Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
af736d539ba4baddbc6c3c1ec40e3347688d9f7870593c7defe4642d23a29bd3.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
af736d539ba4baddbc6c3c1ec40e3347688d9f7870593c7defe4642d23a29bd3.exe
Resource
win10v2004-20220812-en
Target
af736d539ba4baddbc6c3c1ec40e3347688d9f7870593c7defe4642d23a29bd3
Size
615KB
MD5
01d75300b4b371bcea0960475e8d47c0
SHA1
2322f966fda5a5bd333459dc5fd9e1b9eb632a5d
SHA256
af736d539ba4baddbc6c3c1ec40e3347688d9f7870593c7defe4642d23a29bd3
SHA512
fa88bed430dfcbc12f82e28684995b89fbdd236fe116cedddc78f1b549f3267d7674007b9d15f3c4c7dbd321cc7c4c2f91859daa60444251d7a61c515f049ad1
SSDEEP
12288:QeNNUPavW3Eaj2ZkKMbhOBiP42+qB42oMD:QxP6WU8KQhD42+QR
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetClipboardFormatNameA
DrawAnimatedRects
EnumThreadWindows
ModifyMenuA
GetAsyncKeyState
MapVirtualKeyExW
SetWindowsHookA
WaitMessage
DefFrameProcA
GetTabbedTextExtentW
DialogBoxIndirectParamW
CharPrevA
GetWindowWord
SendMessageCallbackA
SetUserObjectInformationA
GetMessageW
ShowOwnedPopups
MenuWindowProcA
CharUpperA
SetLastErrorEx
FillRect
GetClipboardData
SetProcessWindowStation
EnumDesktopWindows
LoadCursorA
wsprintfW
GetParent
LoadCursorW
DefDlgProcA
SetForegroundWindow
GetCapture
LockWorkStation
DrawTextA
TileChildWindows
MapWindowPoints
CloseDesktop
GetDlgItem
GetUserObjectSecurity
InflateRect
CallNextHookEx
ValidateRect
RegisterWindowMessageA
GetDCEx
MenuWindowProcW
GetTopWindow
OpenDesktopA
DragDetect
RegisterClipboardFormatA
PeekMessageW
FlashWindow
SetTimer
IsCharUpperW
CreateIconFromResourceEx
DefDlgProcW
CopyIcon
SetThreadDesktop
RegisterDeviceNotificationA
GetMenuInfo
GetWindowTextLengthA
BroadcastSystemMessageExA
GetClassWord
ShowWindow
CreateCursor
GetMenuStringA
LoadImageA
CharNextW
GetWindowDC
DrawMenuBar
GetSystemMetrics
InsertMenuItemA
EndDialog
TabbedTextOutW
CharUpperW
CharToOemBuffA
OpenIcon
TranslateAcceleratorW
CreateMDIWindowA
SetWindowTextW
DestroyWindow
SetMessageExtraInfo
PostMessageW
GetDC
SetLayeredWindowAttributes
GetComboBoxInfo
CharLowerW
EnumDesktopsW
ArrangeIconicWindows
GetFocus
IsCharAlphaNumericA
CreatePopupMenu
CreateDialogParamW
CopyRect
SetRectEmpty
SetDeskWallpaper
GetCaretPos
PrivateExtractIconsW
MenuItemFromPoint
EndMenu
SetRect
IsWindowVisible
OemToCharA
GetWindowInfo
AppendMenuA
DefWindowProcA
CharLowerA
AnyPopup
GetWindowWord
GetWindowTextW
RemovePropW
TerminateJobObject
VerLanguageNameA
MapViewOfFileEx
DeleteFileA
GetDevicePowerState
GetLastError
GetProcessPriorityBoost
LoadResource
OpenFileMappingW
OpenJobObjectW
SetHandleCount
SignalObjectAndWait
LockResource
WinExec
RequestDeviceWakeup
LocalAlloc
HeapQueryInformation
LocalLock
UnmapViewOfFile
GetModuleHandleExW
DefineDosDeviceW
BuildCommDCBAndTimeoutsW
EraseTape
SetFileAttributesA
SetCriticalSectionSpinCount
EnumSystemCodePagesW
GetShortPathNameW
GetACP
SetPriorityClass
GetDefaultCommConfigW
GetExitCodeProcess
CreateMailslotW
EnumUILanguagesA
MoveFileWithProgressW
WaitNamedPipeA
FillConsoleOutputCharacterA
FindFirstChangeNotificationA
FindVolumeClose
DefineDosDeviceA
FindFirstFileA
GetFileSizeEx
ReplaceFile
SetMailslotInfo
SetCurrentDirectoryA
GetCurrentConsoleFont
ReadConsoleOutputA
InitAtomTable
SetEnvironmentVariableW
DeleteCriticalSection
