Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
0106dca360aaa611c5c5f0ac38484c08beeaa17b9ff20f8f72ae3c966129b571.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0106dca360aaa611c5c5f0ac38484c08beeaa17b9ff20f8f72ae3c966129b571.exe
Resource
win10v2004-20220901-en
Target
0106dca360aaa611c5c5f0ac38484c08beeaa17b9ff20f8f72ae3c966129b571
Size
738KB
MD5
8ed7db3d40885e237ed62cba400f831f
SHA1
21288efa0abe07089c84d8c62577a535c596562d
SHA256
0106dca360aaa611c5c5f0ac38484c08beeaa17b9ff20f8f72ae3c966129b571
SHA512
1e99daa3fb41d369ec76a3a0dadb6ff7c6a27798710a7cc0df810230c7a039dd5e69d7b7f688d07f60c11df6a8c1af5decd004c933b66c8065e13ddd960f298e
SSDEEP
12288:Inm1TSJaHTcKC5GjVqgufSpXVdGmzQJBBBcjd0W:XGIHTcHIqpKpXvG3Ajd0W
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
MonikerRelativePathTo
HICON_UserFree
CreateClassMoniker
HPALETTE_UserFree
WriteFmtUserTypeStg
IsValidIid
CoAllowSetForegroundWindow
HWND_UserSize
CoEnableCallCancellation
CoInitializeEx
UrlIsA
ColorAdjustLuma
DllGetVersion
StrRetToStrW
IntlStrEqWorkerA
AssocQueryStringByKeyW
SHEnumValueW
wnsprintfW
PathCompactPathA
PathRemoveBlanksA
SHRegOpenUSKeyA
PathIsSameRootW
SHOpenRegStreamA
SHSetValueW
PathCompactPathExA
StrFormatByteSize64A
SHRegEnumUSValueW
PathRenameExtensionW
SHRegQueryUSValueA
SHDeleteKeyA
ChooseFontW
PrintDlgExW
VarR8FromCy
DllGetClassObject
OleCreatePictureIndirect
VarUI1FromUI2
VarI4FromDate
VarI2FromDisp
VarDecFromI4
VarFormatDateTime
BstrFromVector
SysReAllocStringLen
VariantInit
VarI2FromI4
SafeArraySetIID
VarUI2FromDate
VarBstrFromI2
VarCyFromUI4
VarDateFromUdate
VarAnd
VARIANT_UserMarshal
VarUI1FromUI8
VarI1FromUI4
VarDecFromR4
SHAppBarMessage
DragQueryFileAorW
ShellAboutA
StrRStrW
OpenAs_RunDLLW
SHGetDataFromIDListW
DllCanUnloadNow
SHGetIconOverlayIndexW
FindExecutableA
SHCreateDirectoryExW
PrintersGetCommand_RunDLLW
SHEnumerateUnreadMailAccountsW
StrCmpNIA
EnumServicesStatusExW
UninstallApplication
GetTrusteeTypeA
EngAssociateSurface
DeleteDC
CreatePolygonRgn
PolyBezierTo
GdiConsoleTextOut
GetFontResourceInfoW
WTSEnumerateProcessesA
WTSSetSessionInformationA
WTSSendMessageA
WTSFreeMemory
WTSSendMessageW
WTSQuerySessionInformationA
WTSVirtualChannelWrite
WTSWaitSystemEvent
WTSVirtualChannelPurgeOutput
WTSEnumerateServersA
WTSOpenServerW
WTSDisconnectSession
ImageList_GetImageRect
CreateStatusWindowA
InitCommonControlsEx
ImageList_SetDragCursorImage
GetEffectiveClientRect
ImageList_LoadImageW
ImageList_Copy
CreatePropertySheetPageW
InitializeFlatSB
FlatSB_GetScrollProp
ImageList_SetBkColor
CreatePropertySheetPage
PropertySheetW
DestroyPropertySheetPage
ImageList_GetImageCount
ImageList_DragShowNolock
ImageList_ReplaceIcon
ImageList_AddIcon
GetCurrentThread
GetACP
LZCopy
OpenJobObjectA
LZRead
LoadResource
