bc09be3e0011070630ef99a0d92becfa_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

bc09be3e0011070630ef99a0d92becfa_JaffaCakes118
Size

16.4MB
MD5

bc09be3e0011070630ef99a0d92becfa
SHA1

a1784e8379d29f5d6d6661b9ea2c761419787681
SHA256

0b1c6a343b247ad2570adbb37d288fc761fab8f6bbfefe5376eebf046b660eec
SHA512

ecd512adc39dc8fd4c491e8f529d966357d350f2a10487fd7e0b988e7c08862e1d853d3c20a9d42f8a40fb883f2ca695ca9cba607f4ccd39e932fa23fc5d286b
SSDEEP

393216:pGiyN0i1Eh6ybXWTxaQ4PrXNITMTlFhjIwHxa2:pGzOh17uY57GYRzRa2

Score

1^/10

Malware Config

Signatures

Files

bc09be3e0011070630ef99a0d92becfa_JaffaCakes118
.rar
155绿色软件站.url
.url
crack/pt.exe
.exe windows:5 windows x86 arch:x86

9ec8db5866bfb4cad119c29775a23a94

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

38:e7:fa:0d:b1:a3:98:f8:05:bb:85:a6:91:71:dc:9d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/09/2009, 00:00

Not After

18/10/2012, 23:59

Subject

CN=PassMark Software Pty Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=PassMark Software Pty Ltd,ST=NSW,C=AU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

66:6f:61:73:0f:a6:34:05:ea:01:e4:75:4e:c5:4d:d2:6a:d0:89:20
Signer

Actual PE Digest

66:6f:61:73:0f:a6:34:05:ea:01:e4:75:4e:c5:4d:d2:6a:d0:89:20

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Files\Projects\PT7\pt___Win32_Unicode_Release\debug\pt\pt.pdb

Imports

cfgmgr32

CM_Locate_DevNodeW
CM_Get_Parent
CM_Get_Sibling
CM_Get_DevNode_Registry_PropertyW
CM_Get_Child

urlmon

URLDownloadToFileW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

winmm

timeGetTime

comctl32

ord17
ImageList_ReplaceIcon
ImageList_Create
ImageList_LoadImageW
ImageList_Draw
_TrackMouseEvent
ord2
CreateStatusWindowW
InitCommonControlsEx
ImageList_Destroy
CreateToolbarEx

shlwapi

UrlGetPartW
StrStrIW
StrCmpW

wininet

InternetOpenW
InternetReadFileExA
FtpPutFileW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpSendRequestA
HttpOpenRequestW
HttpQueryInfoW
InternetSetOptionW
HttpSendRequestW
InternetConnectW
InternetCrackUrlW

