2024-08-14_5e111ee7debc7498e01612b1e8d7d029_icedid

Sharing

Copy URL Twitter E-mail

General

Target

2024-08-14_5e111ee7debc7498e01612b1e8d7d029_icedid
Size

4.7MB
MD5

5e111ee7debc7498e01612b1e8d7d029
SHA1

496214fd0c01e294c82f49e90c4c952c6561c018
SHA256

957f29b223a7613779109a4eed6c52d34a8dfeb153bfdd6fd8e45c3d3f92a060
SHA512

9359f413a10123efc3bb7c800caf1775367c0eb385012b772a97a2badaeec722d93a44c03146df933cfcf2d367db5ddb863fab13949b2b7f776ed4c3c84cd9b8
SSDEEP

98304:qiT75T3kkK/46Ztqyrym3OeYHQJWWfBFgvhqtLDgoN41T3mVD:n75j2GcPDgoN41zG

Score

1^/10

Malware Config

Signatures

Files

2024-08-14_5e111ee7debc7498e01612b1e8d7d029_icedid
.exe windows:6 windows x86 arch:x86

8e9a0dd6c979608414b60d199e621592

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e6:bb:51:e9:27:e9:35:07:d1:eb:f5:1a:11:7e:1c:b3
Certificate

Issuer

CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB

Not Before

16/08/2022, 00:00

Not After

15/08/2025, 23:59

Subject

SERIALNUMBER=16242320,CN=DrayTek Corp.,O=DrayTek Corp.,ST=Hsinchu,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

88:e9:66:ee:e9:a5:53:b0:22:b2:e4:c8:4a:c4:e7:ad:2c:9d:6c:32:7f:45:36:cc:8c:10:c0:a8:2f:b9:e3:63
Signer

Actual PE Digest

88:e9:66:ee:e9:a5:53:b0:22:b2:e4:c8:4a:c4:e7:ad:2c:9d:6c:32:7f:45:36:cc:8c:10:c0:a8:2f:b9:e3:63

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

DeleteIpForwardEntry
CreateIpForwardEntry
GetIfTable
GetIpForwardTable
DeleteIPAddress
AddIPAddress
GetAdaptersInfo
GetIpNetTable
GetIpAddrTable
DeleteIpNetEntry
CreateIpNetEntry

crypt32

CertOpenSystemStoreW
CertFreeCertificateContext
CertFindCertificateInStore
CertDuplicateCertificateContext
CertCloseStore
CertGetCertificateContextProperty
CertEnumCertificatesInStore
CertNameToStrW
CertOpenStore

cryptui

CryptUIDlgSelectCertificateFromStore

shlwapi

PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
UrlUnescapeW
StrFormatKBSizeW
PathFindExtensionW
PathFindFileNameW
PathFileExistsW

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiGetINFClassW
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoW
SetupDiSetDeviceRegistryPropertyW
SetupDiCallClassInstaller
SetupDiEnumDeviceInfo

ws2_32

getsockopt
WSAStartup
WSACleanup
inet_ntoa
ntohl
send
connect
accept
listen
inet_addr
ioctlsocket
bind
sendto
htonl
htons
closesocket
setsockopt
WSAGetLastError
recvfrom
__WSAFDIsSet
gethostbyname
WSASetLastError
ntohs
getsockname
recv
select
getpeername
socket

