Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
efac0f56adcc024f5fa778b382433455a16379effaabadde6a1c015e6e8d6c7c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
efac0f56adcc024f5fa778b382433455a16379effaabadde6a1c015e6e8d6c7c.exe
Resource
win10v2004-20220812-en
Target
efac0f56adcc024f5fa778b382433455a16379effaabadde6a1c015e6e8d6c7c
Size
837KB
MD5
9aa42bd8c922d7fa82feda96f6320175
SHA1
8f1c3cf1ea950aaf8f9172f4200c1672d09c19a6
SHA256
efac0f56adcc024f5fa778b382433455a16379effaabadde6a1c015e6e8d6c7c
SHA512
880ba1173903b0411b299e68a61b986542a81f7a46f840be43686f2fde21b367b51f2e9b7cfc5f730f08b5c68578e0e680e97f3e673951773322354618328a91
SSDEEP
12288:PqSFfapM43TCcjLwY3TnoTcIzuS0NZ2HdpQ7Jl:ZfSM4DCcPwYrTS0z2HcL
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetOpenFileNameW
GetFileTitleW
ChooseColorA
PageSetupDlgW
FindTextA
GetOpenFileNameA
ChooseFontW
LoadAlterBitmap
PrintDlgA
ChooseColorW
FindTextW
ReplaceTextA
PageSetupDlgA
WantArrows
PrintDlgW
CommDlgExtendedError
GetSaveFileNameA
PrintDlgExA
GetSaveFileNameW
ReplaceTextW
dwLBSubclass
dwOKSubclass
SafeArrayGetDim
VarBoolFromDate
SafeArrayGetIID
VarDecFromBool
VarUI2FromBool
VarI2FromI1
VarI4FromBool
VarBoolFromUI2
VarUI2FromDate
VarCyFromUI4
SysAllocStringLen
VarBstrFromUI8
LPSAFEARRAY_UserMarshal
VarNeg
VarR8FromR4
VarUI8FromR8
VarDecFix
VarI1FromI2
VarUI1FromDec
VarI1FromDec
VarBstrFromDate
VarI4FromR4
SafeArrayCopy
SafeArrayAllocDescriptor
LPSAFEARRAY_UserFree
SafeArrayUnaccessData
VarCyInt
VariantChangeType
OleSavePictureFile
VarDecFromDisp
VarUI4FromR8
VarUI1FromUI2
VarUI2FromStr
OleLoadPicturePath
VarI8FromDisp
VarI1FromBool
VarR8FromUI1
OleTranslateColor
VarCyMul
VarCySub
VarUI2FromI4
VarI4FromDate
VarUI2FromCy
UnRegisterTypeLib
VarDateFromUdateEx
RegisterTypeLib
BstrFromVector
VarUI4FromBool
VarBoolFromStr
VarR4FromUI8
VarI1FromUI2
VariantInit
SafeArraySetRecordInfo
VARIANT_UserSize
VarCyFromDate
DispInvoke
DllUnregisterServer
VarBstrFromR4
VarDateFromBool
VarR4FromUI2
VarDateFromR8
BSTR_UserSize
VarI1FromI4
VarBoolFromR8
VarI1FromR8
VarI1FromDisp
DllRegisterServer
VarBstrCmp
SafeArrayAccessData
VarUI2FromI2
VarXor
VarUI8FromBool
VarBoolFromI1
VarBstrFromUI4
VarI1FromUI4
VarDateFromStr
OleLoadPicture
VarR4FromStr
VarUI8FromDec
VarBoolFromDec
VarCmp
VarUI8FromUI2
VarBoolFromUI4
VarDateFromDec
VarFix
VarR8FromCy
VarI8FromDec
VarR4FromCy
VarCyFromR8
RevokeActiveObject
VarI4FromDec
VarI4FromI1
VarI1FromUI8
SysStringByteLen
VarI4FromUI4
VarDateFromUI4
VarUI4FromDate
VarI2FromDisp
VarUI8FromI1
SelectFontLocal
CreatePolygonRgn
StretchBlt
PtInRegion
CreateRoundRectRgn
FloodFill
GdiDrawStream
EngLockSurface
