Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
373cab473b43ab8d030463ce7888f9e430549a1b6f9cc9a16dd6f55ce18a9bc5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
373cab473b43ab8d030463ce7888f9e430549a1b6f9cc9a16dd6f55ce18a9bc5.exe
Resource
win10v2004-20220812-en
Target
373cab473b43ab8d030463ce7888f9e430549a1b6f9cc9a16dd6f55ce18a9bc5
Size
681KB
MD5
848e30a71d19ac1c08074af92928fbf0
SHA1
d9c156b8724d5c4db151d219a64168ace99abf88
SHA256
373cab473b43ab8d030463ce7888f9e430549a1b6f9cc9a16dd6f55ce18a9bc5
SHA512
b2fab380b23ca8d8daad796afad42afd0406da476c3777bf9dae7f4b757cefb7f04671e9b8f3a81d524c8c10a76c394eb38b13d5f7966ce67ebf6c714f2d5cb4
SSDEEP
6144:5VDH7srOX/rOkdKGZ/4hzHmOPsEZgmxNBvcjMXBGCY6aIfDtsv5ioNTvV8nvDWPC:voSD//4YOPTPyjbSDIIopUUtJLY+k+J+
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
CharUpperA
GetClipboardData
GetDialogBaseUnits
GetMenuItemID
GetSubMenu
CallNextHookEx
ToAsciiEx
GetSysColorBrush
IsCharAlphaA
GetClipCursor
CreateMDIWindowA
CreateIconFromResourceEx
CallMsgFilterW
MenuItemFromPoint
UnionRect
TranslateAcceleratorW
LoadMenuW
GetMenuDefaultItem
SetPropA
GetUserObjectInformationW
DlgDirListA
AllowForegroundActivation
ShowWindowAsync
PrivateExtractIconsW
IsCharAlphaW
SetProgmanWindow
GetLastActivePopup
UnhookWindowsHook
GetUserObjectInformationA
SetMenuItemBitmaps
CheckMenuItem
GetWindowInfo
DefWindowProcW
OpenInputDesktop
EnumWindowStationsW
DefFrameProcA
SetWindowWord
SetWindowsHookA
EndTask
GetSystemMetrics
MonitorFromRect
GetMouseMovePointsEx
SetMenuItemInfoW
OpenDesktopA
MapVirtualKeyA
UpdateLayeredWindow
GetSystemMenu
CreateDialogIndirectParamA
DragObject
DefDlgProcA
GetClipboardViewer
RegisterDeviceNotificationW
CharNextExA
DrawEdge
GetGUIThreadInfo
DrawStateW
SetWindowsHookExA
GetTabbedTextExtentA
CharPrevExA
GetPropW
RegisterClipboardFormatW
WinHelpW
AnimateWindow
DrawMenuBar
GetClientRect
CopyRect
LoadMenuA
SetUserObjectInformationA
GetShellWindow
GetDCEx
DrawTextW
FindWindowExA
GetForegroundWindow
GetCaretPos
BroadcastSystemMessageA
EnableMenuItem
PostQuitMessage
SetScrollRange
ChangeMenuW
EnumDisplayMonitors
ModifyMenuW
CopyAcceleratorTableA
GetWindowTextW
CharLowerBuffW
DestroyMenu
LoadCursorFromFileA
LoadCursorFromFileW
LoadBitmapW
TrackMouseEvent
EnumDisplaySettingsW
CharToOemA
InvalidateRect
SetWindowPos
SetCursorContents
EnumDesktopsA
GetWindowTextLengthA
LockWorkStation
CheckDlgButton
CallWindowProcW
GetMenuItemInfoA
CloseClipboard
DrawAnimatedRects
GetMonitorInfoA
DrawTextExW
wvsprintfA
GetAsyncKeyState
CharLowerW
FindWindowExW
SetMenu
GetRawInputDeviceInfoA
GetWindowPlacement
IsCharAlphaNumericW
SendDlgItemMessageW
OemKeyScan
SendDlgItemMessageA
OemToCharA
ActivateKeyboardLayout
SetKeyboardState
OffsetRect
FindWindowW
GetKeyboardState
CharToOemW
PrivateExtractIconsA
SetWindowsHookW
PeekMessageA
SetDoubleClickTime
EqualRect
GetMessageW
