Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
f73a404bd789e7cd326b3b39166fbc8c90a60ce4b8b89c93f6254fe3c006bebb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f73a404bd789e7cd326b3b39166fbc8c90a60ce4b8b89c93f6254fe3c006bebb.exe
Resource
win10v2004-20220901-en
Target
f73a404bd789e7cd326b3b39166fbc8c90a60ce4b8b89c93f6254fe3c006bebb
Size
738KB
MD5
30a178752b4226b8408faf824522db10
SHA1
1d8050ac403a51031d1ac99228c9902bed45f4df
SHA256
f73a404bd789e7cd326b3b39166fbc8c90a60ce4b8b89c93f6254fe3c006bebb
SHA512
e67b50e20c5bd3004bf05e07abc9c10e64785cbfbd2bdf27aa8dc2dd59adb0bc41e572a92e135b7fcaa7077784955d5b9d3b34564e94174f127a8e7af1bbef3d
SSDEEP
12288:fD4RT55fgZiJQVlLEw9PahRmzQJBDBcjF0U:74Rd5YYeVWw9KR3OjF0U
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
MonikerRelativePathTo
HICON_UserFree
CreateClassMoniker
HPALETTE_UserFree
WriteFmtUserTypeStg
IsValidIid
CoAllowSetForegroundWindow
HWND_UserSize
CoEnableCallCancellation
CoInitializeEx
UrlIsA
ColorAdjustLuma
DllGetVersion
StrRetToStrW
IntlStrEqWorkerA
AssocQueryStringByKeyW
SHEnumValueW
wnsprintfW
PathCompactPathA
PathRemoveBlanksA
SHRegOpenUSKeyA
PathIsSameRootW
SHOpenRegStreamA
SHSetValueW
PathCompactPathExA
StrFormatByteSize64A
SHRegEnumUSValueW
PathRenameExtensionW
SHRegQueryUSValueA
SHDeleteKeyA
ChooseFontW
PrintDlgExW
VarR8FromCy
DllGetClassObject
OleCreatePictureIndirect
VarUI1FromUI2
VarI4FromDate
VarI2FromDisp
VarDecFromI4
VarFormatDateTime
BstrFromVector
SysReAllocStringLen
VariantInit
VarI2FromI4
SafeArraySetIID
VarUI2FromDate
VarBstrFromI2
VarCyFromUI4
VarDateFromUdate
VarAnd
VARIANT_UserMarshal
VarUI1FromUI8
VarI1FromUI4
VarDecFromR4
SHAppBarMessage
DragQueryFileAorW
ShellAboutA
StrRStrW
OpenAs_RunDLLW
SHGetDataFromIDListW
DllCanUnloadNow
SHGetIconOverlayIndexW
FindExecutableA
SHCreateDirectoryExW
PrintersGetCommand_RunDLLW
SHEnumerateUnreadMailAccountsW
StrCmpNIA
EnumServicesStatusExW
UninstallApplication
GetTrusteeTypeA
EngAssociateSurface
DeleteDC
CreatePolygonRgn
PolyBezierTo
GdiConsoleTextOut
GetFontResourceInfoW
WTSEnumerateProcessesA
WTSSetSessionInformationA
WTSSendMessageA
WTSFreeMemory
WTSSendMessageW
WTSQuerySessionInformationA
WTSVirtualChannelWrite
WTSWaitSystemEvent
WTSVirtualChannelPurgeOutput
WTSEnumerateServersA
WTSOpenServerW
WTSDisconnectSession
ImageList_GetImageRect
CreateStatusWindowA
InitCommonControlsEx
ImageList_SetDragCursorImage
GetEffectiveClientRect
ImageList_LoadImageW
ImageList_Copy
CreatePropertySheetPageW
InitializeFlatSB
FlatSB_GetScrollProp
ImageList_SetBkColor
CreatePropertySheetPage
PropertySheetW
DestroyPropertySheetPage
ImageList_GetImageCount
ImageList_DragShowNolock
ImageList_ReplaceIcon
ImageList_AddIcon
GetCurrentThread
GetACP
LZCopy
OpenJobObjectA
LZRead
LoadResource
