2024-06-02_2adb02ab9ddfcc12de131585ae4c8e8b_icedid

Sharing

Copy URL

Twitter E-mail

General

Target

2024-06-02_2adb02ab9ddfcc12de131585ae4c8e8b_icedid
Size

2.8MB
MD5

2adb02ab9ddfcc12de131585ae4c8e8b
SHA1

cc537ead61c7a48af36d8ed2254ec6d2986d1164
SHA256

92b308bd6f3f41719479f910e35b46ca8525b9da292bad2782c498206475e981
SHA512

3738183394d54cb24652766adb7771cdb771b7a0b781b57584ff66205e795762b018fa74fd03fc8a4789b0caacd52f02823eedafb85e77d490ea6e588dacb12e
SSDEEP

49152:1BTNUFYdO82nFP7j0cAlFL0aDLihmRwC624CMNp/DTDBm6D02:1BGFZ8+F/0tLbOhmOX2OTBLn

Score

1^/10

Malware Config

Signatures

Files

2024-06-02_2adb02ab9ddfcc12de131585ae4c8e8b_icedid
.exe windows:4 windows x86 arch:x86

1cd0b7209f8508cc9337382b6f446a0f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21-12-2012 00:00

Not After

30-12-2020 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18-10-2012 00:00

Not After

29-12-2020 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

5b:32:d2:7a:2e:b6:b4:cf:47:4f:83:97:38:12:9c:46
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

11-10-2017 00:00

Not After

10-10-2019 23:59

Subject

CN=北京布丁跳跳科技有限公司,OU=IT,O=北京布丁跳跳科技有限公司,L=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08-02-2010 00:00

Not After

07-02-2020 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

17:7b:68:fb:e4:74:c7:69:f8:4e:87:90:2a:7a:f2:85
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

10-10-2017 00:00

Not After

10-10-2019 23:59

Subject

CN=北京布丁跳跳科技有限公司,OU=IT,O=北京布丁跳跳科技有限公司,L=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10-12-2013 00:00

Not After

09-12-2023 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12-01-2016 00:00

Not After

11-01-2031 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

02-01-2017 00:00

Not After

01-04-2028 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

c0:cb:bf:13:4e:11:23:cb:20:fe:22:13:fe:28:2a:ff:07:12:8d:44:f2:4b:02:bf:90:7b:ef:7d:53:51:98:7b
Signer

Actual PE Digest

c0:cb:bf:13:4e:11:23:cb:20:fe:22:13:fe:28:2a:ff:07:12:8d:44:f2:4b:02:bf:90:7b:ef:7d:53:51:98:7b

Digest Algorithm

sha256

PE Digest Matches

true

d4:b2:ae:9a:b6:b2:c4:ba:1a:e6:db:6e:70:c9:55:b5:d2:16:ea:e8
Signer

Actual PE Digest

d4:b2:ae:9a:b6:b2:c4:ba:1a:e6:db:6e:70:c9:55:b5:d2:16:ea:e8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Jenkins\workspace\srf_develop\ShuRuFa\程序\TrunkPY\Bin\pdbmap\SmartCloud\Mutual32.pdb

Imports

gdiplus

GdipAlloc
GdipDeleteGraphics
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipDisposeImage
GdipCreateFromHDC
GdipDrawImageRectI
GdipCloneImage
GdiplusStartup
GdiplusShutdown
GdipFree

shlwapi

PathFindFileNameW
PathFindExtensionW
PathIsUNCW
PathStripToRootW
SHDeleteKeyW
SHGetValueW
PathAppendW
PathFileExistsW
PathFileExistsA

