JaffaCakes118_9e4ce12e22cb5f214591dd3c369f9eb114f21f956e3a5d099483935d426a4ac1
- SHA256 9e4ce12e22cb5f214591dd3c369f9eb114f21f956e3a5d099483935d426a4ac1
Password
infected
Overview
overview
10Static
static
1Readm.md/cef.js
windows7-x64
3Readm.md/cef.js
windows10-2004-x64
3Readm.md/c...ent.js
windows7-x64
3Readm.md/c...ent.js
windows10-2004-x64
3Readm.md/c...ent.js
windows7-x64
3Readm.md/c...ent.js
windows10-2004-x64
3Readm.md/c...lf.dll
windows7-x64
3Readm.md/c...lf.dll
windows10-2004-x64
3Readm.md/w...11.dll
windows7-x64
3Readm.md/w...11.dll
windows10-2004-x64
3lnstaIIer .x64.exe
windows7-x64
10lnstaIIer .x64.exe
windows10-2004-x64
10Static task
static1
Behavioral task
behavioral1
Sample
Readm.md/cef.js
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Readm.md/cef.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Readm.md/cef_100_percent.js
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
Readm.md/cef_100_percent.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
Readm.md/cef_200_percent.js
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
Readm.md/cef_200_percent.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
Readm.md/chrome_elf.dll
Resource
win7-20241010-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
Readm.md/chrome_elf.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
Readm.md/wow64/YandexDisk3ShellExt-1511.dll
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
Readm.md/wow64/YandexDisk3ShellExt-1511.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral11
Sample
lnstaIIer .x64.exe
Resource
win7-20240903-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral12
Sample
lnstaIIer .x64.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
7 signatures
150 seconds
General
- Target JaffaCakes118_9e4ce12e22cb5f214591dd3c369f9eb114f21f956e3a5d099483935d426a4ac1
- Size 9.1MB
- Sample241221-2rh3assmex
- SHA256 9e4ce12e22cb5f214591dd3c369f9eb114f21f956e3a5d099483935d426a4ac1
- MD5 e9f6c03b7923f50279956388a9161883
- SHA1 aab161d6dd34bed33275b2e798fc952142e469a4
- SHA512 3b51928aef92dd7d7395a1c0753217d16f74bab318b6c86351136022abf9e4f802940dddd94cc5248030e517adde07f797c625c159785db6ed9aebef15bf8cfd
- SSDEEP 196608:wkXgcWoYFn8zauXyz7chBRrIpq3yhhlgu0bEOzRgQSzfhCK9u3B:RgroYFn8zPbJeqiDeeQAhCAuR
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
JaffaCakes118_9e4ce12e22cb5f214591dd3c369f9eb114f21f956e3a5d099483935d426a4ac1.zip 9.1MB
-
65991a89e21d6573986ac22a8bf68b19c314db00f3fce9f609809d7a6a0f7eda.zip.zip 9.9MB
-
Readm.md/cef.pak.js 5.8MB
-
Readm.md/cef_100_percent.pak.js 271KB
-
Readm.md/cef_200_percent.pak.js 374KB
-
Readm.md/chrome_elf.dll.dll 433KB
-
Readm.md/locales/en-US.pak215KB
-
Readm.md/locales/ru.pak408KB
-
Readm.md/locales/tr.pak259KB
-
Readm.md/locales/uk.pak417KB
-
Readm.md/wow64/YandexDisk3ShellExt-1511.dll.dll 950KB
-
lnstaIIer .x64.exe.exe 721.0MB
65991a89e21d6573986ac22a8bf68b19c314db00f3fce9f609809d7a6a0f7eda.zip
- SHA256 65991a89e21d6573986ac22a8bf68b19c314db00f3fce9f609809d7a6a0f7eda
- MD5 85886b6af07e9cf70e8293ab01069ee8
- SHA1 ad61b8a93013bb44c2f6b0154ceca5a382024fba
- SHA512 8b1bc526dba0252101ee6d268a7085b50bfaf5eaefbef8f565ff9d58e39850db87f423e87729a4d7494b7dea02f0a9c905dee9dec78e0d01aee09574507c7278
- SSDEEP 196608:Q5VKJdy4aB9OK9STmtb8kjjjECilR3C0BoX3eK0mGwB6qTn4a6QVVWo+400Mi7:By46A/CRFsZC0SXuolnnTPj7
- MD5 SHA1 SHA512 SSDEEP
Readm.md/cef.pak
- SHA256 60ef7be6890f6615d891d9d0c8cd5c4627347fbc6b9d9f2c64afd72bfb2c8aee
- MD5 dee83c9b0a2e80605f66315dca8ab4ec
- SHA1 3cd5c60c537259232ff81e314f453cb2d1f3d836
- SHA512 34762449bdec0bc55e5b787b32c0e780da3c55e893ebb88f9458bdc577777e1a13f48e07511d4fe99bd9234e5bd1c06295a091f7583614d51f155e2d76885fda
