Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
d7761e428d4d5c195a7f0b3c3f4190d30b80932cc750a7031f0821ffce1c8b46.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d7761e428d4d5c195a7f0b3c3f4190d30b80932cc750a7031f0821ffce1c8b46.exe
Resource
win10v2004-20220812-en
Target
d7761e428d4d5c195a7f0b3c3f4190d30b80932cc750a7031f0821ffce1c8b46
Size
723KB
MD5
0c1be7eae4ad8b5b1e5f908b06bfade0
SHA1
ea1735cb6ad11e106e7c83b1391434fb23d0f2d8
SHA256
d7761e428d4d5c195a7f0b3c3f4190d30b80932cc750a7031f0821ffce1c8b46
SHA512
e75e500409e65c7f67427a770ca899d8e0b89b03d3757e8c071330adeba0baf21f0accff481152a3a937e143b05e53ccefa1cf3e2ce50f1f5bbab7a1d9825022
SSDEEP
12288:nDCErgg5FOkIOOzvB7pMILJrgTLlmbNnBhah02:nGygCFOdOQpmI1yLlm9U02
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
UpdateWindow
WaitForInputIdle
GetClassInfoExA
ValidateRect
GetAltTabInfoA
CharLowerA
InsertMenuA
SetPropW
CharPrevExA
SetMessageExtraInfo
SetPropA
FrameRect
GetProgmanWindow
IsDialogMessageW
SendDlgItemMessageA
EnumDisplayMonitors
GetMenuState
MapVirtualKeyW
ClipCursor
GetMenuInfo
OpenIcon
MapDialogRect
PeekMessageA
BroadcastSystemMessageW
DialogBoxIndirectParamA
OemKeyScan
IsDialogMessage
CharToOemA
SetFocus
EndTask
CreatePopupMenu
SetForegroundWindow
EnableWindow
CopyIcon
SetClassLongA
SetMenuDefaultItem
ModifyMenuA
CreateDialogIndirectParamW
DispatchMessageA
LoadIconA
ArrangeIconicWindows
CreateDialogParamW
DestroyAcceleratorTable
GetFocus
RegisterWindowMessageW
DrawIconEx
DlgDirListA
IsWindowUnicode
GetWindowLongA
GetMonitorInfoW
GetWindowTextA
GetLastInputInfo
RedrawWindow
DefWindowProcA
GetShellWindow
GetWindowModuleFileNameW
LoadStringW
GetKeyboardLayout
GetInputState
AppendMenuW
GetDlgItem
CascadeWindows
EnumPropsExW
AnyPopup
GetSysColorBrush
TabbedTextOutA
MonitorFromRect
ScreenToClient
OffsetRect
SetWindowPlacement
DispatchMessageW
ShowCursor
GetDlgCtrlID
CreateMDIWindowW
SetWindowsHookExA
GetDC
SetClassLongW
PaintDesktop
ExitWindowsEx
GetUpdateRgn
GetWindowDC
RegisterClassA
ShowWindow
DrawIcon
ShowStartGlass
RegisterClipboardFormatA
SetWindowRgn
FindWindowExA
SetClipboardViewer
MapVirtualKeyExW
SetWindowsHookA
GetKeyboardLayoutNameW
FindWindowA
UnregisterDeviceNotification
AdjustWindowRect
SystemParametersInfoA
IsRectEmpty
GetMessageExtraInfo
GetPropA
GetWindowModuleFileNameA
FindWindowExW
FlashWindow
GetDCEx
SwitchDesktop
GetWindowWord
GetMenuBarInfo
ChangeDisplaySettingsA
GetDialogBaseUnits
GetScrollRange
BlockInput
ChildWindowFromPointEx
LoadBitmapW
MenuWindowProcA
SetDlgItemTextA
OpenWindowStationW
ReleaseCapture
SetWindowTextW
GetMessageA
SendMessageTimeoutA
EnumPropsA
IsDlgButtonChecked
EnumDisplaySettingsExW
GetComboBoxInfo
EndPaint
GetKeyState
InsertMenuW
CreateDialogParamA
ToAsciiEx
PostThreadMessageA
ChangeMenuA
GetClassNameW
MessageBoxIndirectW
GetClassInfoW
RegisterClassW
OpenDesktopA
ChangeDisplaySettingsW
DefDlgProcW
PeekMessageW
GetGuiResources
ShowScrollBar
HideCaret
