hopes[.]rar | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

hopes.rar
Size

17.7MB
MD5

ea73bbe35189355b941e161b93d1f645
SHA1

1177b1379134d878637697b56fe18b40388e886a
SHA256

55ae95cbaabb71db9ddbd7e867d6611a991b9b6b19bd2b8856d1c6505c14ea89
SHA512

af27a081575f5a0ad258e114bddc4ffba2f134be700d5546c8a4e6c5751cb8d68f794d84b71814314e936897862abb8ef271110792f6d9aaea567d4bb8ce7cfc
SSDEEP

393216:knYvP13HWw5cdpbHwc7frtuqWh4Fdrca7pyjzolAPEknzYCaKAlc:kYvPxMdpbHwc7xuvhsrc6yjzAA2xc

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/hopes/hopes/6d385763.exe
unpack001/hopes/hopes/e28d6a9c.exe

Files

hopes.rar
.rar
hopes/hopes/1a9de222.exe
.exe windows:6 windows x64 arch:x64

3847500dd649a990db583021e5d6344e

Code Sign

02:0e:b5:27:ba:c0:10:99:59:3e:2e:a9:02:e3:97:cb
Certificate

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

12-07-2018 00:00

Not After

15-07-2021 12:00

Subject

CN=Hangzhou Infogo Tech Co.\, Ltd.,O=Hangzhou Infogo Tech Co.\, Ltd.,L=Hangzhou,ST=Zhejiang,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11-02-2011 12:00

Not After

10-02-2026 12:00

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

5b:2f:fd:4c:fb:1b:61:9d:09:14:90:6b:2d:c7:ec:96:d5:02:67:c7
Signer

Actual PE Digest

5b:2f:fd:4c:fb:1b:61:9d:09:14:90:6b:2d:c7:ec:96:d5:02:67:c7

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\vijay\Documents\Projects\FxSound\repo\fxsound\FxSound\Project\x64\Release\App\FxSound.pdb

Imports

crypt32

CryptProtectData
CryptUnprotectData

kernel32

GetCurrentThread
TerminateThread
QueryPerformanceFrequency
DeleteFileW
CloseHandle
LoadLibraryW
GetCurrentDirectoryW
GetOverlappedResult
GetProcAddress
ReplaceFileW
DeleteCriticalSection
ExitProcess
GetModuleHandleW
FreeLibrary
CopyFileW
QueryPerformanceCounter
MoveFileW
GetDriveTypeW
IsDebuggerPresent
ConnectNamedPipe
SetUnhandledExceptionFilter
FlushFileBuffers
GetCommandLineW
AttachConsole
LocalFree
CompareStringOrdinal
GlobalSize
LoadLibraryA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
WriteConsoleW
HeapSize
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
FindFirstFileExW
GetProcessHeap
SetStdHandle
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
GetOEMCP
GetACP
IsValidCodePage
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetStdHandle
HeapReAlloc
HeapFree
HeapAlloc
GetLogicalProcessorInformation
ExitThread
RtlUnwindEx
RaiseException
RtlPcToFileHeader
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
DuplicateHandle
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
LoadLibraryExW
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetThreadPriority
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
InitializeSListHead
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
ResetEvent
GetCPInfo
GetStringTypeW
LCMapStringW
CompareStringW
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
WideCharToMultiByte
MultiByteToWideChar
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
GetTickCount
GetSystemInfo
GetStartupInfoW
GetExitCodeThread
CreateThread
SetEvent
OutputDebugStringW
GetFileAttributesExW
GetLastError
FormatMessageW
Sleep
CreateEventW
GetLogicalDriveStringsW
DisconnectNamedPipe
GetModuleHandleA
GetSystemDirectoryW
ReleaseMutex
GetCurrentThreadId
GetFileAttributesW
CreateFileW
WaitForSingleObject
GetLocaleInfoW
FindClose
CreateMutexW
GetTempPathW
SetEndOfFile
SetFilePointer
InitializeCriticalSection
LeaveCriticalSection
SetThreadPriority
WaitForMultipleObjects
GetModuleFileNameW
RemoveDirectoryW
TerminateProcess
GetModuleHandleExW
WriteFile
GetCurrentProcess
FindNextFileW
EnterCriticalSection
FindFirstFileW
CancelIo
GetVolumeInformationW
TryEnterCriticalSection
ReadFile
SetThreadAffinityMask
CreateDirectoryW
ProcessIdToSessionId
GetCurrentProcessId
GetFileType

