Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
02b12d78147254d60981ac1035d8ca2edcda9bfb3632a5276e695efcb061ea47.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
02b12d78147254d60981ac1035d8ca2edcda9bfb3632a5276e695efcb061ea47.exe
Resource
win10v2004-20220812-en
Target
02b12d78147254d60981ac1035d8ca2edcda9bfb3632a5276e695efcb061ea47
Size
605KB
MD5
1e5d193b6f645ef9302a2d06f7b86ef0
SHA1
dd404dbac3cf37a54734f7c1ebaced9629e3e38a
SHA256
02b12d78147254d60981ac1035d8ca2edcda9bfb3632a5276e695efcb061ea47
SHA512
58a0fb8cd5b30aedb0b9568ff509dd3edc108ed7aaedf2e1a9e27f8f2a8a904bf8cfd3e6ace0a7d88ad35fa7fd1a948bcea37af422daddcf9f0a19251ae659df
SSDEEP
12288:kv2xQE/CDTE2I/Zj31uDu9S7+UrXXO1Dtu3Mi50OCUQ2PgMU:s8cDw2I/lg7xjGDtcMimOttP0
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
RealChildWindowFromPoint
HideCaret
GetDlgCtrlID
TrackMouseEvent
SetForegroundWindow
IsCharAlphaNumericA
SetWindowsHookW
ShowCaret
FindWindowExA
GetScrollInfo
RealGetWindowClassW
ClipCursor
DispatchMessageW
GetWindowModuleFileNameA
GetClassInfoExA
CascadeWindows
GetDialogBaseUnits
GetNextDlgGroupItem
GetPropA
SetActiveWindow
IsIconic
SwitchDesktop
OpenClipboard
UnregisterClassW
SetLayeredWindowAttributes
BroadcastSystemMessageExW
SendMessageA
DrawTextA
InsertMenuItemW
WinHelpA
LoadImageA
LoadCursorA
GetScrollPos
EnumPropsA
GetScrollBarInfo
GetKeyboardLayoutNameW
EnumWindowStationsW
RegisterDeviceNotificationW
FindWindowA
GetShellWindow
LoadBitmapA
UnregisterHotKey
SendMessageCallbackA
wsprintfW
GetSubMenu
ShowStartGlass
GetKeyboardState
InsertMenuItemA
IsHungAppWindow
ReleaseDC
RegisterClassW
SetCursor
GetAsyncKeyState
TranslateMessage
SendNotifyMessageA
GetWindowTextW
OpenDesktopW
EnableMenuItem
RegisterClassExA
DrawCaptionTempA
PostMessageA
CreateIconFromResourceEx
DrawCaptionTempW
MapDialogRect
IsGUIThread
DefDlgProcA
ArrangeIconicWindows
GetInternalWindowPos
IsWindowUnicode
AppendMenuA
EnableWindow
LoadMenuW
CharLowerBuffA
UnhookWindowsHook
MonitorFromPoint
DrawAnimatedRects
RegisterDeviceNotificationA
GetWindowRgnBox
GetMenuItemRect
GetClipboardData
SendMessageTimeoutW
GrayStringW
SetTimer
UpdateLayeredWindow
ReleaseCapture
EmptyClipboard
OemKeyScan
GetMenuDefaultItem
SubtractRect
GetClassNameW
GetWindowInfo
SetWindowsHookA
SetProgmanWindow
GetLastActivePopup
SetWindowPos
SetCaretPos
GetWindowWord
GetWindowTextW
SetInternalWindowPos
UnmapViewOfFile
GetExitCodeProcess
GetExpandedNameW
ReadFile
HeapLock
ReadConsoleA
SetCommState
BuildCommDCBA
SetTimeZoneInformation
GetLocaleInfoW
UnregisterWait
IsDBCSLeadByteEx
GetExpandedNameA
TransactNamedPipe
FindFirstVolumeA
CopyFileExW
FileTimeToSystemTime
FreeLibraryAndExitThread
GetStdHandle
GetNamedPipeInfo
EnumResourceTypesA
ReplaceFileW
DisconnectNamedPipe
FindVolumeMountPointClose
GetNumberFormatA
WriteProfileStringW
FindActCtxSectionStringA
VirtualFreeEx
GetCalendarInfoW
IsValidCodePage
GetShortPathNameA
WriteConsoleInputA
GlobalSize
FreeConsole
GetEnvironmentStringsA
EnumDateFormatsA
GetConsoleKeyboardLayoutNameW
ReplaceFileA
GetVolumePathNameA
GetProcessHeap
GetLastError
