2fd9e9ac64531f41b452305085695fa6ec251ea1a6e71e1c6de9c77d0d61ebbf

Sharing

Copy URL Twitter E-mail

General

Target

2fd9e9ac64531f41b452305085695fa6ec251ea1a6e71e1c6de9c77d0d61ebbf
Size

4.2MB
MD5

5cd894bc2776dfb1b9e581a30713d9b0
SHA1

f59e0128ec745ce1247dfe21ba480ced2f68c795
SHA256

2fd9e9ac64531f41b452305085695fa6ec251ea1a6e71e1c6de9c77d0d61ebbf
SHA512

cbe18af0eb86350c343b2a7311429c4ed750cd3f20dc72f61e6d0d26b0f34cb836d571f0f445ebf9085e41ab0cd4dba2a0b951536f8ffbe1bbd13b66faa20707
SSDEEP

49152:FToe61dS6mzSf65ojS3Tbf6U31IlSlbz/Rw91An03cPnuVtUCZAOYnBakmfq:uwSfMDb3MUYIUG

Score

1^/10

Malware Config

Signatures

Files

2fd9e9ac64531f41b452305085695fa6ec251ea1a6e71e1c6de9c77d0d61ebbf
.dll windows:6 windows x64 arch:x64

f8d1bd52e854c03364f9b3420091a1cc

Code Sign

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/01/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:4d:67:f6:43:16:c9:2a:3b:7a:17:cc:46:97:6a:8f
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

28/07/2021, 00:00

Not After

27/07/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA256 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:91:39:39:16:23:33:2d:43:e3:98:d1:0d:0a:da:f9
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA256 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

22/02/2024, 00:00

Not After

17/07/2024, 23:59

Subject

SERIALNUMBER=4969967,CN=Zoom Video Communications\, Inc.,O=Zoom Video Communications\, Inc.,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

13/01/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:4d:67:f6:43:16:c9:2a:3b:7a:17:cc:46:97:6a:8f
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

28/07/2021, 00:00

Not After

27/07/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA256 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:91:39:39:16:23:33:2d:43:e3:98:d1:0d:0a:da:f9
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA256 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

22/02/2024, 00:00

Not After

17/07/2024, 23:59

Subject

SERIALNUMBER=4969967,CN=Zoom Video Communications\, Inc.,O=Zoom Video Communications\, Inc.,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

19:21:5e:93:67:ed:c5:ea:bf:d2:93:c1:93:c9:1e:4d:be:ac:d5:52
Signer

Actual PE Digest

19:21:5e:93:67:ed:c5:ea:bf:d2:93:c1:93:c9:1e:4d:be:ac:d5:52

Digest Algorithm

sha1

PE Digest Matches

true

8a:21:46:7c:1c:a3:5d:86:ad:20:12:51:67:1e:80:6e:70:e0:e9:fe:d1:4d:3c:cf:b2:d8:f0:6c:7d:61:ad:11
Signer

Actual PE Digest

8a:21:46:7c:1c:a3:5d:86:ad:20:12:51:67:1e:80:6e:70:e0:e9:fe:d1:4d:3c:cf:b2:d8:f0:6c:7d:61:ad:11

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\jenkins\workspace\Client\Client\DMT\windows\release\ffmpeg\libavcodec\avcodec_zm-59.pdb

