Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
448c66e010fd3d91e412af5c88aee3bc54e3a83981ed712a8ef4686ac84ce4a3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
448c66e010fd3d91e412af5c88aee3bc54e3a83981ed712a8ef4686ac84ce4a3.exe
Resource
win10v2004-20220812-en
Target
448c66e010fd3d91e412af5c88aee3bc54e3a83981ed712a8ef4686ac84ce4a3
Size
834KB
MD5
0955847c9d36e41a8916097d27cee360
SHA1
acef01af38392f5ec2dcd640dcfc4568743a1036
SHA256
448c66e010fd3d91e412af5c88aee3bc54e3a83981ed712a8ef4686ac84ce4a3
SHA512
a35c580717c1315d948a37f2afe83ed52f038a5b641a8f0e9f883348ceff205e0228163c5c890b8606f0adc4269c0b390e98fa6c6a3fd86ea1316655368f7b0d
SSDEEP
12288:oWIVJB/nn4TAzvKM5R7tkSwN9CIpNR/qlyjMsOrpbX:9WJB/nfCM581N9L/uyjTOpX
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetTabbedTextExtentW
ArrangeIconicWindows
DefFrameProcW
LoadIconA
SetFocus
EnumDesktopWindows
RealGetWindowClassW
FlashWindow
wvsprintfW
SetWindowsHookExA
ChangeMenuA
BeginPaint
GetDesktopWindow
DrawMenuBarTemp
DrawStateA
IsHungAppWindow
TileChildWindows
AnimateWindow
ToUnicodeEx
ChangeMenuA
SetMessageExtraInfo
MessageBoxTimeoutA
EnumPropsExA
GetMenuContextHelpId
SetSystemMenu
GetDlgItem
LoadIconW
ScrollWindowEx
ScrollChildren
LoadMenuIndirectA
CharToOemW
IsCharUpperA
LoadIconA
SetWindowsHookA
GetMonitorInfoA
MenuItemFromPoint
AttachThreadInput
PrivateExtractIconExA
DrawIcon
GetMenuItemInfoA
EnumPropsA
ChildWindowFromPointEx
DefWindowProcW
GetMonitorInfoW
ModifyMenuA
GetKeyState
DrawIconEx
SetMenuItemBitmaps
DialogBoxParamA
LoadStringW
DestroyCaret
IsDlgButtonChecked
GetActiveWindow
CharToOemBuffW
DefWindowProcA
RealGetWindowClassA
PeekMessageA
RedrawWindow
EnumDesktopsA
GetClipboardData
GetForegroundWindow
ChangeDisplaySettingsExW
SetWindowsHookExA
EnableScrollBar
ToAscii
CreateDialogParamA
GetDialogBaseUnits
InvertRect
OpenDesktopA
OpenInputDesktop
MenuWindowProcA
SendMessageW
TabbedTextOutW
SetFocus
GetClassInfoW
GetWindowRgnBox
GetLastInputInfo
GetSysColor
DestroyMenu
GetMenuItemInfoW
PostMessageW
IsHungAppWindow
GetWindow
KillTimer
MenuWindowProcW
DispatchMessageW
ChangeDisplaySettingsW
DrawMenuBar
CopyRect
MapDialogRect
CheckMenuRadioItem
EnumPropsW
TranslateAcceleratorW
CascadeWindows
SetWindowPos
MessageBoxTimeoutA
GetDlgItemTextW
SetLastErrorEx
CreatePopupMenu
WindowFromPoint
CallWindowProcA
UpdateLayeredWindow
DestroyCursor
WinHelpA
GetKeyboardState
GetWindowTextA
GetSystemMenu
CascadeChildWindows
GetMessageW
GetClassWord
SendNotifyMessageA
SetDlgItemInt
GetWindowDC
GetWindowInfo
CharToOemA
MessageBoxA
GetClipboardViewer
CreateMenu
ShowCaret
DrawCaptionTempA
ModifyMenuW
BroadcastSystemMessageExW
MessageBoxTimeoutW
GetMessagePos
AppendMenuA
GetShellWindow
EndMenu
CreateMDIWindowW
SetWindowPlacement
GetTopWindow
ReleaseDC
