Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
65fd0584f64f875e8f801023e2b6af289d60353f79758b2db735f15421e6b681.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
65fd0584f64f875e8f801023e2b6af289d60353f79758b2db735f15421e6b681.exe
Resource
win10v2004-20220812-en
Target
65fd0584f64f875e8f801023e2b6af289d60353f79758b2db735f15421e6b681
Size
624KB
MD5
53a9913bcc03cbae0abfc6468c82b070
SHA1
c7fdb186071d712e7909377539414f98e953795f
SHA256
65fd0584f64f875e8f801023e2b6af289d60353f79758b2db735f15421e6b681
SHA512
087f0b96cc5c53a4569403a3b2f4e964df3355b30d4e64030606ea7ed2ca7e473cbf89e1927b6f0bffc0c1499760f52de04d66ab032252c69284dadd3b9401ab
SSDEEP
12288:V5eADSvTYEHpB07F9KvybrOVC7p2LMc3C:zus/HbiVC23C
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
UrlCombineW
StrCSpnW
PathFileExistsA
UrlUnescapeW
PathIsSystemFolderA
PathRenameExtensionA
PathIsURLA
PathCreateFromUrlW
SHRegWriteUSValueA
DllGetVersion
PathSearchAndQualifyW
SHRegGetUSValueA
PathIsDirectoryW
UrlEscapeA
PathIsDirectoryA
PrintDlgExA
GetOpenFileNameW
ChooseColorA
ReplaceTextW
ChooseFontA
CommDlgExtendedError
PrintDlgA
PageSetupDlgW
ReplaceTextA
PrintDlgW
VarR8FromI8
VarI8FromDec
VarMod
VarCyFromDisp
VarI4FromStr
VarI1FromR8
VarI1FromDec
VarBstrCmp
VarCat
VarI2FromUI4
VarR4FromI4
VarDecNeg
VarDateFromCy
SafeArrayCopy
VarI8FromStr
VarUI2FromDate
GetRecordInfoFromTypeInfo
VarDateFromUI4
VarI2FromUI8
GetVarConversionLocaleSetting
DeviceCapabilities
PlayGdiScriptOnPrinterIC
PrinterMessageBoxW
GetJobA
DeletePrinterKeyW
DeleteFormW
DeviceCapabilitiesA
GetDefaultPrinterW
FindClosePrinterChangeNotification
StartPagePrinter
AdvancedDocumentPropertiesW
DEVICECAPABILITIES
Arc
AddFontMemResourceEx
OffsetViewportOrgEx
GetCharWidth32W
VerLanguageNameA
VerFindFileA
GetFileVersionInfoW
WTSLogoffSession
WTSEnumerateServersA
WTSVirtualChannelQuery
WTSShutdownSystem
WTSEnumerateSessionsW
WTSWaitSystemEvent
WTSSetSessionInformationA
WTSRegisterSessionNotification
WTSOpenServerW
WTSFreeMemory
WTSTerminateProcess
WSAStringToAddressA
WSAAsyncGetHostByName
WSAEventSelect
WSAJoinLeaf
getprotobynumber
WSANtohs
ImageList_Remove
CreateToolbarEx
InitCommonControls
DestroyPropertySheetPage
FlatSB_GetScrollInfo
PropertySheetA
ImageList_GetImageRect
ImageList_SetIconSize
CreatePropertySheetPageW
ImageList_SetOverlayImage
ImageList_SetImageCount
ImageList_Destroy
GetLastError
GetLastError
GetVersion
SetCalendarInfoW
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
