2024-03-09_b387bdf3fd7a6122e961f770181f7b20_huhk_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-03-09_b387bdf3fd7a6122e961f770181f7b20_huhk_magniber
Size

9.8MB
MD5

b387bdf3fd7a6122e961f770181f7b20
SHA1

b8c8b0a1e8014f865099f437a51dedbd6258b989
SHA256

c1bd4b208ed92b9268f96ff04dbf9954427e102b4e33f0020c1e3b4d9433c8ee
SHA512

38f67eb1d1ce0cb5ce46e7c55bcf48e82651611875dd9821dddc94b1b5fd33fd3690b455a4fdb665c33807c724658b7d42a63fde7cf5c01684214203b1dea17c
SSDEEP

196608:1VGfpc/lGJUqoxPNg3wmaujyu6gCOzWWEF1s9tTJ90aa:qc/liqnC16gCOzbPQJ

Score

1^/10

Malware Config

Signatures

Files

2024-03-09_b387bdf3fd7a6122e961f770181f7b20_huhk_magniber
.exe windows:5 windows x86 arch:x86

0e640497fb38f344b77c582b130333ff

Code Sign

09:ab:c9:a3:1d:b3:4f:52:d3:6b:13:43:2e:bb:54:08
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

19/08/2019, 00:00

Not After

26/08/2020, 12:00

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,OU=Security,O=Beijing Sogou Technology Development Co.\, Ltd.,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

74:79:06:56:54:1e:5f:e8:de:44:99:ca:86:ef:f5:32
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

25/06/2019, 00:00

Not After

24/06/2022, 23:59

Subject

CN=Beijing Sogou Technology Development Co.\, Ltd.,OU=Security,O=Beijing Sogou Technology Development Co.\, Ltd.,L=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

96:d8:10:31:63:ea:3e:b8:70:4c:36:76:dc:2a:b3:17:6b:90:fd:49:12:c2:6d:54:f4:59:d5:b5:da:5d:1e:04
Signer

Actual PE Digest

96:d8:10:31:63:ea:3e:b8:70:4c:36:76:dc:2a:b3:17:6b:90:fd:49:12:c2:6d:54:f4:59:d5:b5:da:5d:1e:04

Digest Algorithm

sha256

PE Digest Matches

false

ba:61:79:4c:39:39:13:8d:92:dc:10:a3:b5:79:5a:5a:b6:7f:fd:30
Signer

Actual PE Digest

ba:61:79:4c:39:39:13:8d:92:dc:10:a3:b5:79:5a:5a:b6:7f:fd:30

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\project\sogouime\dev-liuq\Bin\SogouPdb\SogouInput\SGTool.pdb

Imports

imm32

ImmSetHotKey
ImmGetHotKey
ImmDisableIME
ImmDestroyContext
ImmGetIMEFileNameW
ImmInstallIMEW
ImmAssociateContext

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationW

comctl32

InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_Create

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

wininet

InternetOpenUrlW
InternetCloseHandle
InternetOpenW
InternetGetConnectedState
HttpSendRequestExA
InternetSetCookieW
InternetCanonicalizeUrlW
InternetCheckConnectionW
HttpEndRequestA
InternetOpenA
InternetOpenUrlA
HttpAddRequestHeadersA
InternetSetOptionW
InternetCrackUrlA
InternetConnectA
InternetReadFile
InternetWriteFile
InternetErrorDlg
InternetQueryOptionW
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetQueryDataAvailable
InternetConnectW
HttpEndRequestW
HttpSendRequestExW
HttpAddRequestHeadersW
HttpOpenRequestA
HttpQueryInfoA

