0EnvMFBHO_0869.ihncyq695084.iso
- SHA256 b3649b484ad4db1bb046fc3d190ee8595765464182fcca25ee92b075741740d2
Overview
overview
9Static
static
5_Resolbvmy...fc.vbs
windows10-2004-x64
9_Resolbvmy...fc.vbs
windows11-ltsc_2024-x64
9~/jgkqec/b...j2.pdf
windows10-2004-x64
3~/jgkqec/b...j2.pdf
windows11-ltsc_2024-x64
3~/jgkqec/b...d1.pdf
windows10-2004-x64
3~/jgkqec/b...d1.pdf
windows11-ltsc_2024-x64
3~/uujjvs2.dll
windows10-2004-x64
3~/uujjvs2.dll
windows11-ltsc_2024-x64
3~/verd1.dll
windows10-2004-x64
3~/verd1.dll
windows11-ltsc_2024-x64
3Behavioral task
behavioral1
Sample
_ResolbvmyyIJDIYP_5210-73G30S.Vrfc.vbs
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
_ResolbvmyyIJDIYP_5210-73G30S.Vrfc.vbs
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
13 signatures
150 seconds
Behavioral task
behavioral3
Sample
~/jgkqec/bqsl/glsr/xhgx/nesj2.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
~/jgkqec/bqsl/glsr/xhgx/nesj2.pdf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral5
Sample
~/jgkqec/bqsl/glsr/xhgx/yypdd1.pdf
Resource
win10v2004-20260513-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral6
Sample
~/jgkqec/bqsl/glsr/xhgx/yypdd1.pdf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral7
Sample
~/uujjvs2.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
~/uujjvs2.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
~/verd1.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral10
Sample
~/verd1.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target 0EnvMFBHO_0869.ihncyq695084.iso
- Size 3.7MB
- Sample260808-plsckade27
- SHA256 b3649b484ad4db1bb046fc3d190ee8595765464182fcca25ee92b075741740d2
- MD5 b2f63c5b29ec00df98d739b99571bf67
- SHA1 e3278e42384cfdd126517748d7d8eee3be2415ea
- SHA512 d507cb1de8a290d740fab4fa7f1842b231db5c2f0899481204bcd743574998829980726acd37c627a825726c0e7a97eacd3fb0e397f2f93b57a3dc7825fe80c2
- SSDEEP 49152:5j2EUaqrcGc7RFtzl/ATFC3MDGmyIbKYKtCSANoRuim3Y:5W4uim3Y
- TLSH T1C6062337F7161466CDA20B39B01A15726E7D9903870D87E3FCACE166379B2C6873D4A8
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Malformed data in PDF
A PDF can contain malformed data to evade detection
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack002/~/uujjvs2.xml - One or more email addresses in PDF identified
Detects presence of email addresses in PDF files.
