2024-08-09_e2c19a890fa72fc41239bccb64248df6_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-09_e2c19a890fa72fc41239bccb64248df6_icedid
Size

2.2MB
MD5

e2c19a890fa72fc41239bccb64248df6
SHA1

24adc788496e91301c1ca981f45022dfd6b0129e
SHA256

57e7785dda3954a0c2c966f34423aae5f677ed6d12717a62c9b16a3dc2b3b04b
SHA512

b880b9ef65031b887baf2ef23c7ce8320a6c74c2845e3d2d518ff8b8357e76d8502c5d297b766c426bcbabf98db6e81046d00a0f1e5736dd427cfc101209ad3d
SSDEEP

49152:lGnVSYA9k+hLcW6Mpbevc0ZTF2kUl9BxQkEXoLHwab85dl9BxQkEXoLHwab85n:IVSYAS+Nb6MFaFUl9BxQkEXoLHwab85i

Score

1^/10

Malware Config

Signatures

Files

2024-08-09_e2c19a890fa72fc41239bccb64248df6_icedid
.exe windows:4 windows x86 arch:x86

5198f8b449ad47e2a7a2809ad1cb6a13

Code Sign

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5a:0d:5b:8c:d2:1f:7e:32:5a:e3:6d:08:aa:bb:de:f6
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

13/10/2014, 00:00

Not After

12/10/2017, 23:59

Subject

CN=Shanghai Oriental Webcasting Co. Ltd.,OU=IT dept.,O=Shanghai Oriental Webcasting Co. Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

5e:68:d6:11:71:94:63:50:56:00:68:f3:3e:c9:c5:91
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2039, 01:00

Subject

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

5c:8a:4e:24:7d:3c:91:2c:85:be:cc:80:c0:83:cd:f4
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

12/01/2016, 00:00

Not After

12/10/2017, 23:59

Subject

CN=Shanghai Oriental Webcasting Co. Ltd.,OU=IT dept.,O=Shanghai Oriental Webcasting Co. Ltd.,L=Shanghai,ST=Shanghai,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2024, 01:00

Subject

CN=WoSign Time Stamping Signer,O=WoSign CA Limited,C=CN

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5e:68:d6:11:71:94:63:50:56:00:68:f3:3e:c9:c5:91
Certificate

Issuer

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Not Before

08/08/2009, 01:00

Not After

08/08/2039, 01:00

Subject

CN=Certification Authority of WoSign,O=WoSign CA Limited,C=CN

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

35:0b:83:66:75:04:66:3a:f5:8a:4b:bb:40:21:df:cd:29:82:81:4f:30:33:d2:0b:43:3e:bd:b2:fa:c1:c8:cd
Signer

Actual PE Digest

35:0b:83:66:75:04:66:3a:f5:8a:4b:bb:40:21:df:cd:29:82:81:4f:30:33:d2:0b:43:3e:bd:b2:fa:c1:c8:cd

Digest Algorithm

sha256

PE Digest Matches

true

18:7d:08:e4:51:94:7e:04:67:50:51:d5:8f:7e:6c:ec:24:f9:6c:75
Signer

Actual PE Digest

18:7d:08:e4:51:94:7e:04:67:50:51:d5:8f:7e:6c:ec:24:f9:6c:75

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\WorkSpace\OEMMiNiNews\Bin\PDB\DongFang\201503061755\MiNiNews.pdb

Imports

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

kernel32

LocalReAlloc
DeleteCriticalSection
TlsFree
SetErrorMode
GlobalFlags
MoveFileW
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFullPathNameW
GetTempFileNameW
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
ExitThread
VirtualAlloc
VirtualQuery
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GlobalReAlloc
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCPInfo
GetOEMCP
LCMapStringA
LCMapStringW
GetTimeZoneInformation
TlsSetValue
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
lstrlenA
GlobalGetAtomNameW
FileTimeToSystemTime
GetModuleHandleA
GetThreadLocale
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GlobalAddAtomW
CreateEventW
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpW
GlobalDeleteAtom
SetLastError
GetLocalTime
InterlockedDecrement
InterlockedIncrement
MulDiv
SystemTimeToFileTime
TlsAlloc
InitializeCriticalSection
GetUserDefaultLCID
GlobalHandle
SleepEx
GetSystemDirectoryA
PeekNamedPipe
WaitForMultipleObjects
ExpandEnvironmentStringsW
GetDriveTypeA
DuplicateHandle
GetFileType
SetFilePointer
GetACP
ExitProcess
GetCurrentDirectoryW
lstrlenW
FreeResource
GetPrivateProfileIntW
SetUnhandledExceptionFilter
VirtualProtect
WriteProcessMemory
GetCurrentProcessId
GetCurrentProcess
FreeLibrary
GetEnvironmentVariableW
WriteFile
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetFileAttributesW
GetFileTime
FileTimeToLocalFileTime
FindFirstFileA
GetFileInformationByHandle
GetFullPathNameA
GetCurrentDirectoryA
FileTimeToDosDateTime
GetFileSizeEx
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleHandleW
CreateThread
GetVolumeInformationW
DeviceIoControl
Sleep
GetLongPathNameW
lstrcpyW
ReleaseMutex
CreateMutexW
VerSetConditionMask
VerifyVersionInfoW
FindFirstFileW
FindNextFileW
FindClose
lstrcmpiW
GlobalLock
GlobalUnlock
SetFileAttributesW
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetSystemInfo
GetVersionExW
FormatMessageW
LocalFree
GetTempPathW
GetSystemDirectoryW
DeleteFileW
CopyFileW
MoveFileExW
GetCommandLineW
CreateRemoteThread
GetExitCodeThread
ReadProcessMemory
GlobalAlloc
GlobalFree
GetLastError
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
GetWindowsDirectoryW
GetTickCount
WideCharToMultiByte
MultiByteToWideChar
CreateDirectoryW
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
Process32NextW
CreateFileW
GetFileSize
ReadFile
CloseHandle
WritePrivateProfileStringW
GetModuleFileNameW
GetPrivateProfileStringW
SetHandleCount

