General

  • Target

    EarthKrahang_20240404.zip

  • Size

    36.7MB

  • MD5

    21b766fbfd52a415b90cc99d3550fc65

  • SHA1

    85ed0693e2be170048f39aea469abf34285648c2

  • SHA256

    eac6760e770aeb2cdb0ba7920789d50601e3f8e9a7a3422819a51546fe433d94

  • SHA512

    dc24345be5ee752968994a139f4a634b88b5b2bf9f09ef150d222dd298569f3d129eee8bf3faaf3d6c53309c32e3f934fe8526bb5e1de64a9cbc81dd7993f5eb

  • SSDEEP

    786432:Z+c5LnNJB1EzJNLHDW8D6yHG+q9fS9Q47egSeSSdqLb3oU9R5buN:EkLnNezXa8D9HGp9q9Q4XVMt9fo

Score
10/10

Malware Config

Extracted

Family

dinodas

C2

115.126.98.204:443

Signatures

  • Detect DinodasRAT linux variant 3 IoCs
  • Detects DinodasRAT x64 varinat 21 IoCs
  • Dinodas family
  • UPX packed file 4 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 64 IoCs

    Checks for missing Authenticode signature.

Files

  • EarthKrahang_20240404.zip
    .zip

    Password: infected

  • Win32.EarthKrahang_20240404/01b09cb97a58ea0f9bf2b98b38b83f0cfc9f97f39f7bfd73a990c9b00bcdb66c
    .dll windows:5 windows x64 arch:x64

    21746d7f612d7fc519490a664cdf2009


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/05b63707ca3cad54085e521aee84c7472ff7b3fe05e22fd65c8e2ee6f36c6243
    .dll windows:5 windows x64 arch:x64

    ff5272bd157bde6e8e1f728cc74f6a9c


    Code Sign

    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/0f0663fc26b18212485149e3e22c3dd4b8900ea8dca7c084dbe09fef02cfdade
    .elf linux x64
  • Win32.EarthKrahang_20240404/0ff80e4db32d1d45a0c2afdfd7a1be961c0fbd9d43613a22a989f9024cc1b1e9
    .dll windows:5 windows x86 arch:x86

    6a407cef00572710348b8f1c81e1baa3


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/10b2a7c9329b232e4eef81bac6ba26323e3683ac1f8a99d3a9f8965da5036b6f
    .dll windows:5 windows x64 arch:x64

    dd827f37d7a4bd48ae5842c7bc39998e


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/15412d1a6b7f79fad45bcd32cf82f9d651d9ccca082f98a0cca3ad5335284e45
    .elf linux x64
  • Win32.EarthKrahang_20240404/18f4f14857e9b7e3aa1f6f21f21396abd5f421342b7f4d00402a4aff5a538fa1
    .exe windows:5 windows x86 arch:x86

    72dcfd45fc07c9b057d58292f7f37995


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/1d3d460b22f70cc26252673e12dfd85da988f69046d6b94602576270df590b2c
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/1e278cfe8098f3badedd5e497f36753d46d96d81edd1c5bee4fc7bc6380c26b3
    .dll windows:5 windows x64 arch:x64

    0050e2be629782ee695e498cc353d014


    Code Sign

    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/241737842eb17676b3603e2f076336b7bc6304accef3057401264affb963bef8
    .dll windows:5 windows x64 arch:x64

    73e99252f600993c4314cad380b93478


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/2e012ba20ecb553745f7719bd477778ba75e324bfec44d03a27a010dac7a2780
  • Win32.EarthKrahang_20240404/2e3645c8441f2be4182869db5ae320da00c513e0cb643142c70a833f529f28aa
    .exe .ps1 windows:5 windows x86 arch:x86 polyglot

    79ed833f90b585ce7dfa89a34d1b1961


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/2e850cb2a1d06d2665601cefd88802ff99905de8bc4ea348ea051d4886e780ee
    .exe windows:5 windows x64 arch:x64

