Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
Device/HarddiskVolume2/Program Files/Tally/Tally.ERP9/capsules/00031-00058.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Device/HarddiskVolume2/Program Files/Tally/Tally.ERP9/capsules/00031-00058.exe
Resource
win10v2004-20230220-en
Target
00031-00058.cap
Size
2.6MB
MD5
35641cfd2d80960c562e4dadc4dd4aa5
SHA1
4ffcc79533d45191915f5e48a78199ef302b1857
SHA256
d84f1ee5c793bbc0e809c0b54f7cdcd94dd06aed28b785bf8f5b567bb92ce30e
SHA512
b5dc4a4e7b397d1f1ab7a11c4f68eee57007174315a91a9fc32ec2f5d7bc903747b6b12af355ffb9104c8f8b036b29cf71db218752a56022d34eca727150b6d3
SSDEEP
49152:/9XXsJmYsBAPiq/RgddAuqXaPUbNOo6rqDtTtChD/j52FJOOOXOHljvNOPapDtA7:dsJ3jN/umK+NgOahDboJFOXOHlDsPqK7
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetVersion
GetVersionExW
CompareStringW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
EndPaint
GetDeviceCaps
HttpSendRequestW
ord155
PathIsPrefixW
CoUninitialize
inet_addr
InitCommonControlsEx
SetEntriesInAclW
WNetGetUniversalNameW
URLDownloadToFileW
9H�����d橜��y_+� ��m�;���(�ߐ-1x�<Q����J�;ߞ�X���wk~@ P1z������Z4��Q:jI6me�g�v������$� ,j# 4��@ֽ��y��=e�/��I�Z�'s��D6�;�'��]��'�y��N4C����Vm�|{��yB��*7����CwS���� ���(��MkJDt)�0}���R�= ���ɴ�������������Z9(��Vr�YK!�Mg�RM�3tY ��J�r��.��(Q��@f�R��],������EC&��2��;ms7��-@�7W$+M�s!�[M���*��ܑ�Y�й?]�+3{iy<:��i/���E:j��,�*'�FE�MG\H���h���,j��xsf`�����Xr�������m,���ہ��,b2*h���ī-��yC����=`�����@��y�� �{ǝ�tGC�������V=��~+�T6��㺡���F����� :�tn�ݶ��] �6+Bfa��rx�� ���_"��ڦ:�ﲠp�h�����K�1���s�7�df�\�Ci'�X�ˍ-Vs~���v�G��v�f���~��HC�Z6�&z�"����k@(��9����Լ��;H[y�7�L�q,>��\���\�Մe�����3�)Ze�� !��d�=?�.@���J��{4������A`�Z��t>j, s��N�F�8������}���7F�d:u$4`���_UB!&�̏�]�m6��LqLG�@75B9��T�\!&��j���n�ņ�A���5�;x�3��iUt���'|���n�/�$�"d�/2_O�(t2������dP���$�f���x�?_�=��tbC�ʘv8G'y��� G-��[H���xT�beo�9�l_�*��D�͵BTk�I!3n����A|b�=㜸|Ҷgp���Y ��58~�8��!�<Lr=���x���j���8P?叟4{!�(,l��sz@�~�u�������<�юa�4��b�H���#[6ؒV0�5�uإ�c��k��]3Թ����Ĝ��:χ����N|߅�.���n��5^�/�j"bʺN�f�u�{$����,�-$-й"< �Z�;��Z�h���ẛ9TҖ�7�Y��'q�{���%T�:�������u9� ��F�g���,�����2��y��5��h ��I�����8��*0�p]R�#��4?��Okd��_��M�����)�]7l�&kb���)�xőm OҌ������mP� '�� ���m�C�)��?���?�T#C�,��cI������s��bK����2��w��㋦ED1 y�?[6f���s������F>^������ֿ�"�[,�U��r�����Gaw���[$q)���@<��� ���J�Ο��&p6�@|)*.�����d��h��J�7�E�^���������7��3�*�KCh�ȦR2B��Q( �K�G}<�O�bo:_%�t<�"2(�m��aO���L��6�凗/�E?�^�� ���D�b7;���g�_����eu��/f��z]�Kx�\�O��_8���I�e� �@�.����;��t��[���a��b�kz��ڝگ���<tl��Ё���F���}�f��?��尔y�Τ3�����FK�'6�s'���s�E"��<�%T��%-�f�v�| ���.pC&.�Z� J#�.�%�M��@mj�0S�WF�r���?J����- d���#���x0X�e�%%��t-|ֺ+X��y�@�ܗr���P��[;S�~�G#�w�&M����f�q�4 ����*`S߈�zn$x�Tn� j�:�{ӄ6�/c|ס����)G�^�0xi�'{���R�WRL��Dn�G�B麮�Z��������!yi������ƺ��=e��RcJ�����P&����c��E�� ��#�aJ_��3��R������&�{!�{��#�u�����0�.�T��U�(��RJ�zQH���t�]Ws"C`V^H��+Q�r���-t�6b� ��]�*8=�ӵ�O�����O��2~)��̈��u�V!C~<'z>o�J�?�d:��� ���7\S�ؑ�=3V���/���s�{4Y�aV-�3��"���N�Gt4˭�&���ќ[���#ix��e�(ӯ+����Kp����>?��x;0��&�ى�j��X`w�~ W�g���E��Hq[�"�us�<W�oN�r~n��K��!�4��4lB�>3 �Cy�J��K6p[���D �lm3R��3"#�m,�s�ʔ�d$�����`W>:�����((������H�]jK�p��w�?@�I�|~���?�`i��l��ѧA�y�7XjS}4U�wƙ��u9�/����1��r2�р�Y�W"�e~���6�+�8> �9v��k��M��V~��<���rN`Y���A���[E�A��r�J1�7d#���n>T��*��=<�d��c��u�A��k'z!?A�i�tU�����g��~M�� 6��HkV�=9��q���G�1(0�%�qJ-��* �Bj!h�%c�m�;lXIf�Eqj$��X�2��z��zbIZ��S��Y��7m�A5�cL^��|˴̺~v�����)[�J祂��\��=�q���D� ��azN��;�h�����f� k^~I�5��|��o������W����"�G���@B�; ��$W]e�>�{#rQÚ��ҵ�A����y��"�� H�� ��'E[�:��?�U�M��� ��z���7t��+p`Z��K�n��*o�uP��f.����ҙ�b8dń�o�zx�G��ӀQ�\��,�ɪ��&j��*���F�VQ:p;c��6��Z�4���a�m�cr<���D�Y��h�XW��z�ĭ�x�&��v��6�0]ue����zt�/�K�%%f$dx�{���5�ݞ�5hA�����{؝PƳ��VK�zڭ��bn�~3���ZN~�.�l-���C�-ЩŮ~>k�@�fp���(b�0O� �}���zě�ޥՓ��'�c Xw=Qa�満l�L���ˀ�x��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