GetScrollBarInfo
RemovePropA
ChangeDisplaySettingsExW
GetWindowTextA
CreateAcceleratorTableA
CreatePopupMenu
SetCursor
GetClipboardFormatNameW
GetScrollInfo
SendMessageCallbackA
GetInternalWindowPos
GetTabbedTextExtentW
GetClassLongA
InsertMenuItemA
ShowCursor
CloseWindowStation
UnregisterDeviceNotification
InflateRect
SetFocus
GetAncestor
LoadAcceleratorsW
DlgDirListW
ShowOwnedPopups
GetMenuItemInfoW
GetKeyNameTextA
GetUserObjectSecurity
GetClassLongW
PostThreadMessageW
FindWindowA
GetKeyState
wsprintfW
SetWindowLongW
FrameRect
SetDlgItemTextA
GetWindowLongA
DrawTextW
SetEvent
GetModuleFileNameW
GetConsoleTitleA
GetShortPathNameA
WriteConsoleInputW
ReplaceFileA
GetSystemInfo
HeapAlloc
GetPrivateProfileIntA
IsDBCSLeadByte
SetThreadAffinityMask
IsBadHugeWritePtr
GlobalUnfix
GetCPInfo
HeapSetInformation
GetUserGeoID
ExpandEnvironmentStringsA
GetGeoInfoW
AttachConsole
GetOEMCP
GetLogicalDrives
FreeEnvironmentStringsW
GetConsoleInputWaitHandle
HeapUnlock
FlushViewOfFile
AddAtomA
FindFirstFileExW
FindCloseChangeNotification
EnumDateFormatsW
SetFileShortNameW
GetConsoleMode
DeleteFileW
SetProcessAffinityMask
DeleteFileA
HeapLock
GetConsoleDisplayMode
CloseHandle
GetCurrentConsoleFont
FindFirstChangeNotificationA
WriteConsoleOutputAttribute
CreateHardLinkA
WritePrivateProfileStringA
LoadResource
LCMapStringW
EnumResourceLanguagesW
HeapValidate
WriteConsoleOutputA
GetBinaryTypeA
EnumLanguageGroupLocalesW
EnumSystemCodePagesA
GetTempPathW
GetExitCodeThread
SetThreadExecutionState
VerLanguageNameA
OpenWaitableTimerA
GetPrivateProfileStringA
GetFileSize
FindNextVolumeMountPointW
DisableThreadLibraryCalls
QueryPerformanceCounter
GetAtomNameW
GetLastError
GetDiskFreeSpaceA
WaitForSingleObject
DeleteTimerQueueTimer
CreatePipe
SetCalendarInfoA
GetNumberFormatA
CallNamedPipeW
UnregisterWaitEx
UpdateResourceA
GetEnvironmentStringsW
ProcessIdToSessionId
CreateProcessInternalA
TerminateJobObject
WriteProfileStringA
RegisterWaitForSingleObject
SetFileTime
GetFullPathNameA
InterlockedDecrement
UnlockFile
EnumResourceNamesW
ReadConsoleInputExA
GetTimeFormatW
FormatMessageW
PeekConsoleInputA
Sleep
LZSeek
FatalExit
FreeEnvironmentStringsA
BeginUpdateResourceW
DosPathToSessionPathA
CreateDirectoryExW
GetNamedPipeHandleStateW
CopyFileExA
FindFirstFileA
RequestDeviceWakeup
GetTimeZoneInformation
FindActCtxSectionStringA
GetConsoleCursorMode
GetTapeParameters
ReadConsoleW
FileTimeToSystemTime
GlobalFindAtomW
SetFileApisToANSI
IsProcessInJob
InterlockedIncrement
CreateNamedPipeA
CompareFileTime
InvalidateConsoleDIBits
OpenFile
BuildCommDCBAndTimeoutsW
EraseTape
GetFileAttributesExA
GetCurrencyFormatA
ConsoleMenuControl
BackupRead
GetLongPathNameW
CreateSocketHandle
SetUserGeoID
SetFilePointerEx
WriteTapemark
LocalLock
SearchPathW
GlobalMemoryStatus
GetLargestConsoleWindowSize
GetProcessWorkingSetSize
GetDateFormatW
