Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ba6d78d846fa3453d05c9997da0027054f1c84263edf70683505e83ad1efd9b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ba6d78d846fa3453d05c9997da0027054f1c84263edf70683505e83ad1efd9b8.exe
Resource
win10v2004-20220812-en
Target
ba6d78d846fa3453d05c9997da0027054f1c84263edf70683505e83ad1efd9b8
Size
624KB
MD5
1601403c1fc0c6bc89431fff95731b30
SHA1
b7faca53147a24801dcb8f00d8c5008130688e79
SHA256
ba6d78d846fa3453d05c9997da0027054f1c84263edf70683505e83ad1efd9b8
SHA512
ed71ca15056bb1acd87daaf98bd9ffd3cf4b2f668a3a9508a780b7084413b920c8e71ffb218989af3cbb4a26900d9ee2ee297d762a9ddcaa3d0db19908ec5fc2
SSDEEP
12288:RPnEZjGvyn0I4mTkjmhgqeGrGI2ETTFOr7F8gdybrOV5Y7p2LMc32:9qehgMmGY9pWFnUbiVm232
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
UrlCombineW
StrCSpnW
PathFileExistsA
UrlUnescapeW
PathIsSystemFolderA
PathRenameExtensionA
PathIsURLA
PathCreateFromUrlW
SHRegWriteUSValueA
DllGetVersion
PathSearchAndQualifyW
SHRegGetUSValueA
PathIsDirectoryW
UrlEscapeA
PathIsDirectoryA
PrintDlgExA
GetOpenFileNameW
ChooseColorA
ReplaceTextW
ChooseFontA
CommDlgExtendedError
PrintDlgA
PageSetupDlgW
ReplaceTextA
PrintDlgW
VarR8FromI8
VarI8FromDec
VarMod
VarCyFromDisp
VarI4FromStr
VarI1FromR8
VarI1FromDec
VarBstrCmp
VarCat
VarI2FromUI4
VarR4FromI4
VarDecNeg
VarDateFromCy
SafeArrayCopy
VarI8FromStr
VarUI2FromDate
GetRecordInfoFromTypeInfo
VarDateFromUI4
VarI2FromUI8
GetVarConversionLocaleSetting
DeviceCapabilities
PlayGdiScriptOnPrinterIC
PrinterMessageBoxW
GetJobA
DeletePrinterKeyW
DeleteFormW
DeviceCapabilitiesA
GetDefaultPrinterW
FindClosePrinterChangeNotification
StartPagePrinter
AdvancedDocumentPropertiesW
DEVICECAPABILITIES
Arc
AddFontMemResourceEx
OffsetViewportOrgEx
GetCharWidth32W
VerLanguageNameA
VerFindFileA
GetFileVersionInfoW
WTSLogoffSession
WTSEnumerateServersA
WTSVirtualChannelQuery
WTSShutdownSystem
WTSEnumerateSessionsW
WTSWaitSystemEvent
WTSSetSessionInformationA
WTSRegisterSessionNotification
WTSOpenServerW
WTSFreeMemory
WTSTerminateProcess
WSAStringToAddressA
WSAAsyncGetHostByName
WSAEventSelect
WSAJoinLeaf
getprotobynumber
WSANtohs
ImageList_Remove
CreateToolbarEx
InitCommonControls
DestroyPropertySheetPage
FlatSB_GetScrollInfo
PropertySheetA
ImageList_GetImageRect
ImageList_SetIconSize
CreatePropertySheetPageW
ImageList_SetOverlayImage
ImageList_SetImageCount
ImageList_Destroy
GetLastError
GetLastError
GetVersion
SetCalendarInfoW
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
