Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
AppleVersions.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
AppleVersions.dll
Resource
win10v2004-20221111-en
Target
AppleVersions.dll
Size
561KB
MD5
6d238863922991b8dffba75edd20daf2
SHA1
9971927663f488b0235dac12e38526ee5bec5697
SHA256
3240e7245447e56acd13cedea9057d4df8049d458c7b41ff5c9d14eebe900c6d
SHA512
9845c566807895b4b39bd796f081cbb33606d13a1631e8f49fbe2ff5996ddc9e5bd3abff3158b3a1976427988c28103d543a6b854ebfaa0bf9091b293698adc5
SSDEEP
12288:TzUTobLOmyBX0iyrdE7dRJX9hsRvITG1YdMakHpq8IRlb:8TobimOXRyrdEF9yy7dMnfIRlb
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=MONGODB\, INC.,O=MONGODB\, INC.,L=New York,ST=New York,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
��`��aP����U�&�I?3���&�i6�=�K3m� �lp��!�;����=��qF�'�{�����-��1��aڌ��J&c�z��E+2�4�[»k������NӋ幖���%��2O��v���Ȍ�����f���N���@��]X�a����Ue��#�4��/���u��1���#�V��E�@jR��D�j��t�<d�-�S�ͧ0j�>{��.ƨ��#��-y�Om���Z_;y,K;�\�␀Z���-.Y�S��Q�dc���=�ć$5�����/B�^~�y���a�T�����-�&�7H�RY9�z�c�B���^V���*�Ý��XX�C��VE{�ba�稷c3��{(Y��ϱ��y� ����{�AV� �k%�8����.�,�f\�\Z�ʆ�ny=��6v��?q���&��(�����@��|��Luf}Q$$�6&zT��Ћ"6���6���O'��f�����y�'���$��;����9�z`����kg�@�Z��b�����> o�pb�H=��j�?�f3�&��Z[/�\[]���p&�䐾�8�k�^4��-6�*��u�~XkR�XgE��E���I/P�R���g���Y�(�հʴ�ZK'��E)�*kNp<�z܇�[�YmGIE9�6S ���t����I�<�^1y_�i6���V��PVE��e8�to��mp�M�5��M*�<&t�9O�����6���Au���@�F�V��Z�a��Z�M�=�j���g|�#+�&:mT3�j�:鳻�A�[pbٙ.h"v ̩�<j��Z���q{F��.|�)~�4?a���5��_������N1IK3\��XQ�b��UzBY�7��Z�;S2)ޮi��筭�6���ߌ5v�#��#u�M{v���yR������ �GC��h�s.��iD�[H�M�%���7/�fz�/>e��k�|X�Q�5�_���uD]�|@G�3�����"`��:�g��4��e���Z�_�$z�V��^k����4h�6ij���!1b��oKˤlۓ���jV��}��g���@#x�e��-}uhǜ�t a���� $|�߄�R�h�Agٖ��g|��U�FeI��e˓ Ⱦ(���:����FDŜ�m�$��u1��<��xx函vJ�c����e"��ޥ_�DȊ����P�-+����:�)c��ူ� �abt��j%�pO�7g���d���n�'p��>!ç̴�P��k�=�.\�B�&�{�6f��g ]\ t�/ +[�Ґ^e�K"�! _9�@2P�!��� ×o�G����Հ���]ȟ����bg|1����yǬM���o�0E�k �7������ ]1%��>4�XJ���X��В��7�qB���c�o�$�:�;/_��j���Zs�,�/�8�������9%x��&f���ۃA����ϼ �@7��������E_T�$�K�|��:(ij�'��+���*���J�4��Ŋþj����j{Gj�cBڿ_��7�{*e���.r��x@P�:\Q�s��䈅��*���Q���� r�.��o�Lz+P�{�a�/����n�ޖ����y���ƀ ��A�����/���R��Ζ��R��?d3�s�.�'�Lߋր�x#aq��h�zz�����K^��td)�t"� s��{ܔ0m���E� ���B��%��^�L����_%QG��r�l0�����]���4G���'ӫ��VV�խ���l����� �����ir������$��j���,����й�l@GN����a!Y�m7��ՀQe�l#|��1 ꌀ�H��U��y��M�p2���l�h�J��5��Nt�Ŷ��8{%\0Ps�R�ɇ�-II9�ǫ�by��(-�k����!O?�~���l/�9�]^}|�F�ELJ��L�� ���Tr���v� $�������FlC� R������@k��� 7W�9����*��eT\g�ȩ�G�Q�������0�g�����B#���<Y�ғ�ܮ���6:0_04M��e5MD]壭=�\�w�U7��||���[ �'T?��z��1*��҄<�ϔ�U:�q�<IũZ�M4�>�L��z|#�I%���c�N�KάYU��f��9eM���M����ó~�o�l �mu�O[�}�+6Wk���� � U#fj��/�� :�GR�ˬ��)�A[��Pc��i���%������|9���:-c�{S���ZP�j+&�u:�� ᕆ����DGp�9�{[�0!-����{�]��Y�X�"~w(� �ܟ�\b'�f�Ӊ(�6�*�H��\ٙ{�H2s����_[�'Y]�0jn� s?�X)�w�N �rԩ� ���5>�u(7���߁�-�Jʡ��eӮAJ�pg1�-yɓ<|�f�k��1�?wyb��MI|��Y��N����N��_�7�8�W�seb�q�yV�{�JnFk����z8>��ލo�<& ^��/V�ы�aA�F��u��V� ���C�+/6�hP��NU�$�2���ۆ�m���'\t,�"G0��q�,�V]�X�>_��]Tp�MC���q�P[�y"�iO��`�q�%I�v�|U��.��C-̛�x����Ok����ǩT������)@���`��ًP$l�wو�w�B�(�A[�n��',�d�҉2�kXu��H��Ii ,*�O�Ӂ"��g(���&�c���9eUi��y�2sC��H]�4�+m��R]L��_�������kQ6�X�=e�p7�v�V8He{���������wZ)�<�"8�c�w.���ۇ7%4��f��v䣅OP����"���6���_(���&����{�'4���+�c,?O?f�fϝ�xHA{�Rq������$������s(0h�Pw��L���܋��Ϟ�>-�f��.��!������~�����ro����#h�n�}�p���}��lD�,9��1��xɸY$m/�w��6�3�����]2���q�����w,ws�^#��9V�J�0��Dh5Ӊg��1�T��Ƶz�-��ߨ�����3���Xؕ��{PR�5%�!�eVXiq�����s���ѣ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