2024-05-27_754ce8940a2ac02a0e480132e37f8e6b_mafia

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-27_754ce8940a2ac02a0e480132e37f8e6b_mafia
Size

4.5MB
MD5

754ce8940a2ac02a0e480132e37f8e6b
SHA1

8da617584662d6072221e6a627717b21e851ff89
SHA256

6e6b7f66be9d4b63a13b37590d582aa5a0bcd034b1bf085a0d8222529becddf1
SHA512

3ae71fab400b272ef719b8e5df5df46a24cebbcc6cda03412dd01d2966ce8362105c3bfbaaad51d9c41888ab951ac2e16280f3bb331df2fbdea932873d2d19f4
SSDEEP

98304:I0D1z8lWyoY4fxB1G6WRkjb7ShRfMu9zcoGLBkPrvgC6w8mxeZVcgqYxqBGd9z2E:zD1z8lWy79/R5JPrvgNqEdldf

Score

1^/10

Malware Config

Signatures

Files

2024-05-27_754ce8940a2ac02a0e480132e37f8e6b_mafia
.exe windows:5 windows x86 arch:x86

d450fc398105b57f9ec1f351a5d0ec09

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

45:ff:07:78:31:4c:0f:df:a1:ae:7f:6d:89:0b:9d:53
Certificate

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Not Before

10/05/2013, 00:00

Not After

10/05/2015, 23:59

Subject

CN=南昌晨云网络工程有限公司,O=南昌晨云网络工程有限公司,L=南昌市,ST=江西省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

69:6d:b4:2c:7a:9c:5f:f7:66:cc:cd:3b:92:5c:2a:1a:35:30:e8:70
Signer

Actual PE Digest

69:6d:b4:2c:7a:9c:5f:f7:66:cc:cd:3b:92:5c:2a:1a:35:30:e8:70

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\项目代码\晨风QQ机器人\Release\qq机器人.pdb

Imports

kernel32

WriteConsoleW
SetEnvironmentVariableA
GetTimeZoneInformation
IsProcessorFeaturePresent
GetStringTypeW
IsValidCodePage
GetOEMCP
GetACP
TerminateProcess
IsDebuggerPresent
GetProcessHeap
UnhandledExceptionFilter
lstrcpynA
lstrcpyA
IsBadWritePtr
lstrcpynW
DeviceIoControl
SystemTimeToTzSpecificLocalTime
GetSystemDefaultLangID
InterlockedCompareExchange
LoadLibraryA
GetStringTypeExA
GetConsoleCP
GetConsoleMode
IsBadReadPtr
LCMapStringW
QueryPerformanceCounter
HeapDestroy
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
HeapSize
HeapQueryInformation
GetFileType
SetStdHandle
HeapReAlloc
GetDateFormatW
GetTimeFormatW
CreateThread
ExitThread
VirtualQuery
GetSystemInfo
VirtualAlloc
ExitProcess
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetStartupInfoW
HeapSetInformation
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathW
GetProfileIntW
GetTempPathW
GetTempFileNameW
GetNumberFormatW
GetWindowsDirectoryW
GetCurrentDirectoryW
SetErrorMode
FindNextFileW
GlobalGetAtomNameW
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalFlags
GetFileTime
GetFileSizeEx
GetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
SetFileAttributesW
GetFileAttributesExW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
LoadLibraryExW
WaitForMultipleObjects
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetThreadLocale
GetStringTypeExW
LocalAlloc
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GetCurrentProcessId
SuspendThread
SetThreadPriority
lstrcmpA
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
CopyFileW
FormatMessageW
LocalFree
MulDiv
InitializeCriticalSection
FreeLibrary
TerminateThread
FindFirstFileW
FindClose
FileTimeToLocalFileTime
lstrcatW
SystemTimeToFileTime
FileTimeToSystemTime
GetCommandLineW
GetSystemDirectoryW
GlobalSize
CreateDirectoryW
LCMapStringA
GlobalFree
CreateEventW
ResumeThread
InterlockedExchange
CloseHandle
ResetEvent
GetModuleFileNameW
lstrcmpW
SizeofResource
GetSystemTime
GetTickCount
DeleteFileW
GlobalAlloc
GlobalLock
GlobalUnlock
WaitForSingleObject
SetEvent
lstrcpyW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
ActivateActCtx
GetLastError
DeactivateActCtx
SetLastError
GetProcAddress
GetModuleHandleW
LoadLibraryW
FreeResource
GetCPInfo
lstrlenA
lstrlenW
lstrcmpiW
GetVersion
GetVersionExW
GetLocalTime
MultiByteToWideChar
WideCharToMultiByte
Sleep
LeaveCriticalSection
EnterCriticalSection
FindResourceW
LoadResource
LockResource

