2026-11-09_447b9b960d3356dbb34b7fe3d959f28f_akira_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-09_447b9b960d3356dbb34b7fe3d959f28f_akira_icedid_luca-stealer_njrat_stealc
Size 16.0MB
Sample261110-z3kddsbc24
SHA256 bd5d3d0c2152808e920f05b620e40747d813c0571e584b0f283c678560b03221
MD5 447b9b960d3356dbb34b7fe3d959f28f
SHA1 531f470fdf5e9408f6323627f349e6aa8ba22d30
SHA512 f141df8b0c34af7a0efee1c35424bbea91ca0c58066bf3f234427565d7358d3aac657514d39ba614c4e7668426ebc82eb26d2ec95d36b5cff71e1afabc30506c
SSDEEP 393216:HgpnWDzCpEVkUuGlPtmXRhQUvDYbnOQBQ5Wuns9iRuzgtK/jo3aAgFMax:ApnWDzCpEVkUuGlPtmXRhQUbIOQBQ5Wr
TLSH
T115F69E0F729540EDC4A6C174CA46962BE772788C0333A7EB93A147A23F27AE15E3D751
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-11-09_447b9b960d3356dbb34b7fe3d959f28f_akira_icedid_luca-stealer_njrat_stealc

.exe 16.0MB

2026-11-09_447b9b960d3356dbb34b7fe3d959f28f_akira_icedid_luca-stealer_njrat_stealc

IMPHASH 4029d977d87dcc11ca09a4b51515fbad
SHA256 bd5d3d0c2152808e920f05b620e40747d813c0571e584b0f283c678560b03221
MD5 447b9b960d3356dbb34b7fe3d959f28f
SHA1 531f470fdf5e9408f6323627f349e6aa8ba22d30
SHA512 f141df8b0c34af7a0efee1c35424bbea91ca0c58066bf3f234427565d7358d3aac657514d39ba614c4e7668426ebc82eb26d2ec95d36b5cff71e1afabc30506c
SSDEEP 393216:HgpnWDzCpEVkUuGlPtmXRhQUvDYbnOQBQ5Wuns9iRuzgtK/jo3aAgFMax:ApnWDzCpEVkUuGlPtmXRhQUbIOQBQ5Wr
TLSH
T115F69E0F729540EDC4A6C174CA46962BE772788C0333A7EB93A147A23F27AE15E3D751
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

04:5a:b4:10:16:aa:e7:c8:11:4e:e3:f3:97:0a:d9:f6:7f:fe:ed:92:bf:2d:cf:c3:29:1e:bc:61:4c:3e:d3:09

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=4688291,CN=id Software LLC,O=id Software LLC,L=Richardson,ST=Texas,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Nov 4, 2025

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

0a:32:70:86:0f:f6:25:e6:66:ff:15:3f:1c:13:63:22

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 26, 2025 - Jul 13, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

8851476

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Jenkins\workspace\OM_1_2_Remastered_Osiris2_medusa\kex4_osiris2\bin\x64\medusa_Shipping_Playfab_Galaxy_x64.pdb

partywin

PartyDestroyLocalUser PartyCreateLocalUser PartyGetLocalDevice PartyConnectToNetwork PartyCreateNewNetwork PartyGetRegions PartyFinishProcessingStateChanges PartyStartProcessingStateChanges PartyCleanup PartyInitialize PartyDeserializeNetworkDescriptor PartySerializeNetworkDescriptor PartyGetErrorMessage PartySetOption PartyTextToSpeechProfileGetLanguageCode PartyTextToSpeechProfileGetName PartyTextToSpeechProfileGetIdentifier PartyChatControlGetNetworks PartyChatControlGetEntityId PartyChatControlGetChatIndicator PartyChatControlGetLocalChatIndicator PartyChatControlSetAudioInputMuted PartyChatControlSetAudioRenderVolume PartyChatControlSetTextChatOptions PartyChatControlSetTranscriptionOptions PartyChatControlSynthesizeTextToSpeech PartyChatControlSetTextToSpeechProfile PartyChatControlGetAvailableTextToSpeechProfiles PartyChatControlPopulateAvailableTextToSpeechProfiles PartyChatControlSetAudioOutput PartyChatControlSetAudioInput PartyChatControlSendText PartyChatControlGetPermissions PartyChatControlSetPermissions PartyNetworkGetDeviceConnectionType PartyNetworkSetCustomContext PartyNetworkGetCustomContext PartyNetworkGetNetworkStatistics PartyNetworkGetChatControls PartyNetworkConnectChatControl PartyNetworkLeaveNetwork PartyNetworkCreateEndpoint PartyNetworkAuthenticateLocalUser PartyDeviceCreateChatControl PartyEndpointSetCustomContext PartyEndpointGetCustomContext PartyEndpointGetDevice PartyEndpointGetEntityId PartyEndpointIsLocal PartyEndpointGetEndpointStatistics PartyEndpointFlushMessages PartyEndpointSendMessage