GetDesktopWindow
CreateAcceleratorTableA
GetWindowWord
LoadStringW
ScreenToClient
ShowWindow
DefFrameProcA
GetAltTabInfoW
GetDlgItemInt
GetWindowLongA
GetUpdateRgn
SetLayeredWindowAttributes
DialogBoxIndirectParamA
MapVirtualKeyExA
GetIconInfo
GetKeyboardLayout
GetClientRect
OpenWindowStationW
GetMenuItemInfoW
DefDlgProcW
DialogBoxParamW
SetWindowsHookW
CallWindowProcW
GetMenuItemInfoA
DlgDirListA
GetScrollRange
SetWindowWord
SetMenuInfo
EmptyClipboard
SwitchDesktop
DrawMenuBarTemp
GetCPInfoExA
GetExpandedNameA
CloseHandle
ReadDirectoryChangesW
HeapSize
InitializeCriticalSectionAndSpinCount
ConnectNamedPipe
TransmitCommChar
SetHandleInformation
GetShortPathNameA
LZOpenFileW
GetCurrencyFormatA
GetLargestConsoleWindowSize
GetEnvironmentStrings
GetLongPathNameW
PeekConsoleInputW
GetCurrentDirectoryW
ResetWriteWatch
UnlockFile
HeapLock
GetStringTypeW
GlobalAddAtomW
LCMapStringW
WriteConsoleW
GetVersionExW
CopyLZFile
GlobalLock
InterlockedDecrement
GetSystemDefaultLangID
BuildCommDCBA
AddAtomW
InitializeCriticalSectionAndSpinCount
GetNamedPipeHandleStateA
WaitForMultipleObjectsEx
SetFileValidData
GetDiskFreeSpaceExA
ReadConsoleOutputA
WaitCommEvent
WritePrivateProfileStringW
GetConsoleTitleW
CreateFileW
SetThreadAffinityMask
lstrcpyW
DeleteTimerQueueTimer
SetErrorMode
UnhandledExceptionFilter
RtlZeroMemory
ReadFile
GetFileSize
ReleaseSemaphore
GetLargestConsoleWindowSize
QueryMemoryResourceNotification
GenerateConsoleCtrlEvent
ReleaseMutex
SetLocalTime
FileTimeToLocalFileTime
FindResourceExW
GetAtomNameW
MultiByteToWideChar
GetVolumeNameForVolumeMountPointA
IsBadStringPtrW
RtlCaptureContext
SetComputerNameW
ConnectNamedPipe
GlobalMemoryStatus
GetThreadPriorityBoost
GetVolumeInformationW
CreateMailslotA
GetCommMask
HeapCompact
CreateMemoryResourceNotification
LocalFlags
QueryPerformanceCounter
ReplaceFileW
SystemTimeToTzSpecificLocalTime
ReadConsoleInputExW
BackupWrite
RaiseException
CreateSocketHandle
DisconnectNamedPipe
ConvertDefaultLocale
GetNamedPipeHandleStateW
GetUserDefaultLCID
TransactNamedPipe
QueryInformationJobObject
GetACP
SetFileTime
WriteProfileSectionW
VirtualFreeEx
GetCPInfo
FindActCtxSectionStringA
SetFileShortNameA
GetDriveTypeW
GetSystemPowerStatus
ExpandEnvironmentStringsA
CreateEventW
CompareStringA
CopyFileW
GetDriveTypeA
FatalAppExitW
EnumCalendarInfoExA
GetModuleHandleExW
IsBadHugeWritePtr
TransmitCommChar
TerminateThread
lstrcatW
SetCalendarInfoW
WriteFile
InitAtomTable
GetProfileStringA
LZRead
GetSystemDirectoryW
GetDevicePowerState
EnumResourceTypesA
MulDiv
ReplaceFile
GetTapePosition
GetVolumeNameForVolumeMountPointW
FindFirstFileW
EnumResourceLanguagesA
CreateActCtxA
BackupSeek
FatalAppExitA
lstrcmpW
AddConsoleAliasW
SwitchToThread
UnmapViewOfFile
SetVolumeLabelW
GetPrivateProfileStructA
GetCurrentConsoleFont
GlobalGetAtomNameA
EnumTimeFormatsA
GetTapeParameters
RemoveVectoredExceptionHandler
FindFirstVolumeMountPointA
FreeEnvironmentStringsW
WaitForMultipleObjectsEx
WriteFileGather
RequestDeviceWakeup
SetEnvironmentVariableA
FindResourceA
BackupRead
GetCurrentProcessId
IsBadHugeReadPtr
GetStartupInfoW
WriteConsoleInputW
PeekNamedPipe
FreeEnvironmentStringsA
DeleteFileA
ReadConsoleInputA
ShowConsoleCursor
WideCharToMultiByte
DeleteTimerQueue
SetCurrentDirectoryW
OpenWaitableTimerA
GetDateFormatW
SetFileShortNameW
OpenJobObjectW
GlobalFix
QueueUserWorkItem
TlsGetValue
OpenSemaphoreA
lstrcatA
IsBadCodePtr
SetProcessAffinityMask
EnumSystemLanguageGroupsW
lstrcpy
DeleteVolumeMountPointA
UnlockFile
GetCalendarInfoA
ReadConsoleOutputAttribute
SetTimeZoneInformation
GetFullPathNameA
DeleteVolumeMountPointW
FileTimeToDosDateTime
EnumSystemCodePagesA
GetConsoleInputExeNameA
lstrcpynA
MoveFileExA
lstrcat
LocalLock
EnumLanguageGroupLocalesA
CopyFileExA
GetProfileIntA
WaitNamedPipeA
GetConsoleAliasesW
GlobalFindAtomW
WinExec
RemoveDirectoryA
OutputDebugStringW
LocalHandle
EndUpdateResourceW
CreateDirectoryExA
SetHandleInformation
SetTapeParameters
FindAtomA
WriteTapemark
VirtualFree
CreateConsoleScreenBuffer
SetProcessShutdownParameters
SetCommMask
PulseEvent
CreateSemaphoreA
LocalFree
CloseProfileUserMapping
UpdateResourceA
GetProcessTimes
EnumUILanguagesA
AddVectoredExceptionHandler
lstrlenA
SetCommBreak
SetCriticalSectionSpinCount
GetExpandedNameW
GetAtomNameA
MapViewOfFileEx
GetConsoleDisplayMode
GetConsoleCursorMode
WriteProfileStringW
GetCalendarInfoW
TlsSetValue
Beep
SetNamedPipeHandleState
LZSeek
GetPrivateProfileStringW
AddRefActCtx
CreateHardLinkW
FindNextFileA
CreateMailslotW
GetNumberOfConsoleFonts
IsValidLocale
GetProcessHeap
GetStartupInfoW
SetInformationJobObject
CreateDirectoryExW
GlobalFlags
GetStringTypeExA
MapUserPhysicalPages
GetProcessWorkingSetSize
GetFileAttributesW
WritePrivateProfileSectionW
CallNamedPipeA
GetVolumeNameForVolumeMountPointW
WriteConsoleInputW
SetCalendarInfoA
IsBadHugeWritePtr
GetEnvironmentVariableA
FindFirstChangeNotificationW
RaiseException
ExpandEnvironmentStringsW
lstrcpynA
LZClose
MoveFileWithProgressA
DebugBreak
ReleaseActCtx
UpdateResourceW
FindFirstFileExW
GetDiskFreeSpaceExA
PrivCopyFileExW
CreateHardLinkW
ScrollConsoleScreenBufferW
FileTimeToLocalFileTime
ReplaceFileA
IsProcessorFeaturePresent
GetLocaleInfoW
AddConsoleAliasW
SetVolumeLabelA
FindFirstChangeNotificationA
GetPriorityClass
WaitForSingleObject
FormatMessageW
VerifyConsoleIoHandle
LocalLock
GlobalDeleteAtom
GetVolumeInformationA
GetConsoleInputExeNameA
EnumResourceNamesA
RtlZeroMemory
lstrcpyW
GetNumberOfConsoleFonts
GetStringTypeA
GetEnvironmentStringsA
SetFileApisToANSI
WriteProfileStringW