CloseProfileUserMapping
Heap32ListFirst
EnumResourceLanguagesA
GetMailslotInfo
FlushFileBuffers
DosPathToSessionPathW
TlsFree
DnsHostnameToComputerNameW
EnumSystemLocalesA
RtlCaptureStackBackTrace
VirtualQuery
GetSystemDefaultUILanguage
CompareStringW
GetEnvironmentVariableW
WritePrivateProfileSectionA
GetCPInfoExW
GetThreadSelectorEntry
QueryActCtxW
GetExpandedNameW
GetDiskFreeSpaceExA
CopyFileW
GetStartupInfoA
AddRefActCtx
GetFileInformationByHandle
CreateMemoryResourceNotification
FreeLibrary
GetProfileSectionW
EnumUILanguagesA
LocalReAlloc
ReadDirectoryChangesW
ReadConsoleA
DisconnectNamedPipe
IsValidLocale
FindNextVolumeA
IsBadHugeReadPtr
WaitForSingleObjectEx
GetUserDefaultUILanguage
MapViewOfFileEx
GetLogicalDriveStringsW
UnmapViewOfFile
FindResourceExA
GetVolumeNameForVolumeMountPointA
SetInformationJobObject
GetVolumePathNamesForVolumeNameW
GetThreadPriority
GetTimeFormatA
GetVersion
EnumLanguageGroupLocalesA
SetThreadPriorityBoost
SizeofResource
GetNamedPipeInfo
FileTimeToDosDateTime
EnumCalendarInfoW
GetFullPathNameW
Heap32ListNext
GetProfileIntW
BuildCommDCBAndTimeoutsA
QueryInformationJobObject
ReadConsoleInputA
LZInit
GlobalFree
CreateActCtxW
CallNamedPipeA
WriteProfileStringW
ActivateActCtx
SetDefaultCommConfigW
HeapCompact
AssignProcessToJobObject
GetSystemTimeAsFileTime
GetOverlappedResult
GetVolumeInformationA
GetProfileStringW
ReleaseSemaphore
TerminateProcess
ReadFileScatter
SetHandleCount
EnumResourceTypesW
CommConfigDialogA
LockFile
SetLastConsoleEventActive
QueueUserWorkItem
GetConsoleInputExeNameA
EnumDateFormatsA
GetCurrentThreadId
VerLanguageNameW
ScrollConsoleScreenBufferW
GetVolumePathNameA
GetConsoleKeyboardLayoutNameW
CancelIo
BuildCommDCBA
OpenSemaphoreW
SetEndOfFile
GetSystemDefaultLangID
BackupWrite
WriteFile
GlobalLock
GetNumberOfConsoleMouseButtons
lstrcmpW
FoldStringW
GetGeoInfoA
GetProcessAffinityMask
GetConsoleAliasesA
FatalAppExitW
FindFirstVolumeMountPointW
TryEnterCriticalSection
CancelDeviceWakeupRequest
FindFirstVolumeW
SystemTimeToFileTime
lstrcpy
MultiByteToWideChar
SetLocaleInfoA
EnumCalendarInfoExA
CreateTimerQueueTimer
FoldStringA
LocalCompact
FindNextVolumeMountPointA
CreateTimerQueue
LZCloseFile
GlobalUnlock
IsBadCodePtr
CancelTimerQueueTimer
GetSystemPowerStatus
FindAtomA
SetFileApisToOEM
SetVolumeMountPointW
RtlMoveMemory
GetHandleInformation
GetCommMask
BeginUpdateResourceA
ConvertDefaultLocale
FlushInstructionCache
GetComputerNameA
SetCriticalSectionSpinCount
IsWow64Process
AddAtomW
GlobalAddAtomA
PeekConsoleInputW
WaitForDebugEvent
SetLastError
LCMapStringA
MoveFileWithProgressA
GetCurrentDirectoryW
LocalFlags
LocalAlloc
CreateFileMappingW
FileTimeToLocalFileTime
GetNamedPipeHandleStateA
RegisterWaitForInputIdle
EnumSystemLanguageGroupsA
ExpandEnvironmentStringsW
GetEnvironmentStringsA
HeapCreate
GetNumberFormatW
GetCurrentDirectoryA
