Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
beafe6518897d7ed93cb364836913b3d5fdf34938e12d93ca37df2982c052474.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
beafe6518897d7ed93cb364836913b3d5fdf34938e12d93ca37df2982c052474.exe
Resource
win10v2004-20220812-en
Target
beafe6518897d7ed93cb364836913b3d5fdf34938e12d93ca37df2982c052474
Size
690KB
MD5
6e3320ce542864d310a55f2e269bf030
SHA1
149ae193544caac1707e416a59375ea5ac3c5125
SHA256
beafe6518897d7ed93cb364836913b3d5fdf34938e12d93ca37df2982c052474
SHA512
5d30b97f67062375b6bfc47d219e24ff88801def6cdfb7a18915d452d1912698e4249d9a35092dce27a5c377d6f22d4a24a67dedf085c642dfc8c18a5191aa85
SSDEEP
12288:NDejDfh9EYIZzxIVoeBr6MrjNX85+CbjD1h4ROGk:hevHiIVnrcRvAOGk
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpyA
AssignProcessToJobObject
LocalFree
GetCurrencyFormatW
GetTimeFormatA
FindFirstFileExW
GetSystemInfo
GetConsoleOutputCP
SleepEx
TzSpecificLocalTimeToSystemTime
EnumLanguageGroupLocalesA
GetModuleHandleW
ClearCommBreak
GetTempPathW
EraseTape
FreeLibraryAndExitThread
GetPrivateProfileStringW
TlsSetValue
PrepareTape
CreateJobObjectW
GetACP
GetPrivateProfileIntW
GetSystemTime
MapViewOfFile
LCMapStringW
SetCriticalSectionSpinCount
EnumUILanguagesA
WritePrivateProfileSectionW
SetLastConsoleEventActive
GenerateConsoleCtrlEvent
GetWriteWatch
GetProfileStringW
UnregisterWait
FindFirstChangeNotificationW
GlobalUnfix
EnumCalendarInfoExW
SetVolumeMountPointW
GetFileSize
FindAtomW
GetLogicalDriveStringsW
GetStdHandle
GetThreadContext
WriteProfileSectionA
ExitProcess
FindActCtxSectionStringA
BuildCommDCBA
QueryPerformanceCounter
CreateTimerQueueTimer
GetConsoleFontInfo
lstrcmp
CreateEventA
QueueUserWorkItem
FindFirstVolumeW
WriteConsoleOutputAttribute
OpenMutexW
SetFilePointerEx
GetProcessHeaps
VerifyVersionInfoA
GetFileAttributesW
CreateNamedPipeA
GetSystemTimeAdjustment
HeapWalk
GetModuleHandleExW
LocalSize
CreateFileA
HeapReAlloc
SetEnvironmentVariableA
SetEnvironmentVariableW
SetCalendarInfoA
LCMapStringA
SetComputerNameA
GetLongPathNameW
LockFileEx
GetVolumeInformationW
ReadConsoleInputExW
GetConsoleInputWaitHandle
SetPriorityClass
Heap32First
EndUpdateResourceA
GlobalSize
GetVolumePathNamesForVolumeNameW
DeleteCriticalSection
FormatMessageW
FindNextVolumeMountPointW
GetVersionExW
ReadConsoleInputExA
GetBinaryTypeA
GetNativeSystemInfo
GetGeoInfoW
TerminateThread
Heap32Next
HeapLock
WideCharToMultiByte
VerLanguageNameA
FindResourceA
GetProcessVersion
GetProfileIntA
SetFileShortNameW
WritePrivateProfileStringA
QueryDosDeviceA
TryEnterCriticalSection
CopyFileA
GetStringTypeExA
DebugBreak
GlobalMemoryStatus
GetStringTypeExW
IsBadReadPtr
GetCurrencyFormatA
LocalFlags
FindAtomA
lstrcpyn
DosPathToSessionPathW
GetConsoleAliasesA
RegisterWaitForSingleObject
DeleteVolumeMountPointA
HeapCompact
GetPrivateProfileSectionA
CancelDeviceWakeupRequest
GetProfileSectionA
