586c7e62e3a5b5f249baab882c3e2b7c82866a6ffbd2dec42f0ac1082d32ec28

Sharing

Copy URL Twitter E-mail

General

Target

586c7e62e3a5b5f249baab882c3e2b7c82866a6ffbd2dec42f0ac1082d32ec28
Size

936KB
MD5

868a8fd6b473ed62ad5a5cea8f62c7d7
SHA1

3d22aa475a22c0c80b6a793b588782c7710fc687
SHA256

586c7e62e3a5b5f249baab882c3e2b7c82866a6ffbd2dec42f0ac1082d32ec28
SHA512

6e7fdd8efe5d07e2fbd1558cc953de9157d60bdb6ed0bfe275ee8365245fefd531c66d69ea8abbd85c8af5ebe3fbaea5634b0917d6df23f33f01cf50d47a6864
SSDEEP

12288:FrYZS5sfZRW5WV9FwxBQf1oMflkJGJJrn6J0MEWl3LMu5xCkYE:FYZSG7ixoJsGJJUrjFLEE

Score

1^/10

Malware Config

Signatures

Files

586c7e62e3a5b5f249baab882c3e2b7c82866a6ffbd2dec42f0ac1082d32ec28
.dll windows:6 windows x64 arch:x64

17e5e2a33bc63407e0361cd0d7d72a1d

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0d:01:94:cd:1e:31:42:20:51:35:d1:c6:36:e4:e9:ba
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

18/10/2022, 00:00

Not After

15/10/2025, 23:59

Subject

CN=NVIDIA Corporation,OU=1-F,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:01:09:5e:de:a2:12:7e:92:81:cc:00:00:00:00:01:09
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

14/09/2023, 19:14

Not After

04/09/2024, 19:14

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

14:cd:da:39:6f:72:94:d0:ed:5e:84:13:4e:86:0a:e1:31:5f:cd:99:72:02:8c:95:58:02:60:e4:38:a0:5d:b0
Signer

Actual PE Digest

14:cd:da:39:6f:72:94:d0:ed:5e:84:13:4e:86:0a:e1:31:5f:cd:99:72:02:8c:95:58:02:60:e4:38:a0:5d:b0

Digest Algorithm

sha256

PE Digest Matches

true

14:cd:da:39:6f:72:94:d0:ed:5e:84:13:4e:86:0a:e1:31:5f:cd:99:72:02:8c:95:58:02:60:e4:38:a0:5d:b0
Signer

Actual PE Digest

14:cd:da:39:6f:72:94:d0:ed:5e:84:13:4e:86:0a:e1:31:5f:cd:99:72:02:8c:95:58:02:60:e4:38:a0:5d:b0

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

FindClose
CloseHandle
GetLastError
QueryPerformanceCounter
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetCurrentProcess
GetCurrentProcessId
SwitchToThread
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleExA
LoadLibraryExW
CreateFileW
SetLastError
GetModuleFileNameW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
EncodePointer
RaiseException
RtlPcToFileHeader
SetStdHandle
GetFileType
GetModuleHandleExW
ExitProcess
WideCharToMultiByte
GetStdHandle
LCMapStringW
WriteFile
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
GetFileSizeEx
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
HeapSize
WriteConsoleW
GetSystemDirectoryW