    4ae770c3d3f6130d918943dc30985e0c


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/35f16e469047cf4ef78f87a616d26ec09e3d6a3d7a51415ea34805549a41dcfa
    .dll windows:5 windows x64 arch:x64

    dd827f37d7a4bd48ae5842c7bc39998e


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/3f0aa01ed70bc2ab29557521a65476ec2ff2c867315067cc8a5937d63bcbe815
    .exe windows:5 windows x86 arch:x86

    dd131c8f893de23bacd65ea0c28b3904


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/4529f3751102e7c0a6ec05c6a987d0cc5edc08f75f287dd6ac189abbd1282014
    .dll windows:5 windows x86 arch:x86

    44af9e9895a06884e7aa562f1682f89d


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/484578b6e7e427a151c309bdc00c90b1c0faf25a8581cace55e2c25ec34056e0
    .dll windows:5 windows x86 arch:x86

    4f4a0d710820cd26ca971a182d009e03


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/4b653253049a65142f827706203de55f03abccbcddac3ed2171d79bf8186eda9
    .lnk
  • Win32.EarthKrahang_20240404/4cb020a66fdbc99b0bce2ae24d5684685e2b1e9219fbdfda56b3aace4e8d5f66
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/50cdd2397836d33a8dc285ed421d9b7cc69e38ba0421638235206fd466299dab
    .dll windows:5 windows x64 arch:x64

    dd827f37d7a4bd48ae5842c7bc39998e


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/521b3add2ab6cee5a5cfd53b78e08ef2214946393d2a156c674606528b05763a
    .exe windows:5 windows x64 arch:x64

    1697b3be084ae28a187684e3cb068045


    Code Sign

    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/57f64f170dfeaa1150493ed3f63ea6f1df3ca71ad1722e12ac0f77744fb1a829
    .dll windows:5 windows x64 arch:x64

    4c34f628c708b4f1d498e2c50ee07d05


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/5a32bf21904387d469d4f8cdaff46048e99666fc9b4d74872af9379df7979bfe
    .dll windows:5 windows x64 arch:x64

    0050e2be629782ee695e498cc353d014


    Code Sign

    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/5a6a0e01949799dc72c030b4ad8149446624dcd9645ba3eefda981c3fda26472
    .dll windows:5 windows x64 arch:x64

    8651a4ae63973c7610679098817472d2


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/5b17bc2a89727700f94570b0dddc12b315db34dbbd79186177167abbb173cee5
    .dll windows:6 windows x86 arch:x86

    579d348c37320b780ff725c1c602169f


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/5e1839fed3562d559166f7f9d3e388cdd21da83b67ccb70fa4121825b91469d6
    .dll windows:6 windows x64 arch:x64

    b2e40ed300e098375c35c4d32587f17f


    Headers

    Imports

    Exports

    Sections

  • Win32.EarthKrahang_20240404/6302acdfce30cec5e9167ff7905800a6220c7dda495c0aae1f4594c7263a29b2
    .elf linux x64
  • Win32.EarthKrahang_20240404/63b7d8c4c740c54ab91db94dd89b2c8313ecb7ba13524c646fdb10facf5c470d
    .lnk
  • Win32.EarthKrahang_20240404/67ad30c3359b377d1964a5add97d2dc96b855940685131b302d5ba2c907ef355
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/6a4e32229e5ca41e8eca99cefe5beef3e3621c2199f8844b4d218c14b5481534
    .dll windows:6 windows x86 arch:x86

    f78ea6f40cd2c51721ae135bf7d2f0eb


    Headers

    Imports

    Exports

    Sections

  • Win32.EarthKrahang_20240404/6c006620062b40b22d00e7e73a93e6a7fa66ce720093b44b4a0f3ef809fa2716
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/6d03c6b7621990f84580eaa094393fbf896803c86779644506b115692b70bd64
    .lnk
  • Win32.EarthKrahang_20240404/6fd7697efc137faf2d3ad5d63ffe4743db70f905a71dbed76207beeeb04732f2
    .exe windows:5 windows x86 arch:x86

