castDisgust[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

castDisgust.zip
Size

13.6MB
MD5

c124d3e65516d4ed749f8257d07c3c9f
SHA1

1d179e4716e3d0455631648abeaa11dd47961ded
SHA256

e05ef717c0fcbf1f0c7eb04761b2ecd9d7447579e2fcefba5533871ab5be0791
SHA512

de34ec0b0cbafab8fab614001018248cbc81f049b9a4f88843615431d7d6e8ed563d05b2d72e46dec4f3ce139fb45bde0cc26af38b2630e003934c7f9f9fdb57
SSDEEP

393216:Mt7BWngw+cXwuFc+khiqURWdhD+bKMuSr5CkuH:Mt7cgV5+VqWWdhD+X1puH

Score

7^/10

upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
static1/unpack001/ocx/TabS.ocx	acprotect

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/ocx/TabS.ocx	upx

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ocx/TabS.oca
unpack001/ocx/TabS.ocx
unpack001/violentHoney.exe

Files

castDisgust.zip
.zip

Password: peng
Inf/ArOmodPpmk.xml
.xml
Inf/BHnfCNKJJr.xml
.xml
Inf/DbYgtRCNoe.xml
.xml
Inf/FLnwJaEDnM.xml
.xml
Inf/FcydhtoAxs.xml
.xml
Inf/FrzBQTmCSj.xml
.xml
Inf/HIuTTeBcCw.xml
.xml
Inf/IBwmVYGXmR/BbhEarEBHN.xml
.xml
Inf/IBwmVYGXmR/CWTlBZwakb.xml
.xml
Inf/IBwmVYGXmR/CZkFeZxJAo.xml
.xml
Inf/IBwmVYGXmR/ENhjUpGcDq.xml
.xml
Inf/IBwmVYGXmR/ErqNReLmpJ.xml
.xml
Inf/IBwmVYGXmR/FeozGtGNRG.xml
.xml
Inf/IBwmVYGXmR/IAtVjqCzGU.xml
.xml
Inf/IBwmVYGXmR/IwtCXSeAoo.xml
.xml
Inf/IBwmVYGXmR/JqPokhsyjl.xml
.xml
Inf/IBwmVYGXmR/LaoEVjhQFm.xml
.xml
Inf/IBwmVYGXmR/LoKvZQSnlo.xml
.xml
Inf/IBwmVYGXmR/NuYCtLKHmc.xml
.xml
Inf/IBwmVYGXmR/RFCkCqmOyr.xml
.xml
Inf/IBwmVYGXmR/SQKsWKeQhy.xml
.xml
Inf/IBwmVYGXmR/UVBgTqKnDt.xml
.xml
Inf/IBwmVYGXmR/VgZSggDbub.xml
.xml
Inf/IBwmVYGXmR/VqMkVsPevH.xml
.xml
Inf/IBwmVYGXmR/XCXytCEXGb.xml
.xml
Inf/IBwmVYGXmR/XRkuwngabJ.xml
.xml
Inf/IBwmVYGXmR/YOvHZQhNdN.xml
.xml
Inf/IBwmVYGXmR/azDDrgwmhF.xml
.xml
Inf/IBwmVYGXmR/dzxMyNjpKF.xml
.xml
Inf/IBwmVYGXmR/fKQukFJKtM.xml
.xml
Inf/IBwmVYGXmR/fWUzRHXUTz.xml
.xml
Inf/IBwmVYGXmR/ivcMhSCwYs.xml
.xml
Inf/IBwmVYGXmR/jeeMyFnHBD.xml
.xml
Inf/IBwmVYGXmR/oAfTLlbWer.xml
.xml
Inf/IBwmVYGXmR/oCLhEsZoos.xml
.xml
Inf/IBwmVYGXmR/oXwAxbxbUf.xml
.xml
Inf/IBwmVYGXmR/ozWdYdRkIE.xml
.xml
Inf/IBwmVYGXmR/sIoWuwPUub.xml
.xml
Inf/IBwmVYGXmR/tmUyYOMDpY.xml
.xml
Inf/IBwmVYGXmR/uHEBKfCkkt.xml
.xml
Inf/IBwmVYGXmR/uHvOcvAvUJ.xml
.xml
Inf/IBwmVYGXmR/vmWxhVrSJT.xml
.xml
Inf/IBwmVYGXmR/wGMDVIsMTk.xml
.xml
Inf/IBwmVYGXmR/wbfaKBWOrO.xml
.xml
Inf/IBwmVYGXmR/zYcLVYjJFU.xml
.xml
Inf/KDDRBNFFSw.xml
.xml
Inf/MTpWFDOfif.xml
.xml
Inf/NFZvMpoPqC.xml
.xml
Inf/NTFvZoreQG.xml
.xml
Inf/VGUpNYLWkW.xml
.xml
Inf/WLndXDbPuW.xml
.xml
Inf/bssBLEzzBW/BDacScqqFz.xml
.xml
Inf/bssBLEzzBW/CCWCAJWWCf.xml
.xml
Inf/bssBLEzzBW/CPvJyjWfYi.xml
.xml
Inf/bssBLEzzBW/DTfdASfrtb.xml
.xml
Inf/bssBLEzzBW/DaqylOrMst.xml
.xml
Inf/bssBLEzzBW/GeLiaZhJyM.xml
.xml
Inf/bssBLEzzBW/JWMAHhdyIH.xml
.xml
Inf/bssBLEzzBW/KwBdYlYYQb.xml
.xml
Inf/bssBLEzzBW/LhGSNVwtcC.xml
.xml
Inf/bssBLEzzBW/LssvcUzOEb.xml
.xml
Inf/bssBLEzzBW/OTlpbETStB.xml
.xml
Inf/bssBLEzzBW/QQMgRmFbBi.xml
.xml
Inf/bssBLEzzBW/QQXkowWaDA.xml
.xml
Inf/bssBLEzzBW/QrbXCIMJGG.xml
.xml
Inf/bssBLEzzBW/RKJUSjnKBR.xml
.xml
Inf/bssBLEzzBW/TKpSECKfgE.xml
.xml
Inf/bssBLEzzBW/UAqAZMfjLE.xml
.xml
Inf/bssBLEzzBW/VlHextqSBJ.xml
.xml
Inf/bssBLEzzBW/aTkfjJMxnD.xml
.xml
Inf/bssBLEzzBW/bOCTEmHbZZ.xml
.xml
Inf/bssBLEzzBW/dEXSLNOJOj.xml
.xml
Inf/bssBLEzzBW/emhygDoZoM.xml
.xml
Inf/bssBLEzzBW/fhvwZJgedn.xml
.xml
Inf/bssBLEzzBW/gkcCSfIgrF.xml
.xml
Inf/bssBLEzzBW/hZyvzUWOAc.xml
.xml
Inf/bssBLEzzBW/iBVoGappbq.xml
.xml
Inf/bssBLEzzBW/kZBqAEEwKi.xml
.xml
Inf/bssBLEzzBW/lOvTkLbQYX.xml
.xml
Inf/bssBLEzzBW/lUEhXjSVsa.xml
.xml
Inf/bssBLEzzBW/mxjRwSpyrH.xml
.xml
Inf/bssBLEzzBW/oOgmyRRLiK.xml
.xml
Inf/bssBLEzzBW/qjXDXHmXoi.xml
.xml
Inf/bssBLEzzBW/rIIZGaEMzq.xml
.xml
Inf/bssBLEzzBW/rNlYqCnsbH.xml
