Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
29fc0a480108291b270091159b0d6ea0ad119d109116b4b3a440afa5f99222ec.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
29fc0a480108291b270091159b0d6ea0ad119d109116b4b3a440afa5f99222ec.exe
Resource
win10v2004-20220812-en
Target
29fc0a480108291b270091159b0d6ea0ad119d109116b4b3a440afa5f99222ec
Size
614KB
MD5
4c926d4423401a165d998c59acf1de20
SHA1
27365c9841aee429cbff561a2d1e36f681c55e61
SHA256
29fc0a480108291b270091159b0d6ea0ad119d109116b4b3a440afa5f99222ec
SHA512
a629b41439925aad38a3551bc1404bb16e286cc58e6981ea5b8da77f9b23f8603e29eebf0949c7d4685fc23d23550e69ae45215f5040188f255da9d63e37f685
SSDEEP
12288:YuAyT/rIn4tyYqzrjKNHIWgxVqnUDiXNtB1F5/sXm7TgMMC:Y9OcnlYqLwWsnUW9tBXSW7QC
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetStdHandle
CopyFileExW
GetTimeFormatW
SetDefaultCommConfigW
ScrollConsoleScreenBufferA
GetTempPathW
QueryMemoryResourceNotification
GetStringTypeExW
GetCurrentProcess
RtlCaptureStackBackTrace
GetNumberFormatW
DelayLoadFailureHook
SetCommBreak
SetCommMask
PeekConsoleInputA
ReplaceFileW
CreateNamedPipeW
GetTickCount
UnregisterWaitEx
lstrlen
GetSystemDefaultLCID
GlobalReAlloc
SetDefaultCommConfigA
DosPathToSessionPathW
GetWriteWatch
WriteFile
SetComputerNameExA
GetLastError
OpenFileMappingA
FindNextVolumeW
SetTapeParameters
MapViewOfFile
GetConsoleCursorMode
GetThreadTimes
RegisterWaitForInputIdle
EnumDateFormatsExW
LocalSize
LZCopy
ConvertDefaultLocale
GetLastError
GetProcessHeap
SetSystemTime
CreateActCtxW
GetFileAttributesW
GetVolumeInformationA
ReadDirectoryChangesW
VirtualQuery
LoadLibraryA
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetWindowWord
OpenIcon
AnyPopup
GetWindowDC
dMeD$��|�� ���b���x��C��ķs�ch������vn���\:�& >뮃��4T��!c2���,����x�>�uC(�����Nq~*l��p����>����b��p79�5�h��r+*3�p m��D�87@-�����E���5��<���,tB~]]'�5�����Fq6 e8 MM��R��y�78��<g������z�7�l��/v��Dq�P�«�nVI�T"������\�eH~�z.$X�)��b\N�҉����{~���r�r���@}�[�Yi}� 욠�x*��yb��s�@-���m�yIO JxaP9��4���3�X"Jp�>��]�x8WѾ�� ����"S�h����\O � .掏(.Wg�S�>/�4��;f- �h�jj���B�:�ҧM�'��A��_�q�hUD�,�����[�����6�E��MG[��ZDGU�^��꽴#'ƈ����?�\`��FĦ�B0������5���[~WM�� ���� @[��r|�I��%)X뀱g8W+�����G�AU�&��i���I��)7A��y�D�wN��o��FEY�?