    72dcfd45fc07c9b057d58292f7f37995


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/7102d6b76a4170203daa939072bba548960db436f85113cd1fca0bb554d95b3c
    .dll windows:6 windows x86 arch:x86

    579d348c37320b780ff725c1c602169f


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/7af402f4bd2b1a2d2d8b74fb7599860f3a90b7b6f66a519f2b4d31aeea2500aa
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/7e5b05d29c3aa2aa178c3cc0338ba52b39dc89dafadeec7301f187db0b060372
    .dll windows:6 windows x86 arch:x86

    579d348c37320b780ff725c1c602169f


    Headers

    Imports

    Exports

    Sections

  • Win32.EarthKrahang_20240404/804387e43fdd1bd45b35e65d52d86882d64956b0a286e8721da402062f95a9e3
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/8218c23361e9f1b25ee1a93796ef471ca8ca5ac672b7db69ad05f42eb90b0b8d
    .exe .ps1 windows:5 windows x86 arch:x86 polyglot

    79ed833f90b585ce7dfa89a34d1b1961


    Code Sign

    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/82f7bcda95fcc0e690159a2fbd7b3e38ef3ff9105496498f86d1fa9ff4312846
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/898a7527c065454ba9fad0e36469e12b214f5a3bd40a5ec7fcaf9b75afc34dce
    .dll windows:5 windows x64 arch:x64

    dd827f37d7a4bd48ae5842c7bc39998e


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/98b5b4f96d4e1a9a6e170a4b2740ce1a1dfc411ada238e42a5954e66559a5541
    .elf linux x64
  • Win32.EarthKrahang_20240404/992d3df19c453a84b5b46c5742fb22686c65eb48cfc71b0bbc7e94c0ef13e66e
    .vbs
  • Win32.EarthKrahang_20240404/9ada058a558b7cadb238fc2c259f204369cd604e927f9712fd51262ca6987cb1
    .exe windows:5 windows x64 arch:x64

    fa041661526f5e4a92b502e172a4567b


    Code Sign

    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/9d4e18ae979bdf6b57e685896b350b23c428d911eee14af133c3ee7d208f8a82
    .exe windows:5 windows x64 arch:x64

    fa041661526f5e4a92b502e172a4567b


    Code Sign

    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/a2c3073fa5587f8a70d7def7fd8355e1f6d20eb906c3cd4df8c744826cb81d91
    .elf linux x64
  • Win32.EarthKrahang_20240404/a4f59d4d42e42b882068cacf8b70f314add963e2cbbf7a52e70df130bfe23dff
    .exe windows:6 windows x64 arch:x64

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/a99bf162a8588b2f318c9460aef78851bd64e4826c2cb124984d2ab357a6beea
    .elf linux x86
  • Win32.EarthKrahang_20240404/acfcf97ee4ff5cc7f5ecdc6f92ea132e29c48400ab6244de64f9b9de4368deb2
    .zip
  • GoogleUps/1.dll
    .dll windows:5 windows x64 arch:x64

    dd827f37d7a4bd48ae5842c7bc39998e


    Headers

    Imports

    Sections

  • GoogleUps/2.dll
    .dll windows:5 windows x64 arch:x64

    21746d7f612d7fc519490a664cdf2009


    Headers

    Imports

    Sections

  • GoogleUps/GoogleUpdate.exe
    .exe windows:5 windows x64 arch:x64

    4ae770c3d3f6130d918943dc30985e0c


    Headers

    Imports

    Sections

  • GoogleUps/GoogleUpdate.lnk
    .lnk
  • GoogleUps/id.data
  • Win32.EarthKrahang_20240404/b1102ed4bca6dae6f2f498ade2f73f76af527fa803f0e0b46e100d4cf5150682
    .exe windows:4 windows x86 arch:x86