Imports

avutil_zm-57

av_image_check_size
av_log_once
av_buffer_get_ref_count
av_realloc_array
av_display_rotation_set
av_display_matrix_flip
av_fast_malloc
av_fast_mallocz
av_frame_new_side_data_from_buf
av_film_grain_params_create_side_data
av_pix_fmt_get_chroma_sub_sample
av_stereo3d_create_side_data
av_timecode_get_smpte
av_timecode_make_smpte_tc_string2
av_image_copy
av_frame_remove_side_data
av_video_enc_params_create_side_data
av_rescale
av_find_best_pix_fmt_of_2
av_dict_copy
av_dict_free
av_stereo3d_alloc
av_div_q
av_channel_layout_default
av_buffer_make_writable
av_opt_set_defaults2
av_opt_set
avpriv_slicethread_create
avpriv_slicethread_execute
avpriv_slicethread_free
av_memcpy_backptr
av_get_bits_per_pixel
av_samples_fill_arrays
av_realloc_f
av_get_cpu_flags
av_reallocp
av_buffer_pool_get
av_sample_fmt_is_planar
av_buffer_pool_uninit
av_buffer_pool_init
av_opt_copy
av_opt_get_int
av_cpu_count
av_strdup
av_buffer_allocz
av_get_picture_type_char
av_frame_copy_props
av_frame_get_buffer
av_frame_ref
av_samples_set_silence
av_get_planar_sample_fmt
av_image_fill_plane_sizes
av_usleep
av_calloc
av_malloc_array
av_pix_fmt_count_planes
av_hwframe_ctx_init
av_hwframe_ctx_alloc
av_hwdevice_get_type_name
av_frame_apply_cropping
av_frame_new_side_data
av_frame_copy
av_frame_is_writable
av_frame_move_ref
av_samples_copy
av_fifo_write
av_fifo_alloc2
av_memdup
av_strerror
av_bprint_finalize
av_bprint_init
av_strtok
av_get_token
av_opt_next
av_opt_set_dict2
av_opt_set_from_string
av_dynarray_add_nofree
avpriv_set_systematic_pal2
av_buffer_replace
av_buffer_is_writable
av_buffer_ref
av_buffer_default_free
av_buffer_create
av_buffer_alloc
av_realloc
av_dict_set
av_dict_get
av_frame_free
av_frame_alloc
av_buffer_unref
av_opt_set_dict
av_opt_free
av_opt_set_defaults
av_get_bytes_per_sample
av_get_sample_fmt_name
av_fourcc_make_string
av_reallocp_array
av_gcd
avpriv_emms_asm
av_get_media_type_string
av_image_check_sar
av_image_check_size2
av_mul_q
av_image_fill_linesizes
av_reduce
av_get_pix_fmt_name
av_chroma_location_name
av_color_space_name
av_hwframe_get_buffer
av_channel_layout_check
av_color_transfer_name
av_color_primaries_name
av_color_range_name
av_pix_fmt_desc_get
av_fifo_freep2
av_fifo_read
av_fifo_can_read
av_channel_layout_describe
av_get_channel_layout_nb_channels
av_get_channel_layout_string
av_bprint_chars
av_bprintf
av_bprint_init_for_buffer
av_match_list
av_samples_get_buffer_size
av_log_get_level
av_fast_realloc
av_rescale_q
av_frame_get_side_data
av_buffer_realloc
av_frame_unref
av_channel_layout_compare
av_channel_layout_copy
avpriv_request_sample
av_freep
av_free
av_mallocz
av_malloc
avpriv_float_dsp_alloc
av_default_item_name
avpriv_report_missing_feature
av_log
av_channel_layout_uninit
av_image_copy_plane
av_channel_layout_from_mask

ole32

CoTaskMemFree

kernel32

GetCurrentProcessId
InitOnceBeginInitialize
InitOnceComplete
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseMutex
WaitForSingleObjectEx
GetFullPathNameW
MultiByteToWideChar
CloseHandle
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
InitializeSRWLock
InitializeConditionVariable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetModuleHandleW
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW

vcruntime140

__std_type_info_destroy_list
strchr
__current_exception
__current_exception_context
memcpy
memmove
memset
memcmp
__C_specific_handler
strstr

api-ms-win-crt-runtime-l1-1-0

_beginthreadex
terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_errno
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
abort

api-ms-win-crt-math-l1-1-0

cos
atanf
cosf
hypot
sqrtf
powf
_fdopen
cbrtf
ldexp
sin
sinf
log2f
lrintf
cbrt
frexp
atan2f
lrint
sqrt
floor

