Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
28efe385b881eb9d68322c0dea3e6d49888187ce2b128dee852938b4197ad3cf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
28efe385b881eb9d68322c0dea3e6d49888187ce2b128dee852938b4197ad3cf.exe
Resource
win10v2004-20220901-en
Target
28efe385b881eb9d68322c0dea3e6d49888187ce2b128dee852938b4197ad3cf
Size
598KB
MD5
11c8d7bdd7e75f320655ae3b118ebc80
SHA1
bdf8de9ecfb64577d91bfda0b2ad1f51c76de5d0
SHA256
28efe385b881eb9d68322c0dea3e6d49888187ce2b128dee852938b4197ad3cf
SHA512
67a7fcd2b1e3b44fa7f144184f08e0dbc5d1552ea617228234ba04269753d78e2fc6af99b5c6c8c05fff84227419a8f250c2ed6e8f4b34090bdc3abd4dddbb4d
SSDEEP
12288:m6hVoBHr2rPAmUOWQs1DpMSKHqll5PUvl61zMr3g:pohEUr1VMs58vl61o3g
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetTabbedTextExtentA
CharPrevW
DestroyCursor
SetClassWord
PostThreadMessageA
DefDlgProcW
EnumDisplaySettingsExA
MenuWindowProcW
GetWindowTextLengthW
GetDlgItemInt
GetClassLongW
LoadCursorFromFileA
AppendMenuA
GetMenuItemID
SetRectEmpty
MessageBoxTimeoutA
GetWindowRgnBox
LoadCursorA
GetActiveWindow
CreateMenu
GetDC
SetDoubleClickTime
KillTimer
DrawStateA
GetProcessWindowStation
DefDlgProcA
IsCharAlphaW
RealChildWindowFromPoint
SetTimer
GetMenuItemInfoW
GetAltTabInfoW
GetTabbedTextExtentW
SetDlgItemTextA
RegisterWindowMessageA
BroadcastSystemMessageExW
RegisterHotKey
FindWindowA
GetNextDlgGroupItem
ShowWindowAsync
CreateIcon
DispatchMessageW
GetThreadDesktop
ShowStartGlass
RegisterDeviceNotificationA
IsHungAppWindow
PrivateExtractIconsA
WindowFromPoint
OemToCharBuffA
IsWindow
LoadBitmapA
ModifyMenuW
GetMenuContextHelpId
IntersectRect
EnableScrollBar
ChangeDisplaySettingsExA
EnableMenuItem
AdjustWindowRect
FlashWindowEx
EnumDisplayMonitors
GetMonitorInfoA
GrayStringW
CharUpperBuffW
GetWindowInfo
RegisterDeviceNotificationW
LoadStringW
GetMenuStringW
LockWorkStation
SetActiveWindow
WaitMessage
GetDCEx
GetUpdateRect
LoadStringA
DrawTextExW
MenuWindowProcA
InsertMenuItemA
GetMenuItemRect
FindNextVolumeW
GetCurrentThread
CreateEventA
LockResource
EnumSystemCodePagesA
CreateTimerQueueTimer
FlushViewOfFile
FreeEnvironmentStringsW
Heap32Next
DeactivateActCtx
SetCommMask
lstrcpy
LZRead
DeleteTimerQueue
QueryDosDeviceA
FindFirstVolumeMountPointW
GetProcessHeaps
WinExec
GlobalAddAtomW
OpenJobObjectA
GetSystemDefaultLCID
TryEnterCriticalSection
FindFirstVolumeA
HeapWalk
SetThreadPriority
lstrcatW
QueryInformationJobObject
HeapCreate
SetHandleCount
EnumLanguageGroupLocalesW
GlobalFix
GetExitCodeThread
GetProcessShutdownParameters
SetSystemTime
FindActCtxSectionGuid
CompareFileTime
RtlUnwind
CommConfigDialogW
LocalFlags
InterlockedIncrement
GlobalAlloc
AllocateUserPhysicalPages
ReadConsoleInputExW
CopyFileExW
ExitThread
GetVolumeInformationA
ReleaseSemaphore
GetPriorityClass
IsValidLocale
SetCommState
WriteFileGather
ReplaceFileW
EnterCriticalSection
GetDiskFreeSpaceExW
HeapCompact
CreateJobObjectW
SetEvent
CreatePipe
SetSystemPowerState
BeginUpdateResourceA
EnumDateFormatsA
RequestDeviceWakeup
GetDiskFreeSpaceA
GetCommModemStatus
GetFileType
GetLongPathNameA
