Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
0596ca360a492f4a2b757c473729a2d12394eeb193658d8d4205a846cc6ed96c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0596ca360a492f4a2b757c473729a2d12394eeb193658d8d4205a846cc6ed96c.exe
Resource
win10v2004-20220812-en
Target
0596ca360a492f4a2b757c473729a2d12394eeb193658d8d4205a846cc6ed96c
Size
863KB
MD5
0ae4d6dfa36700e51e6f0ccbdd173530
SHA1
1bf9c71eeedaa4867769370b51e8540ac690f26f
SHA256
0596ca360a492f4a2b757c473729a2d12394eeb193658d8d4205a846cc6ed96c
SHA512
e1c338b3de5a15303929066610dc30ce378e2b2db025cc9211470cc1b8342a5d32418859e592ca208b2b057ad5bda14308341d6cd95c08fce4f1995efcca9874
SSDEEP
12288:CbnLbF+/YfdWIquf1NTGxq7ZWa1pD6QedYUVuxKR2JrUlrhGkG/8pMa:CbHF2cf1kILxeT/Rl9GkGTa
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetWindowInfo
ModifyMenuA
UnhookWindowsHook
CreateMenu
AppendMenuA
GetMessageTime
DrawAnimatedRects
GetMenuContextHelpId
GetClassInfoExW
BringWindowToTop
GetWindowDC
GetWindowModuleFileNameA
GetFocus
SendDlgItemMessageA
ToAsciiEx
ExitWindowsEx
BroadcastSystemMessageExW
DrawFocusRect
ScreenToClient
ChildWindowFromPoint
RegisterClassExA
GetKeyNameTextW
FlashWindow
FindWindowExW
GetCaretPos
GetScrollPos
SendMessageTimeoutW
DrawFrame
WindowFromDC
CreateIconFromResourceEx
DlgDirListA
SetParent
TranslateAcceleratorA
SendMessageCallbackW
GetUpdateRect
ShowCaret
CheckMenuRadioItem
SetActiveWindow
BroadcastSystemMessageA
CharNextExA
CreateCursor
GetWindowContextHelpId
CharToOemA
GetMenuItemRect
LoadAcceleratorsW
FillRect
GetMenuItemID
GetKeyboardType
LoadBitmapA
SetMenuItemInfoW
EnumPropsExW
PrivateExtractIconsA
ReleaseDC
BringWindowToTop
MessageBoxTimeoutA
GetClipboardFormatNameA
UnlockWindowStation
GetDlgCtrlID
SendInput
DialogBoxIndirectParamW
IsIconic
ModifyMenuA
CharLowerBuffW
wsprintfA
GetMonitorInfoW
CopyAcceleratorTableW
MapVirtualKeyExW
RealChildWindowFromPoint
MonitorFromWindow
SetWindowWord
SetSystemMenu
GrayStringA
InvalidateRgn
RegisterClassW
SendMessageW
DlgDirListW
DialogBoxParamA
IsCharAlphaW
RedrawWindow
EnumWindowStationsW
GetAncestor
CopyIcon
GetForegroundWindow
IsWindowVisible
OpenWindowStationW
RegisterWindowMessageW
CharUpperBuffW
MoveWindow
GetInputDesktop
SetMenuDefaultItem
WaitMessage
GetLastActivePopup
TrackMouseEvent
GetWindowInfo
FindWindowExW
CreateDialogIndirectParamA
EditWndProc
InflateRect
SetWindowContextHelpId
SetDeskWallpaper
GetDCEx
GetTitleBarInfo
GetSubMenu
LoadKeyboardLayoutW
GetCapture
ValidateRgn
GetSystemMetrics
DrawMenuBar
GetClassInfoExW
