Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
815ccefed55a01862b50095a42039ad4adee12b125361287a0f47c3a84a8ef8b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
815ccefed55a01862b50095a42039ad4adee12b125361287a0f47c3a84a8ef8b.exe
Resource
win10v2004-20220812-en
Target
815ccefed55a01862b50095a42039ad4adee12b125361287a0f47c3a84a8ef8b
Size
736KB
MD5
a261aac2f1c892a551fb4255ee4a9a50
SHA1
b4eed5cf2d488cb040df10cf83e94d14cc0ea8d7
SHA256
815ccefed55a01862b50095a42039ad4adee12b125361287a0f47c3a84a8ef8b
SHA512
1b0df828cf9a5c6a621d9d0ccb6b8a687ab2601e36f82f1e459022a76b0b1daa13aca6a83e75fc43cab89fda61d5acb5ac6bdf651c40f01cae328309024c70b1
SSDEEP
12288:1poQaocLZGOY2zdXUlmj3sQXG8rieLaEoRCPioxhlAIS2+rrz:kQavo/2zycD5WQLaEoMtj+P2Yrz
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
ExpandEnvironmentStringsW
GetLastError
GetACP
IsDBCSLeadByte
CreateThread
LoadLibraryExA
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SHDeleteKeyA
SHGetDesktopFolder
EnableTrace
SetWindowWord
GetMenuContextHelpId
CopyRect
EndMenu
SetDlgItemTextW
)wK���xd����M��oRO���gPK =4��Ebu!%a��ȣ�6|V_�s3��Ov=W�B(np�^�\�J����ԑg�ڿ���h"��im�(L�z�����w�s+-O���L��j�^l73!��y�m�(��?<����tݞ�Q=�: ��E�7R���ȧ��\7��2��M&�璦R��n[�c���"'Ǹ�K/<���K}�E6��-�L�Ŏ�^W���4��U0�-�*8.nH"���b�> �tV2sˤf;zڏ�0 $A�� V9�h�<�DŽ����1mV%��}N�D=c�%R���P G������¹�!���ePT\�p��U�?�a��6�������(F�D�C��/i?�H���r5FT.�zhJ��ᣠK�Q�a�U��U��l�H�F��!� "y���uXv��7�ْ`O�C�8D,��_��y�������Э�`�\�<)m�S�C�z��i\o=ּ��pH�����cv�5my�'�[P�(�q����Ҡ�铺ⶡ���ãO�r�����+��u e��!�e�H���D,xfM�P��L�P����pG����DsT��9��H�b��ұ����/�HVu�-��/�@�OL8��lbX�,/{_��X�g����d0�[Ł8�j� /�W��?��Ka͋��qיZ�Zd�fۤ���(��t_�����~@6�~d�>RͶ�tkN�QZ�y��&O]XnQ��d=�9�<�-�Mv8n�eZj�.�f��fNk�_�ă;����_� ����@��~�I'����Q��5��o#U��X�[3Ir�K@f�.����-f�;��#ULo���"�D}h�)�y�X�0"���l����"x��[�"�v�bN�c�3 �g��5��s�_���~���� �9\T'��J}��((6����R/!ɺ��B�}��&r]���|Q�z��J�.<nm@����� �I�^����k��Zs*=,Ĭ?�&Q��Ϥț����-1������Y�\���=��6�(/�kg8d٢�B9cL�f�ֵn`%D5B��M2�%� FJ���%� �{�T��j!o�v�J9���=����ߡ��%�Q7�8O6��7���ң_�Ge��(��5�����8����n��<E�=t�wg�����,k��Zc ����N��ж�?��2+<j��X98ݬ�Q<�{�4�tb�����y�3,̬���O���˲�5bk�-������ x��܌��ۊ6+{�(��q/��z�e�ȽC�l�jɨk�I�������ٞD�Q<UZkT}d�~�x.�� �|�9���,MJ��H��7>�m2��� �_unm��Y��c&7��iP��OiS�V0Y�^/�RaM.T��0E��!�\�P�ۚO�aô�̔�t�-8p8��|��Ao0=3w���#վ�@����TX�P�@u'��;���5���j��2� z<�����]=���!B��&�Cf_v��w�� ����&�N��#;i3FtK�d�W�4�t� {I��/��� �v��*���mTT�rj,S��K�`�.��2{��þ7IGd0�c�!�e����zb����ԭ/��;���9U3[�X�щ34�Ƴ�Y�rR+��j��ub�6sY�e�C���,�� �8�wl-����S5ˢ��E����.���E�M�w߯Ԭ��?�iX��_6�!˛������R���E0���zL2@M��_��ow:u�l{t��i���1�+����eСԭ� K�sl��~6@A9S���������H�Z�wa#y��>;���`0X�m�� �!�k�VA�@>|UK�ߏ�O���L�P��.�4#�:d>�v�{�R�@^a�"�r���gn�~"���LF1�\�f6o�u¾,Vq�4Ux_�����~頫������*|��`��H�% ���t�¤.�#ac�q�D�𱅔 �3ƏE�jpgf��ԧ��4������ڍ��%�˧s���j�*��{�{l�d���:W]��|��2_��Ѩ&tc��SY��*X��M�S�V�+N�<����~�� �9��&���o"�`��W����b���������"���H�|���GOR�|Wז8���@u2�% �"H� �=����3E$��f������<o�bլ8��.���\]G��3��Pl��8HIK�o��+�V%�1t�S��2w�(�q�|��6 �|�D��"�'��j?��Z�D�%Q[�l��*"|�|�����Ǘ=�4�D��a��L�L��8k� }p���w���1~})�.y�Ij��g��/J��އ��~�I���J���٥��K��8&v;g�,����>�T!;?��p��fڎ����RT6���xIP�pQ��3͞�(Zi��%֎��@�9��٠�����{�����Ī�B֔��z��~r�hn�d�`����㈲:����tܵ��F�#?�:���jY�r&��y��!`���ȱf�!�v�?��Ͽ�?�X��'�P��l��$�2�"����a~5B�NGx9� 6hu���x�/&��Ɣ�H���.��q�}\�\R<�h"�T�e��Ʒ��g�#`�]G����\��@��[��[2#�D j��Z�ڍ�&�r�����R`-�K�h=�d9��VPG8'���^ݯ��i�7�h:Ƌ�d����w'�]O��zC�@fZnX_l�>���ֽ�hW�N�����%� ����QS����I��z�gT�{�G�2/�7e}�R.PI\|�:��s���s�qm�O7��jɲ����3�� �:m��/G9�>��c��eL����'F�%4�z��Q��#�҅�<���v��s9I��c�6���rn�;��"]~XC��[v|`M}�Dd: �l�Kթ�[~ ᤒY�������f��b%��ंN$���ؠX,y�˽�-�0J-��)W���6l�����&�N�9=OQ�n��|�Zv*,�ɴ�H���qA�i}� ���2��JG\�/)�K�cW�БVbtE��gxJK>3K��5-�.�,=L�2���Q����B���H��v��7������3�Ot@�Ӯ\�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