�w�]�Z�k ���O�O���)%�- ��r��d�oR�=6~��1Iq�O�dѴ���X����%�(Ĭ�-[ K�/b�ך���sA �"�����q*�\��9��[�����T|t.�f��^��Gyme�1%=͓���Q�l.T� )�CS��ډXtDX���]�e�)��A������c�I ��E\=���C �O����>b`s�Y%�|˫��(q��+D��g\�,�M:��*1���&@���ڽ�k���Vqߖ6 s����r���J�o��\���s�Pƭ�윇�Y�]�8:��\����lO��)����C+�Lg�����\����!��<���4�����u�p(odtÃ�Qd}��x�R����ӹ,�C-l��b2�*���'"�{x٪&0ḿw���yϘ��j��e}?B��_"��y���?R��f1���)n,�`��#,�4��8��~����i�5��U��0��$ |���2��#�3]��j�jǖ8``�_�ҨV�]t0c���Wu`f��[�������[�S9��'s����ޟ�B���"�P�5u��ն)Ұ�*Bz�,�R!�,�m]f`�B�W�NR-EL�:*���ٌq�-T��d-��`Gn�&n�6u2�i�Py8+���d��"/ч&��4(R�x�t:��!g�O?������9���L�7���-P�#/G�*,�C�F������%�$Mק���s���DlL�]�����z�'�j{��p �w#�QO �l��ws��m��r`{F��p;���%���QK�B�\ߞcކ����r��x� -�Å�X�+��(�*Rq�7�t+��Q � I#��K�N�i!���C��:Lq@@ !3aٙN�{�6<TM����z$r�&��a} ��8�,��8"��-�Y��$3 5�뎬���<#�dbZ�A��}��i���8ݙ$K�� `2d>��� �~]��@v�hɪ�����qs����=�~���G(A��Y�=k�۪�m �"ψ�I"['��D -�l.� ��Q�&`%�J�����>�#��,�����,���<�H��L��"��_�GSX7?�d�[5�Q����J��Z�3��A����!�1�w��t�L��c��| �?��Rޜc������%Y��^��T�N��ov��L�}��_�Dp},M�Jh��a�3��^�g������d{��U���N�}�E:6�`�`n�����U�<�g��|���4S� �8(�ۯں��iT@��:��,��Rl&��$��C�d3.��+�U&����\DH��� n.��c���h����a��s�]˒5��'Jh�6u�>F�0ߌ"n���}���9�k��jK#��Q�g,�gZ�d:r��N�sl�k�j��A���;��������/�S�3��(�`����As�E�e*[�|��u��6��L�������&6�M_�LuH�v� }ݔ��R���Tp!��Q���i��L�߁��o�|,j%�'E��4Bx�\��o��6��P���TN������ڶ_ ��&��0n�Y� N�H�{��1������u������~�F$Q�z.�t������� 1�l�%�r�#y��5$�@��T�K���.x���4��v��=��2��=���)��|�:�S"�%����pl�5�t>aBC���@���c�y(�۠]~ъ,0�����q�%�o���7�I(\�x��Q 5�+�,n�J\�@!�&��?�OE���~9"��*JZ�8h��C�B#=�iҟ�{`\�(m`�k71�`�`w.�< �3 ��E[}o�[F�7{����}�a�FRgI��Xh�ݓ���d7X��e��)~cR�� .�^O�M5�S����/�N"S+8��ֽ&����#K�'I�[ �p� �7���$�AQ���y׀h�^4t�]�{������K��md�?|�>��E ���L�÷Ix��r�}��[Jf���|;)�G�\ ��)<d�m�h��֏6R�F�!S?�\��C.�U�nA;F��6��4��T[�Z�^�L��n(��z�z4��`�k7��,X�� �����pn��DJ9�ʄζ8��V�R�����K,c4��b(ڶ����:����0?�$��ݍ�䖺�(T;�_��%�L��פ)9���e�گ7�$���#��sZ���P�-M,�%�������� ���#�_�1�Z�@�_�����od$r�.S?r�L;N�r1J!�$�����7�P�������J���D"��W�"W���N��ɲF�~,���ޔ�V{������T�.�L�|�$�m��A�mJ{��v��d ������h� �T$�s����Uy�(�L�?0����r�#�ڝ�}���'ePJՖ��K��@L%��c/N����iYhu�/� ����OB4�"qR����{*���� �����!��5%��CQ����PK�u�٘�Dl�����a�b\,�����מ��{_m![p��CRG���������f�}z�ޕy�~2�ﶋϷHz?g���Z��6#�du�}1<ΛlL5�Fހ��[~l���&�|��a8)G�����nؔ!� ���X|+����q)l�F���8����A?�n]��T�}qS/�̺j�9�:�<�Li!eQ@K�X�u��AWU��N�9T� [���U��#�N��E�d��HڽOݤBitXUv�֚�7ܜ�)��%�p��犊J�O/�%p��d����s��M���q�t�T���֏p��+�͑OZT�먤��>�I<��9!~.�������[RwS䏤���F��iO*�o���::^+�l�8d�7����eZze��n��-�Cs����4w�=�'��`��3�Z<?�˪�`��g�cR��>J���H�HB��jj��k�÷�s�� \����2�7/���+��5F��$YOh@j�)t@�5Qo�c���U[�d FJl�f �X����C�����%�'~�g"Li>�Rt��*h��\�l������z��S_,T'z��,������6�Lt׳'mW��^.��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