iphlpapi

GetAdaptersInfo

kernel32

ReleaseMutex
MapViewOfFile
UnmapViewOfFile
OpenMutexW
OpenFileMappingW
InterlockedCompareExchange
GetFileType
GetStdHandle
SetFilePointerEx
SystemTimeToFileTime
FormatMessageA
GetStartupInfoW
CreateFileA
GetCurrentThread
WriteProfileStringW
GetACP
WaitForSingleObjectEx
GetExitCodeThread
CreateThread
ExpandEnvironmentStringsA
SleepEx
FindResourceExW
FindResourceW
SizeofResource
LoadResource
LockResource
GetSystemDirectoryA
lstrcmpiW
LoadLibraryA
GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetSystemDirectoryW
GetModuleHandleW
OpenProcess
TerminateProcess
GetCurrentThreadId
Sleep
CloseHandle
GetModuleFileNameW
GetTickCount
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
FindFirstFileExW
GetCurrentDirectoryW
GetOEMCP
IsValidCodePage
SetStdHandle
GetConsoleCP
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
ReadConsoleW
GetConsoleMode
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
FreeLibraryAndExitThread
GetFullPathNameW
GetModuleHandleExW
ExitProcess
GetCommandLineA
RtlUnwind
SuspendThread
GetThreadContext
SetThreadContext
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
GetCPInfo
LCMapStringW
EncodePointer
GetStringTypeW
InitializeSListHead
IsProcessorFeaturePresent
UnhandledExceptionFilter
ConnectNamedPipe
GetOverlappedResult
ReadFileEx
DisconnectNamedPipe
WaitForMultipleObjectsEx
WriteFileEx
CreateNamedPipeW
SetNamedPipeHandleState
CreateIoCompletionPort
TransactNamedPipe
GetQueuedCompletionStatus
SetWaitableTimer
SetEndOfFile
GetWindowsDirectoryW
WaitNamedPipeW
CopyFileA
lstrcatA
lstrcpyA
DeviceIoControl
VirtualFree
IsBadReadPtr
GetModuleFileNameA
OpenFileMappingA
CreateFileMappingA
GlobalReAlloc
GetWindowsDirectoryA
CompareStringW
GetSystemTimeAsFileTime
GetEnvironmentVariableW
ExpandEnvironmentStringsW
IsDebuggerPresent
lstrcatW
VirtualAlloc
GetFileTime
CreateProcessW
GetFileAttributesExW
GetProcessId
SetFileTime
CreateDirectoryW
GetLogicalDriveStringsW
RemoveDirectoryW
QueryDosDeviceW
FormatMessageW
ExitThread
DuplicateHandle
TlsFree
TlsAlloc
TlsGetValue
TlsSetValue
GetModuleHandleA
SwitchToThread
GlobalHandle
LocalAlloc
CreateFileMappingW
FlushFileBuffers
GetSystemTime
GetDiskFreeSpaceExW
GetFileAttributesW
LoadLibraryExA
VirtualQuery
VirtualProtect
ReadFile
GetFileSizeEx
LocalFree
GetCurrentProcess
GetFileSize
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
Module32FirstW
Module32NextW
EnterCriticalSection
LeaveCriticalSection
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
lstrlenW
GetVersionExW
OutputDebugStringW
InitializeCriticalSection
DeleteCriticalSection
WaitForSingleObject
GetExitCodeProcess
DecodePointer
MulDiv
WaitForMultipleObjects
LoadLibraryExW
FreeLibrary
GetSystemInfo
SetFilePointer
WriteFile
GlobalMemoryStatusEx
GetTimeZoneInformation
TerminateThread
GetTempFileNameW
SetUnhandledExceptionFilter
QueryPerformanceFrequency
QueryPerformanceCounter
lstrcpynW
lstrcpynA
ResumeThread
InterlockedExchange
LoadLibraryW
CopyFileW
DeleteFileW
SetFileAttributesW
GetTempPathW
GetProcAddress
SetLastError
lstrlenA
DebugBreak
InterlockedIncrement
CreateMutexW
GetCommandLineW
CreateFileW
MoveFileExW
FindNextFileW
FindFirstFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
FindClose
EnumSystemLocalesW
lstrcpyW
lstrcmpW
GetLocaleInfoW
ResetEvent
GlobalAddAtomW
GetLocalTime
SetEvent
OpenEventW
CreateEventW
InitializeCriticalSectionAndSpinCount
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
InterlockedDecrement

