fd537f9b345d4f136a3b660b4f2e84b0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

fd537f9b345d4f136a3b660b4f2e84b0N.exe
Size

2.4MB
MD5

fd537f9b345d4f136a3b660b4f2e84b0
SHA1

90199758f12dd9c5a27b419f86b7206c71d6d629
SHA256

a7db967191610ed8b3a076e76cc2787ddec274537973481527017b88c205904f
SHA512

07f11c5c57eb6c861ec789bc4d304e6498f21048af6c5b86d1aaf4ddf569e8b1d7e93210c7629a9595e63429f867ce2dd1e70a61d20d793e74fc79c44588818f
SSDEEP

49152:NOyvnEqF3bgEmRxa6EajH0k/KhLocVU/kC/EL3Hun2dPoZ0t:Fo8uUgWt

Score

1^/10

Malware Config

Signatures

Files

fd537f9b345d4f136a3b660b4f2e84b0N.exe
.dll windows:6 windows x64 arch:x64

ffe14dc977bc7e3268034d4ff57d7921

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/11/2023, 19:09

Not After

14/11/2024, 19:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

19/10/2023, 19:51

Not After

16/10/2024, 19:51

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a4:74:79:8c:3a:d5:b1:4e:98:6a:2f:b9:75:7f:9e:c0:6f:4d:54:80:1e:3b:f7:e4:89:b7:f0:03:31:8b:29:bc
Signer

Actual PE Digest

a4:74:79:8c:3a:d5:b1:4e:98:6a:2f:b9:75:7f:9e:c0:6f:4d:54:80:1e:3b:f7:e4:89:b7:f0:03:31:8b:29:bc

Digest Algorithm

sha256

PE Digest Matches

true

a4:74:79:8c:3a:d5:b1:4e:98:6a:2f:b9:75:7f:9e:c0:6f:4d:54:80:1e:3b:f7:e4:89:b7:f0:03:31:8b:29:bc
Signer

Actual PE Digest

a4:74:79:8c:3a:d5:b1:4e:98:6a:2f:b9:75:7f:9e:c0:6f:4d:54:80:1e:3b:f7:e4:89:b7:f0:03:31:8b:29:bc

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\__w\1\s\bins\release\amd64\protection\mip_protection_sdk.pdb

Imports

rpcrt4

UuidCreate

msvcp140

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
_Xtime_get_ticks
_Query_perf_counter
_Query_perf_frequency
_Mtx_current_owns
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_timedwait
_Cnd_broadcast
?_Throw_Cpp_error@std@@YAXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
??0task_continuation_context@Concurrency@@AEAA@XZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
_Thrd_id
_Thrd_detach
_Cnd_do_broadcast_at_thread_exit
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
_Cnd_signal
_Thrd_join
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
??0codecvt_base@std@@QEAA@_K@Z
??1codecvt_base@std@@UEAA@XZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?do_encoding@codecvt_base@std@@MEBAHXZ
?do_max_length@codecvt_base@std@@MEBAHXZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Syserror_map@std@@YAPEBDH@Z
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?exceptions@ios_base@std@@QEAAXH@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Xbad_function_call@std@@YAXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?_Xbad_alloc@std@@YAXXZ
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

iphlpapi

GetAdaptersAddresses
FreeMibTable
GetIpForwardTable2

ws2_32

inet_ntop

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
InitOnceComplete
TerminateProcess
LoadLibraryExA
GetProcAddress
FreeLibrary
VirtualQuery
VirtualProtect
GetSystemInfo
GetModuleHandleW
GetVersion
GetCurrentProcessId
GetLastError
GetCurrentThreadId
RaiseException
DisableThreadLibraryCalls
InitializeSListHead
GetCurrentProcess
IsProcessorFeaturePresent
InitOnceBeginInitialize
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent

vcruntime140

__current_exception_context
_CxxThrowException
_purecall
__std_terminate
memcmp
memcpy
memmove
__std_exception_copy
__std_exception_destroy
__std_type_info_destroy_list
__current_exception
memset
memchr
strstr
__C_specific_handler
__std_type_info_compare