user32

CreatePopupMenu
SetMenu
TranslateAcceleratorW
GetWindowDC
GrayStringW
DrawTextExW
TabbedTextOutW
IsDialogMessageW
DrawIcon
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
RemovePropW
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
GetMessageTime
GetMessagePos
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
UpdateWindow
GetClassInfoW
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
SystemParametersInfoA
GetWindowPlacement
EqualRect
CopyRect
CopyAcceleratorTableW
RegisterClipboardFormatW
SetWindowContextHelpId
MapDialogRect
GetLastActivePopup
IsWindowEnabled
ShowOwnedPopups
SetWindowsHookExW
CallNextHookEx
GetActiveWindow
IsWindowVisible
PeekMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
DestroyMenu
EnableMenuItem
CheckMenuItem
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetSubMenu
CreateAcceleratorTableW
InvalidateRgn
SetWindowTextW
GetWindowTextLengthW
GetCaretPos
GetSysColor
SetCaretPos
ShowCaret
HideCaret
CreateCaret
SetRect
CharPrevW
DrawTextW
FillRect
InflateRect
OffsetRect
CharNextW
MessageBoxW
SetWindowRgn
IsZoomed
IsIconic
GetClassInfoExW
RegisterClassW
GetMenu
UnregisterClassA
SetPropW
GetPropW
CallWindowProcW
GetMessageW
TranslateMessage
DispatchMessageW
ScreenToClient
GetWindow
GetUpdateRect
IsRectEmpty
GetFocus
SetFocus
ReleaseDC
SetCapture
GetDC
GetKeyState
CharLowerW
ReleaseCapture
BeginPaint
EndPaint
IntersectRect
MonitorFromWindow
MapWindowPoints
SetCursor
SetParent
CreateDialogIndirectParamW
EndDialog
GetMenuItemInfoW
MessageBeep
GetNextDlgTabItem
GetNextDlgGroupItem
CharUpperW
LoadImageW
ClientToScreen
GetCursorPos
GetSysColorBrush
UnregisterClassW
UnpackDDElParam
ReuseDDElParam
ValidateRect
LoadMenuW
SendMessageW
InvalidateRect
LoadIconW
SetTimer
KillTimer
PostThreadMessageW
EnableWindow
LoadAcceleratorsW
ModifyMenuW
InsertMenuItemW
GetClientRect
IsWindow
AdjustWindowRectEx
PostQuitMessage
MoveWindow
SetWindowPos
DestroyWindow
CreateWindowExW
GetWindowLongW
ShowWindow
SetWindowLongW
DefWindowProcW
LoadCursorW
RegisterClassExW
PtInRect
EnumDisplayMonitors
SystemParametersInfoW
FindWindowW
GetMonitorInfoW
FindWindowExW
GetWindowTextW
keybd_event
PostMessageW
WindowFromPoint
GetClassNameW
GetWindowRect
GetDesktopWindow
GetSystemMetrics
IsClipboardFormatAvailable
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SetForegroundWindow
BringWindowToTop
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
GetParent
GetMenuItemCount
SetRectEmpty

gdi32

GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
CreatePatternBrush
GetMapMode
SetMapMode
GetTextColor
GetBkColor
Ellipse
LPtoDP
CreateEllipticRgn
GetRgnBox
CreateCompatibleDC
SelectObject
DeleteObject
ScaleWindowExtEx
DeleteDC
GetDeviceCaps
GetCharABCWidthsW
TextOutW
SetBkMode
SetTextColor
RoundRect
CreatePenIndirect
MoveToEx
LineTo
CreateSolidBrush
SetBkColor
ExtTextOutW
SetStretchBltMode
StretchBlt
CombineRgn
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SelectClipRgn
GetObjectA
CreateRoundRectRgn
CreateCompatibleBitmap
SaveDC
BitBlt
RestoreDC
Rectangle
SetWindowOrgEx
CreatePen
GetStockObject
GetObjectW
CreateFontIndirectW
GetTextMetricsW
GetTextExtentPoint32W
CreateDIBSection
CreateBitmap