File Explorer
-
0EnvMFBHO_0869.ihncyq695084.iso.iso 3.7MB
-
out.iso.iso 3.7MB
-
_ResolbvmyyIJDIYP_5210-73G30S.Vrfc.vbs3.1MB
-
~/jgkqec/bqsl/glsr/xhgx/nesj2.pdf.pdf 30KB
-
~/jgkqec/bqsl/glsr/xhgx/yypdd1.pdf.pdf 1KB
-
~/uujjvs2.xml.dll 38KB
-
~/verd1.xml.dll 79KB
out.iso
- SHA256 b3649b484ad4db1bb046fc3d190ee8595765464182fcca25ee92b075741740d2
- MD5 b2f63c5b29ec00df98d739b99571bf67
- SHA1 e3278e42384cfdd126517748d7d8eee3be2415ea
- SHA512 d507cb1de8a290d740fab4fa7f1842b231db5c2f0899481204bcd743574998829980726acd37c627a825726c0e7a97eacd3fb0e397f2f93b57a3dc7825fe80c2
- SSDEEP 49152:5j2EUaqrcGc7RFtzl/ATFC3MDGmyIbKYKtCSANoRuim3Y:5W4uim3Y
- TLSH T1C6062337F7161466CDA20B39B01A15726E7D9903870D87E3FCACE166379B2C6873D4A8
- MD5 SHA1 SHA512 SSDEEP TLSH
_ResolbvmyyIJDIYP_5210-73G30S.Vrfc.vbs
- SHA256 6e679d77e2ca2f8cfbbe65306d0dea83fc3363ab2254a2afe33ac82f821fdd87
- MD5 c79892d49a5fc1ca892d5fac0b36d65a
- SHA1 d769e09f61a6489c65f3e3f45d17e8e6e6a1a20e
- SHA512 ae38aa398f43ce94938e1e711bbdf6516cbd8dbd79763527217fd2f9192bf5f13be8499718ed7a021f8a067978695904091ed66467e999912038f513477544fd
- SSDEEP 49152:mj2EUaqrcGc7RFtzl/ATFC3MDGmyIbKYKtCSAx:mA
- TLSH T174E52337E769151B0EB10B2DF00F16626EAE9C13864DC3A48C99F26735DB6D6C22E4F4
- MD5 SHA1 SHA512 SSDEEP TLSH
~/jgkqec/bqsl/glsr/xhgx/nesj2.pdf
- SHA256 17c3619e5f7357ce3dde625156f3a1018b8076a0a7ec2223f063e833a9a06bed
- MD5 1376e75b3d960aea30d72df71a5bbf3d
- SHA1 c3b70e06215bfb413def286c2463601b008a667f
- SHA512 3d42c78ca2d23d2dabca98624acbf0473b96b94dc0a666deae35e1ec63853e14cad29ead764a6ae49fea2c39b98104adf434294043d27a54a59a2562d5619dc4
- SSDEEP 384:DukPnfI16U+DX0aK3pTNqXFujccZKV+KEfNGmuGkvJ9m2Eto/emalUSAOMbWrKXI:9GpAuQWO6NkGwJW
- TLSH T1CCE2820CF245BA90D46147E56F387639657F732868CA5B905DA3C32BEA018EB3B7DC42
- MD5 SHA1 SHA512 SSDEEP TLSH
Extracted URLs
-
file http://bardahl.com.ar
-
file mailto:Email:[email protected]
~/jgkqec/bqsl/glsr/xhgx/yypdd1.pdf
- SHA256 d42b489af7b86727b04366eeba9e55bacf3840ffbb083e933f10d8fddc8347f8
- MD5 35d3f67356b24d33c0b0059205c265c0
- SHA1 4b67a32723b6c9635b985c2b82e1051963e4a103
- SHA512 e5a13f78946d8a7261396753bbcabac17d0678b89d37e333d0fe3595c5058050c552c06fac89eb69ce110702ed4358680df5df1c76cb8b396ba19e406de22790
- TLSH T1AA416654A5C80CCCE5A6CA52BB2EB4D3A97DB14351E8A8D1117C834F8189F95AD53A07
- MD5 SHA1 SHA512 TLSH
~/uujjvs2.xml
- IMPHASH 22282896b7052384f5c0332b5666c4c5
- SHA256 a5b88f84fb563b4c97faea5074f94ff8991ab04bc879c96fda32039f73876d34
- MD5 e3b3357c99116495ea512e11aafcf658
- SHA1 301bc26d07455b97fb3fd8ec4108b49bedf28518
- SHA512 9a403cb9bb63a246fa51cd4f75eec4454cd35ad428771544712d89dcdeb5a1c85a5521f90749db4c731e2276bf968bfb88744da26c8842ebc92ba79dd20bde68
- SSDEEP 384:lsbtFMFjxdLsDTMtHKMYGjJqoRnPV5TiUdK7W9RY/5CYJL+mcXfeM+:qtOFFdLsD6KM3jJqmndyW7Y/5rLJT
- TLSH T1E103728735304EE1EDC00D7A91E65E734C7CD2284BAB90D7A6B601962E413E63E3B79D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
4f:57:16:48:ba:4e:bc:7c:d4:27:e1:f4:23:df:5f:18:a4:32:a1:f4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Chains
Dec 20, 2011
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=Adobe Systems Incorporated,OU=Information Systems+OU=Digital ID Class 3 - Microsoft Software Validation v2,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US
