2024-07-06_83d3ba28a6ef3d905cb2d381f17c9fe0_avoslocker_revil

Sharing

Copy URL Twitter E-mail

General

Target

2024-07-06_83d3ba28a6ef3d905cb2d381f17c9fe0_avoslocker_revil
Size

13.6MB
MD5

83d3ba28a6ef3d905cb2d381f17c9fe0
SHA1

8030627bf2666070a61a21b11f741df4e8882841
SHA256

279137d8c18026f7bec480cca5e998bb98df42faf240d22897ff47da7d52f614
SHA512

9f27a9bdfbdeff3adabdbebd8d3eb463422e77b2e3d9ff062d283bf86d2c1381cab3a2b5d59b45beb173c21101d50a43411266d373bd496391a060f72596348f
SSDEEP

393216:cl8cc6CNcHOTkh9J0EP4ZhWzMPsT5WuYuInu/Szf51P/z:cKccQHOO9Je9kT57goW1j

Score

1^/10

Malware Config

Signatures

Files

2024-07-06_83d3ba28a6ef3d905cb2d381f17c9fe0_avoslocker_revil
.exe windows:6 windows x86 arch:x86

8f34509cec67c56415e41c56b7110dc7

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

15:45:c6:02:5c:fd:4d:5c:ad:b7:7e:80
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

16/10/2023, 04:55

Not After

16/10/2026, 04:55

Subject

SERIALNUMBER=91110108348465992J,CN=北京微步在线科技有限公司,O=北京微步在线科技有限公司,STREET=海淀区苏州街49-3号4层1-24,L=北京市,ST=北京市,C=CN,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

15:45:c6:02:5c:fd:4d:5c:ad:b7:7e:80
Certificate

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

16/10/2023, 04:55

Not After

16/10/2026, 04:55

Subject

SERIALNUMBER=91110108348465992J,CN=北京微步在线科技有限公司,O=北京微步在线科技有限公司,STREET=海淀区苏州街49-3号4层1-24,L=北京市,ST=北京市,C=CN,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b4:87:eb:01:49:a1:55:b2:fa:0a:cd:24:d9:7c:ce:5e:b2:7a:63:be:7c:91:01:74:0b:57:c6:85:e1:ee:87:33
Signer

Actual PE Digest

b4:87:eb:01:49:a1:55:b2:fa:0a:cd:24:d9:7c:ce:5e:b2:7a:63:be:7c:91:01:74:0b:57:c6:85:e1:ee:87:33

Digest Algorithm

sha256

PE Digest Matches

true

9c:bd:f1:51:3a:84:27:46:db:ee:6d:65:4d:07:fd:69:7a:c8:05:e1
Signer

Actual PE Digest

9c:bd:f1:51:3a:84:27:46:db:ee:6d:65:4d:07:fd:69:7a:c8:05:e1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\jenkins\workspace\saasedr\Package_Group\Windows\Make_agent_installer_and_ModuleData\package\build_tmp\temp\output\tbSetup.pdb

Imports

ws2_32

shutdown
sendto
ioctlsocket
gethostname
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
select
__WSAFDIsSet
htonl
WSAIoctl
htons
getpeername
socket
setsockopt
listen
connect
closesocket
bind
accept
WSASetLastError
send
recv
getnameinfo
freeaddrinfo
getaddrinfo
WSAGetLastError
WSACleanup
WSAStartup
ntohs
getsockopt
getsockname
recvfrom

wldap32

ord145
ord219
ord46
ord301
ord147
ord133
ord79
ord27
ord167
ord127
ord142
ord26
ord117
ord41
ord208
ord216
ord14

