hijackloader | 2024-10-26_d5c8e02ae89291f7124be813136aafeb_magniber

Sharing

Copy URL

Twitter E-mail

General

Target

2024-10-26_d5c8e02ae89291f7124be813136aafeb_magniber
Size

13.0MB
MD5

d5c8e02ae89291f7124be813136aafeb
SHA1

01c7c9edab95208062cb018fda5ac2bf0483bdef
SHA256

29dd77f0013ecbb29bd195d3b35b41d8e684e9044aff886373babf5b8f70fc9b
SHA512

be18a14f6d2615ae25640e52e961986810d0c135db3a27dfbf894dd78b5d34583eded9d90f9f26d322143860ce3bd597054c122126c9b2d39e73bc24a0df9a55
SSDEEP

196608:7ppYohz43D+vplN8OrfaV+1PbmKaqPQw0uLEW1:7ppYYz43DcC8VbiqIw0uIW1

Score

10^/10

hijackloader

Malware Config

Signatures

Detects HijackLoader (aka IDAT Loader) 1 IoCs

resource	yara_rule
sample	family_hijackloader

Hijackloader family
hijackloader

Files

2024-10-26_d5c8e02ae89291f7124be813136aafeb_magniber
.exe windows:5 windows x86 arch:x86

287e83fa50025b928249f87df934bbf2

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-05-2021 00:00

Not After

31-12-2028 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

10:1f:3e:54:c0:2f:72:13:50:0f:71:6c:53:e3:02:bf
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

18-10-2022 00:00

Not After

17-10-2025 23:59

Subject

CN=Gammadyne Corporation,O=Gammadyne Corporation,ST=Kansas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25-05-2021 00:00

Not After

31-12-2028 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22-03-2021 00:00

Not After

21-03-2036 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

10:1f:3e:54:c0:2f:72:13:50:0f:71:6c:53:e3:02:bf
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

18-10-2022 00:00

Not After

17-10-2025 23:59

Subject

CN=Gammadyne Corporation,O=Gammadyne Corporation,ST=Kansas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03-05-2023 00:00

Not After

02-08-2034 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02-05-2019 00:00

Not After

18-01-2038 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bf:a8:41:48:20:15:e9:c7:5e:76:25:8e:39:b3:f8:2c:56:39:cf:47:48:c6:86:90:45:67:1c:3f:9d:c8:0c:5d
Signer

Actual PE Digest

bf:a8:41:48:20:15:e9:c7:5e:76:25:8e:39:b3:f8:2c:56:39:cf:47:48:c6:86:90:45:67:1c:3f:9d:c8:0c:5d

Digest Algorithm

sha256

PE Digest Matches

false

fa:0a:98:07:98:a4:1c:61:5a:23:94:62:db:b0:39:3d:31:d3:b1:de
Signer

Actual PE Digest

fa:0a:98:07:98:a4:1c:61:5a:23:94:62:db:b0:39:3d:31:d3:b1:de

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAddAtomA
GlobalAddAtomW
GlobalGetAtomNameA
GlobalGetAtomNameW
FormatMessageA
SwitchToThread
GlobalDeleteAtom
GetPriorityClass
SetPriorityClass
CreateSemaphoreA
ReleaseSemaphore
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
ResumeThread
TerminateThread
ExitThread
GetThreadPriority
SetThreadPriority
GetCurrentThreadId
WriteConsoleW
GetFullPathNameW
SetStdHandle
OpenProcess
GetCPInfo
FindNextFileA
FindFirstFileExA
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetConsoleCP
HeapAlloc
HeapReAlloc
GetStringTypeW
HeapFree
SetFilePointerEx
FindFirstFileExW
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
SetConsoleCtrlHandler
FreeLibraryAndExitThread
CreateThread
HeapCompact
EncodePointer
RtlUnwind
InterlockedPushEntrySList
OutputDebugStringW
DeleteFileA
GetTempFileNameA
GetTempPathA
InterlockedExchange
GetFileSizeEx
DebugBreak
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
LoadLibraryW
ConvertThreadToFiber
ConvertFiberToThread
GetFileType
GetStdHandle
CreateFiberEx
DeleteFiber
SwitchToFiber
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetModuleHandleExW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeSListHead
LocalAlloc
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
DecodePointer
GetUserDefaultLCID
GetThreadLocale
EnumDateFormatsW
EnumDateFormatsA
GetDateFormatW
GetDateFormatA
GetTimeFormatW
GetTimeFormatA
GetLocaleInfoW
GetLocaleInfoA
WideCharToMultiByte
MultiByteToWideChar
GetOEMCP
GetACP
IsValidCodePage
GetVersionExW
IsBadWritePtr
IsBadReadPtr
GetWindowsDirectoryW
GetWindowsDirectoryA
GetTempPathW
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
SetEnvironmentVariableA
GetEnvironmentVariableW
GetCommandLineW
GetCommandLineA
CreateProcessW
FormatMessageW
GetTickCount
Sleep
WaitForSingleObject
SetLastError
GetLastError
GetCurrentThread
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetExitCodeProcess
TerminateProcess
ExitProcess
GetCurrentProcessId
GetCurrentProcess
GetProcessHeap
HeapSize
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
MoveFileW
CopyFileW
FindNextFileW
FindFirstFileW
DeleteFileW
GetFileAttributesW
SetFileAttributesW
CreateFileA
RemoveDirectoryW
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetTempFileNameW
ReadFile
GetDriveTypeA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
SetFileTime
FindClose
SetFilePointer
SetEndOfFile
FlushFileBuffers
WriteFile
GetFileInformationByHandle
UnlockFile
GetLongPathNameW
GetShortPathNameW
SetUnhandledExceptionFilter
RaiseException
RtlCaptureContext
GetSystemDirectoryW
GetSystemDirectoryA
FindResourceA
GetModuleFileNameW
GetModuleFileNameA
LoadLibraryExW
LoadLibraryExA
SizeofResource
LoadResource
GetProcAddress
FreeLibrary
LockResource
FileTimeToSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
GetLocalTime
GetSystemTime
CompareStringW
VirtualFree
VirtualAlloc
InterlockedDecrement
InterlockedIncrement
CreateFileW
GetModuleHandleA
LoadLibraryA
MulDiv
CloseHandle
MoveFileExW

