jaffacakes118_HEUR[.]Trojan[.]Win32[.]Invader[.]52f4bbbb37c14c6cf7a1041841f53c81

resource
jaffacakes118_HEUR.Trojan.Win32.Invader.52f4bbbb37c14c6cf7a1041841f53c81

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/.data	nsis_installer_2

jaffacakes118_HEUR.Trojan.Win32.Invader.52f4bbbb37c14c6cf7a1041841f53c81

IMPHASH d524f1ae55f37f3df54f67a58d24d838
SHA256 7f4c8f2334b1358e73edafb9c15dc12f93692a005d1548f7fa8e417cf38d4ede
MD5 52f4bbbb37c14c6cf7a1041841f53c81
SHA1 adf1d21a3d1b843b4c6ed2085dbcfdc41a2603cd
SHA512 261a56c40a912b7a4b268cc44924833b3a3f8c00fb0ad4614fb313d2468c305c92db10efc992bc012e1499f0733c3ab6014dde3c60a84732f39ed56302422fc6
SSDEEP 98304:vdkP0fBe8+n9fh4TcCfSlEqpcnYGlwN/D:m0fBen9fDBemcBlwN/D
TLSH
T1F7F533BB22D2C413D22E85B508B7C17609C2ED52DFA21487329B7FCEE1B6347691674E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.
NSIS installer

installer

PE Signature issue

Digest

39:93:37:f4:2e:66:0a:35:73:a4:c8:6f:03:62:87:6a:70:08:4c:5e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Shanghai kuaiping Network Technology Co.\, Ltd,OU=chanpinbu,O=Shanghai kuaiping Network Technology Co.\, Ltd,L=Shanghai,ST=Shanghai,C=CN

Chains

Jan 20, 2016

CN=Shanghai kuaiping Network Technology Co.\, Ltd,OU=chanpinbu,O=Shanghai kuaiping Network Technology Co.\, Ltd,L=Shanghai,ST=Shanghai,C=CN

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Serial Number

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 21, 2012 - Dec 30, 2020

Subject

Serial Number

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

Nov 8, 2006 - Nov 7, 2021

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Serial Number

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 18, 2012 - Dec 29, 2020

Subject

CN=Shanghai kuaiping Network Technology Co.\, Ltd,OU=chanpinbu,O=Shanghai kuaiping Network Technology Co.\, Ltd,L=Shanghai,ST=Shanghai,C=CN

Serial Number

5c:3d:0d:44:3e:6a:71:08:a1:48:44:b5:fc:fe:f2:8a

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 4, 2015 - Mar 3, 2017

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Serial Number

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2010 - Feb 7, 2020

Minor OS version

0

Major OS version

4

Entry point

15827

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GlobalLock GlobalAlloc CloseHandle SetFileTime CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount CreateFileA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA GlobalUnlock GetWindowsDirectoryA GetTempPathA GetCommandLineA SetErrorMode lstrcpyA lstrcpynA lstrcatA LoadLibraryA lstrlenA WideCharToMultiByte VirtualAlloc VirtualProtect GetDiskFreeSpaceA CreateThread CreateProcessA RemoveDirectoryA GetTempFileNameA GetSystemDirectoryA GetVersion lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MulDiv MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GlobalSize ExitProcess

user32

SetClassLongA IsWindowEnabled GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetSystemMenu CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA RegisterClassA DialogBoxParamA CharNextA ExitWindowsEx DestroyWindow CreateDialogParamA SetTimer SetWindowTextA EnableMenuItem GetWindowRect ScreenToClient SetWindowPos EndDialog AppendMenuA GetClassInfoA PostQuitMessage SetForegroundWindow ShowWindow wsprintfA FindWindowExA IsWindow GetDlgItem SetWindowLongA GetClientRect LoadImageA GetDC EnableWindow InvalidateRect SendMessageA SendMessageTimeoutA

gdi32

SetBkMode SetBkColor CreateBrushIndirect DeleteObject GetDeviceCaps SetTextColor CreateFontIndirectA

