Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
33b736c30508938410509187967ed989e76c5d68b2ee304c196a71a077befb17.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
33b736c30508938410509187967ed989e76c5d68b2ee304c196a71a077befb17.exe
Resource
win10v2004-20220812-en
Target
33b736c30508938410509187967ed989e76c5d68b2ee304c196a71a077befb17
Size
614KB
MD5
0c0b3c3940c7d001fcbc342e06b13630
SHA1
ddd7744f6b9da9f8d7fcf1b22490380bf10906be
SHA256
33b736c30508938410509187967ed989e76c5d68b2ee304c196a71a077befb17
SHA512
9a70b481cd12440f2b06d14e24e2cccd45616840bc3563f2344d26197e1b69bb000a2fa44243dc281cc8193c70eed68a32147aad9c688efc0d2291489896aa21
SSDEEP
12288:5LQrNm3/p2ASoUR0o/1DiXNtB2DF5/sum7TgMr7C:58gpEo0W9tB2xS57/7C
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
SendMessageCallbackW
GetWindowTextLengthA
PostThreadMessageA
CheckMenuRadioItem
DrawIconEx
BlockInput
DialogBoxIndirectParamW
MenuItemFromPoint
GetWindowTextA
BroadcastSystemMessageA
GetMonitorInfoA
DrawStateA
SetMessageExtraInfo
GetMenuState
FillRect
GetScrollPos
SetWindowTextA
DispatchMessageA
GetLastInputInfo
GetWindowTextW
EnumDisplaySettingsW
GetParent
IsRectEmpty
GetClassLongW
DrawTextW
DestroyAcceleratorTable
OpenDesktopA
WindowFromDC
PaintDesktop
GetWindowModuleFileNameW
IsCharAlphaA
TranslateAcceleratorW
GetClassInfoExA
DrawFrameControl
SetMenuDefaultItem
GetDlgItemInt
GetMenuItemCount
GetKeyNameTextA
InvalidateRgn
SetWindowsHookW
GetWindowLongA
GetWindowTextLengthW
GetComboBoxInfo
GetAltTabInfoW
PostQuitMessage
MenuWindowProcW
GetWindowLongW
DrawFrame
DestroyWindow
GetSubMenu
DrawEdge
SetDlgItemInt
CharLowerA
GetWindowRgn
GetCapture
MonitorFromRect
SendMessageCallbackA
AlignRects
wsprintfW
GetDC
IsCharUpperA
GetScrollInfo
CharNextExA
GetProcessWindowStation
GetClipboardOwner
ExitWindowsEx
UnregisterHotKey
SetPropA
ChangeDisplaySettingsExW
ShowOwnedPopups
ShowCaret
SetRectEmpty
LoadCursorW
IsDlgButtonChecked
SetWindowWord
AnimateWindow
MapWindowPoints
GetWindowTextW
SetCaretPos
AnyPopup
GetWindowDC
GetStdHandle
CopyFileExW
GetTimeFormatW
SetDefaultCommConfigW
ScrollConsoleScreenBufferA
GetTempPathW
QueryMemoryResourceNotification
GetStringTypeExW
GetCurrentProcess
RtlCaptureStackBackTrace
GetNumberFormatW
DelayLoadFailureHook
SetCommBreak
SetCommMask
PeekConsoleInputA
ReplaceFileW
CreateNamedPipeW
GetTickCount
UnregisterWaitEx
lstrlen
GetSystemDefaultLCID
GlobalReAlloc
SetDefaultCommConfigA
DosPathToSessionPathW
GetWriteWatch
WriteFile
SetComputerNameExA
GetLastError
OpenFileMappingA
FindNextVolumeW
SetTapeParameters
MapViewOfFile
GetConsoleCursorMode
GetThreadTimes
RegisterWaitForInputIdle
EnumDateFormatsExW
LocalSize
LZCopy
ConvertDefaultLocale
GetLastError
GetProcessHeap
SetSystemTime
CreateActCtxW
GetFileAttributesW
GetVolumeInformationA
ReadDirectoryChangesW
VirtualQuery
LoadLibraryA
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
