Init
Select
Show
General
-
Target
radtools.exe
-
Size
1.0MB
-
MD5
d3656b0e2f83e0cd6bc2d02d98b0b566
-
SHA1
43b46bdae8d13b47d91ca6ad611be24f91569bb4
-
SHA256
9e70b9908b15ca9aa4149c48b4d2d3bf0cf27b8e0042ee8da7b9441d88a4da99
-
SHA512
717dfff7cf9f6deff5460a590e22261b1448c9138ee8cac708e1d56eab4d90def4feed1392f4456f41a19500cb67f3d8aeb009a457f7ef3b555ca3b7b89f9476
-
SSDEEP
24576:PpAwvbXHEH0n5C4VV+cN1MzjK2BivuLVGISEDuKeM:Pqwvjn5FIcvMyT+VGIuKeM
Score
7/10
Malware Config
Signatures
-
resource yara_rule static1/unpack001/smackplw.exe upx -
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource radtools.exe unpack001/$PLUGINSDIR/StartMenu.dll unpack002/out.upx unpack001/uninstall.exe -
NSIS installer 4 IoCs
resource yara_rule sample nsis_installer_1 sample nsis_installer_2 static1/unpack001/uninstall.exe nsis_installer_1 static1/unpack001/uninstall.exe nsis_installer_2
Files
-
radtools.exe.exe windows:4 windows x86 arch:x86
099c0646ea7282d232219f8807883be0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/StartMenu.dll.dll windows:4 windows x86 arch:x86
7868cd55f358bfb360f9eb8ce1512ca0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrcpynA
GlobalAlloc
MulDiv
GetModuleHandleA
GlobalFree
FindClose
FindNextFileA
FindFirstFileA
lstrcmpiA
lstrcatA
lstrcpyA
user32
TranslateMessage
GetMessageA
IsDialogMessageA
PostMessageA
DispatchMessageA
GetWindowLongA
CheckDlgButton
ShowWindow
LoadIconA
GetClientRect
MoveWindow
ScreenToClient
GetWindowRect
ReleaseDC
GetDC
EnableWindow
SetWindowTextA
SendMessageA
IsDlgButtonChecked
GetWindowTextA
DestroyWindow
GetDlgItem
CreateDialogParamA
SetWindowLongA
wsprintfA
CallWindowProcA
gdi32
GetTextMetricsA
SelectObject
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ole32
CoTaskMemFree
Exports
Exports
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
binkplay.exe.exe windows:5 windows x86 arch:x86
2afa6b187f070b34e10c01afcfb34f11
Code Sign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/08/2022, 00:00Not After09/11/2031, 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29/04/2021, 00:00Not After28/04/2036, 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14/07/2023, 00:00Not After13/10/2034, 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
06:1a:46:54:2e:fc:af:0b:58:3d:fd:3d:c8:87:1e:8fCertificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before01/03/2024, 00:00Not After05/03/2025, 23:59SubjectSERIALNUMBER=D03752763,CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084d6172796c616e64,1.3.6.1.4.1.311.60.2.1.3=#13025553Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
f2:c5:a5:09:5e:86:d4:c1:6e:c9:e4:b5:88:fb:1f:50:86:ac:9c:26:80:a0:cd:2c:43:fb:e0:1e:b8:55:1f:28Signer
Actual PE Digestf2:c5:a5:09:5e:86:d4:c1:6e:c9:e4:b5:88:fb:1f:50:86:ac:9c:26:80:a0:cd:2c:43:fb:e0:1e:b8:55:1f:28Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\devel\projects\bink\build\binkplay.pdb
Imports
user32
GetCursorPos
GetTopWindow
GetWindow
GetWindowThreadProcessId
GetActiveWindow
GetDesktopWindow
CreateWindowExA
GetWindowLongA
SetWindowLongA
ClientToScreen
SystemParametersInfoA
PeekMessageA
KillTimer
TranslateMessage
DispatchMessageA
UpdateWindow
SetWindowTextA
LoadStringA
SendMessageA
ChangeDisplaySettingsA
DestroyWindow
LoadIconA
LoadCursorA
RegisterClassA
IsIconic
PostQuitMessage
SetTimer
DefWindowProcA
BeginPaint
EndPaint
ValidateRect
GetWindowRect
ShowWindow
SetWindowPos
GetClientRect
GetDC
ReleaseDC
MessageBoxA
GetSystemMetrics
wsprintfA
gdi32
SetTextColor
SetBkColor
SetTextAlign
ExtTextOutA
GetTextExtentPoint32A
DeleteObject
SetStretchBltMode
PatBlt
StretchBlt
CreateCompatibleDC
CreateDIBSection
DeleteDC
SelectObject
SetMapMode
kernel32
CreateThread
SetThreadPriority
ResumeThread
SetThreadAffinityMask
AddVectoredExceptionHandler
RaiseException
WaitForSingleObject
GetCurrentThread
GetThreadPriority
HeapFree
HeapAlloc
HeapCreate