.xml
Inf/bssBLEzzBW/rmVgCwPoSK.xml
.xml
Inf/bssBLEzzBW/sNukRlwOKe.xml
.xml
Inf/bssBLEzzBW/swwWebsnle.xml
.xml
Inf/bssBLEzzBW/uQknksQuHk.xml
.xml
Inf/bssBLEzzBW/vUWqgATzjV.xml
.xml
Inf/bssBLEzzBW/veayBKrWJK.xml
.xml
Inf/bssBLEzzBW/wnCfTbgSuH.xml
.xml
Inf/bssBLEzzBW/wphpEBJeZS.xml
.xml
Inf/bssBLEzzBW/zOjOCWlJBu.xml
.xml
Inf/bssBLEzzBW/zaJPIoUwHB.xml
.xml
Inf/cIhviDYIiC.xml
.xml
Inf/dMOjnckDzL.xml
.xml
Inf/kqAcHHNKYf.xml
.xml
Inf/meQsVFkglK.xml
.xml
Inf/pXCZPZLsUQ/CHbAtBQLkH.xml
.xml
Inf/pXCZPZLsUQ/IevxWQyoAP.xml
.xml
Inf/pXCZPZLsUQ/MCcTIdZLgw.xml
.xml
Inf/pXCZPZLsUQ/NLUQePfsqs.xml
.xml
Inf/pXCZPZLsUQ/OkACQiAtec.xml
.xml
Inf/pXCZPZLsUQ/PFjkExCyHU.xml
.xml
Inf/pXCZPZLsUQ/ZZSOzIQNuU.xml
.xml
Inf/pXCZPZLsUQ/cFpfzuMqTk.xml
.xml
Inf/pXCZPZLsUQ/usUeadhvAm.xml
.xml
Inf/pXCZPZLsUQ/xGvjuZoNFu.xml
.xml
Inf/rAbiWpfcTj/AJjzmIxhUZ.xml
.xml
Inf/rAbiWpfcTj/BZfKyrlTKA.xml
.xml
Inf/rAbiWpfcTj/CqrNalJPOB.xml
.xml
Inf/rAbiWpfcTj/EsffZihJZZ.xml
.xml
Inf/rAbiWpfcTj/FNYINZltSF.xml
.xml
Inf/rAbiWpfcTj/GQrtJDXnJS.xml
.xml
Inf/rAbiWpfcTj/GmXxKFnuFo.xml
.xml
Inf/rAbiWpfcTj/HnApQOMAzI.xml
.xml
Inf/rAbiWpfcTj/IcgBYEEWjN.xml
.xml
Inf/rAbiWpfcTj/IhYXpRjEXW.xml
.xml
Inf/rAbiWpfcTj/JEdDKeywAp.xml
.xml
Inf/rAbiWpfcTj/KJSZjXdydj.xml
.xml
Inf/rAbiWpfcTj/KdVKCKdeIL.xml
.xml
Inf/rAbiWpfcTj/NnSsWsJPHv.xml
.xml
Inf/rAbiWpfcTj/OCuIMXiNDu.xml
.xml
Inf/rAbiWpfcTj/OJVUTxmWim.xml
.xml
Inf/rAbiWpfcTj/PGAeCaIDts.xml
.xml
Inf/rAbiWpfcTj/RFNqRsAoML.xml
.xml
Inf/rAbiWpfcTj/SdJNsAbiLE.xml
.xml
Inf/rAbiWpfcTj/SfpBrYJrwv.xml
.xml
Inf/rAbiWpfcTj/SyqMpCWkLG.xml
.xml
Inf/rAbiWpfcTj/UsASlThKug.xml
.xml
Inf/rAbiWpfcTj/VIVPYqCtWC.xml
.xml
Inf/rAbiWpfcTj/XTuIKFknRG.xml
.xml
Inf/rAbiWpfcTj/ZhRrmbQjyz.xml
.xml
Inf/rAbiWpfcTj/cOoumNHvlb.xml
.xml
Inf/rAbiWpfcTj/cVhHxZFsYR.xml
.xml
Inf/rAbiWpfcTj/ctDgqpXWnA.xml
.xml
Inf/rAbiWpfcTj/fHIuRAcWrI.xml
.xml
Inf/rAbiWpfcTj/ffJlfkBtqW.xml
.xml
Inf/rAbiWpfcTj/fyTwFVWuvY.xml
.xml
Inf/rAbiWpfcTj/gJdnVAHIkB.xml
.xml
Inf/rAbiWpfcTj/gzUTDBmYdN.xml
.xml
Inf/rAbiWpfcTj/jdytoxTepW.xml
.xml
Inf/rAbiWpfcTj/kLeCFnSqMp.xml
.xml
Inf/rAbiWpfcTj/mUtWQVUjBM.xml
.xml
Inf/rAbiWpfcTj/mlkcyVcHsN.xml
.xml
Inf/rAbiWpfcTj/moZyPLWaYk.xml
.xml
Inf/rAbiWpfcTj/mquHaapswr.xml
.xml
Inf/rAbiWpfcTj/ojNpkFFfBk.xml
.xml
Inf/rAbiWpfcTj/owVbDYfrMm.xml
.xml
Inf/rAbiWpfcTj/qChOAMdkPB.xml
.xml
Inf/rAbiWpfcTj/rjXexwYxaR.xml
.xml
Inf/rAbiWpfcTj/slryeVaMss.xml
.xml
Inf/rAbiWpfcTj/uVWSlIkzhF.xml
.xml
Inf/rAbiWpfcTj/wOaILCcPam.xml
.xml
Inf/rAbiWpfcTj/xLfANKTPMY.xml
.xml
Inf/rAbiWpfcTj/zRNjCdcYbu.xml
.xml
Inf/rAbiWpfcTj/zvJZZdZhkm.xml
.xml
Inf/uYESqDokgU/BMeZgogNNw.xml
.xml
Inf/uYESqDokgU/CxZLYiHshL.xml
.xml
Inf/uYESqDokgU/EBBjHNpjWx.xml
.xml
Inf/uYESqDokgU/LPflHZsnEL.xml
.xml
Inf/uYESqDokgU/LqQXBnVGsK.xml
.xml
Inf/uYESqDokgU/NaoqiUZuKE.xml
.xml
Inf/uYESqDokgU/OeMgMFdTad.xml
.xml
Inf/uYESqDokgU/TprypMCRph.xml
.xml
Inf/uYESqDokgU/UtzTQRMopq.xml
.xml
Inf/uYESqDokgU/VDoxwapMGM.xml
.xml
Inf/uYESqDokgU/fRqNoPgyNj.xml
.xml
Inf/uYESqDokgU/fsgGqpIVkZ.xml
.xml
Inf/uYESqDokgU/hGRmLgTMTh.xml
.xml
Inf/uYESqDokgU/iJzfppRslF.xml
.xml
Inf/uYESqDokgU/iRmvXAhUvy.xml
.xml
Inf/uYESqDokgU/iTlRxAvRpV.xml
.xml
Inf/uYESqDokgU/igzxgFHPfA.xml
.xml
Inf/uYESqDokgU/lUQOzzDYET.xml
.xml
Inf/uYESqDokgU/liiivuJvmE.xml
.xml
Inf/uYESqDokgU/pJRVEdsRQe.xml
.xml
Inf/uYESqDokgU/pqQqoLrGVc.xml
.xml
Inf/uYESqDokgU/ptqhgeGOJS.xml
.xml
Inf/uYESqDokgU/ruOjOpKiKe.xml
.xml
Inf/uYESqDokgU/sJFqqQmQAF.xml
.xml
Inf/uYESqDokgU/sQmvLREaiR.xml
.xml
Inf/uYESqDokgU/ukXxGPdtWk.xml
.xml
Inf/uYESqDokgU/wviGKEwFaQ.xml
.xml
Inf/uYESqDokgU/xRgZXikcsQ.xml
.xml
Inf/uYESqDokgU/xgthuogXyF.xml
.xml
Inf/wvloMvjkLQ.xml
.xml
Inf/zwOMDRjLyT.xml
.xml
data/note/img_home_temp00.png
.png

