Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
123.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
123.dll
Resource
win10-20230220-en
Target
123.dll
Size
562KB
MD5
3eab0f17ad9751a1d5926104b7a120c0
SHA1
1ca09aa07e3f048cc0533967faef3a30cad3a1a1
SHA256
5a88563c27cfd2354ba1bc90cb01538e299de3d65571989837c83d12738faa05
SHA512
652b52dbba76bf56db13f5f51f885b8ab45c7fa1df436382bc3f98ebf859d68ea638f2ca09e9e1372c709238f708872c0c4956a2cd2cbee4c5d6b738a3a34126
SSDEEP
12288:MrcWVGKh9i0yTR4nsQ0+zFZ9/wD0bpATNw5PPwwyuoRaV8f:M3GsWensQ0AZ9YD0bpAKP/yuDK
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetVersionExA
GetVersion
ConnectNamedPipe
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetClipboardData
SelectObject
LockServiceDatabase
SHGetFolderPathA
CoCreateInstance
WSACleanup
PathStripPathA
DnsFlushResolverCache
LsaEnumerateLogonSessions
GetModuleBaseNameA
WTSQuerySessionInformationA
CreateEnvironmentBlock
VerQueryValueA
Install
LoadPerfCounterTextStringsW
PerfectWorld
ProxyDll
ServiceMain
UnloadPerfCounterTextStringsW
W����T��HR�uw�.�0�~������?�Rg�/�����4�`�&�X���H�)�K� �Me��,�����x��� ��������^�Wf�U��2���1s؞Ty�GS�)� �7'g2FQ��ƻ��F����*|�N�9�����!`�4������|���Oۻ�bK]� t9�&K���ۤ�H�OD�i�nz��R͞�<�^�&��Ô] .� �gd�~1��[�yst}':x6cB� ���G���ߛ�xl�,6�)�F��ҋ���^7�Na�7$�S�[���7�/�i_c�jȄM~K_�i�o#p,�J'WOd����o���� �����J[�j��?�צ1��ȍ�ĸ�d�s�AZN-@��~����[��z�:�a�ΟFC� �H��� ���K,�'�*��a"T����h(dĢ~��:�m5_�{DV���-ԋ����/��]}8���$��F�e�Ki� %Y/��}��@�^�A���ACΡ��o����l�I���U�^|�q����&\&�I˸&�̾e"��}��1���)�����':'Q��������������F͋�ع��=鏲��2Dn���XI�T�Ag������6��ר��@2]|N��SeUZO����v��9��;Z3�5@��\tY�k��h<��T�������K�Jƪڷh��s��+<X|�*�(�C��(��X��,�D5h�/���X�ꟙ�}�u�n�d[�p�Yr��X㼄�6�vx�v`�h�� �:�����Ts|Y������^�Y.M�*&��<rs�@F\Fo����a��2��������ZGyfZ�n��v�C7 ���\�y��4Ғ��t#o�3|� ���u�d֟�{P��$�0��5o�ȏ�j�:��M��*���KNtu����~�QDp�ó2@BJ����#����8�d�� j�k�Nѩ�X��}���1>����W���� �������Q�DRF]T���Aȶ��gѼ*�Ӭs��O���P^RG�$�V����l��{�-j�߹�Ӹ���L�?XX�K���R�d�}��U_���,�︗����?�$o@�}��ܾ��V�����l>�וY�v(�Sn D��%�ͬf�����SUΰ���oѡچ��z L����J�g^7�C3��8]&uw�Ko�#���RWQve��=���G���.l�������r�B��jl`�2&FPn���?H�=1����>*�禐M F�ʤ���хz�_�m�i�@�H]�NL"4S,1+�P�Uk+M�_���$P���&$^�WPϺ�b��1�X*��� ������-���O"�T?�����͟=~c��9���j����z�X.�$������kN���c�#���&T��u9�D2�u܊o�������a�6��t��3�ũ��O�!c,MC��[#6�(��3oط������SJ%��� ��z����+9���+�8��z)���Y�>�y mJhB\e =�1m}Փ(��¡�R�[�p��_�ApDdU�R��6u�y��ms= �s�Y��lى�H�}(&����/�; �3���o��z��y� ������������lܶ�_�Ƅ檏�n$h"�E�*�W�\}��!>�9*n�仅L�Re+|�X�||�g��V\�roUG�o�o�z�%�Ӗ��^#F2�� j$�Rr������:S� <{}�FI�A�H��l<����ɘ�+��c\�yc�����K�Tq;�u)��S�2ܺ%���㻲�i���D�w,G���tc���n�W:|$�U��������� ���)mhz��0��~�lЪKt9y ߲��#1@�S�1�Cٚ����v{�B�x^;sCyd�@ya>����U��M�O�8~�D���F�/�O�ǡْP��Ի�m39l�n"������~�ϕ����&��:t5At�h+�j��逺s�����Ij}�v>�}���enͷ��OH�K_L���dc�ǜ��SZ�X�2�0�ݱw�f��B��D �G`'!$�%��}+�B?+�����`���n��o��]ۻ4&fg�q⿸���B��S���^Fo��g"Z�_�p�Hm�q�����F|ʯ�[ �O���M�������n�<�X�༬���P������[%R:����/d"������kژ1k@gd���2o^�B#t���l�ER�-�8=� [��^� q-����3p��45U����(�^1?�����|��>�K{������ �{Bo��������D�y�{S�늨�t��m�H��9�������/fl���wVQ�ܞ� R[_�����U�-�۹��lBk"�a=�qP_OO�ܘ���Il��Q����E臠ʳt����=�Pʕ�ţ���*���g(^�cc5�a���\=ev)݉O�y9"�HSB��ί�6���M�|����}r�ɟ�������vc�. ,�.�Caa�`&H �������.�l�v���рF�UB���$�1P�w/c=���1���! ��f�r�i���$�������ȀyLݖ���AMJ9�p,��֢�ɟen(���I^����@����s cC�YKb-{:�M�=��������� {+b��,�L2��f��S�{}<�6�oP�����6��@�2D�y@��M�#�����T�#0�4�v�PȊ�FF���-0I��i1��pi*�!�L�Ȳl��M�'����\q�%�د:ț쭲m��D��t�e���E���<�r��ӸK�R���=�nnέQ<;�B+A�����d*�CzhN���d��DKCO���O37����t(m��)��Fy$�ĕ�L'�/�))��&/W�y�ϕbi ����P��k�������=����W'����U}V.u!0x��R���ǧ��ƴA�AMp?��2 fr'ƶ3n2�D4�M��Rh�ْ��y��?��p�Ϣ�͙b#Wd��[�J�uLj����;�������Ԁ�ų6t�E�;Q�C�m 7�0�C����Zt{�$��gL�z�����P3جQ D|T�!*��:�l)F�;P�d��%����.QI�W��*�f���R�X�B:�]XȂ
ncProxyXll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