kernel32

SetEnvironmentVariableA
IsDebuggerPresent
GetFileTime
FindResourceW
LoadResource
GetModuleHandleW
LockResource
lstrcatW
MulDiv
lstrlenW
GetWindowsDirectoryW
GetTickCount
GlobalFree
GlobalReAlloc
lstrcmpA
LocalAlloc
LocalFree
GetDiskFreeSpaceW
GetUserDefaultLangID
LeaveCriticalSection
EnterCriticalSection
CreateEventW
MultiByteToWideChar
WaitForSingleObject
SetEvent
ResetEvent
WaitForMultipleObjects
InitializeCriticalSection
FormatMessageW
RaiseException
DeleteCriticalSection
GetCurrentThreadId
GetFullPathNameW
OutputDebugStringW
GetDateFormatW
SystemTimeToFileTime
GetExitCodeThread
DeleteFileW
GetSystemDirectoryW
SizeofResource
GetFileAttributesExW
GetCommandLineW
CreateProcessW
SetUnhandledExceptionFilter
CopyFileW
GetACP
GetLocalTime
ReleaseMutex
GetCurrentProcessId
LoadLibraryA
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
SetFilePointer
SetEndOfFile
WaitForSingleObjectEx
WriteFile
FlushFileBuffers
ReadFileEx
CancelIo
WriteFileEx
ExitProcess
CreateDirectoryW
SetFileTime
GetCurrentDirectoryW
LocalFileTimeToFileTime
GlobalSize
SetThreadExecutionState
GetFileAttributesW
SetThreadAffinityMask
GetVersionExA
SetFilePointerEx
GetFileSizeEx
lstrcmpW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
PeekNamedPipe
GetFileInformationByHandle
LCMapStringW
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
GetFileType
SetHandleCount
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
IsValidCodePage
GetOEMCP
GetCPInfo
HeapSize
GetStdHandle
FatalAppExitA
HeapDestroy
HeapCreate
GetConsoleMode
GetConsoleCP
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RtlUnwind
GetStartupInfoA
GetCommandLineA
HeapReAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
ResumeThread
UnhandledExceptionFilter
TerminateProcess
SetCurrentDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryW
HeapAlloc
HeapFree
InterlockedExchange
GetEnvironmentVariableA
GetSystemTimeAsFileTime
SetEnvironmentVariableW
GetEnvironmentVariableW
QueryPerformanceFrequency
GetProcessAffinityMask
GetThreadPriority
GetSystemInfo
SetThreadPriority
GetCurrentThread
QueryPerformanceCounter
GetCurrentProcess
SetProcessAffinityMask
GlobalUnlock
GlobalAlloc
GlobalLock
GetModuleFileNameA
GetModuleFileNameW
GetFileSize
GetVolumeInformationW
QueryDosDeviceW
GetLogicalDrives
InterlockedDecrement
InterlockedIncrement
SetErrorMode
WideCharToMultiByte
ExitThread
GetComputerNameW
lstrcmpiW
CreateThread
Sleep
GlobalMemoryStatus
CloseHandle
GetDiskFreeSpaceExW
FindNextFileW
VirtualQuery
DeviceIoControl
FindClose
VirtualAlloc
GetLastError
CreateFileW
ReadFile
GetVersionExW
VirtualFree
GetLogicalDriveStringsW
GetDriveTypeW
FindFirstFileW
lstrcpyW
GetProcAddress
LoadLibraryW
FreeLibrary
GetEnvironmentStringsW
GetModuleHandleA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
GetLocaleInfoA
LCMapStringA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetProcessHeap
CreateFileA
GetDriveTypeA
GetFullPathNameA
CompareStringA
CompareStringW
InterlockedCompareExchange
GetThreadTimes
ExpandEnvironmentStringsW