OemToCharW
CopyRect
DragDetect
ShowScrollBar
LoadIconW
DrawMenuBarTemp
GetClipboardFormatNameW
AttachThreadInput
OpenIcon
SetClassLongW
InsertMenuItemA
CreateDialogIndirectParamW
CheckMenuItem
ValidateRect
SetMenuInfo
CheckRadioButton
LoadKeyboardLayoutEx
MapWindowPoints
UnregisterClassW
ChangeMenuW
GetDlgItemInt
ToAscii
EnumDisplaySettingsExW
CopyAcceleratorTableA
InsertMenuA
CharLowerW
GetSysColorBrush
EnumPropsW
UnregisterHotKey
EndPaint
GetClassInfoW
ShowWindowAsync
BroadcastSystemMessageExA
MessageBoxTimeoutW
AlignRects
ChangeDisplaySettingsA
OffsetRect
SetMenuItemInfoA
DrawTextExW
TranslateAcceleratorW
GetDC
SwapMouseButton
RemoveMenu
ActivateKeyboardLayout
RegisterDeviceNotificationW
CharNextW
DestroyCursor
EnumClipboardFormats
SystemParametersInfoW
GetKeyboardLayoutNameA
AnyPopup
SetScrollRange
wvsprintfA
CharPrevW
RegisterWindowMessageA
ExitWindowsEx
GetDesktopWindow
GetTabbedTextExtentW
CharUpperA
IsCharAlphaNumericW
CreateMDIWindowA
PostMessageW
SetPropA
OemToCharBuffA
GetGuiResources
GetMessageTime
DlgDirSelectExA
EndTask
GetWindowTextLengthA
DragObject
GetMessageExtraInfo
GetThreadDesktop
GetSystemMenu
RegisterClassA
HideCaret
CharPrevA
RegisterHotKey
CreateIconFromResource
SendMessageTimeoutA
LoadStringA
WinHelpA
ShowOwnedPopups
DialogBoxParamW
IsCharLowerA
GetComboBoxInfo
DispatchMessageA
DestroyIcon
TranslateMessageEx
GetMenuItemInfoW
CreateMDIWindowW
GetWindowWord
SetFocus
DeleteMenu
InvalidateRect
DispatchMessageW
EqualRect
EndMenu
FlashWindow
SetCursorContents
RegisterClassExA
GetWindowRect
IsCharLowerW
UpdateWindow
GetMenuState
AppendMenuA
BlockInput
LoadCursorFromFileW
MessageBoxExW
GetDlgItem
ChangeDisplaySettingsExW
GetClipCursor
DrawTextA
FindWindowW
GetMouseMovePointsEx
GetWindowTextA
EndDialog
GetLastInputInfo
SubtractRect
InsertMenuW
ArrangeIconicWindows
SetCaretPos
ChangeDisplaySettingsW
wsprintfW
TabbedTextOutA
GetMonitorInfoA
GetCursor
GetMenuContextHelpId
GetDlgItemTextA
RemovePropA
MenuWindowProcW
GetProcessWindowStation
CloseClipboard
GetIconInfo
LoadImageW
IsChild
ToUnicode
PaintDesktop
GetMenuItemCount
AllocConsole
SetThreadLocale
ReadConsoleW
DosPathToSessionPathW
TransmitCommChar
SetFileApisToOEM
SetThreadPriorityBoost
PeekConsoleInputA
SetThreadPriority
UpdateResourceA
PeekConsoleInputA
EnumSystemLocalesA
LoadResource
GetShortPathNameW
BuildCommDCBA
SetCommMask
GetUserDefaultLangID
PrivMoveFileIdentityW
GetLongPathNameW
GetModuleFileNameW
GetCurrentThread
GetLastError
GetPriorityClass
GetDefaultCommConfigW