GetStartupInfoA
GetStdHandle
GetCommandLineA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetCurrentThreadId
CreateMutexA
ReleaseMutex
CreateSemaphoreA
ReleaseSemaphore
SetUnhandledExceptionFilter
GetFileSize
RemoveVectoredExceptionHandler
GetSystemInfo
GetCurrentProcess
GetProcAddress
GetModuleHandleA
WriteProfileStringA
GetProfileStringA
GetVersionExA
FreeLibrary
LoadLibraryA
GetLocalTime
Sleep
GetFileAttributesA
GetModuleFileNameA
CreateFileA
CloseHandle
GetCurrentProcessId
SetErrorMode
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
GetEnvironmentVariableA
TerminateProcess
ExitProcess
SetFilePointer
ReadFile
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
winmm
timeBeginPeriod
timeEndPeriod
timeGetTime
shell32
ShellExecuteA
ole32
CoCreateInstance
CoInitializeEx
CoUninitialize
Sections
.text Size: 233KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
radvideo32.exe.exe windows:5 windows x86 arch:x86
58569a6ed8a8de21776aaba78209d34a
Code Sign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/08/2022, 00:00Not After09/11/2031, 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29/04/2021, 00:00Not After28/04/2036, 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14/07/2023, 00:00Not After13/10/2034, 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
06:1a:46:54:2e:fc:af:0b:58:3d:fd:3d:c8:87:1e:8fCertificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before01/03/2024, 00:00Not After05/03/2025, 23:59SubjectSERIALNUMBER=D03752763,CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084d6172796c616e64,1.3.6.1.4.1.311.60.2.1.3=#13025553Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
64:40:9f:49:0a:6c:fc:1c:16:47:88:a0:9b:46:6a:1c:c3:dc:79:28:00:91:b7:37:69:11:d0:4d:ef:a3:ee:54Signer
Actual PE Digest64:40:9f:49:0a:6c:fc:1c:16:47:88:a0:9b:46:6a:1c:c3:dc:79:28:00:91:b7:37:69:11:d0:4d:ef:a3:ee:54Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\devel\projects\bink\build\radvideo32.pdb
Imports
user32
DialogBoxParamA
EndDialog
GetWindowTextA
SetWindowTextA
EnableWindow
LoadCursorA
GetParent
LoadIconA
SetClassLongA
GetMenuItemCount
SetWindowPos
CallWindowProcA
GetWindowPlacement
GetWindowLongA
SetWindowLongA
GetSystemMenu
InsertMenuA
SetWindowPlacement
RemoveMenu
GetDlgItem
GetWindowRect
FindWindowExA
SetForegroundWindow
GetAsyncKeyState
PostMessageA
OpenClipboard
EmptyClipboard
SetClipboardData
MessageBoxA
SendMessageA
ShowWindow
GetMenuItemID
CloseClipboard
wsprintfA
kernel32
QueryPerformanceCounter
FlushFileBuffers
RaiseException
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
RtlUnwind
InitializeCriticalSectionAndSpinCount
HeapReAlloc
VirtualAlloc
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
VirtualFree
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
WriteFile
GetLastError
SetFilePointer
WriteProfileStringA
GetProfileIntA
CloseHandle
CreateFileA
GlobalUnlock
GlobalLock
GlobalAlloc
WinExec
SetCurrentDirectoryA
ReadFile
FreeLibrary
LockResource
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
CreateProcessA
Sleep
GetProfileStringA
GetVersionExA
GetModuleFileNameA
WaitForSingleObject
SetEvent
WaitForMultipleObjects
OutputDebugStringA
CreateMutexA
CreateEventA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
UnmapViewOfFile
GetCurrentProcess
GetProcAddress
GetModuleHandleA
LoadLibraryA
HeapCreate
HeapAlloc
HeapFree
GetTickCount
GetSystemDirectoryA
QueryPerformanceFrequency
GetEnvironmentVariableA
GetFullPathNameA
GetCurrentDirectoryA
GetDriveTypeA
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitProcess
advapi32
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
winmm
timeGetTime
shell32
ShellExecuteA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetFolderPathA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
Sections