GetThreadContext
OpenWaitableTimerW
WritePrivateProfileStructA
GetCommandLineA
GetCurrentThread
GlobalUnWire
PrepareTape
WriteConsoleW
GetStringTypeA
MapUserPhysicalPages
CreateJobObjectA
WideCharToMultiByte
LocalFree
SetCommMask
ConnectNamedPipe
TlsGetValue
IsValidLanguageGroup
GetNumberOfConsoleInputEvents
SetComPlusPackageInstallStatus
SetVolumeLabelA
OpenMutexA
WriteFileGather
PulseEvent
BuildCommDCBW
HeapQueryInformation
GetCommConfig
SetSystemTime
GetFileSizeEx
GetPrivateProfileSectionNamesW
GetNativeSystemInfo
GetModuleHandleW
SetStdHandle
ExitThread
GetPrivateProfileSectionW
WriteConsoleInputA
DeleteTimerQueue
WaitForMultipleObjects
InitializeCriticalSectionAndSpinCount
PeekNamedPipe
ReleaseMutex
MapViewOfFile
GetProfileSectionA
SetThreadLocale
EnumSystemLanguageGroupsW
GetStdHandle
QueryDosDeviceW
GlobalHandle
GetFileAttributesExW
Heap32Next
GetComPlusPackageInstallStatus
UnlockFileEx
LockFileEx
WaitCommEvent
GetStringTypeExW
ClearCommError
SetTimeZoneInformation
CreateWaitableTimerA
SetProcessPriorityBoost
GetCommandLineW
SleepEx
GetDevicePowerState
GetConsoleKeyboardLayoutNameA
EnterCriticalSection
GetVolumeNameForVolumeMountPointW
GetUserDefaultLCID
VerifyConsoleIoHandle
FindFirstVolumeA
GetBinaryTypeW
CreateFileW
GetProcessIoCounters
VirtualFree
GetCompressedFileSizeA
SetCommState
GetTickCount
EnumResourceNamesA
WaitNamedPipeA
GlobalWire
lstrcpyA
SetDefaultCommConfigA
GlobalGetAtomNameW
MoveFileExA
GetConsoleTitleW
GetAtomNameA
CreateEventW
SetThreadPriority
ReadConsoleInputExW
QueryPerformanceFrequency
FindActCtxSectionGuid
TransactNamedPipe
lstrcmpiA
FormatMessageA
WriteProfileSectionW
lstrcmpA
SetErrorMode
FindFirstChangeNotificationW
ReadConsoleOutputAttribute
SetSystemPowerState
SetCurrentDirectoryW
ResetEvent
GetPrivateProfileStructA
GetExitCodeProcess
PrivMoveFileIdentityW
EndUpdateResourceW
FindNextFileA
ExitProcess
LZClose
IsDBCSLeadByteEx
GlobalAlloc
GetVolumeInformationW
GlobalReAlloc
BackupSeek
FreeUserPhysicalPages
OpenEventW
RemoveDirectoryW
GetCurrentProcessId
GetLogicalDriveStringsA
FindResourceW
GetSystemDirectoryW
GetModuleHandleExW
LocalUnlock
GetLocalTime
FreeConsole
GlobalGetAtomNameA
DosDateTimeToFileTime
ConvertDefaultLocale
GetProcessHeap
GetVersion
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
ReplaceTextA
PageSetupDlgA
PageSetupDlgW
WantArrows
ChooseFontW
dwLBSubclass
CommDlgExtendedError
GetFileTitleA
ReplaceTextW
PrintDlgW
GetFileTitleW
FindTextA
PrintDlgA
VarI1FromUI1
VarCmp
SetVarConversionLocaleSetting
VarDateFromUI4
VarFormat
SysAllocString
VarDecFromR8
VarDateFromI8
VarFormatPercent
GdiConvertAndCheckDC
GdiGetLocalBrush
PlgBlt
GdiCreateLocalMetaFilePict
GetFontResourceInfoW
SetICMProfileW
SetDCBrushColor
ResetDCA
RemoveFontResourceA
ResizePalette
EngMarkBandingSurface
ImageList_EndDrag
ImageList_Merge
ImageList_Read
ImageList_DrawEx