kernel32

HeapSize
GetProcessHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCurrentProcessId
GetCurrentThreadId
GetLocalTime
FindResourceExW
SystemTimeToFileTime
GetCommandLineW
GetLogicalDriveStringsW
QueryDosDeviceW
SetUnhandledExceptionFilter
GetTempFileNameW
GetTempPathW
GetExitCodeProcess
CreateProcessW
MoveFileExW
ExpandEnvironmentStringsW
VerSetConditionMask
IsWow64Process
VerifyVersionInfoW
GetSystemDirectoryW
GetWindowsDirectoryW
TlsAlloc
WTSGetActiveConsoleSessionId
SetLastError
TlsFree
FormatMessageW
GetModuleHandleExW
GetStdHandle
GetFileType
MultiByteToWideChar
SwitchToFiber
DeleteFiber
CreateFiber
QueryPerformanceCounter
GetSystemTimeAsFileTime
ConvertFiberToThread
ConvertThreadToFiber
GetEnvironmentVariableW
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
LoadLibraryA
InitializeCriticalSectionEx
SleepEx
QueryPerformanceFrequency
GetTickCount
WaitForSingleObjectEx
CompareFileTime
GetEnvironmentVariableA
ReadFile
PeekNamedPipe
WaitForMultipleObjects
HeapFree
FreeEnvironmentStringsW
SetFilePointerEx
SetFileInformationByHandle
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesExW
FindFirstFileExW
FormatMessageA
SetFileTime
GlobalSize
MulDiv
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateIoCompletionPort
FileTimeToSystemTime
LocalFileTimeToFileTime
HeapReAlloc
HeapAlloc
HeapDestroy
RaiseException
DecodePointer
OutputDebugStringW
WriteFile
SetFilePointer
SetEndOfFile
GetFileSize
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
DeleteFileW
CreateFileW
CreateDirectoryW
LocalFree
GetModuleFileNameW
GetCurrentProcess
FindResourceW
SizeofResource
LockResource
LoadResource
FreeResource
GetModuleHandleA
TlsSetValue
TlsGetValue
FreeLibrary
LoadLibraryW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
WideCharToMultiByte
GetProcAddress
GetModuleHandleW
OpenProcess
TerminateProcess
Sleep
CreateMutexW
WaitForSingleObject
ReleaseMutex
GetLastError
CloseHandle
AreFileApisANSI
GetCurrentDirectoryW
TryEnterCriticalSection
CreateEventW
GetEnvironmentStringsW
GetOEMCP
ResetEvent
SetEvent
GetACP
IsValidCodePage
SetStdHandle
GetTimeZoneInformation
GetFileSizeEx
FlushFileBuffers
TerminateThread
VirtualQuery
EnumSystemLocalesW
GetFileInformationByHandleEx
InitOnceBeginInitialize
InitOnceComplete
GetStringTypeW
GetExitCodeThread
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetFileAttributesW
RtlUnwind
SetEnvironmentVariableW
LoadLibraryExW
CreateThread
GetUserDefaultLCID
ExitThread
FreeLibraryAndExitThread
GetCommandLineA
ExitProcess
SetConsoleCtrlHandler
GetDriveTypeW
EncodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
lstrcmpA
UnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetSystemTime
IsValidLocale
InitializeSListHead
SystemTimeToTzSpecificLocalTime
GetConsoleOutputCP
CompareStringW
LCMapStringW
GetLocaleInfoW
WriteConsoleW

user32

MoveWindow
SetWindowPos
GetFocus
GetKeyState
SetCapture
ReleaseCapture
GetSystemMetrics
GetDC
ReleaseDC
BeginPaint
EndPaint
GetUpdateRect
InvalidateRect
SetPropW
GetPropW
SetWindowTextW
GetClientRect
wsprintfW
GetWindowRect
GetCursorPos
ScreenToClient
IntersectRect
IsRectEmpty
PtInRect
GetWindowLongW
SetWindowLongW
LoadCursorW
LoadImageW
MonitorFromWindow
GetMonitorInfoW
OffsetRect
PostQuitMessage
SetTimer
MessageBoxA
UnregisterClassW
CharNextW
SetCursor
UnionRect
IsZoomed
SetWindowRgn
MonitorFromPoint
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
GetClassInfoExW
RegisterClassW
EmptyClipboard
IsClipboardFormatAvailable
GetAsyncKeyState
ClientToScreen
GetSysColor
GetDesktopWindow
FindWindowW
MapWindowPoints
ShowWindow
GetParent
IsWindowVisible
IsIconic
UpdateLayeredWindow
CallWindowProcW
SetForegroundWindow
SendMessageW
MsgWaitForMultipleObjectsEx
PeekMessageW
PostMessageW
WaitMessage
DefWindowProcW
RegisterClassExW
CreateWindowExW
DestroyWindow
CallMsgFilterW
EnumWindows
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
KillTimer
GetWindow
EnableWindow
SetFocus
IsWindow
DispatchMessageW
TranslateMessage
GetMessageW
GetWindowThreadProcessId
GetQueueStatus

advapi32

RegCloseKey
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
RegOpenCurrentUser
CryptCreateHash
CryptDestroyHash
CryptSignHashW
CryptEnumProvidersW
DuplicateTokenEx
SetThreadToken
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
GetUserNameW
SetEntriesInAclW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
BuildExplicitAccessWithNameW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegEnumKeyExW
CloseServiceHandle
RevertToSelf

shell32

ShellExecuteW
ShellExecuteA
SHGetSpecialFolderPathW

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoCreateGuid
CoInitialize

oleaut32

VariantInit
SysAllocStringByteLen
SysStringByteLen
VariantClear
SysAllocString
SysFreeString