GetDeviceCaps
FontIsLinked
GdiGetLocalFont
GdiStartDocEMF
EngCreatePalette
CreateMetaFileW
ArcTo
SetDIBits
CreateEnhMetaFileA
CreateFontIndirectExW
FlattenPath
EngTextOut
CreateDIBPatternBrush
GetColorAdjustment
ResetDCW
DeviceCapabilitiesExW
GdiAddFontResourceW
GdiSetLastError
GdiPlayDCScript
EngCreateDeviceBitmap
GetTextMetricsA
AddFontMemResourceEx
PolyPatBlt
CreatePen
EudcUnloadLinkW
SelectBrushLocal
GetStringBitmapA
Escape
EnumObjects
CreatePenIndirect
SetBrushOrgEx
MirrorRgn
GetTextCharsetInfo
UpdateICMRegKeyW
GdiGetCharDimensions
CopyMetaFileW
RemoveFontResourceA
EngStrokeAndFillPath
GdiCleanCacheDC
GetRandomRgn
RectVisible
FixBrushOrgEx
PolyBezier
SetROP2
GetTextMetricsW
PolyBezierTo
GetRasterizerCaps
EngUnlockSurface
SetICMProfileA
CreateCompatibleBitmap
CreateDIBitmap
QueryFontAssocStatus
GdiSetPixelFormat
EngComputeGlyphSet
EngDeletePalette
CLIPOBJ_cEnumStart
GetMetaFileW
PlayMetaFileRecord
ScaleWindowExtEx
ColorMatchToTarget
getaddrinfo
gethostbyaddr
WSAProviderConfigChange
WSARemoveServiceClass
WSASetServiceA
WSAJoinLeaf
WSAGetLastError
WSCWriteProviderOrder
WSAAsyncGetProtoByNumber
WSAEnumNetworkEvents
setsockopt
WSALookupServiceBeginW
WSAEnumNameSpaceProvidersW
WSASocketA
send
WSASetEvent
shutdown
WSAAddressToStringW
WSAAccept
WSCEnableNSProvider
WSAAsyncGetServByName
sendto
WSAStringToAddressW
WSAUnhookBlockingHook
WSARecvFrom
WSALookupServiceEnd
WSACancelBlockingCall
gethostbyname
WSACancelAsyncRequest
WSCDeinstallProvider
WSADuplicateSocketW
WSASocketW
inet_ntoa
WSAInstallServiceClassW
WSAGetServiceClassInfoA
WSAIoctl
WSANtohl
WSANtohs
accept
getnameinfo
freeaddrinfo
WSANSPIoctl
connect
WSAEnumProtocolsA
WSASend
WSAStringToAddressA
WSCGetProviderPath
htons
WSAHtonl
gethostname
WSASendTo
ImageList_GetIconSize
DrawStatusText
ImageList_SetOverlayImage
ImageList_Merge
ImageList_SetBkColor
ImageList_GetImageCount
ImageList_GetImageRect
ImageList_Add
DrawStatusTextA
ImageList_Destroy
InitializeFlatSB
ImageList_Create
DestroyPropertySheetPage
FlatSB_SetScrollPos
ImageList_EndDrag
ImageList_SetFlags
FlatSB_SetScrollRange
ImageList_DrawEx
ImageList_DragEnter
FlatSB_GetScrollPos
ImageList_AddMasked
ShowHideMenuCtl
ImageList_DragMove
DllGetVersion
CreatePropertySheetPageW
DrawInsert
InitCommonControlsEx
ImageList_DrawIndirect
PropertySheetA
FlatSB_SetScrollInfo
ImageList_SetDragCursorImage
ImageList_GetDragImage
ImageList_LoadImageW
CreateStatusWindowW
CreateUpDownControl
FlatSB_SetScrollProp
ImageList_SetImageCount
ImageList_Write
ImageList_DragLeave
CreateToolbarEx
InitCommonControls
ImageList_GetIcon
CreatePropertySheetPageA
ImageList_Replace
FlatSB_EnableScrollBar