CreatePropertySheetPageA
PropertySheetW
CreateStatusWindowA
UninitializeFlatSB
PropertySheet
InitCommonControlsEx
ImageList_DragShowNolock
ImageList_GetImageCount
�Dz^���а�X� [�����J�3��ŭ��G���%~o4��� o"�߲r�%��-1�ME$Ve��Aq�164N�FY��)Ҩ+�U ď��T�#�~��)���8{+Ȁ��tа�к7y�L�-u����������ܡz�%���ԛ��g 3�Tjo�Y�������R�rj��Z���^29W!�������D-!H��*����'4����Û-��8�������s�\؊�~k5� �9�h�V�� _,UBw�s�"���u���$a��v|#��@ 14� ��i������MSx��Bt�P&*'{�.�h��)�}- ��B���H3��*�`K�Z�|#�h�jF�H�����:�bl���cz����7����n�ͪ�&U�D#� Qu��ꪘX?��F�~�S2 �:I�� ��q�@h���g�[(ऐ@?s�Z!(z�i�c����`���(����I}���k�r7n�$'�f�����`�W���j%!E�; �O&=��9w�P��逮F\B���*�X�xؐ�H1�R+!0h��{P�dN�'i^N9����:�G��<��!BW�S[�g������L���S�9�f�$�����n�b8���C�x�Uˇ�$�]R�x,:T���Y�Ak(�!��_i�d*�0v���T�b/�q�f�մ�,?GZUin��k���qW($L}��1�A����Č&���٠������� D|Ε���>f�,�@~�49rm���ŝ��ݧ-R��ǷlK��<g#�ڕg��so��!��%�J���0�=���PS�#3�1H�E�5��-�Ѕ��]!�.g��8 H�ɒ�JkQ��P����ſ8(���9є^�Uj>�O mA�9�ʺ���������p��ä������甥"Y�v� �n7��@k"�.1�? ����Z��?��L���l��1je��K�S9�� ��%���J�,U�k�$��'�̙uN��m��0��H�;= B�KJ�[&�Ӳ ��}ɸ`mxh=��{����'۟���� �샏�h��f+U�a��Z5��-8t���J����쬈���2��l�|w��8����O���9rjEVэ�bk.1�����T�[y#��F�.�̞|&�&����Y���<��c�56���(ӵf�(Hn�WUw�<��GHk(�ݒ�s�1������eq�b� ����d�U����������ǔ:[��q��p)�$d�Kb�K��)-%7���v�I��EL���"���K]��_�l��K��2OPAُݬ�d- MH�8o3pj�5{l����i<�aVBC9N�y�}V D�EKl��x���,�L�{�6��AU�� e���&����3�� 9�@}�}�� F����xO���>���U�Z�B7�fihVD��5n��Q��� ?���ց�F�roB��#P���(eD�Yķ9#�������B'��R( U�Jat{<�v V������P *x��!�Ʃz�K�3��)/�O�ɷyR���1.����w.�nS���XE:��(�m%m��"����������@%=�Ee���K��%��,ڮS{� � иż�&Vf�g!�#jg,���S��5Ú8�T~Q���״�@�&<�&�KPQ^�"6��I�P��l�+ �ʏ��k�ٺh��'�XBx�^FO��9V���D6��?�gh��ѵ�|h�d��rT**ͻ:��F�FK��VL*M���1l�)�H�q��dZD>�PLڞ�����n�)�Z,��߃IJ���:"i���I�<u�˨����T�J/D,d]��� _kު�t� �}-����V����TI$��55o�&�+P���u��r��4�`�c��W%�"}��8$����D��'�>�����u�q2Ƿy����Bh ��G;z�L�*��84Wi�@����r�d��=�"��O|�Y��B\.i�;O#ol<^������K�d�E�?�GD�CycJ� �LM3 Ĕ\J�����?�YBz�4C$����q���0[ ���O���1�u��r�E����Q2��,���� �+t�W�� ��_�^W*μϹ�>���V .ڮ���D�B��5�����؎r�������&Uu�>�CX����br� �~D��@��Q����^%"t2qW�-ey���K��â�V����C���eF���d #Bm֛���pC�G5�u�UIڦ6뵣s��9��x�E���U t�w��Q4�Qee���P/��iDzټ���T��C���Ą2��g��>D�T��_��͆�4�Z����<��yŎ��WC��������4l��$9�kY��W�������Y�j\M�*�5vw͢m2RYB���qS�ϰ3��W�*Z� �$�&���)`����N�#��Qک�ҷfv�`�h�Wy����)E��sH��"��f̂b��*[��.-��}�j5��xLl�umYI��M��������<���u1����F��CO#ec��c���n&MlC��zl{���{[�=���Χ�} ������j�Ou2m���i*�8�ZK/)O�D%���2C�d��᷾R�I�::xO�a��������H>�A^ʏ��f������T��e�k�#�1tS���K �RDbp�^���������~��[�v-ir����Pq���-#�c�6����S)n��D�x����A�E�|�7�G�$�8ē�s��/G(U����\.j�V끘P��ظ)K ��t�j�i�ޓ�D�й�����٠�/Ȯ���]*��������U��`ct�Q�����Z�<����ե&�4�\�[�`�R��4%j�I�8!��M�b�����7ϙ��L�ұ��ŭJ��N�&�������o��{�._+���K<�j�IM��E���&+�>b'C+�CC��T�ɀ��AM�9E�%����!k�1k����yV6 ��O@Y��%Ø5}3K�1��T�:�1)=��� �����v�1`��O����<���I*h��a�$4�~ i���Q�)�3�s8�oq"���P7�*4�3��:��{+
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