2024-04-10_2eb93d61c94370633fdbfc560f6602d1_icedid_vidar

Sharing

Copy URL

Twitter E-mail

General

Target

2024-04-10_2eb93d61c94370633fdbfc560f6602d1_icedid_vidar
Size

4.3MB
MD5

2eb93d61c94370633fdbfc560f6602d1
SHA1

4e76a32a2e3cc8912565eb4b0b551a6d6c7961c8
SHA256

8b522ed2fdce3c18b938ee934c47102573ad835bf6f6b63bd4962b63fbea5164
SHA512

3bdcd720744dd8a944e08c842192e6772caa6a4c03ae3e768a41276f7203af705004a8c9747e295dfb1380cc9f04a4bb8748182b1efdb1206227c8e437da7b4e
SSDEEP

49152:TZISWXYnqgKGwoSPre9ivNjfTrr4JRbJkfpsuhQmfRyQK4IPomZl+UQPO:VI1PCMbT+3kfps4qQK4IPl+fPO

Score

1^/10

Malware Config

Signatures

Files

2024-04-10_2eb93d61c94370633fdbfc560f6602d1_icedid_vidar
.exe windows:5 windows x86 arch:x86

5a6fbc0ca6b355c4b718d5b03387161e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

3d:fe:0b:a5:5d:e3:a3:0c:4b:df:c4:e7:9e:5d:8d:c9
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

22-04-2014 00:00

Not After

21-07-2017 23:59

Subject

CN=FlashPeak Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=FlashPeak Inc,L=Austin,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

a3:ed:dd:64:e7:c2:dd:bf:11:5c:c9:a3:32:de:50:41:43:4e:9d:d0
Signer

Actual PE Digest

a3:ed:dd:64:e7:c2:dd:bf:11:5c:c9:a3:32:de:50:41:43:4e:9d:d0

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

e:\vc_temp\SBFrame\ReleaseU\sbframe.pdb

Imports

shlwapi

PathRemoveFileSpecW
StrStrW
UrlUnescapeW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathCompactPathW
SHDeleteKeyW
StrToIntW
PathFindExtensionW
PathFileExistsW
StrRetToStrW
StrStrIW

winmm

PlaySoundW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

psapi

GetProcessMemoryInfo
EnumProcessModules
EnumProcesses
GetModuleFileNameExW
EmptyWorkingSet

iphlpapi

GetAdaptersInfo

kernel32

CreateMutexW
GlobalSize
SetCurrentDirectoryW
GetTimeFormatW
GetDateFormatW
GetVersionExA
CompareStringW
GlobalFindAtomW
GetProfileIntW
GetModuleHandleA
lstrcmpA
SetThreadPriority
ResumeThread
SuspendThread
GlobalGetAtomNameW
GetUserDefaultLCID
GetStringTypeExW
GetThreadLocale
GetShortPathNameW
VirtualProtect
CompareStringA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
GlobalFlags
TlsGetValue
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetFileInformationByHandle
GetSystemDirectoryW
LocalFileTimeToFileTime
GetStartupInfoW
RtlUnwind
UnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualQuery
HeapReAlloc
ExitThread
CreateThread
SetStdHandle
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
GetACP
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetTimeFormatA
GetDateFormatA
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
FileTimeToDosDateTime
GetCurrentDirectoryW
DosDateTimeToFileTime
DuplicateHandle
GetFileType
LocalLock
LocalUnlock
LocalAlloc
CreateFileMappingW
MapViewOfFile
GetSystemInfo
CreateFileA
UnmapViewOfFile
GetDiskFreeSpaceW
GetDiskFreeSpaceA
GetFullPathNameW
GetFullPathNameA
GetFileAttributesExW
DeleteFileA
GetFileAttributesA
GetTempPathA
GetFileSize
FlushFileBuffers
SetEndOfFile
ReadFile
SetFilePointer
FormatMessageA
GetSystemTimeAsFileTime
QueryPerformanceCounter
ReleaseMutex
UnlockFileEx
LockFileEx
LockFile
UnlockFile
InterlockedCompareExchange
GetLocalTime
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
SetErrorMode
GetCommandLineW
GetDriveTypeW
InterlockedIncrement
SetPriorityClass
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrcpyW
GetFileAttributesW
InterlockedExchange
WritePrivateProfileStringW
LocalFree
GetVolumeInformationW
FindNextChangeNotification
FindFirstChangeNotificationW
ResetEvent
GlobalMemoryStatusEx
GetWindowsDirectoryW
GlobalAddAtomW
GlobalDeleteAtom
lstrcmpW
GetPrivateProfileIntW
GetTickCount
FindCloseChangeNotification
lstrcpynW
SetFileAttributesW
TerminateProcess
WriteFile
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
Sleep
GetFileSizeEx
AreFileApisANSI
SetEvent
GetLocaleInfoW
GetExitCodeProcess
GetSystemTime
MoveFileW
LoadLibraryExW
GetTempFileNameW
CreateEventW
WaitForMultipleObjects
FormatMessageW
GetTempPathW
GetPrivateProfileStringW
GetModuleFileNameW
RemoveDirectoryW
FindNextFileW
ExpandEnvironmentStringsW
SystemTimeToFileTime
SetFileTime
LCMapStringW
GetCurrentProcessId
GetFileTime
CompareFileTime
CreateFileW
CreateProcessW
WaitForSingleObject
ExitProcess
MulDiv
FindFirstFileW
FindClose
WideCharToMultiByte
OpenProcess
CloseHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalAlloc
GlobalReAlloc
GlobalFree
GetUserDefaultUILanguage
FreeLibrary
FreeResource
GetCPInfo
lstrlenA
lstrlenW
lstrcmpiW
GetVersion
GetVersionExW
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
EnterCriticalSection
LeaveCriticalSection
CopyFileW
DeleteFileW
InterlockedDecrement
CreateDirectoryW
GlobalLock
GlobalUnlock
GetLastError
SetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
LoadLibraryA
ExpandEnvironmentStringsA