GlobalLock
InterlockedExchange
WinExec
FindNextFileW
CreateHardLinkA
GetFileType
GetStringTypeW
GetFullPathNameA
SetCurrentDirectoryA
GlobalReAlloc
DefineDosDeviceA
GetPrivateProfileStructA
SetFileAttributesW
ReadConsoleOutputCharacterW
FormatMessageA
ReleaseSemaphore
WriteProfileStringA
GetPrivateProfileSectionNamesA
ReadConsoleOutputW
RtlZeroMemory
RemoveDirectoryW
SetFileValidData
ReleaseMutex
SetThreadLocale
MulDiv
Beep
VirtualFree
EnumDateFormatsExW
PulseEvent
FindFirstFileW
LZOpenFileW
AddVectoredExceptionHandler
PrivMoveFileIdentityW
ScrollConsoleScreenBufferA
GlobalWire
TransmitCommChar
SetProcessWorkingSetSize
VerifyConsoleIoHandle
DisconnectNamedPipe
GetCPInfo
EnumCalendarInfoExA
SetVolumeMountPointA
AddRefActCtx
SetSystemPowerState
ReadConsoleOutputCharacterA
QueryDosDeviceW
SetStdHandle
GetDiskFreeSpaceW
CreateFileMappingA
FindNextChangeNotification
HeapQueryInformation
MapUserPhysicalPages
GetNamedPipeHandleStateA
GetStartupInfoW
LZCloseFile
WriteFile
RestoreLastError
UnhandledExceptionFilter
GetProcessPriorityBoost
GetPrivateProfileSectionNamesW
EnumResourceTypesA
VirtualQueryEx
FileTimeToSystemTime
FindFirstVolumeMountPointW
DelayLoadFailureHook
SetLastError
FileTimeToLocalFileTime
ExpandEnvironmentStringsA
GetTapeParameters
GetConsoleKeyboardLayoutNameW
ShowConsoleCursor
IsBadWritePtr
GetFileAttributesExA
SetLocaleInfoW
BuildCommDCBW
IsWow64Process
MoveFileWithProgressA
EnumSystemLanguageGroupsW
SystemTimeToFileTime
GetCompressedFileSizeA
InterlockedDecrement
BeginUpdateResourceA
LZOpenFileA
SetCommMask
FindNextVolumeW
GetCommMask
LocalLock
CreatePipe
EnumTimeFormatsA
GetConsoleSelectionInfo
GetVolumeNameForVolumeMountPointA
FoldStringW
WaitNamedPipeA
WriteConsoleInputA
CreateMemoryResourceNotification
CreateFileW
SetComPlusPackageInstallStatus
GetCommandLineA
GetSystemDefaultLangID
SetTimeZoneInformation
IsProcessorFeaturePresent
WriteConsoleOutputCharacterA
BeginUpdateResourceW
GetDiskFreeSpaceA
GetNamedPipeHandleStateW
BuildCommDCBAndTimeoutsA
CompareStringW
RegisterWaitForInputIdle
QueryActCtxW
MultiByteToWideChar
GetVolumeNameForVolumeMountPointW
ReadConsoleInputA
WaitNamedPipeW
EnumSystemGeoID
WriteConsoleW
OpenSemaphoreW
UnregisterWaitEx
CompareStringA
MoveFileWithProgressW
PeekNamedPipe
GetVersion
GetModuleHandleExA
GetCalendarInfoA
GetUserDefaultLCID
CallNamedPipeW
lstrcmpi
GetComputerNameExW
LZStart
FatalExit
GetUserDefaultLangID
EnumResourceLanguagesW
LZRead
ReadConsoleInputW
CompareFileTime
CreateDirectoryA
InterlockedExchangeAdd
RemoveVectoredExceptionHandler
AddAtomW
GetPrivateProfileSectionW
EnumDateFormatsExA
GetShortPathNameW
GlobalGetAtomNameW
ClearCommError
CreateTapePartition
MoveFileExA
FreeEnvironmentStringsW
ActivateActCtx
HeapDestroy
AllocConsole
GetVolumePathNameA
TerminateProcess
SetCommState
lstrcmpiW
EnumResourceLanguagesA
RequestDeviceWakeup
AddAtomW
DisconnectNamedPipe
CreateMutexA
LoadLibraryExA
GetCommandLineA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
BeginDeferWindowPos
RemovePropW
IsHungAppWindow
DrawCaption
�L����"d:��puC�C.ͦ��w��Z���5���%�K�a(9n;�C�����|H4%9F2?����MӠ'���Q ���s%L{b�cNN<��u�!���W��{��ɠ&D�m[zu�k��B�ζ�����?�,Y� �_bH��!��� A����.�����$���Y#Zd=���N������������"�n�]�����Y�qf�Q�Y-�7���,�����q(~1r�7A���j�� ��>������@����c�Y:U�IJ�K�*�p��:�t�B�b�,�ǻ TxP|�qm�ـ1�*7=�������ٍPz����{�i���jjl��Q���2 C}@oJ�N�l~X���@�A�I���d_��.�jp���Eos���I0&�ke+�.�hhO��8M����7&������;7�o�Q�o����:�p^s���{�=� �!����^Te&��3��m��|������w�9���dl �X�ǚ���=Yp�gDV�<~t�w����7Ō���T1B%����\�&_Q��$�*K�*;A��7�_� ͚n�@k���)A��t���d��I�ـ�i�0.�#���>�d�g���(�!��B=סH���+�(��Xs�"67k-$vV�,+�updܐ�i;�iTtD���t(����)ٙ�?_\:*�<�K�K3���I�:)��w�ţR�nh��Ţ�F�Z�����R�W����&����6���%S�N��u�`!��umSݍ��8XR����-Ȝ���ӗB�)���ϓ9,kV�y¢�<T(d|sF8�ҝ�J��ѡC{0Jʊ)�}��T`��ef��y�q]/�|��:�9�؟q���{n�n��G],'�>�.4�{3= � f������^֬)u��'�g��tޟ�$�r[�U����^�r�Wg³a��m���=(�GMA(ȼ���ۻ4�OKı�d�9I�I�X�h�,T�-��2b����J\�{�7�zbڼ�)\����{�i�/�њD�e5]Uh�@���,J���DZL��^*#���w�kNzz�۴(���xN��b������"�\V#���߄���A8�Z��UF�x�'(<���8.p;|�Y(����Thj�.*H��%96��맖m㲴��لε���^�3C�RH@�����Q���߇�-���zM3E/�3�C�\� ėW�")�w�d=���X����x��(��@�&?�3�ztW!�Y��S �O�+���),DM�����9:��T�e���[or ���6��D�_�ů��1�`�J��� ����a4��Iʝ�Q�#��p�����=��"��A����R��}���A�+p[�.6+��,.� �括�l��('�ʢ{S�i<m���U� ��e� ���`<kFsaj����.�k�����p�L:��1E@�1!h�5���7�-�5ǥ?o��k[�D��@_n�o[[@l����=>����VCⅲ@��U�|��$��7 ��|� ��B�6S{�ٗ�*/����t��)22��K����E������*��ꗱ��{�5�)����nڮr"C���[֔����v�����"���Ճ���?�;�������7I��a����a֫�|��$�p:�������v�v��h� ��^&��x0g5�Q&����������̈́�+S�٠���b��4��П��0�,Bq��;!܍������M���t�_�ͽ����w�����mB�4�g����?�6˭�!`��Ћa6V���I��O[I�mA�[nV�.<����� ˥A�P��5-���{� ^ǰ�.ga�GQ��I�Oo�H��)ES�6�F^4�SW6��S��T����2��y���1� ���t\�? 7Z�o|��!�q���ϊN����4�GG�$�C��#�{���r��AO>�k�A�=��Q���+��r�So����)��ݸ,:�_���K�$��0�ޝ�I�!�aBhh 8�-/�x����x��.hʙ9b��ă?��O�Ӭ�u�#�J &N��V���a�_�ؾ*��M� G�:��WB?,�����N3����1����JB��0����t�+� d�S|���L�<h�w���`�j�2�z�ܦȨv�B��q%��'x���NX��/M�����ÞN���[I��,��a.Ň�>��Y��C� <p��t2j0�bH��ε�@�`��g`�r%v�E�x�5p��I*��%�i�(��=��>"xZ��hG�R��,�����L��{�>�W�T7uޝ�6�K��'�Wa^Y�/�H^��D��^F`==S�dd} ���nbÒ�q W�����)R^=z�u3u��]�2���z�>��]���p���W+�Њ&������1�p�h����,�e`N�0����6iT����`����9���5S�����4�a���JC�\��W�9��-�l�l�8|�4����!��R�+ K��(�m�`�K .�XXnБѨ� E����]1�k��7�R�(ݹ�uz2����v�ngG�� H���ң�� K}=L�4�ڴh����8��њ?�P�âϫat��������/��I��5(�M�z7�{5k�i�[�s��pjh����㲟_�>MêY�"%A���P2<�s�衉�D� ��9��sW��*Fn��{��)�u�S���A�́Q>�,��qY��\��F�~ :�����N���@?G�W������!�� ��{�����䤢�/H�x�8�D5���F,>��>�t�0{��{;#��� �ۤ_CB�Vכ`7t�6?�����q=�g�-��D-�!Z�)�����Lӯ�+%��a�r�0X~8�!�nST=�����W�]�jGjM��ZzX��O��DhX1��2�Gqq�Y����^��b������c���i�������eH��ܤ6Z��4�C��>j�c���ұLj��w>Oq��RP�{B���Mݙ��On�C�キ��M���z�,Gj��3�����/�`��z i^����q��~�Gl42�@N4�P�wr~��q{M�r=���'=����|��D�;�Bz뭩�5�����%OW�},�6�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