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueExA RegEnumKeyA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegEnumValueA RegCloseKey

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CLSIDFromString OleInitialize OleUninitialize CoTaskMemFree StringFromGUID2 CoCreateInstance

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

.data

SHA256 766a5439928ac5574f770bcd32b88d7dcb5620cbb4e5bc47eff9fbe62d5c37ca
MD5 39ea283ed57eb07361f07f3eef7480e3
SHA1 38df030f5b49a4c050adc6988d67fe5783481a92
SHA512 de50c03c5730643e919a0124d9a09be170f87a609a0f0eb63085b3e946afc4490817666c9f4931113e8cf6804bc8323c3ba5d7252cb4fdfaf6562ca4771fbf33
TLSH
T1CA11525F73200020F34A87F818DB1B3A488B2EDDAAE086370EBB28D500B781B2F5F145
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

.rdata

SHA256 82a6e17e6a1f1f5f765035be4eda9dfa1e78dfe428f94a3c18c73aee7622eaf3
MD5 4a2ecfc9abaab33a7e2befc24e41b4aa
SHA1 5600b810749945d9986876860a4f83519a8bb19f
SHA512 d0b96de09c3a202d59e3227982fa1d02098ba9ac6baeb72ef9fefc43bdccefd0f099aa149a23221f06a0e69521905957ab91b3aa3470264eb425ab3e95fb6b1f
SSDEEP 96:bAEEr75WoxyH7AEErY2bfD30U1Z+0ydiDbxbSOssfBhJk:bAEErQoxcAEErY+kU8OxbSsfBhJ
TLSH
T13691745B615894C7D4F717F80739AFA687E1C152412E22241EE4F28FEEEAA47026D3E1
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

.rsrc/1033/DIALOG/103

SHA256 c20bf15bcad52466162857201bc24320d157f43203dcf38179eb9d6a55236139
MD5 780afd4cebeaf4e34248e59c00f69b35
SHA1 98bb9c96ea82af2f44860583115a375a908ca94a
SHA512 76a5d48dfa199290d19d2fc8f84f35a4683542a4dfce5dd9b3a72642fea574a6374e0abbd703c42d61c8be1fe08455f56091b21350c0913d788f61ea154a9437
TLSH
T154D08CA09AD0EE0AD1245CBB06F2C3D3B737300200004D0BFB2823C338A1A82AF422C2
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

.rsrc/1033/DIALOG/105

SHA256 f61fb9051d64ba0bd76b616bd5ef39aab6253120a3c047f56175cf28e1a1d764
MD5 334b5cb6232759821342b5ad6a3f375a
SHA1 395a224f876d43bdabe08ebd463b82d421af6f98
SHA512 5bdf4c4df7ab8a6e223d5c8e47ac24e50b3e6c90249c82219c3bf8abed90e533489893c5fa5b9ae0d2bd28050a77e06727d08023bc6f0b7ffd7b0ce54d64013c
TLSH
T127E08C7A2214D813C41D5AB920E3CA1B7823B36B83018D8BF204E38C2161AF8AA11340
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

.rsrc/1033/DIALOG/106

SHA256 20704383e2507b6dde7c1cba5bc735dae3e1adfc4469d23ebbe8c797bf73e14f
MD5 871c556ef318fecd107c548cc09ac232
SHA1 0fac98712db6edafd4130a88de88c0e640c8e570
SHA512 e3a0d0ac8de57c35e6c30632f46636a313004db28777815490c590668793cedc8b861e3ac7e22c4e7d3d76db06112378ee62eeb2b51e590e0dda73ba83743bc8
TLSH
T12BE0C96916E4D845F5B25D3491B2C2935A6735524C01988BBA5843E610E5845EEA6280
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

.rsrc/1033/DIALOG/107

SHA256 2bab930352747c1fbf443fb84bb2a4a3f36a870a7760c29c24c39b329adb3e8e
MD5 90e79fe8e3b799328a55027b3f8c94e3
SHA1 62a209192598f66dfa14fa9c7c5f27c5ccdd13ce
SHA512 608d48daff3abf1b30a5e3a957694292206a29075c7008ab4138f32e133467f39296c2e12c5963b81ec1262e5d1e18e453d319e8eccd59813b846edc95610b73
TLSH
T13FC012890294C80BC035433482C4C7A3E5333051001045477A5803925001C408F217C0
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

