2024-05-25_a12351993c6242521a4b9fddb624339e_magniber_virut

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-25_a12351993c6242521a4b9fddb624339e_magniber_virut
Size

2.9MB
MD5

a12351993c6242521a4b9fddb624339e
SHA1

172571db42fb5cdca41ee5c245984132b7205f89
SHA256

421d171a3e8af230f3cbbafe0ac9ec698ab06f6e403baa587a82049ec7c184f5
SHA512

8fdf49e8b6fe2444994d606cd65b9c8e100bc14008e9808bca599970adebd08ee6066776de1275a31788fd69d04e35e6eca369a0982e8f911147fbd6cfbba624
SSDEEP

49152:ppAJ4K/kZCRW6JIAYtBRVXJT8IE1eDvkX6uPh0OR8/dJ388mS5vbv+fH2rJnLs59:cdkyIAYt3VXmeTkquPhO881Vv5Lnd

Score

1^/10

Malware Config

Signatures

Files

2024-05-25_a12351993c6242521a4b9fddb624339e_magniber_virut
.exe windows:5 windows x86 arch:x86

a81994a8e54b90ebc57ddfe905d7f15e

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:1f:3a:05:7a:1d:ce:4b:f7:d7:6d:0c:7a:df:83:7e
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/11/2019, 00:00

Not After

04/02/2023, 12:00

Subject

CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2011, 12:00

Not After

10/02/2026, 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:83:09:ba:16:54:68:50:e6:05:e7:5d:77:3e:56:de
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/11/2019, 00:00

Not After

04/02/2023, 12:00

Subject

CN=Beijing Qihu Technology Co.\, Ltd.,O=Beijing Qihu Technology Co.\, Ltd.,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

28/01/2021, 11:08

Not After

01/03/2032, 11:08

Subject

CN=Globalsign TSA for CodeSign1 - R6,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

8c:a4:cd:c7:e8:06:a6:51:f2:53:5a:16:72:ef:bc:a9:9a:e7:a3:60:e5:df:64:6b:2d:df:e4:47:01:e9:15:c9
Signer

Actual PE Digest

8c:a4:cd:c7:e8:06:a6:51:f2:53:5a:16:72:ef:bc:a9:9a:e7:a3:60:e5:df:64:6b:2d:df:e4:47:01:e9:15:c9

Digest Algorithm

sha256

PE Digest Matches

false

49:8f:69:c0:c2:81:e4:ff:3f:29:41:d0:ca:12:19:8b:93:54:75:70
Signer

Actual PE Digest

49:8f:69:c0:c2:81:e4:ff:3f:29:41:d0:ca:12:19:8b:93:54:75:70

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\vmagent_new\bin\joblist\607790\out\Release\360AblumViewer.pdb

Imports

gdiplus

GdipGetImageWidth
GdipGetImageHeight
GdipCloneImage
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateFromHDC
GdipFree
GdipDisposeImage
GdipCreateBitmapFromGdiDib
GdipDeleteGraphics
GdipCreateHBITMAPFromBitmap
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipSaveImageToFile
GdiplusShutdown
GdiplusStartup
GdipDrawImageRectI
GdipFillRectangleI
GdipCreateBitmapFromScan0
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImagePixelFormat
GdipGetImageRawFormat
GdipGetImageGraphicsContext
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipDrawImageRectRect
GdipReleaseDC
GdipAlloc