- SSDEEP 49152:uAk3OQzYg/JTKxwYw25o2aoQUlhaX3ubjjwJbeuR3oSyPQolWhqwsX1I8GAau0BH:N/wr3uThqCE+yWywXpg
- MD5 SHA1 SHA512 SSDEEP
Readm.md/cef_100_percent.pak
- SHA256 08352285ef68bed4fe2d0638ace02beaeb588b7a4ba639fa63ff9c08783ac1d1
- MD5 11a8c10579ce2ec75214f5d54e4acae8
- SHA1 b5d2f8fabd25ee2ca97954ae19e73953fb16ae31
- SHA512 db48726d0f1af3b3623405d1e5e6d7f65cfacd14aa61b097d898c7feccf46f354bf313378c1ad1ba57480ad290af7aac33c4b35b774eb758437f490192a5a0b8
- SSDEEP 3072:8F1LmwL6usNjCjzkJsqpL88CRPp4kBMPck/bdpXTUPCnbOMl7t5SwOjWXxpKaX+N:Y1aI/UzfTmMbDl73SPShS1YZ8stk
- MD5 SHA1 SHA512 SSDEEP
Readm.md/cef_200_percent.pak
- SHA256 fcfd1fb942d1e7ad49448edf53f78824f8b35f6ee61bb578ffe4f76ae1460969
- MD5 7f06123fd09547a8337907fa85dbb4cb
- SHA1 40461dec4468db6a12756de55ff8f939c4c04036
- SHA512 8fa58d2f2c9378e8bcb83a5c2949488045ff7c70505f79d1b6d947b1482fc7cffee8582d2d1ba63695deae39c2b6036b5a6ba7c4620ef4b341a7633d0f2c3acd
- SSDEEP 6144:kI/ItF7fr5sHB6soHgs4jTl6bH3lSW9X3klLwodVvowoRa9QXJ:f/ItF7fyh6jgs4jTo3zHq3isa
- MD5 SHA1 SHA512 SSDEEP
Readm.md/chrome_elf.dll
- IMPHASH f6d05d1c47004cb047e7c4eb83a1fb23
- SHA256 9a5a2fa253aedf6a131cbd1d6c2e77c33ee116a245afa8319421de0dfe518303
- MD5 d0a014abef7e4b74e9f1ad2933a1bf12
- SHA1 5f895f244e88912f3d1d0602ee154b538701c0de
- SHA512 575fda7b8da29a40ca636eec9a3d08ce70a5cd59d5211476f3c126a8c81ae736df59c965dcca859bcff90b83240276daae4674194ff7437d7b984a670202ff8c
- SSDEEP 6144:mJMF2l7Xo4E9DSuCq8+UW543vs+5URaAUlS196jBimneQgwBxrFAOHV7GFTK0uQ5:mod9Db5Ys+5QaAUlS196jQ47VFFEFnX5
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
12:60:56:99:8e:88:22:e1:31:99:2d:9b:cc:ee:c0:33:34:a0:99:35:5c:07:a2:38:26:a2:af:17:47:cd:0a:f8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=1027700229193,CN=YANDEX LLC,O=YANDEX LLC,STREET=Leo Tolstoy street\, 16,L=Moscow,ST=Moscow,C=RU,1.3.6.1.4.1.311.60.2.1.2=#13064d6f73636f77,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Sep 13, 2022
Subject
SERIALNUMBER=1027700229193,CN=YANDEX LLC,O=YANDEX LLC,STREET=Leo Tolstoy street\, 16,L=Moscow,ST=Moscow,C=RU,1.3.6.1.4.1.311.60.2.1.2=#13064d6f73636f77,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
79:04:d3:2e:74:fc:47:2b:66:c0:8a:38
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 6, 2022 - May 6, 2024
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 29, 2022 - Mar 14, 2033
Minor OS version
1
Major OS version
5
Entry point
185040
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Y:\work\CEF3_git\chromium\src\out\Release_GN_x86\chrome_elf.dll.pdb
kernel32
VerSetConditionMask
GetModuleHandleW
GetProcAddress
VerifyVersionInfoW
LoadLibraryExA
ReadConsoleW
VirtualProtect
GetCurrentProcessId
GetProcessId
GetCommandLineW
GetTempPathW
GetModuleFileNameW
GetLastError
GetCurrentProcess
VirtualQuery
GetEnvironmentVariableW
GetNativeSystemInfo
SetEnvironmentVariableW
CreateDirectoryW
GetFileAttributesW
OutputDebugStringW
MultiByteToWideChar
WideCharToMultiByte
GetComputerNameExW
FreeLibrary
LoadLibraryW
ReadProcessMemory
WriteProcessMemory
GetModuleHandleExW
CreateFileW
CloseHandle
VirtualProtectEx
HeapCreate
HeapDestroy
Sleep
QueryPerformanceFrequency
GetSystemTimeAsFileTime
QueryPerformanceCounter
SetLastError
WaitForSingleObject
GetCurrentThreadId
RaiseException
CreateThread
IsDebuggerPresent
WriteFile
DeleteFileW
GetLocalTime
GetCurrentDirectoryW
FormatMessageA
GetTickCount
HeapFree
HeapSize
HeapReAlloc
HeapAlloc
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TerminateProcess
OpenProcess
CreateEventW
SetEvent
ResetEvent
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
