Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
4ac7a6a8663fe18901af7fc49d36e42b262e9d7bff6efb7e90dece8138661e29.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4ac7a6a8663fe18901af7fc49d36e42b262e9d7bff6efb7e90dece8138661e29.exe
Resource
win10v2004-20220812-en
Target
4ac7a6a8663fe18901af7fc49d36e42b262e9d7bff6efb7e90dece8138661e29
Size
793KB
MD5
a0616a4c647159a004eea82fb983b000
SHA1
4aee1097dade5df76d3bda5b6a58ccd7f468d774
SHA256
4ac7a6a8663fe18901af7fc49d36e42b262e9d7bff6efb7e90dece8138661e29
SHA512
7efc32bd99915c731a2604f3fc527ff49628390feb822c712d32c846a05acfc8f795bd6ce72fc8656db0eb3749b0fb1e8c73a32d81e764c84b4eed5c1fbe80d8
SSDEEP
12288:GjFOZ0MqLN6t/HvpVmZv+ejAqxj4elbzBG4pbu:Gh80F569vpVW+ejPigBGku
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
KillTimer
ActivateKeyboardLayout
GetFocus
CheckMenuRadioItem
ShowScrollBar
GetClassInfoExA
ShowOwnedPopups
GetTopWindow
RealGetWindowClassA
DispatchMessageA
MenuWindowProcW
TrackPopupMenu
SetMenuItemInfoW
OemToCharA
LoadImageA
GetAltTabInfoA
GetCapture
PostMessageA
wsprintfW
LoadAcceleratorsA
wsprintfA
FlashWindow
DrawMenuBar
GetUpdateRgn
LockWindowUpdate
DialogBoxParamW
ExitWindowsEx
PostThreadMessageA
IsHungAppWindow
GetMenuItemID
MenuItemFromPoint
CloseWindow
UnregisterDeviceNotification
ClipCursor
SendMessageTimeoutA
GetMenu
CharNextExA
GetMessageA
DrawTextW
FlashWindowEx
GetWindow
IntersectRect
GetWindowRgn
TileChildWindows
EnumDisplaySettingsW
WaitForInputIdle
SetWindowTextA
FindWindowA
GetWindowDC
MessageBoxTimeoutW
GetMonitorInfoW
GetAltTabInfoW
InvalidateRect
MessageBeep
OpenInputDesktop
MenuWindowProcA
DrawFrameControl
CloseWindowStation
GetCursor
GetCursorInfo
FindWindowExA
CharLowerW
MonitorFromWindow
GetForegroundWindow
CreateIconFromResource
SetWindowsHookA
GetKeyNameTextW
ChildWindowFromPoint
LoadBitmapW
ShowWindowAsync
SetPropA
RemovePropW
GetIconInfo
SendMessageCallbackW
InvertRect
PrivateExtractIconsW
IsDlgButtonChecked
IsCharAlphaA
SetScrollInfo
EnumDisplayMonitors
ToUnicode
AllowForegroundActivation
CallNextHookEx
EndPaint
SendDlgItemMessageA
EndMenu
RegisterWindowMessageA
TranslateAcceleratorW
CloseDesktop
SetDlgItemInt
GetDlgCtrlID
GetScrollBarInfo
MapVirtualKeyW
LockWorkStation
RealChildWindowFromPoint
GetClassInfoA
SetWindowTextW
CreateCaret
IsWindowVisible
ToAscii
GetRawInputDeviceInfoA
CopyImage
DrawStateA
EnumDesktopWindows
CharPrevExA
