Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
e5af4ba37023537d11cdb003956f2d91c5c980500175ed2e8d09e8097719083f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e5af4ba37023537d11cdb003956f2d91c5c980500175ed2e8d09e8097719083f.exe
Resource
win10v2004-20220812-en
Target
e5af4ba37023537d11cdb003956f2d91c5c980500175ed2e8d09e8097719083f
Size
92KB
MD5
68dbd32820432599e2f8408101af043c
SHA1
52ad6a7c0df1958a0c6b3bcf1b53345ad8f7d2ee
SHA256
e5af4ba37023537d11cdb003956f2d91c5c980500175ed2e8d09e8097719083f
SHA512
a6b7e22718bc2889be395b7569875d3491f02c29fd24fcbe46173511e5eba90b40228a42a61dfa29d6378da4345498dcb9190a1ca1b171ae0dacdcb256036ce9
SSDEEP
1536:4O0TXh4GzNex5sazHbIqqn+wcsQM5mNKSufjbZ6MLOQIm/O2gdrXpkO9azFSoWhy:7MGZnRVq//W4vSnmmX539GFBWh3i
ExtKeyUsageCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
GetThreadLocale
GetStartupInfoA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
ExitProcess
CreateThread
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
lstrcmpiA
WriteProcessMemory
WriteFile
WinExec
WaitForSingleObject
VirtualQueryEx
VirtualProtectEx
VirtualFree
VirtualAlloc
UnmapViewOfFile
TerminateProcess
Sleep
SizeofResource
SetThreadContext
SetFilePointer
SetFileAttributesA
SetEndOfFile
ResumeThread
ReadProcessMemory
ReadFile
OpenProcess
OpenMutexA
MapViewOfFile
LockResource
LocalFree
LoadResource
LoadLibraryA
GlobalUnlock
GlobalReAlloc
GlobalHandle
GlobalLock
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetVersionExA
GetThreadContext
GetTempPathA
GetSystemDirectoryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLogicalDrives
GetLastError
GetFileSize
GetFileAttributesA
GetDriveTypeA
GetCurrentProcessId
GetCurrentProcess
FreeResource
FreeLibrary
FindResourceA
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitProcess
DeleteFileA
CreateProcessA
CreateMutexA
CreateFileA
CopyFileA
CloseHandle
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
GetKeyboardType
MessageBoxA
CharNextA
TranslateMessage
ShowWindow
SetTimer
SendMessageA
PostMessageA
PeekMessageA
GetWindowTextA
GetWindow
GetForegroundWindow
GetClassNameA
FindWindowExA
FindWindowA
DispatchMessageA
MessageBoxA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegSaveKeyA
RegRestoreKeyA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
SetSecurityInfo
SetEntriesInAclA
GetSecurityInfo
StartServiceA
QueryServiceStatus
OpenServiceA
OpenSCManagerA
ControlService
CloseServiceHandle
SysFreeString
WNetCancelConnectionA
WNetAddConnection2A
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpSendRequestA
HttpQueryInfoA
HttpOpenRequestA
ShellExecuteA
WSACleanup
WSAStartup
gethostname
gethostbyname
socket
inet_ntoa
inet_addr
htons
connect
closesocket
