Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
3a22128b028979d7969a94c86246fb3fa8e8fe4c862f579c8b2b1f9ea39556ec.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3a22128b028979d7969a94c86246fb3fa8e8fe4c862f579c8b2b1f9ea39556ec.exe
Resource
win10v2004-20220812-en
Target
3a22128b028979d7969a94c86246fb3fa8e8fe4c862f579c8b2b1f9ea39556ec
Size
603KB
MD5
7b4a034dcaa5dbe37402d021b2b53cf0
SHA1
baf9af0a5972e6040046724e8df51fc28498be99
SHA256
3a22128b028979d7969a94c86246fb3fa8e8fe4c862f579c8b2b1f9ea39556ec
SHA512
d911579575cd8cab17808634340104e10db3efadeb34247f50cd6c61a786b14fcdf73eb59798e4efa5947d0e8ebd38a60890840cac07c351dda59afbcd15045c
SSDEEP
12288:PucbRGIuK/lLvcRngP8XYcf4HalBNoPM:mKVuK/lbcR48Icf46lI
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
SetWindowsHookExA
GetDCEx
ChangeDisplaySettingsW
CharLowerA
GetClipboardViewer
DefWindowProcA
GetWindowDC
EnumDisplaySettingsExW
SetMenuItemInfoW
wvsprintfA
GetWindowWord
CallMsgFilterW
AllowForegroundActivation
GetWindowThreadProcessId
GetNextDlgGroupItem
GetMenuItemInfoA
SetInternalWindowPos
DrawCaption
DeleteMenu
IsGUIThread
SetFocus
UnregisterClassW
GetWindowModuleFileNameW
RegisterClassW
SetProgmanWindow
GetWindowModuleFileNameA
ChildWindowFromPointEx
SetCapture
GetMessageA
SetProcessWindowStation
GetMonitorInfoW
AppendMenuW
SetThreadDesktop
SetSystemCursor
LoadImageW
GetNextDlgTabItem
DestroyAcceleratorTable
IsZoomed
DrawTextA
OemToCharA
ToAsciiEx
MessageBoxTimeoutW
MonitorFromRect
IsCharLowerW
SendMessageCallbackW
SetActiveWindow
CopyImage
BeginPaint
ShowScrollBar
EnableMenuItem
ModifyMenuA
CharLowerBuffA
CharNextA
RegisterClipboardFormatW
CallWindowProcW
ReleaseDC
SetForegroundWindow
IsDialogMessageW
GetMenuItemInfoW
DragDetect
EnumWindowStationsW
CharPrevW
SetCursorPos
FindWindowW
GetMenu
ShowWindow
GetWindowTextA
LoadBitmapW
SetDlgItemTextW
wsprintfW
DispatchMessageW
GetGUIThreadInfo
OpenInputDesktop
RegisterClassA
UnhookWindowsHook
PrivateExtractIconExA
GetWindowLongA
WaitMessage
ModifyMenuW
SetScrollInfo
CloseWindowStation
CharToOemW
PrivateExtractIconsA
GetClassInfoW
GetKeyboardLayoutNameW
PostMessageW
CharUpperA
GetInputState
GetClipboardOwner
TranslateAcceleratorW
PtInRect
GetScrollBarInfo
SetWindowsHookW
CascadeChildWindows
OemToCharW
RealChildWindowFromPoint
IntersectRect
GrayStringA
GetPropW
SetClassLongA
ChangeDisplaySettingsExW
SetCaretPos
GetWindowTextW
SetWindowWord
GetAncestor
SetFileApisToOEM
GetStartupInfoA
DosPathToSessionPathW
SetTimerQueueTimer
FlushInstructionCache
ActivateActCtx
SetCommConfig
SetLocaleInfoW
lstrcmpA
SetLocaleInfoA
UpdateResourceW
CloseProfileUserMapping
GlobalFix
SetEvent
GetVolumePathNameA
LocalUnlock
GetStringTypeW
InitAtomTable
CommConfigDialogW
EnumResourceTypesA
TerminateThread
WriteTapemark
GetModuleFileNameA
GetVolumeInformationW
CommConfigDialogA
GetProcessPriorityBoost
GetStartupInfoW
CallNamedPipeW
CreateProcessA
IsValidCodePage
IsProcessorFeaturePresent
ReadConsoleOutputCharacterA
ReleaseSemaphore
GetTapeStatus
AddRefActCtx
CreateThread
EndUpdateResourceA
GetVolumePathNameW
SignalObjectAndWait
GetPriorityClass
FileTimeToDosDateTime
GetFileSizeEx
FindAtomW
GetTimeFormatA
GetLogicalDrives
CopyFileExA
LCMapStringA
GetConsoleWindow
EnumUILanguagesA
SetComputerNameExW
EnumResourceLanguagesW
GetVolumePathNamesForVolumeNameW
SetLastError
GetCommConfig
WriteConsoleInputW
GetDriveTypeA
