Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
1bd2a563e70faa0e9ee123c42e1b62f81eb59fb40d52ad73e614b512a03f2eba.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1bd2a563e70faa0e9ee123c42e1b62f81eb59fb40d52ad73e614b512a03f2eba.dll
Resource
win10v2004-20230220-en
Target
9856461220.zip
Size
7.4MB
MD5
10d0b5bea2a3f2eff86a907d186d777a
SHA1
af1bc57cf41fb0a7f6cb50443b42d0534bed6e01
SHA256
c32cf73f40fda56c328e9268e15424191e9c085f25e57db5f1815ab8c68f4127
SHA512
94db8ecde45083f446617c42bc9b65af75f5da0af7940eef425a35c413eda0e5048c7934b29d6a8861670a4755f015efc6c08911cd1a400f609c719c31269271
SSDEEP
98304:QeIcOW1pbWBVPI0VINyTd+AMyVTxfYIB9Ta7ehNBRKPP6GHbVT33ymctFydWDlTU:QkzgIrA5WIXT1RToRTHnuFyylT2OXSG4
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=Andrii Sych,O=Andrii Sych,ST=Chernihivska oblast,C=UA
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RtlUlongByteSwap
CreateEventW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
CallNextHookEx
CharUpperBuffW
BCryptCloseAlgorithmProvider
_dummy_debug_proc@12
���9��f��OvOI�Բt��=�B�.��%�dn�#Q���q��pz���z�8��D�������bzrl�����~��O�c�Ȯ!�}2j��h���.M�l�)����;����%�a�Vz��2�0"�W��6�ԇ2�jޝ�ߙW�G�c�߲f�K��v�av��o�'k�[���Y��"�+�\���d��c���;�w�L/с�WE�*��*ƹ�W� ��ݧ�r�D'L�j�p���k�=��n����VѡHE�,����Oܮ���!��R�V�(�j֎�Y3�d M�~�T��iI��ϯ���L�2I�`���5��w�|,����v������Q%�w7~ ��U�߈������#�n��ZZd�N;��]��|�G1��hf�#����-��+Gs�D6�>%�h&Q�y� �4pE�x����"�5K�4��5^/����f�ߙ�Y����@�A )�<ʏ�Ԝ9Q0����1 �x���}h_}Ojc�`����Ҵ��**߁��Qm��#vN�����iRK����`f'#��2�����U7R^�^e�� ���hT� �[8UH�BM���Pce�EU�P�� K7�M`�vS~�r��ќQ�v��Nss9';W�B�)I���+�n+5�$�Ɖ�"V���{|@��5=���M�V��Nʪ['����i���k'����^Y��鿍+��W@@ ԟ�ވ�\N����ґ\�8�ц����ky?����Cȳ���E3�mĽ�s��p�mm\,�����~ߜ�9ֈW��t����I�~��/�ݵ��_��aR//7b?��G)�g�)°)��'y^5"�1%���}kK�xD��`#p\0x�}������� ��vb˿D����Ԏ��ݥ/|���t��92�t����.Z�H�/F����� .��`5g�ʟ�ש��+�/��Y4-��A�`f��k�0��B5bZ+��Y��|�ϙ�!*��5RR̮�JU���001O ؈����Z��bi �f)�ԴJe_1���Flbt�+rs��"�dI,o�-�<��5�@��5�L@�|7!0�����pR�.� �)�!����rs��e��Da��KA�p�\B��7�w\�푲8�-.�@�(B�CK����~��������3N�]1s�!7J�x�?]9"�4���N�^N��~ DJ�*l��,-��^z��.lk��2�F�(�vk�*�����`��1!�_�C��f_�z�fsOd�}�'5��fq%��wA4��FQ�9�)B�ѥ�o��X֍����P"�o;d��X�PNo��-�b-3Ζ�)t����W�]���x<��_����t���<��.{:%L�Y�h��T��o~HL�;U���~�>�tݰ�8�g�x�/f��\�Ԡ�J�� =���LN��-��k��h�8OW-�\���*������Σ`�B��T�4�!�8��e*V�QܼGGB��(���6��5D���?r�ާ�w�e(�����\;F�.�7�kC�$ qs�ΒDP�C���f;�����rd���)F�A�@�9��}(N��k˯��x�=� IR��y�_ ������S�ƽ���o� �f��F�!��LZ� �B�ńA�']��ޕ--���z���B�ϑ9� �����7�-bז�T#���\�C�dڝ�_���m��� 'g�j}���_Cy�F/����c�|���L�ҕC_בg<q4|�������J�:��$꿓��x�+ت�Z,�lc��`o|@��A�=�M�'�PF�8����\�������ĥ��` c�3��03��i�{gvpn`y�0F���T�]����{'23�_�ʱ�VD6JA,�[�������2��c�k� F�=d�:���w�^Qi�z�wƢ�9��PGv͔�T�^��> �i�'J/=����o��7����ژL����O�n�]Y��w����P�AMI��F?��3��H�q�S�9�&� �[Ų�g��\.��������-���f@(��;���8q_(��5Y�/�x,Z�Q�x寵e�cuK���Xٖn�6,-N���`�Zmu ��`�K����N�w���ò�q�{ ��:Jr�"�����|��D !�]��T���oH�l���je���8�c�R�� � A�1F�p�П��%���xu��,|� �x�0��I�<��L (�S���iD���KRm���yc�� �����@���)�Ri��\Q}P����!�P�Iu0{���ˎi����� h�!�FORNxT�l-�&�O^:4^�]v}�N���jx�~�шJ��T��.N~ޮ��.oQ�ɗ����aX�� ���vBC>H���Z&�o�_��Wc���y�ManhbQs�d��J�r��)��>�_��������9�)�i�V}�&Zz.6�>QLr��G�@���K����!~�Bu�5BR�]��Ⱦ����� (���p�n�+Բ>ô��g��q`�O¿Z�Sд���@t+�(�ڐz�w�h��f~V#�n����~xU�����p*��Q�|�;8};���o�/o�}��hm�S��7��B� *C��X,y@���[����h�����?��3�Q'�������#���K{�r2�z��Q������h����~ܷp*���>p�����4��Km�>`���ڏ{� ��^�"i�]g�~�F@�����d��;l4��MsH�ŗ�����������ҡ�1�(��~�c�6���W���dx�:��:�x�I� �"��U��, ��J!��K�J)��#��U�C�46m}��H�7��9��m8��bu8�.����|�]d�C���}�Ty�ޗ�-?#>@��V���bO�����WG�bR��Fs#�|ѩ�gwf�ȁ�\����,�c���t2C[vcj?���_*���\f�Q@^" Z��%��:sf�ĝļ6s�l5 ��������b�� ���4A-���t�6�O�:k*��iSb�,���T�7���B5Eɍ���l���B�e�o5v.1���=P������G�+��D!�[�oʸ!��<��%�f| ����
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