user32

GetWindowThreadProcessId
LoadMenuW
GetMessageW
TranslateMessage
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
RedrawWindow
IsWindowVisible
ValidateRect
UpdateWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
DestroyMenu
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
PtInRect
GetWindow
GetMenuStringW
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
IsWindowEnabled
MapDialogRect
MessageBoxA
GetMenu
GetCursorPos
SetWindowContextHelpId
RealChildWindowFromPoint
SetForegroundWindow
DrawIcon
LoadCursorW
CopyImage
EnumDisplayMonitors
SetLayeredWindowAttributes
TranslateAcceleratorW
ShowWindow
SetWindowPos
IsWindow
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetKeyState
GetFocus
LoadIconW
IsIconic
DestroyCursor
LoadImageW
PostMessageW
SetCursor
BringWindowToTop
InsertMenuItemW
LoadAcceleratorsW
ReleaseCapture
ReuseDDElParam
UnpackDDElParam
IsRectEmpty
GetSystemMenu
SetParent
UnregisterClassW
SetCapture
GetKeyboardLayout
WaitMessage
PostThreadMessageW
GetWindowLongW
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
DrawFocusRect
FrameRect
OffsetRect
SetRectEmpty
GetWindowDC
BeginPaint
EndPaint
GetKeyNameTextW
MapVirtualKeyW
IntersectRect
CharUpperW
PostQuitMessage
ShowOwnedPopups
SetScrollInfo
RegisterClipboardFormatW
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
GetMenuDefaultItem
GetAsyncKeyState
InvertRect
HideCaret
EnableScrollBar
NotifyWinEvent
IsZoomed
SetWindowRgn
DestroyAcceleratorTable
SetClassLongW
SetTimer
KillTimer
EnableWindow
SendMessageW
MessageBoxW
SetRect
CopyRect
LoadBitmapW
wsprintfA
PrintWindow
FindWindowW
DrawFrameControl
FindWindowExW
LoadStringW
LoadStringA
FillRect
DrawEdge
CreateMenu
CreatePopupMenu
DeleteMenu
AppendMenuW
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSubMenu
InsertMenuW
ModifyMenuW
RemoveMenu
GetDC
ReleaseDC
GetDesktopWindow
GetSysColor
GetSysColorBrush
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
DestroyIcon
DrawIconEx
SystemParametersInfoW
GetSystemMetrics
GetMenuItemInfoW
IsMenu
ToUnicodeEx
GetWindowRgn
DrawStateW
GetIconInfo
InflateRect
SubtractRect
GetDoubleClickTime
CharUpperBuffW
CopyIcon
GetUpdateRect
IsClipboardFormatAvailable
SetMenuDefaultItem
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
MonitorFromPoint
UpdateLayeredWindow
MapVirtualKeyExW
IsCharLowerW
UnionRect
LockWindowUpdate
SetCursorPos
CreateAcceleratorTableW
GetKeyboardState
EndDialog

gdi32

GetBkColor
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
StretchDIBits
TextOutW
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
DPtoLP
GetTextMetricsW
CreateDCW
EnumFontFamiliesW
GetTextCharsetInfo
GetTextColor
GetRgnBox
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Polygon
OffsetRgn
EnumFontFamiliesExW
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceW
CreateFontW
RectVisible
PtVisible
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
GetTextExtentPoint32W
SetPixel
GetPixel
BitBlt
PatBlt
Rectangle
Ellipse
GetBkMode
GetDeviceCaps
CopyMetaFileW
SetStretchBltMode
StretchBlt
GetDIBColorTable
SetDIBColorTable
CreateBitmap
SetBkColor
SetTextColor
GetStockObject
Escape
CreateDIBitmap
ExtTextOutW
CreatePen
CreateCompatibleDC
GetObjectW
CreateCompatibleBitmap
CreateFontIndirectW
CreateHatchBrush
CreateSolidBrush
GetCharWidthW

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

CryptAcquireContextW
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
OpenProcessToken
GetTokenInformation
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
CryptCreateHash

shell32

SHGetFileInfoW
Shell_NotifyIconW
ShellExecuteW
DragQueryFileW
DragFinish
ShellExecuteExW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc
SHAppBarMessage
SHGetSpecialFolderPathW
SHGetDesktopFolder
SHBrowseForFolderW