Serial Number
15:e5:ac:0a:48:70:63:71:8e:39:da:52:30:1a:04:88
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 15, 2010 - Dec 14, 2012
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
16046
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\coretech\source\zeppelin\adobepsl\photoshop\Targets\Win32\Objs\QuickTimeGlueRelease\QuickTimeGlue.pdb
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
CloseHandle
GlobalFree
GlobalAlloc
FreeLibrary
GetModuleFileNameA
GetProcAddress
QueryPerformanceCounter
GetLastError
WaitForSingleObject
CreateMutexA
GetCurrentProcessId
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
DisableThreadLibraryCalls
IsDebuggerPresent
GetTickCount
GetCurrentThreadId
ReleaseMutex
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
SetUnhandledExceptionFilter
InterlockedExchange
DecodePointer
EncodePointer
user32
wsprintfA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
msvcr100
memset
_access
strncpy
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
memcpy
QTAddEmptyTrackToMovie
QTAddImageDescriptionExtension
QTAddMediaSample
QTBeginMediaEdits
QTCDSequenceEnd
QTCFRelease
QTCFStringCreateWithCharacters
QTCloseComponent
QTCloseMovieFile
QTCompressSequenceBegin
QTCompressSequenceFrame
QTCopyPixMapPixels
QTCopyTrackSettings
QTCountImageDescriptionExtensionType
QTCreateMovieFile
QTCreatePortAssociation
QTDestroyPortAssociation
QTDisposeCTable
QTDisposeGWorld
QTDisposeHandle
QTDisposeMovie
QTDisposeMovieController
QTEndMediaEdits
QTEnterMovies
QTExitMovies
QTFindNextComponent
QTGestalt
QTGetCodecInfo
QTGetComponentInfo
QTGetGWorldDevice
QTGetGWorldPixMap
QTGetHandleSize
QTGetImageDescClutID
QTGetImageDescSampleDepth
QTGetImageDescriptionCTable
QTGetImageDescriptionExtension
QTGetMaxCompressionSize
QTGetMediaDuration
QTGetMediaHandler
QTGetMediaHandlerDescription
QTGetMediaNextInterestingTime
QTGetMediaSampleCount
QTGetMediaSampleDescription
QTGetMediaSampleDescriptionCount
QTGetMediaTimeScale
QTGetMovieBox
QTGetMovieDuration
QTGetMovieGWorld
QTGetMovieIndTrackType
QTGetMovieNextInterestingTime
QTGetMoviePreferredRate
QTGetMovieTimeBase
QTGetMovieTimeScale
QTGetMovieTrackCount
QTGetPAR_HSpacing
QTGetPAR_VSpacing
QTGetPixBaseAddr
QTGetPixMapBounds
QTGetPixelsState
QTGetPort
QTGetStringFromHandle
QTGetTrackEnabled
QTGetTrackMedia
QTGoToBeginningOfMovie
QTHLock
QTHUnlock
QTICMImageDescriptionGetProperty
QTInitializeBridge
QTInitializeQTML
QTInsertMediaIntoTrack
QTInsertTrackSegment
QTIsCTableGrayscale
QTLockPixels
QTMCDoAction
QTMCDoActionGoToTime
QTMCDoActionPlay
QTMCDoActionSetVolume
QTMCEnableEditing
QTMCGetCurrentTime
QTMCIdle
QTMCMovieChanged
QTMacSetPort
QTMakeImageDescriptionForPixMap
QTMediaGetPublicInfo
QTMediaGetPublicInfoEncodedFrameRate
QTMediaHasCharacteristic
QTMovieExportAddDataSource
QTMovieExportDoUserDialog
QTMovieExportFromProceduresToDataRef
QTMovieExportGetFileNameExtension
QTMovieExportGetSettingsAsAtomContainer
QTMovieExportSetProgressProc
QTMovieExportSetSettingsFromAtomContainer
QTMoviesTask
QTNewHandle
QTNewMovieController
QTNewMovieFromDataRef