.rsrc/1033/DIALOG/111

SHA256 e94bdd968fecc08ccc4a957606b26c21640d37032a689bd47362b4ba9a84f2b1
MD5 da56f2171f8941fba124dac27f84a7b7
SHA1 a35d20daf54374120092ae1b1169bb449d347b2b
SHA512 50b60e83856596590f595ef5022e87e51aa33549bc200c2ae5603207a127c674acd47e2251a87cae3085a9295edf9efea9b1c76f84878d1e755098cdea986143
TLSH
T10AA0026402398E4FC137A9B51195D6628126F40054141A07B7B8121618549C18F04185
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

.rsrc/1033/GROUP_ICON/103

SHA256 92114b49f22ed226887690a30efcb08a73625f7101f9618e66666ec2115e874d
MD5 2afdf27a2ec4056da5b993203178e0bd
SHA1 d18ccb285d34d5f4cb27674a72394de6a3c6537c
SHA512 844a9de94002545e03f56a891bb98f30b5ccc740cf900949a07055d278b14fe7e7b8dee6a8736bab60f1c71b94ee4f18536314e74ac093841342a2a97d90f179
TLSH
T1DEB012019708040CC3E08F7804070733803DE0E401B33747091F0AE83C071701BB4A00
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

.rsrc/1033/ICON/1.ico

SHA256 e8b707f02421a5470a7fab768b68039d1922f3d56f8972e1a06fc1d0e944aa34
MD5 c3f3d0301627dd0d2c188bc22d5ab4e0
SHA1 27a5709ae4ab78bdfbbdc1e813b9fe5991c85211
SHA512 179309012949f44d807a1af62a316c4fd27350bcece0ff14448e04657a85c55c375d926f1428fc3edde8b657e2b6db00deba5f4dc77bb26d586c9ea608b21f3d
SSDEEP 96:GWvMLnsF/WQFeNxK9Wm2Gnr+bdSYJVfysc7tPxj2AnvA2wTPPPPPPP6o:GWvMLnsF/WQFeNxK9u3Ko
TLSH
T15F124525AAD6840DE61ED4336B10C2F90C947C54B3E5912727F6FE83B6BA2643124E7B
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

.rsrc/1033/ICON/2.ico

SHA256 c50ca10f7d17734a643863ce90f9b3ff16296d85f35008116f602825e36fd441
MD5 4f42d76834840916eae70813398bc279
SHA1 5d1a04d0d0a7eb9671c147bfb55b6017214cffd6
SHA512 60762c9bbeaf32fc397af9525087d022c06747c2df5ec11d9ad67b554da5cb821631b282e264237e0ae4e09f30eb2bbf091edc97abe7599b9018fe1d33548394
SSDEEP 96:vY0Gh1Y0iehsY0ivpFLhaw9Y0iv5hX4vwppPi2+w1zw4VaXWbEjoPDQMTKVo:gls8hBLJi/xIPwFw41
TLSH
T1A7916D3AFEAD8450D505793AF86ACB712110EC905FE12C1926C27F3FB2757A2580E61F
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

.rsrc/1033/ICON/3.ico

SHA256 2eebe9e21eeee6706e19cac3756bbfcce26c567be8a75ffb68bbb7d5009fb440
MD5 a6ea41c9ec85b4e9de38e7522293528d
SHA1 c364b3d81206520116f17bb9b90f2958b7a9a8a3
SHA512 125d89d6324322fd550bb838e8f166f21ffdb6f5dcb89127ba4ceac0f743d2a4d8994ebbc278b717756303829635825e4ab5d4950888f3a0fa5ad9697f53142f
TLSH
T1BC71EFE9728AFC46C5820F346C065B664225BD0288B59AF775CE3BEF543F2630669784
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