vcruntime140_1

__CxxFrameHandler4

Exports

Exports

?Create@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBUApplicationInfo@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NAEBV?$shared_ptr@VLoggerDelegate@mipns@@@4@AEBV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@@Z
?Create@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBV?$shared_ptr@$$CBVMipConfiguration@mipns@@@4@@Z
?Create@ParsedPublishingLicenseBuilder@mipns@@SA?AV?$shared_ptr@VParsedPublishingLicenseBuilder@mipns@@@std@@XZ
?CreateDelegationLicenseSettings@DelegationLicenseSettings@mipns@@SA?AV?$shared_ptr@VDelegationLicenseSettings@mipns@@@std@@AEBV?$shared_ptr@VMipContext@mipns@@@4@AEBVPublishingLicenseInfo@2@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@4@_N@Z
?CreateDelegationLicenseSettings@DelegationLicenseSettings@mipns@@SA?AV?$shared_ptr@VDelegationLicenseSettings@mipns@@@std@@AEBVPublishingLicenseInfo@2@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@4@_N@Z
?CreateFromLicenseType@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@W4LicenseType@12@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@4@AEBV?$vector@VUserRights@mipns@@V?$allocator@VUserRights@mipns@@@std@@@4@@Z
?CreateFromProtectionDescriptor@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@AEBVProtectionDescriptor@2@@Z
?CreateFromSerializedTemplate@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@AEBV?$vector@EV?$allocator@E@std@@@4@@Z
?CreateFromTemplate@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?CreateFromUserRights@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@AEBV?$vector@VUserRights@mipns@@V?$allocator@VUserRights@mipns@@@std@@@4@@Z
?CreateFromUserRoles@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@AEBV?$vector@VUserRoles@mipns@@V?$allocator@VUserRoles@mipns@@@std@@@4@@Z
?CreateGetTemplatesSettings@GetTemplatesSettings@mipns@@SA?AV?$shared_ptr@VGetTemplatesSettings@mipns@@@std@@XZ
?CreatePublishingUseLicenseRequest@PublishingUseLicenseRequest@mipns@@SA?AV?$shared_ptr@VPublishingUseLicenseRequest@mipns@@@std@@XZ
?CreateStreamFromBuffer@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@PEAE_J@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_iostream@DU?$char_traits@D@std@@@std@@@3@@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_istream@DU?$char_traits@D@std@@@std@@@3@@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_ostream@DU?$char_traits@D@std@@@std@@@3@@Z
?CreateWithCustomFeatureSettings@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBUApplicationInfo@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NAEBV?$shared_ptr@VLoggerDelegate@mipns@@@4@AEBV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@AEBV?$map@W4FlightingFeature@mipns@@_NU?$less@W4FlightingFeature@mipns@@@std@@V?$allocator@U?$pair@$$CBW4FlightingFeature@mipns@@_N@std@@@4@@4@@Z
?GetBlockSize@CustomProtectedStream@mipns@@SA_JV?$shared_ptr@VProtectionHandler@mipns@@@std@@@Z
?GetPublishingLicenseInfo@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VPublishingLicenseInfo@mipns@@@std@@AEBV?$vector@EV?$allocator@E@std@@@4@@Z
?GetPublishingLicenseInfo@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VPublishingLicenseInfo@mipns@@@std@@AEBV?$vector@EV?$allocator@E@std@@@4@AEBV?$shared_ptr@VMipContext@mipns@@@4@@Z
?GetVersion@ProtectionProfile@mipns@@SAPEBDXZ
?Load@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VProtectionProfile@mipns@@@std@@AEBVSettings@12@@Z
?LoadAsync@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VAsyncControl@mipns@@@std@@AEBVSettings@12@AEBV?$shared_ptr@X@4@@Z
MIP_CC_CreateDelegationLicenseSettings
MIP_CC_CreateDictionary
MIP_CC_CreateHttpDelegate
MIP_CC_CreateLoggerDelegate
MIP_CC_CreateLoggerDelegateMessageData
MIP_CC_CreateMipContext
MIP_CC_CreateMipContextWithCustomFeatureSettings
MIP_CC_CreateProtectionDescriptorFromTemplate
MIP_CC_CreateProtectionDescriptorFromUserRights
MIP_CC_CreateProtectionDescriptorFromUserRoles
MIP_CC_CreateProtectionEngineSettingsWithEngineId
MIP_CC_CreateProtectionEngineSettingsWithEngineIdAndAuthCallback
MIP_CC_CreateProtectionEngineSettingsWithIdentity
MIP_CC_CreateProtectionEngineSettingsWithIdentityAndAuthCallback
MIP_CC_CreateProtectionHandlerConsumptionSettings
MIP_CC_CreateProtectionHandlerConsumptionSettingsWithPreLicense
MIP_CC_CreateProtectionHandlerPublishingSettings
MIP_CC_CreateProtectionProfileSettings
MIP_CC_CreateStream
MIP_CC_CreateStringList
MIP_CC_CreateTaskDispatcherDelegate
MIP_CC_CreateTelemetryConfiguration
MIP_CC_DelegationLicense_GetSerializedDelegationJsonLicense
MIP_CC_DelegationLicense_GetSerializedDelegationXrmlLicense
MIP_CC_DelegationLicense_GetSerializedUserLicense
MIP_CC_DelegationLicense_GetUser
MIP_CC_DelegationLicenses_GetLicenses
MIP_CC_Dictionary_GetEntries
MIP_CC_ExecuteDispatchedTask
MIP_CC_LoadProtectionProfile
MIP_CC_NotifyHttpDelegateResponse
MIP_CC_ProtectionDescriptor_DoesAllowOfflineAccess