RtlCaptureStackBackTrace
SetUnhandledExceptionFilter
ReadFile
GetFileSizeEx
SetEndOfFile
SetFilePointerEx
FlushFileBuffers
GetSystemInfo
FindClose
CreateRemoteThread
GetStdHandle
GetFileType
SleepEx
CreateProcessW
GetVersion
LockFileEx
UnlockFileEx
InitializeCriticalSection
SetNamedPipeHandleState
TransactNamedPipe
CreateNamedPipeW
WaitNamedPipeW
GetUserDefaultLCID
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
LCMapStringW
GetLocaleInfoW
GetCPInfo
WaitForSingleObjectEx
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlUnwind
LoadLibraryExW
InterlockedFlushSList
GetFullPathNameW
GetConsoleCP
GetConsoleMode
ExitProcess
SetStdHandle
SetConsoleCtrlHandler
GetModuleFileNameA
GetACP
IsValidLocale
EnumSystemLocalesW
GetDriveTypeW
WriteConsoleW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
AddDllToBlacklist
ClearCrashKeyValueImpl
CrashForException
DumpProcessWithoutCrash
GetBlacklistIndex
GetCrashKeyCountImpl
GetCrashKeyImpl
GetCrashReportsImpl
GetHandleVerifier
GetInstallDetailsPayload
GetUserDataDirectoryThunk
InjectDumpForHangDebugging
InjectDumpForHungInput
InjectDumpForHungInputNoCrashKeys
InjectDumpProcessWithoutCrash
IsBlacklistInitialized
RequestSingleCrashUploadImpl
SetCrashKeyValueImpl
SetMetricsClientId
SetUploadConsentImpl
SignalChromeElf
SignalInitializeCrashReporting
SuccessfullyBlocked
Name
.text
Size
318KB
Virtual Size
317KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
82KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didat
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.crthunk
Size
512B
Virtual Size
64B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
CPADinfo
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=259, version=23917,
count=163, id=261, version=23917,
count=32, id=260, version=23917,
count=3, id=199, version=41118,
count=25, id=259, version=24123,
count=34, id=260, version=24123,
count=1, id=259, productName=VS2015 UPD3 build 24210, version=24210,
count=178, id=265, version=24215,
count=15, id=257, version=23917,
count=54, id=261, version=24123,
count=282, id=1, productName=Unmarked objects,
count=81, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Readm.md/locales/en-US.pak
- SHA256 91e82cce314ec0bd353ffd0a6fb8ed00996ca7f34a66d87fd2ed782287959fb0
- MD5 303ec815dcffef129839caf422bcbe73
- SHA1 d1b9117ec2ab70dc5f804a0678213460ffa4f213
- SHA512 063c7cff00518a71e95a3c11852b1bc9763ef7181c39ffde2d403b83f01bfbac6b32222c2fe35acd07cd5c59025069b7a09df896dbb11a7f0f05e93ca121fcd8
- SSDEEP 6144:KBUwqktt5WQMb9e3zDZp0TfTtCXhurGz0Llo:9hez5MgDZ2TJHrGz2lo
- MD5 SHA1 SHA512 SSDEEP
Readm.md/locales/ru.pak
- SHA256 cce042d27383662754d938f1c344574b2d0542e36cd0f1f47483bc5f9bd6c1a2
- MD5 5282dcbc4fb095c0211667c35db721f7
- SHA1 2741c544c323797b81df4f1262ec4d82ea845f16
- SHA512 03784ddc91cc14e6248c446e47fac414dd8d87b0dbcbc5e5aeb0ac96bc84f184a1df9b3947f28e7222dfac518290ad39331b58d57c24e26fc93e56d33fa37b7b
- SSDEEP 12288:C5hvvBmXsYsXN2hlm4ygxtzTOkOCVwHeSRvNUTAthprkDzqb5B8rK48eQymKxeLm:CD1X2qGzF
- MD5 SHA1 SHA512 SSDEEP
Readm.md/locales/tr.pak
- SHA256 e51edf418005cd1b046d95d1e6c87b3e432a13cfaf1e103a6bcc9138372484d0
- MD5 fed97cff34c4674a0b01cfcb932a792e
- SHA1 38379d0d64d181eadd7b11a0bdadd77ae43b5f13
- SHA512 c9cf6d7211c8cef9221e5bbf24a4e6f8467d7e5f2e983f7260f43e84063d23596fa814ae9486ff75651af0c30b3790c60b2edba7b0c28b9fd22a114948d2287e
- SSDEEP 3072:aR+Gho0w/yhZ8vYr9lxl8ARDC4HzsGMl7KeYq+ohmWhygujZrLfpxB4MyFMh6nCv:Oo0B9VDLTsGVxVTxdW7hzpGztfI295H
- MD5 SHA1 SHA512 SSDEEP
Readm.md/locales/uk.pak
- SHA256 8755811c7cf9a4859ee7b195ccec029b72012492d7e14362a35198543062a97e