FoldStringW
GetDiskFreeSpaceA
TerminateProcess
WritePrivateProfileSectionW
SetSystemTimeAdjustment
SetCalendarInfoW
RtlFillMemory
RtlZeroMemory
CreateHardLinkA
DefineDosDeviceA
GetShortPathNameA
EnumSystemLocalesW
RtlMoveMemory
SetFileAttributesA
WriteTapemark
GetNumberOfConsoleInputEvents
GetEnvironmentStringsA
GetConsoleInputWaitHandle
VirtualLock
lstrcmpiA
WaitForSingleObject
GetProfileSectionA
WaitForSingleObjectEx
InitAtomTable
ScrollConsoleScreenBufferW
TlsGetValue
GlobalMemoryStatusEx
CreateNamedPipeA
GetTapeParameters
GetProcessIoCounters
SystemTimeToFileTime
WriteConsoleOutputAttribute
GetPrivateProfileSectionW
SetLocaleInfoW
SetVolumeLabelA
AddConsoleAliasW
CreateEventA
FindFirstVolumeMountPointA
DisableThreadLibraryCalls
BuildCommDCBW
GetTimeFormatA
LocalReAlloc
FindResourceW
SetCurrentDirectoryA
GlobalUnfix
QueryPerformanceFrequency
TerminateThread
DosPathToSessionPathA
SetEndOfFile
GetNamedPipeHandleStateW
SetFileShortNameW
RtlCaptureStackBackTrace
RestoreLastError
GetWriteWatch
FindActCtxSectionStringW
GetSystemDirectoryW
LZCloseFile
IsBadCodePtr
InvalidateConsoleDIBits
FindFirstFileA
ReadFile
GetEnvironmentVariableW
FatalExit
CreateWaitableTimerA
GetShortPathNameW
GetModuleHandleExW
EnterCriticalSection
GetProcessTimes
IsValidCodePage
DnsHostnameToComputerNameW
CompareFileTime
SearchPathW
GetVersionExA
SetVolumeLabelW
GetTapePosition
GetTempPathA
IsValidLanguageGroup
CreateDirectoryExA
HeapCompact
GlobalHandle
CompareStringA
FreeLibrary
OpenFile
SetInformationJobObject
ActivateActCtx
SetLastConsoleEventActive
PrepareTape
CancelIo
GetCalendarInfoA
CreateSemaphoreW
CreateFileMappingA
GetEnvironmentStringsW
SuspendThread
GetBinaryTypeW
DeleteTimerQueue
GetStringTypeA
GetComPlusPackageInstallStatus
PrivMoveFileIdentityW
LZOpenFileW
SetFileApisToANSI
DeleteVolumeMountPointA
WritePrivateProfileStructW
VerLanguageNameA
GetConsoleCursorInfo
MapViewOfFile
GetLogicalDriveStringsW
SetFilePointer
GetNamedPipeInfo
EraseTape
UnlockFileEx
AttachConsole
GetFullPathNameW
GetVolumePathNameW
OpenMutexW
GetVersion
MoveFileExA
TryEnterCriticalSection
RtlCaptureContext
GetVolumeNameForVolumeMountPointW
LZStart
ClearCommError
VerifyConsoleIoHandle
DeleteFileW
lstrcmpiW
LocalHandle
GetCommMask
WaitForDebugEvent
ReadConsoleInputExA
GetSystemPowerStatus
GetVolumeInformationA
GetLogicalDriveStringsA
GetComputerNameExW
FreeEnvironmentStringsW
CopyLZFile
lstrcpynW
OpenJobObjectA
TzSpecificLocalTimeToSystemTime
GetVersionExW
ConsoleMenuControl
FatalAppExitW