MIP_CC_ProtectionDescriptor_DoesContentExpire
MIP_CC_ProtectionDescriptor_GetContentId
MIP_CC_ProtectionDescriptor_GetContentValidUntil
MIP_CC_ProtectionDescriptor_GetDescription
MIP_CC_ProtectionDescriptor_GetDescriptionSize
MIP_CC_ProtectionDescriptor_GetDoubleKeyUrl
MIP_CC_ProtectionDescriptor_GetDoubleKeyUrlSize
MIP_CC_ProtectionDescriptor_GetEncryptedAppData
MIP_CC_ProtectionDescriptor_GetLabelId
MIP_CC_ProtectionDescriptor_GetName
MIP_CC_ProtectionDescriptor_GetNameSize
MIP_CC_ProtectionDescriptor_GetOwner
MIP_CC_ProtectionDescriptor_GetOwnerSize
MIP_CC_ProtectionDescriptor_GetProtectionType
MIP_CC_ProtectionDescriptor_GetReferrer
MIP_CC_ProtectionDescriptor_GetReferrerSize
MIP_CC_ProtectionDescriptor_GetSignedAppData
MIP_CC_ProtectionDescriptor_GetTemplateId
MIP_CC_ProtectionEngineSettings_SetAllowCloudServiceOnly
MIP_CC_ProtectionEngineSettings_SetClientData
MIP_CC_ProtectionEngineSettings_SetCloud
MIP_CC_ProtectionEngineSettings_SetCloudEndpointBaseUrl
MIP_CC_ProtectionEngineSettings_SetCustomSettings
MIP_CC_ProtectionEngineSettings_SetSessionId
MIP_CC_ProtectionEngineSettings_SetTemplateRefreshArgs
MIP_CC_ProtectionEngineSettings_SetUnderlyingApplicationId
MIP_CC_ProtectionEngine_CreateProtectionHandlerForConsumption
MIP_CC_ProtectionEngine_CreateProtectionHandlerForPublishing
MIP_CC_ProtectionEngine_GetClientData
MIP_CC_ProtectionEngine_GetClientDataSize
MIP_CC_ProtectionEngine_GetDelegationLicenses
MIP_CC_ProtectionEngine_GetEngineId
MIP_CC_ProtectionEngine_GetEngineIdSize
MIP_CC_ProtectionEngine_GetRightsForLabelId
MIP_CC_ProtectionEngine_GetTemplates
MIP_CC_ProtectionEngine_GetTemplatesSize
MIP_CC_ProtectionHandlerConsumptionSettings_SetApplicationScenarioId
MIP_CC_ProtectionHandlerConsumptionSettings_SetCustomSettings
MIP_CC_ProtectionHandlerConsumptionSettings_SetDelegatedUserEmail
MIP_CC_ProtectionHandlerConsumptionSettings_SetIsOfflineOnly
MIP_CC_ProtectionHandlerPublishingSettings_SetApplicationScenarioId
MIP_CC_ProtectionHandlerPublishingSettings_SetCustomSettings
MIP_CC_ProtectionHandlerPublishingSettings_SetDelegatedUserEmail
MIP_CC_ProtectionHandlerPublishingSettings_SetIsAuditedExtractionAllowed
MIP_CC_ProtectionHandlerPublishingSettings_SetIsDeprecatedAlgorithmPreferred
MIP_CC_ProtectionHandlerPublishingSettings_SetIsPublishingFormatJson
MIP_CC_ProtectionHandlerPublishingSettings_SetPreLicenseUserEmail
MIP_CC_ProtectionHandler_DecryptBuffer
MIP_CC_ProtectionHandler_DoesUseDeprecatedAlgorithm
MIP_CC_ProtectionHandler_EncryptBuffer
MIP_CC_ProtectionHandler_GetBlockSize
MIP_CC_ProtectionHandler_GetCipherMode
MIP_CC_ProtectionHandler_GetContentId
MIP_CC_ProtectionHandler_GetIssuedUser
MIP_CC_ProtectionHandler_GetIssuedUserSize
MIP_CC_ProtectionHandler_GetOwner
MIP_CC_ProtectionHandler_GetOwnerSize
MIP_CC_ProtectionHandler_GetProtectedContentSize
MIP_CC_ProtectionHandler_GetProtectionDescriptor
MIP_CC_ProtectionHandler_GetRights
MIP_CC_ProtectionHandler_GetSerializedPreLicense
MIP_CC_ProtectionHandler_GetSerializedPreLicenseSize
MIP_CC_ProtectionHandler_GetSerializedPublishingLicense
MIP_CC_ProtectionHandler_GetSerializedPublishingLicenseSize
MIP_CC_ProtectionProfileSettings_SetCanCacheLicenses
MIP_CC_ProtectionProfileSettings_SetCustomSettings
MIP_CC_ProtectionProfileSettings_SetHttpDelegate
MIP_CC_ProtectionProfileSettings_SetSessionId
MIP_CC_ProtectionProfileSettings_SetTaskDispatcherDelegate
MIP_CC_ProtectionProfile_AddEngine
MIP_CC_ReleaseDelegationLicense
MIP_CC_ReleaseDelegationLicenseSettings
MIP_CC_ReleaseDelegationLicenses
MIP_CC_ReleaseDictionary
MIP_CC_ReleaseHttpDelegate
MIP_CC_ReleaseLoggerDelegate
MIP_CC_ReleaseMipContext
MIP_CC_ReleaseProtectionDescriptor
MIP_CC_ReleaseProtectionEngine
MIP_CC_ReleaseProtectionEngineSettings
MIP_CC_ReleaseProtectionHandler
MIP_CC_ReleaseProtectionHandlerConsumptionSettings
MIP_CC_ReleaseProtectionHandlerPublishingSettings
MIP_CC_ReleaseProtectionProfile
MIP_CC_ReleaseProtectionProfileSettings
MIP_CC_ReleaseStream
MIP_CC_ReleaseStringList
MIP_CC_ReleaseTaskDispatcherDelegate
MIP_CC_ReleaseTelemetryConfiguration
MIP_CC_ReleaseTemplateDescriptor
MIP_CC_StringList_GetStrings
MIP_CC_TelemetryConfiguration_AddMaskedProperty
MIP_CC_TelemetryConfiguration_SetCustomSettings
MIP_CC_TelemetryConfiguration_SetHostName
MIP_CC_TelemetryConfiguration_SetHttpDelegate
MIP_CC_TelemetryConfiguration_SetIsFastShutdownEnabled
MIP_CC_TelemetryConfiguration_SetIsLocalCachingEnabled
MIP_CC_TelemetryConfiguration_SetIsNetworkDetectionEnabled
MIP_CC_TelemetryConfiguration_SetIsTelemetryOptedOut
MIP_CC_TelemetryConfiguration_SetIsTraceLoggingEnabled
MIP_CC_TelemetryConfiguration_SetLibraryName
MIP_CC_TelemetryConfiguration_SetTaskDispatcherDelegate
MIP_CC_TemplateDescriptor_GetDescription
MIP_CC_TemplateDescriptor_GetDescriptionSize
MIP_CC_TemplateDescriptor_GetId
MIP_CC_TemplateDescriptor_GetName
MIP_CC_TemplateDescriptor_GetNameSize

