Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
updater.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
updater.dll
Resource
win10v2004-20220812-en
Target
updater.exe
Size
8.5MB
MD5
7e7b542ba1190c35b0e37a59c892fa4d
SHA1
dee5c13314a1a47bf3f93062f1c8f94f987545a8
SHA256
0a412fb8c96567f825d640cd08f83fc7adf8b97fa61965d7912299cedd0ee2d1
SHA512
61dc98d920e8f0e05ea1a1f15f8bd7d5a0875771afe54d2846b21060e495f2a739a7ae170ab12d9707d0dfdcf68ddbe2459a7c6d1f6ff37a46ebb9f53d7e9e7a
SSDEEP
196608:ASk891sqYTc17CDgX9Y2DkAieGT23qPootXwMYWK:tN/sqCc1mm9DgA5K3woNwLN
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
CN=Silhouette Research & Technology Ltd,O=Silhouette Research & Technology Ltd,L=Plymouth,C=GB
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetCurrentProcessId
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
SetTextColor
ImpersonateSelf
SHChangeNotify
CoTaskMemFree
SysFreeString
StrCmpLogicalW
InternetCrackUrlA
ImageList_GetIconSize
VerQueryValueW
WTSSendMessageW
DllGetClassObject
DllRegisterServer
DllUnregisterServer
QFS
RegSvr
UnregSvr
�"��!hOF?�w��&M{����;�V�<��J�1�� G��hn75@��L�g�Pd�8y �����n`k�"�)�z��Q�"0�,�cOy�_D�����8u$q@�tA=�q��h������� ���tF4������>xp�=� �c����_��`�\ �j�/�B�7��"�'����ګ��>�V��`�S�[���u<hԛAR�+I�M�1�����.�=���e,�x��!S�.�e?��F��$�6��2#��œ8��S6���>�%,I��t���)敍�-�t���;\&`Z�5����Vb�Fs�����4��� ���S�v]�V:���%z���Y�d����*=�1�\av���M�ϲ�h%�.�-�h?�'�DY6x����}�9FB9�}�߳��+pJ~��f��w��GA�b��c���em�ң��`(Fp�&@㲡Z�א��Z fU\?��>�ֻTi-���Gv���d�IZZ?%C$;�����-�.G��)ґZ�J�~��.ߤ��Ii�o�ؾ�M�I��� ��EӝV����HF�o[E��KQ葵��q���-Ī֫���{�'�<C����|�k��k^���]�����j�U���"���VE��c�}��Vr� 1�6�jؾ�U�������`�!�EFL�pǖ��vd^ݢ%*B��T��>i\�ֻdǝ���o������Z��7P��6N�|}b< ՚7D%�����쏰����?q%�x:��B�t�D�mf�^�����y� �ٗ)�@��~�\ޖ�F��-�O�5��f� ���2��>��2�I����8��{�&����w�'Y�}��@1��5r"�M���uP�ST��g�A�U��&&�I1�>�r|�ţZ~˽��5&�#� ���k�3.��Mh �!p��I�� b��@��CD�h��|v���B�B���|UQ[�N���'̾ױ��y�2�{��M�F�b$����=�)��断!�Z�$���2Q4���5��aa橇ڨo��%%13��Y�<��.�͆��-9><H?;��O���7�Z��@��Vi+�bc�\ ls�:��]��s\�z��>�#aD��W����=R�5��V��KK��#��p���cN3'd�>{���9N�����r#�-g� @��i6]/� ��,�N�T��^��+�M闛`o}�_"�T�w:g Kأ��!�*Y9�<�O���tp�L!;�o@&j�9���i�߃��o���y1Y�)d��t|��V`�A�L}Qa���<z@u���]���}�n��\mA��_�\�"hz='��uǷ��h*�%�K�'��B.(�����&R�P�q%�� ��?�QWoJ'��S�Xf���S�������C�N��� "q'����W�N�����Hs9.f{A���e�f[��do���呕+#��E)WS���p�M�����n,0L�S�ႜ+3p�������?�_{�Dan$��_f��"�[�ߖ����B�<��+������:am����$Adtop�Rs�W��%�t���q@�h"��Ĥ�o������Dڷ�Kd������<��3���q��l�:,-ZhI����<ڪO'�7Y�8�\��b��r���p~��/�h����f����B��M�4���[L xl�=����O-�A�eW�s�rF1�蝹ׅ�&�N���dDYX����m݄�T�`;�ecA���&O�mG��iGƕ-�"ͧ��Զ��]���&,���eWZ�|�m��N.~�7��PCāҼ���D��lft'A��YV�q��O����2� fA����w���=^I��&TJ�A �����å�"�H㖊�Ya�껨�{�J��w�h��������=��;���LP����B!�s>/�LY�Y�e��W�pR&�J� ��,}�u�ڌ]���e��E"�y�L�<s��6��W� #�h\���R��_ �i|Vn_��gB�X�Ż���Y���A��/��#Ƀ�[��yPʦ��GcBC}J/���m8^�������S~�u-�b3���2�����9��k��<(��EЏB�z�J�R)��oeu�h�.K��|,����|�Gnnq�cؽl���~ �|����3�b�_{�>yX���|� =˭���UxtN��1 4��W'\�a+�b��njJw�z��������b:F�j�����"�({,k#]��%AV;1蟖�w�)tF/>O�Z�i:��b��=hcD�R ����۪Ѣ�� =�i]�w8oX��"��A�:�`hc_�TbV��DN�؟?8��:՞��1$�[ʼn?3���J94�̆g��o��Q+�jJ8"G�)�c��Ëȟ�Q�� ��q���h�p����xL�,p�T;�^��|�`WeH���Q�_�#�� {����+��R�}S{�}3�wP���Jz��:��细W��8S�cB��>�3 *���1e�1��r jMn�J��)�|KWUYEI��Z$�Aڧz�2��3�=�om-�&����A��#��C進;�����-l�'�.���a!Vb��"��Q�A�hPmy����<C�\��#���g��e�'�"s�&�s���6ۛ(��&�`��l.�jFjiE��ɠ�?�Ns;^4@Q����s`��`��EE�D�\�$�c��u��ZQ)52yIJ�.�o���74��O�OZ��*�s��:�ws�0�J�bu���j̸�s�G�o�'���ns\v����=���������B�@c9��L�݁ �����������Y�L�v50��8�3X�]$!��c��K\�_�O�' r�q�*$��onfA�����ۢ��)S����T�a�����B:$",�UD��Cf���2��M:�@g$�>��dJz���+�/��'_\��������L ���6� f.�r����[����/�P�u�0օ��z����~���L�|�쓔=P��� z?��9��]�>��!JYG��D��|��$�Y9�Eu�AYI�؟I�L��*�R7��o%�3hͥ-r0f�C��1����T;<���m:�.�@��d�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