GetWindowRect
GetClassInfoExW
SetParent
SendDlgItemMessageW
GetMenuItemInfoW
RegisterDeviceNotificationA
BeginPaint
EnumDesktopsA
GetClipboardFormatNameA
DestroyMenu
GetAltTabInfoW
ValidateRgn
SetSystemCursor
WinHelpA
CreateCaret
GetKeyNameTextA
GetCursor
SetDlgItemInt
ChangeMenuW
CreateCursor
GetDesktopWindow
wsprintfA
EnumPropsW
GetWindowThreadProcessId
CascadeChildWindows
GetInternalWindowPos
CharUpperA
KillTimer
LoadCursorFromFileA
GetScrollInfo
ActivateKeyboardLayout
WindowFromPoint
SetLayeredWindowAttributes
GrayStringA
AlignRects
PtInRect
RegisterClassExW
CharLowerBuffW
LoadBitmapA
EnumDesktopsW
SetWindowPos
SetWindowWord
CallMsgFilterW
GetMenuContextHelpId
LockWorkStation
LockWindowUpdate
GetMenuContextHelpId
RestoreLastError
SetInformationJobObject
CloseProfileUserMapping
FindVolumeClose
GetCPInfo
FindFirstChangeNotificationW
GetShortPathNameA
GetConsoleCharType
EnumSystemLanguageGroupsW
GetFileSizeEx
LZCloseFile
HeapReAlloc
GetStartupInfoA
MulDiv
GetDevicePowerState
SearchPathW
LocalUnlock
BackupSeek
SetCriticalSectionSpinCount
OpenFileMappingA
VirtualFreeEx
ReplaceFileW
CancelDeviceWakeupRequest
EndUpdateResourceW
GetSystemTimeAsFileTime
CreateTimerQueue
SetSystemPowerState
GetCommState
EnumUILanguagesA
FindAtomA
ReadConsoleOutputCharacterW
SetPriorityClass
IsDBCSLeadByteEx
GetTapeStatus
WriteFile
GetConsoleOutputCP
lstrlenW
DeleteCriticalSection
QueryPerformanceCounter
FoldStringW
GetLongPathNameW
AttachConsole
GetTempPathW
GetNamedPipeHandleStateW
GetDiskFreeSpaceExA
EnumLanguageGroupLocalesW
CopyFileExW
FlushFileBuffers
GetPrivateProfileSectionW
GetVolumeNameForVolumeMountPointW
OpenMutexA
DefineDosDeviceW
SetCalendarInfoA
GetPrivateProfileSectionA
RegisterWaitForSingleObject
GetLocaleInfoA
OpenWaitableTimerW
GlobalFree
GlobalGetAtomNameA
VirtualLock
GetDateFormatW
FindVolumeMountPointClose
MoveFileWithProgressA
TzSpecificLocalTimeToSystemTime
GetCPInfoExW
GlobalLock
Heap32ListFirst
SetProcessPriorityBoost
GetCurrentDirectoryA
AllocConsole
ReadConsoleOutputW
GetProcessVersion
FlushViewOfFile
RaiseException
GetConsoleCursorMode
LCMapStringW
VerLanguageNameA
SetTimeZoneInformation
SetCommBreak
ReadConsoleInputA
IsBadHugeReadPtr
QueryActCtxW
RtlCaptureStackBackTrace
FindFirstChangeNotificationA
GetLargestConsoleWindowSize
DeleteFileW
InterlockedDecrement
SetCommConfig
GetComputerNameExW
GetCurrentThreadId
GetLogicalDriveStringsA
WriteProfileStringA
GetThreadPriority
TlsSetValue
ReadConsoleOutputA
WriteConsoleOutputW
GetProcessIoCounters
MoveFileExA
SetProcessWorkingSetSize
lstrcmpA
GlobalUnlock
ReadConsoleInputExW
GetDefaultCommConfigA
BeginUpdateResourceW
TerminateThread
MoveFileWithProgressW
GetConsoleAliasesA
GlobalFindAtomW
FindCloseChangeNotification
WriteProfileSectionW
ReadFile
DebugBreak
IsBadWritePtr
VerifyConsoleIoHandle
EnumCalendarInfoExA
GetDiskFreeSpaceW
LocalHandle
WriteFileGather
GetModuleHandleA
GetEnvironmentStringsW