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 481KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 90KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ffe14dc977bc7e3268034d4ff57d7921

Code Sign

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:afCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4Certificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

a4:74:79:8c:3a:d5:b1:4e:98:6a:2f:b9:75:7f:9e:c0:6f:4d:54:80:1e:3b:f7:e4:89:b7:f0:03:31:8b:29:bcSigner

a4:74:79:8c:3a:d5:b1:4e:98:6a:2f:b9:75:7f:9e:c0:6f:4d:54:80:1e:3b:f7:e4:89:b7:f0:03:31:8b:29:bcSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

rpcrt4

msvcp140

iphlpapi

ws2_32

kernel32

vcruntime140

vcruntime140_1

Exports

Exports

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 481KB - Virtual size: 480KB

.data Size: 90KB - Virtual size: 94KB

.pdata Size: 59KB - Virtual size: 58KB

.didat Size: 1024B - Virtual size: 672B

.rsrc Size: 1024B - Virtual size: 864B

.reloc Size: 10KB - Virtual size: 9KB

33:00:00:03:af:30:40:0e:4c:a3:4d:05:41:00:00:00:00:03:af
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

33:00:00:03:a4:cb:e3:56:b8:cb:7f:e4:27:00:00:00:00:03:a4
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

a4:74:79:8c:3a:d5:b1:4e:98:6a:2f:b9:75:7f:9e:c0:6f:4d:54:80:1e:3b:f7:e4:89:b7:f0:03:31:8b:29:bc
Signer

a4:74:79:8c:3a:d5:b1:4e:98:6a:2f:b9:75:7f:9e:c0:6f:4d:54:80:1e:3b:f7:e4:89:b7:f0:03:31:8b:29:bc
Signer

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 481KB - Virtual size: 480KB

.data
Size: 90KB - Virtual size: 94KB

.pdata
Size: 59KB - Virtual size: 58KB

.didat
Size: 1024B - Virtual size: 672B

.rsrc
Size: 1024B - Virtual size: 864B

.reloc
Size: 10KB - Virtual size: 9KB