Chicken Invaders 5 ( for pc )[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Chicken Invaders 5 ( for pc ).zip
Size

50.3MB
MD5

c1d5e85e25c3b53c6690f9e0433ab830
SHA1

19f02fb13f125249a8ddec61978f9a763396bb41
SHA256

3a53c6995d553c3e8f6aa2f9207ed9ade09e3d700b9ef9e18b6a99dfa463abaf
SHA512

f4dfb0bc36b8aea0ca2bbac25bd189c3478952f2ce19fae6aecb47cd6647efaffab24bfb58fb9e8b397f17466970355f282e876372ed67c85056cb62c0710fd4
SSDEEP

1572864:XmkGYvEqs1bLMW0awPhZWYPAoJvqLgDWI9HGwuw+UaZoe9wkq:Xm/YMlLMxpUw9iLI9SFUaZZ+n

Score

7^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/Chicken Invaders 5/uninstall.exe	upx

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Chicken Invaders 5/CI5.exe
unpack001/Chicken Invaders 5/bass.dll
unpack001/Chicken Invaders 5/uninstall.exe
unpack002/out.upx

Files

Chicken Invaders 5 ( for pc ).zip
.zip
Chicken Invaders 5/CI5.cfg.static
Chicken Invaders 5/CI5.dat.1252.hq2x
Chicken Invaders 5/CI5.dat.hq2x
Chicken Invaders 5/CI5.dat.language.hq2x
Chicken Invaders 5/CI5.dat.levels.hq2x
Chicken Invaders 5/CI5.exe
.exe windows:5 windows x86 arch:x86

e8e96a8d722cf47f1846dee4f7c52554

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetNamedSecurityInfoW
SetEntriesInAclW
SetNamedSecurityInfoW
GetUserNameW
RegQueryValueExA
RegOpenKeyA
RegCloseKey

bass

BASS_SampleLoad
BASS_SampleGetInfo
BASS_GetInfo
BASS_Start
BASS_Stop
BASS_Update
BASS_SampleFree
BASS_SampleGetChannels
BASS_Pause
BASS_Free
BASS_Init
BASS_GetCPU
BASS_SampleGetChannel
BASS_ChannelSetAttribute
BASS_ChannelSlideAttribute
BASS_ChannelGetLength
BASS_ChannelSetPosition
BASS_ChannelStop
BASS_ChannelPlay
BASS_ChannelIsActive
BASS_StreamCreateFile
BASS_ErrorGetCode
BASS_StreamFree
BASS_ChannelGetPosition
BASS_GetDeviceInfo
BASS_SetConfig
BASS_GetVersion

dinput8

DirectInput8Create

gdi32

TextOutW
CreateDIBSection
GetCharABCWidthsW
GetTextExtentPoint32W
DeleteObject
DeleteDC
SetTextColor
SetTextAlign
SetBkColor
SetBkMode
SelectObject
SetMapMode
CreateCompatibleDC
CreateFontIndirectW

kernel32

Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
CreateFileW
GetModuleHandleW
LoadLibraryW
LoadLibraryA
CloseHandle
GetCurrentThreadId
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentProcess
GetProcAddress
GetModuleHandleA
GetVersionExA
RaiseException
GetLastError
InterlockedExchange
FreeLibrary
LoadLibraryExA
CopyFileW
CreateDirectoryW
LocalFree
Sleep
GetLocaleInfoW
CreateThread
SetThreadPriority
GetComputerNameW
QueryPerformanceFrequency
QueryPerformanceCounter
GetVersionExW
GlobalMemoryStatus
CreateEventW
WaitForSingleObject
RtlUnwind
EncodePointer
DecodePointer
InterlockedDecrement
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
GetCommandLineW
IsDebuggerPresent
IsProcessorFeaturePresent
GetCurrentDirectoryW
GetFullPathNameW
GetSystemTimeAsFileTime
ReadFile
HeapFree
HeapAlloc
SetLastError
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
UnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetStdHandle
WriteFile
GetModuleFileNameW
LoadLibraryExW
HeapSize
GetProcessHeap
GetFileType
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
GetDriveTypeW
GetTimeZoneInformation
WideCharToMultiByte
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetConsoleCP
FlushFileBuffers
OutputDebugStringW
HeapReAlloc
SetStdHandle
WriteConsoleW
SetEndOfFile
SetEnvironmentVariableA