user32

ShowOwnedPopups
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
PostQuitMessage
PostThreadMessageW
SetWindowContextHelpId
MapDialogRect
LoadAcceleratorsW
InsertMenuItemW
TranslateAcceleratorW
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
GetMessageW
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SendDlgItemMessageA
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
GetClassInfoExW
GetClassInfoW
SetWindowPlacement
SystemParametersInfoA
GetWindowPlacement
SetActiveWindow
CreateDialogIndirectParamW
HideCaret
ShowCaret
CreateCaret
SetCaretPos
GetScrollInfo
SetScrollInfo
GetUpdateRect
ScrollWindow
IsWindowEnabled
GetWindowTextLengthW
IsDlgButtonChecked
DialogBoxParamW
GetDlgItemInt
SetDlgItemTextW
SetDlgItemInt
SendDlgItemMessageW
CreateDialogParamW
DestroyCaret
VkKeyScanW
GetKeyboardState
ToAscii
IsDialogMessageW
DialogBoxIndirectParamW
CheckDlgButton
SetWindowTextW
EndDialog
WinHelpW
GetDialogBaseUnits
DrawIcon
RegisterClassW
CreateWindowExW
BringWindowToTop
TileWindows
GetWindowDC
SetCursorPos
SendInput
CharLowerBuffW
UnregisterClassW
RegisterHotKey
GetClassLongW
BeginDeferWindowPos
EndDeferWindowPos
FindWindowExW
LoadCursorFromFileW
SetMenuItemInfoW
MenuItemFromPoint
AdjustWindowRect
IsChild
SetPropW
RemovePropW
GetPropW
CallWindowProcW
wsprintfW
GetMenuStringW
TrackPopupMenu
EndPaint
BeginPaint
UnpackDDElParam
ReuseDDElParam
SetClassLongW
SendMessageTimeoutW
DestroyMenu
GetDlgCtrlID
MonitorFromWindow
TrackPopupMenuEx
SetForegroundWindow
GetLastActivePopup
GetSystemMenu
UnregisterHotKey
IntersectRect
LoadMenuW
UpdateWindow
CheckMenuRadioItem
DestroyWindow
GetTopWindow
RegisterClipboardFormatW
EnumWindows
GetWindowThreadProcessId
GetWindowTextW
GetDlgItem
EnumThreadWindows
MessageBeep
CheckMenuItem
ShowWindow
SetParent
MoveWindow
GetWindow
GetForegroundWindow
GetMenu
ChildWindowFromPoint
MsgWaitForMultipleObjects
EnableWindow
SendMessageW
PostMessageW
GetClientRect
GetClassNameW
LoadStringW
IsClipboardFormatAvailable
GetClipboardData
DefWindowProcW
LoadIconW
MessageBoxW
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
SetMenuInfo
GetKeyState
CharLowerW
CharUpperW
CharNextW
UnionRect
FindWindowW
PeekMessageW
DispatchMessageW
TranslateMessage
AdjustWindowRectEx
IsIconic
DrawMenuBar
SetWindowLongW
SetWindowPos
IsZoomed
DestroyCursor
SetCursor
GetWindowLongW
WindowFromPoint
GetNextDlgTabItem
GetActiveWindow
DrawFocusRect
FrameRect
DrawStateW
IsMenu
GetMenuItemInfoW
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetDesktopWindow
RemoveMenu
ModifyMenuW
GetMenuItemID
GetMenuItemCount
DeleteMenu
CreateMenu
DrawEdge
LoadBitmapW
SetRect
CreateIconIndirect
AppendMenuW
CreatePopupMenu
GetDC
DrawIconEx
GetIconInfo
GetSysColor
InvalidateRect
IsWindowVisible
GetComboBoxInfo
IsWindow
DestroyIcon
LoadImageW
GetWindowRect
GetSubMenu
ScreenToClient
GetCursorPos
SetFocus
GetFocus
GetParent
GetAsyncKeyState
InsertMenuW
GetMenuState
GetMenuBarInfo
GetCaretPos
FillRect
DeferWindowPos
RegisterWindowMessageW
ReleaseDC
GetDCEx
CopyRect
OffsetRect
EnableMenuItem
LockWindowUpdate
SetTimer
KillTimer
ClientToScreen
UnhookWindowsHookEx
IsRectEmpty
PtInRect
SetRectEmpty
DrawFrameControl
SetWindowRgn
RedrawWindow
GetCapture
SetCapture
GetMonitorInfoW
MonitorFromPoint
RegisterClassExW
GetSysColorBrush
LoadCursorW
ReleaseCapture
SetWindowsHookExW
GetSystemMetrics
SystemParametersInfoW
CallNextHookEx
InflateRect
EqualRect