user32

DialogBoxIndirectParamW
MonitorFromWindow
LoadStringW
ClientToScreen
RemovePropW
SetCapture
GetParent
PtInRect
SetPropW
GetCapture
ReleaseCapture
GetPropW
CallWindowProcW
SetScrollRange
EndPaint
TrackPopupMenu
BeginPaint
RegisterClassExW
SetScrollPos
ScrollWindow
ShowScrollBar
SetScrollInfo
EnumDisplayMonitors
EnumDisplayDevicesW
GetMonitorInfoW
LoadImageW
GetWindowInfo
PostThreadMessageW
FillRect
DlgDirListComboBoxA
GetWindowTextW
LoadBitmapW
GetDlgItemInt
CheckDlgButton
IsDlgButtonChecked
FrameRect
SetWindowPlacement
SetFocus
CheckRadioButton
EnableMenuItem
DrawMenuBar
GetDlgCtrlID
GetIconInfo
DestroyWindow
TranslateAcceleratorW
ScreenToClient
GetMessageW
GetSubMenu
SetForegroundWindow
GetClassLongW
wsprintfW
TranslateMessage
LoadAcceleratorsW
GetMenu
TrackPopupMenuEx
SetRect
LoadMenuW
GetWindowLongW
PeekMessageW
GetCursorPos
ClipCursor
CreateWindowExW
RegisterClassW
AdjustWindowRect
DestroyMenu
DefWindowProcW
DispatchMessageW
GetSysColorBrush
GetSysColor
IsDialogMessageW
GetSystemMenu
CheckMenuItem
GetShellWindow
SystemParametersInfoA
MoveWindow
DestroyAcceleratorTable
IsIconic
UnregisterClassW
IsZoomed
EnumDisplaySettingsW
GetForegroundWindow
SetWindowTextW
SetCursorPos
SendMessageW
ReleaseDC
GetAsyncKeyState
ShowCursor
GetDC
GetClientRect
CallNextHookEx
GetWindowPlacement
SystemParametersInfoW
SetMenu
SetWindowsHookExW
UnhookWindowsHookEx
IsWindowVisible
GetClipboardData
ShowOwnedPopups
OffsetRect
CopyImage
BringWindowToTop
RegisterWindowMessageW
RemoveMenu
DrawTextW
PostMessageW
SetDlgItemTextW
DialogBoxParamW
GetDlgItemTextA
PostQuitMessage
MessageBeep
FindWindowW
MessageBoxA
SetCursor
CloseClipboard
GetWindowDC
LoadCursorW
EmptyClipboard
OpenClipboard
SetClipboardData
GetWindowRect
DrawIconEx
SetWindowPos
ShowWindow
CreateDialogParamW
GetDlgItemTextW
UpdateWindow
EnableWindow
SetWindowLongW
SendDlgItemMessageW
GetSystemMetrics
DestroyIcon
LoadIconW
InvalidateRect
SetClassLongW
GetDlgItem
SetTimer
KillTimer
SetDlgItemInt
MessageBoxW
EndDialog

gdi32

GetSystemPaletteEntries
SelectPalette
RealizePalette
CreatePalette
SetTextColor
SetViewportExtEx
StartDocW
StartPage
SetWindowExtEx
SetViewportOrgEx
EndPage
GetPixel
CreateDCW
SetBkColor
GetTextExtentPointW
CreatePen
LineTo
MoveToEx
PatBlt
SetAbortProc
GetDIBColorTable
StretchDIBits
SetPixel
GetMapMode
CreateRectRgn
SetStretchBltMode
SetEnhMetaFileBits
SelectClipRgn
StretchBlt
TextOutW
CreateFontIndirectW
SetBkMode
GetDIBits
GdiFlush
GetTextExtentPoint32W
SetMapMode
ExtTextOutW
CreateFontW
SetTextAlign
GetStockObject
DeleteDC
CreateDIBSection
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC
Rectangle
GetObjectW
CreateSolidBrush
EndDoc
GetDeviceCaps

comdlg32

ChooseColorW
CommDlgExtendedError
PrintDlgW
GetSaveFileNameW
GetOpenFileNameW

advapi32

CloseServiceHandle
DeleteService
OpenSCManagerW
OpenServiceW
RegQueryValueExW
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegCreateKeyExW
RegOpenKeyW
RegEnumKeyExW
RegSetValueExW
RegCloseKey
ControlService
RegOpenKeyExW
StartServiceW
CreateServiceW

shell32

ExtractIconW
SHBrowseForFolderW
SHGetMalloc
SHGetFolderPathW
ShellExecuteW
CommandLineToArgvW
SHGetPathFromIDListW

ole32

OleCreateStaticFromData
OleDuplicateData
ReleaseStgMedium
OleSetContainedObject
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
StgCreateStorageEx
CoSetProxyBlanket
CoInitializeSecurity
CoCreateInstance
CoInitialize
CoInitializeEx
CoUninitialize
StgOpenStorageEx

oleaut32

VariantCopy
SafeArrayAccessData
SafeArrayGetLBound
LoadRegTypeLi
SafeArrayDestroyData
VariantInit
LoadTypeLi
VariantClear
SysStringLen
DispCallFunc
SysFreeString
SysAllocString
GetErrorInfo
VariantChangeType
SetErrorInfo
CreateErrorInfo
SafeArrayUnaccessData

