Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ef33197ee11e91c33852d759e9f465757e7ec6e210ad0de2ab6374e8b2717f6c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef33197ee11e91c33852d759e9f465757e7ec6e210ad0de2ab6374e8b2717f6c.exe
Resource
win10v2004-20220812-en
Target
ef33197ee11e91c33852d759e9f465757e7ec6e210ad0de2ab6374e8b2717f6c
Size
603KB
MD5
0a6af5debdb98ea6de04f4d728df91f0
SHA1
7b3a190d5a4f35209aa9e341bb5634ae890d582e
SHA256
ef33197ee11e91c33852d759e9f465757e7ec6e210ad0de2ab6374e8b2717f6c
SHA512
476fb3c45787199ffca42441692b24561c520ba2e4e3e9cbdee61d14ae5a14c0e8aa2449633ab56e6ea43417c12f9f80b77e9fd52de006f2f610d92188247b52
SSDEEP
12288:Buu8r+c56t6mNbwqPBCkrEGrNwSXYcfhHalNNoPM:YN+t8WnAqVIcfh6lE
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
SetWindowsHookExA
GetDCEx
ChangeDisplaySettingsW
CharLowerA
GetClipboardViewer
DefWindowProcA
GetWindowDC
EnumDisplaySettingsExW
SetMenuItemInfoW
wvsprintfA
GetWindowWord
CallMsgFilterW
AllowForegroundActivation
GetWindowThreadProcessId
GetNextDlgGroupItem
GetMenuItemInfoA
SetInternalWindowPos
DrawCaption
DeleteMenu
IsGUIThread
SetFocus
UnregisterClassW
GetWindowModuleFileNameW
RegisterClassW
SetProgmanWindow
GetWindowModuleFileNameA
ChildWindowFromPointEx
SetCapture
GetMessageA
SetProcessWindowStation
GetMonitorInfoW
AppendMenuW
SetThreadDesktop
SetSystemCursor
LoadImageW
GetNextDlgTabItem
DestroyAcceleratorTable
IsZoomed
DrawTextA
OemToCharA
ToAsciiEx
MessageBoxTimeoutW
MonitorFromRect
IsCharLowerW
SendMessageCallbackW
SetActiveWindow
CopyImage
BeginPaint
ShowScrollBar
EnableMenuItem
ModifyMenuA
CharLowerBuffA
CharNextA
RegisterClipboardFormatW
CallWindowProcW
ReleaseDC
SetForegroundWindow
IsDialogMessageW
GetMenuItemInfoW
DragDetect
EnumWindowStationsW
CharPrevW
SetCursorPos
FindWindowW
GetMenu
ShowWindow
GetWindowTextA
LoadBitmapW
SetDlgItemTextW
wsprintfW
DispatchMessageW
GetGUIThreadInfo
OpenInputDesktop
RegisterClassA
UnhookWindowsHook
PrivateExtractIconExA
GetWindowLongA
WaitMessage
ModifyMenuW
SetScrollInfo
CloseWindowStation
CharToOemW
PrivateExtractIconsA
GetClassInfoW
GetKeyboardLayoutNameW
PostMessageW
CharUpperA
GetInputState
GetClipboardOwner
TranslateAcceleratorW
PtInRect
GetScrollBarInfo
SetWindowsHookW
CascadeChildWindows
OemToCharW
RealChildWindowFromPoint
IntersectRect
GrayStringA
GetPropW
SetClassLongA
ChangeDisplaySettingsExW
SetCaretPos
GetWindowTextW
GetWindowWord
GetAncestor
SetFileApisToOEM
GetStartupInfoA
DosPathToSessionPathW
SetTimerQueueTimer
FlushInstructionCache
ActivateActCtx
SetCommConfig
SetLocaleInfoW
lstrcmpA
SetLocaleInfoA
UpdateResourceW
CloseProfileUserMapping
GlobalFix
SetEvent
GetVolumePathNameA
LocalUnlock
GetStringTypeW
InitAtomTable
CommConfigDialogW
EnumResourceTypesA
TerminateThread
WriteTapemark
GetModuleFileNameA
GetVolumeInformationW
CommConfigDialogA
GetProcessPriorityBoost
GetStartupInfoW
CallNamedPipeW
CreateProcessA
IsValidCodePage
IsProcessorFeaturePresent
ReadConsoleOutputCharacterA
ReleaseSemaphore
GetTapeStatus
AddRefActCtx
CreateThread
EndUpdateResourceA
GetVolumePathNameW
SignalObjectAndWait
GetPriorityClass
FileTimeToDosDateTime
GetFileSizeEx
FindAtomW
GetTimeFormatA
GetLogicalDrives
CopyFileExA
LCMapStringA
GetConsoleWindow
EnumUILanguagesA
SetComputerNameExW
EnumResourceLanguagesW
GetVolumePathNamesForVolumeNameW
SetLastError
GetCommConfig
WriteConsoleInputW
GetDriveTypeA
