34687365f02c859f64defc2d59f9088a_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

34687365f02c859f64defc2d59f9088a_JaffaCakes118
Size

19.8MB
MD5

34687365f02c859f64defc2d59f9088a
SHA1

55897052ae547643cf87066096f0581c3cb7308e
SHA256

05bcb513bd58c822acde97389dd4d3f72f69082e47421a5f16e42766e91a1e04
SHA512

02e70ea5fb7d706cfe12e006ccdb778e14548f0bedf0c8ffe19c04d9a82d162e6ce58375ee7328d2c4708fd4a450e3d70af3c7891fdcaaceaf70565379dc20b7
SSDEEP

393216:bRzXiXYAG9k9iLJPnn6Vni/Xg/Wb/gmMNl5OniI6nKzLG9u2TJqmnR88jQVeZnfI:K2OVni/Xg/Wb/gmMNl5OniI6nKzLG9uH

Score

1^/10

Malware Config

Signatures

Files

34687365f02c859f64defc2d59f9088a_JaffaCakes118
.exe windows:5 windows x64 arch:x64

a2c0765fd4b85c43151ced510d5695e1

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

52:63:60:54:4b:35:43:41:5c:11:5c:63:eb:14:22:26
Certificate

Issuer

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Not Before

14/09/2016, 00:00

Not After

14/12/2018, 23:59

Subject

CN=SCS Software s.r.o.,O=SCS Software s.r.o.,L=Prague,ST=Czech Republic,C=CZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:63:60:54:4b:35:43:41:5c:11:5c:63:eb:14:22:26
Certificate

Issuer

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Not Before

14/09/2016, 00:00

Not After

14/12/2018, 23:59

Subject

CN=SCS Software s.r.o.,O=SCS Software s.r.o.,L=Prague,ST=Czech Republic,C=CZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02/01/2017, 00:00

Not After

01/04/2028, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

7e:45:c9:0c:2a:8e:5b:4a:25:12:63:dc:54:cf:5f:ae:ca:26:8d:7f:e4:de:1a:63:2b:18:da:8f:9f:24:02:b6
Signer

Actual PE Digest

7e:45:c9:0c:2a:8e:5b:4a:25:12:63:dc:54:cf:5f:ae:ca:26:8d:7f:e4:de:1a:63:2b:18:da:8f:9f:24:02:b6

Digest Algorithm

sha256

PE Digest Matches

false

dc:0e:fb:10:c9:0a:c7:3b:f5:e1:2d:67:a7:94:49:77:07:f9:3d:5f
Signer

Actual PE Digest

dc:0e:fb:10:c9:0a:c7:3b:f5:e1:2d:67:a7:94:49:77:07:f9:3d:5f

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

f:\build_bot\ssd_win_slave\final_build_ets2_130_oversize_windows_bin_steam_x64\build\prism\obj\x64\eurotrucks\Steam\eurotrucks\exe_ets\eurotrucks.pdb

Imports

steam_api64

SteamAPI_UnregisterCallback
SteamAPI_RunCallbacks
SteamAPI_RegisterCallback
SteamAPI_UnregisterCallResult
SteamAPI_RegisterCallResult
SteamAPI_Shutdown
SteamAPI_InitSafe
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamClient

kernel32

ExitThread
SystemTimeToTzSpecificLocalTime
GetFullPathNameW
GetDriveTypeW
LoadLibraryA
GetThreadTimes
GetModuleHandleA
GlobalUnlock
GlobalFree
GlobalLock
GlobalAlloc
VirtualFree
VirtualUnlock
VirtualLock
VirtualAlloc
GetNativeSystemInfo
SetThreadAffinityMask
GetProcessAffinityMask
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
SetThreadIdealProcessor
SetThreadPriority
ResumeThread
SwitchToThread
GetSystemInfo
SetEndOfFile
MoveFileExW
RemoveDirectoryW
CreateDirectoryW
GetFileInformationByHandle
DeleteFileW
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateIoCompletionPort
FindFirstFileW
ResetEvent
CreateProcessW
ReadFile
PeekNamedPipe
GetTickCount
QueryPerformanceFrequency
ReleaseSemaphore
CreateSemaphoreW
SetEvent
WaitForSingleObject
CreateEventW
TryEnterCriticalSection
InitializeCriticalSection
SetCurrentDirectoryW
GetLongPathNameW
GetTempPathW
GetCurrentDirectoryW
LoadLibraryW
GetVersionExW
Sleep
RaiseException
CreateFileW
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
HeapReAlloc
HeapSize
GetStringTypeW
SetStdHandle
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
InterlockedPushEntrySList
CreateThread
WaitForSingleObjectEx
CloseHandle
OutputDebugStringW
OutputDebugStringA
GetFileType
GetProcessHeap
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindNextFileA
FindFirstFileExA
FindClose
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetCurrentThread
HeapAlloc
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FormatMessageW
EncodePointer
DecodePointer
RtlPcToFileHeader
FileTimeToSystemTime
FreeLibraryAndExitThread
ReadConsoleW
GetTimeZoneInformation
VerSetConditionMask
VerifyVersionInfoW
SetFilePointer
GlobalMemoryStatusEx
IsBadCodePtr
IsBadReadPtr
VirtualQuery
CreateMutexW
FindResourceW
LoadResource
LockResource
FreeResource
SizeofResource
GetUserDefaultLangID
GetSystemDefaultLangID
GetSystemDirectoryA
SetThreadExecutionState
MulDiv
FreeConsole
AttachConsole
GetConsoleScreenBufferInfo
ReadConsoleOutputCharacterA
SetConsoleCursorPosition
FillConsoleOutputCharacterW
WriteConsoleA
GlobalSize
SetErrorMode
LocalFree
GetEnvironmentVariableW
GetFileAttributesW
GetTempFileNameW
GetFileTime
CopyFileW
ExpandEnvironmentStringsW
WaitForMultipleObjects
SuspendThread
ReleaseMutex
GetOverlappedResult
CreateFileA
CancelIo
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetCommandLineA
GetCommandLineW
GetCurrentProcess
ExitProcess
TerminateProcess
HeapFree
GetACP
WriteFile
GetStdHandle
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameW
GetModuleFileNameA
GetModuleHandleExW

shell32

DragFinish
ShellExecuteExW
SHGetMalloc
SHGetPathFromIDListW
DragQueryFileW
DragAcceptFiles
ExtractIconW
ExtractIconExW
DragQueryPoint
SHBrowseForFolderW
SHGetFileInfoW
SHGetFolderPathW
ShellExecuteW

user32

DrawTextW
DrawFocusRect
SetRectEmpty
OffsetRect
DrawStateW
CopyRect
GetProcessDefaultLayout
ValidateRect
GetMessageW
PostThreadMessageW
GetWindowTextLengthW
keybd_event
HideCaret
CreateDialogIndirectParamW
BringWindowToTop
IsIconic
IsZoomed
GetWindowPlacement
GetSystemMenu
EnableMenuItem
DrawMenuBar
FlashWindowEx
SetLayeredWindowAttributes
SetWindowRgn
SetMenu
DestroyIcon
MessageBeep
GetWindowTextW
GetClassNameW
GetClipboardFormatNameW
RegisterClipboardFormatW
GetMenuState
CheckMenuRadioItem
CheckMenuItem
SetMenuItemInfoW
DrawEdge
SetRect
GetSysColorBrush
DrawFrameControl
GetSubMenu
GetMenuItemID
CreatePopupMenu
DestroyMenu
InsertMenuItemW
SetMenuInfo
InsertMenuW
RemoveMenu
ModifyMenuW
CreateMenu
AppendMenuW
DestroyAcceleratorTable
CreateAcceleratorTableW
TranslateAcceleratorW
FindWindowExW
DrawIconEx
GetDoubleClickTime
GetComboBoxInfo
GetWindowDC
UnionRect
ChildWindowFromPoint
MonitorFromPoint
MonitorFromWindow
IsRectEmpty
ValidateRgn
GetDialogBaseUnits
GetClassInfoW
MsgWaitForMultipleObjects
CreateIconIndirect
KillTimer
DdeInitializeW
DdeUninitialize
DdeNameService
DdeConnect
DdeDisconnect
DdeClientTransaction
DdeGetData
DdeFreeDataHandle
DdePostAdvise
DdeCreateDataHandle
DdeCreateStringHandleW
DdeQueryStringW
DdeFreeStringHandle
DdeGetLastError
RegisterDeviceNotificationW
UnregisterDeviceNotification
DestroyCursor
GetDlgItem
CreateDialogParamW
UnregisterHotKey
RegisterHotKey
ChildWindowFromPointEx
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
GetActiveWindow
VkKeyScanW
GetMenuItemInfoW
GetMenuItemCount
SystemParametersInfoW
GetMessageTime
EndDeferWindowPos
BeginDeferWindowPos
GetWindow
FillRect
GetUpdateRgn
GetSysColor
InvalidateRect
ReleaseDC
InflateRect
IsWindowVisible
IsWindowEnabled
CallWindowProcW
TrackPopupMenu
PostQuitMessage
MoveWindow
DeferWindowPos
MapWindowPoints
SetParent
GetParent
WindowFromPoint
IsWindow
ScrollWindow
EnableScrollBar
SetScrollInfo
GetScrollInfo
PtInRect
GetCapture
AnimateWindow
EnableWindow
SendMessageW
GetMessagePos
SetWindowLongW
LoadImageW
GetIconInfo
LoadBitmapW
GetCursorPos
GetCursorInfo
wvsprintfW
wsprintfW
SetTimer
LoadCursorW
GetMonitorInfoW
EnumDisplayDevicesW
EnumDisplayDevicesA
GetDC
MonitorFromRect
GetWindowLongPtrW
GetClassLongPtrW
SetWindowTextW
DefWindowProcW
GetKeyState
ShowWindow
GetWindowLongW
GetForegroundWindow
GetFocus
SetCursor
GetClientRect
SetWindowLongPtrW
BeginPaint
EndPaint
LoadIconW
RegisterClassW
EnumDisplaySettingsW
GetClipboardSequenceNumber
UnregisterClassW
MessageBoxW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsClipboardFormatAvailable
GetClipboardData
PeekMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
ChangeDisplaySettingsExW
EnumDisplayMonitors
GetAsyncKeyState
MapVirtualKeyW
GetKeyNameTextW
ClientToScreen
ReleaseCapture
SetCursorPos
ScreenToClient
ShowCursor
SetCapture
SetActiveWindow
AttachThreadInput
SetForegroundWindow
SetFocus
UpdateWindow
GetSystemMetrics
RedrawWindow
GetWindowRect
GetDesktopWindow
PostMessageW
GetWindowThreadProcessId
DestroyWindow
AdjustWindowRectEx
CreateWindowExW
SetWindowPos