WriteProfileSectionW
CreateTimerQueue
GetVolumePathNameA
ExitThread
FindFirstFileExA
GetProfileStringA
CreateDirectoryW
CallNamedPipeA
FlushViewOfFile
InterlockedExchangeAdd
GetExpandedNameA
ResetWriteWatch
SetThreadExecutionState
GetACP
SetTapePosition
WriteConsoleOutputCharacterA
GetAtomNameW
SetCalendarInfoA
LocalLock
ReadFileScatter
ShowConsoleCursor
CreateFileW
GetVolumeInformationW
GetDateFormatW
CreateThread
ExpandEnvironmentStringsA
OpenSemaphoreA
VirtualFreeEx
PeekConsoleInputA
GetFileSize
CreateHardLinkW
GlobalFlags
FindResourceA
VirtualFree
lstrcmpW
SignalObjectAndWait
FindVolumeMountPointClose
EnumResourceNamesA
SetThreadPriority
EnumCalendarInfoW
IsBadStringPtrA
GetFileSizeEx
WaitCommEvent
CreatePipe
ReplaceFileA
RegisterWaitForInputIdle
CancelWaitableTimer
SetFileValidData
ReadConsoleInputW
IsBadReadPtr
FindFirstVolumeW
LZInit
TerminateJobObject
SetSystemPowerState
GetAtomNameA
GetCPInfoExW
lstrlen
CreateFileA
GlobalUnWire
InitializeCriticalSectionAndSpinCount
GetConsoleCursorMode
SetFileApisToOEM
lstrcpyA
GetNumberOfConsoleMouseButtons
GetSystemDefaultLCID
BeginUpdateResourceW
FreeUserPhysicalPages
DeleteAtom
SetHandleCount
FileTimeToDosDateTime
EnumSystemLanguageGroupsA
RemoveDirectoryW
GetPrivateProfileIntW
RegisterWaitForSingleObject
VirtualQuery
LocalFree
LoadLibraryExA
LocalAlloc
CopyFileW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PathCreateFromUrlW
SHDeleteEmptyKeyA
GetFileTitleW
GetOpenFileNameA
VarI1FromBool
VarUI8FromUI2
VarDecCmpR8
SHGetNewLinkInfo
SHHelpShortcuts_RunDLLA
SHGetFolderLocation
SHGetDiskFreeSpaceExW
OpenAs_RunDLLA
SetFormW
AddPrintProvidorA
PrinterMessageBoxA
SetPrinterA
ClosePrinter
EnumFormsW
GetFormW
EnumPrinterKeyA
GetPrintProcessorDirectoryA
EnumMonitorsA
ConfigurePortW
EnumPrintersA
GetJobW
SetWorldTransform
GdiInitializeLanguagePack
GdiConvertRegion
EngFreeModule
Pie
CreateDCW
GetEnhMetaFileDescriptionW
bMakePathNameW
SetColorAdjustment
GdiIsMetaFileDC
UnloadNetworkFonts
SetBrushAttributes
PaintRgn
WTSSendMessageA
WTSTerminateProcess
WTSLogoffSession
WSCInstallNameSpace
gethostbyname
bind
listen
WSASend
InitCommonControlsEx
ImageList_Replace
ShowHideMenuCtl
CreateToolbarEx
DllGetVersion
GetEffectiveClientRect
FlatSB_SetScrollRange
ImageList_Merge
PropertySheetA
MakeDragList
