Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
BEService.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
BEService.exe
Resource
win10v2004-20220812-en
Target
BEService.exe
Size
8.5MB
MD5
6646c70063afb0cdb87573b97652a5bf
SHA1
c0454c9337e17b90408f2ab9bba1e9760007a0d5
SHA256
4c6b3981412e7ac2c0c099e0745b0a2b8603a01b6a53893a06556d2a1e8ad72b
SHA512
9bde10c3983c819c0d33b2425ee4ddf674800fcc2971ed603075a5a2e0c37afbd53494c0be7c8a2e22644a44594d8503948703be41807192783e50e0a3288a43
SSDEEP
196608:Re9YS0Z0R3pvIC32R9hBYLaTqRz0K9UhrOjuhC0pI2eCh0E3:RI0Zk3wjhgSCz0Vp2Y3
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
CN=BattlEye Innovations e.K.,O=BattlEye Innovations e.K.,L=Reutlingen,ST=Baden-Württemberg,C=DE
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
CryptCATAdminAcquireContext
CryptQueryObject
htons
Thread32First
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
OpenServiceW
WTSSendMessageW
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
��a]u���/�u�c)$?�,�.����;�xT\�~�S*q����c]�i/��y���i��2��e�g�$��m�hL ��&����&�h�xMڐQ^�d��1Z0M�d��� �G��gz��Gi4A��Ko�З ������V�-:fPLWi���k�-U�ZZJ�a�8��NQ����D�E�#�j��2�4?nsw!� ��[�����o�=�4,]�'�F���2?����Ԏ�w��[�ߡ��_[j���!c (��4����h��ۺ����� U�Z`ܐ���܍��~+�Y���\�<���]��(����g͵[�FQ��&R~O۴y������.�tO������^Y7)�����Q 'M�dD�ƑcnGf|�c0��3b��'��k0� N�C��g�ꐒ=�GR�W����;뒸�*��p}"8��S �BX!�ߙ<�b��h���\�pZ9.UmR�x�����_W�����t?V?} ���Ygh�܇r&ҵ�K�з7�z��iPEH�ڽ�Χ$��ƃޡ}Q`�4�B�� Iߍq�rZ�Pv�B�wۀ��])�Nyx�^�f��^DV���O�1�3sCW�������E3q?����'�7�u=�+.�r��l�M8����ݧfg�³�L� $y��>��-z�2�U4-��Nծ$s3�iv�{Uv��[�IR.p�nKp:��'LJ)�t��I%T����(���cp ��-#̄!/t���Hh��[Ԉ����&��ӛdsv�A+��ϴ�������]����(��j��m��~*H4�i*z �Z+Sm�Ft���sM�����C����l%���F�3�k������麫��r��-��@��:��Y;�5R9��p��4M����r��%���+���2���ky1���I0w4�i�R�&� bw���0v%�&��,� �yMB�]F����C�����C��TP��W��̗9���A��c����|U*�����W&�+\$��촟Di���k�4u���K�=_MU�L��C��D��$#5�}(������X\C^�/+�#�%䦫ZTUU���yݘ�qM�%���IJL Po4�70���8��e��c����yV+�r}���P�cc�D�Î�[}^���8�8i���S���5��G �A|�hZ�Sf-ה��y<���<��`?!/.�.r@�u��8�P��2�%�1_���rD3�6�4�{�P�����7��,�� �d?. �����AĶ��>* +���q� [=����m*� �T��0S���ǖ�դ����y��l~@O�w ���҂C,ە/qh��r�X> ����E�&�PC��ope��������ui��rS�g�,d_����f�f�l�Hv��1U&;#��hB�4ݡg���k*�Zsʾ �B ��P������?1�x �^�"4[2��9���H�AC6���!�GB���y��`��A��nu���H ���L�DXX֊��[�تV��\� ^��B`���M��?����hk��|�Mlk_"�{)h�Zk�L%^�s�s���dŚ�̈l��3��%&����x���m��$-U��B�*�7���٥���P c�6P���5<�}��SR�#�o�4>���J�@�pP:�0V���}���Z�oBi^��6 ���U��X#vc�KX��j�mx�Y�ԎTҡa�� ������d%+��Tg�;�O��6�_���5�d��3�=�>E$���OAº�7�hB.J2���"��!���Os�J6�d�W�k���H�gϯ�����w���������Ͱ�*��V����ה�T1�]|}�$��=�a`���\�įS��}�f%����f��Y>�"X#��&���iPɎ�������]�U�i���j����J������N�RԏLx�\Mp�#�xx-E�_)��4�~����C0n�"(Ā�g�I&�ց���7ɻ�Z�5~8UB �A��q<^%��c�i/�d�J���]WC�2i�_��Y�g��s9,1J����㈻�r�>R�b=�ӱa�䋇�ԛ6w�[�����Cyj�Н2]Im*;�uÎ�f_ "�MRQ}Z٩K��+<s�Lbx��d�G��~|���7����pX�嬌 "���31�j��F�D�:�h��Ȩ���������#7q��`�����)ab���P���ВT�>Vq�~L}s�<Hb�.6>E����)��-̅u�w��|.��}9Wu$cD���l�>����1CP��b,���y�yw!�1��6�+C؋%�2���gHwr8�rD|ZL2jd�R����v��Օ�Q�2g��?� � i�[gJj���r�-�E,;.�[�T�����2�Ŷ��s�����;�db*F'�{=�e��Ta�M&nB�ٖ<�7G�|���`]Rާ�HN��@�f���1��(x�����:��Hl�v��X�J�������ċ�.A:� ��;7�"��&k[�ZP|!2��1J|)[U�Js�@|ĬN��xtjl�?�ז�`���0�Y}��F���W�Zw��T��}؞��>�r�nt��ܙb�!fP���ͭ�4(����*|���K/���i�'���-�1%�R�����P;���Z�����.�H$����,��h�Z��g!�_Y�{�Z毾w��0�+I]�дCBu��I�4y���p.Ѭ���� �Q4��Vk&���J�N6���� 8�fh(��%�+3;$�_�E�e�SlE��'�/�[ ��OX��_�L��!?�=N/�6)���'�V!�)����pq�s�b��e���]��&&��������9PSS�2��g��f�U���=��"j����eq�Y��N�S����T����{�gU�ݴvh��P:.E:(HOw�?��Ͽ�w�y|��д�M�?>�tܿr����)�x������>m�^/���M��=�{)��iD�<{�_���8R��f *�!��-nS�&6��H����|�5Uq���JQ,��OH�МL����?�������ng�C#;��������= �U�,
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