Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
1e0218a4d8265b5af820bccad5197c692b661eb5634f83c2f1bf8e79a929bd07.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1e0218a4d8265b5af820bccad5197c692b661eb5634f83c2f1bf8e79a929bd07.exe
Resource
win10v2004-20220812-en
Target
1e0218a4d8265b5af820bccad5197c692b661eb5634f83c2f1bf8e79a929bd07
Size
739KB
MD5
0cbbad7d9caaa240f768e231d7438a80
SHA1
7d3816483dcde14075e44d9dde401968accf7a5b
SHA256
1e0218a4d8265b5af820bccad5197c692b661eb5634f83c2f1bf8e79a929bd07
SHA512
8a577f3710b72f2db32ec2ad7a54bcb5d7acf8bba8b627015c38656892cfdc3d5a692232726684ddfbb2211a61ad1924ffab589330058fe93ac1c70ac831f929
SSDEEP
12288:sqFdWtXLcbLiFcBsZdm5kIyKn/zhKfe0qYrB3bM0i:smokLaHukG0fYy3bM0i
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PathRenameExtensionW
StrCmpNIW
SHRegEnumUSValueA
PathIsDirectoryEmptyW
PathUnExpandEnvStringsA
SHRegGetUSValueW
GetOpenFileNameW
GetFileTitleA
GetOpenFileNameA
dwOKSubclass
VarI1FromDec
LHashValOfNameSys
OleCreatePropertyFrameIndirect
GetAltMonthNames
VarI1FromDate
SafeArrayAllocDescriptorEx
VarUI4FromR8
VarR4FromI2
VarBoolFromR8
VarDateFromDec
VarDateFromI1
VarI4FromCy
SafeArrayCopy
VarUI1FromUI8
VarUI4FromI8
VarUI4FromR4
VarBstrCmp
VarBoolFromStr
VarDecNeg
SafeArrayGetVartype
SetJobW
GetJobA
EnumPrintersA
AddFormA
DeviceCapabilities
OpenPrinterW
AddPrintProvidorA
DeviceCapabilitiesW
GetPrinterDriverDirectoryW
ClosePrinter
DeletePrinterIC
EnumPrinterDriversA
GetFormA
EnumPrinterDriversW
SetPrinterDataExW
AbortPrinter
CreatePatternBrush
DeviceCapabilitiesExW
PtInRegion
PolyBezier
GetTextAlign
CreateFontIndirectExA
GetObjectW
GetKerningPairs
CreateHatchBrush
GetCharWidthInfo
SetPixelV
GetCharWidth32A
GetTextExtentExPointA
GetTextExtentExPointI
GdiEndPageEMF
GdiReleaseDC
VerFindFileA
GetFileVersionInfoSizeA
WSAAsyncGetHostByName
WSASendDisconnect
WSARecv
WSCDeinstallProvider
WSCUpdateProvider
WSAInstallServiceClassW
WSCWriteProviderOrder
WSCEnumProtocols
WSAGetOverlappedResult
gethostbyname
getsockopt
closesocket
WSAEnumNetworkEvents
recvfrom
WSASetServiceW
WSASocketW
WSCInstallProvider
WSARecvDisconnect
ImageList_GetDragImage
FlatSB_GetScrollPos
ImageList_Duplicate
PropertySheetW
ImageList_SetOverlayImage
ImageList_LoadImageW
CreateStatusWindowW
CreateMappedBitmap
ImageList_DragLeave
ImageList_AddMasked
FlatSB_SetScrollRange
CreatePropertySheetPageA
FlatSB_SetScrollPos
ImageList_SetIconSize
ImageList_GetImageRect
CreateToolhelp32Snapshot
AssignProcessToJobObject
GetVersion
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetMessageTime
SendMessageW