user32

GetClassNameW
FindWindowExA
FindWindowW
FindWindowA
GetDesktopWindow
GetClassLongA
SetWindowLongA
GetWindowLongA
FillRect
SetSysColors
WindowFromPoint
EnumChildWindows
EnumWindows
SendMessageA
CallWindowProcW
CreateWindowExA
MessageBoxW
GetParent
GetSysColor
ClientToScreen
GetCaretPos
SetCaretPos
ShowCaret
HideCaret
DestroyCaret
CreateCaret
GetCursorPos
SetCursor
GetWindowRect
GetClientRect
GetWindowTextLengthW
GetWindowTextLengthA
GetWindowTextW
GetWindowTextA
SetWindowTextW
InvalidateRect
GetWindowRgn
SetWindowRgn
CreateIcon
DestroyIcon
CopyImage
MapDialogRect
SystemParametersInfoA
RegisterClassA
RegisterClassW
GetLastActivePopup
PostMessageA
MessageBoxA
CallNextHookEx
EndDialog
SetParent
SetWindowTextA
PostQuitMessage
SetTimer
KillTimer
GetSystemMetrics
CharNextW
GetClassInfoA
GetClassInfoW
CreateWindowExW
DialogBoxParamA
VkKeyScanA
BeginPaint
EndPaint
RegisterWindowMessageA
GetUserObjectInformationW
GetProcessWindowStation
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageA
PeekMessageW
GetMessageTime
DefWindowProcA
DefWindowProcW
DestroyWindow
ShowWindow
MoveWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
IsWindowVisible
IsIconic
IsZoomed
GetDlgItem
SetDlgItemTextW
SendDlgItemMessageA
WinHelpA
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
LoadCursorA
GetWindowThreadProcessId
LoadIconA
RegisterClipboardFormatA
EnumClipboardFormats
GetClipboardFormatNameA
EmptyClipboard
IsClipboardFormatAvailable
SetFocus
GetActiveWindow
GetFocus
GetKeyState
GetAsyncKeyState
keybd_event
GetCapture
SetCapture
ReleaseCapture
IsWindowUnicode
EnableWindow
GetSystemMenu
CreateMenu
CreatePopupMenu
DestroyMenu
EnableMenuItem
AppendMenuA
TrackPopupMenu
UpdateWindow
SetActiveWindow
GetForegroundWindow
SetForegroundWindow
GetDC
GetDCEx
GetWindowDC
ReleaseDC
SetWindowsHookExA
UnhookWindowsHookEx
DrawIconEx
SetDlgItemTextA