TransactNamedPipe
IsBadCodePtr
LCMapStringW
ResetWriteWatch
GetCommProperties
WritePrivateProfileSectionA
ExpandEnvironmentStringsA
BuildCommDCBA
GetConsoleKeyboardLayoutNameW
VirtualQueryEx
GetPrivateProfileStructW
GetLargestConsoleWindowSize
GetCurrentProcess
GetSystemTimeAdjustment
GetACP
EnumCalendarInfoW
BuildCommDCBAndTimeoutsA
MoveFileA
GetLastError
GetProcessHeap
GetLastError
GetVersion
VirtualQuery
LoadLibraryA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetOpenFileNameA
FindTextA
VarCyFromBool
XFORMOBJ_bApplyXform
CreateDiscardableBitmap
PolyPolygon
ImageList_Replace
FlatSB_SetScrollInfo
ImageList_Read
ImageList_ReplaceIcon
��2��������Bb��s����� �aH&���N�"�]�����I)��ۊ�k>���r�^����B�#}]����,sF�&'OY����3����j���(e�/n���9m�+���<�kh�9T�{28+�`ݞ%�~1N)��FR%��JFx��5W �VU���i;��92���n��(y� �A|�j��v�]�ס B�� �Wď��� o��4�2�5���1���4�<I��&���8���R6ثw}�Z��yDE�3z��S��W����T��t;?%WotR���E �w�����:��ն����J�U�a1�};QF��0HPC��W�̓o�Bg"[�j��W�-����$qnM�������� h{��� ��v�9e���(����Erfa�:�G�)���%��$�K���pd��5�Gf�W����kw,��V�!��K� �!Y��<;�f�N���Pl�Xf��.x�!��p⤃�l�8�����(ֳΰT+�A��d}�La/?D�!0k���I ����w\��J��y���!-:��x�#�8d}�����E�I>��%e=�ӭ (�x�q��~��`�,���t���Lsr4r��/JA8���T�k�|�'���;�?h�gc���4B��X�̌��떒c),������3_�=��xXi����%e�T5�-��J���G�~�^",s �뵧�T=U�0��]�wcA����O��ͧ'/���H2���f��� �"�\^:+)��ʐ��a�mm����]+�uo1([����R?\��ߪ�B�=0�b��'r�;�h��)�����)l�5�Ei���֒v��yi�����S��4Y�I���)����\9�<)��68����Ԋ��'���Ezήw�����OR������d4��9)C#��yl������M�5�E��)�`^h�=��3��ez���`mV�[$bl��KO��6�46�*�/��S� �.���������w�t�U[[����].�c\=JБ��vs �������eٳA�(��Lצ4����A1,dC��e�w_�xֺ�U�o�z��<7�}!��x��o4�g�Һ��l~O����1)L�.�qX(��ܺ�u�,L��$�������/�U�r��:�U�%r_/t"�hǀ�-�az]�7��my͋�@y_�L��vɥe�����H����g6&.��C��7�o��T�G#u���F�ɂ?`��ڇg|�kz�?�-k��T�d�����q���X�0�+[���ST �lu4^%9��p����a��.����j%8�q�R��˚\$��[:�AO��ѤG�Ɵ�e�����_Af�2 ��������Ƭ�m�^5'�DV��aǡ���JP��}��`��E$jm0���W��e7I[����?Vd�@���?�l��Gu��t��A�P�<m�Ք���{;����I��z�E!�NYm�-�V�X5j������ :P�q���i�n��r��r���� V cv[����>��evxzY|�cU$[��>�2~A�J7�����o$��4gV�:�ب�&���t&���{U1-���P���%.mmG@w \�9=���/4�[(Y�U��M����o���L(K�p��g�k��,��}�N�����- `BG�����?nv���*-a��ݤ�l�q���` 8O�u��\�M�H4�r��UL����ͼg�%��C���X:��V�$2\��@��B⭏�7q�����)qBV�����G�a���|=Pv�e��/����ޟ���X_�c�O`�PP����,u�]?�R��C� ^XP<��kƸa=�=�)>���������N��+�C��,c&)M<ܿMn�{�H06:p����Q&���{)*`T��+�\�Vj'���G�W����u�˱��l��]�pk���I�M��Ӕv�.΅���ox���D��rjj/"�. ��XJ��+����O�b�c�p{Qh�u�>RQZ�]�� ���V�\�B�Ǵ �r4�"n�/KHBa�k��\��h�I���{�J���� �ث~~@�X����<k���!Q�$�˪(�x��%Q�Օ@�N}1��>zKccZ��G�������c��HLH�;��Z������ʵ�<����&!O��0I?U�u2������E vC�c���m�'[BS���z���/2��uP���qGL� �>HڠA�b�Ǻ!�|�\ ~���5·`� ���s�e�qs;) gU��)A��l���d���V���j1 ܐ�Z���hA���|��4T�'��Gv-�c����oh���t�8��[��p���r��ڐF�@��ZAf-�.pȰ 많���� %}��Bd�u�RUp̳P���ВZGw�.|Z��p���wx��r2�0��/��m����ޭk���q�����ec#���7n���]h��%����9����j��|�.��}>+:��ԖPq,��h)_�;���B.\�v�Kh�?�-fP0�� d a�2�|�poÌ�% =w `�a����.'�@^�O�e_�)f��C�E)T�z���RK9������\A�V�N�na7���8e���g�U^]���Zc�����O�Ciܾ'R68��L�f�w��k -eh�2.&}�l��@�(6K��g�v�mgwg]�+g��"/NF�|Fp�1�T�K���W��v�k�A��j�/���1�w#���>,�S�2&�b'PR�շm��j6�Xb*j���Y�f�Ҽn�C����&���C�Ğ�����r�-(i���:��V�������/�{��ڢ� 8w 5�TS]���.�$����g��� � ֲp�yy�����b�P�N�Sl,�����<n�Q[�y����%Hm08H���Ѷ���&�n�,�>b>9ub�uZ��`#;L.����,N��}��*�߲dlT�2kI㤬��e��i�(M@���z�#�یT���"�N�:"]8��j���!����v�l��"�d-;������ 3�� Wp=�a�����Y���F=�=E��Z�����$ɲW"�o^��e���9}�X�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