7f768c9d7f9069928ce49a05502a8a76c1c98a5f9ec0fdcf7cf5bf2244eea3d7

Sharing

Copy URL Twitter E-mail

General

Target

7f768c9d7f9069928ce49a05502a8a76c1c98a5f9ec0fdcf7cf5bf2244eea3d7
Size

975KB
MD5

dabdfadb87dec9d45ea4203e590bf187
SHA1

88545bae10d873a003bcf4f96be2205041d8bd02
SHA256

7f768c9d7f9069928ce49a05502a8a76c1c98a5f9ec0fdcf7cf5bf2244eea3d7
SHA512

cb18ca6e765844fdaed46a157d8b0f603029d60dc195063ddfcecebab5e2216f360e8bb7151b5efecc16547400510d73881e5594c0ad72505e6431fdfe7d6eb7
SSDEEP

12288:EN668AUd4wHmAQHB7CGwzcFCaQcnbHJ5cr2dA9i0GCYnjIZphdZu1puZHz+PNhWv:EgLW7CzzcFhQJZphdZkQPbmBm+M

Score

1^/10

Malware Config

Signatures

Files

7f768c9d7f9069928ce49a05502a8a76c1c98a5f9ec0fdcf7cf5bf2244eea3d7
.dll regsvr32 windows:6 windows x86 arch:x86

4d88e5c5467a1aab36a7c557e9798fe1

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:d3:76:ff:b1:89:3c:1b:b2:1c:2c:05:10:aa:6c:ec
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

24/02/2023, 00:00

Not After

24/02/2025, 23:59

Subject

CN=SAP SE,OU=SAP Production CSA,O=SAP SE,L=Walldorf,ST=Baden-Württemberg,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

81:73:c6:b4:76:a4:ef:36:64:bb:91:e6:8b:a6:b8:22:24:83:09:79:f7:85:e6:60:56:47:4f:9b:2d:64:a1:e4
Signer

Actual PE Digest

81:73:c6:b4:76:a4:ef:36:64:bb:91:e6:8b:a6:b8:22:24:83:09:79:f7:85:e6:60:56:47:4f:9b:2d:64:a1:e4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\depot\bas\753_REL\fes_800_REL\src\opt\ntintel\wdtmctrl.pdb

Imports

imm32

ImmReleaseContext
ImmGetCompositionStringW
ImmGetCompositionStringA
ImmGetContext

sapfdraw

IsFioriMode
GetMainframeScalePercentage
SapDrw32GetColor
SapDrw32DrawPushbutton
SapDrawBeginDirect2dDrawingSavely_
SapDrawEndDirect2dDrawingSavely_
IsBelizeDesign
SetAnimatedFocusScreenPos
HideAnimatedFocus
ShowAnimatedFocus
SetAnimatedFocusVisible
SetAnimatedFocusRect
GetAnimatedFocusHwnd
UseSMCRendering
IsRunInKayak
IsMultiMonitorDpiAware
SapDrw32DrawFocusRect
SapDrw32DrawImage
IsHighContrastTheme
SapDrw32DrawLogonWindow

sapthmdrw

?SapSetWindowTheme@@YAJPAUHWND__@@PB_W1@Z

sapfewrm

RmIsHighContrastTheme
RmIsBelizeDesign
RmGetBackgroundColor
RmGetForegroundColor
RmIsSystemHighContrast
RmIsFrogThemeActive
IsAnimatedFocus

sapfewcb

?DestroyWindow@CBubble@@UAEHXZ
?GetRuntimeClass@CBubble@@UBEPAUCRuntimeClass@@XZ
?GetMessageMap@CBubble@@MBEPBUAFX_MSGMAP@@XZ
?PreCreateWindow@CBubble@@UAEHAAUtagCREATESTRUCTA@@@Z
?Create@CBubble@@QAEHPAVCWnd@@@Z
?Off@CBubble@@QAE_NXZ
?Track@CBubble@@QAEXUtagPOINT@@PBDHUtagRECT@@HPAVCWnd@@H_NW4SpecialHandling@@H@Z
?Hide@CBubble@@QAE_NXZ
??0CBubble@@QAE@XZ
??1CBubble@@UAE@XZ