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
AnyPopup
SetWindowsHookExW
�(&jM�-)Q�?J���:Nzϲ��9�@�$�IN�U��s��d�ɜ�ol���56` �����N-������G��M_Я� ���k�6F�Z;N�>B�M��ps���YP)�H�c�0�����&���an(���M8.���a���K�������l�l�cy���*�m�G��5�ᢙF���J���HE��,RaP!�+���� w[���N��� �mR�y $���R���c�{�;S?�v,��-��W��L9Y�po��R�2�Md��D�I�)B�y-g��#r{�,=8�b)�`�ie�}��� �T�EҲ��KO ����H.���wYƤ+�r��DQ�JL�'(�����Y�5�æ�g͆E�#�����E�B]��|��@���r���&2���p�*=��s��=������� &R�[��������lܣ'&Ǡ0���z��C���a5s�kj��D�O����L���ʖ˓go�}��a���'���F�j�������xSb��O<�?l�ޤ ӽ��T�V�_��}�a_W�9�uŞF��}���Mb�y��歋����u ��%�6�/� ��<��E%H�r�zRk�6H������+�'��`%����4L�-���z|F)���W����������!?�� ���z�0�5m7����� n �{���꽞T;bכ�ͅ�>���t�~���~�q?Xt�����1"o � AO����"��6�!�|Og���u�m�k��K�e� h2d��|��^�p�w��U�{c���re���3�DF�{�2���b�p�Jγ?����w7�O jr��3sx�}j�~rz���=u��9�2Mo�a��j�hR��Q��7#���F,�αh-��+�|KW)�K^8:z�e.u���6Eq�����T�)�<�<;����ϭ�i}4*����q"��L0b?R�C�F+G�)�{!$��(�:�Eq��-��k�� ��G�SΙ��%�3�i�&�S_b���Z?�1��c�[6ony�eժ�x ��J6L�TsyΕ�Ӫ}�� ��U{���+���jF!�یH��A�������o�]i�{��\!��ir���VX���=v<b��#�y��U�ŰA֑��=1�Kf�3���V}"ī��t$NJ8�;�q��h���)�-y�) ��WԾ��|HUb�����&��,��M�HG��d�+J�� I&��A�!���r4\aw��N�Г��y���ƀv���4?8��R�j�:�&����M�ܦ��G�ƒa[}���ԝXW���T�6[���6�զd������N��E`��e�������v����?CJ#�� �E<�}\��>����M�_�t�����������_6�w ���u��C�Zv+����"kZSEF<"_��?{���.��l�0VA���9���ް�1Lq7a���ǟ3��^=?5�������Y���^$)v�"���m8ץ�-0,�戼�YN�;��zr�m�Zg�%�Yo���&��d�j�DER�ͪ�Sd&�Ux�����S�4����KM���L������o��Wl�L�}bA� �(cE�Ys��o2�,Z���Tt�~��-�a��횖���H1�G���H �4$�;�|�k��UM��P+���X����~���$�O����s�87lX&D���1�Gv=O��?b���U�q�:@=J쁃<�'��v�<Fl����:��c$2$/4�V�_� ��9�@�e�<i♢�m�w���j��Z�n��:M���*w���.%�K������S� =gE$ɲ�pp[v@��!��n4:�d����ÚO ��a��?�mTq�Z�&�����U�j(��C�1������, ���xX�~���{�?�x5�+����/��� ��d��ۤ� g�kU��>=�R�+��i� N�d�_v���2�|�镁0�:�b�q[-ҢμQK��߭�Q,ɉTJ �Wǝ�����swꃝu��nSPg�����%���z�D$J~��1 ѮfYH�ʶe0��7.e��R�O:O3�U��4��K����U�G�2�nub5����B�l�ҭ���PA�������^yꮎQ��2[�*��;��~Cc�O;G57�ɼ��W+SbS�)E*�\?mc�wKR���Z�נ��]v�.�#ݞh�_r��_L3���fg��Z �Y5���gL�Z��3A_��~"�ܓ4��T�5���.��T��{w-"�l�)��JuR<Le�{���˜WY�ܣn�� ����)H�h��9F�j��)W �JP��n�z�8�2�����P���c�gf:��,xjC��A�_�8Vp����<��{����@��V*)��|�F�ž�������i��̈qj�c�����ش��"K���w�K���/=i�(�{�|�����>�%�፠��)�vH��*1��k��BH����j���oDV�W뒗�Wȧ��Y3��t3��M_Jo2�U�O������7]f�L�p���ų0,'͎��s��W�(G�^p���?*��{�Ѵ���q�� �~91T�WG��x��(�H��H~� '1������Q��6� ��[ޗY>WN��gi��EL��gfK&��[��/`��h!����v�_�9�O�O�ouaC0�,U�>��g�1ڵg�>W�q��� ��$����I� (��͞�>xz�8�%��$z����JQM��� �m�:ɧ'��<r��3zq��l�F������9�ʥ�)?�jw�9��ZD��&)��m�c,2��y@��+~�k�'d��/�6H�)�%���h Y&J}�.Cy�Ǐ��jM���yf��e���v��XƠ�<e\��ke��rA�2Ԣ`U��T��_�Av<V���S\����z�z���:���X5�$/����5���,���}d���r��*G�9�����@�{X��'�~'��5��Z���YK9p�Yi[G#*��.F�矲X!Js>�IM*�rv5A�@�Mg!�;�L�XŹH��|���h@y��3�/��|�pw-�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