408fc62d7c189bfdb721254923c8f300N

Sharing

Copy URL Twitter E-mail

General

Target

408fc62d7c189bfdb721254923c8f300N
Size

1.3MB
MD5

408fc62d7c189bfdb721254923c8f300
SHA1

e1ea12a27ecd07b610495f3f45275bab89ceb58d
SHA256

d5600435f30dc46348292a005a6661ebb587167a5e01e8aa32997f2a9b443888
SHA512

41615f3c519dc0ea780a27edcf54832ef63f258ee209704e2ea0785c8caaa606c479e1af19cc409e468d87db53e9b268392f0f2d6ed0e42ccc3278d7febb92e6
SSDEEP

24576:+FWJUweT7FmnwDiMEH9wi14TnSJYIzc80etqe:+FWJK7gnwDiRnuCYIzc8Fqe

Score

1^/10

Malware Config

Signatures

Files

408fc62d7c189bfdb721254923c8f300N
.exe windows:6 windows x64 arch:x64

aec48ea8a8ddf8fb22a5b3391274d0f4

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:10:1d:15:d8:f8:58:ee:53:27:dc:9b:f4:b5:e6:0b
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

15/07/2021, 00:00

Not After

13/01/2022, 23:59

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=HSINCHU,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 22:15

Not After

02/12/2021, 22:15

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/04/2012, 23:48

Not After

18/04/2027, 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

86:d0:ea:b0:1a:3e:7d:6e:04:92:4c:72:71:60:9e:92:3a:d7:d6:e5:27:96:43:6b:31:0c:0f:11:75:c5:c5:e6
Signer

Actual PE Digest

86:d0:ea:b0:1a:3e:7d:6e:04:92:4c:72:71:60:9e:92:3a:d7:d6:e5:27:96:43:6b:31:0c:0f:11:75:c5:c5:e6

Digest Algorithm

sha256

PE Digest Matches

true

08:bd:b3:3a:e4:20:9b:63:3b:05:85:a2:cf:58:12:9d:1b:87:c1:06
Signer

Actual PE Digest

08:bd:b3:3a:e4:20:9b:63:3b:05:85:a2:cf:58:12:9d:1b:87:c1:06

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

F:\proj_20210818_RtkAudUService_Chunyung\20210818_v3\Release\x64\RtkAudUService64.pdb

Imports

oleaut32

VariantInit
VariantClear
SafeArrayCreateVector
SafeArrayPutElement
BSTR_UserFree64
SafeArrayUnaccessData
SysAllocStringLen
SysAllocString
VariantCopy
LPSAFEARRAY_UserMarshal
BSTR_UserMarshal64
LPSAFEARRAY_UserUnmarshal64
BSTR_UserMarshal
BSTR_UserUnmarshal
LPSAFEARRAY_UserMarshal64
LPSAFEARRAY_UserFree64
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree
BSTR_UserUnmarshal64
LPSAFEARRAY_UserSize64
LPSAFEARRAY_UserSize
BSTR_UserSize64
BSTR_UserFree
SafeArrayAccessData
BSTR_UserSize
LoadTypeLibEx
SysFreeString

rpcrt4

RpcEpRegisterW
RpcServerUseProtseqEpW
RpcServerListen
RpcServerRegisterIf3
CStdStubBuffer_Connect
CStdStubBuffer_IsIIDSupported
RpcServerUnregisterIf
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
CStdStubBuffer_QueryInterface
CStdStubBuffer_CountRefs
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
RpcEpUnregister
NdrStubCall3
NdrOleFree
CStdStubBuffer_DebugServerQueryInterface
IUnknown_AddRef_Proxy
NdrStubForwardingFunction
CStdStubBuffer_Invoke
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
NdrServerCall2
NdrServerCallAll
NdrClientCall3
RpcBindingVectorFree
RpcServerInqBindings

api-ms-win-core-com-l1-1-0

CoCreateInstance
CoRevokeClassObject
PropVariantClear
StringFromCLSID
CoInitializeSecurity
CoSetProxyBlanket
CoRegisterClassObject
CoFreeUnusedLibrariesEx
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
CoUninitialize
CLSIDFromString
CoInitializeEx

propsys

InitPropVariantFromCLSID

api-ms-win-core-heap-l1-1-0

HeapSize
HeapFree
GetProcessHeap
HeapDestroy
HeapAlloc
HeapReAlloc

api-ms-win-core-libraryloader-l1-2-0

SizeofResource
LockResource
LoadStringW
GetModuleHandleW
FreeLibrary
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryExW
FindResourceExW
LoadResource