���3�=Mζ��.iќ��߷���JK����!?Nfެ^��7H"n�M����w��T���0:�Y�=��!�G�O���=^4v����j�������;�����|Q�\�� �p��<�f��=�9,����0�]�V�����dl����j:5 >l�m�;�2����b<��Z6�|����?4�,���_���>\|=*y �&��<�%��bL�u+*`I�"Vb�t���A�UX��<��x��w �,�����̹��W���(����Yj& ����O��7`�ii�]h3t�P~Q3�����,�H�/R�wq|�{`���#�6���}�%�\��e<�t�{� A��h���/�y�0 yVߙ��x%o{byۧ)��>۴�9�;mK?��h�U�a���YLO�����J ��O�ˈV;�JC5Ϝ7���(�"ժ��Ԥ��jY�i����.V�2��8����4��>�=@t����MS�}�+�RqS�{�t���N����(i�Xi T���N٣�#�,^���JV+�9R�T�Ill}$�4�7,+�F�F����h��=��z6�Aק��8�����ne?E��s&�1%���2DjΩ���ԓ,}F�w�1�r*�~�K/��}��ׁǏ���)�J��a�0+AVz�ˬԣ��̄�>L�,u�M9���)C7قa�j�,����4����=6��Dճ��~���0�I��?�ҧWp5�+�xQj�q����g_>jڔ�E-�u�����aϬ|z����e ,ڇ���e�pS���}5T/[����4D�S��o,�*/��U�ʸ+�St��?.u~y�!5X�wC�vBű���tz��ǝ%_;���˂ݖmf�3���������zι��h��Z�ʟ���k�*���uW��<¦��1~A�ȏ\1��#��a �S/Ehfٴ!!,�� Ѥ2Բ M��Ǫ �Qs��z}�%�e��D�(�P���V�b���$&F��PE�?��T:=&D��zZ@�MBQ^w�G=ŋ�<>D����UWh���p_â H닡W��-%�赅��<����Df/[C�c�D�q*n�!G�f�I#/�il`Uffm��oI�);�8�"Ƹ�Li� ��r��&�ׄ5B��]�6Fu.0�ڒ"£��en)��<��PSFYGa��R�{�B�2e�q�y��k6��0LأX���ᾤsX��@�.�����+�=@��e��'9f��v���)���n��������#���0N[�40�d��ݼ�&����_�}�;=f��9��TU��������1W�0~�����A�1��2��y�����I��`E�kk�w�K3��z�mW&�����K���~��ʖZjH���C9`-��cw�{��'F;���Q�ޑY바f��Ϛ�Ax�����T���S=c(��ޭ��\�|���3���h�+5HN���M������ǰIg�`u�QA|3�l�ҊX�,�F)�#��iYP~����E�է��m�NC�<Pbܼ�~������c��:�����(^�`�Ȗ�/�x�g���譆�S�k@��k�2͘�7!t�k�*�*�VTf�Z��v4˼S�F&����tR!��`*z�j3a��Z��<b� �� �����v?����`�Q{�OEIY���^ �|�H�L1������֠a yUtd{��o�6 ��Qf��L���Vs�8�3nh ��l�eԹ�a�}�� �|�_'�m�;X��OO��r�c�y�ɳv$=�T^; Ȓ�e�|y�JFH�Պ������z6�����L2:w�*�h����r�M~�Ѹؚش��=�>o>�u���x��1��~Q�!��¿�d�������Աz=!�1��n⚶��L��>��QX<�QF��`���K��8������8 �)/Tm�%o0�r�T������xB5�J�3tW�v5���PMa}kz����eQ�_�(��S�Q����j��7�,"�L�Ĩ�Ʈx��q$��^��3Y"�����u��������b����⅟������5"���/:w�D�h��;s8���:O��"���7�ۥ�@�O�ү�5j�%�����m��?�4V�๗ �E�G[4Xnx��Ŀ!��|t��}���Ɯύ���L���Ī��ݙ�䄷&����Q�]X��տ�ۄ��ݡ@e��� �V ؏9�nՄ�ޱ�_�H����ρ���n!�� ��y�}�Ym N� �D�?���(�±�!�s�'���a@Pr�6SY��cB�<cs��Uy�>���t4٥9�4XnR>I)�5�o]����3��� '�5oob�["���ԯ�a�z�}��&{|�8�TJ7�wh��ο�m�z� �k�'�]��g��kr�b5���[?�;i��S��q��f�qԍ��h&Z��D�9~P�P^�� N���KrRz�˪m��F�p(����r�x.��s8�ُ�G���s"���˥�%�^Z/.�9:*iܾ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