virussign[.]com_4ab430faf6a2226f7d3471c349f75fb0[.]vir

Sharing

Copy URL

Twitter E-mail

General

Target

virussign.com_4ab430faf6a2226f7d3471c349f75fb0.vir
Size

356KB
MD5

4ab430faf6a2226f7d3471c349f75fb0
SHA1

05f859abbde9b80a098878506c866d837009c778
SHA256

4f7b9e72c1be66bf75273fd89d2b078f43803913f2a021768d91be5ed60cc0a3
SHA512

f384bb74610873761c448e55f39819063f6859e3c7b3c54a9b967176ce46c0edbf3dbf6c5e84fc1c6208eafe6398f7d9412740d2d7f65092c02f2b99053a1376
SSDEEP

6144:uD2Vtjg4zeu/X8P852bMMJE4iTVSSdi2ZzdCmw8YhsiR26u5IUB9LvO:uDAFjt5GMMJE4eJ/w1iAu2r

Score

1^/10

Malware Config

Signatures

Files

virussign.com_4ab430faf6a2226f7d3471c349f75fb0.vir
.dll windows:6 windows x86 arch:x86

72f2eb5f918b203273f13006b674eb11

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:0f:78:bb:9c:4c:b5:05:91:3a:90:f5:fb:18:98:62
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

20/11/2020, 00:00

Not After

29/11/2022, 23:59

Subject

CN=星恒电源股份有限公司,O=星恒电源股份有限公司,L=苏州市,ST=江苏省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

02:0f:78:bb:9c:4c:b5:05:91:3a:90:f5:fb:18:98:62
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

20/11/2020, 00:00

Not After

29/11/2022, 23:59

Subject

CN=星恒电源股份有限公司,O=星恒电源股份有限公司,L=苏州市,ST=江苏省,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/10/2019, 00:00

Not After

17/10/2030, 00:00

Subject

CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

6f:e6:bc:c3:e2:b6:d0:33:ce:e9:46:b9:34:a6:ef:cd:d1:7d:cc:37:10:e6:ee:5e:ff:fd:9a:13:cf:42:53:0e
Signer

Actual PE Digest

6f:e6:bc:c3:e2:b6:d0:33:ce:e9:46:b9:34:a6:ef:cd:d1:7d:cc:37:10:e6:ee:5e:ff:fd:9a:13:cf:42:53:0e