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_GetIconSize

shlwapi

PathFindExtensionW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
UrlUnescapeW
StrCmpNIW
StrStrW
StrStrIA
PathFileExistsW
StrStrIW
PathFindFileNameW

ole32

RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CreateStreamOnHGlobal
GetHGlobalFromStream
DoDragDrop
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoGetClassObject
CoInitialize
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
ReleaseStgMedium

oleaut32

SysAllocString
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysFreeString
OleLoadPicture
VariantCopy
SysStringLen
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
SafeArrayGetUBound
SafeArrayGetLBound

oledlg

OleUIBusyW

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromFile
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipSaveImageToStream
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusStartup
GdipBitmapUnlockBits
GdipDrawImageRectI
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusShutdown
GdipBitmapLockBits

ws2_32

socket
GetAddrInfoW
sendto
inet_addr
htons
gethostbyname
WSACleanup
closesocket
recvfrom
connect
WSAStartup
setsockopt

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

wininet

HttpOpenRequestW
InternetCrackUrlW
InternetOpenUrlW
InternetCanonicalizeUrlW
InternetConnectW
InternetGetCookieA
InternetQueryDataAvailable
InternetSetOptionExW
HttpSendRequestW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW
InternetQueryOptionW

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

iphlpapi

GetAdaptersInfo

dbghelp

MiniDumpWriteDump

urlmon

FindMimeFromData

wsock32

send
WSAAsyncSelect
WSASetLastError
WSAGetLastError
bind
select
accept
recv
htonl

Exports

Exports

_uu_AsyncRecognizeByCodeTypeAndPathA@12
_uu_CheckApiSignA@24
_uu_CheckApiSignW@24
_uu_CloseAsyncRecognizeHandle@4
_uu_GetAsyncRecognizeResultA@8
_uu_SysCallOneParam@8
_uu_UploadFileA@8
_uu_UploadFileW@8
_uu_UploadScreen@20
_uu_easyRecognizeBytesA@32
_uu_easyRecognizeBytesW@32
_uu_easyRecognizeFileA@28
_uu_easyRecognizeFileW@28
_uu_easyRecognizeScreenA@40
_uu_easyRecognizeScreenW@40
_uu_easyRecognizeUrlA@36
_uu_easyRecognizeUrlW@36
_uu_easyRecognizeWndByHWndAndPosA@44
_uu_easyRecognizeWndByHWndAndPosW@44
_uu_easyRecognizeWndByTitleAndPosA@44
_uu_easyRecognizeWndByTitleAndPosW@44
_uu_getResultA@8
_uu_getResultW@8
_uu_getScoreA@8
_uu_getScoreW@8
_uu_loginA@8
_uu_loginW@8
_uu_payA@16
_uu_payW@16
_uu_recognizeByCodeTypeAndBytesA@16
_uu_recognizeByCodeTypeAndBytesW@16
_uu_recognizeByCodeTypeAndPathA@12
_uu_recognizeByCodeTypeAndPathW@12
_uu_recognizeByCodeTypeAndUrlA@20
_uu_recognizeByCodeTypeAndUrlW@20
_uu_recognizeScreenByCodeTypeA@24
_uu_recognizeScreenByCodeTypeW@24
_uu_recognizeWndByHWndAndPosA@28
_uu_recognizeWndByHWndAndPosW@28
_uu_recognizeWndByTitleAndPosA@28
_uu_recognizeWndByTitleAndPosW@28
_uu_reguserA@16
_uu_reguserW@16
_uu_reportError@4
_uu_setSoftInfoA@8
_uu_setSoftInfoW@8
_uu_setTimeOut@4

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 555KB - Virtual size: 555KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QQSKINT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d450fc398105b57f9ec1f351a5d0ec09

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

45:ff:07:78:31:4c:0f:df:a1:ae:7f:6d:89:0b:9d:53Certificate

Extended Key Usages

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5eCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

69:6d:b4:2c:7a:9c:5f:f7:66:cc:cd:3b:92:5c:2a:1a:35:30:e8:70Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

ws2_32

oleacc

wininet

imm32

winmm

version

iphlpapi

dbghelp

urlmon

wsock32

Exports

Exports

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 555KB - Virtual size: 555KB

.data Size: 42KB - Virtual size: 135KB

.QQSKINT Size: 512B - Virtual size: 4B

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 257KB - Virtual size: 256KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

45:ff:07:78:31:4c:0f:df:a1:ae:7f:6d:89:0b:9d:53
Certificate

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

69:6d:b4:2c:7a:9c:5f:f7:66:cc:cd:3b:92:5c:2a:1a:35:30:e8:70
Signer

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 555KB - Virtual size: 555KB

.data
Size: 42KB - Virtual size: 135KB

.QQSKINT
Size: 512B - Virtual size: 4B

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 257KB - Virtual size: 256KB