    4fbf3f084fbbb2470b80b2013134df35


    Headers

    Imports

    Exports

    Sections

  • Win32.EarthKrahang_20240404/b153e10c95bb8bfa6dbf5835067c5b45840f057a38ef9b8871b6dc40edcf601f
    .elf linux x64
  • Win32.EarthKrahang_20240404/b19a46f99b649dc731ed5c8410bda7e0385d15e1b9aab1e467b05dccd7753865
    .elf linux x86
  • Win32.EarthKrahang_20240404/b4c470be7e434dac0b61919a6b0c5b10cf7a01a22c5403c4540afdb5f2c79fab
    .dll windows:5 windows x64 arch:x64

    ff5272bd157bde6e8e1f728cc74f6a9c


    Code Sign

    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/b8f2da1eefa09077d86a443ad688080b98672f171918c06e2b3652df783be03a
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/bb4e7b0c969895fc9836640b80e2bdc6572d214ba2ee55b77588f8a4eedea5a4
    .exe windows:5 windows x64 arch:x64

    4ae770c3d3f6130d918943dc30985e0c


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/bc422a4e1b6a351ac6fe73d496015cfa6a9dbd5e38566c6f44a59faff83ee95a
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • Win32.EarthKrahang_20240404/bf830191215e0c8db207ea320d8e795990cf6b3e6698932e6e0c9c0588fc9eff
    .elf linux x64
  • Win32.EarthKrahang_20240404/c14f6ac5bcd8645eb80a612a6bf6d58c31b0e28e50be871f278c341ed1fa8c7c
    .exe windows:5 windows x86 arch:x86

    c9e1151a3bc687c5cdf8f1196a82f49a


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/c2bb47ac533d1413c829a1453b2b854b95aabebf1b26b446bd1ad0838f1e09de
    .elf linux x64
  • Win32.EarthKrahang_20240404/c377b79732e93f981998817e6f0e8664578b474445ba11b402c70b4b0357caab
    .dll windows:5 windows x64 arch:x64

    cb71a490ecb73033ec688f4f4d3c5653


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/c9d5dc956841e000bfd8762e2f0b48b66c79b79500e894b4efa7fb9ba17e4e9e
    .exe windows:4 windows x86 arch:x86

    2fa43c5392ec7923ababced078c2f98d


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/ccd4a648cc2c4a5bbcd148f9c182f4c9595440a41dd3ea289a11609063c86a6d
    .exe windows:5 windows x86 arch:x86

    d32519c93924bb24d9874d86c5993ee3


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/d096c3a67634599bc47151f0e01a7423a3eb873377371b2b928c0d4f57635a1f
    .exe windows:6 windows x64 arch:x64

    52f5ba0ac0400643e82f1245ff2a57ee


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/d176951b9ff3239b659ad57b729edb0845785e418852ecfeef1669f4c6fed61b
    .exe windows:5 windows x64 arch:x64

    4ae770c3d3f6130d918943dc30985e0c


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/d17fe5bc3042baf219e81cbbf991749dfcd8b6d73cf6506a8228e19910da3578
    .exe windows:5 windows x86 arch:x86

    72dcfd45fc07c9b057d58292f7f37995


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/d2cc1135c314f526f88fbe19f25d94899d52de7e3422f334437f32388d040d71
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/d31d135bc450eafa698e6b7fb5d11b4926948163af09122ca1c568284d8b33b3
    .dll windows:5 windows x64 arch:x64

    0050e2be629782ee695e498cc353d014


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/da1c9cb862b0be89819a94335eea8bf5ab56e08a1f4ca0ef92fe8d46fd2b1577
    .rar
  • คำบอกกล่าวคำฟ้อง.doc
    .doc windows office2003
  • คำบอกกล่าวคำฟ้องจดหมายรายงานเด็กจดหมายรายงานเด็ก.doc.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/dd469fbf68f6bf71e495b3e497e31d17aa1d0af918a943f8637dd3304f840740
    .exe windows:4 windows x64 arch:x64

    dcad2a11e2f90b82d9d8c5bd5929bdb9


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/e0f109836a025d4531ea895cebecc9bdefb84a0cc747861986c4bc231e1d4213
    .exe windows:5 windows x86 arch:x86