kernel32

VirtualFree
FreeLibrary
GetModuleFileNameW
GetProcAddress
LoadLibraryW
SetThreadAffinityMask
GetDateFormatW
GetTimeFormatW
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoW
GetNumberFormatW
GetCurrencyFormatW
EnumCalendarInfoExW
EnumDateFormatsExW
GetSystemDefaultLCID
GetUserDefaultLCID
GetModuleHandleW
LockResource
HeapDestroy
HeapSize
GetProcessHeap
GetCurrentProcessId
DeleteCriticalSection
LoadResource
SizeofResource
FindResourceW
FindResourceExW
GetPrivateProfileIntW
GlobalAlloc
GlobalLock
GlobalUnlock
FileTimeToSystemTime
InitializeCriticalSection
WaitForMultipleObjects
GetFileTime
FindFirstChangeNotificationW
FindNextChangeNotification
FindCloseChangeNotification
FreeResource
FindClose
SetFileTime
TzSpecificLocalTimeToSystemTime
GetTimeZoneInformation
SystemTimeToFileTime
lstrlenW
FindFirstFileW
FindNextFileW
GetVersion
GetShortPathNameW
GetLongPathNameW
GetFileSizeEx
GetTempPathW
RemoveDirectoryW
GetFileAttributesExW
DeleteFileW
QueryPerformanceCounter
QueryPerformanceFrequency
GetVersionExW
InterlockedExchange
InterlockedCompareExchange
LocalFree
GetCurrentProcess
GetCurrentThreadId
GetSystemTime
GetWindowsDirectoryW
VirtualAlloc
GlobalFree
GetFileSize
ReadFile
GetFileAttributesA
DeleteFileA
MulDiv
WriteFile
MoveFileW
OutputDebugStringW
InterlockedDecrement
lstrcmpiW
GetSystemWindowsDirectoryW
lstrcmpA
lstrcmpiA
SetEndOfFile
SetFilePointer
GetLocalTime
GetThreadLocale
FormatMessageW
CreateDirectoryW
CopyFileW
GetCommandLineW
ExpandEnvironmentStringsW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileSectionW
CreateProcessW
SystemTimeToTzSpecificLocalTime
MoveFileExW
TlsAlloc
SwitchToThread
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
IsDebuggerPresent
VirtualQuery
GetNativeSystemInfo
GetSystemDirectoryW
TlsSetValue
TlsFree
LCMapStringW
GetTickCount
GetSystemTimeAsFileTime
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
LocalFileTimeToFileTime
CreateFileA
SetFilePointerEx
HeapLock
HeapUnlock
HeapWalk
OpenThread
ReleaseMutex
RtlUnwind
InterlockedFlushSList
ExitProcess
GetModuleHandleExW
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetACP
GetCommandLineA
GetSystemInfo
GetThreadTimes
TerminateProcess
GetProcessTimes
CreateWaitableTimerW
CreateSemaphoreW
Sleep
CreateEventW
CreateEventA
CreateMutexW
CreateMutexA
WaitForSingleObjectEx
WaitForSingleObject
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CancelIo
DeviceIoControl
TlsGetValue
HeapFree
HeapReAlloc
HeapAlloc
SetErrorMode
SetLastError
GetLastError
RaiseException
CloseHandle
AreFileApisANSI
GetVolumePathNamesForVolumeNameW
GetVolumeNameForVolumeMountPointW
GetFullPathNameW
GetFileAttributesW
CreateFileW
GetStdHandle
GetCurrentThread
GetConsoleCP
GetConsoleMode
VirtualProtect
GetFileType
IsValidLocale
EnumSystemLocalesW
ReadConsoleW
FlushFileBuffers
IsValidCodePage
GetOEMCP
SetStdHandle
WriteConsoleW
SetConsoleCtrlHandler
FindFirstFileExA
FindFirstFileExW
FindNextFileA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
OutputDebugStringA
ReleaseSemaphore
SignalObjectAndWait
CreateSemaphoreA
GetModuleFileNameA
TryEnterCriticalSection
HeapQueryInformation
SetThreadPriority
GetThreadPriority
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetProcessAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetModuleHandleA
SetProcessAffinityMask
DuplicateHandle
QueryDepthSList
UnregisterWaitEx
CreateTimerQueue
WaitForMultipleObjectsEx
InterlockedIncrement
RtlCaptureStackBackTrace