Digest Algorithm

sha256

PE Digest Matches

true

5a:97:62:0b:38:39:38:21:96:47:47:18:5b:d0:cf:b4:ff:24:4f:0a
Signer

Actual PE Digest

5a:97:62:0b:38:39:38:21:96:47:47:18:5b:d0:cf:b4:ff:24:4f:0a

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

shlwapi.pdb

Imports

kernel32

ReleaseSRWLockExclusive
TlsSetValue
TlsGetValue
GetTickCount
GetCurrentThread
LoadLibraryW
InterlockedIncrement
FreeLibraryAndExitThread
SetEvent
IsWow64Process
WaitForSingleObject
CreateThread
CreateEventA
GetModuleHandleExA
GetUserDefaultUILanguage
InterlockedDecrement
MulDiv
LCIDToLocaleName
GetUserDefaultLCID
HeapAlloc
GetProcessHeap
HeapFree
InterlockedExchange
GetModuleFileNameA
GetVersionExW
OpenEventW
GetSystemDefaultUILanguage
GetSystemWindowsDirectoryW
GetModuleFileNameW
WriteFile
LockFileEx
UnlockFileEx
ReadFile
DeleteFileW
SetFileInformationByHandle
ReplaceFileW
GetFileInformationByHandleEx
GetVolumeInformationByHandleW
SetFilePointerEx
SetFilePointer
SetEndOfFile
LocalSize
OpenProcess
DuplicateHandle
GetCurrentProcessId
GlobalAddAtomW
GlobalGetAtomNameW
MapViewOfFile
CreateFileMappingA
GlobalDeleteAtom
DeleteTimerQueueTimer
CreateTimerQueueTimer
QueueUserWorkItem
ReleaseSRWLockShared
AcquireSRWLockShared
GetPrivateProfileStringA
GetPrivateProfileStringW
WritePrivateProfileStringW
GetModuleHandleExW
FormatMessageW
GetLocaleInfoW
SizeofResource
LockResource
LoadResource
FindResourceW
CreateFileMappingW
OpenFileMappingW
GetModuleHandleW
FormatMessageA
AcquireSRWLockExclusive
InitializeSRWLock
GetCurrentProcess
GetModuleHandleA
LoadLibraryA
UnmapViewOfFile
TlsFree
DisableThreadLibraryCalls
TlsAlloc
LoadLibraryExW
LocalReAlloc
MultiByteToWideChar
WideCharToMultiByte
DeviceIoControl
ExpandEnvironmentStringsW
CompareStringW
LCMapStringW
FindFirstFileW
FindNextFileW
SetFileAttributesW
CreateFileW
GetWindowsDirectoryW
GetSystemDirectoryW
SearchPathW
GetFullPathNameW
lstrcmpW
lstrcmpiW
GetFileAttributesW
GetEnvironmentVariableW
lstrlenW
GetCurrentThreadId
ExpandEnvironmentStringsA
CompareStringA
GetEnvironmentVariableA
SetLastError
LocalFree
LocalAlloc
LCMapStringA
SetFileAttributesA
GetSystemTimeAsFileTime
CreateFileA
GetProcAddress
GetLastError
FreeLibrary
InterlockedCompareExchange
LoadLibraryExA
IsDBCSLeadByte
GetCPInfo
GetFileAttributesA
SetErrorMode
lstrcmpiA
lstrcmpA
DelayLoadFailureHook
lstrlenA
GetFullPathNameA
SearchPathA
FindClose
FindNextFileA
FindFirstFileA
GetSystemDirectoryA
GetWindowsDirectoryA
CloseHandle
SetFileTime
CreateActCtxW
ReleaseActCtx
ActivateActCtx
DeactivateActCtx
Sleep
QueryPerformanceCounter
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

gdi32

GetLayout
ExtTextOutW
GetTextExtentPoint32W
SetStretchBltMode
CreateSolidBrush
GetStockObject
SetMapMode
Rectangle
StretchDIBits
SelectPalette
RealizePalette
CreateDIBSection
GetDIBits
GetObjectA
CreateFontIndirectA
SetBkColor
GetDeviceCaps
CreateHalftonePalette
GetPaletteEntries
DeleteObject
CreateCompatibleDC
GetSystemPaletteEntries
CreatePalette
DeleteDC
GetTextExtentPointW
GetGlyphIndicesW
SelectObject
GetTextExtentPointA
GetGlyphIndicesA
GetTextExtentExPointI

user32

RegisterClassA
GetClassInfoA
RegisterClassW
GetClassInfoW
UnregisterClassA
UnregisterClassW
PeekMessageA
MsgWaitForMultipleObjects
IsChild
SetPropA
SystemParametersInfoA
RemovePropA
SendNotifyMessageA
SendNotifyMessageW
PostThreadMessageA
DispatchMessageA
TranslateMessage
GetMessageA
ActivateKeyboardLayout
GetKeyboardLayout
IsDlgButtonChecked
EndDialog
DialogBoxParamW
DialogBoxParamA
CreateWindowExA
LoadCursorA
SetWindowLongW
CreateWindowExW
GetIconInfo
GetSysColor
RegisterClipboardFormatA
CharLowerW
IsCharAlphaNumericW
CharNextW
CheckMenuItem
CreatePopupMenu
GetMenuItemCount
GetMenuItemInfoA
DefWindowProcW
DefWindowProcA
IsWindowUnicode
PostMessageW
PostMessageA
EnumChildWindows
LoadMenuW
GetSubMenu
RemoveMenu
DestroyMenu
GetParent
SetParent
GetWindowLongA
SetWindowLongA
GetMenuDefaultItem
EnableMenuItem
LoadStringW
GetWindowTextW
GetPropW
GetSystemMetrics
CharUpperW
SendMessageW
SetWindowTextW
CharPrevW
LoadStringA
GetWindowTextA
GetPropA
MessageBoxW
CharUpperA
GetDlgItem
GetClientRect
SendMessageA
SetWindowTextA
GetDC
ReleaseDC
CharPrevA
CharNextA
GetWindowThreadProcessId