�T�����t�|�0��G�8���M�O�ߚb ��>)|���D�Z��<��֒�i�6##s�/NT�!�z0aQ�i�I�*����1J$�N�/�S<�MR��'�����*j��6�~<�%�4�~�iI���X5���r4���7�a}� y<ZK�@�B��c��e���gN��\oH����|�.�7��($�F����>�g�ypٓq��hz��=��Ϡ�#am*~`P4��2�]�Q�^�Y��WbR!�jk+�L���q��j��TP���ƙ@�;Z@}Wq��g ��l�j��Tv:���Ľ�G!�A��Ȗ2w�5�/��U��V' �P-،Ni���}���d����5�+J*i���B_�wFH�@C2[�Nbu�8)�z�R>�j|�9��2���kX<��QXh�@����� �w�,q<5E��6�b����n����IcJ Z}���d���מ�zʫ�.ª����������KRPRH��� ѫ��&^���?@��P�Q���,s�)T0�8�2�f^es�����*�����N: ��S �怠r�e�v�x�`%����d�7�i˵���=�vRunN��U� ��J��2Hf'��D�o�m)\ �WU��G��I�k�}��.��ձ��p�T;��vrW�}m��)����e�_���!5�'��UN�H��,��xZDy���#�&���1R�@����Z��$F1�ïū� �g0Lb���ٛa���z�b�ܝ��%Ouq�Zm�R|+����zo�BEM���������c���� �[��Q ���D���&'�!RA�WA��}�!0:t��?�����W���^�8�>��#v� 1Ta�=#뮹���$p_}��J+�`�aϔ3)�z�n����6Ѯn=P�JY�:O2.����˄۞PY5�S3aV|w�@�~����x��]/�]MV@i���� �~h�9��Y7��:v�A���$�4G�G����������_*W����6��ي>o�$g��o����+Rz�� ȫ����m�i��D����9.�V�.� �ؑe�M)}��YXk��Q��AX�h�BQ|�����|����<�SaSx��Q92��b[ Oeߛ�J��[����ͤ�4͈�������Ұ\��z�I+B��iX^�Ⱦ�P���G/e��r��quX���d�%-a,�(G�9�-�+a�;6]��>q��ǁ�0ޏI14�*�����{�:{!��_+�^�� �*:��E{'�zK����պ�q$�5�Y�eɰ��R���^�4�>��z�8���sn����=+q�<Kh���9,�y["�U�I��/�҂A)����Yڕ�ƶW��5E$5쐵}ϝ�ɟA4k�1���.�Jasb�Z��������S�g���W|������06���Gdle��f������֘����̯�ߪ,@���휹>��%v���Qn��t[�����v�Oꊍܲ�=��3�G�c�,��4Qf����VL��cfHNR�9-�K��_ǩ��x-لf[��:�p~#��d`s������G��v��%�-�������H`���O��r���Ђщ�|acw���P=?e{]��G��ɷa���&U\���O�3��Ȇ���PtB^{�Yi�~;+��~�n�J�� Q�_Q��Q��_mrx��<�j�qZ��5�&h��C������3�|;Q���ɝI��R� W>V�N�� I�C�@e������Z��,��e� ?� ��lN��aĭ���(�sv�,�6�m�~5-;�t��2��M߸��|\�Lȟ�&|+o���5�'IM:��5AsP@�E��iU���Ig��!�����h�����宦,�i/0�(��&=�t�{�! �1C,4�>�7%ÏZ:�dE��n��b�;�>O~u��P�-�j0F 7���X�]g@���=f�?,�G"�ZU��]�\`�ߜ��<g�9����#�� �^�|�����֎4]����T�SØm��i�Yn�����P��<�Z��FoFj��-��6\?��ӱS��-�,����^��(L��'�}ߡA/���@s֒~�@5�'�/�V��o`c+������ǓY��F�%��G��d�P���`M� z���E�h��}� ^���P(�bf��QA5U�5��&�H�T!$�Ѝ�-}%�Dx�?��D0'#k�������j�� ��i����UR 95-�w4�g��XrQ�� �r?������*�K_Fv�:�R�nW����Lq��p�~�Tz�믌�j�h�����6\>K���H� �M幵�(������zZެ@R���X2��� %���#p�2wR����m��^9j�B��t���P��H�$H͐Q G2�S��h"DS r����P��S'��U�Y�5"i��y�95W�,���n��M�*����7�n��c���|��+Fh��\$��i��>LQ���:U-�3^�z7 ��֨��$1:�FW���g��x�J�-e���Q���/}pW��aP@�l� �b��G�;ee)���@�1 <�[_��l���SҊ�����.��!����7^'�e�:�5�b�,D�%��t�Ii=���h%�)��%�*@�-A�Hnb����osO��p��B>�,�#������V��U���}�Vj��Ӓ ?���4���'���H�n�'�}J�\��T�2������iPc*��������_��WE_k$5\��k$�M�u-R^�0#�bp���|��9 �]Nu G�8����ds�Cc v�x�e%��;� GI;���&��^Y]���������a3�����5�6��P�������N�����Ps.�ލ��]l�S?��WCl}�� i"J_L�( m�]��� ��� �h�M�%Tq�;ط�'�V���|�c�"����\)[�����7�-n��*�Z����c��Q>� a�;4�ڳn[�E��K�8�NL ��R���y�p>��r�A�e:�{{ �1�ڔ�Y��8n����pj����4�2���))�QYK~ ���ud�'�: X �����ݶ�-
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE