Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ba8323cc08d60d2a8bb5d4dfbbcf452ebad3ffe17d32a1304c5c96b183941d74.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
ba8323cc08d60d2a8bb5d4dfbbcf452ebad3ffe17d32a1304c5c96b183941d74.exe
Resource
win10v2004-20220901-en
Target
ba8323cc08d60d2a8bb5d4dfbbcf452ebad3ffe17d32a1304c5c96b183941d74
Size
602KB
MD5
45d7d71957de181031aaacff5ed77390
SHA1
2a196b6552258aabc961c473249529c8e13fa852
SHA256
ba8323cc08d60d2a8bb5d4dfbbcf452ebad3ffe17d32a1304c5c96b183941d74
SHA512
d19268ba5128329d0e30d5e4a43d7d6210ded8a26d65469f71e741b9dbb46bb66574d27e0eb74392d9e1897d4161dc65d62eb703a5d2fcd71b180c2cfbd68068
SSDEEP
12288:rJ0YjaERgXbfLZ/ezwMUzh7T5Ron12Pus8Mh:rycaERgXbLwzEhLoIF
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
wvsprintfW
EditWndProc
ArrangeIconicWindows
LoadAcceleratorsA
wsprintfA
CreateIconIndirect
EndPaint
GetClassInfoW
GetWindowTextLengthW
ChangeDisplaySettingsW
SetDeskWallpaper
GetMenuItemRect
WinHelpW
GetKeyNameTextA
InvalidateRgn
EnumClipboardFormats
GetGUIThreadInfo
ScrollWindow
UpdateLayeredWindow
CreateIconFromResource
GetAncestor
DefWindowProcA
RemovePropA
CopyRect
SetMenuContextHelpId
GetRawInputDeviceInfoA
RegisterHotKey
DrawTextA
CharLowerA
DrawAnimatedRects
LockWorkStation
InsertMenuItemA
EqualRect
CharToOemBuffW
DestroyCursor
MapVirtualKeyA
SubtractRect
GetWindowTextA
GetWindowModuleFileNameA
SetClipboardData
LockWindowUpdate
GetClassLongA
BroadcastSystemMessageA
ShowScrollBar
IsCharUpperW
EnumWindowStationsW
SetKeyboardState
GetDialogBaseUnits
DrawMenuBar
SetClassLongW
AnimateWindow
SetWindowsHookW
GetGuiResources
RealGetWindowClassW
GetClientRect
CharPrevExA
GetCursorInfo
GetWindowTextLengthA
PaintDesktop
LoadKeyboardLayoutW
ShowStartGlass
EnumDesktopWindows
AlignRects
GetDCEx
RedrawWindow
SetCaretPos
GetWindowTextA
SetWindowWord
GetVersion
GetPrivateProfileStructW
InitAtomTable
GlobalMemoryStatusEx
AllocConsole
GetFileAttributesExW
SetEnvironmentVariableW
CallNamedPipeA
OpenSemaphoreW
Heap32First
FindResourceExA
HeapFree
GetNativeSystemInfo
MulDiv
SetFileApisToANSI
FindNextFileW
PrivCopyFileExW
GetProcessWorkingSetSize
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
TerminateThread
FatalAppExitW
GetFileInformationByHandle
EnumSystemLocalesW
ExitThread
QueueUserWorkItem
ReleaseMutex
GetStringTypeExW
GetConsoleFontInfo
ScrollConsoleScreenBufferA
SetInformationJobObject
GlobalFix
GetSystemTime
GetAtomNameW
GetHandleInformation
SetSystemTime
GlobalFree
MapViewOfFileEx
GetFileAttributesExA
RtlCaptureStackBackTrace
GetDefaultCommConfigA
ReadConsoleInputA
GetCommandLineA
TlsSetValue
ScrollConsoleScreenBufferW
SetThreadExecutionState
lstrcat
lstrcmp
WinExec
CreateDirectoryA
SetErrorMode
GetNumberOfConsoleInputEvents
PrepareTape
GetVolumeInformationA
RtlUnwind
RtlFillMemory
LZStart
GetACP