ntdll

_wcsicmp
NtQueryInformationProcess
_chkstk
ord1
EtwEventUnregister
EtwEventRegister
EtwUnregisterTraceGuids
EtwRegisterTraceGuidsW
EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel
EtwGetTraceEnableFlags
_allmul
EtwEventEnabled
EtwEventWrite
EtwTraceMessage
wcschr
iswalpha
_vsnwprintf
memcpy
_vsnprintf
_strnicmp
memmove
isalpha
memset

msvcrt

_unlock
_except_handler4_common
_onexit
_lock
__dllonexit
_XcptFilter
_amsg_exit
_initterm
free
malloc

api-ms-win-core-localregistry-l1-1-0

RegOpenKeyExA
RegQueryInfoKeyA
RegDeleteKeyExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW
RegDeleteKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegQueryValueExW
RegEnumValueW
RegEnumKeyExA
RegEnumValueA
RegOpenCurrentUser
RegGetValueW

kernelbase

LoadStringByReference

Exports

Exports

AssocCreate
AssocGetPerceivedType
AssocIsDangerous
AssocQueryKeyA
AssocQueryKeyW
AssocQueryStringA
AssocQueryStringByKeyA
AssocQueryStringByKeyW
AssocQueryStringW
ChrCmpIA
ChrCmpIW
ColorAdjustLuma
ColorHLSToRGB
ColorRGBToHLS
ConnectToConnectionPoint
DelayLoadFailureHook
DllGetVersion
GetAcceptLanguagesA
GetAcceptLanguagesW
GetMenuPosFromID
HashData
IStream_Copy
IStream_Read
IStream_ReadPidl
IStream_ReadStr
IStream_Reset
IStream_Size
IStream_Write
IStream_WritePidl
IStream_WriteStr
IUnknown_AtomicRelease
IUnknown_GetSite
IUnknown_GetWindow
IUnknown_QueryService
IUnknown_Set
IUnknown_SetSite
IntlStrEqWorkerA
IntlStrEqWorkerW
IsCharSpaceA
IsCharSpaceW
IsInternetESCEnabled
IsOS
MLFreeLibrary
MLLoadLibraryA
MLLoadLibraryW
ParseURLA
ParseURLW
PathAddBackslashA
PathAddBackslashW
PathAddExtensionA
PathAddExtensionW
PathAppendA
PathAppendW
PathBuildRootA
PathBuildRootW
PathCanonicalizeA
PathCanonicalizeW
PathCombineA
PathCombineW
PathCommonPrefixA
PathCommonPrefixW
PathCompactPathA
PathCompactPathExA
PathCompactPathExW
PathCompactPathW
PathCreateFromUrlA
PathCreateFromUrlAlloc
PathCreateFromUrlW
PathFileExistsA
PathFileExistsW
PathFindExtensionA
PathFindExtensionW
PathFindFileNameA
PathFindFileNameW
PathFindNextComponentA
PathFindNextComponentW
PathFindOnPathA
PathFindOnPathW
PathFindSuffixArrayA
PathFindSuffixArrayW
PathGetArgsA
PathGetArgsW
PathGetCharTypeA
PathGetCharTypeW
PathGetDriveNumberA
PathGetDriveNumberW
PathIsContentTypeA
PathIsContentTypeW
PathIsDirectoryA
PathIsDirectoryEmptyA
PathIsDirectoryEmptyW
PathIsDirectoryW
PathIsFileSpecA
PathIsFileSpecW
PathIsLFNFileSpecA
PathIsLFNFileSpecW
PathIsNetworkPathA
PathIsNetworkPathW
PathIsPrefixA
PathIsPrefixW
PathIsRelativeA
PathIsRelativeW
PathIsRootA
PathIsRootW
PathIsSameRootA
PathIsSameRootW
PathIsSystemFolderA
PathIsSystemFolderW
PathIsUNCA
PathIsUNCServerA
PathIsUNCServerShareA
PathIsUNCServerShareW
PathIsUNCServerW
PathIsUNCW
PathIsURLA
PathIsURLW
PathMakePrettyA
PathMakePrettyW
PathMakeSystemFolderA
PathMakeSystemFolderW
PathMatchSpecA
PathMatchSpecExA
PathMatchSpecExW
PathMatchSpecW
PathParseIconLocationA
PathParseIconLocationW
PathQuoteSpacesA
PathQuoteSpacesW
PathRelativePathToA
PathRelativePathToW
PathRemoveArgsA
PathRemoveArgsW
PathRemoveBackslashA
PathRemoveBackslashW
PathRemoveBlanksA
PathRemoveBlanksW
PathRemoveExtensionA
PathRemoveExtensionW
PathRemoveFileSpecA
PathRemoveFileSpecW
PathRenameExtensionA
PathRenameExtensionW
PathSearchAndQualifyA
PathSearchAndQualifyW
PathSetDlgItemPathA
