Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
5db534355bf548929834117efa1ac723a7bd6d2908591ead841159bb788adf96.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5db534355bf548929834117efa1ac723a7bd6d2908591ead841159bb788adf96.exe
Resource
win10v2004-20220901-en
Target
5db534355bf548929834117efa1ac723a7bd6d2908591ead841159bb788adf96
Size
602KB
MD5
40abdabd897cffaf392839927ec4e320
SHA1
5e8b7c8002f61c99f6f5f86908d5e88a2b2d9a07
SHA256
5db534355bf548929834117efa1ac723a7bd6d2908591ead841159bb788adf96
SHA512
3ef55a99bce7e0d0b4b0361651242f6dd4d336f54e252eb1a6cd9358647bcbc3cb5dc76023f0a5d60fa2e6e7095e196fd2cdd554c2938e020f975ad2a56dfdee
SSDEEP
12288:5Hr2nRMQretudArm/QG+5MwAfaU4fyROy8berhAw72M8:5LARMCe4a6/QG+Fs4fQ8SrhnW
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
SetDebugErrorLevel
AdjustWindowRectEx
DispatchMessageA
MenuItemFromPoint
EnumDisplaySettingsA
GetScrollRange
SetClipboardData
GetScrollBarInfo
EnableMenuItem
ChangeDisplaySettingsExA
GetMouseMovePointsEx
ShowStartGlass
DialogBoxParamW
ChangeMenuA
LoadMenuW
DlgDirSelectExA
DestroyWindow
GetClipboardViewer
SubtractRect
InsertMenuItemW
ChildWindowFromPointEx
RegisterDeviceNotificationW
DestroyAcceleratorTable
ShowCursor
IntersectRect
CopyAcceleratorTableW
ScrollWindow
GetAltTabInfoW
OpenIcon
ChangeDisplaySettingsExW
CloseClipboard
CharUpperBuffA
MessageBeep
LockWindowUpdate
LoadImageA
GetClientRect
CreateCursor
IsCharAlphaNumericW
EnumPropsW
CheckMenuRadioItem
SetCursor
DestroyCursor
GetWindowTextLengthW
TileWindows
GetAncestor
GetClassNameW
CreateDialogIndirectParamW
SetCaretPos
LoadAcceleratorsW
DialogBoxParamA
GetDlgItemTextA
SendMessageCallbackW
GetUpdateRect
GetCursor
GetAltTabInfoA
LoadBitmapA
EnumDesktopsW
InsertMenuW
DrawTextExA
BroadcastSystemMessageW
GetWindowTextA
SetCaretPos
AnyPopup
WriteFileEx
GetProcessShutdownParameters
LZCopy
GetConsoleHardwareState
GetCurrencyFormatA
MultiByteToWideChar
LocalUnlock
OpenEventW
GetExpandedNameW
GenerateConsoleCtrlEvent
GetBinaryTypeW
SetProcessAffinityMask
LCMapStringA
EnumLanguageGroupLocalesW
AllocConsole
lstrcmpW
GetStringTypeExW
InterlockedExchangeAdd
GetModuleFileNameA
GlobalFindAtomW
GetCurrentConsoleFont
DelayLoadFailureHook
GetComputerNameExA
VirtualFreeEx
GetConsoleCP
OutputDebugStringW
GetProcessWorkingSetSize
LZRead
GetSystemDirectoryA
AllocateUserPhysicalPages
MoveFileA
Sleep
EndUpdateResourceA
BackupSeek
EnumCalendarInfoExW
HeapCompact
GetConsoleCursorInfo
AddAtomA
lstrlenW
ReleaseSemaphore
GlobalAddAtomW
ReadDirectoryChangesW
GlobalDeleteAtom
GlobalSize
LockFileEx
CreateConsoleScreenBuffer
GetNumberFormatW
ConvertDefaultLocale
GetLastError
GetProcessHeap
SetDefaultCommConfigA
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetFileTitleW
dwLBSubclass
ReplaceTextW
SafeArrayGetRecordInfo
VarI8FromCy
VarUI8FromR8
VarI8FromUI1