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW
FindResourceW

api-ms-win-core-string-obsolete-l1-1-0

lstrcpyW
lstrlenW
lstrcmpW
lstrcmpA

api-ms-win-core-file-l1-1-0

GetFileAttributesW
CreateFileW
FileTimeToLocalFileTime
DeleteFileW
QueryDosDeviceW
ReadFile
WriteFile

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime

api-ms-win-core-datetime-l1-1-0

GetDateFormatW
GetTimeFormatW

api-ms-win-core-synch-l1-1-0

SetEvent
WaitForSingleObject
InitializeCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
LeaveCriticalSection
CreateMutexW
CreateEventExW
DeleteCriticalSection
CancelWaitableTimer
InitializeCriticalSectionEx
CreateEventW
ResetEvent
SetWaitableTimer

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetSystemDirectoryW
GetTickCount
GetLocalTime
GetSystemTime

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW

api-ms-win-core-processthreads-l1-1-1

OpenProcess
IsProcessorFeaturePresent

api-ms-win-core-processthreads-l1-1-0

OpenProcessToken
CreateProcessAsUserW
SetProcessShutdownParameters
TlsAlloc
GetCurrentProcess
SwitchToThread
CreateThread
GetCurrentThreadId
GetExitCodeProcess
CreateProcessW
TlsSetValue
GetStartupInfoW
ProcessIdToSessionId
GetCurrentProcessId
TerminateProcess
TlsGetValue
TlsFree

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-errorhandling-l1-1-0

RaiseException
SetLastError
SetUnhandledExceptionFilter
GetLastError
UnhandledExceptionFilter

api-ms-win-core-winrt-l1-1-0

RoUninitialize
RoInitialize
RoGetActivationFactory

api-ms-win-core-winrt-string-l1-1-0

WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDeleteString

api-ms-win-core-synch-l1-2-1

CreateWaitableTimerW
WaitForMultipleObjects

api-ms-win-core-registry-l1-1-0

RegDeleteValueW
RegSetKeySecurity
RegQueryInfoKeyW
RegNotifyChangeKeyValue
RegEnumValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
RegGetValueW
RegGetKeySecurity

api-ms-win-core-registry-l2-1-0

RegCreateKeyW
RegDeleteKeyW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent
OutputDebugStringA
OutputDebugStringW

api-ms-win-core-synch-l1-2-0

Sleep

ext-ms-win-shell32-shellfolders-l1-1-0

SHGetFolderPathW
SHGetSpecialFolderPathW

api-ms-win-core-privateprofile-l1-1-0

GetProfileIntW

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-localization-l1-2-0

FormatMessageW
LCMapStringW

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalFree

api-ms-win-core-heap-obsolete-l1-1-0

LocalSize

api-ms-win-core-kernel32-legacy-l1-1-0

GetSystemPowerStatus
WTSGetActiveConsoleSessionId

api-ms-win-security-base-l1-1-0

DeleteAce
CreateWellKnownSid
GetAclInformation
GetLengthSid
InitializeAcl
AddAccessAllowedAceEx
AdjustTokenPrivileges
GetSecurityDescriptorDacl
GetAce
AllocateAndInitializeSid
FreeSid
SetSecurityDescriptorDacl
SetTokenInformation
DuplicateTokenEx
InitializeSecurityDescriptor
AddAce

api-ms-win-core-namedpipe-l1-1-0

ConnectNamedPipe
CreateNamedPipeW
DisconnectNamedPipe

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-security-base-l1-2-2

DeriveCapabilitySidsFromName

api-ms-win-security-provider-l1-1-0

SetEntriesInAclW

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

bcrypt

BCryptEncrypt
BCryptDestroyKey
BCryptImportKeyPair
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider

api-ms-win-service-core-l1-1-0

RegisterServiceCtrlHandlerExW
StartServiceCtrlDispatcherW
SetServiceStatus

api-ms-win-service-management-l1-1-0

OpenServiceW
DeleteService
OpenSCManagerW
CreateServiceW
CloseServiceHandle

api-ms-win-service-winsvc-l1-1-0

ControlService
QueryServiceStatus

api-ms-win-service-management-l2-1-0

QueryServiceStatusEx

api-ms-win-core-util-l1-1-0

DecodePointer
EncodePointer

api-ms-win-appmodel-runtime-l1-1-1

FindPackagesByPackageFamily

api-ms-win-mm-misc-l1-1-0

mmioDescend
mmioAscend
mmioAdvance
mmioGetInfo
mmioOpenW
mmioClose
mmioCreateChunk
mmioRead
mmioWrite
mmioSetInfo
mmioSeek

api-ms-win-core-toolhelp-l1-1-0

CreateToolhelp32Snapshot
Process32FirstW
Process32NextW

api-ms-win-security-lsalookup-l2-1-0

LookupPrivilegeValueW

userenv

CreateEnvironmentBlock

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-core-memory-l1-1-0

ReadProcessMemory

crypt32

CertCloseStore
CertFreeCertificateContext
CertGetNameStringW
CertFindCertificateInStore
CryptQueryObject
CryptMsgClose
CryptDecodeObject
CryptMsgGetParam

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolWork
SubmitThreadpoolWork

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
GetTraceLoggerHandle
TraceMessage

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDevicePropertyW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo

wtsapi32

WTSRegisterSessionNotification
WTSQueryUserToken

kernel32

WriteProfileStringW
WinExec

user32

UnhookWinEvent
SetWinEventHook
GetClassNameA
KillTimer
SetTimer
RegisterDeviceNotificationW
UnregisterDeviceNotification
CallNextHookEx
UnhookWindowsHookEx
DispatchMessageW
TranslateMessage
SendInput
FindWindowExW
RegisterPowerSettingNotification
CreateWindowExW
RegisterClassW
LoadCursorW
LoadIconW
DefWindowProcW
SendMessageW
GetMessageW
ShowWindow
SetWindowsHookExW

advapi32

RegisterEventSourceW
ReportEventW
DeregisterEventSource
GetUserNameW

ole32

CoInitialize

avrt

AvSetMmThreadCharacteristicsW
AvRevertMmThreadCharacteristics

ntdll

NtQueryInformationProcess

wininet

InternetOpenUrlW
InternetReadFile
InternetCloseHandle
InternetOpenW

api-ms-win-crt-runtime-l1-1-0

_resetstkoflw
_register_thread_local_exe_atexit_callback
_invalid_parameter_noinfo
_errno
_initialize_onexit_table
abort
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
terminate
_set_app_type
_c_exit
_exit
exit
_initterm_e
_invalid_parameter_noinfo_noreturn
_initterm
_get_wide_winmain_command_line
_configure_wide_argv
_initialize_wide_environment

api-ms-win-crt-string-l1-1-0

wcscspn
wcsspn
islower
_wcsdup
isupper
strcpy_s
wcsncmp
towupper
wcsnlen
__strncnt
strcspn
wcscat_s
iswspace
wcstok_s
wcscpy_s
_wcsupr_s
_wcsicmp
wmemcpy_s

api-ms-win-crt-stdio-l1-1-0

_flushall
__stdio_common_vsprintf_s
__stdio_common_vsprintf
_wfopen_s
fread
fclose
fgets
fputs
fflush
fputws
ftell
fseek
_wfsopen
__stdio_common_vswprintf_s
__stdio_common_vswprintf
ungetwc
fputwc
fgetwc
__acrt_iob_func
__stdio_common_vfwprintf
__stdio_common_vfprintf_s
ungetc
setvbuf
_fseeki64
fsetpos
fputc
__stdio_common_vfprintf
fgetpos
__p__commode
fwrite
_get_stream_buffer_pointers
_set_fmode
fgetc