ws2_32

GetAddrInfoW WSAWaitForMultipleEvents WSAEventSelect WSAEnumNetworkEvents WSACreateEvent WSACloseEvent shutdown WSACleanup WSAGetLastError ioctlsocket socket WSAStartup FreeAddrInfoW WSAIoctl closesocket htonl ntohs setsockopt inet_ntop htons recvfrom sendto recv send connect bind freeaddrinfo getaddrinfo inet_pton

xaudio2_9redist

ord1 ord2 ord6 ord5

sdl3

SDL_SetNumberProperty SDL_CreateWindowWithProperties SDL_DestroyProperties SDL_SetHint SDL_InitSubSystem SDL_HideCursor SDL_GetDisplays SDL_GetWindowFlags SDL_GetClosestFullscreenDisplayMode SDL_SetWindowFullscreenMode SDL_SetWindowSize SDL_GetDisplayName SDL_GetWindowSize SDL_DisableScreenSaver SDL_ShowWindow SDL_GetFullscreenDisplayModes SDL_GetDisplayUsableBounds SDL_GetWindowTitle SDL_SetWindowTitle SDL_SetWindowMouseGrab SDL_GetCurrentDisplayMode SDL_strdup SDL_GetBasePath SDL_HideWindow SDL_RaiseWindow SDL_ShowMessageBox SDL_CreateProperties SDL_SetClipboardText SDL_LoadObject SDL_LoadFunction SDL_UnloadObject SDL_GetNumLogicalCPUCores SDL_QuitSubSystem SDL_Quit SDL_GetMouseState SDL_GetRelativeMouseState SDL_GetHint SDL_IOFromConstMem SDL_AddGamepadMappingsFromIO SDL_CloseGamepad SDL_GetGamepadAxis SDL_GamepadHasSensor SDL_SetGamepadSensorEnabled SDL_GetGamepads SDL_OpenGamepad SDL_GetGamepadJoystick SDL_GamepadConnected SDL_GetJoystickID SDL_GetGamepadVendor SDL_GetGamepadProduct SDL_GetGamepadType SDL_GetGamepadSensorData SDL_SetStringProperty SDL_GetError SDL_GetPrimaryDisplay SDL_GetDesktopDisplayMode SDL_DestroyWindow SDL_free SDL_MinimizeWindow SDL_GetWindowProperties SDL_GetPointerProperty SDL_RunApp SDL_CreateCursor SDL_GetCursor SDL_SetWindowRelativeMouseMode SDL_PollEvent SDL_WarpMouseInWindow SDL_GetModState SDL_StopTextInput SDL_StartTextInput SDL_PumpEvents SDL_GetGamepadName SDL_GetClipboardText SDL_CursorVisible SDL_GetKeyName SDL_IsGamepad SDL_PlayHapticRumble SDL_ResumeHaptic SDL_UpdateHapticEffect SDL_PauseHaptic SDL_RumbleGamepadTriggers SDL_ShowCursor SDL_SetCursor SDL_SetEventEnabled SDL_HasMouse SDL_LoadBMP SDL_CreateWindow SDL_DestroySurface SDL_GetWindowSurface SDL_ConvertSurface SDL_BlitSurface SDL_UpdateWindowSurface SDL_Delay SDL_RumbleGamepad SDL_CloseHaptic SDL_DestroyHapticEffect SDL_StopHapticRumble SDL_GetBooleanProperty SDL_InitHapticRumble SDL_HapticRumbleSupported SDL_RunHapticEffect SDL_CreateHapticEffect SDL_GetHapticFeatures SDL_OpenHapticFromJoystick SDL_IsJoystickHaptic SDL_GetGamepadProperties SDL_GetPerformanceFrequency SDL_GetPerformanceCounter SDL_GetJoysticks SDL_GetKeyFromScancode

