02d40bfba6a5317241a2557646285dddd38539e9c8a58db5cf4e2391c748b8c5_NeikiAnalytics[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

02d40bfba6a5317241a2557646285dddd38539e9c8a58db5cf4e2391c748b8c5_NeikiAnalytics.exe
Size

3.1MB
MD5

b66aa25312f2dad710afb0adf54a0bf0
SHA1

4bed50f1e8f977b66e653cd97b38b7d5850b3542
SHA256

02d40bfba6a5317241a2557646285dddd38539e9c8a58db5cf4e2391c748b8c5
SHA512

c9970b0b145bed48fadcf2b7da549130dd65649d1b36377134ceb57075b82d50b2dbd7088f0aa75610c5f58c16b4a17c435d5625547d0a50b5d2b4c65faa1476
SSDEEP

98304:M5tyVWbT8nL9BSL8/+MZMsiEHal7Xj2dhBmXRerRgIeHehmeEfE:WyVWbT8nLRDHmKd2XRerRgJ+hU

Score

1^/10

Malware Config

Signatures

Files

02d40bfba6a5317241a2557646285dddd38539e9c8a58db5cf4e2391c748b8c5_NeikiAnalytics.exe
.exe windows:5 windows x86 arch:x86

237ecf7bcc4193bb2fe2f194dd2e3f88

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

53:c8:7a:80:0c:ee:0e:2c:b0:13:63:41:e2:fc:c2:7f
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

09/03/2015, 00:00

Not After

07/05/2016, 23:59

Subject

CN=iTrusChina Co.\,Ltd.,OU=IT,O=iTrusChina Co.\,Ltd.,L=Beijing,ST=Beijing,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

49:bc:55:a3:f0:03:d8:3c:aa:f9:ea:72:e4:60:f5:64:bb:a0:bc:51
Signer

Actual PE Digest

49:bc:55:a3:f0:03:d8:3c:aa:f9:ea:72:e4:60:f5:64:bb:a0:bc:51

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

UuidFromStringA
UuidCreate
UuidToStringA
RpcStringFreeA

setupapi

SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsExA
SetupDiGetDeviceInterfaceDetailA

msimg32

AlphaBlend
TransparentBlt

wininet

InternetCloseHandle
InternetOpenA
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetSetOptionA
InternetCanonicalizeUrlA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

kernel32

IsProcessorFeaturePresent
IsValidCodePage
GetConsoleCP
GetConsoleMode
LCMapStringW
GetTimeZoneInformation
GetStringTypeW
SetHandleCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetDriveTypeW
CompareStringW
WriteConsoleW
GetCurrentDirectoryW
TerminateProcess
CreateFileW
GetProcessHeap
SetEnvironmentVariableA
HeapCreate
GetStdHandle
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
CreateThread
ExitThread
HeapReAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineA
ExitProcess
GetSystemInfo
GetSystemTimeAsFileTime
GetDateFormatA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SizeofResource
LockResource
LoadResource
FindResourceW
WideCharToMultiByte
GetCurrentThread
GetProcAddress
LoadLibraryA
LoadLibraryW
LoadLibraryExA
LoadLibraryExW
FindResourceA
FindResourceExW
FindResourceExA
FreeLibrary
lstrcpyA
WinExec
lstrlenA
lstrcatA
MultiByteToWideChar
GetWindowsDirectoryA
GetSystemDirectoryA
OutputDebugStringA
OutputDebugStringW
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
CloseHandle
GetLastError
CreateFileA
VerLanguageNameA
GetFileInformationByHandle
GetModuleFileNameA
DeleteFileA
Sleep
WaitForSingleObject
GetTimeFormatA
DecodePointer
EncodePointer
RtlUnwind
HeapFree
HeapAlloc
SearchPathA
GetProfileIntA
GetNumberFormatA
GetTempFileNameA
GetCurrentDirectoryA
GetFileTime
GetFileSizeEx
GetFileAttributesA
SetFileAttributesA
GetFileAttributesExA
SetErrorMode
GetACP
GetSystemDirectoryW
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
TlsGetValue
InterlockedIncrement
GetTickCount
WritePrivateProfileStringA
GetPrivateProfileIntA
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
InterlockedExchange
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
lstrcmpiA
GetThreadLocale
RaiseException
SetThreadPriority
FindFirstFileA
FindNextFileA
FindClose
GetCurrentProcessId
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
CompareStringA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
lstrcmpW
CreateEventA
ReleaseMutex
GlobalFree
GlobalSize
lstrlenW
MulDiv
GetModuleHandleW
VirtualAlloc
SuspendThread
VirtualFree
GetThreadContext
SetThreadContext
FlushInstructionCache
ResumeThread
VirtualProtect
InterlockedCompareExchange
VirtualQuery
EnumResourceNamesA
EnumResourceLanguagesA
FormatMessageA
ActivateActCtx
DeactivateActCtx
SetLastError
GetSystemTime
SystemTimeToFileTime
GetExitCodeProcess
ReleaseSemaphore
CreateSemaphoreA
CreateFileMappingA
MapViewOfFile
CopyFileA
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
GetModuleHandleA
GetCurrentThreadId
LocalFree
SetEvent
LocalAlloc
CreateMutexA
GetCurrentProcess
GetPrivateProfileStringA
GetFileSize
CreateDirectoryA
WriteFile
lstrcmpA
TerminateThread
CompareFileTime
GetLocalTime
GetTempPathA
ReadFile
CreateToolhelp32Snapshot
Process32First
Process32Next
CreateProcessA