- MD5 245b1dfb732a3fbe8c1c520abafa0787
- SHA1 85081782af3b11a0f02f614b61991864a3ee95a4
- SHA512 7987c319538f0e76d70e0037d74746ee1b039383635fb2fd363d421353f1d6269c9235b2bd10ce73280635cda355e3f947da70630e036d94cddeb9dfe9f1f11d
- SSDEEP 12288:JmP4Cn0P0u+A/LNiX39rcmeEn8dGzz8qDW3d+:JmPUae48dGzp
- MD5 SHA1 SHA512 SSDEEP
Readm.md/wow64/YandexDisk3ShellExt-1511.dll
- IMPHASH 65d64e9bdc78cb12b1b4882db8f32623
- SHA256 4637c2a9554bc0289a4789a538b09221a216ef74644bcd05a50bc334d17cf306
- MD5 62985a9dd149cbe7d518cdefd6abed78
- SHA1 4724c802e7a1c82bc1932f6acdc9057188d268a5
- SHA512 434af6b17c7bc615d5b195000996f09d0482720974c03926bb48c6fbe200a73f97ddad17fedbcff3ba1232439662aa65046c9c1158b15bb2faeab2e24e685864
- SSDEEP 12288:oxIDiqMK2jSR6327g6uh7/jUvUc/8iElCf/FQ7jp9nJAY4Q/0UtdOXat+j+uq11/:eIajqf/FQ7jWQ/zt+jI11
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
ae:ed:73:f1:48:34:64:10:37:30:06:9e:51:21:91:6a:e9:c8:12:e9:c5:a9:68:38:de:ae:bc:71:30:2a:68:22
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=1027700229193,CN=YANDEX LLC,O=YANDEX LLC,STREET=Leo Tolstoy street\, 16,L=Moscow,ST=Moscow,C=RU,1.3.6.1.4.1.311.60.2.1.2=#13064d6f73636f77,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Sep 13, 2022
Subject
SERIALNUMBER=1027700229193,CN=YANDEX LLC,O=YANDEX LLC,STREET=Leo Tolstoy street\, 16,L=Moscow,ST=Moscow,C=RU,1.3.6.1.4.1.311.60.2.1.2=#13064d6f73636f77,1.3.6.1.4.1.311.60.2.1.3=#13025255,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
79:04:d3:2e:74:fc:47:2b:66:c0:8a:38
Issuer
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 6, 2022 - May 6, 2024
Subject
CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 29, 2022 - Mar 14, 2033
Minor OS version
1
Major OS version
5
Entry point
227017
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\BuildAgent\work\che-trunk-git-yandex-ru\win\YandexDiskUploader\Release\YandexDisk3ShellExt.pdb
kernel32
lstrcmpiW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
GetThreadLocale
SetThreadLocale
EncodePointer
EnterCriticalSection
LeaveCriticalSection
VerSetConditionMask
VerifyVersionInfoW
LoadLibraryW
SetErrorMode
DeleteFileW
GetLocalTime
MoveFileW
GetFileSize
FlushFileBuffers
SetFilePointer
WriteFile
CreateFileW
InitializeCriticalSection
InterlockedFlushSList
RtlUnwind
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
LocalFree
WriteConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
SetStdHandle
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
HeapDestroy
GetProcessHeap
GetFileAttributesW
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetUserDefaultUILanguage
CallNamedPipeW
CreateMutexW
GetCurrentProcess
CloseHandle
CreateProcessW
DecodePointer
GetProcAddress
GetModuleHandleW
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
GlobalUnlock
GlobalLock
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
GetLastError
QueryPerformanceCounter
FindNextFileA
FindFirstFileExA
FindClose
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetFileType
GetStdHandle
GetACP
GetModuleFileNameA
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetLocaleInfoW
ExitProcess
GetModuleHandleExW
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
RaiseException
GetVersionExW
LCMapStringW
CompareStringW
VirtualQuery
VirtualProtect
VirtualAlloc
IsDebuggerPresent
OutputDebugStringW
GetStringTypeW
SetLastError
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetSystemInfo
user32
DestroyMenu
GetSystemMetrics
InsertMenuW
LoadImageW
InsertMenuItemW
CharNextW
DestroyIcon
DrawIconEx
GetIconInfo
gdi32
SetBkColor
ExtTextOutW
GetDIBits
CreateDIBSection
SelectObject
DeleteDC
DeleteObject
