GFOrigin_ipoxaykjmcq[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

GFOrigin_ipoxaykjmcq.exe
Size

3.4MB
MD5

ebc4611e2a1cc94a4b96414aa0457d32
SHA1

d3e7cbe73e08809ca5e501034fdc2ce1e3e1091b
SHA256

c232879f0ab8c32eea0bfaa2a27291595c841257d841b23e209f85731fa8e6ff
SHA512

715f4ca43a7f29bb2ad7d73f8787adf285d91486265dec574ef333a072131a44c9260b8345cf9ad37453cf169dadb9d445e843ec828e5c07403ce5d68967b0a5
SSDEEP

49152:PYHmUFjYkD29uhW5OrOB3tEucYkQ1rizxp+Tmmcy4TXId3nKpluDj/081KR4hpcv:nwlDPQzTmXYd3yC3KR4hpiMcSiXvp

Score

1^/10

Malware Config

Signatures

Files

GFOrigin_ipoxaykjmcq.exe
.exe windows:6 windows x64 arch:x64

f65f7d9a1b085024df6be8edcffbd88b

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Not Before

28/07/2020, 00:00

Not After

18/03/2029, 00:00

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Not Before

28/07/2020, 00:00

Not After

28/07/2030, 00:00

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

70:29:ac:5f:14:f6:f7:47:8f:e3:2b:09
Certificate

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Not Before

23/08/2023, 08:45

Not After

23/08/2026, 08:45

Subject

CN=X-LEGEND ENTERTAINMENT CO.\, LTD.,O=X-LEGEND ENTERTAINMENT CO.\, LTD.,L=Taipei,ST=Taipei,C=TW

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15
Certificate

Issuer

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Not Before

02/11/2023, 10:30

Not After

04/12/2034, 10:30

Subject

CN=Globalsign TSA for Advanced - G4 - 202311,O=GlobalSign nv-sa,C=BE

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

20/06/2018, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign Timestamping CA - SHA384 - G4,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Not Before

10/12/2014, 00:00

Not After

10/12/2034, 00:00

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

d9:83:a8:31:83:95:4c:56:c4:ad:2c:bd:a6:50:a7:d7:f7:d1:75:90
Signer

Actual PE Digest

d9:83:a8:31:83:95:4c:56:c4:ad:2c:bd:a6:50:a7:d7:f7:d1:75:90

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\2P\elfonline-5th\ElfSDK\downloader\bin\Release-x64\downloader.pdb

Imports

kernel32

GetConsoleMode
GetConsoleOutputCP
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetTimeZoneInformation
IsValidCodePage
GetFileInformationByHandle
GetDriveTypeW
SetStdHandle
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
FreeLibraryAndExitThread
ExitThread
MoveFileExW
RtlUnwindEx
RtlPcToFileHeader
SleepEx
WaitForMultipleObjects
PeekNamedPipe
GetFileType
GetStdHandle
GetEnvironmentVariableA
MoveFileExA
LoadLibraryA
GetModuleHandleA
GetSystemDirectoryA
QueryPerformanceFrequency
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitOnceExecuteOnce
GetStringTypeW
GetCPInfo
CompareStringEx
LCMapStringEx
InitializeCriticalSectionEx
OutputDebugStringW
ReadConsoleW
CreateDirectoryW
FindFirstFileExW
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
WriteConsoleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
ResetEvent
GetTickCount
GetUserDefaultLCID
GetTempFileNameW
SearchPathW
GetProfileIntW
GetTempPathW
VerifyVersionInfoW
VerSetConditionMask
GetTickCount64
SystemTimeToTzSpecificLocalTime
FindNextFileW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
SetErrorMode
GetWindowsDirectoryW
FindResourceExW
lstrcpyW
lstrcmpiW
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
CreateFileW
DeleteFileW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
GetThreadLocale
FileTimeToSystemTime
GlobalGetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetVersionExW
ResumeThread
SetThreadPriority
CreateEventW
SetEvent
CompareStringW
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleExW
GetSystemDirectoryW
EncodePointer
OutputDebugStringA
CopyFileW
FormatMessageW
MulDiv
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
GetExitCodeThread
TerminateThread
CreateThread
WideCharToMultiByte
GetStartupInfoA
CreateProcessA
Sleep
GetCommandLineA
SetThreadLocale
OpenMutexA
OpenProcess
GetStartupInfoW
CreateProcessW
TerminateProcess
WaitForSingleObject
GetCurrentDirectoryW
GetCommandLineW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
GetModuleHandleW
FindResourceW
SizeofResource
LockResource
LoadResource
MultiByteToWideChar
LocalFree
LoadLibraryW
GetProcAddress
GetModuleFileNameW
FreeLibrary
WriteProcessMemory
VirtualProtect
GetCurrentThreadId
GetCurrentThread
ExitProcess
GetCurrentProcessId
GetCurrentProcess
SetLastError
GetLastError
SetUnhandledExceptionFilter
RaiseException
CloseHandle
GetFileAttributesW
FindClose
CreateFileA
SetFilePointerEx
RtlUnwind