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
AnyPopup
SetWindowsHookExW
�(&jM�-)Q�?J���:Nzϲ��9�@�$�IN�U��s��d�ɜ�ol���56` �����N-������G��M_Я� ���k�6F�Z;N�>B�M��ps���YP)�H�c�0�����&���an(���M8.���a���K�������l�l�cy���*�m�G��5�ᢙF���J���HE��,RaP!�+���� w[���N��� �mR�y $���R���c�{�;S?�v,��-��W��L9Y�po��R�2�Md��D�I�)B�y-g��#r{�,=8�b)�`�ie�}��� �T�EҲ��KO ����H.���wYƤ+�r��DQ�JL�'(�����Y�5�æ�g͆E�#�����E�B]��|��@���r���&2���p�*=��s��=������� &R�[��������lܣ'&Ǡ0���z��C���a5s�kj��D�O����L���ʖ˓go�}��a���'���F�j�������xSb��O<�?l�ޤ ӽ��T�V�_��}�a_W�9�uŞF��}���Mb�y��歋����u ��%�6�/� ��<��E%H�r�zRk�6H������+�'��`%����4L�-���z|F)���W����������!?�� ���z�0�5m7����� n �{���꽞T;bכ�ͅ�>���t�~���~�q?Xt�����1"o � AO����"��6�!�|Og���u�m�k��K�e� h2d��|��^�p�w��U�{c���re���3�DF�{�2���b�p�Jγ?����w7�O jr��3sx�}j�~rz���=u��9�2Mo�a��j�hR��Q��7#���F,�αh-��+�|KW)�K^8:z�e.u���6Eq�����T�)�<�<;����ϭ�i}4*����q"��L0b?R�C�F+G�)�{!$��(�:�Eq��-��k�� ��G�SΙ��%�3�i�&�S_b���Z?�1��c�[6ony�eժ�x ��J6L�TsyΕ�Ӫ}�� ��U{���+���jF!�یH��A�������o�]i�{��\!��ir���VX���=v<b��#�y��U�ŰA֑��=1�Kf�3���V}"ī��t$NJ8�;�q��h���)�-y�) ��WԾ��|HUb�����&��,��M�HG��d�+J�� I&��A�!���r4\aw��N�Г��y���ƀv���4?8��R�j�:�&����M�ܦ��G�ƒa[}���ԝXW���T�6[���6�զd������N��E`��e�������v����?CJ#�� �E<�}\��>����M�_�t�����������_6�w ���u��C�Zv+����"kZSEF<"_��?{���.��l�0VA���9���ް�1Lq7a���ǟ3��^=?5�������Y���^$)v�"���m8ץ�-0,�戼�YN�;��zr�m�Zg�%�Yo���&��d�j�DER�ͪ�Sd&�Ux�����S�4����KM���L������o��Wl�L�}bA� �(cE�Ys��o2�,Z���Tt�~��-�a��횖���H1�G���H �4$�;�|�k��UM��P+���X����~���$�O����s�87lX&D���1�Gv=O��?b���U�q�:@=J쁃<�'��v�<Fl����:��c$2$/4�V�_� ��9�@�e�<i♢�m�w���j��Z�n��:M���*w���.%�K������S� =gE$ɲ�pp[v@��!��n4:�d����ÚO ��a��?�mTq�Z�&�����U�j(��C�1������, ���xX�~���{�?�x5�+����/��� ��d��ۤ� g�kU��>=�R�+��i� N�d�_v���2�|�镁0�:�b�q[-ҢμQK��߭�Q,ɉTJ �Wǝ�����swꃝu��nSPg�����%���z�D$J~��1 ѮfYH�ʶe0��7.e��R�O:O3�U��4��K����U�G�2�nub5����B�l�ҭ���PA�������^yꮎQ��2[�*��;��~Cc�O;G57�ɼ��W+SbS�)E*�\?mc�wKR���Z�נ��]v�.�#ݞh�_r��_L3���fg��Z �Y5���gL�Z��3A_��~"�ܓ4��T�5���.��T��{w-"�l�)��JuR<Le�{���˜WY�ܣn�� ����)H�h��9F�j��)W �JP��n�z�8�2�����P���c�gf:��,xjC��A�_�8Vp����<��{����@��V*)��|�F�ž�������i��̈qj�c�����ش��"K���w�K���/=i�(�{�|�����>�%�፠��)�vH��*1��k��BH����j���oDV�W뒗�Wȧ��Y3��t3��M_Jo2�U�O������7]f�L�p���ų0,'͎��s��W�(G�^p���?*��{�Ѵ���q�� �~91T�WG��x��(�H��H~� '1������Q��6� ��[ޗY>WN��gi��EL��gfK&��[��/`��h!����v�_�9�O�O�ouaC0�,U�>��g�1ڵg�>W�q��� ��$����I� (��͞�>xz�8�%��$z����JQM��� �m�:ɧ'��<r��3zq��l�F������9�ʥ�)?�jw�9��ZD��&)��m�c,2��y@��+~�k�'d��/�6H�)�%���h Y&J}�.Cy�Ǐ��jM���yf��e���v��XƠ�<e\��ke��rA�2Ԣ`U��T��_�Av<V���S\����z�z���:���X5�$/����5���,���}d���r��*G�9�����@�{X��'�~'��5��Z���YK9p�Yi[G#*��.F�矲X!Js>�IM*�rv5A�@�Mg!�;�L�XŹH��|���h@y��3�/��|�pw-�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