PathSetDlgItemPathW
PathSkipRootA
PathSkipRootW
PathStripPathA
PathStripPathW
PathStripToRootA
PathStripToRootW
PathUnExpandEnvStringsA
PathUnExpandEnvStringsW
PathUndecorateA
PathUndecorateW
PathUnmakeSystemFolderA
PathUnmakeSystemFolderW
PathUnquoteSpacesA
PathUnquoteSpacesW
QISearch
SHAllocShared
SHAnsiToAnsi
SHAnsiToUnicode
SHAutoComplete
SHCopyKeyA
SHCopyKeyW
SHCreateMemStream
SHCreateShellPalette
SHCreateStreamOnFileA
SHCreateStreamOnFileEx
SHCreateStreamOnFileW
SHCreateStreamWrapper
SHCreateThread
SHCreateThreadRef
SHCreateThreadWithHandle
SHDeleteEmptyKeyA
SHDeleteEmptyKeyW
SHDeleteKeyA
SHDeleteKeyW
SHDeleteOrphanKeyA
SHDeleteOrphanKeyW
SHDeleteValueA
SHDeleteValueW
SHEnumKeyExA
SHEnumKeyExW
SHEnumValueA
SHEnumValueW
SHFormatDateTimeA
SHFormatDateTimeW
SHFreeShared
SHGetInverseCMAP
SHGetThreadRef
SHGetValueA
SHGetValueW
SHGetViewStatePropertyBag
SHIsChildOrSelf
SHIsLowMemoryMachine
SHLoadIndirectString
SHLockShared
SHMessageBoxCheckA
SHMessageBoxCheckW
SHOpenRegStream2A
SHOpenRegStream2W
SHOpenRegStreamA
SHOpenRegStreamW
SHPropertyBag_ReadStrAlloc
SHPropertyBag_WriteBSTR
SHQueryInfoKeyA
SHQueryInfoKeyW
SHQueryValueExA
SHQueryValueExW
SHRegCloseUSKey
SHRegCreateUSKeyA
SHRegCreateUSKeyW
SHRegDeleteEmptyUSKeyA
SHRegDeleteEmptyUSKeyW
SHRegDeleteUSValueA
SHRegDeleteUSValueW
SHRegDuplicateHKey
SHRegEnumUSKeyA
SHRegEnumUSKeyW
SHRegEnumUSValueA
SHRegEnumUSValueW
SHRegGetBoolUSValueA
SHRegGetBoolUSValueW
SHRegGetIntW
SHRegGetPathA
SHRegGetPathW
SHRegGetUSValueA
SHRegGetUSValueW
SHRegGetValueA
SHRegGetValueW
SHRegOpenUSKeyA
SHRegOpenUSKeyW
SHRegQueryInfoUSKeyA
SHRegQueryInfoUSKeyW
SHRegQueryUSValueA
SHRegQueryUSValueW
SHRegSetPathA
SHRegSetPathW
SHRegSetUSValueA
SHRegSetUSValueW
SHRegWriteUSValueA
SHRegWriteUSValueW
SHRegisterValidateTemplate
SHReleaseThreadRef
SHRunIndirectRegClientCommand
SHSendMessageBroadcastA
SHSendMessageBroadcastW
SHSetThreadRef
SHSetValueA
SHSetValueW
SHSkipJunction
SHStrDupA
SHStrDupW
SHStripMneumonicA
SHStripMneumonicW
SHUnicodeToAnsi
SHUnicodeToUnicode
SHUnlockShared
ShellMessageBoxA
ShellMessageBoxW
StrCSpnA
StrCSpnIA
StrCSpnIW
StrCSpnW
StrCatBuffA
StrCatBuffW
StrCatChainW
StrCatW
StrChrA
StrChrIA
StrChrIW
StrChrNIW
StrChrNW
StrChrW
StrCmpCA
StrCmpCW
StrCmpICA
StrCmpICW
StrCmpIW
StrCmpLogicalW
StrCmpNA
StrCmpNCA
StrCmpNCW
StrCmpNIA
StrCmpNICA
StrCmpNICW
StrCmpNIW
StrCmpNW
StrCmpW
StrCpyNW
StrCpyW
StrDupA
StrDupW
StrFormatByteSize64A
StrFormatByteSizeA
StrFormatByteSizeEx
StrFormatByteSizeW
StrFormatKBSizeA
StrFormatKBSizeW
StrFromTimeIntervalA
StrFromTimeIntervalW
StrIsIntlEqualA
StrIsIntlEqualW
StrNCatA
StrNCatW
StrPBrkA
StrPBrkW
StrRChrA
StrRChrIA
StrRChrIW
StrRChrW
StrRStrIA
StrRStrIW
StrRetToBSTR
StrRetToBufA
StrRetToBufW
StrRetToStrA
StrRetToStrW
StrSpnA
StrSpnW
StrStrA
StrStrIA
StrStrIW
StrStrNIW
StrStrNW
StrStrW
StrToInt64ExA
StrToInt64ExW
StrToIntA
StrToIntExA
StrToIntExW
StrToIntW
StrTrimA
StrTrimW
UrlApplySchemeA
UrlApplySchemeW
UrlCanonicalizeA
UrlCanonicalizeW
UrlCombineA
UrlCombineW
UrlCompareA
UrlCompareW
UrlCreateFromPathA
UrlCreateFromPathW
UrlEscapeA
UrlEscapeW
UrlFixupW
UrlGetLocationA
UrlGetLocationW
UrlGetPartA
UrlGetPartW
UrlHashA
UrlHashW
UrlIsA
UrlIsNoHistoryA
UrlIsNoHistoryW
UrlIsOpaqueA
UrlIsOpaqueW
UrlIsW
UrlUnescapeA
UrlUnescapeW
WhichPlatform
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW

Sections

.text
Size: 323KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

72f2eb5f918b203273f13006b674eb11

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

02:0f:78:bb:9c:4c:b5:05:91:3a:90:f5:fb:18:98:62Certificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

02:0f:78:bb:9c:4c:b5:05:91:3a:90:f5:fb:18:98:62Certificate

Extended Key Usages

Key Usages

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6dCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

6f:e6:bc:c3:e2:b6:d0:33:ce:e9:46:b9:34:a6:ef:cd:d1:7d:cc:37:10:e6:ee:5e:ff:fd:9a:13:cf:42:53:0eSigner

5a:97:62:0b:38:39:38:21:96:47:47:18:5b:d0:cf:b4:ff:24:4f:0aSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

gdi32

user32

ntdll

msvcrt

api-ms-win-core-localregistry-l1-1-0

kernelbase

Exports

Exports

Sections

.text Size: 323KB - Virtual size: 323KB

.data Size: 3KB - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 11KB - Virtual size: 10KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

02:0f:78:bb:9c:4c:b5:05:91:3a:90:f5:fb:18:98:62
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

02:0f:78:bb:9c:4c:b5:05:91:3a:90:f5:fb:18:98:62
Certificate

04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

6f:e6:bc:c3:e2:b6:d0:33:ce:e9:46:b9:34:a6:ef:cd:d1:7d:cc:37:10:e6:ee:5e:ff:fd:9a:13:cf:42:53:0e
Signer

5a:97:62:0b:38:39:38:21:96:47:47:18:5b:d0:cf:b4:ff:24:4f:0a
Signer

.text
Size: 323KB - Virtual size: 323KB

.data
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 11KB - Virtual size: 10KB