user32

UnregisterHotKey
DefWindowProcW
GetKeyboardLayout
VkKeyScanExW
AttachThreadInput
GetWindowThreadProcessId
GetWindowTextW
TranslateMessage
SetFocus
EnumWindows
PeekMessageW
DispatchMessageW
GetFocus
SendMessageTimeoutW
PostMessageW
GetMessageW
ReleaseDC
GetDC
DestroyWindow
BeginPaint
GetCursorPos
SetCursorPos
GetAncestor
InvalidateRect
ReleaseCapture
GetParent
SystemParametersInfoW
EnableMenuItem
GetDesktopWindow
ShowCaret
DrawIconEx
UpdateLayeredWindow
GetClientRect
SetWindowLongW
SetCursor
ToUnicode
SetClipboardData
SetWindowsHookExW
SetCapture
DestroyCaret
LoadCursorW
FindWindowW
LoadIconW
GetClipboardData
BringWindowToTop
SetLayeredWindowAttributes
GetMessageTime
UnhookWindowsHookEx
SetWindowLongPtrW
CreateWindowExW
UnregisterClassW
GetWindowLongPtrW
RegisterClassExW
RegisterHotKey
EndPaint
GetForegroundWindow
TrackMouseEvent
MapWindowPoints
CreateCaret
IsChild
EmptyClipboard
CloseClipboard
CreateIconIndirect
GetMonitorInfoW
GetWindowInfo
DestroyIcon
RedrawWindow
GetCapture
OpenClipboard
GetAsyncKeyState
CallWindowProcW
MoveWindow
RegisterWindowMessageW
SetForegroundWindow
GetWindowLongW
GetSystemMenu
GetMessageExtraInfo
GetUpdateRgn
GetMessagePos
MapVirtualKeyW
FindWindowExW
GetWindowRect
IsWindowVisible
SetWindowPos
MessageBoxW
MonitorFromWindow
EnumChildWindows
EnumDisplayMonitors
GetIconInfo
SendMessageW
CallNextHookEx
EndDialog
SetWindowTextW
MessageBeep
WindowFromPoint
GetWindowPlacement
DestroyCursor
GetKeyboardState
SetCaretPos
GetActiveWindow
ShowWindow
IsWindow

gdi32

CreateFontIndirectW
SetMapMode
RemoveFontMemResourceEx
DeleteObject
GetGlyphOutlineW
SwapBuffers
SaveDC
CreateDIBSection
StretchDIBits
CreateRectRgnIndirect
CreateRectRgn
GetRegionData
GetObjectW
ExcludeClipRect
RestoreDC
CreateBitmap
CombineRgn
AddFontMemResourceEx
SelectObject
GetKerningPairsW
CreateCompatibleDC
EnumFontFamiliesExW
GetDeviceCaps
GetTextMetricsW
DeleteDC
SetMapperFlags
GetGlyphIndicesW
GetOutlineTextMetricsW

advapi32

RegOpenKeyExW
AllocateAndInitializeSid
RegQueryValueExW
CheckTokenMembership
RegCloseKey
RegCreateKeyExW
RegSetValueExW
FreeSid

shell32

Shell_NotifyIconW
Shell_NotifyIconGetRect
SHQueryUserNotificationState
SHFileOperationW
ShellExecuteW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHParseDisplayName
SHGetKnownFolderPath
SHBrowseForFolderW
ExtractAssociatedIconW
SHGetMalloc
SHCreateShellItem
DragQueryFileW

ole32

DoDragDrop
CoTaskMemFree
CoTaskMemAlloc
RegisterDragDrop
CoInitialize
CoInitializeEx
CoInitializeSecurity
RevokeDragDrop
OleSetContainedObject
OleInitialize
OleCreate
CoCreateGuid
PropVariantClear
OleUninitialize
CoUninitialize
CoCreateInstance