user32

WaitMessage
CharUpperW
DestroyIcon
KillTimer
SetTimer
DeleteMenu
GetAsyncKeyState
CopyImage
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
RealChildWindowFromPoint
GetSysColorBrush
SetRectEmpty
SendDlgItemMessageA
IntersectRect
MapDialogRect
SetWindowContextHelpId
SetCursor
ShowOwnedPopups
PostQuitMessage
GetCursorPos
GetMessageW
MapVirtualKeyW
GetKeyNameTextW
GetDesktopWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
LoadMenuW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
PtInRect
EqualRect
MapWindowPoints
AdjustWindowRectEx
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
SetCapture
EnumDisplayMonitors
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
IsMenu
OpenClipboard
GetClassInfoExW
GetClassInfoW
RegisterClassW
TrackMouseEvent
CreatePopupMenu
GetMenuDefaultItem
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
RegisterClipboardFormatW
DrawFocusRect
DrawIconEx
ReleaseCapture
CallWindowProcW
DefWindowProcW
WindowFromPoint
CharNextW
CopyAcceleratorTableW
InvalidateRgn
SetRect
GetNextDlgGroupItem
GetIconInfo
SetLayeredWindowAttributes
MessageBoxW
PostMessageW
EnableWindow
InvalidateRect
GetWindowRect
GetParent
LoadImageW
IsWindow
SetWindowRgn
RedrawWindow
GetClientRect
GetWindowLongW
SetWindowLongW
SendMessageW
GetUpdateRect
FrameRect
InflateRect
IsRectEmpty
LoadBitmapW
DrawTextW
GetWindowTextW
FillRect
CopyRect
OffsetRect
UnregisterClassW
FindWindowW
GetWindowThreadProcessId
IsIconic
GetSystemMetrics
DrawIcon
LoadCursorW
LoadIconW
TranslateMessage
DispatchMessageW
PeekMessageW
GetActiveWindow
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
ShowWindow
MoveWindow
SetWindowPos
GetDlgItem
CheckDlgButton
GetDlgCtrlID
SetFocus
GetFocus
IsWindowEnabled
SetWindowTextW
GetWindowTextLengthW
GetWindow
IsDialogMessageW
UnhookWindowsHookEx
DrawTextExW
GrayStringW
TabbedTextOutW
GetDC
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
ClientToScreen
ScreenToClient
GetSysColor
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
RegisterWindowMessageW
GetMessagePos
GetMessageTime
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
MessageBeep
SetClassLongPtrW
SetParent
DrawEdge
DrawFrameControl
IsZoomed
GetSystemMenu
SetCursorPos
CopyIcon
UnionRect
PostThreadMessageW
UpdateLayeredWindow
MonitorFromPoint
GetComboBoxInfo
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
CharUpperBuffW
IsClipboardFormatAvailable
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
CreateMenu
GetWindowRgn
DestroyCursor
CreateWindowExW

gdi32

MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
PatBlt
CreateFontIndirectW
GetMapMode
SetRectRgn
DPtoLP
GetTextExtentPoint32W
GetTextMetricsW
GetBkColor
GetTextColor
GetRgnBox
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetBkColor
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateSolidBrush
CreatePatternBrush
CreateBitmap
CreateCompatibleDC
DeleteObject
SelectObject
SetTextAlign
SetTextColor
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
Rectangle
SetBkMode
StretchBlt
GetObjectW
BitBlt
CombineRgn
CreateRectRgn
GetPixel
CreateCompatibleBitmap
CopyMetaFileW
CreateDCW
GetDeviceCaps
CreateHatchBrush
SetPixel
CreatePen

