48af1904a323cb3f1caef69fdf08e9fac0047178578ad5999f3854d372f918ccN

Sharing

Copy URL Twitter E-mail

General

Target

48af1904a323cb3f1caef69fdf08e9fac0047178578ad5999f3854d372f918ccN
Size

3.1MB
MD5

31d994ee56a835bbaee3c4e766f10e50
SHA1

5f746be1c99ec0a77ef6a60983fec176ee9a1438
SHA256

48af1904a323cb3f1caef69fdf08e9fac0047178578ad5999f3854d372f918cc
SHA512

4bc77808c964eb9e2d54766c1731754ee625cdea80b614e9bd6f155a81d96c4982ca3033fb0f4d51c2ea38181200e1e0ada2cfdad2a32037d61220d218a548d7
SSDEEP

49152:+Jx1oP0FTk4EVeVJowmxhCLDJCRp3Bk0pIi5S+dCKtV3FIifOiDG7Joabu1Mg8y9:AVhoa61VQq

Score

1^/10

Malware Config

Signatures

Files

48af1904a323cb3f1caef69fdf08e9fac0047178578ad5999f3854d372f918ccN
.dll windows:6 windows x64 arch:x64

8f3c8d3cc1c2188537440ca755a42087

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15/12/2020, 21:31

Not After

02/12/2021, 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:10

Not After

31/01/2024, 20:10

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

a5:aa:f7:8a:98:07:b3:3a:92:11:4e:89:32:f8:0f:92:e1:38:ef:da:f9:53:7b:24:a4:00:d6:7e:e3:ee:c6:03
Signer

Actual PE Digest

a5:aa:f7:8a:98:07:b3:3a:92:11:4e:89:32:f8:0f:92:e1:38:ef:da:f9:53:7b:24:a4:00:d6:7e:e3:ee:c6:03

Digest Algorithm

sha256

PE Digest Matches

true

a5:aa:f7:8a:98:07:b3:3a:92:11:4e:89:32:f8:0f:92:e1:38:ef:da:f9:53:7b:24:a4:00:d6:7e:e3:ee:c6:03
Signer

Actual PE Digest

a5:aa:f7:8a:98:07:b3:3a:92:11:4e:89:32:f8:0f:92:e1:38:ef:da:f9:53:7b:24:a4:00:d6:7e:e3:ee:c6:03

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

D:\a\1\s\bins\release\amd64\protection\mip_protection_sdk.pdb

Imports

rpcrt4

UuidCreate

msvcp140

_Cnd_timedwait
_Cnd_broadcast
?_Throw_Cpp_error@std@@YAXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
_Thrd_start
_Thrd_detach
_Mtx_init
_Mtx_destroy
_Cnd_init
_Cnd_destroy
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
_Thrd_join
_Thrd_id
_Cnd_destroy_in_situ
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
_Cnd_init_in_situ
??0codecvt_base@std@@QEAA@_K@Z
??1codecvt_base@std@@UEAA@XZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?do_encoding@codecvt_base@std@@MEBAHXZ
?do_max_length@codecvt_base@std@@MEBAHXZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?_Syserror_map@std@@YAPEBDH@Z
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?exceptions@ios_base@std@@QEAAXH@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
_Mtx_current_owns
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
_Xtime_get_ticks
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?_Xbad_function_call@std@@YAXXZ
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
_Cnd_wait
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z

kernel32

InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
MultiByteToWideChar
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
Sleep
CreateMutexA
WaitForSingleObject
ReleaseMutex
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
LoadLibraryExA
GetProcAddress
FreeLibrary
VirtualQuery
VirtualProtect
GetSystemInfo
GetModuleHandleW
GetModuleFileNameA
GetVersion
GetCurrentProcessId
GetLastError
GetCurrentThreadId
RaiseException
QueryPerformanceCounter
GetSystemTimeAsFileTime

vcruntime140

_purecall
__std_terminate
memcmp
memcpy
memmove
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
memset
memchr
__C_specific_handler
strchr
__std_type_info_destroy_list