oleaut32

SafeArrayDestroy
SysAllocString
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayCreateVector
SafeArrayAccessData

wininet

InternetSetOptionW
InternetReadFile
InternetWriteFile
InternetConnectW
InternetCloseHandle
HttpSendRequestExW
HttpEndRequestW
HttpOpenRequestW
FtpOpenFileW
InternetOpenW
HttpQueryInfoW
InternetSetFilePointer
InternetCrackUrlW

ws2_32

__WSAFDIsSet
accept
bind
getsockopt
setsockopt
ioctlsocket
sendto
freeaddrinfo
htons
htonl
closesocket
recv
inet_ntoa
send
inet_addr
WSAStartup
getaddrinfo
select

shlwapi

PathStripToRootW

winmm

timeKillEvent
timeBeginPeriod
timeGetTime

imm32

ImmReleaseContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmGetContext
ImmNotifyIME

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gehcont
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 829KB - Virtual size: 829KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
hopes/hopes/6d385763.exe
.exe windows:6 windows x64 arch:x64

ac3a1fc7f01e7bba6f2ed7f6bd7fc588

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

LoadLibraryA
GetModuleFileNameA
WriteConsoleW
CreateFileW
GetStringTypeW
LCMapStringW
VirtualAlloc
GetConsoleCP
FlushFileBuffers
SetStdHandle
HeapReAlloc
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetProcAddress
GetFileAttributesA
GetLastError
Sleep
GetTickCount
FreeLibrary
GetCPInfo
GetOEMCP
HeapFree
HeapAlloc
EncodePointer
DecodePointer
ReadFile
ExitProcess
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcessHeap
GetStdHandle
WriteFile
GetModuleFileNameW
HeapSize
EnterCriticalSection
LeaveCriticalSection
GetConsoleMode
ReadConsoleW
SetLastError
GetCurrentThreadId
SetFilePointerEx
GetFileType
DeleteCriticalSection
GetStartupInfoW
CloseHandle
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LoadLibraryExW
IsValidCodePage
GetACP
SetEndOfFile

user32

EndPaint
DestroyWindow
GetMessageA
SetTimer
RegisterClassExA
PostQuitMessage
FillRect
LoadIconA
GetClientRect
TranslateMessage
MessageBoxA
InvalidateRect
CreateWindowExA
DefWindowProcA
ShowWindow
PostMessageA
DispatchMessageA
UpdateWindow
LoadCursorA
BeginPaint

gdi32

CreateSolidBrush
DeleteObject

advapi32

FreeSid
AllocateAndInitializeSid
CheckTokenMembership

shell32

ShellExecuteExA

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ddc
Size: 21.3MB - Virtual size: 21.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
hopes/hopes/e28d6a9c.exe
.exe windows:5 windows x64 arch:x64

2a3756faa70adce6aae63d56de727312

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCPInfo
GetOEMCP
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
CreateFileA
GetLocaleInfoA
RtlLookupFunctionEntry
RtlUnwindEx
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
RaiseException
RtlPcToFileHeader
HeapReAlloc
HeapQueryInformation
HeapSize
Sleep
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
GetACP
IsValidCodePage
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
GlobalFlags
lstrcmpA
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleW
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
lstrcmpW
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MultiByteToWideChar
lstrlenA
GetVersionExA
GetVersion
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
CreateMutexA
ReleaseMutex
GetModuleHandleA
LoadLibraryA
FreeLibrary
GetProcAddress
VirtualAlloc