msimg32

TransparentBlt
AlphaBlend

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegEnumKeyExW
RegEnumValueW
RegQueryValueW
CryptAcquireContextA
CryptReleaseContext
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptEncrypt
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
CryptHashData
CryptCreateHash
CryptGetHashParam
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegFlushKey
RegCreateKeyExA
RegCloseKey

shell32

SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW
ShellExecuteW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW

comctl32

_TrackMouseEvent

shlwapi

PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
StrFormatKBSizeW
PathRemoveFileSpecW

uxtheme

GetWindowTheme
DrawThemeParentBackground
GetThemeSysColor
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
IsAppThemed
DrawThemeText

ole32

CoTaskMemFree
CoTaskMemAlloc
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
IsAccelerator
CoCreateGuid
OleDuplicateData
ReleaseStgMedium
CoUninitialize
CoCreateInstance
CoInitialize
CLSIDFromString
CLSIDFromProgID
CoDisconnectObject
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoInitializeEx
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
OleTranslateAccelerator
CoRevokeClassObject
StgOpenStorageOnILockBytes
CoGetClassObject

oleaut32

SafeArrayDestroy
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
VarBstrFromDate
VariantCopy
OleCreateFontIndirect
VariantTimeToSystemTime

oledlg

OleUIBusyW

gdiplus

GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdiplusShutdown
GdipAlloc

oleacc

AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

winmm

PlaySoundW

bcrypt

BCryptGenRandom

ws2_32

send
WSACloseEvent
gethostname
ioctlsocket
getpeername
sendto
recvfrom
freeaddrinfo
getaddrinfo
recv
listen
htonl
getsockname
connect
bind
accept
select
__WSAFDIsSet
socket
htons
WSAIoctl
setsockopt
WSACleanup
WSAStartup
WSASetLastError
ntohs
WSAGetLastError
closesocket
WSAWaitForMultipleEvents
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
getsockopt

crypt32

CertOpenStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryA
PFXImportCertStore
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertCloseStore

wldap32

ord46
ord217
ord143
ord50
ord41
ord211
ord26
ord27
ord32
ord33
ord35
ord79
ord30
ord200
ord22
ord60
ord45
ord301

normaliz

IdnToAscii

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 688KB - Virtual size: 687KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 199KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f65f7d9a1b085024df6be8edcffbd88b

Code Sign

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54Certificate

Extended Key Usages

Key Usages

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47Certificate

Extended Key Usages

Key Usages

70:29:ac:5f:14:f6:f7:47:8f:e3:2b:09Certificate

Extended Key Usages

Key Usages

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15Certificate

Extended Key Usages

Key Usages

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74Certificate

Key Usages

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51Certificate

Key Usages

d9:83:a8:31:83:95:4c:56:c4:ad:2c:bd:a6:50:a7:d7:f7:d1:75:90Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

oleacc

imm32

winmm

bcrypt

ws2_32

crypt32

wldap32

normaliz

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 688KB - Virtual size: 687KB

.data Size: 35KB - Virtual size: 66KB

.pdata Size: 112KB - Virtual size: 111KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 199KB - Virtual size: 198KB

.reloc Size: 63KB - Virtual size: 62KB

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Certificate

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Certificate

70:29:ac:5f:14:f6:f7:47:8f:e3:2b:09
Certificate

01:19:75:74:71:c9:92:d7:44:df:a5:96:eb:b9:70:15
Certificate

01:ec:1c:92:40:de:fd:2e:40:5d:7c:47:74
Certificate

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Certificate

d9:83:a8:31:83:95:4c:56:c4:ad:2c:bd:a6:50:a7:d7:f7:d1:75:90
Signer

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 688KB - Virtual size: 687KB

.data
Size: 35KB - Virtual size: 66KB

.pdata
Size: 112KB - Virtual size: 111KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 199KB - Virtual size: 198KB

.reloc
Size: 63KB - Virtual size: 62KB