playfabmultiplayerwin

PFMultiplayerInitialize PFMultiplayerFindLobbies PFMultiplayerStartProcessingLobbyStateChanges PFMultiplayerGetErrorMessage PFMultiplayerFinishProcessingLobbyStateChanges PFMultiplayerUninitialize PFMultiplayerStopListeningForLobbyInvites PFMultiplayerSetEntityToken PFMultiplayerStartListeningForLobbyInvites PFLobbyLeave PFLobbyAddMember PFLobbyForceRemoveMember PFMultiplayerCreateAndJoinLobby PFMultiplayerJoinLobby PFLobbyGetLobbyProperty PFLobbyGetMaxMemberCount PFLobbyGetConnectionString PFLobbyPostUpdate PFLobbyGetOwner PFLobbySendInvite

galaxy64

?Init@api@galaxy@@YAXAEBUInitOptions@12@@Z ?Stats@api@galaxy@@YAPEAVIStats@12@XZ ?ListenerRegistrar@api@galaxy@@YAPEAVIListenerRegistrar@12@XZ ?Friends@api@galaxy@@YAPEAVIFriends@12@XZ ?User@api@galaxy@@YAPEAVIUser@12@XZ ?Shutdown@api@galaxy@@YAXXZ ?ProcessData@api@galaxy@@YAXXZ ?Utils@api@galaxy@@YAPEAVIUtils@12@XZ ?Apps@api@galaxy@@YAPEAVIApps@12@XZ

cohtml.windowsdesktop

??1IAsyncResourceHandler@cohtml@@UEAA@XZ ??0ILogHandler@Logging@cohtml@@QEAA@XZ ??1ILogHandler@Logging@cohtml@@UEAA@XZ ??0IPerformanceHandler@Profile@cohtml@@QEAA@XZ ??1IPerformanceHandler@Profile@cohtml@@UEAA@XZ ??0IInternationalizationManager@cohtml@@QEAA@XZ ??1IInternationalizationManager@cohtml@@UEAA@XZ ?OnCreateWebSocket@IViewListener@cohtml@@UEAAPEAVIClientSideSocket@2@PEAVISocketListener@2@PEBDPEAPEBDI@Z ?OnCursorChanged@IViewListener@cohtml@@UEAAXW4Cursors@CursorTypes@2@PEBDPEBM2@Z ?OnCaretRectChanged@IViewListener@cohtml@@UEAAXHHII@Z ?OnNodeTouched@IViewListener@cohtml@@UEAA?AW4Actions@EventAction@2@PEBVINodeProxy@2@PEBUTouchEventData@2@PEAXW4PhaseType@InputEventPhase@2@@Z ?OnScreenInfoRequested@IViewListener@cohtml@@UEAA?AUScreenInfo@2@XZ ?OnBindingsReleased@IViewListener@cohtml@@UEAAXXZ ?OnFinishLoad@IViewListener@cohtml@@UEAAXPEBD@Z ?OnLoadFailed@IViewListener@cohtml@@UEAAXPEBD0@Z ?OnDOMBuilt@IViewListener@cohtml@@UEAAXXZ ?OnScriptContextCreated@IViewListener@cohtml@@UEAAXXZ ?OnResourceRequestIntercepted@IViewListener@cohtml@@UEAA?AW4InterceptRequestStatus@2@PEBD@Z ??0ISyncStreamReader@cohtml@@IEAA@XZ ??1ISyncStreamReader@cohtml@@UEAA@XZ ??0IAsyncResourceHandler@cohtml@@IEAA@XZ ??1TypeDescription@cohtml@@QEAA@XZ ??2IEventHandler@cohtml@@SAPEAX_K@Z ??3Property@cohtml@@SAXPEAX@Z ??2Property@cohtml@@SAPEAX_K@Z ?Invoke@?$CoherentToString@_N@cohtml@@SA_N_NPEADPEA_K@Z ?Invoke@?$CoherentToString@I@cohtml@@SA_NIPEADPEA_K@Z ?Initialize@Library@cohtml@@SAPEAV12@PEBDAEBULibraryParams@2@@Z ??0IVirtualAllocator@cohtml@@QEAA@XZ ??1IVirtualAllocator@cohtml@@UEAA@XZ ??0IBreakIterator@i18n@cohtml@@QEAA@XZ ??1IBreakIterator@i18n@cohtml@@UEAA@XZ ?SetText@IBreakIterator@i18n@cohtml@@UEAAXPEBDI@Z ?OnNavigateTo@IViewListener@cohtml@@UEAA_NPEBD@Z ?ResetToBeginning@IBreakIterator@i18n@cohtml@@UEAAHXZ ?MoveToPrevious@IBreakIterator@i18n@cohtml@@UEAAHXZ ?MoveToNext@IBreakIterator@i18n@cohtml@@UEAAHXZ ?MoveToCandidateAfter@IBreakIterator@i18n@cohtml@@UEAAHH@Z ?GetCurrentPosition@IBreakIterator@i18n@cohtml@@UEAAHXZ ?ClearText@IBreakIterator@i18n@cohtml@@UEAAXXZ ?DecodeURLString@Library@cohtml@@SAXPEBDIPEADPEAI@Z ?Invoke@?$CoherentToString@_K@cohtml@@SA_N_KPEADPEA_K@Z ?Invoke@?$CoherentToString@PEBD@cohtml@@SA_NPEBDPEADPEA_K@Z ?Invoke@?$CoherentToString@H@cohtml@@SA_NHPEADPEA_K@Z ??1IAllocator@cohtml@@UEAA@XZ ??0IAllocator@cohtml@@QEAA@XZ ??1IViewListener@cohtml@@UEAA@XZ ??0IViewListener@cohtml@@QEAA@XZ ??3IEventHandler@cohtml@@SAXPEAX@Z ?ResetToEnd@IBreakIterator@i18n@cohtml@@UEAAHXZ