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
getchar
fwrite
ftell
fseek
fread
fopen
fflush
feof
fclose
__acrt_iob_func
_wsopen
_tempnam
__stdio_common_vsscanf
__stdio_common_vsprintf
_sopen
fgets

api-ms-win-crt-utility-l1-1-0

bsearch

api-ms-win-crt-heap-l1-1-0

malloc
calloc
free

api-ms-win-crt-string-l1-1-0

strncpy
strspn
strncmp
strcmp

api-ms-win-crt-convert-l1-1-0

strtol

Exports

Exports

av_ac3_parse_header
av_adts_header_parse
av_bsf_alloc
av_bsf_flush
av_bsf_free
av_bsf_get_by_name
av_bsf_get_class
av_bsf_get_null_filter
av_bsf_init
av_bsf_iterate
av_bsf_list_alloc
av_bsf_list_append
av_bsf_list_append2
av_bsf_list_finalize
av_bsf_list_free
av_bsf_list_parse_str
av_bsf_receive_packet
av_bsf_send_packet
av_codec_ffversion
av_codec_is_decoder
av_codec_is_encoder
av_codec_iterate
av_cpb_properties_alloc
av_d3d11va_alloc_context
av_dirac_parse_sequence_header
av_dv_codec_profile
av_dv_codec_profile2
av_dv_frame_profile
av_fast_padded_malloc
av_fast_padded_mallocz
av_fft_calc
av_fft_end
av_fft_init
av_fft_permute
av_fopen_utf8
av_get_audio_frame_duration
av_get_audio_frame_duration2
av_get_bits_per_sample
av_get_exact_bits_per_sample
av_get_pcm_codec
av_get_profile_name
av_grow_packet
av_imdct_calc
av_imdct_half
av_init_packet
av_jni_get_java_vm
av_jni_set_java_vm
av_mdct_calc
av_mdct_end
av_mdct_init
av_mediacodec_alloc_context
av_mediacodec_default_free
av_mediacodec_default_init
av_mediacodec_release_buffer
av_mediacodec_render_buffer_at_time
av_new_packet
av_packet_add_side_data
av_packet_alloc
av_packet_clone
av_packet_copy_props
av_packet_free
av_packet_free_side_data
av_packet_from_data
av_packet_get_side_data
av_packet_make_refcounted
av_packet_make_writable
av_packet_move_ref
av_packet_new_side_data
av_packet_pack_dictionary
av_packet_ref
av_packet_rescale_ts
av_packet_shrink_side_data
av_packet_side_data_name
av_packet_unpack_dictionary
av_packet_unref
av_parser_close
av_parser_init
av_parser_iterate
av_parser_parse2
av_qsv_alloc_context
av_shrink_packet
av_vorbis_parse_frame
av_vorbis_parse_frame_flags
av_vorbis_parse_free
av_vorbis_parse_init
av_vorbis_parse_reset
av_xiphlacing
avcodec_align_dimensions
avcodec_align_dimensions2
avcodec_alloc_context3
avcodec_chroma_pos_to_enum
avcodec_close
avcodec_configuration
avcodec_dct_alloc
avcodec_dct_get_class
avcodec_dct_init
avcodec_decode_subtitle2
avcodec_default_execute
avcodec_default_execute2
avcodec_default_get_buffer2
avcodec_default_get_encode_buffer
avcodec_default_get_format
avcodec_descriptor_get
avcodec_descriptor_get_by_name
avcodec_descriptor_next
avcodec_encode_subtitle
avcodec_enum_to_chroma_pos
avcodec_fill_audio_frame
avcodec_find_best_pix_fmt_of_list
avcodec_find_decoder
avcodec_find_decoder_by_name
avcodec_find_encoder
avcodec_find_encoder_by_name
avcodec_flush_buffers
avcodec_free_context
avcodec_get_class
avcodec_get_frame_class
avcodec_get_hw_config
avcodec_get_hw_frames_parameters
avcodec_get_name
avcodec_get_subtitle_rect_class
avcodec_get_type
avcodec_is_open
avcodec_license
avcodec_open2
avcodec_parameters_alloc
avcodec_parameters_copy
avcodec_parameters_free
avcodec_parameters_from_context
avcodec_parameters_to_context
avcodec_pix_fmt_to_codec_tag
avcodec_profile_name
avcodec_receive_frame
avcodec_receive_packet
avcodec_send_frame
avcodec_send_packet
avcodec_string
avcodec_version
avpriv_ac3_parse_header
avpriv_adts_header_parse
avpriv_codec_get_cap_skip_frame_fill_param
avpriv_exif_decode_ifd
avpriv_find_start_code
avpriv_get_raw_pix_fmt_tags
avpriv_h264_has_num_reorder_frames
avpriv_mpeg4audio_get_config2
avpriv_mpegaudio_decode_header
avpriv_packet_list_free
avpriv_packet_list_get
avpriv_packet_list_put
avpriv_pix_fmt_find
avpriv_split_xiph_headers
avsubtitle_free