kernel32

lstrcmpW
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
InterlockedExchange
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
lstrlenA
GlobalFlags
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetSystemTimeAsFileTime
FindFirstFileA
GetConsoleCP
GetConsoleMode
DeleteFileA
HeapReAlloc
ExitThread
VirtualQuery
ExitProcess
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetVersionExA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetConsoleCtrlHandler
GetCurrentDirectoryA
GetDriveTypeA
GetFullPathNameA
SetEnvironmentVariableA
HeapFree
GetProcessHeap
GetLastError
GetProcAddress
GetModuleHandleW
HeapAlloc
WritePrivateProfileStringW
CloseHandle
CreateProcessW
GetPrivateProfileIntW
GetLocalTime
SetErrorMode
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
CreateFileW
CreateDirectoryW
GetModuleFileNameW
LoadLibraryW
SetUnhandledExceptionFilter
GetEnvironmentVariableW
lstrlenW
ReadFile
GetFileSize
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
GetTickCount
GetExitCodeProcess
WaitForSingleObject
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GlobalFree
SleepEx
GetSystemDirectoryA
PeekNamedPipe
GlobalMemoryStatus
FlushConsoleInputBuffer
AreFileApisANSI
LockFileEx
GetTempPathA
FormatMessageA
GetSystemTime
ReadConsoleInputA
SetConsoleMode
FreeResource
GetFullPathNameW
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
GetThreadLocale
SetLastError
GetStdHandle
QueryPerformanceCounter
OutputDebugStringW
GetModuleFileNameA
FlushFileBuffers
GetCurrentThread
GetModuleHandleA
GetSystemWow64DirectoryW
LoadLibraryA
VirtualFree
VirtualProtect
VirtualAlloc
MoveFileW
SystemTimeToFileTime
SetFilePointer
SetFileAttributesA
GetFileInformationByHandle
GetFileAttributesA
OpenFileMappingW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetVersion
ReadProcessMemory
VirtualAllocEx
WriteProcessMemory
VirtualFreeEx
lstrcpynW
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GlobalAlloc
GetFileTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetFileSizeEx
WaitForMultipleObjects
CreateThread
GetExitCodeThread
TerminateThread
LeaveCriticalSection
OpenProcess
CopyFileW
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SizeofResource
GetSystemDirectoryW
GetVolumeInformationW
Sleep
MulDiv
GetLongPathNameW
lstrcpyW
LoadLibraryExW
FindResourceW
LoadResource
LockResource
ReleaseMutex
CreateMutexW
CreateFileA
SetPriorityClass
OutputDebugStringA
DeviceIoControl
GetWindowsDirectoryW
ExpandEnvironmentStringsW
LocalAlloc
FormatMessageW
InterlockedDecrement
lstrcmpiW
FileTimeToSystemTime
LocalFree
FindFirstFileW
FindNextFileW
FindClose
RemoveDirectoryW
GlobalLock
GlobalUnlock
SetFileAttributesW
GetSystemInfo
GetVersionExW
WriteFile
GetFileAttributesW
GetTempPathW
MoveFileExW
DeleteFileW

user32

UnregisterClassW
LoadCursorW
GetSysColorBrush
DestroyMenu
SetWindowContextHelpId
MapDialogRect
SetCursor
PostQuitMessage
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
SetFocus
GetLastActivePopup
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
UpdateWindow
GetMenu
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
CopyRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
IntersectRect
IsIconic
GetWindowPlacement
GetWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
IsWindowVisible
ValidateRect
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
CharUpperW
DispatchMessageW
GetMenuState
GetMenuItemID
GetMenuItemCount
FillRect
FrameRect
InvalidateRect
GetClientRect
RegisterWindowMessageW
LoadIconW
SetCapture
ReleaseCapture
CharNextW
CopyAcceleratorTableW
IsRectEmpty
SetRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
GetSubMenu
UnregisterClassA
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
UnloadKeyboardLayout
SetWindowPos
EnableWindow
OffsetRect
GetCursorPos
GetActiveWindow
SetActiveWindow
GetShellWindow
SendMessageW
SetTimer
PeekMessageW
RegisterClipboardFormatW
KillTimer
GetDC
ReleaseDC
PtInRect
SystemParametersInfoW
EnumDisplayMonitors
GetMonitorInfoW
wsprintfW
FindWindowW
IsWindow
GetFocus
GetClassNameW
GetWindowRect
GetDesktopWindow
GetSystemMetrics
GetWindowLongW
SetWindowLongW
FindWindowExW
GetWindowTextW
PostMessageW
GetForegroundWindow
GetWindowThreadProcessId
SetForegroundWindow
GetParent
PostThreadMessageW
GetKeyState
SystemParametersInfoA

gdi32

GetStockObject
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetObjectW
GetClipBox
SetMapMode
SetBkColor
RestoreDC
SaveDC
BitBlt
DeleteObject
CreateSolidBrush
GetDeviceCaps
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontW
TextOutW
SelectObject
SetBkMode
SetTextColor

