Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
c9eacf877eb8c805ed4298b6cfe43483b283a2f13addd1faace751c87c3a78ef.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c9eacf877eb8c805ed4298b6cfe43483b283a2f13addd1faace751c87c3a78ef.exe
Resource
win10v2004-20220901-en
Target
c9eacf877eb8c805ed4298b6cfe43483b283a2f13addd1faace751c87c3a78ef
Size
607KB
MD5
0a43ce9460f24b23835900484571b240
SHA1
346a0b72f17e07c874c039503caf569c795bce37
SHA256
c9eacf877eb8c805ed4298b6cfe43483b283a2f13addd1faace751c87c3a78ef
SHA512
f733440c1b8d4f6d74a7f99ab7b075425a883724aea9a3e6bf88ab583b0f49a39c026e45dfba70b7dfba28f33f4812c3b73e3e3e2ed6147535b78fcfcef855bc
SSDEEP
12288:/HFTerUrTT9aQefKkZRgvZXqyd8B4smZB8xQyuskmO4M:/EUHpaxSkZRgv8BfuBwpuskD
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
SetClipboardData
ShowStartGlass
BroadcastSystemMessageW
CharNextA
OpenDesktopA
RegisterClipboardFormatW
ModifyMenuA
DialogBoxParamA
CharPrevExA
GetCaretBlinkTime
DestroyMenu
DlgDirListA
GetSysColorBrush
GetSystemMenu
GetProgmanWindow
SetMenuContextHelpId
DragObject
SendMessageCallbackA
GetClassInfoExW
MapVirtualKeyW
MoveWindow
GetDlgItemTextW
WaitForInputIdle
GetMenuInfo
GetClassLongW
GetFocus
SetActiveWindow
MessageBoxExW
AttachThreadInput
InsertMenuItemW
GetInputDesktop
TranslateAcceleratorA
ActivateKeyboardLayout
DragDetect
OffsetRect
IsCharUpperA
UnionRect
UnlockWindowStation
CreateIcon
DrawTextExA
MenuItemFromPoint
EnumDisplaySettingsW
CloseDesktop
DialogBoxIndirectParamA
CheckMenuItem
CloseWindow
GetIconInfo
GetClassInfoW
GetMessageA
CallMsgFilterW
DefFrameProcW
DrawStateA
MonitorFromPoint
GetCursor
wvsprintfA
GetDlgItemInt
SetClassLongA
SetWindowWord
GetWindowTextW
SetCaretPos
CreateConsoleScreenBuffer
WritePrivateProfileStructA
OpenWaitableTimerW
DosDateTimeToFileTime
RtlFillMemory
SetErrorMode
HeapCompact
SystemTimeToFileTime
GlobalFree
AddVectoredExceptionHandler
SetThreadUILanguage
GetCurrentDirectoryW
GetHandleInformation
LCMapStringA
IsBadWritePtr
GetCurrentThreadId
GlobalFindAtomA
HeapCreate
GetPrivateProfileSectionA
GetTimeFormatA
GetPrivateProfileStructW
QueryMemoryResourceNotification
RequestDeviceWakeup
GetCommState
WriteConsoleOutputCharacterA
GlobalUnWire
EnumCalendarInfoExA
EnumTimeFormatsA
SetTimerQueueTimer
EnumSystemGeoID
FindCloseChangeNotification
GetConsoleKeyboardLayoutNameA
SetCurrentDirectoryA
PrivCopyFileExW
GetPrivateProfileIntW
CreateNamedPipeW
GetSystemDefaultLCID
GetStringTypeExA
UnregisterWaitEx
GetConsoleAliasesW
GetProcessShutdownParameters
SetFileAttributesA
AttachConsole
BuildCommDCBAndTimeoutsW
RtlMoveMemory
GetExpandedNameA
HeapAlloc
DeleteAtom
HeapReAlloc
GetLastError
ConvertDefaultLocale
GetProcessHeap
GetVersion
VirtualQuery
LoadLibraryA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetOpenFileNameA
SystemTimeToVariantTime