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 618KB - Virtual size: 618KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 337B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 313B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f8d1bd52e854c03364f9b3420091a1cc

Code Sign

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31Certificate

Extended Key Usages

Key Usages

0e:4d:67:f6:43:16:c9:2a:3b:7a:17:cc:46:97:6a:8fCertificate

Extended Key Usages

Key Usages

0c:91:39:39:16:23:33:2d:43:e3:98:d1:0d:0a:da:f9Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31Certificate

Extended Key Usages

Key Usages

0e:4d:67:f6:43:16:c9:2a:3b:7a:17:cc:46:97:6a:8fCertificate

Extended Key Usages

Key Usages

0c:91:39:39:16:23:33:2d:43:e3:98:d1:0d:0a:da:f9Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

19:21:5e:93:67:ed:c5:ea:bf:d2:93:c1:93:c9:1e:4d:be:ac:d5:52Signer

8a:21:46:7c:1c:a3:5d:86:ad:20:12:51:67:1e:80:6e:70:e0:e9:fe:d1:4d:3c:cf:b2:d8:f0:6c:7d:61:ad:11Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

avutil_zm-57

ole32

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

Exports

Exports

Sections

.text Size: 3.4MB - Virtual size: 3.4MB

.rdata Size: 618KB - Virtual size: 618KB

.data Size: 4KB - Virtual size: 1.4MB

.pdata Size: 72KB - Virtual size: 72KB

.idata Size: 12KB - Virtual size: 12KB

.gfids Size: 15KB - Virtual size: 14KB

.00cfg Size: 512B - Virtual size: 337B

_RDATA Size: 512B - Virtual size: 313B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 23KB - Virtual size: 22KB

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31
Certificate

0e:4d:67:f6:43:16:c9:2a:3b:7a:17:cc:46:97:6a:8f
Certificate

0c:91:39:39:16:23:33:2d:43:e3:98:d1:0d:0a:da:f9
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

0f:d1:bb:ca:79:6b:d7:f8:dd:4c:82:e1:0a:9a:96:31
Certificate

0e:4d:67:f6:43:16:c9:2a:3b:7a:17:cc:46:97:6a:8f
Certificate

0c:91:39:39:16:23:33:2d:43:e3:98:d1:0d:0a:da:f9
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

19:21:5e:93:67:ed:c5:ea:bf:d2:93:c1:93:c9:1e:4d:be:ac:d5:52
Signer

8a:21:46:7c:1c:a3:5d:86:ad:20:12:51:67:1e:80:6e:70:e0:e9:fe:d1:4d:3c:cf:b2:d8:f0:6c:7d:61:ad:11
Signer

.text
Size: 3.4MB - Virtual size: 3.4MB

.rdata
Size: 618KB - Virtual size: 618KB

.data
Size: 4KB - Virtual size: 1.4MB

.pdata
Size: 72KB - Virtual size: 72KB

.idata
Size: 12KB - Virtual size: 12KB

.gfids
Size: 15KB - Virtual size: 14KB

.00cfg
Size: 512B - Virtual size: 337B

_RDATA
Size: 512B - Virtual size: 313B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 23KB - Virtual size: 22KB