user32

MapWindowPoints
GetWindowRect
SetWindowTextW
TrackPopupMenu
GetParent
SetWindowPos
LoadCursorW
SetWindowLongW
GetWindowLongW
PtInRect
CopyRect
FillRect
GetWindow
LoadImageW
MonitorFromWindow
GetMonitorInfoW
InflateRect
GetMenuStringW
GetSubMenu
GetMenuItemID
GetMenuItemCount
AppendMenuW
DeleteMenu
SetMenuItemInfoW
OffsetRect
CharLowerBuffW
EqualRect
SendMessageTimeoutW
UnregisterClassW
DestroyWindow
CharNextW
ShowCursor
EnumWindows
SetFocus
EnableWindow
EnumDisplayMonitors
SetCapture
ScreenToClient
GetCursorPos
SetCursor
GetClientRect
GetWindowTextW
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetSystemMetrics
GetDlgItem
CallWindowProcW
ReleaseCapture
BeginPaint
EndPaint
IsWindowVisible
CreateWindowExW
ShowWindow
SetPropW
GetPropW
RemovePropW
GetSysColor
MonitorFromPoint
SetTimer
KillTimer
SetCursorPos
ClientToScreen
UpdateWindow
LoadMenuW
DestroyMenu
CheckMenuItem
MoveWindow
PeekMessageW
AttachThreadInput
GetWindowPlacement
SetWindowPlacement
IsZoomed
IsClipboardFormatAvailable
IsWindowEnabled
DefWindowProcW
TrackMouseEvent
GetForegroundWindow
SetForegroundWindow
EndDialog
EnableMenuItem
SetClassLongW
GetKeyState
PostMessageW
SystemParametersInfoW
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
IsWindow
SendMessageW
MessageBoxW
GetActiveWindow
IsRectEmpty
IntersectRect
GetWindowThreadProcessId
DialogBoxParamW

gdi32

SelectClipRgn
ExtCreatePen
SetROP2
ExtSelectClipRgn
ExcludeClipRect
CreateRectRgn
BitBlt
TextOutW
GetTextExtentPoint32W
CreateCompatibleDC
CreateCompatibleBitmap
MoveToEx
LineTo
GetObjectW
EndPage
StartPage
EndDoc
StartDocW
StretchDIBits
ExtTextOutW
SetMapMode
CreateSolidBrush
DeleteDC
DeleteObject
SelectObject
SetBkMode
SetTextColor
GetTextMetricsW
CreateFontW
CreateFontIndirectW
GetDeviceCaps
GetStockObject
Rectangle
SetDIBitsToDevice
GetTextFaceW
DPtoLP
CreateDCW
CreatePen
SetBkColor
IntersectClipRect

winspool.drv

DeviceCapabilitiesW

comdlg32

PrintDlgExW
GetOpenFileNameW
GetSaveFileNameW

advapi32

FreeSid
RevertToSelf
RegCloseKey
RegCreateKeyExA
RegCreateKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
ConvertSidToStringSidW
LookupAccountNameW
RegSetKeySecurity
RegGetKeySecurity
GetSecurityDescriptorDacl
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
GetAce
AddAce
GetAclInformation
InitializeAcl
RegDeleteKeyA
AllocateAndInitializeSid
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
ImpersonateSelf

shell32

ShellExecuteW
ord102
SHCreateDirectoryExW
SHGetDesktopFolder
ord232
SHFileOperationW
SHGetFolderPathW
ord17
ord16
ord155
ord18
DragQueryFileW
ord165
SHChangeNotify
SHGetSpecialFolderPathW
DragFinish
SHGetFolderLocation
DragAcceptFiles

ole32

CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize

oleaut32

VariantInit
VariantClear
VarUI4FromStr
SysAllocString
SysFreeString

shlwapi

SHQueryValueExA
SHDeleteKeyW
SHDeleteKeyA
SHQueryValueExW
SHCopyKeyA
SHCopyKeyW
PathAppendW
PathCombineW
PathFileExistsW
PathRemoveFileSpecW
SHGetValueW
StrCmpLogicalW
PathAddBackslashW
PathFindExtensionW
StrToIntExW
SHGetValueA
PathIsDirectoryW
PathFindFileNameW

ws2_32

WSASetLastError
select
htonl
ntohs
__WSAFDIsSet

version

GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoA
VerQueryValueW
GetFileVersionInfoW

psapi

EnumProcessModules
EnumPageFilesA
EnumPageFilesW
GetPerformanceInfo
GetDeviceDriverFileNameW
GetDeviceDriverFileNameA
GetDeviceDriverBaseNameW
GetDeviceDriverBaseNameA
EnumDeviceDrivers
GetMappedFileNameA
GetMappedFileNameW
InitializeProcessForWsWatch
QueryWorkingSet
EmptyWorkingSet
GetModuleBaseNameW
GetModuleBaseNameA
GetProcessImageFileNameW
GetProcessImageFileNameA
GetWsChanges
GetModuleFileNameExW
GetModuleFileNameExA