Exports

Exports

?Create@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBUApplicationInfo@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NAEBV?$shared_ptr@VLoggerDelegate@mipns@@@4@AEBV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@@Z
?CreateDelegationLicenseSettings@DelegationLicenseSettings@mipns@@SA?AV?$shared_ptr@VDelegationLicenseSettings@mipns@@@std@@AEBVPublishingLicenseInfo@2@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@4@_N@Z
?CreateFromProtectionDescriptor@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@AEBVProtectionDescriptor@2@@Z
?CreateFromTemplate@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?CreateFromUserRights@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@AEBV?$vector@VUserRights@mipns@@V?$allocator@VUserRights@mipns@@@std@@@4@@Z
?CreateFromUserRoles@ProtectionDescriptorBuilder@mipns@@SA?AV?$shared_ptr@VProtectionDescriptorBuilder@mipns@@@std@@AEBV?$vector@VUserRoles@mipns@@V?$allocator@VUserRoles@mipns@@@std@@@4@@Z
?CreateStreamFromBuffer@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@PEAE_J@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_iostream@DU?$char_traits@D@std@@@std@@@3@@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_istream@DU?$char_traits@D@std@@@std@@@3@@Z
?CreateStreamFromStdStream@mipns@@YA?AV?$shared_ptr@VStream@mipns@@@std@@AEBV?$shared_ptr@V?$basic_ostream@DU?$char_traits@D@std@@@std@@@3@@Z
?CreateWithCustomFeatureSettings@MipContext@mipns@@SA?AV?$shared_ptr@VMipContext@mipns@@@std@@AEBUApplicationInfo@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@W4LogLevel@2@_NAEBV?$shared_ptr@VLoggerDelegate@mipns@@@4@AEBV?$shared_ptr@UDiagnosticConfiguration@mipns@@@4@AEBV?$map@W4FlightingFeature@mipns@@_NU?$less@W4FlightingFeature@mipns@@@std@@V?$allocator@U?$pair@$$CBW4FlightingFeature@mipns@@_N@std@@@4@@4@@Z
?GetBlockSize@CustomProtectedStream@mipns@@SA_JV?$shared_ptr@VProtectionHandler@mipns@@@std@@@Z
?GetMsftCert@mipns@@YAAEBV?$vector@EV?$allocator@E@std@@@std@@XZ
?GetMsftCertPEM@mipns@@YAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetPublishingLicenseInfo@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VPublishingLicenseInfo@mipns@@@std@@AEBV?$vector@EV?$allocator@E@std@@@4@@Z
?GetVersion@ProtectionProfile@mipns@@SAPEBDXZ
?Load@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VProtectionProfile@mipns@@@std@@AEBVSettings@12@@Z
?LoadAsync@ProtectionProfile@mipns@@SA?AV?$shared_ptr@VAsyncControl@mipns@@@std@@AEBVSettings@12@AEBV?$shared_ptr@X@4@@Z
MIP_CC_CreateDictionary
MIP_CC_CreateHttpDelegate
MIP_CC_CreateLoggerDelegate
MIP_CC_CreateMipContext
MIP_CC_CreateMipContextWithCustomFeatureSettings
MIP_CC_CreateProtectionDescriptorFromTemplate
MIP_CC_CreateProtectionDescriptorFromUserRights
MIP_CC_CreateProtectionDescriptorFromUserRoles
MIP_CC_CreateProtectionEngineSettingsWithEngineId
MIP_CC_CreateProtectionEngineSettingsWithEngineIdAndAuthCallback
MIP_CC_CreateProtectionEngineSettingsWithIdentity
MIP_CC_CreateProtectionEngineSettingsWithIdentityAndAuthCallback
MIP_CC_CreateProtectionHandlerConsumptionSettings
MIP_CC_CreateProtectionHandlerConsumptionSettingsWithPreLicense
MIP_CC_CreateProtectionHandlerPublishingSettings
MIP_CC_CreateProtectionProfileSettings
MIP_CC_CreateStringList
MIP_CC_CreateTaskDispatcherDelegate
MIP_CC_CreateTelemetryConfiguration
MIP_CC_Dictionary_GetEntries
MIP_CC_ExecuteDispatchedTask
MIP_CC_LoadProtectionProfile
MIP_CC_NotifyHttpDelegateResponse
MIP_CC_ProtectionDescriptor_DoesAllowOfflineAccess
MIP_CC_ProtectionDescriptor_DoesContentExpire
MIP_CC_ProtectionDescriptor_GetContentId
MIP_CC_ProtectionDescriptor_GetContentValidUntil
MIP_CC_ProtectionDescriptor_GetDescription
MIP_CC_ProtectionDescriptor_GetDescriptionSize
MIP_CC_ProtectionDescriptor_GetDoubleKeyUrl
MIP_CC_ProtectionDescriptor_GetDoubleKeyUrlSize
MIP_CC_ProtectionDescriptor_GetLabelId
MIP_CC_ProtectionDescriptor_GetName