FreeUserPhysicalPages
GetHandleContext
GetModuleHandleExW
lstrcmp
OpenJobObjectW
GetCurrencyFormatW
EnumDateFormatsW
EnumDateFormatsA
HeapQueryInformation
GetUserDefaultLCID
LoadResource
CreateEventW
MoveFileExW
CreateFileW
GetTickCount
UnlockFileEx
GetFileInformationByHandle
LZOpenFileA
LZStart
LockFileEx
GetEnvironmentVariableW
GetEnvironmentStringsA
GetBinaryTypeA
SetUnhandledExceptionFilter
DnsHostnameToComputerNameW
HeapValidate
GetShortPathNameW
InitializeCriticalSection
CreateActCtxA
SetVolumeMountPointW
RtlZeroMemory
SetCalendarInfoW
FindFirstFileA
CreateJobObjectW
lstrcpynW
WriteConsoleInputW
WideCharToMultiByte
UpdateResourceA
BackupWrite
GetConsoleTitleW
SetStdHandle
GetLocaleInfoW
GetConsoleProcessList
DosPathToSessionPathW
GetFullPathNameA
GetVersionExW
SearchPathA
GetFileAttributesExA
FindClose
HeapWalk
DeleteTimerQueueEx
BackupRead
GetNativeSystemInfo
FindNextVolumeMountPointA
WriteTapemark
GetConsoleFontInfo
FreeConsole
CopyFileExA
GetProfileIntW
GetDateFormatA
UpdateResourceW
LocalCompact
GetCommandLineW
GetTapeParameters
SetFileAttributesA
OpenSemaphoreW
LCMapStringA
GetUserGeoID
HeapCompact
DisableThreadLibraryCalls
GetNumberOfConsoleFonts
WaitForMultipleObjectsEx
InvalidateConsoleDIBits
GetSystemDefaultLCID
ExpandEnvironmentStringsW
IsWow64Process
QueryMemoryResourceNotification
CompareStringA
ReadDirectoryChangesW
IsDBCSLeadByte
lstrcatW
GetCalendarInfoW
GetConsoleInputExeNameA
GetDriveTypeW
GetStringTypeW
lstrlenA
CreateActCtxW
EnumSystemCodePagesA
IsBadStringPtrA
GlobalMemoryStatus
FindNextFileA
RemoveDirectoryW
WriteConsoleInputA
GetCurrentThreadId
GetVersion
WriteConsoleOutputCharacterA
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PathRelativePathToW
SHDeleteKeyW
SHRegDeleteEmptyUSKeyW
UrlCombineA
UrlIsA
SHRegEnumUSValueW
UrlEscapeW
UrlEscapeA
StrFormatByteSizeW
PathIsRootA
StrCmpIW
PathIsUNCW
SHQueryInfoKeyA
PathIsRootW
IntlStrEqWorkerW
DllGetVersion
SHLoadIndirectString
SHRegGetBoolUSValueW
PathRemoveExtensionW
PathParseIconLocationW
GetSaveFileNameA
WantArrows
dwOKSubclass
dwLBSubclass
ReplaceTextW
GetFileTitleW
GetFileTitleA
PageSetupDlgW
ChooseFontA
PrintDlgA
LPSAFEARRAY_UserFree
DosDateTimeToVariantTime
VarUI1FromDisp
VariantCopy
GetPrinterDriverW
DEVICECAPABILITIES
PrinterProperties
DeleteMonitorA
StartDocPrinterW
CommitSpoolData
ExtDeviceMode
SetPrinterW
QueryColorProfile
SetPrinterDataExA
DeletePrinterKeyW
DeletePrinterDataExA
ClearBitmapAttributes
GdiConvertBitmapV5
EngStretchBlt
CreateFontA
EngPlgBlt
GetNearestPaletteIndex
EngCreateClip
GetCurrentObject
GetBrushAttributes
GdiEndDocEMF
GdiGetLocalBrush
Chord
CloseMetaFile
EngFindResource
ExtTextOutA
GdiPlayScript
FrameRgn
EngUnicodeToMultiByteN
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
VerInstallFileA
VerQueryValueA
VerFindFileA
VerLanguageNameA
WSAGetLastError
setsockopt
getaddrinfo
recv
WSALookupServiceBeginW
WSALookupServiceEnd
ImageList_DrawEx