gdi32

Ellipse
PolyBezier
GetObjectType
MaskBlt
ExtTextOutW
SetROP2
SetViewportExtEx
SetWindowExtEx
SetViewportOrgEx
SetWindowOrgEx
SetGraphicsMode
SetWorldTransform
GetWorldTransform
ModifyWorldTransform
StretchDIBits
ExtCreatePen
CombineRgn
GetRgnBox
EqualRgn
PtInRegion
RectInRegion
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
CreateDIBSection
GetDIBits
GetDIBColorTable
RoundRect
GetCharABCWidthsW
GetTextExtentExPointW
CreateRectRgnIndirect
CreateICW
EnumFontFamiliesExW
GetEnhMetaFileW
DeleteEnhMetaFile
Rectangle
Polyline
PolyPolygon
Polygon
SetPolyFillMode
SetPixel
Arc
Pie
GetPixel
ExtFloodFill
GetBkColor
SetMapMode
SetDeviceGammaRamp
DeleteDC
GetDeviceGammaRamp
CreateDCW
SetPixelFormat
DescribePixelFormat
ChoosePixelFormat
SwapBuffers
PatBlt
SelectClipRgn
DeleteObject
ExtSelectClipRgn
GetClipBox
SetStretchBltMode
SetLayout
GetLayout
GetTextExtentPoint32W
LineTo
MoveToEx
OffsetRgn
ExtCreateRegion
GetRegionData
CreateHatchBrush
CreatePatternBrush
GetStockObject
CreateSolidBrush
CreatePen
GetDeviceCaps
CreateFontIndirectW
GetOutlineTextMetricsW
CreateCompatibleBitmap
BitBlt
CreateBitmap
SetBkMode
SetBkColor
SetTextColor
StretchBlt
CreateCompatibleDC
GetTextMetricsW
SelectObject
SetBrushOrgEx
CreateRectRgn
RealizePalette
SelectPalette
ExcludeClipRect
GdiFlush
GetObjectW
CreateDIBitmap

advapi32

CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
RegQueryValueExW
RegEnumValueW
RegCloseKey
RegOpenKeyExW
OpenProcessToken
GetTokenInformation
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
GetUserNameW