user32

ClientToScreen
DestroyMenu
SetWindowTextA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetWindowThreadProcessId
IsWindowEnabled
GetDC
ReleaseDC
GetSysColorBrush
RegisterWindowMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
GetClassLongPtrA
SetPropA
GetPropA
RemovePropA
GetFocus
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
GetDlgItem
GetTopWindow
GetWindowLongPtrA
SetWindowLongPtrA
UnhookWindowsHookEx
GetMessageTime
PeekMessageA
MapWindowPoints
GetKeyState
SetMenu
EnableWindow
SetForegroundWindow
PostMessageA
MessageBoxA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
GetParent
CopyRect
PtInRect
GetDlgCtrlID
SendMessageA
CallWindowProcA
UpdateWindow
ShowWindow
CreateWindowExA
keybd_event
GetMenu
GetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetWindow
GetMenuState
GrayStringA
DefWindowProcA
LoadIconA
PostQuitMessage
EndPaint
GetClientRect
BeginPaint
RegisterClassExA
LoadCursorA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
IsWindow
DestroyIcon
DrawTextExA
DrawTextA
GetMenuItemID
GetMenuItemCount
GetSubMenu
TabbedTextOutA
ValidateRect
DestroyWindow
GetMessagePos

shell32

Shell_NotifyIconA

oleacc

LresultFromObject
CreateStdAccessibleObject

gdi32

GetClipBox
SetTextColor
SetBkColor
CreateBitmap
ExtTextOutA
DeleteObject
SaveDC
RestoreDC
SetMapMode
DeleteDC
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
RectVisible
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
GetDeviceCaps
PtVisible
TextOutA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

Sections

.text
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10.8MB - Virtual size: 10.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 192KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3847500dd649a990db583021e5d6344e

Code Sign

02:0e:b5:27:ba:c0:10:99:59:3e:2e:a9:02:e3:97:cbCertificate

Extended Key Usages

Key Usages

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bdCertificate

Extended Key Usages

Key Usages

5b:2f:fd:4c:fb:1b:61:9d:09:14:90:6b:2d:c7:ec:96:d5:02:67:c7Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

crypt32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

wininet

ws2_32

shlwapi

winmm

imm32

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 1.5MB - Virtual size: 1.5MB

.data Size: 71KB - Virtual size: 159KB

.pdata Size: 149KB - Virtual size: 148KB

.gfids Size: 3KB - Virtual size: 2KB

.tls Size: 512B - Virtual size: 9B

_RDATA Size: 15KB - Virtual size: 14KB

.gxfg Size: 13KB - Virtual size: 13KB

.gehcont Size: 512B - Virtual size: 36B

.rsrc Size: 829KB - Virtual size: 829KB

.reloc Size: 33KB - Virtual size: 32KB

ac3a1fc7f01e7bba6f2ed7f6bd7fc588

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Sections

.text Size: 75KB - Virtual size: 74KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 7KB - Virtual size: 15KB

.pdata Size: 4KB - Virtual size: 4KB

.ddc Size: 21.3MB - Virtual size: 21.3MB

.reloc Size: 2KB - Virtual size: 1KB

2a3756faa70adce6aae63d56de727312

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

oleacc

gdi32

winspool.drv

Sections

.text Size: 132KB - Virtual size: 132KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 10.8MB - Virtual size: 10.9MB

.pdata Size: 9KB - Virtual size: 8KB

.rsrc Size: 192KB - Virtual size: 192KB

02:0e:b5:27:ba:c0:10:99:59:3e:2e:a9:02:e3:97:cb
Certificate

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd
Certificate

5b:2f:fd:4c:fb:1b:61:9d:09:14:90:6b:2d:c7:ec:96:d5:02:67:c7
Signer

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 1.5MB - Virtual size: 1.5MB

.data
Size: 71KB - Virtual size: 159KB

.pdata
Size: 149KB - Virtual size: 148KB

.gfids
Size: 3KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 9B

_RDATA
Size: 15KB - Virtual size: 14KB

.gxfg
Size: 13KB - Virtual size: 13KB

.gehcont
Size: 512B - Virtual size: 36B

.rsrc
Size: 829KB - Virtual size: 829KB

.reloc
Size: 33KB - Virtual size: 32KB

.text
Size: 75KB - Virtual size: 74KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 7KB - Virtual size: 15KB

.pdata
Size: 4KB - Virtual size: 4KB

.ddc
Size: 21.3MB - Virtual size: 21.3MB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 132KB - Virtual size: 132KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 10.8MB - Virtual size: 10.9MB

.pdata
Size: 9KB - Virtual size: 8KB

.rsrc
Size: 192KB - Virtual size: 192KB