advapi32

RegOpenKeyExW
RegGetValueW

Exports

Exports

nvmlComputeInstanceDestroy
nvmlComputeInstanceGetInfo
nvmlComputeInstanceGetInfo_v2
nvmlDeviceClearAccountingPids
nvmlDeviceClearCpuAffinity
nvmlDeviceClearEccErrorCounts
nvmlDeviceClearFieldValues
nvmlDeviceCreateGpuInstance
nvmlDeviceCreateGpuInstanceWithPlacement
nvmlDeviceDiscoverGpus
nvmlDeviceFreezeNvLinkUtilizationCounter
nvmlDeviceGetAPIRestriction
nvmlDeviceGetAccountingBufferSize
nvmlDeviceGetAccountingMode
nvmlDeviceGetAccountingPids
nvmlDeviceGetAccountingStats
nvmlDeviceGetActiveVgpus
nvmlDeviceGetAdaptiveClockInfoStatus
nvmlDeviceGetApplicationsClock
nvmlDeviceGetArchitecture
nvmlDeviceGetAttributes
nvmlDeviceGetAttributes_v2
nvmlDeviceGetAutoBoostedClocksEnabled
nvmlDeviceGetBAR1MemoryInfo
nvmlDeviceGetBoardId
nvmlDeviceGetBoardPartNumber
nvmlDeviceGetBrand
nvmlDeviceGetBridgeChipInfo
nvmlDeviceGetBusType
nvmlDeviceGetC2cModeInfoV
nvmlDeviceGetClkMonStatus
nvmlDeviceGetClock
nvmlDeviceGetClockInfo
nvmlDeviceGetComputeInstanceId
nvmlDeviceGetComputeMode
nvmlDeviceGetComputeRunningProcesses
nvmlDeviceGetComputeRunningProcesses_v2
nvmlDeviceGetComputeRunningProcesses_v3
nvmlDeviceGetConfComputeGpuAttestationReport
nvmlDeviceGetConfComputeGpuCertificate
nvmlDeviceGetConfComputeMemSizeInfo
nvmlDeviceGetConfComputeProtectedMemoryUsage
nvmlDeviceGetCount
nvmlDeviceGetCount_v2
nvmlDeviceGetCpuAffinity
nvmlDeviceGetCpuAffinityWithinScope
nvmlDeviceGetCreatableVgpus
nvmlDeviceGetCudaComputeCapability
nvmlDeviceGetCurrPcieLinkGeneration
nvmlDeviceGetCurrPcieLinkWidth
nvmlDeviceGetCurrentClocksEventReasons
nvmlDeviceGetCurrentClocksThrottleReasons
nvmlDeviceGetDecoderUtilization
nvmlDeviceGetDefaultApplicationsClock
nvmlDeviceGetDefaultEccMode
nvmlDeviceGetDetailedEccErrors
nvmlDeviceGetDeviceHandleFromMigDeviceHandle
nvmlDeviceGetDisplayActive
nvmlDeviceGetDisplayMode
nvmlDeviceGetDriverModel
nvmlDeviceGetDynamicPstatesInfo
nvmlDeviceGetEccMode
nvmlDeviceGetEncoderCapacity
nvmlDeviceGetEncoderSessions
nvmlDeviceGetEncoderStats
nvmlDeviceGetEncoderUtilization
nvmlDeviceGetEnforcedPowerLimit
nvmlDeviceGetFBCSessions
nvmlDeviceGetFBCStats
nvmlDeviceGetFanControlPolicy_v2
nvmlDeviceGetFanSpeed
nvmlDeviceGetFanSpeed_v2
nvmlDeviceGetFieldValues
nvmlDeviceGetGpcClkMinMaxVfOffset
nvmlDeviceGetGpcClkVfOffset
nvmlDeviceGetGpuFabricInfo
nvmlDeviceGetGpuInstanceById
nvmlDeviceGetGpuInstanceId
nvmlDeviceGetGpuInstancePossiblePlacements
nvmlDeviceGetGpuInstancePossiblePlacements_v2
nvmlDeviceGetGpuInstanceProfileInfo
nvmlDeviceGetGpuInstanceProfileInfoV
nvmlDeviceGetGpuInstanceRemainingCapacity
nvmlDeviceGetGpuInstances
nvmlDeviceGetGpuMaxPcieLinkGeneration
nvmlDeviceGetGpuOperationMode
nvmlDeviceGetGraphicsRunningProcesses
nvmlDeviceGetGraphicsRunningProcesses_v2
nvmlDeviceGetGraphicsRunningProcesses_v3
nvmlDeviceGetGridLicensableFeatures
nvmlDeviceGetGridLicensableFeatures_v2
nvmlDeviceGetGridLicensableFeatures_v3
nvmlDeviceGetGridLicensableFeatures_v4
nvmlDeviceGetGspFirmwareMode
nvmlDeviceGetGspFirmwareVersion
nvmlDeviceGetHandleByIndex
nvmlDeviceGetHandleByIndex_v2
nvmlDeviceGetHandleByPciBusId
nvmlDeviceGetHandleByPciBusId_v2
nvmlDeviceGetHandleBySerial
nvmlDeviceGetHandleByUUID
nvmlDeviceGetHostVgpuMode
nvmlDeviceGetIndex
nvmlDeviceGetInforomConfigurationChecksum
nvmlDeviceGetInforomImageVersion