GetEffectiveClientRect
CreateStatusWindow
FlatSB_GetScrollProp
ImageList_Read
ImageList_GetFlags
ImageList_SetIconSize
ImageList_Draw
CreateToolbar
ImageList_Copy
GetUserDefaultLangID
IsValidLocale
GetSystemPowerStatus
FreeUserPhysicalPages
TerminateJobObject
GetConsoleFontSize
InterlockedDecrement
EnumResourceLanguagesA
CallNamedPipeW
DeleteVolumeMountPointW
RtlZeroMemory
GetDiskFreeSpaceW
LZClose
GetComputerNameA
WaitCommEvent
GetPrivateProfileIntA
lstrcatW
GetCurrentProcess
GetTapePosition
FindNextVolumeMountPointW
WritePrivateProfileSectionA
HeapSetInformation
LeaveCriticalSection
GetConsoleAliasesA
RequestDeviceWakeup
SetCommMask
SearchPathW
WriteFileEx
ScrollConsoleScreenBufferA
EnumResourceLanguagesW
LoadLibraryExA
GetModuleHandleW
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
KillTimer
IsHungAppWindow
EnumDisplaySettingsExW
LoadIconA
CharLowerBuffW
WinHelpW
GetWindowThreadProcessId
SetWindowsHookExA
GetClassInfoExW
SetWindowContextHelpId
ShowOwnedPopups
GetAltTabInfoA
FindWindowExA
EnumDisplayMonitors
WaitMessage
CloseWindowStation
GetUpdateRgn
CopyRect
SendMessageA
GetClientRect
LoadKeyboardLayoutW
SetDlgItemTextA
GetMenuItemInfoA
GetKeyboardLayoutNameA
CreateDialogParamA
RedrawWindow
GetLastActivePopup
EditWndProc
CreateMDIWindowA
GetClassInfoW
GetClipboardFormatNameA
IsCharLowerA
UnlockWindowStation
CascadeChildWindows
SetProcessWindowStation
RegisterClassA
DialogBoxParamW
SendInput
ClipCursor
IsDialogMessageA
GetKeyState
OpenWindowStationW
SetInternalWindowPos
ToUnicodeEx
BeginPaint
PrivateExtractIconsW
GetCaretBlinkTime
DefWindowProcA
EndTask
IsDlgButtonChecked
LockWorkStation
ChangeDisplaySettingsExW
GetMessageExtraInfo
SetClipboardData
GetShellWindow
GetLastInputInfo
CharToOemW
GetClipboardOwner
CopyIcon
LoadMenuIndirectA
GetWindowModuleFileNameA
GetWindow
DestroyCursor
DrawStateW
GetTabbedTextExtentA
AppendMenuA
UpdateWindow
GetClassNameA
SendMessageCallbackW
MessageBoxExA
FrameRect
GetKeyNameTextW
CreateMenu
GetUserObjectSecurity
SetDoubleClickTime
SystemParametersInfoA
RealChildWindowFromPoint
CharUpperA
IsCharAlphaNumericA
DefWindowProcW
SetMenu
GetMenuStringA
wsprintfW
DefDlgProcW
EndPaint
OpenIcon
GetMenuState
OffsetRect
ExitWindowsEx
PrivateExtractIconExA
GetComboBoxInfo
EnumDesktopsW
SetCapture
EnumDesktopsA
SetSystemMenu
InflateRect
CreateMDIWindowW
SendDlgItemMessageW
BroadcastSystemMessageExW
BlockInput
SetPropW
GetForegroundWindow
ReleaseCapture
EnableScrollBar
LoadCursorFromFileA
GetWindowModuleFileNameW
GetInputState
TabbedTextOutW
BroadcastSystemMessageA
IsRectEmpty
EnableWindow
SetFocus