.text Size: 126KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_UNSTEXT Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 62.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
radvideo64.exe.exe windows:6 windows x64 arch:x64
8d8a2bf312f630cd55568372bb76542a
Code Sign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/08/2022, 00:00Not After09/11/2031, 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29/04/2021, 00:00Not After28/04/2036, 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14/07/2023, 00:00Not After13/10/2034, 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
06:1a:46:54:2e:fc:af:0b:58:3d:fd:3d:c8:87:1e:8fCertificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before01/03/2024, 00:00Not After05/03/2025, 23:59SubjectSERIALNUMBER=D03752763,CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084d6172796c616e64,1.3.6.1.4.1.311.60.2.1.3=#13025553Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
87:3b:16:ed:ca:55:1c:8c:20:8d:9f:46:24:12:9c:d4:61:95:e3:92:1a:67:f1:89:4a:2b:39:2b:ab:27:24:c2Signer
Actual PE Digest87:3b:16:ed:ca:55:1c:8c:20:8d:9f:46:24:12:9c:d4:61:95:e3:92:1a:67:f1:89:4a:2b:39:2b:ab:27:24:c2Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\devel\projects\bink\build\radvideo64.pdb
Imports
user32
wsprintfA
wsprintfW
SetFocus
CreateDialogParamA
GetMessageA
IsDialogMessageA
SetActiveWindow
IsWindowVisible
IsWindow
GetWindow
SendMessageA
PostMessageA
CallWindowProcA
DestroyWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
GetDlgItem
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetAsyncKeyState
GetSystemMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
RemoveMenu
SetForegroundWindow
GetWindowRect
MessageBoxA
SetCursor
GetWindowLongA
SetWindowLongA
SetWindowLongPtrA
SetClassLongPtrA
GetParent
FindWindowExA
LoadCursorA
LoadIconA
ShowWindow
DialogBoxParamA
EndDialog
EnableWindow
CreatePopupMenu
DestroyMenu
AppendMenuA
TrackPopupMenu
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
ScreenToClient
GetSystemMetrics
EnumDisplaySettingsA
EnumDisplayDevicesA
LoadStringA
TranslateMessage
DispatchMessageA
PeekMessageA
DefWindowProcA
PostQuitMessage
RegisterClassA
CreateWindowExA
IsIconic
SetTimer
KillTimer
UpdateWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
ValidateRect
GetClientRect
ClientToScreen
GetWindowLongPtrA
ChangeDisplaySettingsA
SystemParametersInfoA
GetActiveWindow
GetDesktopWindow
GetTopWindow
GetWindowThreadProcessId
gdi32
ExtTextOutA
SetTextAlign
SetTextColor
SetStretchBltMode
StretchBlt
SetBkColor
SelectObject
PatBlt
GetTextExtentPoint32A
DeleteObject
DeleteDC
CreateCompatibleDC
CreateDIBSection
SetMapMode
SetDIBColorTable
kernel32
GetVersion
IsBadReadPtr
GlobalFree
GlobalHandle
CreateFileW
IsBadHugeReadPtr
DeleteFileW
GetTempFileNameW
GetTempPathW
GlobalSize
OutputDebugStringW
SetLastError
CreateMutexW
CreateEventW
SignalObjectAndWait
CreateSemaphoreW
FormatMessageW
IsProcessorFeaturePresent
FindNextFileA
SystemTimeToTzSpecificLocalTime
GetSystemTime
RtlCaptureContext
EncodePointer
LoadLibraryExW
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ResetEvent
WaitForSingleObjectEx
GetModuleHandleW
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
TlsSetValue
RtlUnwindEx
RtlPcToFileHeader
InitializeCriticalSectionAndSpinCount
TlsAlloc
SetCurrentDirectoryA
CreateFileA
ReadFile
SetFilePointer
CloseHandle
GetLastError
Sleep
CreateProcessA
GetLocalTime
GetVersionExA
FreeLibrary
GetModuleFileNameA
LoadLibraryExA
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalUnlock
GlobalLock
WinExec
FindResourceA
GetProfileIntA
GetProfileStringA
WriteProfileStringA
GetTempPathA
GetTempFileNameA
GetCurrentDirectoryA
GetEnvironmentVariableA
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount
WaitForSingleObject
GetExitCodeProcess
CreateThread
GetProcAddress
LoadLibraryA
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FileTimeToSystemTime
GetDiskFreeSpaceExA
GlobalMemoryStatusEx
