Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2e6dfb9d4dd90819850c7d57cdacff5a973f0399e3338e79aef5648827e765be.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2e6dfb9d4dd90819850c7d57cdacff5a973f0399e3338e79aef5648827e765be.exe
Resource
win10v2004-20220812-en
Target
2e6dfb9d4dd90819850c7d57cdacff5a973f0399e3338e79aef5648827e765be
Size
739KB
MD5
2280573e1a85bd19da1a30ce7c38efb0
SHA1
b43b10816d6e43cf61098ce1d8f246c636b3fe0b
SHA256
2e6dfb9d4dd90819850c7d57cdacff5a973f0399e3338e79aef5648827e765be
SHA512
7e486f714d67b60f497a8e3058e587d25668b029530418bbfb11682fe1ef0dd9ca02287912afca956a1951b1466ee6a2c26535bee3b734830f757f788b198a63
SSDEEP
12288:H7SMFJ/OYBM7Uzoai8Xt8uMJKyKn/zhqfe0qYrB3bU0U:H7SMFJ/OY+7coit8zAYfYy3bU0U
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PathRenameExtensionW
StrCmpNIW
SHRegEnumUSValueA
PathIsDirectoryEmptyW
PathUnExpandEnvStringsA
SHRegGetUSValueW
GetOpenFileNameW
GetFileTitleA
GetOpenFileNameA
dwOKSubclass
VarI1FromDec
LHashValOfNameSys
OleCreatePropertyFrameIndirect
GetAltMonthNames
VarI1FromDate
SafeArrayAllocDescriptorEx
VarUI4FromR8
VarR4FromI2
VarBoolFromR8
VarDateFromDec
VarDateFromI1
VarI4FromCy
SafeArrayCopy
VarUI1FromUI8
VarUI4FromI8
VarUI4FromR4
VarBstrCmp
VarBoolFromStr
VarDecNeg
SafeArrayGetVartype
SetJobW
GetJobA
EnumPrintersA
AddFormA
DeviceCapabilities
OpenPrinterW
AddPrintProvidorA
DeviceCapabilitiesW
GetPrinterDriverDirectoryW
ClosePrinter
DeletePrinterIC
EnumPrinterDriversA
GetFormA
EnumPrinterDriversW
SetPrinterDataExW
AbortPrinter
CreatePatternBrush
DeviceCapabilitiesExW
PtInRegion
PolyBezier
GetTextAlign
CreateFontIndirectExA
GetObjectW
GetKerningPairs
CreateHatchBrush
GetCharWidthInfo
SetPixelV
GetCharWidth32A
GetTextExtentExPointA
GetTextExtentExPointI
GdiEndPageEMF
GdiReleaseDC
VerFindFileA
GetFileVersionInfoSizeA
WSAAsyncGetHostByName
WSASendDisconnect
WSARecv
WSCDeinstallProvider
WSCUpdateProvider
WSAInstallServiceClassW
WSCWriteProviderOrder
WSCEnumProtocols
WSAGetOverlappedResult
gethostbyname
getsockopt
closesocket
WSAEnumNetworkEvents
recvfrom
WSASetServiceW
WSASocketW
WSCInstallProvider
WSARecvDisconnect
ImageList_GetDragImage
FlatSB_GetScrollPos
ImageList_Duplicate
PropertySheetW
ImageList_SetOverlayImage
ImageList_LoadImageW
CreateStatusWindowW
CreateMappedBitmap
ImageList_DragLeave
ImageList_AddMasked
FlatSB_SetScrollRange
CreatePropertySheetPageA
FlatSB_SetScrollPos
ImageList_SetIconSize
ImageList_GetImageRect
CreateToolhelp32Snapshot
AssignProcessToJobObject
GetVersion
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetMessageTime
SendMessageW