sapfewut

?GetThreadDpiAwarenessContext@MultiMonitorDpiApi@@YGPAUDPI_AWARENESS_CONTEXT__@@XZ
?AreDpiAwarenessContextsEqual@MultiMonitorDpiApi@@YGHPAUDPI_AWARENESS_CONTEXT__@@0@Z
??0DpiAwarenessChange@@QAE@_N0@Z
getRegValBOOL
?GetDpiForWindow@@YGIPAUHWND__@@@Z
??1DpiAwarenessChange@@QAE@XZ
?reset@DpiAwarenessChange@@QAEXXZ

mfc140

ord5764
ord5937
ord862
ord1380
ord2322
ord2309
ord7321
ord865
ord11376
ord10954
ord10329
ord10445
ord9974
ord1382
ord14498
ord9209
ord12157
ord10205
ord7579
ord5765
ord3658
ord2199
ord2394
ord321
ord1169
ord4874
ord14243
ord14390
ord14048
ord7076
ord460
ord6808
ord3252
ord4229
ord1445
ord9094
ord6814
ord3253
ord3358
ord4230
ord1451
ord9095
ord7607
ord6092
ord6563
ord5814
ord4216
ord1178
ord9089
ord5960
ord13044
ord8087
ord6731
ord832
ord14311
ord5174
ord4128
ord11188
ord9531
ord9693
ord6106
ord3997
ord11284
ord11316
ord9141
ord11373
ord10085
ord9109
ord10512
ord10515
ord10513
ord8932
ord8944
ord8969
ord9992
ord11600
ord10219
ord10220
ord10250
ord10702
ord8923
ord10233
ord10278
ord305
ord10354
ord10249
ord10310
ord10311
ord10312
ord11121
ord11122
ord10297
ord11168
ord11163
ord11158
ord11309
ord10007
ord9451
ord9949
ord11114
ord10253
ord10675
ord10302
ord10303
ord8273
ord12702
ord14497
ord5256
ord5015
ord10407
ord10405
ord11853
ord7771
ord5172
ord11968
ord2859
ord1360
ord5740
ord10204
ord3299
ord3828
ord13092
ord13562
ord5389
ord5229
ord5529
ord5500
ord11146
ord9306
ord10970
ord3369
ord12794
ord10225
ord10351
ord8871
ord1874
ord12614
ord2595
ord3926
ord6342
ord8183
ord6058
ord5754
ord5232
ord297
ord1696
ord1693
ord2003
ord8022
ord4715
ord4866
ord3856
ord13011
ord5697
ord2560
ord4490
ord7413
ord4596
ord4594
ord4597
ord8735
ord7783
ord4476
ord846
ord2538
ord3963
ord2253
ord881
ord884
ord2750
ord1542
ord2403
ord13481
ord5613
ord7302
ord7952
ord13646
ord8059
ord5176
ord2441
ord2443
ord2444
ord2451
ord4771
ord6389
ord5265
ord13346
ord5345
ord12510
ord7415
ord9409
ord11336
ord7573
ord2307
ord492
ord1139
ord14514
ord7040
ord363
ord4351
ord1067
ord7452
ord7420
ord1525
ord1691
ord3005
ord5059
ord1424
ord3238
ord6791
ord9092
ord1443
ord4227
ord3250
ord6806
ord11339
ord4457
ord8776
ord7416
ord9088
ord1177
ord2751
ord14487
ord3866
ord2989
ord8704
ord4215
ord3184
ord6562