MIP_CC_ProtectionDescriptor_GetNameSize
MIP_CC_ProtectionDescriptor_GetOwner
MIP_CC_ProtectionDescriptor_GetOwnerSize
MIP_CC_ProtectionDescriptor_GetProtectionType
MIP_CC_ProtectionDescriptor_GetReferrer
MIP_CC_ProtectionDescriptor_GetReferrerSize
MIP_CC_ProtectionDescriptor_GetTemplateId
MIP_CC_ProtectionEngineSettings_SetAllowCloudServiceOnly
MIP_CC_ProtectionEngineSettings_SetClientData
MIP_CC_ProtectionEngineSettings_SetCloud
MIP_CC_ProtectionEngineSettings_SetCloudEndpointBaseUrl
MIP_CC_ProtectionEngineSettings_SetCustomSettings
MIP_CC_ProtectionEngineSettings_SetSessionId
MIP_CC_ProtectionEngineSettings_SetUnderlyingApplicationId
MIP_CC_ProtectionEngine_CreateProtectionHandlerForConsumption
MIP_CC_ProtectionEngine_CreateProtectionHandlerForPublishing
MIP_CC_ProtectionEngine_GetClientData
MIP_CC_ProtectionEngine_GetClientDataSize
MIP_CC_ProtectionEngine_GetEngineId
MIP_CC_ProtectionEngine_GetEngineIdSize
MIP_CC_ProtectionEngine_GetRightsForLabelId
MIP_CC_ProtectionEngine_GetTemplates
MIP_CC_ProtectionEngine_GetTemplatesSize
MIP_CC_ProtectionHandlerConsumptionSettings_SetDelegatedUserEmail
MIP_CC_ProtectionHandlerConsumptionSettings_SetIsOfflineOnly
MIP_CC_ProtectionHandlerPublishingSettings_SetDelegatedUserEmail
MIP_CC_ProtectionHandlerPublishingSettings_SetIsAuditedExtractionAllowed
MIP_CC_ProtectionHandlerPublishingSettings_SetIsDeprecatedAlgorithmPreferred
MIP_CC_ProtectionHandlerPublishingSettings_SetIsPublishingFormatJson
MIP_CC_ProtectionHandlerPublishingSettings_SetPreLicenseUserEmail
MIP_CC_ProtectionHandler_DecryptBuffer
MIP_CC_ProtectionHandler_DoesUseDeprecatedAlgorithm
MIP_CC_ProtectionHandler_EncryptBuffer
MIP_CC_ProtectionHandler_GetBlockSize
MIP_CC_ProtectionHandler_GetCipherMode
MIP_CC_ProtectionHandler_GetContentId
MIP_CC_ProtectionHandler_GetIssuedUser
MIP_CC_ProtectionHandler_GetIssuedUserSize
MIP_CC_ProtectionHandler_GetOwner
MIP_CC_ProtectionHandler_GetOwnerSize
MIP_CC_ProtectionHandler_GetProtectedContentSize
MIP_CC_ProtectionHandler_GetProtectionDescriptor
MIP_CC_ProtectionHandler_GetRights
MIP_CC_ProtectionHandler_GetSerializedPreLicense
MIP_CC_ProtectionHandler_GetSerializedPreLicenseSize
MIP_CC_ProtectionHandler_GetSerializedPublishingLicense
MIP_CC_ProtectionHandler_GetSerializedPublishingLicenseSize
MIP_CC_ProtectionProfileSettings_SetCanCacheLicenses
MIP_CC_ProtectionProfileSettings_SetCustomSettings
MIP_CC_ProtectionProfileSettings_SetHttpDelegate
MIP_CC_ProtectionProfileSettings_SetSessionId
MIP_CC_ProtectionProfileSettings_SetTaskDispatcherDelegate
MIP_CC_ProtectionProfile_AddEngine
MIP_CC_ReleaseDictionary
MIP_CC_ReleaseHttpDelegate
MIP_CC_ReleaseLoggerDelegate
MIP_CC_ReleaseMipContext
MIP_CC_ReleaseProtectionDescriptor
MIP_CC_ReleaseProtectionEngine
MIP_CC_ReleaseProtectionEngineSettings
MIP_CC_ReleaseProtectionHandler
MIP_CC_ReleaseProtectionHandlerConsumptionSettings
MIP_CC_ReleaseProtectionHandlerPublishingSettings
MIP_CC_ReleaseProtectionProfile
MIP_CC_ReleaseProtectionProfileSettings
MIP_CC_ReleaseStringList
MIP_CC_ReleaseTaskDispatcherDelegate
MIP_CC_ReleaseTelemetryConfiguration
MIP_CC_ReleaseTemplateDescriptor
MIP_CC_StringList_GetStrings
MIP_CC_TelemetryConfiguration_AddMaskedProperty
MIP_CC_TelemetryConfiguration_SetCustomSettings
MIP_CC_TelemetryConfiguration_SetHostName
MIP_CC_TelemetryConfiguration_SetHttpDelegate
MIP_CC_TelemetryConfiguration_SetIsFastShutdownEnabled
MIP_CC_TelemetryConfiguration_SetIsLocalCachingEnabled
MIP_CC_TelemetryConfiguration_SetIsNetworkDetectionEnabled
MIP_CC_TelemetryConfiguration_SetIsTelemetryOptedOut
MIP_CC_TelemetryConfiguration_SetIsTraceLoggingEnabled
MIP_CC_TelemetryConfiguration_SetLibraryName
MIP_CC_TelemetryConfiguration_SetTaskDispatcherDelegate
MIP_CC_TemplateDescriptor_GetDescription
MIP_CC_TemplateDescriptor_GetDescriptionSize
MIP_CC_TemplateDescriptor_GetId
MIP_CC_TemplateDescriptor_GetName
MIP_CC_TemplateDescriptor_GetNameSize