Password: peng
data/note/img_home_temp01.png
.png

Password: peng
data/note/img_home_temp02.png
.png

Password: peng
data/note/img_home_temp03.png
.png

Password: peng
data/note/img_home_temp04.png
.png

Password: peng
data/note/img_home_temp05.png
.png

Password: peng
data/note/img_home_temp06.png
.png

Password: peng
data/note/img_home_temp07.png
.png

Password: peng
data/note/img_home_temp08.png
.png
data/note/img_home_temp09.png
.png
data/note/img_home_temp10.png
.png
data/note/img_home_temp11.png
.png
data/note/img_home_temp12.png
.png
data/note/img_home_temp13.png
.png
data/note/img_home_temp14.png
.png
data/note/img_home_temp15.png
.png
data/note/img_home_temp16.png
.png
data/note/img_home_temp17.png
.png
data/note/img_home_temp18.png
.png
data/note/img_home_temp19.png
.png
data/note/img_home_temp20.png
.png
data/note/img_home_temp21.png
.png
data/note/img_home_temp22.png
.png
data/note/img_home_temp23.png
.png
data/note/img_home_temp24.png
.png
data/note/img_osd_cpu_faster.png
.png
data/note/img_osd_cpu_normal.png
.png
data/note/img_osd_cpu_turbo.png
.png
data/note/img_osd_fan_auto.png
.png
data/note/img_osd_fan_custom.png
.png
data/note/img_osd_fan_max.png
.png
data/note/img_osd_gpu_faster.png
.png
data/note/img_osd_gpu_normal.png
.png
data/note/img_osd_gpu_turbo.png
.png
data/note/img_osd_launchapp.png
.png
data/note/img_osd_lcdod_off.png
.png
data/note/img_osd_lcdod_on.png
.png
data/note/img_osd_pkey.png
.png
data/note/img_osd_sticky.png
.png
data/note/img_osd_sticky_disable.png
.png
data/note/img_osd_winmenu.png
.png
data/note/img_osd_winmenu_disable.png
.png
data/note/splash/splash_001.png
.png
data/note/splash/splash_002.png
.png
data/note/splash/splash_003.png
.png
data/note/splash/splash_004.png
.png
data/note/splash/splash_005.png
.png
data/note/splash/splash_006.png
.png
data/note/splash/splash_007.png
.png
data/note/splash/splash_008.png
.png
data/note/splash/splash_009.png
.png
data/note/splash/splash_010.png
.png
data/note/splash/splash_011.png
.png
data/note/splash/splash_012.png
.png
data/note/splash/splash_013.png
.png
data/note/splash/splash_014.png
.png
data/note/splash/splash_015.png
.png
data/note/splash/splash_016.png
.png
data/note/splash/splash_017.png
.png
data/note/splash/splash_018.png
.png
data/note/splash/splash_019.png
.png
data/note/splash/splash_020.png
.png
data/note/splash/splash_021.png
.png
data/note/splash/splash_022.png
.png
data/note/splash/splash_023.png
.png
data/note/splash/splash_024.png
.png
data/note/splash/splash_025.png
.png
data/note/splash/splash_026.png
.png
data/note/splash/splash_027.png
.png
data/note/splash/splash_028.png
.png
data/note/splash/splash_029.png
.png
data/note/splash/splash_030.png
.png
data/note/splash/splash_031.png
.png
data/note/splash/splash_032.png
.png
data/note/splash/splash_033.png
.png
data/note/splash/splash_034.png
.png
data/note/splash/splash_035.png
.png
data/note/splash/splash_036.png
.png
data/note/splash/splash_037.png
.png
data/note/splash/splash_038.png
.png
data/note/splash/splash_039.png
.png
data/note/splash/splash_040.png
.png
data/note/splash/splash_041.png
.png
data/note/splash/splash_042.png
.png
data/note/splash/splash_043.png
.png
data/note/splash/splash_044.png
.png
data/note/splash/splash_045.png
.png
data/note/splash/splash_046.png
.png
data/note/splash/splash_047.png
.png
data/note/splash/splash_048.png
.png
data/note/splash/splash_049.png
.png
data/note/splash/splash_050.png
.png
data/note/splash/splash_051.png
.png
data/note/splash/splash_052.png
.png
data/note/splash/splash_053.png
.png
data/note/splash/splash_054.png
.png
data/note/splash/splash_055.png
.png
data/note/splash/splash_056.png
.png
data/note/splash/splash_057.png
.png
data/note/splash/splash_058.png
.png
data/note/splash/splash_059.png
.png
data/note/splash/splash_060.png
.png
data/note/splash/splash_061.png
.png
data/note/splash/splash_062.png
.png
data/note/splash/splash_063.png
.png
data/note/splash/splash_064.png
.png
data/note/splash/splash_065.png
.png
data/note/splash/splash_066.png
.png
data/note/splash/splash_067.png
.png
data/note/splash/splash_068.png
.png
data/note/splash/splash_069.png
.png
data/note/splash/splash_070.png
.png
data/note/splash/splash_071.png
.png
data/note/splash/splash_072.png
.png
data/note/splash/splash_073.png
.png
data/note/splash/splash_074.png
.png
data/note/splash/splash_075.png
.png
data/pua/extensions/VLSub.luac
data/pua/http/css/main.css
data/pua/http/css/mobile.css