DeleteTimerQueueTimer
FindActCtxSectionStringA
ReadConsoleInputW
GetProcessShutdownParameters
UnregisterWait
SetFileApisToOEM
FatalAppExitW
DeleteFileA
FindResourceA
VerLanguageNameA
InitAtomTable
GetVolumeInformationW
HeapValidate
LZOpenFileW
lstrcpyn
EnumLanguageGroupLocalesA
OpenFileMappingW
EnumTimeFormatsW
ReplaceFile
lstrcpyA
WriteConsoleOutputW
GetThreadSelectorEntry
GetShortPathNameW
RtlCaptureStackBackTrace
SuspendThread
GetConsoleFontSize
GetStartupInfoA
LocalFlags
SetComputerNameA
FindFirstFileA
QueryActCtxW
GetDriveTypeA
SignalObjectAndWait
QueryInformationJobObject
DeleteTimerQueueEx
FindNextVolumeMountPointW
LocalReAlloc
BackupSeek
GenerateConsoleCtrlEvent
AllocateUserPhysicalPages
FindNextChangeNotification
GetEnvironmentStrings
CloseProfileUserMapping
GetProfileIntW
GetConsoleTitleW
GetConsoleDisplayMode
SetProcessWorkingSetSize
SearchPathW
SetCommState
WideCharToMultiByte
GetTimeFormatW
GetDateFormatA
GetPrivateProfileSectionNamesA
GetExitCodeProcess
BuildCommDCBAndTimeoutsA
GetNumberOfConsoleInputEvents
GetCalendarInfoW
HeapCompact
GetTimeFormatA
GetTapePosition
MultiByteToWideChar
lstrcmpiW
CreateTimerQueue
lstrlen
GetProcessVersion
GetCPInfoExA
SetSystemTimeAdjustment
SizeofResource
VerifyVersionInfoA
GlobalWire
GetConsoleKeyboardLayoutNameW
FindActCtxSectionStringW
WinExec
OpenMutexA
GlobalUnfix
GetExpandedNameA
GetSystemTimeAsFileTime
TryEnterCriticalSection
LCMapStringA
SetVolumeLabelW
GetPrivateProfileSectionNamesW
WriteFileGather
UnlockFileEx
GetStdHandle
GetConsoleWindow
EnumLanguageGroupLocalesW
GetConsoleSelectionInfo
CancelWaitableTimer
VirtualQueryEx
PulseEvent
WriteConsoleInputA
FindNextVolumeW
FreeEnvironmentStringsA
OpenMutexW
GlobalUnWire
FindActCtxSectionGuid
CompareFileTime
CreateFileMappingW
GetConsoleAliasesA
GetDefaultCommConfigA
SetPriorityClass
SetCommMask
HeapCreate
GetNumberOfConsoleMouseButtons
GetLogicalDrives
MoveFileW
EnumDateFormatsW
ReplaceFileW
DeleteVolumeMountPointA
EnumResourceLanguagesA
IsBadCodePtr
EnumUILanguagesA
GlobalFix
GetThreadLocale
LoadLibraryExA
GetCommandLineW
GetModuleHandleA
LocalAlloc
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
dwLBSubclass
GetOpenFileNameA
ChooseColorW
CreateTypeLib
SafeArraySetIID
VarXor
VarDecFix
VarUI4FromUI8
VarBoolFromDec
VarI8FromDisp
VarUI4FromI2
VarDecFromR8
VarDecFromI8
VarUI8FromUI1
AddFontMemResourceEx
EngMultiByteToWideChar
GdiAlphaBlend
GetGlyphOutlineA
EngMultiByteToUnicodeN
CreateRoundRectRgn
ModifyWorldTransform
EngAcquireSemaphore
OffsetRgn
CreateCompatibleDC
FONTOBJ_cGetGlyphs
EnumObjects
GetEnhMetaFileDescriptionW
SetPixelV
GetCharWidthFloatA
CreateFontA
CreateFontIndirectExW
PaintRgn
ExcludeClipRect
RectInRegion
ImageList_AddIcon
ImageList_GetImageRect
MakeDragList
InitCommonControlsEx