�w�]�Z�k ���O�O���)%�- ��r��d�oR�=6~��1Iq�O�dѴ���X����%�(Ĭ�-[ K�/b�ך���sA �"�����q*�\��9��[�����T|t.�f��^��Gyme�1%=͓���Q�l.T� )�CS��ډXtDX���]�e�)��A������c�I ��E\=���C �O����>b`s�Y%�|˫��(q��+D��g\�,�M:��*1���&@���ڽ�k���Vqߖ6 s����r���J�o��\���s�Pƭ�윇�Y�]�8:��\����lO��)����C+�Lg�����\����!��<���4�����u�p(odtÃ�Qd}��x�R����ӹ,�C-l��b2�*���'"�{x٪&0ḿw���yϘ��j��e}?B��_"��y���?R��f1���)n,�`��#,�4��8��~����i�5��U��0��$ |���2��#�3]��j�jǖ8``�_�ҨV�]t0c���Wu`f��[�������[�S9��'s����ޟ�B���"�P�5u��ն)Ұ�*Bz�,�R!�,�m]f`�B�W�NR-EL�:*���ٌq�-T��d-��`Gn�&n�6u2�i�Py8+���d��"/ч&��4(R�x�t:��!g�O?������9���L�7���-P�#/G�*,�C�F������%�$Mק���s���DlL�]�����z�'�j{��p �w#�QO �l��ws��m��r`{F��p;���%���QK�B�\ߞcކ����r��x� -�Å�X�+��(�*Rq�7�t+��Q � I#��K�N�i!���C��:Lq@@ !3aٙN�{�6<TM����z$r�&��a} ��8�,��8"��-�Y��$3 5�뎬���<#�dbZ�A��}��i���8ݙ$K�� `2d>��� �~]��@v�hɪ�����qs����=�~���G(A��Y�=k�۪�m �"ψ�I"['��D -�l.� ��Q�&`%�J�����>�#��,�����,���<�H��L��"��_�GSX7?�d�[5�Q����J��Z�3��A����!�1�w��t�L��c��| �?��Rޜc������%Y��^��T�N��ov��L�}��_�Dp},M�Jh��a�3��^�g������d{��U���N�}�E:6�`�`n�����U�<�g��|���4S� �8(�ۯں��iT@��:��,��Rl&��$��C�d3.��+�U&����\DH��� n.��c���h����a��s�]˒5��'Jh�6u�>F�0ߌ"n���}���9�k��jK#��Q�g,�gZ�d:r��N�sl�k�j��A���;��������/�S�3��(�`����As�E�e*[�|��u��6��L�������&6�M_�LuH�v� }ݔ��R���Tp!��Q���i��L�߁��o�|,j%�'E��4Bx�\��o��6��P���TN������ڶ_ ��&��0n�Y� N�H�{��1������u������~�F$Q�z.�t������� 1�l�%�r�#y��5$�@��T�K���.x���4��v��=��2��=���)��|�:�S"�%����pl�5�t>aBC���@���c�y(�۠]~ъ,0�����q�%�o���7�I(\�x��Q 5�+�,n�J\�@!�&��?�OE���~9"��*JZ�8h��C�B#=�iҟ�{`\�(m`�k71�`�`w.�< �3 ��E[}o�[F�7{����}�a�FRgI��Xh�ݓ���d7X��e��)~cR�� .�^O�M5�S����/�N"S+8��ֽ&����#K�'I�[ �p� �7���$�AQ���y׀h�^4t�]�{������K��md�?|�>��E ���L�÷Ix��r�}��[Jf���|;)�G�\ ��)<d�m�h��֏6R�F�!S?�\��C.�U�nA;F��6��4��T[�Z�^�L��n(��z�z4��`�k7��,X�� �����pn��DJ9�ʄζ8��V�R�����K,c4��b(ڶ����:����0?�$��ݍ�䖺�(T;�_��%�L��פ)9���e�گ7�$���#��sZ���P�-M,�%�������� ���#�_�1�Z�@�_�����od$r�.S?r�L;N�r1J!�$�����7�P�������J���D"��W�"W���N��ɲF�~,���ޔ�V{������T�.�L�|�$�m��A�mJ{��v��d ������h� �T$�s����Uy�(�L�?0����r�#�ڝ�}���'ePJՖ��K��@L%��c/N����iYhu�/� ����OB4�"qR����{*���� �����!��5%��CQ����PK�u�٘�Dl�����a�b\,�����מ��{_m![p��CRG���������f�}z�ޕy�~2�ﶋϷHz?g���Z��6#�du�}1<ΛlL5�Fހ��[~l���&�|��a8)G�����nؔ!� ���X|+����q)l�F���8����A?�n]��T�}qS/�̺j�9�:�<�Li!eQ@K�X�u��AWU��N�9T� [���U��#�N��E�d��HڽOݤBitXUv�֚�7ܜ�)��%�p��犊J�O/�%p��d����s��M���q�t�T���֏p��+�͑OZT�먤��>�I<��9!~.�������[RwS䏤���F��iO*�o���::^+�l�8d�7����eZze��n��-�Cs����4w�=�'��`��3�Z<?�˪�`��g�cR��>J���H�HB��jj��k�÷�s�� \����2�7/���+��5F��$YOh@j�)t@�5Qo�c���U[�d FJl�f �X����C�����%�'~�g"Li>�Rt��*h��\�l������z��S_,T'z��,������6�Lt׳'mW��^.��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