shell32

SHGetSpecialFolderPathW
ShellExecuteW

wininet

HttpOpenRequestW
HttpQueryInfoW
InternetConnectW
InternetOpenW
InternetReadFile
InternetCloseHandle
HttpSendRequestW

winmm

timeGetTime
timeBeginPeriod
timeEndPeriod
timeSetEvent
timeGetDevCaps

wsock32

WSAStartup
WSAGetLastError
socket
htons
htonl
gethostbyname
bind
getsockname
closesocket
sendto
WSACleanup
ioctlsocket

ws2_32

setsockopt
recvfrom

d3d8

Direct3DCreate8

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 628KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 220KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 284KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Chicken Invaders 5/DAMNNFOViewer.msi
.msi
Chicken Invaders 5/RAZZLOCITY.nfo
Chicken Invaders 5/Start_Game.bat
Chicken Invaders 5/Uninstall/IRIMG1.JPG
.jpg
Chicken Invaders 5/Uninstall/IRIMG2.JPG
.jpg
Chicken Invaders 5/Uninstall/IRIMG3.JPG
.jpg
Chicken Invaders 5/Uninstall/uninstall.dat
Chicken Invaders 5/Uninstall/uninstall.xml
.xml
Chicken Invaders 5/VELOCITY.NFO
Chicken Invaders 5/bass.dll
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

BASS_Apply3D
BASS_ChannelBytes2Seconds
BASS_ChannelFlags
BASS_ChannelGet3DAttributes
BASS_ChannelGet3DPosition
BASS_ChannelGetAttribute
BASS_ChannelGetData
BASS_ChannelGetDevice
BASS_ChannelGetInfo
BASS_ChannelGetLength
BASS_ChannelGetLevel
BASS_ChannelGetPosition
BASS_ChannelGetTags
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelLock
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelRemoveDSP
BASS_ChannelRemoveFX
BASS_ChannelRemoveLink
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSet3DAttributes
BASS_ChannelSet3DPosition
BASS_ChannelSetAttribute
BASS_ChannelSetDSP
BASS_ChannelSetDevice
BASS_ChannelSetFX
BASS_ChannelSetLink
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttribute
BASS_ChannelStop
BASS_ChannelUpdate
BASS_ErrorGetCode
BASS_FXGetParameters
BASS_FXReset
BASS_FXSetParameters
BASS_Free
BASS_Get3DFactors
BASS_Get3DPosition
BASS_GetCPU
BASS_GetConfig
BASS_GetConfigPtr
BASS_GetDSoundObject
BASS_GetDevice
BASS_GetDeviceInfo
BASS_GetEAXParameters
BASS_GetInfo
BASS_GetVersion
BASS_GetVolume
BASS_Init
BASS_MusicFree
BASS_MusicLoad
BASS_Pause
BASS_PluginFree
BASS_PluginGetInfo
BASS_PluginLoad
BASS_RecordFree
BASS_RecordGetDevice
BASS_RecordGetDeviceInfo
BASS_RecordGetInfo
BASS_RecordGetInput
BASS_RecordGetInputName
BASS_RecordInit
BASS_RecordSetDevice
BASS_RecordSetInput
BASS_RecordStart
BASS_SampleCreate
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleGetChannels
BASS_SampleGetData
BASS_SampleGetInfo
BASS_SampleLoad
BASS_SampleSetData
BASS_SampleSetInfo
BASS_SampleStop
BASS_Set3DFactors
BASS_Set3DPosition
BASS_SetConfig
BASS_SetConfigPtr
BASS_SetDevice
BASS_SetEAXParameters
BASS_SetVolume
BASS_Start
BASS_Stop
BASS_StreamCreate
BASS_StreamCreateFile
BASS_StreamCreateFileUser
BASS_StreamCreateURL
BASS_StreamFree
BASS_StreamGetFilePosition
BASS_StreamPutData
BASS_StreamPutFileData
BASS_Update
_