.rsrc/1033/ICON/4.ico

SHA256 0760ed268c19ea088f8198d88ad6dd667b80e55ccd5b1cdf7bb6c5171e424266
MD5 1e907ffd5c748288a85c72dddfcf5bdb
SHA1 495f97e83a38b81f214ed959e1ce736838e3e173
SHA512 97ebfac597d397b97c97e446b41a139470c68def80feb142596c6418d412a5429da5e79c324a3e5ec6c4a0d0c9878a58064a2d4e7555ef3bdfb064bda8c4f5b5
TLSH
T1E9414A6173018884E581CD334DCADA6C0114BC27806E389537C5BEBFEE37DDED562556
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

.rsrc/1033/ICON/5.ico

SHA256 cb9250a829cc7ce06a0fdb370ce94fad14f2ef710e684b665f0e998dbd787212
MD5 e7fc057785777f5376559b39bba90de6
SHA1 d401b993dad0a07d1728e43f83bc0cc11b82bc3e
SHA512 a5a5be080709e5d24d27082d4c77c66272c2ad382b926d9bf279779d61017c1fdd8767b15dcc4cf9bbb41875c09dadc2b748568124f5579054cfba68856dd413
TLSH
T17F21C42616118884EA94CC3645CBDC5C0524F91B905E7E8977C05DAF2F17CEED67315F
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

.rsrc/1033/ICON/6.ico

SHA256 32c4064844e46bf5fb2dc2d5ec6036863c6a589d0f95399d4108c35dbac0c01d
MD5 0610bb957f122ed817b303ecc3b0b744
SHA1 a9df9ca8e2f25736e64134aafeea03bd0a1c3753
SHA512 0753982e0686a4c8de79a6a79f939d2871356f25cd5e0eeac79d4a23689891c1674c9fed70827f1c81d2288eb2ddca15740fdf0a6d6770f23fbe48bd4e78d3f7
TLSH
T1B9216326F8AC8150C2008670FC5BD2771164AD0AF7922E8AB6DBBE3FF5B5314D41D61E
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

.rsrc/1033/ICON/7.ico

SHA256 a3ef4ba934908c3ff10dd3ef482b215272558126447086b2f0831334ae9738a7
MD5 094bca9b696f8e1fd503aa403da1c7ea
SHA1 15c75288bc98e0f4e47337e42f6a4baca93744ba
SHA512 a0280bc277fd94afff23ef39a100c9702be8ce98f4576864d83e8db29fa206c1fada6b3a8f662130e44912691405245d4093b3c2fd47aa94f617774c22eb51fa
TLSH
T13D01DB1AF547D9C9FC5806324C738761447D1C29AD34412E5F60AE1BAFB179135D70D9
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

.rsrc/1033/ICON/8.ico

SHA256 961d38aabb4482385c4133de8ea6d31c238663e402bfa7acb3dc8bfec5158bd1
MD5 348188fa0624169ce7937ab583b06838
SHA1 08a165e6e938284044911d03fb84231a9c2b8233
SHA512 06cd8c5fcb099bf751d2b135438fb3e03f199a8043a7b94e3e700658bf4fbf1eaa9930ceb8d88359f56a9f103888ea104b4c04e944f64019b743601c189fcc55
TLSH
T16AE0120676547644C248D1368D175F551E302C066C510B47A670BD4E3EB8324544246D
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

.rsrc/1033/MANIFEST/1

SHA256 cb24fe30879e7b0870fb61f7c16bdb8c4fa9a2a8c2d945bd3ea8dd889e93c0ff
MD5 18a65b0356650472e36d75deef2173b5
SHA1 ad8ae2a67c7258efa638901ff609cc6561b96b4f
SHA512 c3f42c6e59b34d81c5714ab4897988ad6776dec047dcb2736869a7280aa0a78845c70b76a57e71dc3f6edfa23723fafad522eafea10019c1b2ac7a3b52a6cf56
TLSH
T103111481C054E926E71202E33E75F55C15BEA32B04CC46EDC4C2997EA74B7CA87421A1
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