data/pua/http/css/ui-lightness/images/ui-bg_diagonals-thick_18_b81900_40x40.png
.png
data/pua/http/css/ui-lightness/images/ui-bg_diagonals-thick_20_666666_40x40.png
.png
data/pua/http/css/ui-lightness/images/ui-bg_flat_10_000000_40x100.png
.png
data/pua/http/css/ui-lightness/images/ui-bg_glass_100_f6f6f6_1x400.png
.png
data/pua/http/css/ui-lightness/images/ui-bg_glass_100_fdf5ce_1x400.png
.png
data/pua/http/css/ui-lightness/images/ui-bg_glass_65_ffffff_1x400.png
.png
data/pua/http/css/ui-lightness/images/ui-bg_gloss-wave_35_f6a828_500x100.png
.png
data/pua/http/css/ui-lightness/images/ui-bg_highlight-soft_100_eeeeee_1x100.png
.png
data/pua/http/css/ui-lightness/images/ui-bg_highlight-soft_75_ffe45c_1x100.png
.png
data/pua/http/css/ui-lightness/images/ui-icons_222222_256x240.png
.png
data/pua/http/css/ui-lightness/images/ui-icons_228ef1_256x240.png
.png
data/pua/http/css/ui-lightness/images/ui-icons_ef8c08_256x240.png
.png
data/pua/http/css/ui-lightness/images/ui-icons_ffd27a_256x240.png
.png
data/pua/http/css/ui-lightness/images/ui-icons_ffffff_256x240.png
.png
data/pua/http/css/ui-lightness/jquery-ui-1.8.13.custom.css
data/pua/http/custom.lua
.js
data/pua/http/dialogs/batch_window.html
.html .js polyglot
data/pua/http/dialogs/browse_window.html
.html .js polyglot
data/pua/http/dialogs/create_stream.html
.html .js polyglot
data/pua/http/dialogs/equalizer_window.html
.html .js polyglot
data/pua/http/dialogs/error_window.html
.html .js polyglot
data/pua/http/dialogs/mosaic_window.html
.html .js polyglot
data/pua/http/dialogs/offset_window.html
.html .js polyglot
data/pua/http/dialogs/stream_config_window.html
.html .js polyglot
data/pua/http/dialogs/stream_window.html
.html .js polyglot
data/pua/http/favicon.ico
data/pua/http/images/Audio-48.png
.png
data/pua/http/images/Back-48.png
.png
data/pua/http/images/Folder-48.png
.png
data/pua/http/images/Other-48.png
.png
data/pua/http/images/Video-48.png
.png
data/pua/http/images/buttons.png
.png
data/pua/http/images/speaker-32.png
.png
data/pua/http/images/vlc-48.png
.png
data/pua/http/images/vlc16x16.png
.png
data/pua/http/index.html
.html .js polyglot
data/pua/http/js/common.js
.js
data/pua/http/js/controllers.js
.js
data/pua/http/js/jquery.jstree.js
.js
data/pua/http/js/ui.js
.js
data/pua/http/mobile.html
.js
data/pua/http/mobile_browse.html
.js
data/pua/http/mobile_equalizer.html
.js
data/pua/http/mobile_view.html
data/pua/http/requests/README.txt
.vbs
data/pua/http/requests/browse.json
data/pua/http/requests/browse.xml
.xml
data/pua/http/requests/playlist.json
data/pua/http/requests/playlist.xml
.js .xml polyglot
data/pua/http/requests/playlist_jstree.xml
.xml
data/pua/http/requests/status.json
data/pua/http/requests/status.xml
.xml
data/pua/http/requests/vlm.xml
.xml
data/pua/http/requests/vlm_cmd.xml
.xml
data/pua/http/view.html
.js
data/pua/http/vlm.html
.html
data/pua/http/vlm_export.html
data/pua/intf/cli.luac
data/pua/intf/dummy.luac
data/pua/intf/dumpmeta.luac
data/pua/intf/http.luac
data/pua/intf/luac.luac
data/pua/intf/modules/host.luac
data/pua/intf/modules/httprequests.luac
data/pua/intf/telnet.luac
data/pua/meta/art/00_musicbrainz.luac
data/pua/meta/art/01_googleimage.luac
data/pua/meta/art/02_frenchtv.luac
data/pua/meta/art/03_lastfm.luac
data/pua/meta/reader/filename.luac
data/pua/modules/common.luac
data/pua/modules/dkjson.luac
data/pua/modules/sandbox.luac
data/pua/modules/simplexml.luac
data/pua/playlist/anevia_streams.luac
data/pua/playlist/anevia_xml.luac
data/pua/playlist/appletrailers.luac
data/pua/playlist/bbc_co_uk.luac
data/pua/playlist/cue.luac
data/pua/playlist/dailymotion.luac
data/pua/playlist/jamendo.luac
data/pua/playlist/koreus.luac
data/pua/playlist/liveleak.luac
data/pua/playlist/newgrounds.luac
data/pua/playlist/rockbox_fm_presets.luac
data/pua/playlist/soundcloud.luac
data/pua/playlist/twitch.luac
data/pua/playlist/vimeo.luac
data/pua/playlist/vocaroo.luac
data/pua/playlist/youtube.luac
.js
data/pua/sd/icecast.luac
data/pua/sd/jamendo.luac
ini/Custom.ini
ini/DefaultScript.ini
ini/FunctionDefine.ini
ini/Inform.ini
ini/Internet.ini
ini/Main.ini
interface.json
ocx/MSWINSCK.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

fcc40667ac22e0c598518006de958259

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/12/2000, 08:00

Not After

12/11/2005, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:0e:7d:a7:00:00:00:00:00:48
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/10/2003, 05:59