WaitForPrinterChange
EnumICMProfilesA
PolyDraw
SetMapperFlags
ExcludeClipRect
VerInstallFileW
VerLanguageNameW
ntohl
WSAAsyncGetServByName
ImageList_DragEnter
MenuHelp
�a�t��6�PI��&�X�����e䏙�l��K����1*x���J�c���<����_y����l����J�8��g�l�ۄ3!����@���r��|�#/S�u�{���~Mr@��W*�7Z�L�,�o��R�����SW�b������Z���5�ŗ|�����}#�⤅���R��Kh�vZ�a��k� �Z��.�s��AV��k6�Y�ݦ�.$�d��'n4����JU��c ��$[-����xt~pp�4�ַz���.�"��Ly�j�`���JI_7�[��EU���*C)��aY�n�m� 뀓���H� ���7)�@���"W�� ��2�`���[�j��D>kNa��x��14Џ��D�^��ر���p���7C@��� ���K[���$�}֍ �կX�W�u>2N��ݮu�� o�%a���7���^��-BZX�[��g)��㻒%Ɇ6!c��F*s�fP`#�����v���~�F�^f��Q+��Z�V���e��m P._������)a��S��&�'Wk���j"}}��8�OOڥ�2���`��'�͚���6��A�#2I�t#y�7=T�PgQ�.��" j���{{��9g���r9�)��,��5b ��r~�ݎi��~���V:��T����ث{�SKm�]��Jx��po-k1�dg�*15w ���Q��2�1�*��2�{�ւ���(W�t�7N �~�����<��<h���6&?�Rhm��&��q�K���XϢh"�d�F��zu ��+��%�1g* ��7������LbpZwk��hUyl>��1�C>t�k�$�'�hcd����F���g^d�M�J�|��Vd�ӣ�VQE��yI,)�����W Ώ�`wտ����+ �~J�hb���0�k�Wn�kذq�c��;���-�&Z����C��{PI_t?���KR�s�r �OM����i���@2pd*� �َ�mk����ʣ��p��꾎�=�𦂤J�Ӟ�������C�D�&�%��J�N��>�3�)�+�|�XB7�R��8��ٯ�AIO��wT�Q��"0��>獝�R"�\�W�KcW�A���.*Σd��?1bz���?���{�ʄA�3��i;a�QOk|��F) ��WRc�o$3N�ލ6;�G�� i�WX1�^���1T��� lW����V��xM�%(�����֢�'�?�:fg=i�L#��i��c����,o02�U�Б �xd���d��4r�*$5u�����&. ��U��E���4mт��Ib�^5��Ԙ9���"��Yݗ5��f p��c�$�-�W��x>o����FnK�!j�����͝ڵ��U��\Cu�ML"���n�}��|Y�?�q�]F��3���_ ����hы�72�����nm\,9�-��z�~�$MJ\t���� ]on��[M�Z�����kݔ+Z��@U��rq�����f�����ܳ��!K�\��݅��#l��X��� V��V�#O� �%�u��'d��� e�t�$����<`��� ��еC�ˌ����վ�P�'O��q�o���K��/�D4<*/��W��������1��Kދ��0���#�V��D�1]I�ϭ4>s��� w��t�-{��^8���Hv����h���4�S����4ј��j$�3qϚ������ ���陕�0:u�z�~�23$���[Y�앝��B������X��gG����O㫔��W�10 ���Ԁ|Y��&�F ��k�Y�.G��4<�CF=��TG:�ʲbC����Qpƾ�qf���f�x%��Ta��9~�pF�ו%5{���ž�н^or�Jxm� !|BaI��Y���MZ�spug6���'��%Z�@[?�(����WZ���Q��,��KU���]k��bl�� Vpt�}�u�� ق�w4u>��V����U����:ї������g �����+�o�� u���ր*�1K�Y��z��O�%���]�^т^�t��/��+��^��XF]�Fn˯�����������P��_�U q���G���ؗiG���u t��j'���c�D6�(�����!������>�����#��8X4�7����4(�"H�\�Z��!^�D���*��x)ғ��xZ}�덪�3X�g��T��fӍ�hOM��^��`���vOos�I�ɟ'`\�7������3�zK4���[0��#�]˃���[�+���������B�y�I�҆*��� 诼�K�)5�]ZIh���H^����~mW���� ����簰�0T�C��2��S,(�>L��薚�ϻ^��0�C�'Cf�ծ���hHt�fYv1k}�<�j�D�v��- ��1��d`Y���/��z�u�Пr�O:��ZF�5��fB69�����<�δ���g��E��DŽ���s|��~XL���p-ʳ{�IPǚA�������Q���R���Gf��k �a���kgJC�2��ŭ�%PnC����W(a� 3�31I�Q;--w���j�ԉ�e]�ヲ�Z>{;�I�}D pL�Fw ��'��yB�"U6�.���thL�$A^4�}�;�Xi��.)�f�[����)��a09382\z2�a��l���à��>!L�1tʰ�?�,,,��=O��mE�����fz���C�DenE�ʺ���d#C��K|�� 2���)9`�H������Z�����e�"�X_�h��y��6�ʮt�;i�(�aT(|���O����|�;y��#�-�M�����b{�@=G|`�hhd`b��"k�p���ne�E~#p�kI��5mT��˶�L�F����-j�So�=��d7��b��X��@�sC�k�gF%|#!�b[���2*� Z�����c[����r�_2�忼V�ݪ� ���k��%��녻a��}�R���+�(�?}�a�5q��3��u����� %X�/NȨ�LL�p&��\S��t�M7�o�]Gd�[��e=ͼ�L!H6�5�[j��a
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