user32

GetLastInputInfo
AdjustWindowRectEx
GetClassNameW
EnumThreadWindows
DispatchMessageW
PostMessageW
PostQuitMessage
ShowWindow
EnableWindow
IsWindowEnabled
GetSystemMetrics
RedrawWindow
MonitorFromPoint
GetMonitorInfoW
SetTimer
FindWindowW
ActivateKeyboardLayout
GetWindowTextW
DialogBoxParamW
SendMessageW
EndDialog
GetDlgItem
SetFocus
SendMessageTimeoutW
PostThreadMessageW
ScreenToClient
SetWindowRgn
FillRect
LoadIconW
GetSystemMenu
RemoveMenu
IsIconic
DrawIconEx
MsgWaitForMultipleObjects
IsCharAlphaNumericW
wsprintfA
CheckDlgButton
SetScrollInfo
LoadKeyboardLayoutW
GetMenuItemID
GetMenuItemRect
TrackMouseEvent
keybd_event
BringWindowToTop
OffsetRect
ExitWindowsEx
LoadMenuW
LoadAcceleratorsW
MenuItemFromPoint
MsgWaitForMultipleObjectsEx
WindowFromPoint
mouse_event
GetCursor
SendInput
GetMessageW
TranslateMessage
InflateRect
GetDC
CharLowerW
LoadStringA
LoadBitmapW
MessageBeep
DrawTextW
SetMenuDefaultItem
SetMenuItemInfoW
GetMenuItemInfoW
TrackPopupMenuEx
AppendMenuW
GetMenuItemCount
DestroyMenu
CreatePopupMenu
TranslateAcceleratorW
GetClassInfoExW
LoadStringW
IsDlgButtonChecked
ClipCursor
DestroyCursor
UnhookWindowsHookEx
EnumChildWindows
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetLayeredWindowAttributes
SetClassLongW
GetClassLongW
AttachThreadInput
IsDialogMessageW
CreateDialogParamW
MonitorFromWindow
GetWindow
FindWindowExW
MapWindowPoints
CharNextW
wvsprintfW
MonitorFromRect
SubtractRect
IntersectRect
GetKeyboardLayoutList
UnloadKeyboardLayout
wsprintfW
EndPaint
BeginPaint
RegisterClassExW
PeekMessageW
RegisterWindowMessageW
VkKeyScanW
SystemParametersInfoW
SetCursorPos
MessageBoxW
DrawIcon
GetUserObjectInformationW
GetThreadDesktop
IsRectEmpty
CopyRect
SetRectEmpty
MoveWindow
CloseWindow
GetKeyState
GetScrollInfo
ShowScrollBar
IsWindow
UnregisterHotKey
RegisterHotKey
GetAsyncKeyState
InvalidateRect
EnumWindows
UnregisterClassW
IsClipboardFormatAvailable
GetClipboardData
GetWindowDC
ReleaseCapture
UpdateLayeredWindow
SetRect
PtInRect
GetClientRect
GetFocus
ClientToScreen
EmptyClipboard
RegisterClipboardFormatW
SetClipboardData
CloseClipboard
OpenClipboard
GetCursorInfo
NotifyWinEvent
GetParent
SetWindowLongW
GetWindowLongW
GetWindowTextLengthW
SetWindowTextW
GetPropW
SetPropW
SetCapture
IsWindowVisible
SetWindowPos
DestroyWindow
CreateWindowExW
CallWindowProcW
DefWindowProcW
LoadImageW
DestroyIcon
LoadCursorW
GetCursorPos
SetCursor
GetWindowRect
GetForegroundWindow
KillTimer
GetWindowThreadProcessId
GetDesktopWindow
ReleaseDC
SetForegroundWindow

gdi32

CreateDIBSection
GetFontData
StretchDIBits
SelectClipRgn
CreateRectRgn
EnumFontFamiliesExW
GetCharABCWidthsFloatW
CombineRgn
OffsetRgn
ExtCreateRegion
SetViewportOrgEx
RestoreDC
SaveDC
SetTextCharacterExtra
GetClipRgn
GetTextExtentPoint32W
RemoveFontResourceW
StretchBlt
GetPixel
CreateDCW
AddFontResourceW
GetFontUnicodeRanges
GetDeviceCaps
GetTextMetricsW
DPtoLP
SetMapMode
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
MoveToEx
LineTo
DeleteDC
GetObjectW
SetBkMode
Rectangle
GetTextExtentPointW
CreateSolidBrush
CreatePen
SelectObject
GetTextExtentExPointW
DeleteObject
SetTextColor
GetStockObject
CreateFontIndirectW

comdlg32

GetSaveFileNameW
ChooseColorW
GetOpenFileNameW

advapi32

AdjustTokenPrivileges
RegCreateKeyW
RegEnumKeyW
OpenProcessToken
LookupPrivilegeValueW
RegCloseKey
RegEnumKeyExW
CryptGetKeyParam
RegEnumValueW
RegLoadKeyW
RegSaveKeyW
RegRestoreKeyW
CryptAcquireContextW
CryptDecrypt
CryptSetKeyParam
CryptDestroyKey
CryptEncrypt
CryptImportKey
CryptReleaseContext
GetSecurityDescriptorSacl
SetSecurityDescriptorDacl
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetSecurityDescriptorSacl
InitializeSecurityDescriptor
InitializeAcl
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
AddAccessAllowedAceEx
GetLengthSid
RegFlushKey
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
GetUserNameW
RegOpenKeyW
RegUnLoadKeyW
ConvertSidToStringSidW
CreateProcessAsUserW
RegDeleteValueW
FreeSid
AllocateAndInitializeSid
EqualSid
LookupAccountSidW
GetTokenInformation
DuplicateTokenEx
LookupAccountNameW