user32

InsertMenuItemA
TranslateAcceleratorA
LoadImageA
GetIconInfo
HideCaret
InvertRect
LockWindowUpdate
BringWindowToTop
SetCursorPos
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
DrawFocusRect
DrawFrameControl
DrawEdge
DestroyAcceleratorTable
SetParent
GetMenuDefaultItem
CreatePopupMenu
IsMenu
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
IsZoomed
NotifyWinEvent
SetWindowRgn
GetSystemMenu
GetNextDlgGroupItem
PostThreadMessageA
DestroyIcon
CharNextA
ReleaseCapture
SetCapture
InvalidateRgn
OffsetRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
UnregisterClassA
LoadCursorW
EnumDisplayMonitors
SetRectEmpty
CopyImage
RealChildWindowFromPoint
GetSysColorBrush
DrawStateA
WaitMessage
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatA
ShowOwnedPopups
CharUpperA
MapVirtualKeyA
GetKeyNameTextA
SystemParametersInfoA
DestroyMenu
GetMenuItemInfoA
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetMessageA
TranslateMessage
GetActiveWindow
WindowFromPoint
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
IsWindowEnabled
MoveWindow
SetWindowTextA
LoadAcceleratorsA
SetDlgItemTextA
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
IntersectRect
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
RedrawWindow
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowPos
CopyRect
GetMenuState
GetMenuStringA
AppendMenuA
LoadImageW
FrameRect
CharUpperBuffA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
CreateMenu
IsClipboardFormatAvailable
GetDoubleClickTime
IsCharLowerA
SubtractRect
DestroyCursor
RemoveMenu
GetWindow
UpdateWindow
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
AnimateWindow
RegisterHotKey
RegisterDeviceNotificationA
GetWindowRgn
IsDialogMessageA
GetClientRect
GetUpdateRect
InvalidateRect
ValidateRect
EnableWindow
DrawIconEx
GetMenuItemCount
GetMenuItemID
GetWindowRect
ClientToScreen
GetDesktopWindow
SetCursor
PtInRect
InflateRect
SendMessageA
ScreenToClient
GetDC
ReleaseDC
SetTimer
MapVirtualKeyExA
KillTimer
GetParent
GetMessagePos
GetSysColor
IsWindow
CopyIcon
LoadCursorA
SetWindowLongA
MessageBeep
PostMessageA
FindWindowA
LoadBitmapW
DrawIcon
DeleteMenu
EnableMenuItem
SetMenuDefaultItem
GetSubMenu
InsertMenuA
ModifyMenuA
LoadMenuW
IsIconic
SetForegroundWindow
LoadIconW
GetCursorPos
GetSystemMetrics
PostQuitMessage
IsWindowVisible
CloseWindow
SetClassLongA
GetClassLongA
GetWindowLongA
GetAsyncKeyState
WaitForInputIdle
SetLayeredWindowAttributes
TrackMouseEvent
CreateWindowExA
GetDlgItem
DestroyWindow
MessageBoxA
LoadStringA
ShowWindow
UnregisterDeviceNotification

gdi32

CreatePatternBrush
SelectPalette
GetObjectType
CreatePen
CreateHatchBrush
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
CreateDIBitmap
CreateCompatibleBitmap
GetTextMetricsA
EnumFontFamiliesA
GetTextCharsetInfo
GetRgnBox
GetBkColor
GetTextColor
CreateRoundRectRgn
CreateDIBSection
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
DeleteDC
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExA
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetTextFaceA
SetPixelV
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
CreateDCA
CopyMetaFileA
GetDeviceCaps
CreateSolidBrush
GetStockObject
CreateFontA
CreateFontIndirectA
GetObjectA
GetTextExtentPoint32A
GetBitmapBits
CreateCompatibleDC
GetPaletteEntries