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dummy1
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 398KB - Virtual size: 398KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5.5MB - Virtual size: 7.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.v-lizer
Size: 13.1MB - Virtual size: 13.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
petst.exe
.exe windows:5 windows x86 arch:x86

483f0c4259a9148c34961abbda6146c1

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

38:e7:fa:0d:b1:a3:98:f8:05:bb:85:a6:91:71:dc:9d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

22/09/2009, 00:00

Not After

18/10/2012, 23:59

Subject

CN=PassMark Software Pty Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=PassMark Software Pty Ltd,ST=NSW,C=AU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

23:10:30:3f:46:5b:ac:51:b5:db:77:1c:cb:19:f8:f9:63:f8:f3:47
Signer

Actual PE Digest

23:10:30:3f:46:5b:ac:51:b5:db:77:1c:cb:19:f8:f9:63:f8:f3:47

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

user32

GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
TranslateMessage
SetWindowLongW
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
LoadStringW
GetSystemMetrics
ExitWindowsEx
DispatchMessageW
DestroyWindow
CharUpperBuffW
CallWindowProcW

kernel32

GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
SizeofResource
SignalObjectAndWait
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReadFile
MultiByteToWideChar
LockResource
LoadResource
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GetWindowsDirectoryW
GetVersionExW
GetUserDefaultLangID
GetThreadLocale
GetSystemInfo
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetEnvironmentVariableW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentProcess
GetCommandLineW
GetCPInfo
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
EnterCriticalSection
DeleteFileW
DeleteCriticalSection
CreateProcessW
CreateFileW
CreateEventW
CreateDirectoryW
CompareStringW
CloseHandle
Sleep

comctl32

InitCommonControls

Sections

.text
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 21KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ec8db5866bfb4cad119c29775a23a94

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

38:e7:fa:0d:b1:a3:98:f8:05:bb:85:a6:91:71:dc:9dCertificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

66:6f:61:73:0f:a6:34:05:ea:01:e4:75:4e:c5:4d:d2:6a:d0:89:20Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

cfgmgr32

urlmon

version

winmm

comctl32

shlwapi

wininet

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.dummy1 Size: 2KB - Virtual size: 2KB

.rdata Size: 398KB - Virtual size: 398KB

.data Size: 5.5MB - Virtual size: 7.9MB

.v-lizer Size: 13.1MB - Virtual size: 13.1MB

483f0c4259a9148c34961abbda6146c1

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

38:e7:fa:0d:b1:a3:98:f8:05:bb:85:a6:91:71:dc:9dCertificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

23:10:30:3f:46:5b:ac:51:b5:db:77:1c:cb:19:f8:f9:63:f8:f3:47Signer

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

advapi32

user32

kernel32

comctl32

Sections

.text Size: 82KB - Virtual size: 81KB

.itext Size: 3KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 21KB

.idata Size: 4KB - Virtual size: 3KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 6KB

.rsrc Size: 44KB - Virtual size: 44KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

38:e7:fa:0d:b1:a3:98:f8:05:bb:85:a6:91:71:dc:9d
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

66:6f:61:73:0f:a6:34:05:ea:01:e4:75:4e:c5:4d:d2:6a:d0:89:20
Signer

.text
Size: 2.3MB - Virtual size: 2.3MB

.dummy1
Size: 2KB - Virtual size: 2KB

.rdata
Size: 398KB - Virtual size: 398KB

.data
Size: 5.5MB - Virtual size: 7.9MB

.v-lizer
Size: 13.1MB - Virtual size: 13.1MB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

38:e7:fa:0d:b1:a3:98:f8:05:bb:85:a6:91:71:dc:9d
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

23:10:30:3f:46:5b:ac:51:b5:db:77:1c:cb:19:f8:f9:63:f8:f3:47
Signer

.text
Size: 82KB - Virtual size: 81KB

.itext
Size: 3KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 21KB

.idata
Size: 4KB - Virtual size: 3KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 6KB

.rsrc
Size: 44KB - Virtual size: 44KB