ImageList_LoadImageA
MenuHelp
LBItemFromPt
ImageList_DragShowNolock
DrawStatusTextA
DestroyPropertySheetPage
ImageList_GetImageInfo
CreateToolbar
DrawStatusTextW
CreatePropertySheetPage
ImageList_ReplaceIcon
GetMUILanguage
:���-}O,���F2�1��up��I�����w����@b�Z2���V���g�{d~ȇ����9�/����!���c���B�r��f�-��b�(3���)�XJ��E���LD'���W%���{XO���rM����p�2x���,�P'~����_���-1����Dr�#L�=g�XK�S����{Ú[V��Nr,��D/r�$D����0���b��H�&�<�N+�vl\�����v�˘3C[���/T�|�*J��p����C�0#��g><2�*<˧��(W��4RJ��W�ئ����LM�cwrY��hø%�i�/� g=IuTz^���ʟ�^N��Ӣ�d�O8/K�����q3z��4E����d�eB�Rh]���B7|�����;���^uߠA��t�Pz!҄閁���} +��ׂ p**X�u/�IǏ�6*�$�"PImU���h�1�K/u(q(�v�Ȋu ��*���(zTt��b� ���ދ� !���W�p/�2�V��1�B�ԯ�o`E�^�������w.4Hӊ訙 ��~�6�"�`��e��Q6'�⦵R�io���p�A�Aa�_\Ե���iT�Z���-��.�'�I���]<���x�E���>-��̓�$�'��mn��Ґ�j���)w1'���z� �!�������h�K>s �д| $F�����P���v�I�� �?��SBW��k��^<��H��Tq����b�B�+�|H����,O����`��+�K@q!���� D�����D����h�¿Z}G�r��I�@��5(+Y�r/�Z�*\��$Ꜵ��3�-����N��P�L�`���of^zc���M7<�E��P3/ ��&��`!=X�"< �;��8W!T���_��1rp��=���o�X�����p����_y�zp-�^���)���>��+�������K?�ϸ��'�� ˱�[��n0�4]�p� +X�!*{.B�p�^ORZ$O��bI��Y�Pg�����$�r�!>zqC,�h��7�N�3h2���>t���MW����F�<�=�<OP�h����Y������ls e*f�4�\��x~��Q�t?q|�4�ϱ.J�dž�� ��>,��Y>���%I?ǻ�e����8�4d{�Y�i����.Nk*�Z����z<^Ϙ�(\|�[�d���ւ��� R��j�5��/��q�Qօ�7קuK<5��G���%�hk�L]D���b5GA���.j��a���Bx������HjI�GQ����}١���*��erj�l���h~��m ���.|8BFA?�Kv��j����K߮u��:D������/�d�&�& �$>m��,����J߈�F�E�T}�����z���;(įe=M��?aX��$��?3l���l4� �j�9� ��h-θ<��P�P��i,6I J�*%�z��LY������Ak;kf���\��Oe��6Q�PÆ��G}�� 4M%��Hwl�j���7�b,�HOt%�R��W�s��$ ��W�W��A��f�Sdi�i�T]5tt׆A�R�=&1$9��W��Ev��*c�A9%����5%�A��.|�H�_�^�QhnC߆��;��Y%��m�����/��v����^n�ȞG>�+�Ӡ���T���/_*��i��� �ښoER��n�fN��L���wEA��#�& {U��Q�z5H$�����H�"�=���pᾧ[k�.��U��]�ؽ��F�����B�1Rq����OT�G����=|�����L��]��g|�t$o����n�Y<c�\ ���'�kb��#}�\� �XΈt��:;x��P�<���)���E��Cĕ�2[����e`�(�f�� �a����ş���5�٢� P�z� 6j>V�ڲߑf�hAw��շV�Q��M���Ћ�(��3>�����Fs��;ʏ������I���t�� Xs,�r���)e;��`d��W�=���o_'T�����=eѐ`��M�5���9��_�|���'�c�l�*/�3Qc�5�!��Ft�ʇ�W���\�rP Bg'+��#��,�s�h�6F�y��T�Jz�����m�l�n��X���5�%\\��u�M+3���ѳS�~����>��������W:p�|5�+S�oB]ꂣ1Dw��ݩ~�6MQR�5���w��\�N�w�1��y~�O�X]�)�[W��V�3�FH�̓X� 5�[�rS�s#����2Ҫh����G��ÁR���٣���/ ���@�m���� �F� cqGd�RK(�WN�0�b���ҽ�O��2}�F�>@m��/�^�b%A.5���.{�x��}�df"��+*:�N�����Ə��i���]?��A���8���}G`i\o�e���[C��q9�� 1��5���O;����0\�����%Upd�y�8.�l,�҈f�U^e��� f== ��E7�"s��|�i� ����9۱�'�2����E��d2� � x~^|�>7�8#�u��.Ea$���3ςj�ݒ�k}�D86y���͏��mJ�:�k�9��S��ʊ.t��&�5����e�\��� %[������s*�C� e�pq.e!���-�[nI���eh�ؖ���>#ib�o�ͤ�I�7���m 䉸z��I@����)X�gyB��3_{����ƿq�xK��d��Q�\B/�ZTL(�@Ϝ($�@y) �˃|r��ŷK-?c�[�����gF�C��?v�W��W���B��� B���?���߁�kRЎh >��0^tc���J*�L�R�����kQ��m��2�K��ntQ"+�Q�Ru۸c�j���z���S?q����C�X��� ��"�gP4�^�=x�eX��陔��v�N�6�9���a�&o����y�Q�;��rݤ��腹���0���N&��+1Ϡ���:��f.6�fX�KrNw�}W�\X��<��Mx,��E��ݻ�����t/̈́y�E=oa��V��]/8���Ƌo4/�tk���V�� ��������g��R����i)�����H=���6��.�㻲W>f
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