Not After

25/01/2005, 06:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

5b:3d:e6:b4:56:d1:a3:cc:c3:77:ec:dd:05:31:a7:25:62:28:b5:bc
Signer

Actual PE Digest

5b:3d:e6:b4:56:d1:a3:cc:c3:77:ec:dd:05:31:a7:25:62:28:b5:bc

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

wsock32

accept
listen
inet_ntoa
recv
WSAGetLastError
WSASetLastError
select
__WSAFDIsSet
shutdown
ntohs
sendto
recvfrom
connect
getsockopt
setsockopt
getsockname
getpeername
closesocket
WSACancelAsyncRequest
gethostbyaddr
bind
WSAAsyncSelect
socket
WSAStartup
WSACleanup
inet_addr
WSAAsyncGetHostByName
WSAAsyncGetHostByAddr
gethostbyname
htons
gethostname
ioctlsocket
send

kernel32

WideCharToMultiByte
GetVersion
GetProcAddress
GetModuleFileNameA
InitializeCriticalSection
HeapFree
HeapAlloc
GetProcessHeap
lstrcpynA
lstrcpyA
lstrlenA
lstrcatA
IsBadWritePtr
DisableThreadLibraryCalls
lstrlenW
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
LocalFree
FormatMessageA
GetTickCount
MultiByteToWideChar
SetLastError
GetLocaleInfoA
DeleteCriticalSection
FreeLibrary
lstrcmpA
InterlockedDecrement
GetFileAttributesA
GetWindowsDirectoryA
LoadLibraryA
GetLastError
InterlockedIncrement
lstrcmpiA
FindResourceA
LockResource
LoadResource
HeapReAlloc

user32

EndDialog
DrawEdge
DialogBoxParamA
LoadCursorA
MessageBoxA
GetActiveWindow
GetDC
CharNextA
ReleaseDC
SetParent
GetWindowRect
ShowWindow
WinHelpA
IsDialogMessageA
GetWindow
GetNextDlgTabItem
IsWindowEnabled
GetDlgItem
IsChild
GetKeyState
SetWindowPos
LoadBitmapA
IsWindowVisible
EndPaint
GetClientRect
BeginPaint
GetSystemMetrics
GetDlgItemTextA
ClientToScreen
OffsetRect
EqualRect
IntersectRect
SetWindowRgn
PtInRect
MessageBeep
LoadStringA
IsWindow
CreateDialogIndirectParamA
GetParent
SetDlgItemTextA
SendMessageA
DefWindowProcA
GetWindowLongA
DestroyWindow
SetWindowLongA
KillTimer
SetTimer
UnregisterClassA
RegisterClassA
PeekMessageA
PostMessageA
SendDlgItemMessageA
GetDlgItemInt
SetDlgItemInt
SetFocus
MoveWindow
CreateWindowExA
wsprintfA

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CreateOleAdviseHolder

advapi32

RegDeleteValueA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

VariantChangeType
SysAllocStringLen
SysAllocString
SafeArrayRedim
SysStringLen
RegisterTypeLi
LoadTypeLi
UnRegisterTypeLi
LoadTypeLibEx
OleCreatePropertyFrame
LoadRegTypeLi
SetErrorInfo
SysFreeString
CreateErrorInfo
GetErrorInfo
SafeArrayUnaccessData
SafeArrayDestroy
VariantClear
SysAllocStringByteLen
SafeArrayCreate
SysStringByteLen
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
VariantInit
SafeArrayAccessData
SafeArrayGetDim

gdi32

GetDeviceCaps
CreateCompatibleDC
CreateRectRgnIndirect
GetWindowExtEx
GetViewportExtEx
DeleteDC
DeleteObject
GetObjectA
LPtoDP
SetMapMode
SetViewportExtEx
SetWindowExtEx
SetViewportOrgEx
SetWindowOrgEx
CreateDCA
BitBlt
SelectObject

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ocx/RICHTX32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

aaca01ab2cd35af160b8025e9dcfad9f

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/12/2000, 08:00

Not After

12/11/2005, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:0e:7d:a7:00:00:00:00:00:48
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/10/2003, 05:59

Not After

25/01/2005, 06:09

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c6:be:da:cb:6f:7c:07:ce:80:06:10:c2:9a:0c:17:6f:0c:b4:42:44
Signer

Actual PE Digest

c6:be:da:cb:6f:7c:07:ce:80:06:10:c2:9a:0c:17:6f:0c:b4:42:44

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

shell32

DragAcceptFiles
DragQueryFileA
DragFinish

oledlg

ord1

kernel32

GlobalUnlock
GetVersionExA
GlobalSize
GlobalLock
FindResourceA
GlobalAlloc
GlobalFree
GetLocaleInfoA
LoadResource
LockResource
GetModuleFileNameA
GetWindowsDirectoryA
HeapReAlloc
GetFileAttributesA
lstrcatA
lstrcpynA
DisableThreadLibraryCalls
GetProcAddress
GetVersion
GetAtomNameA
FindAtomA
AddAtomA
IsBadWritePtr
DeleteAtom
InterlockedIncrement
FreeLibrary
LoadLibraryA
InterlockedDecrement
GetProcessHeap
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
WriteFile
GetLastError
ReadFile
LeaveCriticalSection
CreateFileA
lstrcmpA
lstrcpyA
HeapAlloc
lstrlenA
HeapFree
WideCharToMultiByte
lstrlenW
SetFilePointer
MultiByteToWideChar
IsDBCSLeadByte
CloseHandle
lstrcmpiA

user32

SetCursorPos
ScreenToClient
GetClipboardFormatNameA
PeekMessageW
PostMessageW
PeekMessageA
RegisterWindowMessageA
IsDlgButtonChecked
SetDlgItemInt
SetDlgItemTextA
CheckDlgButton
ReleaseCapture
DefWindowProcA
LoadCursorA
SetCursor
CreateDialogIndirectParamA
MapWindowPoints
FillRect
GetDlgItemTextA
GetClientRect
InvalidateRect
ValidateRect
SetRect
GetSysColor
InflateRect
GetClassInfoA
TrackPopupMenu
GetWindow
GetWindowTextA
CharNextA
MessageBoxA
SendDlgItemMessageA
GetDlgItem
PostMessageA
IsChild
TranslateMessage
DispatchMessageA
IsWindowEnabled
GetNextDlgTabItem
IsDialogMessageA
WinHelpA
BeginPaint
MoveWindow
SetFocus
IsWindowVisible
EndPaint
SetParent
ShowWindow
EnableMenuItem
DeleteMenu
EqualRect
SetWindowRgn
IntersectRect
GetWindowRect
OffsetRect
GetDlgItemInt
GetActiveWindow
SetWindowLongA
SetWindowPos
LoadMenuA
UnregisterClassA
DestroyWindow
DestroyMenu
GetSubMenu
RemoveMenu
GetParent
GetMenuItemCount
GetFocus
IsWindow
WindowFromDC
RegisterClassA
LoadStringA
RegisterClipboardFormatA
GetCapture
GetCursorPos
EnableWindow
EndDialog
wsprintfA
GetKeyState
MessageBeep
CallWindowProcA
GetDC
GetSystemMetrics
ReleaseDC
UpdateWindow
SendMessageA
DialogBoxParamA
GetWindowLongA
CreateWindowExA
ClientToScreen
PtInRect