CharLowerBuffW
BroadcastSystemMessageA
RegisterDeviceNotificationW
BeginPaint
DrawCaption
EndTask
DestroyCursor
OemToCharBuffW
DestroyWindow
SetMenuInfo
GetClassNameA
CharLowerBuffA
ChangeDisplaySettingsExA
GetNextDlgGroupItem
ModifyMenuW
ShowWindow
EnumThreadWindows
SetCursorContents
CreateDialogParamW
CharToOemBuffW
DeleteMenu
RegisterClassA
SetMenu
CreateCursor
MessageBoxExA
LoadCursorFromFileW
InflateRect
GetWindowModuleFileNameW
MessageBoxTimeoutA
OemToCharBuffA
SetCaretBlinkTime
DlgDirSelectExA
GetPropW
ToUnicodeEx
DrawAnimatedRects
RealGetWindowClassW
TranslateAcceleratorA
GetClipboardOwner
GetTabbedTextExtentA
CascadeChildWindows
AdjustWindowRectEx
GetAncestor
GetWindowPlacement
LoadIconW
GetScrollRange
SetDlgItemTextA
GetInputDesktop
MapVirtualKeyExA
CheckRadioButton
SendNotifyMessageA
MessageBoxExW
CharUpperA
SetMenuDefaultItem
SetWindowsHookW
LoadKeyboardLayoutA
GetMonitorInfoA
ChangeDisplaySettingsA
CharUpperBuffA
AdjustWindowRect
MoveWindow
IsCharUpperA
GetMenuStringA
IsCharUpperW
BlockInput
CreateMDIWindowA
AlignRects
GetWindowContextHelpId
MessageBoxA
InsertMenuA
AppendMenuW
TranslateMessageEx
InsertMenuItemA
DefFrameProcW
CreateAcceleratorTableA
GetWindowTextW
ValidateRect
GetClipboardFormatNameA
GetKeyNameTextA
WinHelpA
ScrollChildren
DlgDirSelectExW
GetKeyboardLayoutNameW
PrintWindow
CharToOemBuffA
GetClipboardFormatNameW
IsDialogMessage
GetCursorPos
BringWindowToTop
DrawTextExA
GetMenuStringW
GetSubMenu
SetSystemCursor
wvsprintfW
DestroyMenu
GetAsyncKeyState
UnregisterClassW
DefWindowProcW
CharPrevW
EnumDisplaySettingsExW
SetDeskWallpaper
GrayStringW
AppendMenuA
DragDetect
ToAsciiEx
CharToOemW
SetProgmanWindow
MapVirtualKeyExW
SetCursorPos
GetWindowTextLengthW
FindWindowExW
SetWindowContextHelpId
RegisterDeviceNotificationA
CharUpperW
GetCaretPos
GetDlgCtrlID
VarBoolFromDisp
BSTR_UserMarshal
VarUI8FromUI2
VarCyCmp
VarUI8FromBool
VarDateFromUI8
VarBoolFromUI2
SafeArrayAccessData
VarFormatFromTokens
VariantInit
GetRecordInfoFromGuids
VarI8FromUI4
VarBoolFromI1
VarUI8FromDate
VarR4FromI8
VarCyInt
VarUI2FromBool
VarR4FromR8
LoadTypeLib
VarTokenizeFormatString
ClearCustData
VarUI4FromUI8
SafeArrayCreate
VarCyCmpR8
VarUI4FromDec
DispInvoke
OleLoadPicturePath
VarI2FromUI1
SafeArrayLock
VarBoolFromI4
VarUI4FromCy
VarXor
SafeArrayUnlock
VarCyFromI4
VarR4FromI4
LoadRegTypeLib
VarBstrFromI8
RevokeActiveObject
