Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
3f7a09f86bc92a9e778379ca47479b123983d189e2c7602271cfaf5f1d68c3f5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3f7a09f86bc92a9e778379ca47479b123983d189e2c7602271cfaf5f1d68c3f5.exe
Resource
win10v2004-20220812-en
Target
3f7a09f86bc92a9e778379ca47479b123983d189e2c7602271cfaf5f1d68c3f5
Size
610KB
MD5
0efaf4b0e5fbdbf21e6568da332bee50
SHA1
387c57cd6090d512d9ea087818df64cc7eefeea1
SHA256
3f7a09f86bc92a9e778379ca47479b123983d189e2c7602271cfaf5f1d68c3f5
SHA512
274edb6aa19d21df94e90f8f9ff5f4f8f8b1ce83588b73e5764b06480d2ac984acfb6e903e3dd8aa2a6726951fd5c56571bfecc326fb0d3cd47300240badcb93
SSDEEP
12288:1sa92U1zmb2D9p77CBvJB9cw4EVwdZjZ6+TaQ/eQT8KTMY:6eCaHedh4NjI+T5eLKf
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetTapeParameters
VerifyVersionInfoA
FindFirstVolumeW
LZOpenFileA
ConvertDefaultLocale
GetConsoleTitleW
SetUserGeoID
SetFileApisToOEM
LZCreateFileW
GetThreadSelectorEntry
IsBadHugeWritePtr
GlobalAlloc
GetOEMCP
GlobalMemoryStatus
CreatePipe
ReleaseActCtx
FindNextVolumeMountPointW
LoadResource
VirtualQuery
EnumSystemGeoID
CreateEventW
CreateMemoryResourceNotification
AddConsoleAliasA
FatalExit
GetProcessVersion
FileTimeToLocalFileTime
WritePrivateProfileStringA
ConsoleMenuControl
GetProcessShutdownParameters
GetFullPathNameA
EnumResourceNamesA
BuildCommDCBAndTimeoutsA
ReadConsoleA
RequestDeviceWakeup
GetTempPathW
MoveFileExA
SetPriorityClass
GetProcessAffinityMask
FindNextVolumeA
SetThreadContext
GetACP
GetLastError
ConvertDefaultLocale
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SafeArraySetIID
VarR8FromI2
ConvertUnicodeDevModeToAnsiDevmode
DeviceCapabilities
SetBrushAttributes
EnumICMProfilesA
VerFindFileW
getprotobynumber
WSAAsyncGetProtoByNumber
WSACreateEvent
GetEffectiveClientRect
DrawInsert
SetCaretPos
GetWindowTextW
AnyPopup
>@M͵!�\�:ӆj��_d��l���b�����4�3A!ؖ��*uj8�H�f��%W �k`��9��{tL��L�F��^(_���31,Ȝ��-T��sh? �f_� ��B��˖�x2H8��HC��P�B������,ug;�opMN������xDz�n�����@Gr}+�v�H7H\�X��?s>�i�� �i\q�����-��h嗌�u�_b\��]BG�P��U���t���&mj�S; ;qup��n*O��x��zo�_W�mS�ΐ��A�e���2p+<y�i�ml���3���K�#$�����y!=�f�q7����8:�;��5�<M9[�PoԮp���T͐�aKtf �O<�.�^@�Te=�����x�I�4�?