ole32

DoDragDrop
RegisterDragDrop
CreateOleAdviseHolder
OleCreateFromFile
CLSIDFromProgID
OleCreate
OleSetContainedObject
StringFromCLSID
OleGetIconOfClass
CoGetMalloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleSaveToStream
OleLoadFromStream
RevokeDragDrop
CoTaskMemRealloc
ReleaseStgMedium
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree

advapi32

RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA

oleaut32

SafeArrayGetElement
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayGetLBound
VariantCopyInd
VariantCopy
SafeArrayUnaccessData
SetErrorInfo
OleCreatePropertyFrame
CreateErrorInfo
UnRegisterTypeLi
LoadTypeLi
LoadTypeLibEx
SafeArrayCreate
SafeArrayPutElement
RegisterTypeLi
OleCreatePictureIndirect
LoadRegTypeLi
GetErrorInfo
OleCreateFontIndirect
SysAllocStringLen
OleLoadPicture
OleTranslateColor
SysStringLen
SysFreeString
VariantChangeType
VariantClear
SysAllocString
VariantInit
SafeArrayCopy

comdlg32

GetOpenFileNameA
CommDlgExtendedError

gdi32

GetNearestColor
CreateSolidBrush
DeleteObject
EnumFontFamiliesExA
CreatePalette
GetBitmapBits
StretchBlt
GetObjectA
SelectPalette
CreateDIBitmap
GetDIBits
GetPaletteEntries
RealizePalette
CreateBitmap
CopyEnhMetaFileA
GetStockObject
CreateDCA
LPtoDP
CopyMetaFileA
GetViewportExtEx
CreateRectRgnIndirect
GetWindowExtEx
GetClipBox
SetWindowExtEx
SetBkColor
SelectObject
CreateCompatibleBitmap
SetViewportExtEx
DeleteDC
EndDoc
PatBlt
StartPage
StartDocA
EndPage
SetWindowOrgEx
SetViewportOrgEx
DPtoLP
CreateCompatibleDC
GetMapMode
CreateICA
GetObjectType
SetMapMode
GetDeviceCaps

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VBFrameworkMapClassObject

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ocx/TABCTL32.OCX
.dll regsvr32 windows:4 windows x86 arch:x86

aa8b0ec5b7d56e08d6614ae243221096

Code Sign

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

GetStringTypeW
GetStringTypeA
VirtualAlloc
LCMapStringW
LCMapStringA
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentProcess
TerminateProcess
ExitProcess
RaiseException
GetOEMCP
GetACP
GetCPInfo
GetModuleHandleA
GetCommandLineA
lstrcpynA
GetFileAttributesA
GetVersion
DisableThreadLibraryCalls
FindResourceA
LoadResource
LockResource
GetLastError
InterlockedDecrement
InterlockedIncrement
GetProcAddress
GetLocaleInfoA
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA
MultiByteToWideChar
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
lstrcmpiA
lstrlenA
GlobalSize
IsDBCSLeadByte
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
HeapAlloc
lstrcpyA
EnterCriticalSection
HeapReAlloc
lstrcmpA
GetProcessHeap
InitializeCriticalSection
lstrcatA

user32

SetFocus
MoveWindow
GetWindow
ShowWindow
IsWindowEnabled
PtInRect
IsWindowVisible
GetParent
SetWindowRgn
GetSysColor
CopyRect
DrawFocusRect
DestroyWindow
GetWindowDC
GetWindowRect
CreateWindowExA
SetWindowLongA
CallWindowProcA
GetWindowLongA
SetRectEmpty
SetWindowPos
OffsetRect
WinHelpA
GetNextDlgTabItem
CharNextA
GetClipboardFormatNameA
ScreenToClient
MapWindowPoints
SetCursorPos
RegisterClipboardFormatA
UnregisterClassA
InvalidateRect
ReleaseCapture
CreateDialogIndirectParamA
IsChild
SetParent
EndPaint
IsDialogMessageA
FillRect
InflateRect
EndDialog
GetActiveWindow
DialogBoxParamA
GetCursorPos
LockWindowUpdate
EqualRect
IsWindow
MessageBeep
MessageBoxA
GetDlgItemInt
GetDlgItemTextA
IsDlgButtonChecked
SendDlgItemMessageA
SetDlgItemTextA
SetDlgItemInt
CheckDlgButton
GetDlgItem
wsprintfA
GetKeyState
DefWindowProcA
SetCursor
PeekMessageA
SendMessageA
GetFocus
GetDC
ReleaseDC
SetRect
IsCharAlphaNumericA
VkKeyScanA
CreateAcceleratorTableA
EnableWindow
LoadCursorA
RegisterClassA
DestroyAcceleratorTable
LoadStringA
GetSystemMetrics
ClientToScreen
GetClientRect
BeginPaint
IntersectRect

ole32

ReleaseStgMedium
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CreateOleAdviseHolder
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
OleSaveToStream
OleLoadFromStream

advapi32

RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

oleaut32

SysAllocStringLen
OleCreatePropertyFrame
LoadTypeLi
SafeArrayCopy
SafeArrayRedim
SafeArrayPutElement
SafeArrayGetElement
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantCopyInd
VariantCopy
LoadTypeLibEx
UnRegisterTypeLi
RegisterTypeLi
CreateErrorInfo
SetErrorInfo
VariantChangeType
VariantInit
SysStringLen
OleTranslateColor
GetErrorInfo
OleLoadPicture
SysAllocStringByteLen
SysStringByteLen
LoadRegTypeLi
OleCreateFontIndirect
VariantClear
OleCreatePictureIndirect
SysAllocString
SysFreeString

gdi32

LPtoDP
GetViewportExtEx
CreateRectRgnIndirect
GetWindowExtEx
SetMapMode
GetNearestColor
CreatePalette
GetBitmapBits
CreateDIBitmap
GetDIBits
CopyEnhMetaFileA
CopyMetaFileA
CreateDCA
SetWindowOrgEx
SetViewportOrgEx
SetWindowExtEx
SetViewportExtEx
GetDeviceCaps
DeleteDC
DeleteObject
StretchBlt
SelectObject
CreateBitmap
CreateCompatibleDC
RealizePalette
SelectPalette
GetOutlineTextMetricsA
BitBlt
CreateCompatibleBitmap
SetTextColor
SetBkColor
CreateRectRgn
CreateFontIndirectA
GetObjectA
SelectClipRgn
CombineRgn
CreatePolygonRgn
SetBkMode
CreatePen
TextOutA
GetTextColor
LineTo
MoveToEx
GetTextExtentPoint32A
GetCharWidthA
GetCurrentPositionEx
SetTextAlign
GetStockObject
CreateSolidBrush
OffsetRgn
SetBrushOrgEx
UnrealizeObject
CreateICA
GetPaletteEntries