powrprof

GetPwrCapabilities

libintl3

ord27
ord51
ord35
ord26

kernel32

SetEndOfFile
SetFilePointer
UnlockFile
lstrcmpiW
GetVolumeInformationW
CompareStringA
FileTimeToLocalFileTime
GetFileAttributesExW
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
InitializeCriticalSection
GlobalHandle
LocalReAlloc
GlobalGetAtomNameW
GlobalFlags
GetLocaleInfoW
GetSystemDefaultUILanguage
lstrcpyW
VerSetConditionMask
VerifyVersionInfoW
GetCurrentDirectoryW
FindResourceExW
SetErrorMode
GetTempPathW
GetProfileIntW
SearchPathW
GetTempFileNameW
GetUserDefaultLCID
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetFullPathNameW
FlushFileBuffers
VirtualProtect
lstrcmpA
GlobalReAlloc
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
EncodePointer
GetModuleHandleA
OutputDebugStringA
GlobalSize
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
LoadLibraryA
ConvertThreadToFiber
ConvertFiberToThread
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
GetStdHandle
GetModuleHandleExW
CreateFiber
DeleteFiber
SwitchToFiber
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
FindNextFileW
FindClose
SystemTimeToFileTime
GetSystemTime
OpenEventW
OpenMutexW
ReleaseMutex
IsBadReadPtr
IsBadWritePtr
GetCurrentThreadId
UnmapViewOfFile
FlushViewOfFile
CreateFileMappingW
MapViewOfFile
OpenFileMappingW
GetFileSize
CreateDirectoryA
TerminateThread
GetExitCodeThread
GetACP
GetModuleHandleW
GetProcessHeap
DecodePointer
HeapAlloc
GetSystemInfo
RaiseException
HeapReAlloc
GetPrivateProfileStringW
HeapSize
GetVersionExW
GetPrivateProfileIntW
HeapFree
WritePrivateProfileStringW
GetPrivateProfileSectionW
WritePrivateProfileSectionW
GetSystemPowerStatus
CopyFileW
lstrlenW
SetThreadPriority
SuspendThread
OpenProcess
CreateDirectoryW
GenerateConsoleCtrlEvent
AttachConsole
GetProcessId
TerminateProcess
DeleteFileW
GetTickCount
GetFileAttributesW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableW
GetEnvironmentVariableW
WinExec
GetModuleFileNameW
GetExitCodeProcess
CreateProcessW
CreateMutexW
GetCurrentThread
WideCharToMultiByte
ResumeThread
MulDiv
GlobalUnlock
GlobalLock
GetWindowsDirectoryW
SetThreadLocale
LocaleNameToLCID
GetSystemDefaultLangID
GetUserDefaultUILanguage
GetUserDefaultLangID
CreateProcessA
GetCurrentProcess
DuplicateHandle
CreatePipe
WriteFile
Sleep
SetEvent
CreateThread
DeviceIoControl
CreateFileW
CreateEventW
CloseHandle
GetOverlappedResult
WaitForSingleObject
ReadFile
ResetEvent
GlobalFree
GlobalAlloc
FindFirstFileW
FreeLibrary
GetProcAddress
LoadLibraryW
GetSystemDirectoryW
LocalAlloc
SetLastError
LocalFree
FormatMessageW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetLastError
OutputDebugStringW
GetStringTypeW
LCMapStringEx
GetCPInfo
RtlUnwind
ExitProcess
ExitThread
FreeLibraryAndExitThread
GetDriveTypeW
GetFileInformationByHandle
PeekNamedPipe
SetConsoleCtrlHandler
VirtualAlloc
VirtualQuery
GetCommandLineA
GetCommandLineW
SetStdHandle
HeapQueryInformation
QueryPerformanceFrequency
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
IsValidCodePage
GetOEMCP
SetFilePointerEx
GetTimeZoneInformation
GetConsoleOutputCP
FindFirstFileExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LockFile
WriteConsoleW

user32

CheckMenuItem
IsDialogMessageW
SetWindowTextW
CheckDlgButton
SetDlgItemTextW
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetTopWindow
GetClassNameW
GetClassLongW
EqualRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
MapVirtualKeyW
GetKeyNameTextW
GetParent
GetDesktopWindow
GetWindowLongW
SetActiveWindow
IsWindowEnabled
GetActiveWindow
WindowFromPoint
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
IsWindow
RemoveMenu
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringW
GetUserObjectInformationW
GetProcessWindowStation
DrawTextW
GetMenuCheckMarkDimensions
UpdateWindow
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
OffsetRect
UnregisterClassW
ExitWindowsEx
GetWindowRect
GetWindowThreadProcessId
FindWindowW
GetCursorPos
ModifyMenuW
GetSubMenu
LoadMenuW
GetLastActivePopup
IsWindowVisible
DrawIcon
IsIconic
DrawFocusRect
InflateRect
IsRectEmpty
SetMenuItemBitmaps
LoadImageW
CopyImage
DrawIconEx
DrawStateW
AppendMenuW
LoadStringW
GetDlgCtrlID
MessageBoxW
SendMessageTimeoutW
RegisterWindowMessageW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
CopyRect
GetSysColor
FillRect
CopyIcon
LoadCursorW
SetWindowLongW
SetCursor
SetCapture
ReleaseCapture
PtInRect
SetRect
GetSystemMetrics
GetIconInfo
MapDialogRect
GetFocus
GetSystemMenu
EnableMenuItem
SetForegroundWindow
MessageBeep
DestroyIcon
KillTimer
ReleaseDC
GetDC
GetClientRect
LoadBitmapW
SetTimer
RedrawWindow
InvalidateRect
SetFocus
LoadIconW
SendMessageW
EnableWindow
IntersectRect
GetAsyncKeyState
DestroyMenu
GetMenuItemInfoW
SystemParametersInfoW
WaitMessage
CharUpperW
PostQuitMessage
ShowOwnedPopups
GetSysColorBrush
RealChildWindowFromPoint
SetMenuItemInfoW
DestroyCursor
GetWindowRgn
CreateMenu
SetLayeredWindowAttributes
SubtractRect
SendDlgItemMessageA
SetRectEmpty
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
ClientToScreen
GetWindow
GetNextDlgGroupItem
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
TrackMouseEvent
CharUpperBuffW
MapVirtualKeyExW
IsCharLowerW
PostThreadMessageW
GetComboBoxInfo
RegisterClipboardFormatW
SetMenuDefaultItem
GetDoubleClickTime
LockWindowUpdate
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
FrameRect
SetCursorPos
IsZoomed
SetParent
SetClassLongW
NotifyWinEvent
InvertRect
HideCaret
GetMenuDefaultItem
IsClipboardFormatAvailable
DeleteMenu
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
CreatePopupMenu
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
MonitorFromPoint
EnableScrollBar
UpdateLayeredWindow
UnionRect
SetWindowRgn
DrawFrameControl
DrawEdge
EnumDisplayMonitors
GetNextDlgTabItem
GetUpdateRect