QTNewMovieFromFile
QTNewMovieTrack
QTNewTrackMedia
QTOpenComponent
QTOpenDefaultComponent
QTOpenMovieFile
QTPrerollMovie
QTQTDisposeAtomContainer
QTQTFindChildByID
QTQTGetAtomDataPtr
QTQTGetPixMapHandleGammaLevel
QTQTGetPixMapHandleRowBytes
QTQTNewDataReferenceFromFullPathCFString
QTQTNewGWorld
QTQTSetAtomData
QTQTSetPixMapHandleGammaLevel
QTQTSetPixMapHandleRequestedGammaLevel
QTSetMediaSampleDescription
QTSetMovieBox
QTSetMovieGWorld
QTSetMoviePlayHints
QTSetMovieSelection
QTSetMovieTimeScale
QTSetMovieTimeValue
QTSetPAR_Spacing
QTSetTrackEnabled
QTTerminateQTML
QTUnlockPixels
QTUpdateMovieResource
Name
.text
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
912B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=152, version=20115,
count=1, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=12, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=67, id=1, productName=Unmarked objects,
count=3, id=93, version=2179,
count=10, id=95, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=7, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
~/verd1.xml
- IMPHASH 7558521c8fe6b78071bc407f14af1903
- SHA256 20186a2657ee3c17e5b7ee5654ac73b7d34b5d480380f7c80e02955ef3d772a8
- MD5 0ddb14f218c5dbff6daab48a38bd95ec
- SHA1 2eea6a727a983e4f61268f5e5639bc279e0e0fc1
- SHA512 330fd088106da9f47ca68e3b3ecb8d81cbb41105488c9406378fb12a516d6a2da7657f3104cd12e3b8d16f3c13ac0fe2e75de55098543335c26fe73eaf0a86c4
- SSDEEP 1536:Lj+7MrgyymQhXeVt3UcffVrl9jETRopN655HhUoEi1zuRvwHd541wQ04Mim3YCgu:Lj0MrMmL30TuauRvw921wQ0Pim3YCgmP
- TLSH T1EE833A15F70390F9D8131A711186A9D725B0970F89159EEBF7AC8C69F73EAC099380BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
e1:45:e4:ab:c6:70:81:65:9f:04:5c:e0:0d:fe:ee:39:74:9b:d6:75:b5:1c:6e:d2:ca:cc:64:04:e5:b5:a0:6c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US
Chains
Jun 1, 2023
CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US
Serial Number
0e:44:18:e2:de:de:36:dd:29:74:c3:44:3a:fb:5c:e5
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 2, 2021 - Jul 10, 2024
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
5056
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FileTimeToSystemTime
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetProcessAffinityMask
GetProcessTimes
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetThreadTimes
GetTickCount
InitializeCriticalSection
IsDebuggerPresent
LeaveCriticalSection
OpenProcess
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
SetEvent
SetLastError
SetProcessAffinityMask
SetSystemTime
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
api-ms-win-crt-convert-l1-1-0
_ultoa
api-ms-win-crt-environment-l1-1-0
__p__environ
__p__wenviron
api-ms-win-crt-heap-l1-1-0
calloc
free
malloc
realloc
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfwprintf
__stdio_common_vsprintf
fgetwc
fwrite
getc
api-ms-win-crt-string-l1-1-0
memset
strlen
strncmp
_strdup
api-ms-win-crt-private-l1-1-0
_setjmp3
longjmp
memcpy
memmove
api-ms-win-crt-time-l1-1-0
__daylight
__timezone
__tzname
_tzset
api-ms-win-crt-runtime-l1-1-0
_set_app_type
__p___argc
__p___argv
__p___wargv
_beginthreadex
_configure_narrow_argv