VarDecFromCy
VarCyFromUI4
SHHelpShortcuts_RunDLL
SetMagicColors
GdiFullscreenControl
GetGlyphOutlineW
GdiPlayJournal
WTSOpenServerA
CreatePropertySheetPage
�?��Y]���d_�\\E�xS>P4CoI�U�҅*j���i������}4�����3)�`��6SQ��}��#$e|�y�D_]�m����ă��B�W��4Z�'��'�����_��We��5������O����@�������3� �.��l5!����SH��j��\X~[���c�j<�Fh$������ٿ�N�@� �`\#�yVo���>���v���V��@�M����@��n`h���[�)�6u�jߚ�ʓpOt$�q�\�:�����OJ��^���Z뭏�$Q����Ť�˅5�K���6����X6�U�f�U��� V��2O��Wݏ,RjĔ�+_�OV����X���s>kE�Z:�e��˸ o� Vz���kv?�וuĂ$ �".���Nr��� ���?��kћ(���Nx7�0=��z�m#\g:��rI��H*���� g�J�(F��L-0�հ/>��^����C�'/����~�@tѴ�N�����]���m̈�� �+�W+��gmj[+�[ J~��A 5>��d+�0�$�������K`�y��r��~x�LH�"Ќ<:��W���7�U�\�{�;����v����`�c�}(:�&����~ȗȆ恳,�i8�RU��ʽ6�&}��S��l�y�#��*/h��v��ON� �L�"�-��6���:��͐�~!E��C]d$`��V����b��H5P���Qg�����><��������?n��aT���4;��S訃��Pέ��[k�6t�fn��w�����"g�Q ��&���g����G�Kt��\�"�|2\�����_��>��f��U@�RNgϴm[��I�?Z����h"��힌[R�QE���=�h�P�%�V��G��b�:q)� �Ww��'eY�T�)�:���8uXp,�%�������� 0�H���"ќ���E/��2�F� ��׆�T�+�Lu���g���+���9i�䁋23գL��ͳjP��� |\K~���X%V�R��w��k���>�]��;��R�2�Ֆ�O�r�r�VDX���3��Y�!V�$����`��?׃YBؙ�ݵ ܓ�sE�Vxf���� >l��o� �7��6[��'!�:;��Ny�z=���zƥ�]9�@�LZ����aP-���d�Q�n�3i��>�S�X�dZƝ�h+2�u��ǎ�s)���B]0k�%v��i����jF������D�-G"%�^�v>ט���Æ�[G��g��NԼ��u�_��_h�Vp|�Mx����o�ax�&#��ի���kK|# �aʩ�ښv�#�/�<oA�Đ�f�h:�a<�50¤q-�s�����7����J����X<:�>Q1涊� J����a!>�!�J�_�>&�L*p���H���jMd����ޥx1�OI<+ ��E�:&5J\��|�J��PA�ɧN�V�qj��1��GR{m�J��3���knB��>�/��+Ÿ��|�7s�?`eB�))������A*J���ϻ��0�ċ���#��'�s��M�`�Ox�$3��_���Ɠ�[C`;�g�S�#�Y#�Q����-ٕ�������) �ޜݺ#��Y��%����aE��a���j^H����;��������{�k�1�ќ�xE�� �4=�N���� ���s�ob9@�N5`�%��Y��s�����ܪq��"Cy/�R����He ��g9izܙZ���3�u.��a�&(bJV�m3����Aݎ�� &K⑇�1���� K���� Y~�q����/�X:�a���ޘ��������v����O0��{��v�� 9�d�z���Hۑ���r�Í�ɗ������5�M�F�i�$gH��ӎ$���R풘���D�&�!H��]���Ii�Ο>���F�OE��qAg`�$,2Z���)�K��aH�ʼ�d��n���*��,T}��[g��'�f^8���]��'��I���L�ÇM���T�9�cGZ���?Tk欝�����3f'B����,��@k�zB�»�7��'�~�ڸ5��0۬n���lҵ��H��2��+��ǺT�`o�����֭�����ey��q�c�&E���^��7���'A�:@�9J���k� �%���,�ӢC�+21"��/`d$��Om'.�j[�'�<ֱ{���v|��v�5A [���9e�5 ��M�a�Pe<� H��>������G�Q�;\�ЩΤ{|��@�����%��g/��U��(A~x1�S�#�Q�|��W�n�F�M�*����C�����0|��y}Kf@i�S0|NY����nx��a����5+YX>\�}�����(~��uS��:ix��鈕�kѭ���ã�8� ���f���h��ِq�2�ı�X��;r��L\�-�<M{W�1��?.��oa�_�5�/��v�Q+��[%�3��n�p/�DKH������S��4G32�#�]J?����X>�)��a.,�xJ������>D����N�� ܁ȳ����n��`ox͟��v��Y�N%�tnm��W�ù� �~%��{'�<A�M���Zz��0�{���0z�� 1�ǒy/�'`�[��S�P��� ��#[����":�1�Mݣz�&���+�����0d �'�և��_/�c�|��;Uǣb���Ⱥȗ��̲W�s=��]��l�� ��I���g5ǔ����n7&馄��1D����6�zX�3.�6��x����~گ_�+ِ��7*�/����ҐA�Y��-�0�Z��S>�"�[k�����&����k)uy�R����f �MH��-��m�0Wa��BLE���OĻ9��EG�&�A�w��#EC)S��8��m���*Zruc=& D�Ը�B�0�M�d�O���t����:�p���T�V�5��{�лݱ.Z����_c����0�۫$P���>�d@���W�Y�Å�p���*�>e����B���G� ��P��h�vho*Ԅ)��@$��B�džQ���<�Z�����o+��(�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