cohtml_icuuc

u_errorName_69 ??0UnicodeString@icu_69@@QEAA@PEBD@Z u_cleanup_69 u_setMemoryFunctions_69 udata_setCommonData_69 ??0UnicodeString@icu_69@@QEAA@PEBDH@Z ?createWordInstance@BreakIterator@icu_69@@SAPEAV12@AEBVLocale@2@AEAW4UErrorCode@@@Z ?getDefault@Locale@icu_69@@SAAEBV12@XZ ?createCharacterInstance@BreakIterator@icu_69@@SAPEAV12@AEBVLocale@2@AEAW4UErrorCode@@@Z ??1UnicodeString@icu_69@@UEAA@XZ ubidi_close_69 ?createLineInstance@BreakIterator@icu_69@@SAPEAV12@AEBVLocale@2@AEAW4UErrorCode@@@Z ubidi_getBaseDirection_69 ubidi_openSized_69 ubidi_setPara_69 ubidi_getDirection_69 ubidi_countRuns_69 ubidi_getVisualRun_69 ?length@UnicodeString@icu_69@@QEBAHXZ

kernel32

GetStdHandle GetFileInformationByHandle AllocConsole SetConsoleTitleA GetFileAttributesW MultiByteToWideChar WideCharToMultiByte SetFileAttributesW GetFileAttributesExW MoveFileExW RemoveDirectoryW FlushFileBuffers DeleteFileW CreateFileW VirtualFree CreatePipe SetHandleInformation CreateProcessA CreateToolhelp32Snapshot Process32First Process32Next InitializeSRWLock TryAcquireSRWLockExclusive GetDiskFreeSpaceExW LoadLibraryW CreateEventA FreeLibrary SetFilePointerEx SetEvent ResetEvent WaitForSingleObject CreateSemaphoreA ReleaseSemaphore CreateDirectoryW GetModuleHandleA DeleteFileA GetCurrentProcessId RtlVirtualUnwind lstrlenA RtlLookupFunctionEntry GlobalMemoryStatusEx IsDebuggerPresent GetSystemTimeAsFileTime InitializeCriticalSection TryEnterCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS GetNumaNodeProcessorMaskEx SetThreadAffinityMask SetThreadPriority RtlCaptureContext GetFileSizeEx CancelIo GetOverlappedResult HeapAlloc HeapFree GetProcessHeap InitializeCriticalSectionAndSpinCount Sleep CreateThread GetThreadId WriteConsoleW IsValidCodePage GetFullPathNameW lstrcmpiW WriteFile lstrcpyA GetCurrentProcess K32EnumProcessModules GetLastError GetModuleFileNameA SetFilePointer CloseHandle ReadFile CreateFileA VirtualAlloc GetCurrentThreadId GetModuleHandleW ReleaseSRWLockShared AcquireSRWLockShared FileTimeToDosDateTime FileTimeToLocalFileTime VirtualQuery RaiseException TerminateProcess OutputDebugStringA GetSystemInfo GetLocaleInfoA ReleaseSRWLockExclusive AcquireSRWLockExclusive GetComputerNameExW FormatMessageA LoadLibraryA SetEndOfFile WaitForSingleObjectEx SwitchToThread GetExitCodeThread GetNativeSystemInfo QueryPerformanceCounter QueryPerformanceFrequency SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP GetCurrentDirectoryW GetTimeZoneInformation PeekConsoleInputA ReadConsoleInputW GetNumberOfConsoleInputEvents SetConsoleMode EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc GetConsoleOutputCP ReadConsoleW GetConsoleMode HeapSize HeapReAlloc GetModuleFileNameW PeekNamedPipe GetDriveTypeW GetFileType SetStdHandle ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread FileTimeToSystemTime SystemTimeToTzSpecificLocalTime FindNextFileW FindFirstFileExW FindClose GetConsoleCP LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc RtlUnwind SetLastError RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetStartupInfoW IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCPInfo CompareStringEx LCMapStringEx InitializeCriticalSectionEx DecodePointer EncodePointer GetStringTypeW GetLocaleInfoEx GetTickCount64 SleepConditionVariableSRW GetProcAddress

user32

SetWindowLongPtrW SetDlgItemInt GetDesktopWindow SetWindowPos GetWindowRect SetDlgItemTextW GetWindowLongPtrW EndDialog DialogBoxParamW wsprintfA wvsprintfA

comdlg32

GetOpenFileNameA

advapi32

GetUserNameA RegOpenKeyExA RegQueryValueExA RegCloseKey

shell32

SHGetKnownFolderPath ShellExecuteA SHFileOperationW

ole32

CoCreateGuid CoTaskMemFree CoInitializeEx CoTaskMemAlloc

dxgi

CreateDXGIFactory

d3d11

D3D11CreateDevice

d3dcompiler_47

D3DCompile D3DReflect

imm32

ImmSetCompositionWindow ImmSetCandidateWindow ImmReleaseContext ImmGetContext

winhttp

WinHttpQueryHeaders WinHttpCrackUrl WinHttpAddRequestHeaders WinHttpOpenRequest WinHttpSetTimeouts WinHttpSetStatusCallback WinHttpSetOption WinHttpConnect WinHttpOpen WinHttpWriteData WinHttpReceiveResponse WinHttpSendRequest WinHttpQueryDataAvailable WinHttpReadData WinHttpCloseHandle

crypt32

CertFreeCertificateContext CertOpenSystemStoreA PFXImportCertStore CertFindCertificateInStore PFXIsPFXBlob CertCloseStore

Name

.text

Size

9.0MB

Virtual Size

9.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5.4MB

Virtual Size

5.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.1MB

Virtual Size

6.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

333KB

Virtual Size

332KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

68KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

61KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=3, id=253, version=35207,

count=15, id=259, version=35207,

count=18, id=260, version=35207,

count=110, id=261, version=35207,

count=36, id=259, version=30795,

count=43, id=260, version=30795,

count=216, id=261, version=30795,

count=1, id=262, version=30795,

count=6, id=260, version=34120,

count=244, id=261, version=34120,

count=2, id=257, version=30141,

count=2, id=257, version=31937,

count=2, id=257, version=30148,

count=2, id=257, version=30153,

count=2, id=257, version=35211,

count=4, id=261, version=30146,

count=1, id=259, version=30146,

count=2, id=257, version=30146,

count=26, id=257, version=30795,

count=3, id=257, version=30154,

count=670, id=1, productName=Unmarked objects,

count=820, id=265, version=35215,

count=1, id=256, version=35215,

count=1, id=255, version=35215,

count=2, id=151,

count=1, id=258, version=35215,