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

SetFileSecurityW
GetSecurityDescriptorControl
SetSecurityDescriptorDacl
AddAccessAllowedAce
AddAce
EqualSid
GetAce
RegQueryValueW
RegisterEventSourceA
ReportEventA
DeregisterEventSource
ChangeServiceConfig2W
QueryServiceStatus
RegCreateKeyW
RegSetValueW
ControlService
DeleteService
StartServiceW
OpenSCManagerW
CreateServiceW
OpenServiceW
CloseServiceHandle
GetFileSecurityW
InitializeSecurityDescriptor
RegDeleteValueW
RegDeleteKeyW
RegEnumValueW
GetTokenInformation
LookupAccountSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetNamedSecurityInfoW
RegOpenKeyW
RegEnumKeyW
RegCreateKeyExA
OpenProcessToken
DuplicateTokenEx
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RevertToSelf
ImpersonateLoggedOnUser
InitializeAcl
LookupAccountNameW
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid

shell32

ord155
ShellExecuteW
ShellExecuteExW
SHGetFolderPathW
SHGetFileInfoW
SHGetFolderLocation
SHGetDataFromIDListW
SHGetDesktopFolder
SHChangeNotify
SHGetSpecialFolderPathW

comctl32

ord17

oledlg

OleUIBusyW

ole32

StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromProgID
CoTaskMemAlloc
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
CoTaskMemFree
CoInitialize
CoCreateInstance
CoUninitialize
CLSIDFromString
CoRegisterMessageFilter
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard

oleaut32

OleCreateFontIndirect
SysAllocString
SysFreeString
VariantInit
VariantCopy
VariantChangeType
VariantClear
SysStringLen
SysAllocStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime

urlmon

URLDownloadToFileW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

psapi

GetModuleFileNameExW

iphlpapi

GetAdaptersInfo

netapi32

NetWkstaGetInfo
NetApiBufferFree

ws2_32

WSAGetLastError
WSACleanup
WSAStartup
socket
inet_ntoa
bind
connect
listen
accept
getsockopt
send
sendto
recv
inet_addr
recvfrom
closesocket
ioctlsocket
shutdown
select
WSASetLastError
gethostbyname
getpeername
getsockname
htonl
ntohs
htons
gethostname
setsockopt
getservbyname
gethostbyaddr
getservbyport
__WSAFDIsSet

cabinet

ord22
ord21
ord23
ord20
ord13
ord11
ord10
ord14

wininet

InternetSetFilePointer
InternetOpenUrlW
HttpQueryInfoW
InternetOpenW
InternetCloseHandle
InternetReadFile

Exports

Exports

curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_maprintf
curl_mfprintf
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 476KB - Virtual size: 475KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 316KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1cd0b7209f8508cc9337382b6f446a0f

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

5b:32:d2:7a:2e:b6:b4:cf:47:4f:83:97:38:12:9c:46Certificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

17:7b:68:fb:e4:74:c7:69:f8:4e:87:90:2a:7a:f2:85Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6Certificate

Extended Key Usages

Key Usages

c0:cb:bf:13:4e:11:23:cb:20:fe:22:13:fe:28:2a:ff:07:12:8d:44:f2:4b:02:bf:90:7b:ef:7d:53:51:98:7bSigner

d4:b2:ae:9a:b6:b2:c4:ba:1a:e6:db:6e:70:c9:55:b5:d2:16:ea:e8Signer

Headers

File Characteristics

PDB Paths

Imports

gdiplus

shlwapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

oleaut32

urlmon

version

psapi

iphlpapi

netapi32

ws2_32

cabinet

wininet

Exports

Exports

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 476KB - Virtual size: 475KB

.data Size: 80KB - Virtual size: 112KB

.rsrc Size: 316KB - Virtual size: 314KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

5b:32:d2:7a:2e:b6:b4:cf:47:4f:83:97:38:12:9c:46
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

17:7b:68:fb:e4:74:c7:69:f8:4e:87:90:2a:7a:f2:85
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

54:58:f2:aa:d7:41:d6:44:bc:84:a9:7b:a0:96:52:e6
Certificate

c0:cb:bf:13:4e:11:23:cb:20:fe:22:13:fe:28:2a:ff:07:12:8d:44:f2:4b:02:bf:90:7b:ef:7d:53:51:98:7b
Signer

d4:b2:ae:9a:b6:b2:c4:ba:1a:e6:db:6e:70:c9:55:b5:d2:16:ea:e8
Signer

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 476KB - Virtual size: 475KB

.data
Size: 80KB - Virtual size: 112KB

.rsrc
Size: 316KB - Virtual size: 314KB