GetSystemInfo
GetNativeSystemInfo
GetModuleHandleA
GetFileAttributesA
SetErrorMode
GetCurrentProcessId
GetFileSize
DeleteFileA
FlushFileBuffers
WriteFile
MoveFileA
OutputDebugStringA
GetSystemTimeAsFileTime
SetEvent
CreateMutexA
CreateEventA
WaitForMultipleObjects
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
OpenFileMappingA
ReleaseSemaphore
GetCurrentThread
SetThreadPriority
GetThreadPriority
SetThreadIdealProcessor
CreateSemaphoreA
HeapCreate
HeapAlloc
HeapFree
RaiseException
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseMutex
GetCurrentThreadId
ResumeThread
SetThreadAffinityMask
TlsFree
TlsGetValue
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
winmm
timeEndPeriod
timeBeginPeriod
waveOutGetDevCapsA
timeGetTime
waveOutGetNumDevs
shell32
SHBrowseForFolderA
SHGetFolderPathA
SHGetPathFromIDListA
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
ole32
CoUninitialize
CoCreateInstance
CoInitializeEx
api-ms-win-crt-string-l1-1-0
strncpy_s
isspace
_strdup
strnlen
strcmp
_strupr
strcpy_s
_strnicmp
strncpy
tolower
_stricmp
toupper
api-ms-win-crt-convert-l1-1-0
_atoi64
atof
atoi
atol
_ltoa
mbstowcs
api-ms-win-crt-heap-l1-1-0
_calloc_base
malloc
_free_base
calloc
free
realloc
_callnewh
_aligned_free
_set_new_mode
_aligned_malloc
api-ms-win-crt-math-l1-1-0
pow
floor
atan2
exp
powf
rint
sqrt
__setusermatherr
log
ceil
sqrtf
cos
sin
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
exit
_cexit
_c_exit
_beginthreadex
_endthreadex
_seh_filter_exe
_set_app_type
abort
_exit
terminate
_configure_narrow_argv
_initialize_narrow_environment
_get_narrow_winmain_command_line
_crt_atexit
_register_onexit_function
_initterm
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_initterm_e
api-ms-win-crt-stdio-l1-1-0
_getcwd
__p__commode
fclose
fopen
fwrite
__acrt_iob_func
feof
fgetc
fread
_ftelli64
__stdio_common_vfprintf
_set_fmode
fopen_s
__stdio_common_vsprintf_s
__stdio_common_vsprintf
fseek
ftell
_fseeki64
api-ms-win-crt-filesystem-l1-1-0
_getdrive
_fullpath
_splitpath
_chdrive
_chdir
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 683KB - Virtual size: 683KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 63.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
smackplw.exe.exe windows:4 windows x86 arch:x86
Code Sign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/08/2022, 00:00Not After09/11/2031, 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29/04/2021, 00:00Not After28/04/2036, 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14/07/2023, 00:00Not After13/10/2034, 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
06:1a:46:54:2e:fc:af:0b:58:3d:fd:3d:c8:87:1e:8fCertificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before01/03/2024, 00:00Not After05/03/2025, 23:59SubjectSERIALNUMBER=D03752763,CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084d6172796c616e64,1.3.6.1.4.1.311.60.2.1.3=#13025553Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
6b:d4:d6:31:3b:57:64:24:b1:4e:9b:a3:d1:48:78:cd:34:20:e4:99:9c:47:24:77:a1:90:28:c2:49:f5:8d:74Signer
Actual PE Digest6b:d4:d6:31:3b:57:64:24:b1:4e:9b:a3:d1:48:78:cd:34:20:e4:99:9c:47:24:77:a1:90:28:c2:49:f5:8d:74Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
_UNSTEXT Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BINK Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
BINKBSS Size: - Virtual size: 24B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BINKDATA Size: 1024B - Virtual size: 608B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BINKCONS Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
uninstall.exe.exe windows:4 windows x86 arch:x86
099c0646ea7282d232219f8807883be0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
CreateFileA
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA
user32
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