CreateCompatibleDC
advapi32
RegDeleteKeyW
GetTokenInformation
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
CopySid
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
OpenProcessToken
IsValidSid
GetLengthSid
ConvertSidToStringSidW
shell32
DragQueryFileW
SHGetDesktopFolder
SHGetFileInfoW
ord165
SHGetFolderPathW
ord155
ord18
ole32
CoCreateInstance
ReleaseStgMedium
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CoTaskMemFree
oleaut32
SysFreeString
LoadTypeLi
SysAllocString
UnRegisterTypeLi
RegisterTypeLi
SysStringLen
VarUI4FromStr
shlwapi
PathFileExistsW
comctl32
ImageList_Merge
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Destroy
ImageList_Create
msimg32
AlphaBlend
userenv
UnloadUserProfile
gdiplus
GdiplusStartup
GdiplusShutdown
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
Name
.text
Size
357KB
Virtual Size
356KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
99KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
451KB
Virtual Size
451KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=241, version=40116,
count=133, id=243, version=40116,
count=29, id=242, version=40116,
count=20, id=259, version=26706,
count=32, id=260, version=26706,
count=63, id=261, version=26706,
count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=25, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=221, id=1, productName=Unmarked objects,
count=26, id=265, version=27038,
count=1, id=256, version=27038,
count=1, id=255, version=27038,
count=1, id=151,
count=1, id=258, version=27038,
lnstaIIer .x64.exe
- IMPHASH feab2e98c1834ddb55f7b8d719645bab
- SHA256 29c4b60a24c0eef090b656c1a33b0284a778232f422a4fb400ce1975bf21d45a
- MD5 ee565419e54ff8de8d71828451689736
- SHA1 96efd5bdd34d6d1718559af2402e171b346f4c77
- SHA512 69273467477303dfddc05a663f540968356e08d4aea7a4bd11510a5729dcd8ff80386754e3c7efadea532c7fe359fa6436782c350323bbf60c2efe1b005565f4
- SSDEEP 98304:y9EALOORkif751Ic2+a8fsf7xrkKDCIwl7llkCwpqfRzWOmCuOONWiR:ydi4XrXa8f0533wlDlUepXi
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d0:d4:a7:17:99:66:99:32:59:bf:27:e2:85:32:4b:af:3c:04:62:4e:4e:50:ae:68:59:53:00:fc:ac:1c:90:a5
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=ChrisPC Software SRL,O=ChrisPC Software SRL,POSTALCODE=400001,STREET=STR. PARIS Nr 19-21 Etaj 2 Apartament 9B,L=Cluj-Napoca,C=RO
Chains
Jul 20, 2022
CN=ChrisPC Software SRL,O=ChrisPC Software SRL,POSTALCODE=400001,STREET=STR. PARIS Nr 19-21 Etaj 2 Apartament 9B,L=Cluj-Napoca,C=RO
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=ChrisPC Software SRL,O=ChrisPC Software SRL,POSTALCODE=400001,STREET=STR. PARIS Nr 19-21 Etaj 2 Apartament 9B,L=Cluj-Napoca,C=RO
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
PE Signature issue
Digest
7f:76:92:1e:8c:6b:0f:5f:54:c4:c0:c2:09:c3:21:1c:0a:3d:07:3c
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=ChrisPC Software SRL,O=ChrisPC Software SRL,POSTALCODE=400001,STREET=STR. PARIS Nr 19-21 Etaj 2 Apartament 9B,L=Cluj-Napoca,C=RO
Chains
Dec 12, 2024
Subject
CN=ChrisPC Software SRL,O=ChrisPC Software SRL,POSTALCODE=400001,STREET=STR. PARIS Nr 19-21 Etaj 2 Apartament 9B,L=Cluj-Napoca,C=RO
Serial Number
b3:25:7d:17:82:c2:0a:71:8d:79:5b:a1:88:fc:b2:12
Issuer
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 6, 2021 - Jan 6, 2024
Subject
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Serial Number
39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 12, 2019 - Dec 31, 2028
Subject
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Timespan
Nov 2, 2018 - Dec 31, 2030
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 11, 2022 - Aug 10, 2033