Sections

Size: 100KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 576B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Chicken Invaders 5/branding/Thumbs.db
Chicken Invaders 5/d3dx9.dll
Chicken Invaders 5/lua5.1.dll
.dll windows:5 windows x86 arch:x86

15d95afb470c5f82193b2d9e98fc96d1

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

10/05/2010, 00:00

Not After

10/05/2015, 23:59

Subject

CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

73:6f:48:4c:38:26:9b:f8:c4:42:73:1c:1f:ac:a3:ed
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

01/03/2011, 00:00

Not After

28/02/2014, 23:59

Subject

CN=Indigo Rose Software Design Corporation,O=Indigo Rose Software Design Corporation,POSTALCODE=R3B 0R3,STREET=123 Bannatyne Ave Suite 200,L=Winnipeg,ST=MB,C=CA

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

38:ba:89:a0:dd:2b:23:e0:d6:64:59:bf:8e:01:f3:2f:61:d2:b6:ac
Signer

Actual PE Digest

38:ba:89:a0:dd:2b:23:e0:d6:64:59:bf:8e:01:f3:2f:61:d2:b6:ac

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
FormatMessageA
GetLastError
FreeLibrary
LoadLibraryA
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
HeapAlloc
HeapFree
GetModuleHandleW
Sleep
ExitProcess
RtlUnwind
CloseHandle
CreateProcessA
DuplicateHandle
GetCurrentProcess
GetSystemTimeAsFileTime
DeleteFileA
MoveFileA
GetTimeFormatA
GetDateFormatA
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
GetCommandLineA
GetModuleHandleA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
MultiByteToWideChar
ReadFile
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteFile
InitializeCriticalSectionAndSpinCount
GetFileAttributesA
CreatePipe
GetExitCodeProcess
WaitForSingleObject
GetCurrentProcessId
CreateFileA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetFilePointer
FlushFileBuffers
RaiseException
GetTimeZoneInformation
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
SetStdHandle
HeapSize
GetLocaleInfoW
SetEndOfFile
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA

Exports

Exports

luaD_growstack
luaF_newproto
luaL_addlstring
luaL_addstring
luaL_addvalue
luaL_argerror
luaL_buffinit
luaL_callmeta
luaL_checkany
luaL_checkinteger
luaL_checklstring
luaL_checknumber
luaL_checkoption
luaL_checkstack
luaL_checktype
luaL_checkudata
luaL_error
luaL_findtable
luaL_getmetafield
luaL_gsub
luaL_loadbuffer
luaL_loadfile
luaL_loadstring
luaL_newmetatable
luaL_newstate
luaL_openlib
luaL_openlibs
luaL_optinteger
luaL_optlstring
luaL_optnumber
luaL_prepbuffer
luaL_pushresult
luaL_ref
luaL_register
luaL_typerror
luaL_unref
luaL_where
luaM_realloc_
luaM_toobig
luaS_newlstr
luaU_dump
lua_atpanic
lua_call
lua_checkstack
lua_close
lua_concat
lua_cpcall
lua_createtable
lua_dump
lua_equal
lua_error
lua_gc
lua_getallocf
lua_getfenv
lua_getfield
lua_gethook
lua_gethookcount
lua_gethookmask
lua_getinfo
lua_getlocal
lua_getmetatable
lua_getstack
lua_gettable
lua_gettop
lua_getupvalue
lua_insert
lua_iscfunction
lua_isnumber
lua_isstring
lua_isuserdata
lua_lessthan
lua_load
lua_newstate
lua_newthread
lua_newuserdata
lua_next
lua_objlen
lua_pcall
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushinteger
lua_pushlightuserdata
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushthread
lua_pushvalue
lua_pushvfstring
lua_rawequal
lua_rawget
lua_rawgeti
lua_rawset
lua_rawseti
lua_remove
lua_replace
lua_resume
lua_setallocf
lua_setfenv
lua_setfield
lua_sethook
lua_setlocal
lua_setmetatable
lua_settable
lua_settop
lua_setupvalue
lua_status
lua_toboolean
lua_tocfunction
lua_tointeger
lua_tolstring
lua_tonumber
lua_topointer
lua_tothread
lua_touserdata
lua_type
lua_typename
lua_xmove
lua_yield
luaopen_base
luaopen_debug
luaopen_io
luaopen_math
luaopen_os
luaopen_package
luaopen_string
luaopen_table