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegEnumKeyW
RegQueryValueExW
RegQueryValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegOpenKeyW
RegCreateKeyExA
RegSetValueExW
OpenProcessToken
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
DuplicateTokenEx
CreateProcessAsUserW
RegOpenKeyExW

shell32

ShellExecuteW
ShellExecuteExW
SHAppBarMessage
Shell_NotifyIconW
DragFinish
SHGetSpecialFolderPathW
DragQueryFileW

comctl32

ord17
_TrackMouseEvent

shlwapi

PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathFileExistsW
PathIsUNCW

oledlg

OleUIBusyW

ole32

OleFlushClipboard
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CreateStreamOnHGlobal
CLSIDFromString
CoRegisterMessageFilter
CoInitialize
OleUninitialize
OleInitialize
CLSIDFromProgID
OleLockRunning
CoTaskMemFree
CoFreeUnusedLibraries
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoDisconnectObject
CoRevokeClassObject
OleIsCurrentClipboard

oleaut32

VariantChangeType
LoadTypeLi
SafeArrayCreateVector
VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SysFreeString
SysAllocString
SysAllocStringLen
VariantClear
VariantInit
SysStringLen
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
OleCreateFontIndirect
SafeArrayGetLBound

urlmon

URLDownloadToFileW

gdiplus

GdipCreateFontFromDC
GdipDrawString
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectRectI
GdipDeleteGraphics
GdipCreateFromHDC
GdipAlloc
GdipFree
GdipSetTextRenderingHint
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipCreateFontFromLogfontA
GdipCreateLineBrushI
GdipDeleteFont
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteBrush
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipCloneBrush
GdipCreateBitmapFromStreamICM
GdipDrawImageRectI
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDisposeImage

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext

psapi

GetModuleFileNameExW
EnumProcessModules

iphlpapi

GetAdaptersInfo

wininet

InternetSetOptionW
InternetReadFile
InternetOpenUrlW
InternetCloseHandle
HttpQueryInfoW
InternetOpenW

winmm

waveOutClose
waveOutSetVolume
waveOutOpen

ws2_32

socket
closesocket
WSAGetLastError
WSAStartup
WSACleanup
send
getsockname
ntohs
bind
htons
getsockopt
getpeername
setsockopt
connect
WSASetLastError
inet_addr
gethostbyname
inet_ntoa
htonl
getservbyname
gethostbyaddr
getservbyport
sendto
recvfrom
accept
listen
gethostname
ioctlsocket
select
__WSAFDIsSet
recv

wldap32

ord142
ord46
ord41
ord27
ord301
ord167
ord147
ord127
ord133
ord26
ord208
ord216
ord145
ord14
ord118
ord79

Exports

Exports

curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_maprintf
curl_mfprintf
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 368KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 680KB - Virtual size: 679KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5198f8b449ad47e2a7a2809ad1cb6a13

Code Sign

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4cCertificate

Extended Key Usages

Key Usages

5a:0d:5b:8c:d2:1f:7e:32:5a:e3:6d:08:aa:bb:de:f6Certificate

Extended Key Usages

Key Usages

5e:68:d6:11:71:94:63:50:56:00:68:f3:3e:c9:c5:91Certificate

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

5c:8a:4e:24:7d:3c:91:2c:85:be:cc:80:c0:83:cd:f4Certificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4cCertificate

Extended Key Usages

Key Usages

5e:68:d6:11:71:94:63:50:56:00:68:f3:3e:c9:c5:91Certificate

Key Usages

35:0b:83:66:75:04:66:3a:f5:8a:4b:bb:40:21:df:cd:29:82:81:4f:30:33:d2:0b:43:3e:bd:b2:fa:c1:c8:cdSigner

18:7d:08:e4:51:94:7e:04:67:50:51:d5:8f:7e:6c:ec:24:f9:6c:75Signer

Headers

File Characteristics

PDB Paths

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

gdiplus

imm32

psapi

iphlpapi

wininet

winmm

ws2_32

wldap32

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 368KB - Virtual size: 366KB

.data Size: 20KB - Virtual size: 37KB

.rsrc Size: 680KB - Virtual size: 679KB

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

5a:0d:5b:8c:d2:1f:7e:32:5a:e3:6d:08:aa:bb:de:f6
Certificate

5e:68:d6:11:71:94:63:50:56:00:68:f3:3e:c9:c5:91
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

5c:8a:4e:24:7d:3c:91:2c:85:be:cc:80:c0:83:cd:f4
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

25:1f:5d:98:81:82:17:2e:3c:41:9e:01:4f:b0:40:4c
Certificate

5e:68:d6:11:71:94:63:50:56:00:68:f3:3e:c9:c5:91
Certificate

35:0b:83:66:75:04:66:3a:f5:8a:4b:bb:40:21:df:cd:29:82:81:4f:30:33:d2:0b:43:3e:bd:b2:fa:c1:c8:cd
Signer

18:7d:08:e4:51:94:7e:04:67:50:51:d5:8f:7e:6c:ec:24:f9:6c:75
Signer

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 368KB - Virtual size: 366KB

.data
Size: 20KB - Virtual size: 37KB

.rsrc
Size: 680KB - Virtual size: 679KB