VarBstrFromUI8
DosDateTimeToVariantTime
VarDecFix
VarUI4FromI4
SysStringByteLen
VarR8FromStr
VarUI1FromCy
VarI4FromDec
VarDecAdd
VARIANT_UserMarshal
VarFormatPercent
VarDateFromBool
LPSAFEARRAY_Marshal
VarWeekdayName
VarI8FromR8
VarR4FromDec
VarUI1FromI1
VarUI4FromDate
VarOr
VarCyNeg
VarCyAdd
LPSAFEARRAY_UserFree
VarBoolFromDate
VarI8FromStr
VarI4FromUI2
VarBstrCmp
VarR8FromBool
VarDecAbs
SafeArrayDestroyDescriptor
VarCyMulI8
VarR8FromI1
VarR8FromDec
VarFormatDateTime
VarBstrFromDec
VarCyFromI8
VarCyMul
VarNot
SafeArrayCreateVectorEx
VarI8FromBool
VarUI1FromUI8
DllUnregisterServer
OleCreateFontIndirect
VarI4FromI8
OACreateTypeLib2
OaBuildVersion
BSTR_UserSize
VarI1FromBool
SafeArrayGetElement
VarDateFromI2
VarBoolFromCy
VarUI4FromI2
VarI4FromR4
VarCyFromR4
GetActiveObject
VarMonthName
DispCallFunc
VarDecFromI8
GetVarConversionLocaleSetting
LPSAFEARRAY_UserMarshal
VarR4CmpR8
LHashValOfNameSys
VarI1FromI4
VarI1FromI8
VerFindFileA
VerFindFileW
VerInstallFileA
VerLanguageNameA
GetFileVersionInfoW
VerQueryValueA
VerLanguageNameW
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetModuleFileNameW
GetACP
GetCurrentThread
LoadLibraryExA
LocalAlloc
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MenuHelp
DllGetVersion
CreateStatusWindowW
ImageList_Destroy
ImageList_AddMasked
ImageList_SetIconSize
InitializeFlatSB
InitCommonControls
ImageList_GetImageCount
LBItemFromPt
FlatSB_EnableScrollBar
UninitializeFlatSB
CreateToolbar
PropertySheetA
ImageList_LoadImage
DrawStatusTextW
MakeDragList
ImageList_EndDrag
ImageList_DrawIndirect
ShowHideMenuCtl
ImageList_BeginDrag
FlatSB_ShowScrollBar
DestroyPropertySheetPage
ImageList_Add
ImageList_GetIcon
FlatSB_SetScrollInfo
PropertySheetW
DrawStatusText
ImageList_AddIcon
ImageList_ReplaceIcon
CreatePropertySheetPageW
GetMUILanguage
ImageList_SetImageCount
FlatSB_GetScrollProp
FlatSB_SetScrollPos
DrawInsert
ImageList_GetImageRect
ImageList_SetDragCursorImage
CreatePropertySheetPageA
ImageList_SetFlags
ImageList_Duplicate
ImageList_SetOverlayImage
GetEffectiveClientRect
ImageList_Create
