Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
a563651d5cd1242dc5e69b60f8c1603572dd206d3ca659d7fb5d8ed0716911dc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a563651d5cd1242dc5e69b60f8c1603572dd206d3ca659d7fb5d8ed0716911dc.exe
Resource
win10v2004-20220901-en
Target
a563651d5cd1242dc5e69b60f8c1603572dd206d3ca659d7fb5d8ed0716911dc
Size
624KB
MD5
35d4e70a752f20c0bd328a27797a36a0
SHA1
d09e12d709f0adb7bf7566b040755919d2ce9dd2
SHA256
a563651d5cd1242dc5e69b60f8c1603572dd206d3ca659d7fb5d8ed0716911dc
SHA512
56dcc82ca1d0e017ab5cef20522160e0b55cabf69ab3c05d2d0b8885799ab5c18f5cbf33cda0d78f967b111641c64a3370efd4203010655265122e1556d28d9a
SSDEEP
12288:i589OwKZiDkN6808wzgYybrOVP7p2LMcnf:w89JKZVN508wzgHbiVP2nf
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
UrlCombineW
StrCSpnW
PathFileExistsA
UrlUnescapeW
PathIsSystemFolderA
PathRenameExtensionA
PathIsURLA
PathCreateFromUrlW
SHRegWriteUSValueA
DllGetVersion
PathSearchAndQualifyW
SHRegGetUSValueA
PathIsDirectoryW
UrlEscapeA
PathIsDirectoryA
PrintDlgExA
GetOpenFileNameW
ChooseColorA
ReplaceTextW
ChooseFontA
CommDlgExtendedError
PrintDlgA
PageSetupDlgW
ReplaceTextA
PrintDlgW
VarR8FromI8
VarI8FromDec
VarMod
VarCyFromDisp
VarI4FromStr
VarI1FromR8
VarI1FromDec
VarBstrCmp
VarCat
VarI2FromUI4
VarR4FromI4
VarDecNeg
VarDateFromCy
SafeArrayCopy
VarI8FromStr
VarUI2FromDate
GetRecordInfoFromTypeInfo
VarDateFromUI4
VarI2FromUI8
GetVarConversionLocaleSetting
DeviceCapabilities
PlayGdiScriptOnPrinterIC
PrinterMessageBoxW
GetJobA
DeletePrinterKeyW
DeleteFormW
DeviceCapabilitiesA
GetDefaultPrinterW
FindClosePrinterChangeNotification
StartPagePrinter
AdvancedDocumentPropertiesW
DEVICECAPABILITIES
Arc
AddFontMemResourceEx
OffsetViewportOrgEx
GetCharWidth32W
VerLanguageNameA
VerFindFileA
GetFileVersionInfoW
WTSLogoffSession
WTSEnumerateServersA
WTSVirtualChannelQuery
WTSShutdownSystem
WTSEnumerateSessionsW
WTSWaitSystemEvent
WTSSetSessionInformationA
WTSRegisterSessionNotification
WTSOpenServerW
WTSFreeMemory
WTSTerminateProcess
WSAStringToAddressA
WSAAsyncGetHostByName
WSAEventSelect
WSAJoinLeaf
getprotobynumber
WSANtohs
ImageList_Remove
CreateToolbarEx
InitCommonControls
DestroyPropertySheetPage
FlatSB_GetScrollInfo
PropertySheetA
ImageList_GetImageRect
ImageList_SetIconSize
CreatePropertySheetPageW
ImageList_SetOverlayImage
ImageList_SetImageCount
ImageList_Destroy
GetLastError
GetLastError
GetVersion
SetCalendarInfoW
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