GetLastError
GetACP
WriteConsoleOutputCharacterA
UnregisterWait
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
Q6�̕8\��X��i#��{�> ��]A��"(���*�paH(5nz��*C�Ɍ/��<��_2���=�ktQ֯l9i4fgh��kLZ_l`��d{�͖ż)��}�������5/|�<�i�C�C �xEǧ���e�f�뎽k�W������STf+�rAy�N�b vpV�y_�����;�� ⓼`�G�]5�k�=��;�]mi¼-o�E]��HB�?�V���x�P�:�c���jHf5S��;�C~JPpt���N�w������F^uk��s���)���.�9�c ���O�L$oQ\�A��#�͘�����0�o �0����H�ȊS�O���*��^бF�m�Z��0�]�4O[�4��\�+�й��=~���0��cV�g���~�)>�����w�I}�� ���L�v��ձQ,no�}8CvDGoWK1��(x�|�MXn��V3�=;�5r"|Zlr��S���Y�*�5�/r���/��J�{(�����qDV�ma���\O"��R0�_`�F.��O�����e,�M(7��2�na^r:>���\a�}g$��P��h�1�CJ{�5���',�W��>j0����?�`��u��_����\[�_�*9B�;bi.V}�$�48�sa��e�v�Q*�g�@�l���vD�ǻW/��$ը=@��W�1%PL�8�.yD�Pr�Y3�Ou�:|8�T]�9t���)NSx��2۹����� ���|=��p�9�2cB�[*�݇B$�od�E���3��mY�fB!����Q2��9x�%��;�s�E'���K��Y����P���F��A��G癥�I��5=�V��$��k��.�09Ⱦ 7�F�]Qwk���8!�qm:�Q\�s�3�_��2]fg-�4�dȋ�>ejzL��<v��\h!�e:��0m����^��nH8��C D��������w�K���=��5��W��A*쮀q*�u]n5�3-��=N�%jZ{]A�o�EP��"@9����E#sia��B_>m�?�(u�(1��� A{������/�!����1T��������I����Zd����&İQC�ڤ89c@!��*�_���H��?��Q����JKV9�� �e��S[�0|"K��ډnޥ��qA*/D�c<*3#j�� �h(���euYᗮ,���nQs��!��GU*9I���֦'#8+mBX��J2�C�����60���l�������$�no�Nե���]��E*�:��L���r��ۘ\ �O2;Z�gR�����]n;�vx�y�/2�>(ݦ2]Q%������b^�$��N/�H�]U�?�yB��>�S[�{���۰���3���ҹ�_� �BX�뽐��+�쓅����a��a�r�I�{w���4E.ܬ����_��ڣ dN����l���A��)�����\��Yu��z�s�*�t*��^���Ɂm�l�&0��> r0��jR?6�ev����c� ��5�bM ��r2�<��'�~]�XJ *�D��6���ҥ��(-8���;36�����Dkb^uxH�X�V���Q:#'����T�E{��p �;��7k�㟡��>��Э8���:R���"%��͘b��<�z��Np�8�80�0���+�Ka c�n���#���A����@�f�`ܠ�uQY���.PV��s YKbU?̺��nK��9֞�vQ�R�-�&�<̭�t�CA��`���1��f|��-b�nZdx�5����d�/�8N���N���mҞi?R�:�k��+TP��pbv��a�ƅ��7�P~ݓ��'�J�\���i��ATtj���֦!���Ē��ݎ�Ũ^q��,M�<'��s���`^D�"�{�>�2����R3���X�U!E�&��b��a�s�Un�����x\ԭ;�����]F��\�ߥ��b�)�G�y1odx�G(�{����cl$��{X�:֮��s ���m�LJ��:2hK�ű��_�e�yw=E�#��������oԇ��wB�F��27����H�J� w���Sf��ܾ03�� �I[B�%��a �#u'Z��<������y�Z�x�Ǽ�ח.|lu �I�Կ�b�%��)Кw�kMm�z��8��|-�����P���%I.�'6M��&X��wP4'�S�3�]��oc��<��6�/I��4l�3������!�2D�����4����Q�����-ȭ�`��p{�z�}�pc8N< ���� ix�)$�$|u��� *�� ��3=�T�� �z��,��l�|�ց����;�C��Zh��+�o�L�^nJj8kUu �4 ��^0�S����~7����i�� �|M��"�����(�!rQJ�s� ��é����E��C`��+iTcbL\A�|��Uhz��*�-P.�M>���z�J�_�O}DF���٣9�.�~��#���Aކ{+�D�T�q6C��9�iߍ�9�xA�/�-jF��`��'���E��#��\�3���:���ΜYd0vfԠk���_�q��&�;�j݈_p���R��-����(�5����15�j�P��q���F3��/'�M�Og�HO>�E:�^;[�h�&�1��=�β#b��Ӗ�sҜ�|��gu�1�CK)�)�W��5��5e� �(Z�жW+a���)��{;���*�9`뵔�S�O=u@5���,>�������Z���^y�P��X���fTE���x��K |j��f5y��8��5��c���3�~?�eC�3��� l̺?��c�� ���;b�,�l�<��/����v�y["Bv����̀�J��W�Ir^�j�G�j�*�&��!o���A�:���4Yw5� �e5��H3��a�-��k��q0� M�A\��؛$�Ql=�54��<-an���h�φ���Z$����R����L��_'i=~��V�ފ鳳_�����F��!.��e <87�^�;��^�.��Ul�{�i�t��4��g>]���)�qр-{���S�]�=���066� `R4��?8u�l�/Qr1!��<��|�sDb9��}�nu�Z�u���>�yհ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