�&%��U���d�k�9�Jf�߃�Z� �(�%����+�5�� sԏ��UQ�gO2��z�<�]��s038�1�������ŔgNjk �� ,�/��Dm�: �^�PY�Q�9:�S��܈~�[��U�mRxIq�w�{�����\�N��:��\�V�l~��gUfQl����{�?���uH��r;�p���gQ�G���a����\���rC0�� ���w���_��w>^܊�v��8J �a\)�|�kK�`a��!@='Vb���X\�h�Bf����i_�+ 슺K�`{R��RL����x j����p��4�˜�3A���`2���OZr���"�$���K�U�=f=�[Q�Ar���u�E Qka�(��0�E��_(�* ڒ\L�U�B�Ɣ��!�J%>�����DZZ�� ��;/n8���=�H\��r��:�dz�#,F��ш��[l�b)y+�������^4�r�M[gf8�ps5���@}��̝S���;W�+�U���X�1�u_��P�Hw�AK� ����� �,��I(!���,�d^�n�N܃����jц� �N,�o�~i�Y|��>����I������-�� ?;���1ׯ>�㎈���{��bw�ݣ�JP1p�����P*�?!�x-Cc@ ���OjH�VA��-|��P��4+�8��(5.*"a�9J`� �-SZ�c�j��oKîپ�C i'0<��5BUq~b��=���Vn�#�fº�͟�I�]:���X���&Y���,���n���l�2��c�ncy�i���x��2��7�r�\�ۓ�����fWb�[;��j��&�������Lg�DT ���'}����6b*Q��|8��m��~�֤|���p�wx����W�N�1�_-��E��~:e���x����.��#@_뭉0����;�2f�;қ����k�k%���.�����Nf,�Sᗺ\6l����M�ݨx�Gq` }�$nrf{�F1�?ޑp�{��*��T�^��~0�)��M3t1�.(��7����E�����@�&�6��N7>,�W�g����Ui�.��>z_���{�����w��`oh��l�=�ji���'����j�dC�Ʋ+V*�ܩ+o���Li��W+N i]�����1�{��3���i��{�q���zq������2d?!�7�OKD�Ug�Pj�-1���e�I��A������1#�3 �9�K��U(>������ˬV,�9��*�y-�'0�a�J���c4�Q2�]�`!�.W�m�D�dծ�@o�&Gt���y熭���W��������*6��0��K��u�P�4�#3M������^v��T$o�|=qAl8���I!�gfQ:zO�ޤ���Rz`%g09Φ/�rȁ�4`���Q��f*a{�(��"��3ع������*�g�26������}���X*/�4��E/Ef�չ�I��* d�dAcqX�T]4g����R�D� ҃�c�A߁�B�������� �\�]���&���ؙW�{~B ���"~��-S� �{�I(b�J���)�q|��y��p{�6o�GE�Zwo�RYM9���?T�߅\4��NuC��a����5�u1]�C�ʆ�6��T ʾ!�U����C�P��C2��$����˧~�O�(�u��n�/�2o�Kf�v#�C��%]�_�F��Ib(Q/2�_W!��g_��~8�܇7�W���x���yr��d�F�0ҩ|�O�g�Wy�U� ���>�R�:�)8 bt#l�K2�4����p�r`Q�0��80�u���ʛ����tS\/�Ǧ������A��%l��#�;�tR�c�jgp��niqs+���*�D-����2R����s��ᗻyK��E� d�X�O�p����WѿgɃ�z����cI���J�l�r8kNl� BZ�Ӧ�Ǩ�up�P�K.� :ˋ�w@??��������vSZ�1wk &��p��Wl��ZF��J���i2AF��_����$���F��/��g{K�MhPu�l�f��� �H��"������0bq�كr�Bu�������\(2����W���[-x(>���b����u���R�M-5��&p�c��t=�C���L�az���? r��$ȴr��w�88'*�����[�7ZH�������+�*���M��bsV�;zA���ﻙ���#��@q�t�#~�UE?5�s����,oF��Z��~P=ϙ�`����X������b�����vQέ�l��ER�x<I �Z��Ɵ�!W�4m`����%`����7�e}�F�������@W���6����IM ��G���#�W�A��s��YP� S����w[6��D��,vDY�`��ͪs�TA��@fJ��H�>�;%���窊jY�W�w��|d�]�nx���vpkφ�B �����ӈY��\�lƊ��~�z��aʳZ�� ��{6�}Q�y�S�=���(�����ltp������}���2J����ZwJZ�������H��Hj�`����m�t�s�{� ���!���wN��癿���L����������k]�JJ~l ��/�):��d��]��(���k�"���D Ľ�r_�"\��tٷ�=�MK �&����&!���X�Ľm�\ov�=)�\�7�&�����t�h����D=ڎ�[���^�%$�L2��$�7�A������=�5��n3�cG��G:��<3�Il=�8ο5P�<>�X��k��좕TW\.�q�w�K�SV������p�K��i����?0���ϕ��(W�#Z�6u&c�+s?TŚ�p��Ԧn��U�Q��>�}=_�WE��In��du�k���{���צ*��6�f�eՆ����-.��Ʊ��>�|�9V���?Q�]�S�Ё�ՠ'�{;����{GF�;I����o����X�� u&4���|�O�`�8�<����j�,����PU��N�e��� P�[�\�9��z�yC�=iy�N�P��b��OK�.��+W����s
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