�qw)�ѧ���8��}����f���6�D��!�M���2���������@�Z���h���3���Џ�Mq�W�T,��P8L�c���h�&���p���š��U��&C�q�c�N����5�ЭA�-[f����L���9��3�>��,�|t��g ��x���Z�<I>gp�o�ƍĝ�_��BK>�V1H ז��,��P�KL�I��P���c.��q�7� ��R�3�6�v�'����C��)$��߭T=�D�.v������o҂��Yo"���^yXi|�H�5�%� �&�6 ϔ!P8 �c�����D��0�[��2��/&d��Of��Rqa��1�þ��]H��.�#��W84����*8��f|b��[���4�Aꀖ���a�CJCVIT����#�d����9��V1tw/��|_57 �н?�K��v^�7*F.<����Zq�>e~h���t�`����-�6�0f`@�3c~" �����LԔ�cr�#'x�X->�J� U��L��� �l �Ӈ��b ƚ����\3��b����S�*�<&��,�e�X�jO�u��GH���at�W�a������$��� l]q�N��ר��Z�Nd���bAy@h���v*�P�АL2�o-��{@Ƚ��3���S���X����֡1��]ml�W���m����-0�G��~�2�y�*v�V���k�9nh��5S �?����0��4u���b�س=�Va��'�e���dʂ�`H\���������ل���u�0����^���>�G���|�%=��#=`�=�BBz�g֢Z��.����Nj噢`�Scg�.����/���+U�I8���2@SD~y;�u;�i�6|+���H�����)��ӼR��S�uG�pQv�b��鄶��\�K��f�w�A�RwQ��9��*`�h:C �oi8��S�(�j� ��c�8������5��j ���� �x眀fC[�$��m��#��8��ލ��NZ��� t�qoX��jx"�D��X��J r�w=JK�֟�X�I|�cp�t��'��C@D��YR��|�,��V�hv��Z����a�@�#xT�Nש8�V��s���#���Pwiq ЃTlu��:�N�x.]۰��A�̖��{��xvjӌǾ'-�f�f� Y9)㣒�6{��s� �O佃�>��j��E t�ޭ;�' ?`�/[�E�GD�leGԅ x����S\�o��<�xKc��0=����w��<�����A�e�-�K������h�qݲ�o�3��F�_cN�R��/rN�3��qI�ʚ����6��n�/�u\߈�%[�k-u�e:����GJ�&�E�9��N�8q7Bp�\�ż��j�P�z�m{}7��RcJv�{M�6b7�:���8S��[N!t��e_+igC?����cv#���{¨y�N]�"��]+���8�]]��1-� `]�j�&(��::B|�5�N?S �yȞ�*�90w ���z��>i4v��BJff� ����X[�5�r��ɇ�.�cB�m���c2��łE�O�B�'Ѩz�=�GTw$<c���T/�M�0^��Jg+!�م�ģ�h�wc�Ow8�t��h�[��#��6�,ϺQM����ZS����J�v��U7kye1���g>����.��(�<=%�h]'_̲}��:|�h����7;���e�])x��=z� F�q$G��v���� ��?�~y�ҡ;^1��hދϯ�"ӣҘ�b,"�F������s�!�`���i���0՚KzhQa�V������D��y�y1l2��n���uf�]�ۈnc�P#+���0��X�Y�}:��b)J|���DD�Zա^�� �ÔX�j����� ȓ�S$v܋��JniX�{B�I�`�<�������KB���l���8�7o�C�����?�K�>l���GY%�ln����X��z�h��Di�g0\vd�$�{5��ױ��c�"�T�DB�/L�+Aϻ�1�s~��EԂ��ؾ�]s�|�ihm���5 Hk�Wv�w�\:�ޜ(D\z ���w:g��v��s�����*Z�9��*ް�Ӽnc/���+����ԻVq�O#E3�O$@�lI�MMte�t��cǝ�̜j�X������Y�C"��W��I��u�J����&��Do(p�cߙ������F��$xM�Pn���z�n���[��f1Kz�\��z3Lr!��=}�w_q4h�����Q=��G$|�L�q��N9i��P��������;[� Q~=�P���nV�{�rB�>�&��%6~��v��T� �(���}m���5�D�S���c�λ��Jt��?�ɿM���������Aq������Ӱ�JF�$%ƽ/���a��t0B���'�ְfP`3�vѽN�y=����f�e�|v����О���������������ⰑH�II��ZQ���Dz�FV�a���C����+u�U�r��C�W�!�6�Ws�{-I��63�s�w��Ǖ�}H�!��T��Wl�(��#J}��/�M`��q���9��=f��V����!�^�&�A6��[6o<�����Z|��;T�u>�����Y�����i�����]^��k?ť�*V��7o��1�@��L�V%�E�*9&�RS������]�����X�!���t�$@QS��"�����v7Nq��#�<ܡ\�$y�V��B8G�JF��3z�� ���=�Rc1V�>���e��������'w���ִ$��%��kT��=nq�=Mue�!�'e��0"�ۇ�>J�'�ә䂩�~�W�:-���FQDR��B8����.�[���z$�~�G���7zW��4�q�!��퀐Ƞa��r/}��u�:�c�}�;�����BK��~`}D���Pᝑ�-��Q�1�4x�^�EY7�[�wiu2D�H����R���l�\U�REVtv�Eh9���7٪�)�ؙw~�8���(}����w�D�Z�2��.��k��S�����?�����p����50ck�W����,�w�.YT��$�A�q����t��ɉ� �TU��&�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