ord4868
ord3177
ord540
ord6460
ord2520
ord12512
ord845
ord6333
ord13783
ord8088
ord7407
ord3958
ord1472
ord3289
ord7459
ord1109
ord10421
ord458
ord6505
ord12472
ord14045
ord7774
ord8732
ord14484
ord2986
ord2298
ord1131
ord6523
ord12969
ord358
ord6463
ord3874
ord6540
ord4807
ord1448
ord975
ord3962
ord2210
ord12074
ord6193
ord13677
ord2758
ord9167
ord12115
ord8997
ord10963
ord11343
ord4084
ord3395
ord3396
ord3159
ord9096
ord11850
ord10379
ord6851
ord13854
ord13855
ord12983
ord6853
ord5401
ord13403
ord6942
ord8705
ord4218
ord14291
ord2524
ord4869
ord3924
ord6581
ord4841
ord3230
ord14518
ord12291
ord8321
ord1043
ord286
ord2376
ord1507
ord11028
ord4865
ord2200
ord2325
ord2313
ord14449
ord1468
ord993
ord1050
ord324
ord2241
ord3844
ord5894
ord12182
ord8180
ord12194
ord12162
ord5742
ord10202
ord4579
ord7960
ord6732
ord8429
ord6103
ord8347
ord12190
ord10383
ord12869
ord12806
ord8285
ord5336
ord2484
ord12485
ord12484
ord14509
ord7886
ord14507
ord9353
ord4143
ord4082
ord12888
ord7905
ord2027
ord11928
ord11927
ord14380
ord12474
ord7964
ord14581
ord6322
ord14583
ord6324
ord14582
ord6323
ord9083
ord1064
ord4210
ord3140
ord6464
ord3825
ord9422
ord4468
ord8306
ord14149
ord2860
ord4656
ord1528
ord1529
ord306
ord5095
ord4315
ord2387
ord1543
ord1555
ord9085
ord1068
ord3864
ord2988
ord8703
ord4213
ord3142
ord6471
ord6104
ord7619
ord6195
ord13681
ord3298
ord3295
ord10207
ord8173
ord2759
ord14699
ord10237
ord10239
ord10238
ord10236
ord10240
ord5631
ord11671
ord11672
ord12032
ord3830
ord11881
ord14502
ord8922
ord12163
ord6947
ord10950
ord9213
ord3259
ord13798
ord12205
ord12201
ord1717
ord1739
ord1765
ord1751
ord1772
ord4920
ord6747
ord4987
ord4932
ord4950
ord6330
ord4944
ord4938
ord4997
ord4981
ord4926
ord5003
ord4958
ord4896
ord4911
ord4972
ord4493
ord5769
ord9647
ord4485
ord3050
ord14510
ord7887
ord14508
ord6848
ord13475
ord11663
ord13628
ord5911
ord5398
ord2680
ord12067
ord3933
ord3363
ord3364
ord3258
ord12111
ord4870
ord1000
ord5228
ord5528
ord5739
ord9305
ord5504
ord5231
ord5390
ord5210
ord7687
ord7688
ord7677
ord5388
ord8182
ord9166
ord262
ord13782
ord14319
ord14571
ord12348
ord2992
ord12503
ord1526
ord1044
ord310
ord300
ord316
ord6724
ord2381
ord2383
ord5096
ord3841
ord266
ord265
ord1106
ord13966
ord1509

