Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
7a8b40f10422b808150f0f63bab48ab58d254800c613209ad95aa7c0d510b614.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7a8b40f10422b808150f0f63bab48ab58d254800c613209ad95aa7c0d510b614.dll
Resource
win10v2004-20220812-en
Target
7a8b40f10422b808150f0f63bab48ab58d254800c613209ad95aa7c0d510b614
Size
297KB
MD5
13aca643c59338d645be05d9947100e7
SHA1
0b28820409a3a8d26d9c728bbe738af71f23a713
SHA256
7a8b40f10422b808150f0f63bab48ab58d254800c613209ad95aa7c0d510b614
SHA512
8337b12066ae4927afc5abf3371fb1b3000f7530cce975c89d44b8adf67fdc9343012c07f3d33b79e54250cce66fc4d1db86e3c962b70b7703759c5e8ead9a1b
SSDEEP
6144:RrHwlWwa0StggtMnvoknnqfTcnbc+LLN8/J2DW1Sx9vEoB:RrQQYStg9VMInbcwLNgWW1SxOU
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetACP
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
GetKeyboardType
MessageBoxA
RegQueryValueExA
SysFreeString
SetDIBColorTable
InternetReadFile
WSACleanup
timeSetEvent
�'����F��Ӽ!�H�ð�%����]��7��u�{)����3��Ytz��^Cx6��SROBZ�J���T���HXg��g� P?������ڟ��3Ӳ�����-dS�pų_t�L7PI:ɄB:@39�*����|�P�yw���2�)��3������-w�:%�x�����]���րn���*{�R�r�:��ޑs�P�3�&�Z�O�G�o��~<�$�8!w%��T!Of+�Ǔ S��!?� �T��?px�sJ~p���SS�ZP�m�^�.�stģ,u{N�O�OR:�Aq��@<"�s���~�V�T�i��xM��$j��4<^������s�T�Y�e�������77?A�� �*�/���Ur�wy�b|�b��%�� ���ܴ����Ear ]���K��=sGu�s>���r�~�"�6�sLP#F��� غ���ɋ/�yj�8Dނ�06ԥ,��'UYp����uO�4obPgv���iys=s��:a�Ac�a'M�L@u<I�;�~�H����~����N�HwGB�S�����3�sR#n�=�����B?�� � ��m�x#�Ee��z��p@Y�h�lrz*�[���*U�D���x��/���\�+c���:�G\E3�M����h��w����yQ'�3�9�ek ���BQ���Vt�e��mt��fY�Y�CN �`�I�`��C��;8/̷��5�!L-*�E#8Ae�z���w�c�V "FFp,���KV��C��M�y ��_�j��-��I����L���r�kú�]���a`�` 7�C}����l������W��A�T�[��(R����;����:PsW�3ݢ�����M�y��Xc����BOC�$0&j�.��&���+��tn��/���r����h���s�4a�z����v!�g����!�N=�o_:��&$��z7��� ������5]tŔ<����� b��r&_�o���[��&��eV����`|�eJ�/���Wm��;���JH:yˠT.�L��&�c�=��q9����,1���Jo:/�vЦS��:n ݦFЬ�\�H1#�^���?A���< /Hb��o��!�N'�=Ԛ�m�@�2�0sԮ�,0��ą��~�'y�H�NR���(+�e{����zl%!h$L��v��� Q�����Ш^����Ź-�Ku͐��A��M�Kq��Ɨ�8S>����ׯ�z�N��t$��~�I^�_��;$�찅f������.x�qp�R$d���B�'�Np�����I5�8���]eV� �L���f�whW`Ue��7J��KgO&0��Gjs�B�ʻ����ȋ�������;p_�H�1�a����/��d����o�w�r��a�-�:=p�S�>�.����&� '"G���8d˫Ц���-��2�L��N�-��m*ʠ�NXϩS�#-,_����L,j���m8�꿻��~WNd|�j�dB�|�A[�íVn��|��K�T��A���m7{Wu��Q%d:@�i�b$������T��g���*�t�����r�&�g<�d�D�{v���.:4�!.W(��2*ё"����G�Ȏ��rƲP�M�UDN-���#��w%-�l.����'�~�(.�@_L(9y6��&�Q&� ���l/6<���VH�?3§m�MZ|i*0f�D�0/��J������`�X�.������ j]B �[e�a�g,ܫ ����v�)���S��*�:�o�8�Sh��q%���z3MZ�{��E��E�3�S�*Җ�=��Dj��Ě��Ѩ��[~e$_�FϢ'd�p�_(�T�+�b��jsn������*:i��k�����}l^7JΦ����-�I�W v*��]�JC+~y��SO.� F v���<͒b_�\1� v�ڑ gK>G��! g�˚]T�]>��d�5���a|Y%+ď��.���h8��@��Ĩb��.�*E�ٌ�X;��Vd��K�.E����c��!�N�d �\8����,S.Թ����|�[�{x#Z�K�L�gq���|!ł�i O�/<;Ӎ�?]<+`yսK��9��W�sd{���F��R���j�f;)�W9��J ���� %�G�{i�@T=o P#�^h�/5�r���Q���|��|���;�U.�f�t�؊b�xPX}5��:O{���\�^��PD��W����ޥ��\�9����[x���\���)Q� +��)*�� ���<�� �h���7�u^�U�~a&��z�����@�(����b��녋�𘍷�y��+j��:�fB�\�@�����i�G=�6�����)@��ci�G'%䗟H�.<�mjZ��S/EJ�u��M�r����Jz�%Wr����V3@�,_'����}�P���X�Kp� y�viV�=Oґx<���#�@?��3X%�OwdU�j�I��rZ><��Թ���!�>7r�=�����CB���|B�S���Y0����#�z ���F*Y���`1��"\G���j���Sp �4��7��`�<�����;����� ����s4�8�H�ȗo� �2H��_�Ъ�����]5B0�.o:z����.��#�@�|��Oh�.���<���V���SD( �i�n��-� W�kb������DZ@f�$�;*��y�YW����2!��=R?M��M6!h�5��lb��=��B��~��8�!����H��i�)��.�ul�H�9�2�R�W�U�����F{�B��ybX�~!��*�pS� ��Sƪ������Dȱb������B+^&��lj/m����k� >��}={y ij�UGٳ������yI_ELI�8<�k��kk;�O�u�����������nӗ� ��\?�g� ;t�$f�7E��G0 ��nR��2_pk~�5@@ &1&��͡����M!IT� �ۛ����*�|��l�uF�I�o��6��˂P ��ewP�`<w^,�tdۡ�($�r���U���������M����@(=ӓ9��3�H����v.g��=��6�cZ-��H����v��X�=$���ą"r�Q������]��C4u��Wن
Install
ServiceMain
Unstallx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