ConvertDefaultLocale
GetVersion
WaitNamedPipeA
GetConsoleMode
VirtualQuery
LoadLibraryA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CoSetCancelObject
GetFileTitleW
GetFileTitleA
GetSaveFileNameW
VarBoolFromI1
VarFormatPercent
VarI1FromI2
GetNamedSecurityInfoExA
ElfRegisterEventSourceW
DeleteDC
SetBoundsRect
GetHFONT
SetArcDirection
ImageList_GetImageCount
DestroyPropertySheetPage
v*9�o���t �Z=�����t�m���L{?���`�,<��w3a[1j�>�9�DjW�A���^��>�1���'�õ� �OD�?C�҂�IK�9�lt�W�0��R8�N(�E� v����~j�#�kt�1�p���{����z]�zK�٭��>Kc���Gg����'~�]feΫ�'�����-6�]����랄�5{ʌ?��)K��(t�������-����uj����� ���&��*��ȩnM��H��[� � $l�I������):?S�y��Df��^�_x]e\mR���$A�}�L�&Q�hz��h�>)1k!�K�hBFɏEi�U�V�^�g�b>��(sܙ��I$�b���g�baA���[L���J�Փ[Ug�`n(�������3u(� ����K����X���� -���2�^�6���.��t6E"��\�M��L�kT�o)YPg��X?�ڧ���q�$�cl������]L@�%4$���b�M)���C��y���B%���B,!��zv_9���NN�ݟ�tM*��˰�Q���%4�)K���͏ʄ�9Mя�� ���pm8v$�I�y����[�I�ʴ<��v�8�Z�m���*d��/Ui���/_�j� D� R^�"����4�IWmf��*����G'��%_�4�EpM�����"�`�gC�-H������䷞�� ��i� u7��A��J�MsYecb��~a�ǚHE��}�ng�`lIX��vHD�5b�s�Z��6�,Y<U�=�."'�Ә�pi��(���HM*��T�沰<�l��-�r���L���t���8�᫃U� М�d@�O�Ր���?�ҏQ;��=� ĤC �Hŋ{���\ۄT�,��avղK�|�h��c�+��P�'�����C`��k#�}ҋ?�=UG���0�m�sf(.���gtk3����ɏ�����m�"����Y��䝳�Ǟy�41��uZݜ ��G�)y�^�j��ih=!�N*j�=�n_��u˰�I�H�J�ZD�z��S4����6g_�ȇDW �-�%�Blg�9_A����a��h��곞/�]Rb�aԚ���؎D��e����{�#���v�8��{~�"R-k�կX�C M �G��c�_������pHO�ի�y7��Kϕ���U�h)p����I�KF��v4������\�)���\��Gv�z~8h��=�������� ��D (ˈ��Jv6�?/ܛ���������+����g_��b�xpD���9Z��]��$t m�[���;�3�]��m� �)��\��&i�g���#����6{�*� 7ppE�lj�$9�`��������||�9��(�/�����R.Ŝ�5��#����4ԞZ����Ί3�g�L��m��W��2�U�̝���3ؕ��ED_�Ƈ�e@����U��˸��ٿ������#���L �;���wLڇ�Ö�a����!��@T��}`��#H/zT�R�uů��t��X���,��#dK���ZKSj����z1w�D� ���P����1�K�����M��������^��7*h.��1bӤ$/�����E��#a�d{̃ �J�����`�YCy����C>Xi�ԵjF�#�J��FI ��%AV��W����Jz2+io4��)�#`<4G�ЀPL����V��o��C&n��2�%�\�U(�,Z���_�kg�-|�c�+�{�UȰ6��M�2�L!�� ���z��3iW���&��C\�D3�j?4�V��J�9��Ց1�_eA{��C(j���7�T\��8%�/��H� %���a��D�'1] �˰k%lUI6��iQ$*}�E2���ٹ0 ��c@�\�z�o��&��Za�<�������l�M�'f��p���,�1~�t��v3���x=���>V$��3�emd�xu��$�RI����f��S�s���c��p�Y����tؐ��v6��PC'�)���?M 3���+���@ �#�o�GCFtv�A0Q�j]����xN���Qt����)�E���7�D8�RaP��DmI4�\YE A}�FKေD����|+�� *�M��A��Z�>�n��wݫ"���cU��[�a�4o��a��|y�{�M�)jt���9'ȋ�ݱ�qBX$Xc�u�c���w'�ƞ�c�]m�ddH4{�����<5��l*/ x��T�ϰ���h8���W4 m���_��[ �f���� vǃ ��=_�U�;}Ϫ�7c[L���oʷJ�bN������b3��B�� �� I+f�̢3�}Y��:�+vR:�vՁ�O���p�*�|9+�N�g>��N7����z�[c@U��NepQr��&�����3-��|�dcԴ{��P�^e��U�C�Y_�4����@�)��l!I)�F��/�� �52�oiT�*�Л�(I��b@��ȭ���ɢ[.��h�+S�(�`{��娧{�s�s��%T-guB8[��A2:��N����1�1]�+�^�������A�>@�ɭ��frJ�n�Q�_�{��"�� �糁"��&n�����Y�p�$��O�)��*�}4l;��+���R�rB���w?��e��:��x��_U�b�=Tn�a���y��[6zx�n��p�o�R���(Q6Q��������ͷ�i�{��;Fɀ;x��0� "���J��{M�;����o��z�1Q���#��t�3������8vmu��oW�0>�.��}Y�~���\�9p�)Qu��ׁ�1�tym�[RW�3���4[x��J�_�����L���՛�2"�AR�pQg[s���#~-�����]���K���;��'���y�#�"9��l.�d5�H��zG�$��qI�ׅ'�c�NX[xx�B�P�I�s~��Bp��� ��K����ʀ̹���D�5��t5��PHa���f`%�8�@S�U���K���%kVĺ�ar��`��(a� K��]Ͽ�(:�M�\�u�N[=���I����A�s��*&u˅�.�ގ��"���C4~z ��`���U��/��!p qM
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