�w�]�Z�k ���O�O���)%�- ��r��d�oR�=6~��1Iq�O�dѴ���X����%�(Ĭ�-[ K�/b�ך���sA �"�����q*�\��9��[�����T|t.�f��^��Gyme�1%=͓���Q�l.T� )�CS��ډXtDX���]�e�)��A������c�I ��E\=���C �O����>b`s�Y%�|˫��(q��+D��g\�,�M:��*1���&@���ڽ�k���Vqߖ6 s����r���J�o��\���s�Pƭ�윇�Y�]�8:��\����lO��)����C+�Lg�����\����!��<���4�����u�p(odtÃ�Qd}��x�R����ӹ,�C-l��b2�*���'"�{x٪&0ḿw���yϘ��j��e}?B��_"��y���?R��f1���)n,�`��#,�4��8��~����i�5��U��0��$ |���2��#�3]��j�jǖ8``�_�ҨV�]t0c���Wu`f��[�������[�S9��'s����ޟ�B���"�P�5u��ն)Ұ�*Bz�,�R!�,�m]f`�B�W�NR-EL�:*���ٌq�-T��d-��`Gn�&n�6u2�i�Py8+���d��"/ч&��4(R�x�t:��!g�O?������9���L�7���-P�#/G�*,�C�F������%�$Mק���s���DlL�]�����z�'�j{��p �w#�QO �l��ws��m��r`{F��p;���%���QK�B�\ߞcކ����r��x� -�Å�X�+��(�*Rq�7�t+��Q � I#��K�N�i!���C��:Lq@@ !3aٙN�{�6<TM����z$r�&��a} ��8�,��8"��-�Y��$3 5�뎬���<#�dbZ�A��}��i���8ݙ$K�� `2d>��� �~]��@v�hɪ�����qs����=�~���G(A��Y�=k�۪�m �"ψ�I"['��D -�l.� ��Q�&`%�J�����>�#��,�����,���<�H��L��"��_�GSX7?�d�[5�Q����J��Z�3��A����!�1�w��t�L��c��| �?��Rޜc������%Y��^��T�N��ov��L�}��_�Dp},M�Jh��a�3��^�g������d{��U���N�}�E:6�`�`n�����U�<�g��|���4S� �8(�ۯں��iT@��:��,��Rl&��$��C�d3.��+�U&����\DH��� n.��c���h����a��s�]˒5��'Jh�6u�>F�0ߌ"n���}���9�k��jK#��Q�g,�gZ�d:r��N�sl�k�j��A���;��������/�S�3��(�`����As�E�e*[�|��u��6��L�������&6�M_�LuH�v� }ݔ��R���Tp!��Q���i��L�߁��o�|,j%�'E��4Bx�\��o��6��P���TN������ڶ_ ��&��0n�Y� N�H�{��1������u������~�F$Q�z.�t������� 1�l�%�r�#y��5$�@��T�K���.x���4��v��=��2��=���)��|�:�S"�%����pl�5�t>aBC���@���c�y(�۠]~ъ,0�����q�%�o���7�I(\�x��Q 5�+�,n�J\�@!�&��?�OE���~9"��*JZ�8h��C�B#=�iҟ�{`\�(m`�k71�`�`w.�< �3 ��E[}o�[F�7{����}�a�FRgI��Xh�ݓ���d7X��e��)~cR�� .�^O�M5�S����/�N"S+8��ֽ&����#K�'I�[ �p� �7���$�AQ���y׀h�^4t�]�{������K��md�?|�>��E ���L�÷Ix��r�}��[Jf���|;)�G�\ ��)<d�m�h��֏6R�F�!S?�\��C.�U�nA;F��6��4��T[�Z�^�L��n(��z�z4��`�k7��,X�� �����pn��DJ9�ʄζ8��V�R�����K,c4��b(ڶ����:����0?�$��ݍ�䖺�(T;�_��%�L��פ)9���e�گ7�$���#��sZ���P�-M,�%�������� ���#�_�1�Z�@�_�����od$r�.S?r�L;N�r1J!�$�����7�P�������J���D"��W�"W���N��ɲF�~,���ޔ�V{������T�.�L�|�$�m��A�mJ{��v��d ������h� �T$�s����Uy�(�L�?0����r�#�ڝ�}���'ePJՖ��K��@L%��c/N����iYhu�/� ����OB4�"qR����{*���� �����!��5%��CQ����PK�u�٘�Dl�����a�b\,�����מ��{_m![p��CRG���������f�}z�ޕy�~2�ﶋϷHz?g���Z��6#�du�}1<ΛlL5�Fހ��[~l���&�|��a8)G�����nؔ!� ���X|+����q)l�F���8����A?�n]��T�}qS/�̺j�9�:�<�Li!eQ@K�X�u��AWU��N�9T� [���U��#�N��E�d��HڽOݤBitXUv�֚�7ܜ�)��%�p��犊J�O/�%p��d����s��M���q�t�T���֏p��+�͑OZT�먤��>�I<��9!~.�������[RwS䏤���F��iO*�o���::^+�l�8d�7����eZze��n��-�Cs����4w�=�'��`��3�Z<?�˪�`��g�cR��>J���H�HB��jj��k�÷�s�� \����2�7/���+��5F��$YOh@j�)t@�5Qo�c���U[�d FJl�f �X����C�����%�'~�g"Li>�Rt��*h��\�l������z��S_,T'z��,������6�Lt׳'mW��^.��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