setupapi

SetupDiSetDeviceRegistryPropertyW
SetupDiGetClassRegistryPropertyW
SetupDiGetDeviceRegistryPropertyW
SetupDiSetClassRegistryPropertyW

comctl32

InitCommonControlsEx

msimg32

AlphaBlend

secur32

GetUserNameExW

netapi32

Netbios

wintrust

WTHelperProvDataFromStateData
WinVerifyTrust

crypt32

CertGetNameStringW

Exports

Exports

de265_alloc_image_plane
de265_change_framerate
de265_decode
de265_decode_data
de265_disable_logging
de265_flush_data
de265_free
de265_free_decoder
de265_free_image_plane
de265_get_bits_per_pixel
de265_get_chroma_format
de265_get_current_TID
de265_get_default_image_allocation_functions
de265_get_error_text
de265_get_highest_TID
de265_get_image_NAL_header
de265_get_image_PTS
de265_get_image_colour_primaries
de265_get_image_full_range_flag
de265_get_image_height
de265_get_image_matrix_coefficients
de265_get_image_plane
de265_get_image_plane_user_data
de265_get_image_transfer_characteristics
de265_get_image_user_data
de265_get_image_width
de265_get_next_picture
de265_get_number_of_NAL_units_pending
de265_get_number_of_input_bytes_pending
de265_get_parameter_bool
de265_get_version
de265_get_version_number
de265_get_version_number_maintenance
de265_get_version_number_major
de265_get_version_number_minor
de265_get_warning
de265_init
de265_isOK
de265_new_decoder
de265_peek_next_picture
de265_push_NAL
de265_push_data
de265_push_end_of_NAL
de265_push_end_of_frame
de265_release_next_picture
de265_reset
de265_set_framerate_ratio
de265_set_image_allocation_functions
de265_set_image_plane
de265_set_image_user_data
de265_set_limit_TID
de265_set_parameter_bool
de265_set_parameter_int
de265_set_verbosity
de265_start_worker_threads

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 425KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a81994a8e54b90ebc57ddfe905d7f15e

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:1f:3a:05:7a:1d:ce:4b:f7:d7:6d:0c:7a:df:83:7eCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0c:83:09:ba:16:54:68:50:e6:05:e7:5d:77:3e:56:deCertificate

Extended Key Usages

Key Usages

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37Certificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

8c:a4:cd:c7:e8:06:a6:51:f2:53:5a:16:72:ef:bc:a9:9a:e7:a3:60:e5:df:64:6b:2d:df:e4:47:01:e9:15:c9Signer

49:8f:69:c0:c2:81:e4:ff:3f:29:41:d0:ca:12:19:8b:93:54:75:70Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

gdiplus

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

ws2_32

version

psapi

setupapi

comctl32

msimg32

secur32

netapi32

wintrust

crypt32

Exports

Exports

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 425KB - Virtual size: 425KB

.data Size: 33KB - Virtual size: 157KB

.rsrc Size: 127KB - Virtual size: 126KB

Size: 137KB - Virtual size: 137KB

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:1f:3a:05:7a:1d:ce:4b:f7:d7:6d:0c:7a:df:83:7e
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0c:83:09:ba:16:54:68:50:e6:05:e7:5d:77:3e:56:de
Certificate

01:a8:f7:25:76:dc:7b:14:7a:18:63:9e:8d:4d:eb:37
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

8c:a4:cd:c7:e8:06:a6:51:f2:53:5a:16:72:ef:bc:a9:9a:e7:a3:60:e5:df:64:6b:2d:df:e4:47:01:e9:15:c9
Signer

49:8f:69:c0:c2:81:e4:ff:3f:29:41:d0:ca:12:19:8b:93:54:75:70
Signer

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 425KB - Virtual size: 425KB

.data
Size: 33KB - Virtual size: 157KB

.rsrc
Size: 127KB - Virtual size: 126KB