gdi32

CreateRectRgn
CreatePatternBrush
LineTo
CreatePen
CreateHatchBrush
SetBkColor
PatBlt
CreateRectRgnIndirect
CopyMetaFileW
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
GetTextMetricsW
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
RealizePalette
SetPixel
StretchBlt
CreateDIBSection
IntersectClipRect
ExcludeClipRect
DPtoLP
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateEllipticRgn
Ellipse
GetBkColor
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
CreateRoundRectRgn
LPtoDP
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetTextFaceW
GetCurrentObject
SelectObject
GetDeviceCaps
GetTextExtentPoint32W
CreateDCW
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateBitmap
CreateFontIndirectW
CreateSolidBrush
SetTextColor
GetObjectW
Escape
SetRectRgn
PtVisible
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
SetDIBColorTable
GetClipBox
DeleteObject
DeleteDC

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
ReportEventW
LookupAccountSidW
GetTokenInformation
RegDeleteValueW
OpenServiceW
OpenSCManagerW
FreeSid
AccessCheck
IsValidSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
InitializeSecurityDescriptor
AllocateAndInitializeSid
DuplicateToken
OpenProcessToken
OpenThreadToken
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
LookupPrivilegeValueW
AdjustTokenPrivileges
CryptEnumProvidersW
RegEnumKeyW
RegQueryValueW
RegEnumValueW
RegDeleteKeyW
RegSetKeyValueW
DeregisterEventSource
RegisterEventSourceW

shell32

SHGetDesktopFolder
Shell_NotifyIconW
SHGetFolderPathW
ShellExecuteW
SHGetFileInfoW
DragQueryFileW
DragFinish
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHAppBarMessage
SHBrowseForFolderW

comctl32

InitCommonControlsEx

uxtheme

GetThemeColor
GetCurrentThemeName
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
CloseThemeData
OpenThemeData
DrawThemeParentBackground
GetThemePartSize
DrawThemeText
SetWindowTheme
DrawThemeBackground

ole32

CoTaskMemFree
OleDuplicateData
ReleaseStgMedium
CoUninitialize
CoInitializeEx
CoCreateInstance
CoCreateGuid
CoInitialize
CoDisconnectObject
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
CoTaskMemAlloc
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CreateStreamOnHGlobal
IsAccelerator
OleTranslateAccelerator

oleaut32

SysAllocString
LoadTypeLi
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantChangeType
VariantCopy
VarBstrFromDate
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
OleLoadPicture

gdiplus

GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipCreateBitmapFromHBITMAP
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipGetImagePalette
GdipGetImageGraphicsContext

rasapi32

RasGetEntryPropertiesW

bcrypt

BCryptGenRandom

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

winmm

PlaySoundW

wininet

InternetCloseHandle
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetOpenW
InternetQueryOptionW
InternetOpenUrlW
InternetReadFile
InternetSetFilePointer
InternetWriteFile
InternetQueryDataAvailable
InternetSetOptionW
InternetGetLastResponseInfoW
InternetSetStatusCallbackW
HttpQueryInfoW

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 857KB - Virtual size: 857KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 281KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e9a0dd6c979608414b60d199e621592

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6eCertificate

Extended Key Usages

Key Usages

e6:bb:51:e9:27:e9:35:07:d1:eb:f5:1a:11:7e:1c:b3Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

88:e9:66:ee:e9:a5:53:b0:22:b2:e4:c8:4a:c4:e7:ad:2c:9d:6c:32:7f:45:36:cc:8c:10:c0:a8:2f:b9:e3:63Signer

Headers

DLL Characteristics

File Characteristics

Imports

iphlpapi

crypt32

cryptui

shlwapi

setupapi

ws2_32

powrprof

libintl3

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

uxtheme

ole32

oleaut32

gdiplus

rasapi32

bcrypt

oleacc

imm32

winmm

wininet

Sections

.text Size: 3.5MB - Virtual size: 3.5MB

.rdata Size: 857KB - Virtual size: 857KB

.data Size: 39KB - Virtual size: 71KB

.rsrc Size: 281KB - Virtual size: 280KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Certificate

e6:bb:51:e9:27:e9:35:07:d1:eb:f5:1a:11:7e:1c:b3
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

88:e9:66:ee:e9:a5:53:b0:22:b2:e4:c8:4a:c4:e7:ad:2c:9d:6c:32:7f:45:36:cc:8c:10:c0:a8:2f:b9:e3:63
Signer

.text
Size: 3.5MB - Virtual size: 3.5MB

.rdata
Size: 857KB - Virtual size: 857KB

.data
Size: 39KB - Virtual size: 71KB

.rsrc
Size: 281KB - Virtual size: 280KB