nvmlDeviceGetInforomVersion
nvmlDeviceGetIrqNum
nvmlDeviceGetJpgUtilization
nvmlDeviceGetLastBBXFlushTime
nvmlDeviceGetMPSComputeRunningProcesses
nvmlDeviceGetMPSComputeRunningProcesses_v2
nvmlDeviceGetMPSComputeRunningProcesses_v3
nvmlDeviceGetMaxClockInfo
nvmlDeviceGetMaxCustomerBoostClock
nvmlDeviceGetMaxMigDeviceCount
nvmlDeviceGetMaxPcieLinkGeneration
nvmlDeviceGetMaxPcieLinkWidth
nvmlDeviceGetMemClkMinMaxVfOffset
nvmlDeviceGetMemClkVfOffset
nvmlDeviceGetMemoryAffinity
nvmlDeviceGetMemoryBusWidth
nvmlDeviceGetMemoryErrorCounter
nvmlDeviceGetMemoryInfo
nvmlDeviceGetMemoryInfo_v2
nvmlDeviceGetMigDeviceHandleByIndex
nvmlDeviceGetMigMode
nvmlDeviceGetMinMaxClockOfPState
nvmlDeviceGetMinMaxFanSpeed
nvmlDeviceGetMinorNumber
nvmlDeviceGetModuleId
nvmlDeviceGetMultiGpuBoard
nvmlDeviceGetName
nvmlDeviceGetNumFans
nvmlDeviceGetNumGpuCores
nvmlDeviceGetNvLinkCapability
nvmlDeviceGetNvLinkErrorCounter
nvmlDeviceGetNvLinkRemoteDeviceType
nvmlDeviceGetNvLinkRemotePciInfo
nvmlDeviceGetNvLinkRemotePciInfo_v2
nvmlDeviceGetNvLinkState
nvmlDeviceGetNvLinkUtilizationControl
nvmlDeviceGetNvLinkUtilizationCounter
nvmlDeviceGetNvLinkVersion
nvmlDeviceGetOfaUtilization
nvmlDeviceGetP2PStatus
nvmlDeviceGetPciInfo
nvmlDeviceGetPciInfo_v2
nvmlDeviceGetPciInfo_v3
nvmlDeviceGetPcieLinkMaxSpeed
nvmlDeviceGetPcieReplayCounter
nvmlDeviceGetPcieSpeed
nvmlDeviceGetPcieThroughput
nvmlDeviceGetPerformanceState
nvmlDeviceGetPersistenceMode
nvmlDeviceGetPgpuMetadataString
nvmlDeviceGetPowerManagementDefaultLimit
nvmlDeviceGetPowerManagementLimit
nvmlDeviceGetPowerManagementLimitConstraints
nvmlDeviceGetPowerManagementMode
nvmlDeviceGetPowerSource
nvmlDeviceGetPowerState
nvmlDeviceGetPowerUsage
nvmlDeviceGetProcessUtilization
nvmlDeviceGetRemappedRows
nvmlDeviceGetRetiredPages
nvmlDeviceGetRetiredPagesPendingStatus
nvmlDeviceGetRetiredPages_v2
nvmlDeviceGetRowRemapperHistogram
nvmlDeviceGetRunningProcessDetailList
nvmlDeviceGetSamples
nvmlDeviceGetSerial
nvmlDeviceGetSupportedClocksEventReasons
nvmlDeviceGetSupportedClocksThrottleReasons
nvmlDeviceGetSupportedEventTypes
nvmlDeviceGetSupportedGraphicsClocks
nvmlDeviceGetSupportedMemoryClocks
nvmlDeviceGetSupportedPerformanceStates
nvmlDeviceGetSupportedVgpus
nvmlDeviceGetTargetFanSpeed
nvmlDeviceGetTemperature
nvmlDeviceGetTemperatureThreshold
nvmlDeviceGetThermalSettings
nvmlDeviceGetTopologyCommonAncestor
nvmlDeviceGetTopologyNearestGpus
nvmlDeviceGetTotalEccErrors
nvmlDeviceGetTotalEnergyConsumption
nvmlDeviceGetUUID
nvmlDeviceGetUtilizationRates
nvmlDeviceGetVbiosVersion
nvmlDeviceGetVgpuCapabilities
nvmlDeviceGetVgpuMetadata
nvmlDeviceGetVgpuProcessUtilization
nvmlDeviceGetVgpuSchedulerCapabilities
nvmlDeviceGetVgpuSchedulerLog
nvmlDeviceGetVgpuSchedulerState
nvmlDeviceGetVgpuUtilization
nvmlDeviceGetViolationStatus
nvmlDeviceGetVirtualizationMode
nvmlDeviceIsMigDeviceHandle
nvmlDeviceModifyDrainState
nvmlDeviceOnSameBoard
nvmlDeviceQueryDrainState
nvmlDeviceRegisterEvents
nvmlDeviceRemoveGpu
nvmlDeviceRemoveGpu_v2
nvmlDeviceResetApplicationsClocks
nvmlDeviceResetGpuLockedClocks
nvmlDeviceResetMemoryLockedClocks
nvmlDeviceResetNvLinkErrorCounters
nvmlDeviceResetNvLinkUtilizationCounter
nvmlDeviceSetAPIRestriction
nvmlDeviceSetAccountingMode
nvmlDeviceSetApplicationsClocks
nvmlDeviceSetAutoBoostedClocksEnabled
nvmlDeviceSetComputeMode