TransactNamedPipe
IsBadCodePtr
LCMapStringW
ResetWriteWatch
GetCommProperties
WritePrivateProfileSectionA
ExpandEnvironmentStringsA
BuildCommDCBA
GetConsoleKeyboardLayoutNameW
VirtualQueryEx
GetPrivateProfileStructW
GetLargestConsoleWindowSize
GetCurrentProcess
GetSystemTimeAdjustment
GetACP
EnumCalendarInfoW
BuildCommDCBAndTimeoutsA
MoveFileA
GetLastError
GetACP
GetLastError
GetVersion
VirtualQuery
LoadLibraryA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetOpenFileNameA
FindTextA
VarCyFromBool
XFORMOBJ_bApplyXform
CreateDiscardableBitmap
PolyPolygon
ImageList_Replace
FlatSB_SetScrollInfo
ImageList_Read
ImageList_ReplaceIcon
��2��������Bb��s����� �aH&���N�"�]�����I)��ۊ�k>���r�^����B�#}]����,sF�&'OY����3����j���(e�/n���9m�+���<�kh�9T�{28+�`ݞ%�~1N)��FR%��JFx��5W �VU���i;��92���n��(y� �A|�j��v�]�ס B�� �Wď��� o��4�2�5���1���4�<I��&���8���R6ثw}�Z��yDE�3z��S��W����T��t;?%WotR���E �w�����:��ն����J�U�a1�};QF��0HPC��W�̓o�Bg"[�j��W�-����$qnM�������� h{��� ��v�9e���(����Erfa�:�G�)���%��$�K���pd��5�Gf�W����kw,��V�!��K� �!Y��<;�f�N���Pl�Xf��.x�!��p⤃�l�8�����(ֳΰT+�A��d}�La/?D�!0k���I ����w\��J��y���!-:��x�#�8d}�����E�I>��%e=�ӭ (�x�q��~��`�,���t���Lsr4r��/JA8���T�k�|�'���;�?h�gc���4B��X�̌��떒c),������3_�=��xXi����%e�T5�-��J���G�~�^",s �뵧�T=U�0��]�wcA����O��ͧ'/���H2���f��� �"�\^:+)��ʐ��a�mm����]+�uo1([����R?\��ߪ�B�=0�b��'r�;�h��)�����)l�5�Ei���֒v��yi�����S��4Y�I���)����\9�<)��68����Ԋ��'���Ezήw�����OR������d4��9)C#��yl������M�5�E��)�`^h�=��3��ez���`mV�[$bl��KO��6�46�*�/��S� �.���������w�t�U[[����].�c\=JБ��vs �������eٳA�(��Lצ4����A1,dC��e�w_�xֺ�U�o�z��<7�}!��x��o4�g�Һ��l~O����1)L�.�qX(��ܺ�u�,L��$�������/�U�r��:�U�%r_/t"�hǀ�-�az]�7��my͋�@y_�L��vɥe�����H����g6&.��C��7�o��T�G#u���F�ɂ?`��ڇg|�kz�?�-k��T�d�����q���X�0�+[���ST �lu4^%9��p����a��.����j%8�q�R��˚\$��[:�AO��ѤG�Ɵ�e�����_Af�2 ��������Ƭ�m�^5'�DV��aǡ���JP��}��`��E$jm0���W��e7I[����?Vd�@���?�l��Gu��t��A�P�<m�Ք���{;����I��z�E!�NYm�-�V�X5j������ :P�q���i�n��r��r���� V cv[����>��evxzY|�cU$[��>�2~A�J7�����o$��4gV�:�ب�&���t&���{U1-���P���%.mmG@w \�9=���/4�[(Y�U��M����o���L(K�p��g�k��,��}�N�����- `BG�����?nv���*-a��ݤ�l�q���` 8O�u��\�M�H4�r��UL����ͼg�%��C���X:��V�$2\��@��B⭏�7q�����)qBV�����G�a���|=Pv�e��/����ޟ���X_�c�O`�PP����,u�]?�R��C� ^XP<��kƸa=�=�)>���������N��+�C��,c&)M<ܿMn�{�H06:p����Q&���{)*`T��+�\�Vj'���G�W����u�˱��l��]�pk���I�M��Ӕv�.΅���ox���D��rjj/"�. ��XJ��+����O�b�c�p{Qh�u�>RQZ�]�� ���V�\�B�Ǵ �r4�"n�/KHBa�k��\��h�I���{�J���� �ث~~@�X����<k���!Q�$�˪(�x��%Q�Օ@�N}1��>zKccZ��G�������c��HLH�;��Z������ʵ�<����&!O��0I?U�u2������E vC�c���m�'[BS���z���/2��uP���qGL� �>HڠA�b�Ǻ!�|�\ ~���5·`� ���s�e�qs;) gU��)A��l���d���V���j1 ܐ�Z���hA���|��4T�'��Gv-�c����oh���t�8��[��p���r��ڐF�@��ZAf-�.pȰ 많���� %}��Bd�u�RUp̳P���ВZGw�.|Z��p���wx��r2�0��/��m����ޭk���q�����ec#���7n���]h��%����9����j��|�.��}>+:��ԖPq,��h)_�;���B.\�v�Kh�?�-fP0�� d a�2�|�poÌ�% =w `�a����.'�@^�O�e_�)f��C�E)T�z���RK9������\A�V�N�na7���8e���g�U^]���Zc�����O�Ciܾ'R68��L�f�w��k -eh�2.&}�l��@�(6K��g�v�mgwg]�+g��"/NF�|Fp�1�T�K���W��v�k�A��j�/���1�w#���>,�S�2&�b'PR�շm��j6�Xb*j���Y�f�Ҽn�C����&���C�Ğ�����r�-(i���:��V�������/�{��ڢ� 8w 5�TS]���.�$����g��� � ֲp�yy�����b�P�N�Sl,�����<n�Q[�y����%Hm08H���Ѷ���&�n�,�>b>9ub�uZ��`#;L.����,N��}��*�߲dlT�2kI㤬��e��i�(M@���z�#�یT���"�N�:"]8��j���!����v�l��"�d-;������ 3�� Wp=�a�����Y���F=�=E��Z�����$ɲW"�o^��e���9}�X�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