FindAtomW
Heap32First
GetLastError
FreeResource
GetUserDefaultLangID
GetLargestConsoleWindowSize
WaitCommEvent
GetPrivateProfileIntA
GlobalDeleteAtom
VirtualQuery
LoadLibraryA
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
FindTextW
VarCyNeg
GetMetaRgn
GetLogColorSpaceA
GetLogColorSpaceW
VerQueryValueW
VerFindFileA
GetFileVersionInfoSizeW
WSANtohl
FlatSB_SetScrollInfo
UninitializeFlatSB
"E0n/�{'ڹ����b���@�W����x�-��p�o@�j�[ ̩�o�W�tY��)�>��?9��<�ˠֽz:�=7/ޫX�G��Pg�*��<ťL�'�p_s49ț���v�w�=Դ�� ��� �����L���8�'��HT|t_336�B�,�Y�B������?Gm���>��BO���4a���7Mط�cL����Z�%��l�T]��W�����a���������3A�㎖5��?�jKD��*�D%��+.Ɣ=Sv�aeN:��#��J�3���(� [a4�&Ҵ����9r? 5�۞|�|���j(�gGj������_T�=Ov��Հ.���q�""��u�~Y?�8I1L�'�t) ���+b��>��%9C֛F���Պ� ē�v�'�6���TjΪ��w&��z��v�ߠ�Sj�\2oC��kY�Q7�SlǙء��m��l��n�N�I������=�Ի7������I,���ܢ����@4��)J�V*�����ύiD�`�z2r��C\��h ��x���l����n��o����t%'������$��9 ���m�3��J?l �����N,c�};�H��:o)w&�ߑ_�&Ɋ���Ѻ��)��a'��� �����<��_��������(�]d'�v�+�ξH<���@γ���,G7��W�8�3��<��kiz�q��!�|�ڞ٧Z���M�V�c�z?�����?<N��0R�������s|���۟{ɖ�0sP��k�M����gHD@���1�<�'a�_!)A�{j�`�>Q������!! ������)g�ϣ���Z������֜<���؛;@��Z���s��d�� �+>c���F�;U��U�?��X��*j�[7Y�Vlg�s�p��ܘrl�c�����p�np&�}�n�ʺE�O�ُ}� g�����<\g�WmF^���V�� �!�,��=0� ��r����?��������W�cۻ���� 6w��h�� ����ޱ����q,c���h��;r�/Cy��4s_�*���7�Y���$��?�fn����ηh� 5)��y:P��8�N+T�&�Z�����ޞ`� F���Q_�R��#2��_HׄM�l���Gl�m���|��#&�����<��drX�g���E���&�sLt���c[����{���=S����u��VǞ����1;�^�?��b�j�@rlL"�h�����v<���!?�+��|M02��bA��0Y��;i�dx���Jäȸ{Ƹ�Cn8���s�C��4�|�_�訷�!����!���ԿZ��| Pq&T?GI�H%&��G��b�Y80]�19!rj���v�dw�o��Ʌ7��@qA U�J*��ӦfP(�pj.�~��� ;ɋT6�-��a�aOڗp(� }�:��1sq'n�s���|��R�~N�mg �?>�����$�$�K��/��Tuj�^���ps���R������b����#�g�st�^���,����$�@��4�l%��4}��i�]��0=h�.�k�ԿWb��<Ź�-M�:r�\7V�լ~ѵ�J:NJ�>�6���߃��B��ԊƟ{��J���L�(���Dz��]��.���@��� 4X]7��)���}&1A#�ַ477��0ZU�4�\M��+s�wRTV�қg{��X?@��xfޚe�TV�o��J5������`��ZN�:�� 6�C���p��ݻ=\x�B=8�&T�@^��^�m����B굔��e�c�Q98=9P���B��)� ��)+���a��K�{�����c�=��2�c��_R�r��nkI�M�e���`����sEIj�cm���=�=3h�����0jE��/,�����1{7C���5E���Z}��8'���VV�T���B�ut��e>0�����\�"�[�I>�+�x��k�Y�35^���0��� �\+����R��V#��ML=!�@l^��0���i�g��^6���}ބ���2}�>��]{a �2��p����eO#�ɰ*�j����X�!H9�,ڽ��6���[��`��A�����koY�n�/Z�P{u���Ŝ,��a��u*��U�����h���O�'�!�����x��o��4;a�K�a����el� ���|4d�I�$�M�������M蘍ʐ/xs61�J��8<� _`ʊ�e�d)��M���}����;a�|~������9ݵ] l��u����|�����0Y���ޕY#�*|�_�?xt�4�`_`���l�^��Qtls� �HS@f���~㭗�!�կ:�>�CQ����^nQ&��s�M?9��*NG���U%s*s�]��Կ! 0��)���E��-��RMh�!z�,�Ф3q���U0�|�+���H;��;�D�������b`��ŋ��%0�V���$WJ�{� ����df�M�kʷ#�}*&���+��.��L�C�À��@�TdDȣ0�U��3��Q��*n�6�l�&8��@��c���Zg�[]���ı+�eR}�n1�.@*jwz���8�e�fw���P��ݓ'o��=�g�Q���_eEQ��뭻 ηz�8삑b`������➁K��q���ܨc�BY�]7�GŖK�H�$��$W�L�������������r�6��Qփc�6}|XI3B�,�r/�K��|��|b�և�N��Gcmo�5b,!�A�W�����Ǽu$ Q���j1[Uj!�v�}XJ)!�~�n�!��%u�rZN�#�麞��Z-m�뎖�ګ_�_w˒���4���'R�du(��c<���8�`0;�ʷ!�:h2���ZL�����Xw����������̍��Ν(_4uZ���O�78������G�߇�� l�x��'�i��j����&x��XQ�`2�3���T����+���$�1q��<yq��G�^����~�বϫ��,�ev�"���$����|��>��%��{5�;����o���}��7v�����ʴ���D�y���D5Z��PPG�.�\ӧ��WO��P����!�Ք;
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