shlwapi

PathIsRelativeW
PathRemoveFileSpecW
PathFileExistsW

winmm

timeGetTime
timeKillEvent
timeSetEvent

comctl32

_TrackMouseEvent
ord17

gdiplus

GdipDrawArc
GdipSetWorldTransform
GdipImageRotateFlip
GdipLoadImageFromFile
GdipCreatePen2
GdipSetLineBlend
GdipCreateLineBrushFromRect
GdipIsOutlineVisiblePathPointI
GdipIsVisiblePathPointI
GdipGetPathWorldBoundsI
GdipTransformPath
GdipAddPathPolygonI
GdipAddPathPieI
GdipAddPathEllipseI
GdipAddPathRectangleI
GdipAddPathCurveI
GdipAddPathBezierI
GdipAddPathLine2I
GdipStartPathFigure
GdipSetPathFillMode
GdipGetPathFillMode
GdipResetPath
GdipClonePath
GdipRotateMatrix
GdipScaleMatrix
GdipTranslateMatrix
GdipCreateBitmapFromHBITMAP
GdipCreateTexture
GdipSetPenDashStyle
GdipGetPenDashStyle
GdipSetPenColor
GdipGetPenLineJoin
GdipSetPenLineJoin
GdipGetPenDashCap197819
GdipDrawImageRect
GdipGetPenStartCap
GdipSetPenDashCap197819
GdipSetPenEndCap
GdipSetPenStartCap
GdipGetPenWidth
GdipSetPenWidth
GdipClonePen
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipMeasureString
GdipDrawString
GdipGetFontSize
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDrawImageRectRect
GdipFillPath
GdipFillEllipseI
GdipFillRectangle
GdipDrawPath
GdipDrawEllipseI
GdipDrawRectangleI
GdipDrawBezierI
GdipDrawLineI
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipReleaseDC
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipAddPathArcI
GdipAddPathLineI
GdipClosePathFigure
GdipDeletePath
GdipCreatePath
GdipGetPenEndCap
GdipDeleteMatrix
GdipCreateMatrix
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipGetImagePaletteSize
GdipGetImagePalette
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipDeleteFont

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext

msimg32

AlphaBlend

crypt32

CryptMsgGetParam
CertOpenStore
CryptMsgUpdate
CryptMsgOpenToDecode
CryptDecodeObject
CryptMsgClose
CertOpenSystemStoreW
CertGetIntendedKeyUsage
CertGetEnhancedKeyUsage
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertFreeCertificateContext
CertCreateCertificateContext
CertCloseStore

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

psapi

GetProcessImageFileNameW

wtsapi32

WTSQuerySessionInformationW
WTSFreeMemory
WTSQueryUserToken
WTSEnumerateSessionsW

bcrypt

BCryptCloseAlgorithmProvider
BCryptImportKeyPair
BCryptDestroyKey
BCryptVerifySignature
BCryptGenRandom
BCryptOpenAlgorithmProvider

gdi32

CreateRectRgnIndirect
SetWindowOrgEx
GetObjectA
SetStretchBltMode
StretchBlt
SaveDC
RestoreDC
GetWindowOrgEx
DeleteDC
CreateCompatibleDC
CreateDIBSection
GetDeviceCaps
CreateRoundRectRgn
ExtSelectClipRgn
SelectObject
GetStockObject
DeleteObject
CreateFontIndirectW
GetObjectW
BitBlt

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 636KB - Virtual size: 635KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10.6MB - Virtual size: 10.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f34509cec67c56415e41c56b7110dc7

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

15:45:c6:02:5c:fd:4d:5c:ad:b7:7e:80Certificate

Extended Key Usages

Key Usages

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:edCertificate

Extended Key Usages

Key Usages

15:45:c6:02:5c:fd:4d:5c:ad:b7:7e:80Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

b4:87:eb:01:49:a1:55:b2:fa:0a:cd:24:d9:7c:ce:5e:b2:7a:63:be:7c:91:01:74:0b:57:c6:85:e1:ee:87:33Signer

9c:bd:f1:51:3a:84:27:46:db:ee:6d:65:4d:07:fd:69:7a:c8:05:e1Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

wldap32

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

winmm

comctl32

gdiplus

imm32

msimg32

crypt32

version

psapi

wtsapi32

bcrypt

gdi32

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 636KB - Virtual size: 635KB

.data Size: 38KB - Virtual size: 68KB

.rsrc Size: 10.6MB - Virtual size: 10.6MB

.reloc Size: 107KB - Virtual size: 107KB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

15:45:c6:02:5c:fd:4d:5c:ad:b7:7e:80
Certificate

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Certificate

15:45:c6:02:5c:fd:4d:5c:ad:b7:7e:80
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

b4:87:eb:01:49:a1:55:b2:fa:0a:cd:24:d9:7c:ce:5e:b2:7a:63:be:7c:91:01:74:0b:57:c6:85:e1:ee:87:33
Signer

9c:bd:f1:51:3a:84:27:46:db:ee:6d:65:4d:07:fd:69:7a:c8:05:e1
Signer

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 636KB - Virtual size: 635KB

.data
Size: 38KB - Virtual size: 68KB

.rsrc
Size: 10.6MB - Virtual size: 10.6MB

.reloc
Size: 107KB - Virtual size: 107KB