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ocx/TabS.oca
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ocx/TabS.ocx
.dll regsvr32 windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

UPX0
Size: - Virtual size: 148KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ocx/aero.skn
ocx/mscomctl.ocx
.dll regsvr32 windows:4 windows x86 arch:x86

ce21923007044b1701a0b2dc4ac9396b

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

04/12/2003, 00:00

Not After

03/12/2008, 23:59

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

10/01/1997, 07:00

Not After

31/12/2020, 07:00

Subject

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

6a:0b:99:4f:c0:00:0c:ab:11:d8:22:ef:7d:6c:79:7e
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

23/05/2002, 08:00

Not After

25/09/2011, 08:00

Subject

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

61:05:87:58:00:03:00:00:00:5a
Certificate

Issuer

CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

05/01/2005, 23:20

Not After

05/04/2006, 23:30

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

d3:33:87:9d:a3:7d:db:aa:b4:12:4a:ae:67:2b:01:a6:0b:07:8a:fd
Signer

Actual PE Digest

d3:33:87:9d:a3:7d:db:aa:b4:12:4a:ae:67:2b:01:a6:0b:07:8a:fd

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
LocalReAlloc
GetProfileIntA
RtlMoveMemory
LocalSize
FreeResource
GetCurrentProcessId
MulDiv
GetTickCount
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
GlobalReAlloc
IsBadReadPtr
Sleep
WaitForSingleObject
GlobalHandle
GetThreadLocale
LocalFree
LocalAlloc
GlobalAddAtomA
SetFilePointer
SetStdHandle
FlushFileBuffers
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentProcess
TerminateProcess
ExitProcess
RtlUnwind
GetCommandLineA
CompareStringW
GlobalSize
CreateFileA
GetFileSize
GlobalUnlock
GlobalLock
ReadFile
CloseHandle
IsDBCSLeadByte
GetModuleHandleA
FindResourceA
LoadResource
LockResource
GetLastError
GetFileAttributesA
GetVersion
DisableThreadLibraryCalls
GetProcAddress
GetLocaleInfoA
LoadLibraryA
GetWindowsDirectoryA
lstrcatA
GetModuleFileNameA
IsBadWritePtr
lstrcmpiA
GetLocalTime
GetTimeFormatA
GetDateFormatA
lstrcmpA
GlobalAlloc
GlobalFree
GetVersionExA
GetCurrentThreadId
MultiByteToWideChar
CompareStringA
lstrcpyA
InterlockedExchange
lstrlenA
GetSystemDefaultLCID
lstrcpynA
HeapAlloc
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
InterlockedIncrement
InterlockedDecrement
HeapReAlloc

user32

DrawFocusRect
AdjustWindowRect
DrawFrameControl
TrackPopupMenu
GetMessageA
AdjustWindowRectEx
CopyRect
GetKeyNameTextA
ShowCaret
SetCaretPos
GrayStringA
HideCaret
DestroyCaret
CreateCaret
SetWindowTextA
SetScrollInfo
DrawTextExA
InvertRect
SetRectEmpty
GetShellWindow
SetKeyboardState
GetKeyboardState
GetScrollInfo
GetKeyboardLayout
DestroyCursor
GetUpdateRgn
GetUpdateRect
GetWindowRgn
ValidateRect
CallMsgFilterA
LockWindowUpdate
IsZoomed
GetDesktopWindow
GetIconInfo
GetCursor
GetForegroundWindow
InvalidateRgn
EndDeferWindowPos
EnumChildWindows
GetDoubleClickTime
FindWindowA
GetMessageTime
GetWindowThreadProcessId
RemovePropA
SendNotifyMessageA
SetScrollPos
SetScrollRange
GetWindowTextLengthA
EnableScrollBar
ChildWindowFromPoint
EndDialog
GetWindow
GetPropA
GetCursorPos
WindowFromPoint
GetClassNameA
GetDlgCtrlID
IsWindow
SetPropA
SetTimer
KillTimer
SendDlgItemMessageA
IsWindowVisible
UnregisterClassA
CharNextA
SetActiveWindow
CheckRadioButton
SetFocus
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
CheckDlgButton
GetDlgItem
IsWindowEnabled
GetDCEx
DrawIconEx
CreateIconIndirect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetClipboardFormatNameA
SetCursorPos
RegisterClipboardFormatA
MessageBeep
RegisterWindowMessageA
PeekMessageA
PostMessageW
PeekMessageW
VkKeyScanA
SetParent
CharUpperA
GetDlgItemInt
SetCursor
CreateDialogIndirectParamA
GetNextDlgTabItem
IsDialogMessageA
ScrollWindowEx
GetDlgItemTextA
SetWindowRgn
IntersectRect
EqualRect
MoveWindow
BeginPaint
EndPaint
DeferWindowPos
BeginDeferWindowPos
CharNextExA
DrawIcon
DestroyIcon
MapWindowPoints
CreatePopupMenu
AppendMenuA
TrackPopupMenuEx
DestroyMenu
GetActiveWindow
MessageBoxA
WinHelpA
PtInRect
DefWindowProcA
GetWindowDC
SetRect
LoadCursorA
IsRectEmpty
ClientToScreen
GetWindowRect
MapVirtualKeyA
DestroyWindow
CreateWindowExA
GetSysColorBrush
GetAsyncKeyState
EnableWindow
PostMessageA
TranslateMessage
DispatchMessageA
wsprintfA
DialogBoxParamA
UpdateWindow
GetWindowLongA
SetWindowLongA
GetDC
ReleaseDC
GetParent
OffsetRect
UnionRect
GetFocus
IsChild
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetMessagePos
ScreenToClient
SetWindowPos
SetCapture
GetWindowTextA
WindowFromDC
GetClientRect
CallWindowProcA
DrawEdge
GetSysColor
FrameRect
InflateRect
FillRect
DrawTextA
GetKeyState
GetCapture
ReleaseCapture
GetClassInfoA
RegisterClassA
InvalidateRect
LoadIconA
GetSystemMetrics
CopyImage
SendMessageA
LoadStringA
RedrawWindow
ShowWindow
CreateAcceleratorTableA