]:��ts�C�-d���g,���c�E����'��NA��#�`���ZL5��D���99Fw����D�')q}3������*{���!jR�ʸs��]�f��pAJ�"8��P8�����:ի/��3ז~c�n�I�,��` _[Զ�ކ����1��^ÊS�.�H7��{X��J:�=���*��X����P����+%U��$<�ʝ�Iq|�%���xP��1L�i ��\�� �=�Z�����e} &�������I�xѯIl��OwL��Ҫ~��w"��������-iM��⑨�}o��y��v�A)U�OgqCH6��SέG��)� M��A�jT��<�9k�r/PR��l�c�z�brU�mRZ;ɕ���Y&�y�OU�у����Xd�;q#���+�1;���k���(D�ZP�F8V�=X��M: ���n�+.B4�φ��}�y��?cB� ��NCV����1�ȟ���.^ �����Vo��z�F��p�{�C��p��1y�A��ۉ�V]ư�6]�o.��s۞0�O-�GwX���lCMe;ل�k f�v��ڍ��g�>���eT4�+EIϬ=PBJ����P�s�c����:�{�UHp���.��P&����ѐ���l�����m���a���S/$J5�,I{2u�1q�,˨L������DR���� 5���j�7����eUq�D��K����f��JB�1���{�!�$�����^��@ fu,OE̓M����-]�i�)+zb"[r5���= �?/ �����Ͽ��z{�6�z�����t����V4�^���$mc���N�T�W�r��6$��RDٹ��L��vV�Y�tE:��8�ږ�A�)۫ĵzԍ�XBT�3�ц7GM�ʄpN+c�cQنP{b��BJI��f���K)Q��8W{9X�D��G��2�=%�h�je�stO�i����ibe*��f~��s��}3�S`�!�[N�uQ~�;p���3��GԎ�{"npЯM-b�1�B��WwS�e�Z��)���J-���]����Y���LaI�2C��]���'���䔽�ό �d��%d��5�1.�L�\�]D��}%�{��w��Yqn��F�-[)Ě�d����˃�Հ�n�cT��a��}��~%<���:s��̆$��kC"x������sI�v���E���F�v�7�z#� V�i'�z�9�H7(�K`!|H���d�l+�<S���n�[{��+��W�%;o�[R� H����G�Ǐ���v��:8�\�������T-��R�b;?��ơ����3۩� �K2ѵYK!J x҈��`h�M]�nK��^?k�n��LW�&Z69� HmV��ؔJy�i������2�Û�:�d��(7o0�0�����|#�:Zۂΐe�S�����и߰��ϳ�� ��H�mO{��\�iBC���x�ul'f�͏ν ���Ӻ4�c&��+1u��F8[�+E��pkP������_R�(#& �?j�"K��n!�d�����VnH��ܻ5��YB�\�U�Q���R� mJ�&��1s/�H���)�5r��4o�,�ݷ7�w�[ �j�x�z��Ҕ�-�2WmhC�7���$�)�������d�� %l�t�#��hs{z���N4g)�]�s�����nUUJ����~|��.���_�4�t� � F��>�2�g@��i�`9����b�dW��X#ࠞs��������@YIP{�WxUܠw-�b2/ïPu���s�c��;���k��˩�-wg�fm��s����SS��=�\ɪX���S����p ��vP|2�9�@ \"����'U�Y��7̸�o�EA�K�rI� �S7�I̔���f^+�v ��J\���2���7Qyiv��Q�chu��&��ﮏh�U7�l�qh�����@cF�9���|c�yr|���[�@��;�$�@y05?���;�1�(��0tџݭ���@6x���r^��A#��A��;���.��'����-�S�&�^��v��?t�}Op���©j��-�@��'����@E,�h���p3J�bv�Y�6��(W!�͙��օ�~�Ǎ���Z�B��Cger�v>/{Wpx@�D<d�a���P�̚˰�務����,[aIUxqw�v=������a�m��R�R�#��7߈��9`�� �q�_bW�U�J��)�2#�BѺ�������R�3��T��O�� �6|��K�͏� ���x����5c���{ϳN�\�~�/V+��U��K~U{���U6�A�:�l��vru�tn��S���Gcz��������먪Y���u���Hz��m��Ͻ�0�W���'�\��e4�ZY� �w��J���-����=_���S�\ԍ�IXZ�aӵo ��?�p���>.R�?�j�ZnOy����ka�����-�أ��,$����韩��|h�M�8I8:�nx�����Gq4��X=#6�ߓ�w�A_�5��ˋF^�����8/'W�>�9>G4˒C���c�Rk̜�*�,��'8R��RU�+q�9&�]kk�s��yDnQ+3 6RFx��� m{�Ӎ��q��>\.P�Vh���e�����~�ϵr�!E�xO��q���Y���01J�160yz��!���i�������]�5N���P���X}�7t�s���#��5j�&�b�i?F2� ����Lfu��}3��<��]��o8#j�n���5��e7�N2^���ps�/1Bc���4 �X�a�`��U��!lV�cwɰ���G�����,y�����9��F����pn$v�`ctʥ��B>% �Hk� �rM8|�,����6�7�Ge�^b��M@�_���#��f��=t��,���/yW��~�7uWQU&?���_�Bi��b��Lh�;rg]k�Pށ�BC 6{�!¢��:�"�@N�"���?�9z֯��ݙ�>]��b5�Eq�Xm��&v�����>���TqD1ެ�s�W0����@��NQX`+KiۖH��m�s�śT
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