.rsrc/2052/version.txt

SHA256 5c37219674d8e8595c0e440347333abbe775d4df2a17f338619e0a80d4e8e4ba
MD5 9e0957e81ed21f65b364df51558875df
SHA1 233be67b59b47ce6332b24f9c2d63f4292109b89
SHA512 de406de028276976e9429dd88aff7e7b3824668643e52216f16e60347e82f16512c06f10eea7b86574a2081729b479a73ce8a17d5444fb297a60787c7c32b53e
TLSH
T17721960692FB369860A765894EE6CC3643537910043DD25ED8CC7F8D4FD340559117F3
MD5 SHA1 SHA512 TLSH

NSIS installer

installer

.text

SHA256 08e027b6a7ad20eb782d24278ee36243138cf08acb48c99f5907da9b1dfb60fb
MD5 872e86e68fb1de2bf1d7e5bfdfae5b21
SHA1 e6b84f5d849470428fa682c7acd09ef723b7468c
SHA512 c7f753b9bd2dedea8da340d3873e29e626433ed9c426219b1acc3e6f10df597c7f54cc8693f5173b240a7db28693392d495c84b274a7e97a4035d7920bc22ff8
SSDEEP 768:huo84Cg85pDeQT8lx2itpp9hF+p06mEe2b5QVxhM6:xZHeDe88lx2AppTFr675
TLSH
T11ED28D1FBEC1D4B3DA124A750E7AA767F3F2E32412224743A7204F457A232EA8D1D157
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

CERTIFICATE

SHA256 f6950542ba262272bf60db93beb5c1910c550f11324acafa3b566639b32cee2b
MD5 68609ed10bd541ce739829f794ba207b
SHA1 6089357f5f739409370a2dfd5a8de81869a5c847
SHA512 a966282befe2400337513165a6fb97ebc4b5948eceb9d625dee1ef916a09d0ef45cd6dc523daa32c9e6e5c90a96eb60ef016636d4956cc64e95d1ed1bf3d2579
SSDEEP 192:c7ndu72kEYe+PjPUrFKWpyNr9ZCspE+TMQrI78e6D:UndpkEYPLcKseMT7O
TLSH
T10FF1E8C70E286452AECA8E50E2D6D667DD71B3D0AED954A790B584C23EC6FF03B1940E
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

[0]

SHA256 53d8f48b6867f411fa2ad6231dd1c9c19d866151cd48fe7d9e202774774ce2f2
MD5 aba27cb999825d275c8248963800c262
SHA1 b87e64002d57bfa0bb48ea8f9020a63d362e6f56
SHA512 1f61e82fe14c66973331c8cdd784fa0ed76858464ed0c03b161560a3f8c825c93dac3d9775e9cc68dc71fb6295b9a03ab07b20b728f480968349a0dc990b37fa
SSDEEP 49152:siFYK0fI+e8+lt9fDm0aK4TcODfSl1W6xpcAjecsCX7YYGlTkNOuF:9P0fBe8+n9fh4TcCfSlEqpcnYGlwN/
TLSH
T122F533FA11D38953157F95DE08FBC0361DC28AA2DF6318C5241F7BCCC1A624B7996B8A
MD5 SHA1 SHA512 SSDEEP TLSH

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Invader.52f4bbbb37c14c6cf7a1041841f53c81

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

.data

.rdata

.rsrc/1033/DIALOG/103

.rsrc/1033/DIALOG/105

.rsrc/1033/DIALOG/106

.rsrc/1033/DIALOG/107

.rsrc/1033/DIALOG/111

.rsrc/1033/GROUP_ICON/103

.rsrc/1033/ICON/1.ico

.rsrc/1033/ICON/2.ico

.rsrc/1033/ICON/3.ico

.rsrc/1033/ICON/4.ico

.rsrc/1033/ICON/5.ico

.rsrc/1033/ICON/6.ico

.rsrc/1033/ICON/7.ico

.rsrc/1033/ICON/8.ico

.rsrc/1033/MANIFEST/1

.rsrc/2052/version.txt

.text

CERTIFICATE

[0]