Subject
CN=ChrisPC Software SRL,O=ChrisPC Software SRL,POSTALCODE=400001,STREET=STR. PARIS Nr 19-21 Etaj 2 Apartament 9B,L=Cluj-Napoca,C=RO
Serial Number
b3:25:7d:17:82:c2:0a:71:8d:79:5b:a1:88:fc:b2:12
Issuer
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 6, 2021 - Jan 6, 2024
Subject
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Serial Number
39:72:44:3a:f9:22:b7:51:d7:d3:6c:10:dd:31:35:95
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Mar 12, 2019 - Dec 31, 2028
Subject
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Timespan
Nov 2, 2018 - Dec 31, 2030
Subject
CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 11, 2022 - Aug 10, 2033
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Minor OS version
1
Major OS version
5
Entry point
10291631
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CloseHandle
CreateSemaphoreW
CreateThread
DeleteCriticalSection
EnterCriticalSection
FreeConsole
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
QueryPerformanceCounter
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
GetSystemTimeAsFileTime
CreateEventA
GetModuleFileNameW
GetModuleHandleA
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
LoadLibraryA
FreeLibrary
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFree
LocalAlloc
LocalFree
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
MultiByteToWideChar
GetModuleHandleW
LoadResource
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
WriteConsoleW
SetStdHandle
IsProcessorFeaturePresent
DecodePointer
GetCommandLineA
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
RaiseException
LCMapStringW
GetStringTypeW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapSize
WriteFile
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapReAlloc
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
msvcrt
___mb_cur_max_func
__doserrno
__getmainargs
__initenv
__lconv_init
__p__acmdln
__p__fmode
__pioinfo
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_errno
_fdopen
_filelengthi64
_fileno
_fileno
_fstat64
_initterm
_iob
_lseeki64
_onexit
_read
_strnicmp
_write
_write
abort
atoi
calloc
exit
fclose
fflush
fgetpos
fopen
fprintf
fputc
fputs
fread
free
fsetpos
fwrite
getc
getwc
isspace
iswctype
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
putc
putwc
realloc
setlocale
setvbuf
signal
sprintf
strchr
strcmp
strcoll
strerror
strftime
strlen
strncmp
strtoul
strxfrm
towlower
towupper
ungetc
ungetwc
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
user32
AppendMenuA
CreatePopupMenu
GetDlgItem
SendDlgItemMessageA
CharUpperBuffW
Name
.text
Size
Virtual Size
796KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.eh_fram
Size
Virtual Size
241KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
Virtual Size
52B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.debug_a
Size
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.debug_i
Size
Virtual Size
160KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.debug_a
Size
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.debug_l
Size
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.debug_f
Size
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.debug_s
Size
Virtual Size
580B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.debug_l
Size
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.debug_r
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.BGP0
Size
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.BGP1
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.BGP2
Size
6.0MB
Virtual Size
6.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