Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
nixware.exe
Resource
win10v2004-20230220-en
Target
nixware.exe
Size
9.7MB
MD5
9130eecb51bd8c14a2f6599a96c769b8
SHA1
9d5d8404f82296619b23552a89330f4af2b29bfe
SHA256
c4204074ecc45b3cc0ace4b71c91b759798890c0e2ff639f61559523cda118e3
SHA512
476c3f5bcc186fa6346b884b736664da6be33d9e471a3845bbc8bac1ba89212bffd724e5e4a9599648f25a528b70f85a382b5d8611552c6d3fe3101af9a7eb11
SSDEEP
196608:WCqR7LmDqccJ3glcqEJ7sJ3vko6CctQp39QQ8NoaG+qgGYv:WR7Lm+cOh7sJsh+/QUG
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
OpenProcessToken
CoUninitialize
GetLastError
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
CloseClipboard
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
SHDeleteKeyW
ImmGetContext
RtlUnwindEx
WTSSendMessageW
�R����C�w �-�}6�6=> ��[}��?]������d�-�*�h��U��=�MD8�m˯vO�4��Xg�|�bT�Df0[2���`�τ0y�67r�WRka�a������rĈ$����9_M�c6��5aу���L4�VN�� l���}L�U}\�b����P`~�g�B����V�=�О�+Qm���ܦ�=��f�8���lN��CVX�C����n�F�p���3c.�$�p����E��F�ʎ��ϸ���|���"M�o��Jݘcf)���s�5grC���!"�������&�dP*sD~�� �����8�ç5h��lbo_4QK�GX+����֭�l�H�������|��$��l�Ua��*6��-N@B�ٕFN��%��"�8I&h���ʳr�`r�BҖ� �2��+�y��Έ �rJQF�j��\�H�?��po����K�|�yp�Yx�L��q��/؟�8����aI�y��(��E4�W2�.a`���<b[�>C�ߩ�@4��� E�tU��ژWR����,_�$���f`�=n{�Ў. �2�E���{.�X-� i`���� ���C�+�&����3$��7�>p���w��`�j^q�Eq˂"~v�r�M��z����C��9B���$�,t߹�!���*S���}\ߛ�HL��9�����=����9�oڒ|ܯ)��7c=�w�蚞�G}���C@M��*0QB<�1�S��S��b"g-�A��A�g`�[�Kdn�U8��� ������t�m�̇R��^�����٧�@ �w�K�-��MT2~�L�J���,E.)p��>�$��F��ڲ2���F��Z���L���ղ�qo��U�{m�bj#r�E���n��f�1��V7�-���s��A�� ��_�O��x,1�4��c-`��Fo 8���"Dô�iI#�Nj?hC@���ψ4��?̔8�p�A�p�i3�ʃ�ţ8�ߴ��I?$�����O42�d7���ܐ;�4~��)s%� #^���50PĐ�1��v�w\q�"�l� y!�w�g�8:anR.�M�z7��Bg_�y料*h��~�Ъ��,=N���u�Ą��w��+�WG� G\~�l�X<��l���6�&i�X�3:u���?�p��&L�Ɛ���W0Ƴ�Ļ<i��m p�}�#���WXAj�a�Gbꑯ�03������X��<-�� ��cev�XRx��j��Q%��-��3��C>�a�+��i4�%X�D��z�ʛ�k.,y��:�nh嗂�����T*�wN��������9�,�x��~N�7�6��*�c���� ��ngTH1��/���8$�*���&4���1$�3�{��~"ic��f�=;���VI�?���^�T`a��y#($�����L�݅����I`��M� � �R/�l�5Y$��J��A�I~�[E�X!C��I��8�5���s�5��ы�Q��1~�������S�'�k���pE!.�m�4��p!��s�}z��1 �K�6�v��bsUun�Z���w��wX܌�`��A���^�����^ˤ��ܾЈ�&�/%ҲD�=�n����Q�O��%�����Ӑ�O���q+���W�i�2��a�k;���2�9��_�!_�;G��\X#�<�k�z��'JW����T�s^�T��� m�Ux��c��~��$�a�w�B��h'P%�����_�Ӊ�����K�A�z���Y�JE<�F@%��M+6n!��3*��08ŕ2�����8�_)��c���n�J�M=�{dzM5�3�8�7���0V:}ͥ���U[߫P4����nNmdcVjmN�?�dZ>��ڮ(�10!���yа�3NIʜ\�/��:.5)��G|Ͱ��%���"��o.?ԁ]۽����d��&G2e����p0���* җ����h��F���J�h��Qj 9��v�^;7c88�7�}Kd�UQF8�D>>��]}�g\�+z�/��fĪ��s3٘Q�6r=��ds��t��3�Q������6���� �9���K<�����u���srE�}�N4�i���+�2(�мn����<�<a��w�h[��*�ޫ��(��t^A��:B</8EN�S/Q���_A�G�埞�� ˊ.�djْ��@ 1�i�L�GE P��F�4�pէd6B��`��Bt{�TLB��T��|m�(���c�۳1���긘E Mx�`��F�מed2w0uk1Hw��K�"��fz��St�x�L�g���8K6x�f�W�n1_���ṷ���?����F�d��"n�N8�h6�2�L"Ya��YK���Cݿq�6<�օ��\���W�F䲣rSzTn�%�i���|bμ���qI�Yq��_��%<c� ��1\��|Z�k��d�2�B�RO��H-ċ�ƴ߬!�7`��b�H.o�`����$����>�i�D :�� �!�(�$��ƛ�h�%��7�nMNu(oLgQ�?�W(�� ذ�����ؤ/��P��#����%�do)����L���;T���.1����C����5p���V�m�4�N<��j^�z�S�Yc�O.B����M�bL�+Nȟ1Ʒ�M2�j@" ��/��K����Ev� �D$Ld�����؞���3D��T��L��m�fk���<w���з)�:n�{�Cu-�54=4&거�*�+WG����~"�U� J��Vԧ�ЪZ��q�M�yS�e�� ު���K��$�tE��kK�-�e⽧cJnJ�߀c4(�y�K���9�zHg>��*�Й8Z��}�sZF*oc<��h�TjK�nixF**?0��Hp��>;�r����[˓Fз�٬�R3J|T�P�!)��ː\��!�=ȷ�gY��(D��"Lq�^��q{�\��䡸#9)�l���r�6%��im�{6<�-�o2����2��-ۙ�'�X���,3�j���"L|~�]���{���A%��O������"�V$%�Ƙ��Ǡ��ۼ�n�hs�|0���VW<��y)��m ��1�`K�n�x���5�Ǘ��@ʴ|�<�O;6�Av�9q��<)�44E`H$\�G��5
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