shell32

Shell_NotifyIconW
ord680
CommandLineToArgvW
SHGetSpecialFolderPathW
SHGetFolderPathW
ShellExecuteW
SHFileOperationW
SHChangeNotify
ShellExecuteExW
ExtractIconW

ole32

CoTaskMemFree
CoCreateGuid
CoInitialize
CreateStreamOnHGlobal
CoTaskMemAlloc
OleSetContainedObject
OleCreate
CoInitializeSecurity
CoInitializeEx
OleUninitialize
OleInitialize
CoCreateInstance
CoUninitialize
CoTaskMemRealloc

oleaut32

VarUI4FromStr
SysStringLen
VariantChangeType
VariantCopy
VariantClear
VariantInit
SysAllocStringByteLen
SysStringByteLen
SysAllocString
SysFreeString

ws2_32

htons
htonl
inet_ntoa
gethostname
gethostbyname
WSAStartup
ntohs
gethostbyaddr
getservbyport
ioctlsocket
closesocket
WSACleanup
bind
getpeername
getsockname
getsockopt
getservbyname
select
accept
listen
recvfrom
sendto
shutdown
send
socket
connect
recv
setsockopt
inet_addr
WSAGetLastError
WSASetLastError
__WSAFDIsSet

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

psapi

GetModuleInformation
GetProcessMemoryInfo
GetModuleFileNameExW

shlwapi

StrToIntW
PathFileExistsW
StrStrIW
wnsprintfA
StrCmpIW
StrCSpnW
SHDeleteKeyW

msimg32

GradientFill
TransparentBlt
AlphaBlend

winhttp

WinHttpCrackUrl
WinHttpOpen
WinHttpCloseHandle
WinHttpConnect
WinHttpReadData
WinHttpWriteData
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpOpenRequest
WinHttpSetOption
WinHttpQueryOption
WinHttpQueryDataAvailable

secur32

LsaFreeReturnBuffer
LsaGetLogonSessionData

oleacc

LresultFromObject
AccessibleObjectFromWindow

wldap32

ord79
ord26
ord22
ord41
ord50
ord60
ord211
ord46
ord143
ord32
ord33
ord301
ord200
ord35
ord27
ord30

Sections

.text
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 310KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 377KB - Virtual size: 377KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e640497fb38f344b77c582b130333ff

Code Sign

09:ab:c9:a3:1d:b3:4f:52:d3:6b:13:43:2e:bb:54:08Certificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

74:79:06:56:54:1e:5f:e8:de:44:99:ca:86:ef:f5:32Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

96:d8:10:31:63:ea:3e:b8:70:4c:36:76:dc:2a:b3:17:6b:90:fd:49:12:c2:6d:54:f4:59:d5:b5:da:5d:1e:04Signer

ba:61:79:4c:39:39:13:8d:92:dc:10:a3:b5:79:5a:5a:b6:7f:fd:30Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

imm32

wtsapi32

comctl32

userenv

wininet

iphlpapi

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

ws2_32

version

psapi

shlwapi

msimg32

winhttp

secur32

oleacc

wldap32

Sections

.text Size: 6.1MB - Virtual size: 6.1MB

.rdata Size: 1.6MB - Virtual size: 1.6MB

.data Size: 310KB - Virtual size: 1.4MB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 377KB - Virtual size: 377KB

09:ab:c9:a3:1d:b3:4f:52:d3:6b:13:43:2e:bb:54:08
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

74:79:06:56:54:1e:5f:e8:de:44:99:ca:86:ef:f5:32
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

96:d8:10:31:63:ea:3e:b8:70:4c:36:76:dc:2a:b3:17:6b:90:fd:49:12:c2:6d:54:f4:59:d5:b5:da:5d:1e:04
Signer

ba:61:79:4c:39:39:13:8d:92:dc:10:a3:b5:79:5a:5a:b6:7f:fd:30
Signer

.text
Size: 6.1MB - Virtual size: 6.1MB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 310KB - Virtual size: 1.4MB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 377KB - Virtual size: 377KB