nvmlDeviceSetConfComputeUnprotectedMemSize
nvmlDeviceSetCpuAffinity
nvmlDeviceSetDefaultAutoBoostedClocksEnabled
nvmlDeviceSetDefaultFanSpeed_v2
nvmlDeviceSetDriverModel
nvmlDeviceSetEccMode
nvmlDeviceSetFanControlPolicy
nvmlDeviceSetFanSpeed_v2
nvmlDeviceSetGpcClkVfOffset
nvmlDeviceSetGpuLockedClocks
nvmlDeviceSetGpuOperationMode
nvmlDeviceSetMemClkVfOffset
nvmlDeviceSetMemoryLockedClocks
nvmlDeviceSetMigMode
nvmlDeviceSetNvLinkDeviceLowPowerThreshold
nvmlDeviceSetNvLinkUtilizationControl
nvmlDeviceSetPersistenceMode
nvmlDeviceSetPowerManagementLimit
nvmlDeviceSetPowerManagementLimit_v2
nvmlDeviceSetTemperatureThreshold
nvmlDeviceSetVgpuSchedulerState
nvmlDeviceSetVirtualizationMode
nvmlDeviceValidateInforom
nvmlErrorString
nvmlEventSetCreate
nvmlEventSetFree
nvmlEventSetWait
nvmlEventSetWait_v2
nvmlGetBlacklistDeviceCount
nvmlGetBlacklistDeviceInfoByIndex
nvmlGetExcludedDeviceCount
nvmlGetExcludedDeviceInfoByIndex
nvmlGetVgpuCompatibility
nvmlGetVgpuDriverCapabilities
nvmlGetVgpuVersion
nvmlGpmMetricsGet
nvmlGpmMigSampleGet
nvmlGpmQueryDeviceSupport
nvmlGpmQueryIfStreamingEnabled
nvmlGpmSampleAlloc
nvmlGpmSampleFree
nvmlGpmSampleGet
nvmlGpmSetStreamingEnabled
nvmlGpuInstanceCreateComputeInstance
nvmlGpuInstanceCreateComputeInstanceWithPlacement
nvmlGpuInstanceDestroy
nvmlGpuInstanceGetComputeInstanceById
nvmlGpuInstanceGetComputeInstancePossiblePlacements
nvmlGpuInstanceGetComputeInstanceProfileInfo
nvmlGpuInstanceGetComputeInstanceProfileInfoV
nvmlGpuInstanceGetComputeInstanceRemainingCapacity
nvmlGpuInstanceGetComputeInstances
nvmlGpuInstanceGetInfo
nvmlInit
nvmlInitWithFlags
nvmlInit_v2
nvmlInternalGetExportTable
nvmlSetVgpuVersion
nvmlShutdown
nvmlSystemGetConfComputeCapabilities
nvmlSystemGetConfComputeGpusReadyState
nvmlSystemGetConfComputeState
nvmlSystemGetCudaDriverVersion
nvmlSystemGetCudaDriverVersion_v2
nvmlSystemGetDriverVersion
nvmlSystemGetHicVersion
nvmlSystemGetNVMLVersion
nvmlSystemGetNvlinkBwMode
nvmlSystemGetProcessName
nvmlSystemGetTopologyGpuSet
nvmlSystemSetConfComputeGpusReadyState
nvmlSystemSetNvlinkBwMode
nvmlUnitGetCount
nvmlUnitGetDevices
nvmlUnitGetFanSpeedInfo
nvmlUnitGetHandleByIndex
nvmlUnitGetLedState
nvmlUnitGetPsuInfo
nvmlUnitGetTemperature
nvmlUnitGetUnitInfo
nvmlUnitSetLedState
nvmlVgpuInstanceClearAccountingPids
nvmlVgpuInstanceGetAccountingMode
nvmlVgpuInstanceGetAccountingPids
nvmlVgpuInstanceGetAccountingStats
nvmlVgpuInstanceGetEccMode
nvmlVgpuInstanceGetEncoderCapacity
nvmlVgpuInstanceGetEncoderSessions
nvmlVgpuInstanceGetEncoderStats
nvmlVgpuInstanceGetFBCSessions
nvmlVgpuInstanceGetFBCStats
nvmlVgpuInstanceGetFbUsage
nvmlVgpuInstanceGetFrameRateLimit
nvmlVgpuInstanceGetGpuInstanceId
nvmlVgpuInstanceGetGpuPciId
nvmlVgpuInstanceGetLicenseInfo
nvmlVgpuInstanceGetLicenseInfo_v2
nvmlVgpuInstanceGetLicenseStatus
nvmlVgpuInstanceGetMdevUUID
nvmlVgpuInstanceGetMetadata
nvmlVgpuInstanceGetType
nvmlVgpuInstanceGetUUID
nvmlVgpuInstanceGetVmDriverVersion
nvmlVgpuInstanceGetVmID
nvmlVgpuInstanceSetEncoderCapacity
nvmlVgpuTypeGetCapabilities
nvmlVgpuTypeGetClass
nvmlVgpuTypeGetDeviceID
nvmlVgpuTypeGetFrameRateLimit
nvmlVgpuTypeGetFramebufferSize
nvmlVgpuTypeGetGpuInstanceProfileId
nvmlVgpuTypeGetLicense
nvmlVgpuTypeGetMaxInstances
nvmlVgpuTypeGetMaxInstancesPerVm
nvmlVgpuTypeGetName
nvmlVgpuTypeGetNumDisplayHeads
nvmlVgpuTypeGetResolution