ole32

CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeEx
OleInitialize
OleUninitialize
CoTaskMemAlloc
OleGetClipboard
OleFlushClipboard
OleSetClipboard
OleIsCurrentClipboard
CoTaskMemFree
ReleaseStgMedium
DoDragDrop
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop

oleaut32

VarBstrFromCy
SysStringLen
SysAllocString
SysFreeString
VariantClear
VarBstrFromDate
VariantInit

ws2_32

ntohl
getsockopt
select
__WSAFDIsSet
WSAGetLastError
WSASetLastError
WSAStartup
WSACleanup
recv
send
inet_addr
gethostbyname
htons
getservbyname
htonl
inet_ntoa
ntohs
getservbyport
gethostbyaddr
connect
socket
ioctlsocket
closesocket

rpcrt4

RpcStringFreeW
UuidToStringW

shlwapi

SHAutoComplete
AssocQueryStringW

comdlg32

GetOpenFileNameW
ChooseFontW
GetSaveFileNameW
ChooseColorW
CommDlgExtendedError

comctl32

ord17
ImageList_GetImageCount
ImageList_Draw
ImageList_GetIconSize
ImageList_Create
ImageList_Destroy
ImageList_Add
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_Replace
ImageList_Remove
ImageList_DragLeave
ImageList_DragMove
ImageList_DragEnter
ImageList_EndDrag
ImageList_SetBkColor
ImageList_GetImageInfo
ord16
ImageList_Copy
ImageList_BeginDrag
ImageList_SetDragCursorImage

msimg32

GradientFill
AlphaBlend

setupapi

SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

winmm

timeGetTime
timeEndPeriod
timeBeginPeriod

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement

Sections

.text
Size: 14.1MB - Virtual size: 14.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 572KB - Virtual size: 919KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 765KB - Virtual size: 765KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 409KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bind
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2c0765fd4b85c43151ced510d5695e1

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cbCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

52:63:60:54:4b:35:43:41:5c:11:5c:63:eb:14:22:26Certificate

Extended Key Usages

Key Usages

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cbCertificate

Extended Key Usages

Key Usages

52:63:60:54:4b:35:43:41:5c:11:5c:63:eb:14:22:26Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6Certificate

Extended Key Usages

Key Usages

7e:45:c9:0c:2a:8e:5b:4a:25:12:63:dc:54:cf:5f:ae:ca:26:8d:7f:e4:de:1a:63:2b:18:da:8f:9f:24:02:b6Signer

dc:0e:fb:10:c9:0a:c7:3b:f5:e1:2d:67:a7:94:49:77:07:f9:3d:5fSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

steam_api64

kernel32

shell32

user32

gdi32

advapi32

ole32

oleaut32

ws2_32

rpcrt4

shlwapi

comdlg32

comctl32

msimg32

setupapi

winmm

Exports

Exports

Sections

.text Size: 14.1MB - Virtual size: 14.1MB

.rdata Size: 3.6MB - Virtual size: 3.6MB

.data Size: 572KB - Virtual size: 919KB

.pdata Size: 765KB - Virtual size: 765KB

.gfids Size: 1024B - Virtual size: 896B

.tls Size: 512B - Virtual size: 9B

_RDATA Size: 3KB - Virtual size: 3KB

.rsrc Size: 409KB - Virtual size: 408KB

.reloc Size: 256KB - Virtual size: 256KB

.bind Size: 147KB - Virtual size: 147KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

52:63:60:54:4b:35:43:41:5c:11:5c:63:eb:14:22:26
Certificate

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

52:63:60:54:4b:35:43:41:5c:11:5c:63:eb:14:22:26
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

7e:45:c9:0c:2a:8e:5b:4a:25:12:63:dc:54:cf:5f:ae:ca:26:8d:7f:e4:de:1a:63:2b:18:da:8f:9f:24:02:b6
Signer

dc:0e:fb:10:c9:0a:c7:3b:f5:e1:2d:67:a7:94:49:77:07:f9:3d:5f
Signer

.text
Size: 14.1MB - Virtual size: 14.1MB

.rdata
Size: 3.6MB - Virtual size: 3.6MB

.data
Size: 572KB - Virtual size: 919KB

.pdata
Size: 765KB - Virtual size: 765KB

.gfids
Size: 1024B - Virtual size: 896B

.tls
Size: 512B - Virtual size: 9B

_RDATA
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 409KB - Virtual size: 408KB

.reloc
Size: 256KB - Virtual size: 256KB

.bind
Size: 147KB - Virtual size: 147KB