kernel32

CloseHandle
GlobalAlloc
GlobalSize
GlobalUnlock
GlobalLock
GlobalFree
TlsAlloc
TlsFree
FreeLibrary
GetModuleFileNameA
GetProcAddress
LoadLibraryA
GetUserDefaultLangID
SetLastError
OutputDebugStringA
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
SetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GetACP
ReadFile
GetFileSize
DecodePointer
RaiseException
GetLastError
HeapDestroy
GetCurrentThreadId
MultiByteToWideChar
GetModuleHandleW
CreateMutexA
LoadResource
FindResourceA
WideCharToMultiByte
GetVersionExA
LocalAlloc
LocalLock
LocalUnlock
LocalFree
WaitForSingleObject
MulDiv
ResetEvent
LockResource
SizeofResource
FindResourceW
CreateFileA
GetModuleHandleA
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
ReleaseMutex
OutputDebugStringW

user32

SetRect
SetWindowPos
DestroyWindow
CreateWindowExA
GetWindowRect
GetCursorPos
GetParent
GetClientRect
GetWindowLongA
EnableWindow
GetKeyState
SetFocus
GetNextDlgTabItem
IsWindow
PostMessageA
UnregisterClassA
SendMessageA
SetRectEmpty
MessageBoxA
SetWindowPlacement
LoadCursorA
RedrawWindow
SetForegroundWindow
KillTimer
RegisterWindowMessageW
IsRectEmpty
IntersectRect
GetMonitorInfoA
MonitorFromWindow
SystemParametersInfoA
MapDialogRect
GetWindowThreadProcessId
GetClassNameA
EnumThreadWindows
OffsetRect
FillRect
WindowFromPoint
SetCursor
GetWindowTextLengthA
GetWindowTextA
GetPropA
GetWindowDC
SetActiveWindow
DrawTextW
RemoveMenu
GetMenuItemID
CheckMenuItem
GetSystemMenu
GetActiveWindow
GetDialogBaseUnits
IsIconic
GetWindowPlacement
MoveWindow
ShowWindow
CallWindowProcA
PostMessageW
SendMessageW
GetSysColor
GetScrollInfo
SetWindowTextA
EnableScrollBar
SetScrollPos
GetDlgCtrlID
SetDlgItemTextW
SetDlgItemTextA
LoadBitmapW
IsWindowEnabled
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
RemovePropA
SetPropA
GetDlgItem
GetClassNameW
SetWindowLongW
GetWindowLongW
FrameRect
SetWindowTextW
CallWindowProcW
DefWindowProcW
EnumChildWindows
SetWindowLongA
MessageBoxW
GetWindowTextLengthW
GetWindowTextW
ShowScrollBar
InvalidateRgn
InvalidateRect
UpdateWindow
DeleteMenu
AppendMenuW
AppendMenuA
GetSubMenu
LoadMenuW
GetSystemMetrics
IsWindowVisible
ClientToScreen
SetCursorPos
EndPaint
BeginPaint
ReleaseDC
GetDC
GetFocus
DestroyIcon
PtInRect
EqualRect
CopyRect

gdi32

SetTextColor
GetObjectA
CreateFontIndirectA
CreatePen
GetTextColor
LineTo
SetBkColor
GetBkColor
GetClipBox
GetBitmapDimensionEx
GetDeviceCaps
GetStockObject
GetTextExtentPoint32W
GetTextMetricsA
SetBitmapDimensionEx
TranslateCharsetInfo
SelectPalette
SelectObject
RealizePalette
DeleteDC
CreateSolidBrush
CreateCompatibleDC
CreateBitmap
BitBlt
MoveToEx
DeleteObject

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA

comctl32

ImageList_AddMasked
ImageList_GetIcon
_TrackMouseEvent
ImageList_SetBkColor

shlwapi

SHGetValueA
SHDeleteEmptyKeyA
PathAppendA

ole32

CoTaskMemAlloc
StringFromCLSID
ReleaseStgMedium
CLSIDFromString
OleRun
CoCreateInstance
CLSIDFromProgID
CoTaskMemFree

oleaut32

SysAllocStringLen
VariantInit
VariantChangeType
VarBstrCat
LoadRegTypeLi
SysAllocStringByteLen
SysStringByteLen
OleTranslateColor
SysStringLen
SysAllocString
VariantClear
VarBstrCmp
GetErrorInfo
SetErrorInfo
CreateErrorInfo
VariantCopy
SysFreeString

msvcp140

?_Xout_of_range@std@@YAXPBD@Z
?_W_Getmonths@_Locinfo@std@@QBEPBGXZ
?_W_Getdays@_Locinfo@std@@QBEPBGXZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
_Mbrtowc
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
__current_exception_context
__current_exception
memcmp
wcsstr
memmove
_purecall
__std_terminate
__CxxFrameHandler3
memcpy
memset
wcschr
__std_exception_copy
__std_exception_destroy
_CxxThrowException

api-ms-win-crt-heap-l1-1-0

malloc
calloc
_recalloc
free
realloc

api-ms-win-crt-runtime-l1-1-0

_cexit
terminate
_initterm
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_invalid_parameter_noinfo_noreturn
_errno
_invalid_parameter_noinfo
_seh_filter_dll
_initterm_e
_configure_narrow_argv

api-ms-win-crt-convert-l1-1-0

_wtoi
_itow_s
wcstod
atoi
_itoa_s

api-ms-win-crt-string-l1-1-0

isleadbyte
isalnum
wcsncpy_s
strlen
strcpy_s
wcscpy_s
strcat_s
wcscat_s
strncmp
wcsncmp
wcsncat_s
wcslen