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegDeleteKeyA
RegCloseKey
RegQueryValueA
RegOpenKeyExA
CryptReleaseContext
CryptAcquireContextA
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
OpenProcessToken
OpenThreadToken
RegSetValueExA
RegQueryValueExA
CopySid
GetLengthSid
IsValidSid
GetTokenInformation
ConvertSidToStringSidA
RegDeleteValueA
RegCreateKeyExA
RegEnumKeyExA
CryptSetProvParam
RegEnumValueA
CryptGenKey
CryptDestroyKey
CryptSetKeyParam
RegEnumKeyA
CryptImportKey
CryptDecrypt

shell32

ShellExecuteA
SHGetPathFromIDListA
SHBrowseForFolderA
SHAppBarMessage
DragQueryFileA
DragFinish
SHGetDesktopFolder
SHGetFileInfoA
SHGetSpecialFolderPathA
ShellExecuteExA
Shell_NotifyIconA
SHGetSpecialFolderLocation

comctl32

ImageList_GetIconSize

shlwapi

PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathRemoveFileSpecW

ole32

CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
CoDisconnectObject
CoCreateInstance
CoInitialize
CoUninitialize
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoInitializeEx
DoDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleUninitialize
CoCreateGuid
OleDuplicateData
ReleaseStgMedium
CoTaskMemFree
CoTaskMemAlloc
CreateStreamOnHGlobal
CLSIDFromString

oleaut32

SysStringByteLen
SystemTimeToVariantTime
SafeArrayPutElement
SafeArrayCreate
VariantChangeType
VariantCopy
DispCallFunc
LoadRegTypeLi
SysStringLen
LoadTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SysAllocStringByteLen
VariantInit
SafeArrayDestroy
VariantTimeToSystemTime
SysAllocString
SysAllocStringLen
VariantClear
VarBstrFromDate
OleCreateFontIndirect
VarBstrCmp
SysFreeString

oledlg

ord8

ws2_32

WSACleanup
WSAStartup
WSASetLastError
socket
inet_addr
bind
getsockname
ntohs
listen
accept
setsockopt
WSAAsyncSelect
recv
select
send
closesocket

gdiplus

GdipCreateFont
GdipDrawString
GdipFillPath
GdipFillRectangleI
GdipGraphicsClear
GdipDrawPath
GdipDrawLineI
GdipDrawLine
GdipSetSmoothingMode
GdipSetTextRenderingHint
GdipGetImageGraphicsContext
GdipAddPathString
GdipGetFontStyle
GdipGetFontSize
GdipCloneBrush
GdipCloneImage
GdipLoadImageFromFile
GdipLoadImageFromStream
GdipGetImageWidth
GdipGetImageHeight
GdipCreateFromHDC
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDrawImageRectRect
GdipCreateBitmapFromHBITMAP
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipDeleteGraphics
GdiplusShutdown
GdipFree
GdipAlloc
GdipDeleteBrush
GdipCreatePen1
GdipCreateStringFormat
GdipDeleteStringFormat
GdipCreatePath
GdipAddPathLineI
GdipGetPathWorldBounds
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipDeleteFont
GdipDisposeImage
GdipSaveImageToFile
GdipCreateBitmapFromScan0
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdipCreateSolidFill
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipClosePathFigures
GdipClearPathMarkers
GdipDeletePath

userenv

UnloadUserProfile

wintrust

WinVerifyTrust

crypt32

CryptMsgClose
CertGetSubjectCertificateFromStore
CryptMsgGetParam
CryptQueryObject
CertGetIntendedKeyUsage
CertCloseStore
CertFreeCertificateContext
CertFindCertificateInStore
CertOpenSystemStoreA
CertCreateCertificateContext
CertDuplicateCertificateContext
CertNameToStrA
CryptDecodeObject
CertFindExtension
CertAddCertificateContextToStore
CertSetCertificateContextProperty
CertOpenStore
CertDeleteCertificateFromStore
CertGetCertificateContextProperty
CryptVerifyCertificateSignature
CertEnumCertificatesInStore

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 340KB - Virtual size: 339KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 957KB - Virtual size: 956KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

237ecf7bcc4193bb2fe2f194dd2e3f88

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

53:c8:7a:80:0c:ee:0e:2c:b0:13:63:41:e2:fc:c2:7fCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

49:bc:55:a3:f0:03:d8:3c:aa:f9:ea:72:e4:60:f5:64:bb:a0:bc:51Signer

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

setupapi

msimg32

wininet

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

ws2_32

gdiplus

userenv

wintrust

crypt32

oleacc

imm32

winmm

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 340KB - Virtual size: 339KB

.data Size: 31KB - Virtual size: 60KB

.rsrc Size: 957KB - Virtual size: 956KB

.reloc Size: 196KB - Virtual size: 196KB

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

53:c8:7a:80:0c:ee:0e:2c:b0:13:63:41:e2:fc:c2:7f
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

49:bc:55:a3:f0:03:d8:3c:aa:f9:ea:72:e4:60:f5:64:bb:a0:bc:51
Signer

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 340KB - Virtual size: 339KB

.data
Size: 31KB - Virtual size: 60KB

.rsrc
Size: 957KB - Virtual size: 956KB

.reloc
Size: 196KB - Virtual size: 196KB