Sections

.text
Size: 835KB - Virtual size: 834KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

17e5e2a33bc63407e0361cd0d7d72a1d

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0d:01:94:cd:1e:31:42:20:51:35:d1:c6:36:e4:e9:baCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

33:00:00:01:09:5e:de:a2:12:7e:92:81:cc:00:00:00:00:01:09Certificate

Extended Key Usages

61:0b:aa:c1:00:00:00:00:00:09Certificate

Key Usages

14:cd:da:39:6f:72:94:d0:ed:5e:84:13:4e:86:0a:e1:31:5f:cd:99:72:02:8c:95:58:02:60:e4:38:a0:5d:b0Signer

14:cd:da:39:6f:72:94:d0:ed:5e:84:13:4e:86:0a:e1:31:5f:cd:99:72:02:8c:95:58:02:60:e4:38:a0:5d:b0Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

Exports

Exports

Sections

.text Size: 835KB - Virtual size: 834KB

.rdata Size: 66KB - Virtual size: 65KB

.data Size: 5KB - Virtual size: 10KB

.pdata Size: 5KB - Virtual size: 4KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 1024B - Virtual size: 896B

.reloc Size: 2KB - Virtual size: 2KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0d:01:94:cd:1e:31:42:20:51:35:d1:c6:36:e4:e9:ba
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

33:00:00:01:09:5e:de:a2:12:7e:92:81:cc:00:00:00:00:01:09
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

14:cd:da:39:6f:72:94:d0:ed:5e:84:13:4e:86:0a:e1:31:5f:cd:99:72:02:8c:95:58:02:60:e4:38:a0:5d:b0
Signer

14:cd:da:39:6f:72:94:d0:ed:5e:84:13:4e:86:0a:e1:31:5f:cd:99:72:02:8c:95:58:02:60:e4:38:a0:5d:b0
Signer

.text
Size: 835KB - Virtual size: 834KB

.rdata
Size: 66KB - Virtual size: 65KB

.data
Size: 5KB - Virtual size: 10KB

.pdata
Size: 5KB - Virtual size: 4KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 1024B - Virtual size: 896B

.reloc
Size: 2KB - Virtual size: 2KB