Sections

.text
Size: 223KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Chicken Invaders 5/monster-turquoise.ico
Chicken Invaders 5/uninstall.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 2.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
out.upx
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 684KB - Virtual size: 684KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e8e96a8d722cf47f1846dee4f7c52554

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

bass

dinput8

gdi32

kernel32

shell32

wininet

winmm

wsock32

ws2_32

d3d8

Sections

.text Size: 3.3MB - Virtual size: 3.3MB

.rdata Size: 628KB - Virtual size: 628KB

.data Size: 32KB - Virtual size: 92KB

.data1 Size: 4KB - Virtual size: 288KB

.reloc Size: 220KB - Virtual size: 284KB

.rsrc Size: 284KB - Virtual size: 280KB

Headers

File Characteristics

Exports

Exports

Sections

Size: 100KB - Virtual size: 288KB

.rsrc Size: 576B - Virtual size: 4KB

Size: - Virtual size: 8KB

Size: 4KB - Virtual size: 3KB

15d95afb470c5f82193b2d9e98fc96d1

Code Sign

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:beCertificate

Extended Key Usages

Key Usages

73:6f:48:4c:38:26:9b:f8:c4:42:73:1c:1f:ac:a3:edCertificate

Extended Key Usages

Key Usages

38:ba:89:a0:dd:2b:23:e0:d6:64:59:bf:8e:01:f3:2f:61:d2:b6:acSigner

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 223KB - Virtual size: 222KB

.rdata Size: 74KB - Virtual size: 73KB

.data Size: 6KB - Virtual size: 13KB

.reloc Size: 10KB - Virtual size: 9KB

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 2.6MB

UPX1 Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 32KB - Virtual size: 32KB

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 684KB - Virtual size: 684KB

.data Size: 49KB - Virtual size: 154KB

.rsrc Size: 134KB - Virtual size: 134KB

.reloc Size: 289KB - Virtual size: 288KB

.text
Size: 3.3MB - Virtual size: 3.3MB

.rdata
Size: 628KB - Virtual size: 628KB

.data
Size: 32KB - Virtual size: 92KB

.data1
Size: 4KB - Virtual size: 288KB

.reloc
Size: 220KB - Virtual size: 284KB

.rsrc
Size: 284KB - Virtual size: 280KB

.rsrc
Size: 576B - Virtual size: 4KB

47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Certificate

73:6f:48:4c:38:26:9b:f8:c4:42:73:1c:1f:ac:a3:ed
Certificate

38:ba:89:a0:dd:2b:23:e0:d6:64:59:bf:8e:01:f3:2f:61:d2:b6:ac
Signer

.text
Size: 223KB - Virtual size: 222KB

.rdata
Size: 74KB - Virtual size: 73KB

.data
Size: 6KB - Virtual size: 13KB

.reloc
Size: 10KB - Virtual size: 9KB

UPX0
Size: - Virtual size: 2.6MB

UPX1
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 32KB - Virtual size: 32KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 684KB - Virtual size: 684KB

.data
Size: 49KB - Virtual size: 154KB

.rsrc
Size: 134KB - Virtual size: 134KB

.reloc
Size: 289KB - Virtual size: 288KB