetModuleHandleA
MulDiv
GlobalUnlock
GlobalFlags
CompareStringW
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
FormatMessageW
CreateEventW
CopyFileW
InterlockedIncrement
GlobalFindAtomW
MoveFileW
GetStringTypeExW
GetThreadLocale
lstrcmpiW
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationW
GetFullPathNameW
GetShortPathNameW
lstrlenA
SetErrorMode
GlobalGetAtomNameW
GetAtomNameW
FileTimeToSystemTime
SystemTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SetFileTime
GetFileTime
GetStartupInfoW
RtlUnwind
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetTimeZoneInformation
HeapReAlloc
ExitProcess
ExitThread
HeapSize
VirtualProtect
GetSystemInfo
VirtualQuery
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FatalAppExitA
SetConsoleCtrlHandler
GetConsoleCP
GetConsoleMode
SetStdHandle
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
GetStdHandle
GetFileType
GetVersion
GetCurrentThreadId
LoadLibraryExW
GetFileSize
CreateThread
ExpandEnvironmentStringsW
Module32FirstW
Module32NextW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
SetEnvironmentVariableW
GetEnvironmentVariableW
GetModuleHandleW
GetModuleFileNameW
SetFilePointer
ReadFile
WriteFile
SetNamedPipeHandleState
GetPrivateProfileSectionNamesW
GetPrivateProfileSectionW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
WritePrivateProfileSectionW
CreateProcessW
SetPriorityClass
TerminateProcess
GetExitCodeProcess
GetFileAttributesW
SetFileAttributesW
DeleteFileW
GetVersionExW
GetNativeSystemInfo
LoadResource
LockResource
FindResourceW
GetSystemDefaultLangID
GetComputerNameExW
GetComputerNameW
GetProcessHeap
HeapAlloc
HeapFree
OpenProcess
GetCurrentThread
GetCurrentProcess
WaitForSingleObject
DeviceIoControl
CreateFileW
FindFirstFileW
FindNextFileW
FindClose
Sleep
LoadLibraryW
GetProcAddress
LocalFree
LocalAlloc
FreeLibrary
CreateDirectoryW
CreateMutexW
ReleaseMutex
CloseHandle
VirtualAlloc
VirtualLock
VirtualUnlock
VirtualFree
GetLastError
SetLastError
GlobalSize

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

SetFileSecurityW
RegCreateKeyW
RegSetValueW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegisterEventSourceA
ReportEventA
RegQueryMultipleValuesW
RegRestoreKeyW
RegEnumValueW
RegEnumKeyExW
RegSaveKeyW
RegDeleteKeyW
RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegisterEventSourceW
ReportEventW
DeregisterEventSource
CryptEnumProvidersW
CryptExportKey
CryptDecrypt
CryptEncrypt
CryptGetProvParam
CryptDestroyKey
CryptImportKey
CryptGenKey
GetFileSecurityW
GetSecurityDescriptorDacl
GetAclInformation
AddAce
GetAce
EqualSid
GetSecurityDescriptorControl
SetSecurityDescriptorControl
RegOpenKeyExW
SetNamedSecurityInfoW
LookupPrivilegeValueW
AdjustTokenPrivileges
LogonUserW
LookupAccountNameW
IsValidSid
ConvertSidToStringSidW
GetTokenInformation
LookupAccountSidW
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
ImpersonateLoggedOnUser
GetUserNameW
ImpersonateSelf
OpenThreadToken
OpenProcessToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
FreeSid
GetLengthSid
CopySid
RevertToSelf
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegQueryValueExW
RegCloseKey

shell32

DragQueryFileW
SHGetFolderPathW
ShellExecuteExW
ExtractIconW
SHGetFileInfoW
DragFinish

comctl32

ord17

oledlg

OleUIBusyW

ole32

CoDisconnectObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StringFromGUID2
CoGetClassObject
OleDuplicateData
CoTreatAsClass
OleRun
StgOpenStorageOnILockBytes
OleUninitialize
StringFromCLSID
CoTaskMemAlloc
ReleaseStgMedium
CreateStreamOnHGlobal
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoInitializeSecurity
CoCreateInstance
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
CoRevokeClassObject
CoSetProxyBlanket
CoUninitialize
OleInitialize
CreateBindCtx
CoRegisterMessageFilter
CoRegisterClassObject
CoFreeUnusedLibraries

oleaut32

SysStringLen
VariantClear
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
VarCmp
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VarDateFromStr
SysReAllocStringLen
VarCyFromStr
VarBstrFromCy
VarBstrFromDec
VarDecFromStr
VarBstrFromDate
VariantInit
LoadTypeLi
VariantCopy
SysAllocString
SysFreeString
SafeArrayPtrOfIndex
SysAllocStringLen

tvttsp

Tspi_Context_FreeMemory
Tspi_TPM_GetRandom
Tspi_Key_GetPubKey
Tspi_Policy_SetSecret
Tspi_GetPolicyObject
Tspi_Context_CreateObject
Tspi_Context_GetTpmObject
Tspi_Context_Connect
Tspi_Context_Create
Tspi_Key_LoadKey
Tspi_Key_WrapKey
Tspi_SetAttribData
Tspi_TPM_GetCapability
Tspi_Context_Close
Tspi_TPM_TakeOwnership
Tspi_TPM_NSC_A1_2CommandThatShouldBeDeletedWhen1_2StackIsWritten
Tspi_TPM_NSC_AbortLockout
Tspi_TPM_Atmel_OwnerSetState
Tspi_ChangeAuth
Tspi_Context_CloseObject
Tspi_Hash_VerifySignature
Tspi_Hash_SetHashValue
Tspi_SetAttribUint32
Tspi_Key_CreateKey
Tspi_GetAttribData
Tspi_Data_Bind
Tspi_Hash_Sign
Tspi_Data_Unbind
Tspi_TPM_GetPubEndorsementKey

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 588KB - Virtual size: 586KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 68KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c9d9cc3a45dbbb1c77df0fc52a2d1a3b

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2Certificate

Extended Key Usages

Key Usages

7f:01:fb:34:d5:06:90:99:5e:6f:42:c0:77:1c:e8:7fCertificate

Extended Key Usages

Key Usages

16:79:bf:d7:f6:a5:3f:87:eb:88:eb:9a:35:1b:b4:6c:33:c7:aa:a3Signer

Headers

File Characteristics

Imports

cssuserdatadispatcher

cssdlgpwentry

csswait

dlganswerprompt

user32

gdi32

wtsapi32

netapi32

version

shlwapi

crypt32

wintrust

kernel32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

tvttsp

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 588KB - Virtual size: 586KB

.data Size: 68KB - Virtual size: 87KB

.rsrc Size: 28KB - Virtual size: 104KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Certificate

7f:01:fb:34:d5:06:90:99:5e:6f:42:c0:77:1c:e8:7f
Certificate

16:79:bf:d7:f6:a5:3f:87:eb:88:eb:9a:35:1b:b4:6c:33:c7:aa:a3
Signer

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 588KB - Virtual size: 586KB

.data
Size: 68KB - Virtual size: 87KB

.rsrc
Size: 28KB - Virtual size: 104KB