gdi32

CreateEllipticRgnIndirect
CreateDIBPatternBrushPt
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CombineRgn
BitBlt
TranslateCharsetInfo
GetPixel
GetDIBits
AbortDoc
EndPage
StartPage
EndDoc
StartDocA
GetDeviceCaps
GdiAlphaBlend
GetTextMetricsA
CreateDIBSection
BeginPath
EndPath
StrokeAndFillPath
GetObjectA
CreateFontIndirectA
TextOutA
TextOutW
ExtTextOutA
ExtTextOutW
SetBrushOrgEx
Arc
CreatePen
CreatePenIndirect
Ellipse
ExcludeClipRect
FillRgn
GetCharWidthA
GetCharABCWidthsA
GetWindowOrgEx
IntersectClipRect
RectVisible
ResetDCW
SetPixelV
StretchBlt
StartDocW
ExtCreatePen
CreatePolygonRgn
Polygon
SetViewportExtEx
SetWindowExtEx
SetWindowOrgEx
GetKerningPairsW
CreateFontW
CreateHatchBrush
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
EnumFontFamiliesExW
EnumFontFamiliesW
EqualRgn
FrameRgn
GetBkMode
GetClipBox
GetClipRgn
GetCurrentObject
GetMapMode
SetTextJustification
GetTextColor
GetTextExtentPoint32A
GetTextExtentPoint32W
GetViewportExtEx
GetWindowExtEx
LineTo
OffsetRgn
PatBlt
Rectangle
SelectClipRgn
ExtSelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetDIBits
SetMapMode
StretchDIBits
SetStretchBltMode
SetTextColor
SetTextAlign
MoveToEx

comdlg32

GetSaveFileNameW
GetOpenFileNameW
PrintDlgW
PrintDlgA

advapi32

GetUserNameW
RegEnumKeyA
RegCloseKey
RegCreateKeyExW
CryptGenRandom
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegDeleteValueA

shell32

ShellExecuteExW
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
Shell_NotifyIconW
Shell_NotifyIconA
ShellExecuteA
SHFileOperationW
ShellExecuteW

ole32

CoCreateGuid
StringFromGUID2
CoCreateInstance
OleInitialize
CoTaskMemFree
RegisterDragDrop
RevokeDragDrop
ReleaseStgMedium
DoDragDrop
CreateStreamOnHGlobal
OleUninitialize

gdiplus

GdipDrawBeziersI
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipFree
GdipAlloc
GdipFillEllipseI
GdipDrawLinesI
GdipDrawLineI
GdiplusShutdown
GdiplusStartup

winmm

PlaySoundW

shlwapi

PathIsRootW
PathCanonicalizeW

ws2_32

WSAStartup
getservbyname
gethostname
gethostbyname
gethostbyaddr
socket
shutdown
setsockopt
sendto
send
select
recvfrom
WSACleanup
ntohs
htons
getsockopt
getsockname
ioctlsocket
connect
closesocket
bind
__WSAFDIsSet
WSASetLastError
WSAGetLastError
WSAIoctl
htonl
inet_addr
inet_ntoa
getservbyport
ntohl
recv

mpr

WNetCloseEnum
WNetOpenEnumA
WNetEnumResourceA

crypt32

CertEnumCertificatesInStore
CertCloseStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore

Sections

.text
Size: 6.0MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.6MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 335KB - Virtual size: 335KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

287e83fa50025b928249f87df934bbf2

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

10:1f:3e:54:c0:2f:72:13:50:0f:71:6c:53:e3:02:bfCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

10:1f:3e:54:c0:2f:72:13:50:0f:71:6c:53:e3:02:bfCertificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

bf:a8:41:48:20:15:e9:c7:5e:76:25:8e:39:b3:f8:2c:56:39:cf:47:48:c6:86:90:45:67:1c:3f:9d:c8:0c:5dSigner

fa:0a:98:07:98:a4:1c:61:5a:23:94:62:db:b0:39:3d:31:d3:b1:deSigner

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

gdiplus

winmm

shlwapi

ws2_32

mpr

crypt32

Sections

.text Size: 6.0MB - Virtual size: 6.0MB

.rdata Size: 2.6MB - Virtual size: 2.6MB

.data Size: 1.6MB - Virtual size: 1.7MB

_RDATA Size: 4KB - Virtual size: 4KB

.rsrc Size: 2.4MB - Virtual size: 2.4MB

.reloc Size: 335KB - Virtual size: 335KB

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

10:1f:3e:54:c0:2f:72:13:50:0f:71:6c:53:e3:02:bf
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

10:1f:3e:54:c0:2f:72:13:50:0f:71:6c:53:e3:02:bf
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

bf:a8:41:48:20:15:e9:c7:5e:76:25:8e:39:b3:f8:2c:56:39:cf:47:48:c6:86:90:45:67:1c:3f:9d:c8:0c:5d
Signer

fa:0a:98:07:98:a4:1c:61:5a:23:94:62:db:b0:39:3d:31:d3:b1:de
Signer

.text
Size: 6.0MB - Virtual size: 6.0MB

.rdata
Size: 2.6MB - Virtual size: 2.6MB

.data
Size: 1.6MB - Virtual size: 1.7MB

_RDATA
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

.reloc
Size: 335KB - Virtual size: 335KB