_configure_wide_argv
_crt_atexit
_endthreadex
_errno
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_register_onexit_function
abort
exit
__pth_gpointer_locked
__pthread_clock_nanosleep
_pthread_cleanup_dest
_pthread_get_state
_pthread_invoke_cancel
_pthread_key_dest
_pthread_rel_time_in_ms
_pthread_set_state
_pthread_time_in_ms
_pthread_time_in_ms_from_timespec
_pthread_tryjoin
clock_getres
clock_gettime
clock_nanosleep
clock_settime
nanosleep
pthread_attr_destroy
pthread_attr_getdetachstate
pthread_attr_getinheritsched
pthread_attr_getschedparam
pthread_attr_getschedpolicy
pthread_attr_getscope
pthread_attr_getstackaddr
pthread_attr_getstacksize
pthread_attr_init
pthread_attr_setdetachstate
pthread_attr_setinheritsched
pthread_attr_setschedparam
pthread_attr_setschedpolicy
pthread_attr_setscope
pthread_attr_setstackaddr
pthread_attr_setstacksize
pthread_barrier_destroy
pthread_barrier_init
pthread_barrier_wait
pthread_barrierattr_destroy
pthread_barrierattr_getpshared
pthread_barrierattr_init
pthread_barrierattr_setpshared
pthread_cancel
pthread_cond_broadcast
pthread_cond_destroy
pthread_cond_init
pthread_cond_signal
pthread_cond_timedwait
pthread_cond_timedwait_relative_np
pthread_cond_wait
pthread_condattr_destroy
pthread_condattr_getclock
pthread_condattr_getpshared
pthread_condattr_init
pthread_condattr_setclock
pthread_condattr_setpshared
pthread_create
pthread_create_wrapper
pthread_delay_np
pthread_detach
pthread_equal
pthread_exit
pthread_get_concurrency
pthread_getclean
pthread_getconcurrency
pthread_getevent
pthread_gethandle
pthread_getname_np
pthread_getschedparam
pthread_getspecific
pthread_join
pthread_key_create
pthread_key_delete
pthread_kill
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_timedlock
pthread_mutex_trylock
pthread_mutex_unlock
pthread_mutexattr_destroy
pthread_mutexattr_getprioceiling
pthread_mutexattr_getprotocol
pthread_mutexattr_getpshared
pthread_mutexattr_gettype
pthread_mutexattr_init
pthread_mutexattr_setprioceiling
pthread_mutexattr_setprotocol
pthread_mutexattr_setpshared
pthread_mutexattr_settype
pthread_num_processors_np
pthread_once
pthread_rwlock_destroy
pthread_rwlock_init
pthread_rwlock_rdlock
pthread_rwlock_timedrdlock
pthread_rwlock_timedwrlock
pthread_rwlock_tryrdlock
pthread_rwlock_trywrlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_rwlockattr_destroy
pthread_rwlockattr_getpshared
pthread_rwlockattr_init
pthread_rwlockattr_setpshared
pthread_self
pthread_set_concurrency
pthread_set_num_processors_np
pthread_setcancelstate
pthread_setcanceltype
pthread_setconcurrency
pthread_setname_np
pthread_setschedparam
pthread_setspecific
pthread_spin_destroy
pthread_spin_init
pthread_spin_lock
pthread_spin_trylock
pthread_spin_unlock
pthread_testcancel
pthread_timechange_handler_np
pthread_tls_init
sched_get_priority_max
sched_get_priority_min
sched_getscheduler
sched_setscheduler
sched_yield
sem_close
sem_destroy
sem_getvalue
sem_init
sem_open
sem_post
sem_post_multiple
sem_timedwait
sem_trywait
sem_unlink
sem_wait
Name
.text
Size
53KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
1012B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