]:��ts�C�-d���g,���c�E����'��NA��#�`���ZL5��D���99Fw����D�')q}3������*{���!jR�ʸs��]�f��pAJ�"8��P8�����:ի/��3ז~c�n�I�,��` _[Զ�ކ����1��^ÊS�.�H7��{X��J:�=���*��X����P����+%U��$<�ʝ�Iq|�%���xP��1L�i ��\�� �=�Z�����e} &�������I�xѯIl��OwL��Ҫ~��w"��������-iM��⑨�}o��y��v�A)U�OgqCH6��SέG��)� M��A�jT��<�9k�r/PR��l�c�z�brU�mRZ;ɕ���Y&�y�OU�у����Xd�;q#���+�1;���k���(D�ZP�F8V�=X��M: ���n�+.B4�φ��}�y��?cB� ��NCV����1�ȟ���.^ �����Vo��z�F��p�{�C��p��1y�A��ۉ�V]ư�6]�o.��s۞0�O-�GwX���lCMe;ل�k f�v��ڍ��g�>���eT4�+EIϬ=PBJ����P�s�c����:�{�UHp���.��P&����ѐ���l�����m���a���S/$J5�,I{2u�1q�,˨L������DR���� 5���j�7����eUq�D��K����f��JB�1���{�!�$�����^��@ fu,OE̓M����-]�i�)+zb"[r5���= �?/ �����Ͽ��z{�6�z�����t����V4�^���$mc���N�T�W�r��6$��RDٹ��L��vV�Y�tE:��8�ږ�A�)۫ĵzԍ�XBT�3�ц7GM�ʄpN+c�cQنP{b��BJI��f���K)Q��8W{9X�D��G��2�=%�h�je�stO�i����ibe*��f~��s��}3�S`�!�[N�uQ~�;p���3��GԎ�{"npЯM-b�1�B��WwS�e�Z��)���J-���]����Y���LaI�2C��]���'���䔽�ό �d��%d��5�1.�L�\�]D��}%�{��w��Yqn��F�-[)Ě�d����˃�Հ�n�cT��a��}��~%<���:s��̆$��kC"x������sI�v���E���F�v�7�z#� V�i'�z�9�H7(�K`!|H���d�l+�<S���n�[{��+��W�%;o�[R� H����G�Ǐ���v��:8�\�������T-��R�b;?��ơ����3۩� �K2ѵYK!J x҈��`h�M]�nK��^?k�n��LW�&Z69� HmV��ؔJy�i������2�Û�:�d��(7o0�0�����|#�:Zۂΐe�S�����и߰��ϳ�� ��H�mO{��\�iBC���x�ul'f�͏ν ���Ӻ4�c&��+1u��F8[�+E��pkP������_R�(#& �?j�"K��n!�d�����VnH��ܻ5��YB�\�U�Q���R� mJ�&��1s/�H���)�5r��4o�,�ݷ7�w�[ �j�x�z��Ҕ�-�2WmhC�7���$�)�������d�� %l�t�#��hs{z���N4g)�]�s�����nUUJ����~|��.���_�4�t� � F��>�2�g@��i�`9����b�dW��X#ࠞs��������@YIP{�WxUܠw-�b2/ïPu���s�c��;���k��˩�-wg�fm��s����SS��=�\ɪX���S����p ��vP|2�9�@ \"����'U�Y��7̸�o�EA�K�rI� �S7�I̔���f^+�v ��J\���2���7Qyiv��Q�chu��&��ﮏh�U7�l�qh�����@cF�9���|c�yr|���[�@��;�$�@y05?���;�1�(��0tџݭ���@6x���r^��A#��A��;���.��'����-�S�&�^��v��?t�}Op���©j��-�@��'����@E,�h���p3J�bv�Y�6��(W!�͙��օ�~�Ǎ���Z�B��Cger�v>/{Wpx@�D<d�a���P�̚˰�務����,[aIUxqw�v=������a�m��R�R�#��7߈��9`�� �q�_bW�U�J��)�2#�BѺ�������R�3��T��O�� �6|��K�͏� ���x����5c���{ϳN�\�~�/V+��U��K~U{���U6�A�:�l��vru�tn��S���Gcz��������먪Y���u���Hz��m��Ͻ�0�W���'�\��e4�ZY� �w��J���-����=_���S�\ԍ�IXZ�aӵo ��?�p���>.R�?�j�ZnOy����ka�����-�أ��,$����韩��|h�M�8I8:�nx�����Gq4��X=#6�ߓ�w�A_�5��ˋF^�����8/'W�>�9>G4˒C���c�Rk̜�*�,��'8R��RU�+q�9&�]kk�s��yDnQ+3 6RFx��� m{�Ӎ��q��>\.P�Vh���e�����~�ϵr�!E�xO��q���Y���01J�160yz��!���i�������]�5N���P���X}�7t�s���#��5j�&�b�i?F2� ����Lfu��}3��<��]��o8#j�n���5��e7�N2^���ps�/1Bc���4 �X�a�`��U��!lV�cwɰ���G�����,y�����9��F����pn$v�`ctʥ��B>% �Hk� �rM8|�,����6�7�Ge�^b��M@�_���#��f��=t��,���/yW��~�7uWQU&?���_�Bi��b��Lh�;rg]k�Pށ�BC 6{�!¢��:�"�@N�"���?�9z֯��ݙ�>]��b5�Eq�Xm��&v�����>���TqD1ެ�s�W0����@��NQX`+KiۖH��m�s�śT
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