ole32

ReleaseStgMedium
DoDragDrop
RegisterDragDrop
RevokeDragDrop
CreateStreamOnHGlobal
OleLoadFromStream
OleSaveToStream
CreateOleAdviseHolder
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance

advapi32

RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegQueryValueExA
RegEnumKeyExA
RegCreateKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteValueA

oleaut32

SafeArrayRedim
SafeArrayPutElement
SafeArrayGetElement
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
GetErrorInfo
OleCreateFontIndirect
OleCreatePropertyFrame
LoadTypeLibEx
UnRegisterTypeLi
RegisterTypeLi
CreateErrorInfo
SetErrorInfo
LoadRegTypeLi
LoadTypeLi
VariantChangeTypeEx
SysStringByteLen
SysAllocStringByteLen
OleLoadPicture
SysAllocStringLen
VariantCopy
OleTranslateColor
VariantChangeType
OleCreatePictureIndirect
VariantCopyInd
SysStringLen
SysFreeString
VariantInit
VariantClear
SysAllocString
SafeArrayCopy

comdlg32

GetOpenFileNameA

gdi32

Arc
GetTextExtentPointA
GetCharWidthA
OffsetWindowOrgEx
ExtTextOutW
GetTextExtentPointW
Polyline
GetTextAlign
SetTextAlign
OffsetRgn
GetTextColor
CombineRgn
GetTextMetricsA
MoveToEx
LineTo
Ellipse
DeleteObject
SelectObject
CreateSolidBrush
SetViewportOrgEx
SetWindowOrgEx
SetViewportExtEx
SetWindowExtEx
SetMapMode
GetDeviceCaps
CreateFontIndirectA
GetObjectA
SelectClipRgn
ExcludeClipRect
RectVisible
GetClipBox
IntersectClipRect
GetClipRgn
CreateRectRgnIndirect
RealizePalette
SelectPalette
PatBlt
CreateCompatibleBitmap
CreateBitmap
CreateCompatibleDC
GetTextExtentPoint32A
TextOutA
SetBkColor
SetTextColor
SetBkMode
Rectangle
CreatePen
GetStockObject
GetViewportExtEx
GetWindowExtEx
LPtoDP
DeleteDC
CreateDCA
CreateRectRgn
StretchBlt
CreateICA
CopyMetaFileA
CopyEnhMetaFileA
GetPaletteEntries
GetDIBits
CreateDIBitmap
GetBitmapBits
CreatePalette
GetNearestColor
CreatePatternBrush
CreateDIBSection
CreateHalftonePalette
BitBlt
SetDIBColorTable
GetDIBColorTable
GetPixel
StretchDIBits
SetBrushOrgEx
GetBkColor
ExtTextOutA
RestoreDC
SaveDC
CreateFontA

Exports

Exports

DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 690KB - Virtual size: 690KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
translations/qt_ca.qm
translations/qt_cs.qm
translations/qt_de.qm
translations/qt_fi.qm
translations/qt_fr.qm
translations/qt_he.qm
translations/qt_hu.qm
translations/qt_it.qm
translations/qt_ja.qm
translations/qt_ko.qm
translations/qt_lv.qm
translations/qt_ru.qm
translations/qt_sk.qm
translations/qt_uk.qm
violentHoney.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 526KB - Virtual size: 525KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: peng

Password: peng

Password: peng

Password: peng

Password: peng

Password: peng

Password: peng

Password: peng

Password: peng

fcc40667ac22e0c598518006de958259

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate

Extended Key Usages

Key Usages

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6Certificate

Extended Key Usages

Key Usages

61:0e:7d:a7:00:00:00:00:00:48Certificate

Extended Key Usages

Key Usages

5b:3d:e6:b4:56:d1:a3:cc:c3:77:ec:dd:05:31:a7:25:62:28:b5:bcSigner

Headers

File Characteristics

Imports

wsock32

kernel32

user32

ole32

advapi32

oleaut32

gdi32

Exports

Exports

Sections

.text Size: 68KB - Virtual size: 66KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 28KB - Virtual size: 25KB

.reloc Size: 8KB - Virtual size: 4KB

aaca01ab2cd35af160b8025e9dcfad9f

Code Sign

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88Certificate

Extended Key Usages

Key Usages

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40Certificate

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6Certificate

Extended Key Usages

Key Usages

61:0e:7d:a7:00:00:00:00:00:48Certificate

Extended Key Usages

Key Usages

c6:be:da:cb:6f:7c:07:ce:80:06:10:c2:9a:0c:17:6f:0c:b4:42:44Signer

Headers

File Characteristics

Imports

shell32

oledlg

kernel32

user32

ole32

advapi32

oleaut32

comdlg32

gdi32

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 114KB

.data Size: 4KB - Virtual size: 2KB

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

61:0e:7d:a7:00:00:00:00:00:48
Certificate

5b:3d:e6:b4:56:d1:a3:cc:c3:77:ec:dd:05:31:a7:25:62:28:b5:bc
Signer

.text
Size: 68KB - Virtual size: 66KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 28KB - Virtual size: 25KB

.reloc
Size: 8KB - Virtual size: 4KB

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Certificate

61:0e:7d:a7:00:00:00:00:00:48
Certificate

c6:be:da:cb:6f:7c:07:ce:80:06:10:c2:9a:0c:17:6f:0c:b4:42:44
Signer

.text
Size: 116KB - Virtual size: 114KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 68KB - Virtual size: 67KB

.reloc
Size: 8KB - Virtual size: 7KB

.text
Size: 136KB - Virtual size: 135KB

.data
Size: 14KB - Virtual size: 13KB

.rsrc
Size: 39KB - Virtual size: 39KB

.reloc
Size: 8KB - Virtual size: 7KB

.text
Size: 512B - Virtual size: 4KB

.bss
Size: - Virtual size: 4KB

.rsrc
Size: 26KB - Virtual size: 28KB

.idata
Size: 512B - Virtual size: 4KB

.reloc
Size: - Virtual size:

UPX0
Size: - Virtual size: 148KB

UPX1
Size: 45KB - Virtual size: 48KB

.rsrc
Size: 11KB - Virtual size: 12KB

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Certificate

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Certificate

6a:0b:99:4f:c0:00:0c:ab:11:d8:22:ef:7d:6c:79:7e
Certificate

61:05:87:58:00:03:00:00:00:5a
Certificate

d3:33:87:9d:a3:7d:db:aa:b4:12:4a:ae:67:2b:01:a6:0b:07:8a:fd
Signer

.text
Size: 690KB - Virtual size: 690KB

.data
Size: 29KB - Virtual size: 29KB