��s����}÷�9@K����t�~����C�l])�E6�_3�&~��n��u�R����4�|F�lN� ��#���c8�m�S�Du*��x��Z0������ �?H�"ɶ���O�2��}�Y������ڌ�'�'�`Ӵ��<~��X�ų�����ĈJO��3����m�B�Rг�L�_�S�$���^�]X/��%m5��Ƣ��ԧl��Hձ����5K)(;)#�w ��V�wm++�H�߹��M����'�j!VY��-f�X���#ܗd� �����U�`f>.x�Q��(�kIXqm|��Ռ���&[7��":�?e���N���:��!�O��S6�q�;����+�.,~����$ �Y�2a%.���E�ʹqz�[�{�dG��Mf"nE�R@��iD_Ϫ��?��anz��)\)3�b���$n�<���{tb^���Ü��QK9f�S����,aIQa ���AVG(�66��p��I ��߳�Kl��?J�|��ֆ�b�x�NO�-�zBNt�ԏd�%�x��E"i��Bb���P�`cr�E�w����RD���t���_]If�1�:Hk��"�+��B��.Bn|t��Kb.ā�%F7m�{=hl�`#�Q��3�l�j������"p��h+�]�a�LL��o�Q��� o�?{g��Iinr���؋�PmK_,��M��Ϋ����į�*0M4s���.����(k+���3 ���^S�{�������R�a]5���Y�_:� +�@�m�yj�/��i-��l�^Ia�hd��Fx^��0�7��F`��?!�3�_���?'��}��1Z�8�dwtפ��";�n�zS��~���=d�����H6!�im]��t �"{���@v��ϙ"GlG��r5�ڍ�(�+:>���Qs�9Rl���C�^�}آ�Bw �P�+�]��T7t<n�F�7�7�6���&��A�9�As�[�/vN� �����+� / �'Tx�����{N�w�b����D�� _gP~��yZYg���o����?�?m�_+�Q/j@��j��R6i�!c�:�ژv��퓒2R�֪i��$T���8�#M��gF�GB.� �"�� c����B���~���[�١�V�Sɭ���d�����˱0��]�q��:�i�W`wd�n�Y�ة�=�Q(A�}(�wBP�K��1ο���Jg����ҟ�qp�F�d5�x�_TT�ۤ�������s4H����H�R�7��5����"bԖGJ�o�:��~"�d�� bD�����J!fN1K(�ӕ���X�)��t,HÔ�t�At��@YҎM��i��{gOx������Һ �o��/ ����ً�� /�C#/�ti�ܕ��XnW9�� ���,���O藝��dH�Ԁ-�"�iѫ���o��+]Gu�z�c;ۚ��}�o�a����6H%O �\f�����������!j�cL�Xo���Kx�H��(�k�6r�op�m��#F��L�A%��D&�,_r�� +N�h�T(��:�6����]�H�H����o\Ǯ�>-�d��`����[q¾�sv/0��Z���2`DU���=M��.a�v������A����p��DcO؝�u��#����~Azu�r����L���E��\li�U����Lh~�h`Qg������� * T~�����҆�������TD�^�E�����H��ԃ�e#��,���R'<��y�ߍ�ݲ���{6k�4����a��J�&�p����g�$H&Z"+��tm���%��u����O�0�����n��h��/�]��do�^8p. J���M�Z�V�C��JDf/BR��#a�^��ǵ%�[��qP��P~�l��L����B(��fdZ��rڠĔ�̳6�����$a����||� C���T2����..��b���aQҩ�TG<���f�0�]N�o� |�@K��RM��F3�P�D�>�r�t|��n}���I��.�����р;� LD�F) k�܃Q�q�T�������k$��g��MaF���O �B=}PZ��ܟ"(�>��.U3d�_��KlV�\��^����� ���=%<G]���-�����'���l����kե}c��wN�\gevE��-�QBP������k\�'cm+�����.�;��C�s�TN 8B��Fv߆{�r�ʑ b�������a�Ȼ�/���� 36����c2����z̮+�=�Tv���=�B��%7̀�ybbkӓƑ�R�^�fM��o���j�H�h�6ח��O铂P�W�~�Ă)ʪ����E�s��z@�/�V~���k�s��B8��RoCK����N�:�N�(��֪�ߝ���/F,�J">�%2��y/���~�9���Ӟ�<�oa0D�!#h�!��H��/�C-U쪀�I�=L����d�.�� ,;��e���-ݙ3�O�����~���M�#�b� ���w��_/�*(J ��(d�ǂ mO�]��� ��~����t(O) L�5�zy�e_�f�Ц��`����n�B�9p�v��n3�?y�_�Rج̲.([Q��!4C��݆ �M�6?�0g�٪p�����zC�5c �Sj��n��U��Y��&5�� �p����}�K�Z����}��9�� ��yl#��ǡ�e&0��p�@��E�{�7%� �;��U�/s~7=��c*���Â��4SF����m�N���'�bAU��1'��w�T�d�,S��9��H~7��x/�y��l�O�0Mb��k���7�w�7�k4�|�Ȏ��'ʉ@�������*���-3LЊ簁~�\I�mˑ�:��G�V�Sgg>gM!�/N����& �r^zY�s��6�UN�y-��s-�����U��8U�Psg �.�ho$�H _5�*�G�*���^D�����8�勂�UƟ�P�9���̛������9�䂫Q�)F`�D�������R�5���1Z���� ;�i��z�;�Ew�c��*y�2�l`*P��;~QT�r���w�pS/D�&��e@���H�<��Tl����5Ga~�3kR��Z6�VC黾��9g�4��D!��7�����;�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