api-ms-win-crt-convert-l1-1-0

wcstoul
wcstol
_wtoi

api-ms-win-crt-heap-l1-1-0

_set_new_mode
_recalloc
calloc
malloc
free
_callnewh
realloc

api-ms-win-crt-math-l1-1-0

atan2f
__setusermatherr
log10f
powf
frexp
asinf

api-ms-win-crt-locale-l1-1-0

___lc_locale_name_func
_unlock_locales
__pctype_func
localeconv
_lock_locales
setlocale
___lc_codepage_func
___mb_cur_max_func
_configthreadlocale

api-ms-win-crt-multibyte-l1-1-0

_mbsstr
_mbschr

shlwapi

PathFileExistsW

api-ms-win-core-rtlsupport-l1-1-0

RtlPcToFileHeader
RtlUnwindEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwind
RtlVirtualUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_lock_file

Sections

.text
Size: 692KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 403KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aec48ea8a8ddf8fb22a5b3391274d0f4

Code Sign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

05:10:1d:15:d8:f8:58:ee:53:27:dc:9b:f4:b5:e6:0bCertificate

Extended Key Usages

Key Usages

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5Certificate

Extended Key Usages

61:0b:aa:c1:00:00:00:00:00:09Certificate

Key Usages

86:d0:ea:b0:1a:3e:7d:6e:04:92:4c:72:71:60:9e:92:3a:d7:d6:e5:27:96:43:6b:31:0c:0f:11:75:c5:c5:e6Signer

08:bd:b3:3a:e4:20:9b:63:3b:05:85:a2:cf:58:12:9d:1b:87:c1:06Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

oleaut32

rpcrt4

api-ms-win-core-com-l1-1-0

propsys

api-ms-win-core-heap-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-string-obsolete-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-datetime-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-synch-l1-2-1

api-ms-win-core-registry-l1-1-0

api-ms-win-core-registry-l2-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-synch-l1-2-0

ext-ms-win-shell32-shellfolders-l1-1-0

api-ms-win-core-privateprofile-l1-1-0

api-ms-win-core-file-l1-2-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-heap-obsolete-l1-1-0

api-ms-win-core-kernel32-legacy-l1-1-0

api-ms-win-security-base-l1-1-0

api-ms-win-core-namedpipe-l1-1-0

api-ms-win-security-sddl-l1-1-0

api-ms-win-core-io-l1-1-0

api-ms-win-security-base-l1-2-2

api-ms-win-security-provider-l1-1-0

api-ms-win-core-registry-l1-1-1

bcrypt

api-ms-win-service-core-l1-1-0

api-ms-win-service-management-l1-1-0

api-ms-win-service-winsvc-l1-1-0

api-ms-win-service-management-l2-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-appmodel-runtime-l1-1-1

api-ms-win-mm-misc-l1-1-0

api-ms-win-core-toolhelp-l1-1-0

api-ms-win-security-lsalookup-l2-1-0

userenv

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

05:10:1d:15:d8:f8:58:ee:53:27:dc:9b:f4:b5:e6:0b
Certificate

33:00:00:00:b5:21:3f:ca:1e:4a:a0:3d:e4:00:00:00:00:00:b5
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

86:d0:ea:b0:1a:3e:7d:6e:04:92:4c:72:71:60:9e:92:3a:d7:d6:e5:27:96:43:6b:31:0c:0f:11:75:c5:c5:e6
Signer

08:bd:b3:3a:e4:20:9b:63:3b:05:85:a2:cf:58:12:9d:1b:87:c1:06
Signer

.text
Size: 692KB - Virtual size: 692KB

.orpc
Size: 512B - Virtual size: 148B

.rdata
Size: 403KB - Virtual size: 402KB

.data
Size: 22KB - Virtual size: 33KB

.pdata
Size: 29KB - Virtual size: 28KB

.rsrc
Size: 139KB - Virtual size: 138KB

.reloc
Size: 8KB - Virtual size: 7KB