FlatSB_EnableScrollBar
DrawInsert
CreateStatusWindowW
ImageList_AddMasked
ݲ���Kq�Ӎ ��4_d�1���fbȆ ��.X��S�%��*Կ��� �=?'Ь����vs��B�R*5��a/�L���~zP_�P֥����x���3�+:����e����0I�%�щJ9�{z<W�S��Ð�=��R�lȓI���7����adY g�-����T���:�vG��V�v������ b"�l2�o��q��S�������U ��1s���}�sWV� �п!XS����{�^��e���>�>�F�']�I�b�7÷(�NxbF�֒>��Yi���w���G0�����t�9��"�:��Ksj*Ǩ��`Y��h��,�����m3��3���V���]�.�����Q�뻥���:Y�^�zr)3���>���]�/˒R5��?w��6SVr�1�u�c��I�� T_���e�@6 u���!!��z�t��V�fP�0�(��33���~@qn�� a��ɸ��+�G��Q�K�v�e%��$�=[�G���>���pAl: �Փ�[,`H������L��9�n�M����?ۥ�ICV���"fWB2)(=�\�~3���s���Ү���YuA��O�����YJ�C�Z�⠼��TyH��� ��_Q!Nc�轎t��G��(u��|w�o���2���(�_s��+��Fa�+f�WԌ��,��l��ųf��aJ�H���O:�.� �Q�Љ���I�5����l���B�B��lb?��͐���`��M2g� �-�>����&�ޣ�FyV���j��ظ7/�NH�q��b�(�_��Q�W��(�l�"�gNR툴ѫ�X#�&j��?,mo2�4��<�@Q��t�< e4�����P���Ȱ8*e�-v��ZR$5�<0Áž�~��4��XI�'�j����}?�n Q�]l('Qz�T���{�e�jf� -�v`�n_2 ��Pd���S<k �oz �)����4H��U��ݴ��"�k�=?��1/�����j����gM��I�����6���k %O�Y���c��,��J_�?��Ȅ��Am�z~�#���\�o^��j�Am�W(UJq���'�����l�cr7�m��66 �к��0�C�g�;���vF��H�^���f9x�=���m����3�p] � N�[�-�q�`���؉���D�r�ʴ^�� ��/Q���:�"����LaI�t�#��c�]�Ԝ"���U��V�܂�|�2�YV'I�8��LÛ��Y�R�R���r�/u=��¶���&+� R���xo.@~�� p]��Q���\�=(۶�עd��a?������l@��+��#!Б�Z =A���`��;�ƃ(�Cչ���6b�v2A������\�Љ������^����D5O14����}�?aż��wnj��W6+�b��mm�n\��^ug5��@Gj�.����j@�.g�f�Mo-:?����/��7�&TW���6��0@��2Y�����V����Ha��<x`��Է�����{�;s�ŕM�E��b��9��<��~�K"�'�pfy�nܜ��w)]J��q��eN\���t趰{Ѳ�'f���= �$��|��n��,�<mn9A��W��uD��v鐸�|�|�ƿF��B��L�VI$���.��4��З(w(Q����h��h=��3X� )ȁh��J��N,^�u���7 �^z�hD�4��s���EbX���}C���D̼U_��z�L���{�)��d��ن�g(����*��"B�> A�[��6" Մ����#)�@g�� O�T�>��^��`�Lm���� �O�H��`o�7���'$P������#��m/�;]�����"p�Jbh�(=��V�\O�_��.{{4�}�ٻ�B;X��n>�/~v�@�\:y)����.[ /�NwT�WNq���ˣ� ��3�I�x�*K�Ԅ��h�MT��o��ʞ�P��bg�T�RW=���V�e7U2G����V�5S�A=�MD�:��S��#V��q�y��MI�/V��6�jl�l#.�mָlba(�MwZz|a��|���8RY��N���=�K��)sC؇e���c[��A�+�1/9n���4Ü�S����=�`�;^$��~�4ɮ?���5���;�s�I�uњ��we���M@��c��ݻnY�Q2�ݞ����]�S�V4��(8%�ِ��(BO�<�4܈����,��h(2D��C+���Y��ÌΠ��<lŪ�����<-r�jt���mŹ�wZe0[���ƵLz�d�}�{�@N��m��T�]��Nڝ��b��XRD��WV1��rs~1�y@�$Q�G�>rX���i�q�I���\�sJ�n�؎)��^��n�Y^�˅ og��LR4�w*y��� �J��a+=�P�?1�)3*o���a w0�Y�s�0�^7+N�UQXs���J���?��j�>��w3Kw`�@��X��\�����������p&��̅b�!կ 1��[}n7eVC�{��%&_�A�pZa-Ŝ�7r�!����ֻ���<�Ш;��3@�I$����#���2�1t5z�R�.C�X�jP ,��l� b>yMO�LmY�L��VҮ�c�B���#���?��Iub\0����a ���=�,�.��9�DI��R�d�)�Z��������H�$ep��$�������K���PQ��AKa!�S~|��&+څ�h��]�~���J��Y�vf�����(U�8+��yg�`��@��ә�yO�n��C�.V>�5q����?�f�R\��Q��m%������2.�0�I��������Q�3"���41������U���1(u��s�g�!���k�)�ۀ;eD$������ET�_i�9L�u}�m�1��\�B:���]`�N�pbү%\�F���P��V���_����Fg7@��<�A:��������a��>�k�Y���y��M���Z���y)��on5�feN��d�~L�,N��t��y'B#��\���#�j�I�v��� ��O��pD�a�����E]���u8�=R�:�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