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 550KB - Virtual size: 549KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 180KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f3c8d3cc1c2188537440ca755a42087

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:dfCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3eCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

a5:aa:f7:8a:98:07:b3:3a:92:11:4e:89:32:f8:0f:92:e1:38:ef:da:f9:53:7b:24:a4:00:d6:7e:e3:ee:c6:03Signer

a5:aa:f7:8a:98:07:b3:3a:92:11:4e:89:32:f8:0f:92:e1:38:ef:da:f9:53:7b:24:a4:00:d6:7e:e3:ee:c6:03Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

rpcrt4

msvcp140

kernel32

vcruntime140

Exports

Exports

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 550KB - Virtual size: 549KB

.data Size: 180KB - Virtual size: 188KB

.pdata Size: 78KB - Virtual size: 78KB

.didat Size: 1024B - Virtual size: 1000B

.rsrc Size: 1024B - Virtual size: 856B

.reloc Size: 8KB - Virtual size: 8KB

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

33:00:00:03:3e:63:3a:86:bf:41:73:d7:e0:00:00:00:00:03:3e
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

a5:aa:f7:8a:98:07:b3:3a:92:11:4e:89:32:f8:0f:92:e1:38:ef:da:f9:53:7b:24:a4:00:d6:7e:e3:ee:c6:03
Signer

a5:aa:f7:8a:98:07:b3:3a:92:11:4e:89:32:f8:0f:92:e1:38:ef:da:f9:53:7b:24:a4:00:d6:7e:e3:ee:c6:03
Signer

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 550KB - Virtual size: 549KB

.data
Size: 180KB - Virtual size: 188KB

.pdata
Size: 78KB - Virtual size: 78KB

.didat
Size: 1024B - Virtual size: 1000B

.rsrc
Size: 1024B - Virtual size: 856B

.reloc
Size: 8KB - Virtual size: 8KB