Heap32ListNext
GetCommandLineW
SetLastConsoleEventActive
SetErrorMode
GetLastError
GetLastError
GetLastError
GetLastError
GetLastError
VirtualQuery
LoadLibraryA
TlsFree
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UrlGetLocationW
ChooseFontA
VarI8FromDisp
VarCyFromUI8
VarCyAbs
StrRStrW
SHEnumerateUnreadMailAccountsW
CheckEscapesW
EngStrokePath
CreateMetaFileW
VerFindFileA
VerInstallFileA
WTSShutdownSystem
WTSWaitSystemEvent
WTSQueryUserToken
WSACancelBlockingCall
WSASetEvent
WSACloseEvent
WSAAsyncGetServByPort
FlatSB_GetScrollRange
ImageList_Copy
5*�ֈ�� 4��:����3�l:cCt��K��co~�J����!��ބ���o��� ��#P"�#�f!�،��zԨ� �]�:W/�r5�B����4���[8�0V�Gv����R���6����x���Asz f4��jIz���jU�F¾�@/+B�+��<��-��P�}?�E����n�yi|�ĭd�=�VxZk����߆���*@M�-8���:j,���%��6@��e��;�'u��$�(ZI���e`�������V���^v3��ү����՟��,��180�`�4Gy0�>�_jI�O��}fY��$va �iopJ��� 4�O,�;��K*bXO0~����\y�Nڔ�A�k�F�F^B����G���mY&#J�OBk{��u&ļ6hop���������(��6��C����g����x^�;\� ���ppt%Q~Ƅ�&z���ٖ���0�����AO[$l$�,R��6k��k���i� �/�;�Vd���,��8{`�[;��dC��g��`!ӏ&�*���g��$����jO>C��H�'���A�=y��u�>���t-g+Dk�nX��rsfT3C(I3�qԕ_iW<��|��ʴ|Eב��*�@�+kV���j<��8���4��Ш�m��%NU�U��*7�qE$�@�7�fO�6L~���5�Mx�j����N,e*All=����}�ؽ�׆Ɠ6�`�~cT��¯O�(�P��O�R���\lmi�LtJ��V����Nb0��"RϸZ��ӯ�[ ��5���'�,�p��W9�B�����k�KR��r�a�:��hz�eZ�弱-٫�Q���k6\�� ��u��2�D>���uN4IJ�|�6��5�M�� s�7Ҳ��m(F���X60�⎃�B�2�D�p��j�~Ƒ� ?dj�p\��(�������E�;up6�B j��1��z!N�m�7Vv͒����i������*@�i2T7�x.F�����׆��N�[�\��ࣺ N���fe(�g��5/uL<�0�*��:�w�n�0��]J�����@s;v=�����k����!KMߌ�d6G+�9s\�O!�@P9[ ��������!������n��7o!�s�SP��fN���F�u���κ��ff/�]�5���&q���k_�u��#�]ڛW-ۀs<9�����3[_���� =��snB��='��=6Á=��k5c����k�R�J�*�����T��։6$؞����� H��|;fA��ܰ��a��������\4.�~��Zo�96�lv"%a�RY�����hþ_��l�2��i���7I�[}H�z��@$���Me2!X���f>r��XތY�ɣ%�P�?��e- �m?;N14�;(����������}qSPg1L��^A�6 � %�� GK���墧T���3�e�ϰ� �Nֻ�gn� �i�PE�������4-f���Zsթw����y{�!;�zu��!6�����H�w[��]���M�����Kt8Mdb:�?�ͼ�Fnhx����DY=Y�fr�4f�8(V�3�z�Є����J'[�ܐ�8��1C�_��^f��b:~�A y2��F�4jB� �M]�^Ϯ%�?��~a�5p�R����]�&�:����K}IG��?o�p���E���Y�c���>`(K2���4��-�A�4�u�l���z���t�|=�U��Ja5,U��'"0;&yXK`Н\������F&�s���a�k���"Np�M�~���$w�������Y��<_KYQc��\�r��Fn���u�7~���Z�:>���F�c��%�j����a��;N�}?V:Y���#]䥪��e}�x� �j��)5-���3��� (�A��[�X2(:�����PJ�������Ͷz�ᇱ�K��ؒ���3A&�s�T��fz��#���pމVX���&WzXPE`��ӏ����n��`�ˡ9�W�x<b�,B�b�5�S����$Vv���Ӫ嘺���k� ����J��0����V��! '��PL�����ݺ��X��y��]0ITB?�K�D?�*����K����dN�P���j�ğ��Ш��nl���N��rnIy�`PM��;�]�!�+�� ��'�>�p�v�P��q�8W�5S�7������7j���ݩǑǤ��_#́4�tm%��a����y�wN�{y���1'����`��B��}�Bp��z���tT#Hv��g�t.@�ټ,Y��O8���{Sc�HBR ��]�~Re�1����4�'���u}�V���� ih�O&ηU^8`UsO:0y��D���'D)�z�:��ۧ��a�����B�"�O�Rsu���f>M������+�ő �2�,�k]�1q�n5���d3on����@|�T��5��Z��g�����kȽ���� j����6�+��Yw�yj�|�����\��t���� ˤ�p7F9�����D*f�Ӽ��q���@))�q���$L>z������B�]1����_��!A���u��o���9�P�{�"^�6�����3�nR��������ۍ��_Q�s֧�鄒?ؗ1�v�O��e[���E��c�H�$ ����)KCC��Wڇ�y2|!���n��[/CTi�<&���s ��[~��F�&�N�$�l�J�}���X@�s?�ѣ��;�'{�t��eG�٪�Mܘ }e��]��֭:�H��,�����.<_DtO�͑�j���/���h�$"օ3f{@Zl6鍷�m0��n�"���<��!����!PO��ܖ8/:��ID���q��'��a�R��ɉ�. ����5������B�+�/cgy�TH��XYۗa�R���)xH>k��:M��*�\��P:|�&\�5�|+�s^�j�BZQ~K̲���%C2���AwZ+oa�iB�t�9g��2��;��^;�XJMJ��ɚ(��u��G�g�5�����!��z���� ��je��À�y2ee��:�(�`q�JV�I�Ɋ��L<G�uZ�8���q.0�8.1�������Q=�<����>/!�(��(
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