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vsprintf_s
__stdio_common_vswprintf_s
__stdio_common_vsscanf
fgets
fputs
fseek
fflush
__stdio_common_vfprintf_s
fopen_s
fclose
__stdio_common_vfprintf
feof

api-ms-win-crt-multibyte-l1-1-0

_mbsstr
_ismbcalpha
_mbscmp
_mbsspn
_mbstok_s
_mbschr
_ismbcupper
_mbscspn
_mbsnbcpy_s
_mbsnbcmp
_ismbclower
_mbsinc
_mbsicmp
_mbsncmp
_mbsrchr
_mbsnbicmp
_ismbcdigit
_mbccpy_s
_mbslen

api-ms-win-crt-math-l1-1-0

ceil
modf
_except1

api-ms-win-crt-time-l1-1-0

_time64
_mktime64
_localtime64_s
strftime

api-ms-win-crt-locale-l1-1-0

___mb_cur_max_func

api-ms-win-crt-utility-l1-1-0

bsearch
qsort

api-ms-win-crt-environment-l1-1-0

_dupenv_s

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SapPcTxtGetDefaultLanguage
SapPcTxtGetInfo
SapPcTxtGetLangId
SapPcTxtGetLangId2
SapPcTxtGetMaxLen
SapPcTxtLoad
SapPcTxtRead
SapPcTxtSetDefaultLanguage
SapPcTxtSetErrorMode
SapPcTxtTestRead
SapPcTxtTrace
SapPcTxtUnLoad
SapPcTxtVerifyLanguage

Sections

.text
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d88e5c5467a1aab36a7c557e9798fe1

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

01:d3:76:ff:b1:89:3c:1b:b2:1c:2c:05:10:aa:6c:ecCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

81:73:c6:b4:76:a4:ef:36:64:bb:91:e6:8b:a6:b8:22:24:83:09:79:f7:85:e6:60:56:47:4f:9b:2d:64:a1:e4Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

imm32

sapfdraw

sapthmdrw

sapfewrm

sapfewcb

sapfewut

mfc140

kernel32

user32

gdi32

advapi32

comctl32

shlwapi

ole32

oleaut32

msvcp140

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-environment-l1-1-0

Exports

Exports

Sections

.text Size: 646KB - Virtual size: 646KB

.rdata Size: 124KB - Virtual size: 124KB

.data Size: 8KB - Virtual size: 11KB

.idata Size: 20KB - Virtual size: 19KB

.gfids Size: 7KB - Virtual size: 6KB

.tls Size: 1024B - Virtual size: 777B

.00cfg Size: 512B - Virtual size: 270B

.rsrc Size: 108KB - Virtual size: 107KB

.reloc Size: 48KB - Virtual size: 48KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

01:d3:76:ff:b1:89:3c:1b:b2:1c:2c:05:10:aa:6c:ec
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

81:73:c6:b4:76:a4:ef:36:64:bb:91:e6:8b:a6:b8:22:24:83:09:79:f7:85:e6:60:56:47:4f:9b:2d:64:a1:e4
Signer

.text
Size: 646KB - Virtual size: 646KB

.rdata
Size: 124KB - Virtual size: 124KB

.data
Size: 8KB - Virtual size: 11KB

.idata
Size: 20KB - Virtual size: 19KB

.gfids
Size: 7KB - Virtual size: 6KB

.tls
Size: 1024B - Virtual size: 777B

.00cfg
Size: 512B - Virtual size: 270B

.rsrc
Size: 108KB - Virtual size: 107KB

.reloc
Size: 48KB - Virtual size: 48KB