��{霕$�! ˽���Y������dP�ѲGNrܕ�� Z�� ^�6�/|���Q�m�A�X��F���ur��Z$~{�l[�ZjA�U��{�������$���'��+>w�am�����\��#�'P:l�GW���{bV2@mH���q�<O9Q� zp0��J�K���y�������D����xh��`&V�j\욚�'m<�9����hb)���n�inT�.eu�E�����U��Eq�EB+��ĜX��̈�1J�2�1���eiV��j��N�'ê��ck�[cu�^[gċ/:2�������NѺ�ckV���O�1��O�ʜV�9��$��8Ce�����s�O%�K�����̗�b�Q"�v"�����\J�<��(������[��`W�|��n��pVc��wB6���w� X#����i�����p6��j�_�w�s�|4{�� <�oK&���d�}�d�mO�q���؋��JW�*c�3�������\T��.~2d�?U6�h�U�˘����9?��C}ߠ�(����������᱘���5�d���沵:���+�ä�*��|���!b�k3�rE�u�j��`iog�',����L�C��������v@q7˶R�YE%�<L����U|�gl�j,g�$�n&��w��p�p�:D��z[�ٴ�#$��H$r�!y[i�F�����U�(r�ha2%�=wX[,��0f6�-�������p~I��Ab�feJ�A���i )� �~�z}�X�����2"��L���,�G�.���RA ��d��N90%�q&3ۋD�#�Mz�,*�$qϡh�i-���h��9�) "n>��@`��9�G�$ϙAːy�2���L�-���O�H�C��!k����::��yx{�`k�XWvoaHL�B�\m��lnt.�K`�5����FU�7��V�8+v%�In^s�g̛F (ŀ�I�2b�6X��)�4�#�EG�q�2�}�,��˪��}:�ζ:�<r�dDk�8������H�ց����9���gRE�?*p ������ ��1m�r�� ��m�Kd%[�"] v����!�ɻ%���EAin;��w�[�r��X#�&����eڼ�Y%Є�mGF��z�G������hZ��*M���Yo�� $JȖ;�"1����v{�#�@�n�w���=JP��5F���vm7c�28ʓWt�縇P7��ʤv�A�l�C���-a9}JA�Aq��G�N�+�� �^?U3�M7i.��� �PM"��c��.Ȯb+� � p 7�j�������}����_���3�gU�A!]�W���Z����X�g�$�I=�#m8�P�ϳ�TO���phӌ����+M#*BB+FF��C8p����>$Áo�"�Z�jΪy�����cm?#:t�/F�*̊:�� � ��ݕO�>8�P@͑�mq1�uO� 곮lK#�������/X0_�{͍�I���0�$6��������|ZHJ� ��4����;2�-j�OЇ�n�}�v�f������G)$�TD����]�����¦E�tI�/�8���"��}�Q��#�N)��P��{Z�Y���Ű_x�]�\�"�Qx�o7S!$F�B: ����r��v�SuD��kn��� ���!�����+����{��89j&��KΓ�n�fA�U\�Aڀ����P�s šj7~W0�`4C�!qO:�_ {[�_8fƍ�?��'j��"2�h$�)���Ϻ?�Dr�~}�J���0kj�s꼁$��s�}ܼ��J�Vn�7��;3=�eʑ�m1B�Z2��>_�h�:Ѣs�ZC�1�o�D̵�_D��^ �z8%{N���9�\�� ��_LR �_0��כKU�ѥ�[� ��+^{Bb�;0���O��z�HG��f<zej>�t!�f�52}�E� ^����N y����5⌖(a�����WCT����ύ�n��e��������m�/>S����d�8ۭ"����V)��q8�* �#��I ���S���Wѝ��4�Mnˁ�kEm ��3�WF�i�����8T<MҙV�:V��{i�(��&�=���M�;����� ou/+��dtC�������`�fSX�g��w��1Ava��"�O|`� +J���«�A�8�X��n�X��b,^�نO�2D�oY*�|o�(_J���e�J�t��]r)ڗ�Vh�jh�w�� `L0���۫B˚S�� +8���W��s��H�0��G���\��,��>�-�Z� ��u��M��ӕ��%^��L�&%s�9#����цq��*5UX��$6�T��vk3��MJ�۰�rG5��!��C�ϫ�����N�������9�*X��!�k�������l,�t��\"q�6ϛQ�ZԆ��jS��Yb�B�c�#�>à�� �Jk�� FT ���� 0�D�?�ȿ�Ǣnׅ�kQ���!N,��u/-����k J������Ӹ��\g9�'Y�r�/�� �#G�y�')p�v��r�e�QVv�p�,�"�G�T0��j}h<��0p\�I����tJ�tbq�p [ 02�ߕ/�B�� �}7|�q��,�k���j~�U;gA�� ��*�Ev�e�s?萙�=�#{�li��S������*�Kl�~ ��M��댛s���b(����2o�f��ʷW48 �p;�F�%x��}���!ǹ��dY�|
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