DllDebugObjectRPCHook
FindTextW
VarDecFromI4
SafeArrayGetElemsize
VarR4FromI4
VarBstrFromDisp
WTSSendMessageW
ImageList_BeginDrag
CreateUpDownControl
UninitializeFlatSB
ImageList_Create
dMeD$��|�� ���b���x��C��ķs�ch������vn���\:�& >뮃��4T��!c2���,����x�>�uC(�����Nq~*l��p����>����b��p79�5�h��r+*3�p m��D�87@-�����E���5��<���,tB~]]'�5�����Fq6 e8 MM��R��y�78��<g������z�7�l��/v��Dq�P�«�nVI�T"������\�eH~�z.$X�)��b\N�҉����{~���r�r���@}�[�Yi}� 욠�x*��yb��s�@-���m�yIO JxaP9��4���3�X"Jp�>��]�x8WѾ�� ����"S�h����\O � .掏(.Wg�S�>/�4��;f- �h�jj���B�:�ҧM�'��A��_�q�hUD�,�����[�����6�E��MG[��ZDGU�^��꽴#'ƈ����?�\`��FĦ�B0������5���[~WM�� ���� @[��r|�I��%)X뀱g8W+�����G�AU�&��i���I��)7A��y�D�wN��o��FEY�?���3�=Mζ��.iќ��߷���JK����!?Nfެ^��7H"n�M����w��T���0:�Y�=��!�G�O���=^4v����j�������;�����|Q�\�� �p��<�f��=�9,����0�]�V�����dl����j:5 >l�m�;�2����b<��Z6�|����?4�,���_���>\|=*y �&��<�%��bL�u+*`I�"Vb�t���A�UX��<��x��w �,�����̹��W���(����Yj& ����O��7`�ii�]h3t�P~Q3�����,�H�/R�wq|�{`���#�6���}�%�\��e<�t�{� A��h���/�y�0 yVߙ��x%o{byۧ)��>۴�9�;mK?��h�U�a���YLO�����J ��O�ˈV;�JC5Ϝ7���(�"ժ��Ԥ��jY�i����.V�2��8����4��>�=@t����MS�}�+�RqS�{�t���N����(i�Xi T���N٣�#�,^���JV+�9R�T�Ill}$�4�7,+�F�F����h��=��z6�Aק��8�����ne?E��s&�1%���2DjΩ���ԓ,}F�w�1�r*�~�K/��}��ׁǏ���)�J��a�0+AVz�ˬԣ��̄�>L�,u�M9���)C7قa�j�,����4����=6��Dճ��~���0�I��?�ҧWp5�+�xQj�q����g_>jڔ�E-�u�����aϬ|z����e ,ڇ���e�pS���}5T/[����4D�S��o,�*/��U�ʸ+�St��?.u~y�!5X�wC�vBű���tz��ǝ%_;���˂ݖmf�3���������zι��h��Z�ʟ���k�*���uW��<¦��1~A�ȏ\1��#��a �S/Ehfٴ!!,�� Ѥ2Բ M��Ǫ �Qs��z}�%�e��D�(�P���V�b���$&F��PE�?��T:=&D��zZ@�MBQ^w�G=ŋ�<>D����UWh���p_â H닡W��-%�赅��<����Df/[C�c�D�q*n�!G�f�I#/�il`Uffm��oI�);�8�"Ƹ�Li� ��r��&�ׄ5B��]�6Fu.0�ڒ"£��en)��<��PSFYGa��R�{�B�2e�q�y��k6��0LأX���ᾤsX��@�.�����+�=@��e��'9f��v���)���n��������#���0N[�40�d��ݼ�&����_�}�;=f��9��TU��������1W�0~�����A�1��2��y�����I��`E�kk�w�K3��z�mW&�����K���~��ʖZjH���C9`-��cw�{��'F;���Q�ޑY바f��Ϛ�Ax�����T���S=c(��ޭ��\�|���3���h�+5HN���M������ǰIg�`u�QA|3�l�ҊX�,�F)�#��iYP~����E�է��m�NC�<Pbܼ�~������c��:�����(^�`�Ȗ�/�x�g���譆�S�k@��k�2͘�7!t�k�*�*�VTf�Z��v4˼S�F&����tR!��`*z�j3a��Z��<b� �� �����v?����`�Q{�OEIY���^ �|�H�L1������֠a yUtd{��o�6 ��Qf��L���Vs�8�3nh ��l�eԹ�a�}�� �|�_'�m�;X��OO��r�c�y�ɳv$=�T^; Ȓ�e�|y�JFH�Պ������z6�����L2:w�*�h����r�M~�Ѹؚش��=�>o>�u���x��1��~Q�!��¿�d�������Աz=!�1��n⚶��L��>��QX<�QF��`���K��8������8 �)/Tm�%o0�r�T������xB5�J�3tW�v5���PMa}kz����eQ�_�(��S�Q����j��7�,"�L�Ĩ�Ʈx��q$��^��3Y"�����u��������b����⅟������5"���/:w�D�h��;s8���:O��"���7�ۥ�@�O�ү�5j�%�����m��?�4V�๗ �E�G[4Xnx��Ŀ!��|t��}���Ɯύ���L���Ī��ݙ�䄷&����Q�]X��տ�ۄ��ݡ@e��� �V ؏9�nՄ�ޱ�_�H����ρ���n!�� ��y�}�Ym N� �D�?���(�±�!�s�'���a@Pr�6SY��cB�<cs��Uy�>���t4٥9�4XnR>I)�5�o]����3��� '�5oob�["���ԯ�a�z�}��&{|�8�TJ7�wh��ο�m�z� �k�'�]��g��kr�b5���[?�;i��S��q��f�qԍ��h&Z��D�9~P�P^�� N���KrRz�˪m��F�p(����r�x.��s8�ُ�G���s"���˥�%�^Z/.�9:*iܾ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