    72dcfd45fc07c9b057d58292f7f37995


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/e42466863837a655b814d2fb6aa2381369b8c5a9fe100e512085617f775dac36
    .rar
  • _MACOSX/_DOCX/aa.bat
  • _MACOSX/_DOCX/hh.hsnx
    .exe windows:5 windows x86 arch:x86

    72dcfd45fc07c9b057d58292f7f37995


    Headers

    Imports

    Sections

  • _MACOSX/_DOCX/password.txt
  • password.txt.lnk
    .lnk
  • salary.rar
    .rar
  • Win32.EarthKrahang_20240404/ea140cc8da39014c1454c3f6a036d5f43aa26c215cb9981ab2b7076f2388b73e
    .zip
  • GoogleVaS/1.dll
    .dll windows:5 windows x64 arch:x64

    dd827f37d7a4bd48ae5842c7bc39998e


    Headers

    Imports

    Sections

  • GoogleVaS/2.dll
    .dll windows:5 windows x64 arch:x64

    21746d7f612d7fc519490a664cdf2009


    Headers

    Imports

    Sections

  • GoogleVaS/RuntimeInit.exe
    .exe windows:5 windows x64 arch:x64

    4ae770c3d3f6130d918943dc30985e0c


    Headers

    Imports

    Sections

  • GoogleVaS/RuntimeInit.lnk
    .lnk
  • GoogleVaS/id.data
  • Win32.EarthKrahang_20240404/ebdf3d3e0867b29e66d8b7570be4e6619c64fae7e1fbd052be387f736c980c8e
    .elf linux x64
  • Win32.EarthKrahang_20240404/ee41eb21f439b1168ae815ca067ee91d84d6947397d71e214edc6868dbf4f272
    .dll windows:5 windows x64 arch:x64

    938145366590c326ad28ef476d306ad3


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/ef4a2cfe4d9d3495d4957a65299f608f7b823fab0699fded728fd3900c0b2bb4
    .exe windows:4 windows x64 arch:x64

    d6bd24460437f69b34bd43a69c1f6f94


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/f34bd1d485de437fe18360d1e850c3fd64415e49d691e610711d8d232071a0b1
    .elf linux x64
  • Win32.EarthKrahang_20240404/f4ea99dc41cb7922d01955eef9303ec3a24b88c3318138855346de1e830ed09e
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • Win32.EarthKrahang_20240404/f5b6c0d73c513c3c8efbcc967d7f6865559e90d59fb78b2b15394f22fd7315cb
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/f66a6b49a23cf3cc842a84d955c0292e7d1c0718ec4e78d4513e18b6c53a94ac
    .dll windows:5 windows x64 arch:x64

    21746d7f612d7fc519490a664cdf2009


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/f6993e767306d4cbf676bf3c4a56fc2ad1d5cb6c4f67563f6de2f28b79f2b934
    .lnk
  • Win32.EarthKrahang_20240404/fe4fad660bb44e108ab07d812f8b1bbf16852c1b881a5e721a9f811cae317f39
    .exe windows:5 windows x64 arch:x64

    fa041661526f5e4a92b502e172a4567b


    Headers

    Imports

    Sections

  • Win32.EarthKrahang_20240404/ffef75582ad185c58135cf02e347c0ad6d46751fcfbb803dc3e70b73729e6136
    .rar .vbs polyglot
  • GoogleUpdate.exe
    .exe windows:5 windows x64 arch:x64

    fa041661526f5e4a92b502e172a4567b


    Headers

    Imports

    Sections

  • advapi64.dll
    .dll windows:5 windows x64 arch:x64

    73e99252f600993c4314cad380b93478


    Headers

    Imports

    Sections

  • id.data
  • microsoft.vbs
    .vbs
  • svrhost.exe
    .exe .ps1 windows:5 windows x86 arch:x86 polyglot

    79ed833f90b585ce7dfa89a34d1b1961


    Headers

    Imports

    Sections

  • twain_64.dll
    .dll windows:5 windows x64 arch:x64

    938145366590c326ad28ef476d306ad3


    Headers

    Imports

    Sections