gdi32

ScaleViewportExtEx
SetViewportExtEx
GetRgnBox
UnrealizeObject
SetWindowOrgEx
LPtoDP
CreateEllipticRgn
DPtoLP
GetMapMode
SetRectRgn
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
DeleteObject
StretchBlt
FrameRgn
CreateCompatibleDC
OffsetRgn
EqualRgn
CombineRgn
CreateRoundRectRgn
CreatePolygonRgn
CreateRectRgn
CreateCompatibleBitmap
GetObjectW
CreateSolidBrush
GetStockObject
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetTextAlign
IntersectClipRect
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetROP2
CreateFontIndirectW
SelectObject
GetTextExtentPoint32W
MoveToEx
LineTo
StretchDIBits
GetCharWidthW
CopyMetaFileW
GetClipBox
SaveDC
RestoreDC
GetTextExtentExPointW
SetAbortProc
StartDocW
EndDoc
StartPage
EndPage
GetTextMetricsW
CreateDCW
GetTextCharset
GetTextColor
CreateFontW
GetCurrentObject
FillRgn
Polygon
CreateRectRgnIndirect
RoundRect
SetBkMode
GetBkColor
GetDIBColorTable
GetDIBits
SetDIBits
ExtCreateRegion
CreatePatternBrush
SetBkColor
SetTextColor
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateDIBSection
BitBlt
PatBlt
Rectangle
Ellipse
GetBkMode
GetDeviceCaps
CreatePen
CreateBitmap
GetPixel
SetPixel
DeleteDC

msimg32

TransparentBlt
AlphaBlend

comdlg32

PrintDlgW
PageSetupDlgW
GetFileTitleW

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegCreateKeyW
GetFileSecurityW
SetFileSecurityW
RegQueryValueW
RegSetValueW
RegOpenKeyExA
RegQueryValueExA
CryptAcquireContextW
CryptEncrypt
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDestroyHash
CryptDecrypt
CryptDestroyKey
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyW
CryptReleaseContext
RegEnumKeyExW
RegOpenKeyW
RegSetValueExW
RegCloseKey

shell32

ExtractIconW
ord165
SHGetDesktopFolder
SHGetMalloc
SHChangeNotify
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetFolderPathW
ShellExecuteW
SHGetSpecialFolderPathW
SHAppBarMessage
ord680
SHFileOperationW
ShellExecuteExW
SHGetFileInfoW
SHGetFolderLocation
Shell_NotifyIconW
DragFinish
DragQueryFileW
SHGetPathFromIDListW

comctl32

_TrackMouseEvent
ord17
ord8
ImageList_GetIconSize

oledlg

OleUIBusyW

ole32

CoCreateInstance
CoTaskMemFree
StringFromCLSID
CLSIDFromProgID
CreateBindCtx
CoGetMalloc
GetRunningObjectTable
CoCreateGuid
CreateStreamOnHGlobal
CLSIDFromString
OleRun
CoTaskMemAlloc
CoTaskMemRealloc
CoRevokeClassObject
CoRegisterClassObject
CoGetClassObject
StringFromGUID2
CoInitializeEx
OleInitialize
RevokeDragDrop
DoDragDrop
RegisterDragDrop
ReleaseStgMedium
OleDuplicateData
CoLockObjectExternal
OleGetClipboard
OleIsCurrentClipboard
OleFlushClipboard
CoDisconnectObject
CoRegisterMessageFilter
OleUninitialize
CoFreeUnusedLibraries
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoUninitialize

oleaut32

GetErrorInfo
SafeArrayCreateVector
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
SysFreeString
SysAllocStringLen
SysAllocString
VariantInit
VariantClear
VarDateFromStr
VariantChangeType
SysStringLen
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
VarBstrCmp
VariantCopy
OleCreateFontIndirect
DispCallFunc
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate

urlmon

UrlMkGetSessionOption
CreateURLMoniker
URLDownloadToFileW

gdiplus

GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipCreateFromHDC
GdipDrawImageRectI
GdipGetImageHeight
GdipCloneImage
GdipCreateHICONFromBitmap
GdiplusStartup
GdipDeleteMatrix
GdipDeleteBrush
GdipCreatePen1
GdipDeletePen
GdipCreatePath
GdipDeletePath
GdipSetPathGradientCenterColor
GdipGetPathGradientPointCount
GdipSetPathGradientSurroundColorsWithCount
GdipSetPathGradientBlend
GdipSaveImageToFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateMatrix
GdipRotateMatrix
GdipTranslateMatrix
GdipCreateSolidFill
GdipCreateTexture
GdipSetPenColor
GdipAddPathLineI
GdipAddPathArcI
GdipAddPathRectangle
GdipGetImageWidth
GdipCreatePathGradientFromPath
GdipGetImageGraphicsContext
GdipSetInterpolationMode
GdipSetSmoothingMode
GdipSetWorldTransform
GdipResetWorldTransform
GdipDrawRectangle
GdipGraphicsClear
GdipFillRectangle
GdipFillRectangleI
GdipFillPath
GdipDrawImageRectRectI
GdipSetClipRect
GdipResetClip
GdipCloneBitmapAreaI
GdipCloneBrush
GdipCreateBitmapFromHBITMAP
GdipCreateHBITMAPFromBitmap
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipImageRotateFlip
GdiplusShutdown
GdipGetPropertySize
GdipGetAllPropertyItems
GdipSetPropertyItem
GdipCreateLineBrushI
GdipDrawLineI
GdipDrawRectangleI
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageRectRect
GdipAddPathEllipseI

wininet

HttpOpenRequestW
InternetOpenUrlW
InternetConnectW
FtpCommandW
FtpOpenFileW
HttpSendRequestExW
HttpEndRequestW
HttpSendRequestW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW
HttpAddRequestHeadersW
FtpRenameFileW
FtpDeleteFileW
InternetQueryDataAvailable
InternetCrackUrlW
InternetSetCookieExW
InternetQueryOptionW
FindFirstUrlCacheEntryW
InternetCanonicalizeUrlW
InternetSetOptionW
GetUrlCacheEntryInfoW
InternetGetConnectedState
DeleteUrlCacheEntryW
GetUrlCacheEntryInfoExW
FindCloseUrlCache
FindNextUrlCacheEntryW

Exports

Exports

SetLangCache

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 695KB - Virtual size: 695KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 853KB - Virtual size: 852KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a6fbc0ca6b355c4b718d5b03387161e

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

3d:fe:0b:a5:5d:e3:a3:0c:4b:df:c4:e7:9e:5d:8d:c9Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

a3:ed:dd:64:e7:c2:dd:bf:11:5c:c9:a3:32:de:50:41:43:4e:9d:d0Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shlwapi

winmm

version

psapi

iphlpapi

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

urlmon

gdiplus

wininet

Exports

Exports

Sections

.text Size: 2.7MB - Virtual size: 2.7MB

.rdata Size: 695KB - Virtual size: 695KB

.data Size: 36KB - Virtual size: 85KB

.rsrc Size: 853KB - Virtual size: 852KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

3d:fe:0b:a5:5d:e3:a3:0c:4b:df:c4:e7:9e:5d:8d:c9
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

a3:ed:dd:64:e7:c2:dd:bf:11:5c:c9:a3:32:de:50:41:43:4e:9d:d0
Signer

.text
Size: 2.7MB - Virtual size: 2.7MB

.rdata
Size: 695KB - Virtual size: 695KB

.data
Size: 36KB - Virtual size: 85KB

.rsrc
Size: 853KB - Virtual size: 852KB