Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
d1f8788977902148be4f67e24f75d6d1b5d1e9f7043a7e4af4c3d7bec9039c1b.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d1f8788977902148be4f67e24f75d6d1b5d1e9f7043a7e4af4c3d7bec9039c1b.dll
Resource
win10v2004-20230220-en
Target
d1f8788977902148be4f67e24f75d6d1b5d1e9f7043a7e4af4c3d7bec9039c1b
Size
650KB
MD5
2eb156315e7a54482503e6d866da8841
SHA1
71cb49439a12325171a54228b1fc989a83ce9e7e
SHA256
d1f8788977902148be4f67e24f75d6d1b5d1e9f7043a7e4af4c3d7bec9039c1b
SHA512
b228bd7f4a586ad7f993be9722c0dba949d1541ee18464e8108647f3519d55a5bd727010aac7b0e60a02a0f843cd89eb524ca364a5c11c99fff0e8c857e22ba9
SSDEEP
12288:eZ+ia3LP7GldhCAOI1QfsaW5McSAIVKcU5NBRtE+hN1GvHMU15IhhhuA/lRqd:e+PG8AvTaW6cKqlhN1GnsfNvo
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
VariantInit
RegEnumValueW
CallNextHookEx
GetVersion
GetVersionExW
GetVersion
VirtualProtectEx
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
AlphaBlend
GetCurrentPositionEx
GetFileVersionInfoW
OleUninitialize
timeGetTime
ImageList_Draw
OpenPrinterW
htons
�&NJ�~~�8� �3��Q��?�n��4H�v�(�z��z*v������kT����L� ������Ә:�J2���Gy�8Y��(����������F4��� �*�3h�����gC���������z�'��3�����7�u���+*�9�R���ZC.`N��E ���X2�;��f�`RXڂwU���ј���]A݀�3r@@hO��YC�80������}<��Ķ�\{�Kɖ@ ���iQ��q=������V�]*���yչ]6��ӘY�.�Fe �e�h�+͔T �9��E����4RK� ��_�Y��c�N}v���V��1�$U0]R�Xπ�����,���&�8�Z5��u�7U�2�t����X�0p���J�p6��6�'~�.砺�;��M�5����mx��GrI*ѸE��Йg]��_Ʊ�fk�Y�?\^���F�E�������}6$�k�'�W2c�L�`�����U�k��e��W��N<�&���&3��8�����zd�9���ky�6\�b៣��g#`śu�օl�l�y����h�(�����S�.Y�y�9E�&�m��<{��o94���I8�;��n�;�y(���ʘ63��q�)�d���C:H����3Rcc�� <Zyv�yF��W�ˡ���V[rK�1#��`��~!�6Ү6����Q���� �<��\Nt�(��0Щ�S��bzprt��Ӱ����R��5}Og+�C}��W[r����;�m�Տ3��t�ܶw���}52���_y��M��p���(��hW� ����ןٞ�t�:��$W%���Cj�$T������s�}�kn�A�%��? ��|�H�|��v�^�YX4 v��w)�K�J_�y¯��T�S��w�{D�U-rK~�t��g�M|�(�Y���"XVLs����l8��1���`�rY���tŐq�Cݝ��p�8����ۣ��i�~��Q��u�ȅ�?hf�֠r�i|�I�h`����q؋�GرUĊ����5THR��'^�ܭ �x ~��e���b�0�S�+o��F����v�#y��s��� �@���� '�ᙜDj�\Eu��CO�:f�`�K��:+/��nȳ�p�>=�d�ԉ���y�缚�Ȼ+���>s�f�˓��=�B�hRz�l���C��K�&,����<��������VsR%ex�=g�3�tٹpg�.E�ȍ.ml�j��E+ {���Լ=�D�f���nm����[�[���-��mZ����I�f�!���Uc�r:mU��o��|��}�!��yp4 ���J���+>��?yɕ�O�y��t�Y�������KUx��8���&�i�~�O��������}�e�Y���)w@���#4���Ɛ���+��J���C� �2��� �k��k֍�;B��V������;�rg�UѳϨo۾�ҹ��t�m:�����s��f��I!}����Ķ���Fq5҈���hM���N��5^�%��A3�Nq� ��}���0���kra����W3�����^����"z� ;\�i+��+FT��%TμM����oS���p��2��`� L�_*�`��T�����y�`)�q(������i?D�U1���tdhϔ�X�aQ+$O�e?t{�UD ���"P�X-�0L�#7�.�~�.�+ ����Wt���Y����kz�a�:������Gpf���e��9�Bd����@<�'����<�q5^��>8�����sEߢ�/�v(�,�8�Ȍ� �2[{��������{�#r�4���Z;ṽ�8o�^^�*9����hC�Z�>��³$��2� ����@P�B����|]�.W%?���2JX҅� )=5���`����q����s���7}�V\:�{!V{;����1=0�s-Ԧ]_#� p�I�=�WS%�O*� W�e����>�n[y_�������:�F�g<(��i,F����Pҫ%�e�:�O�*ӷ��gliز��:�����W��1��z�����ށD���qё[Z��P;3ZP��]����3�����'�p��m�~4�M��w3��#�d� ��pk4�-(}���]vz�S�� �O!�������k�o�%��=�������`��Je�4��2��l&�xKU9qj�sճ���dB=�c,���=Q#� k�O�����&�lQ���aۓ���?��`��=�r�������ƞ�n����I�mx�;�**�PVڠkC|��3��^r�}�(��s���|4��~��V����8U�Eа5�_xtz���2���q�I��a�Ӎ�S�-6���b��h^��ê�h$�U&�eg�C�$%o���',�8�ylW~�8A�9��u�}��'�u��)/F��� ��(� ������yD�6\��j@�٢���}�]��(�Fcʯo�U�l��<��(C��-���)8[7T#J�-w�ɰW��Q )�[��������3bwqwh���Vp�-�Br��������_=?�C���Vv��E�ڨ�f��rM1 9:��O��V�X��b�6��nx�T�Ў9I�J�u>�?���(�0�봴�ʎ1Q�:C3i�j�nhڄJfM�Y�?�6���_�Z�MC�[����~�D�j&��Ũ.F������3S;"�j�j,V)���JH��r� ��eoL��[;����f�5�؞;���Ɓ�^K2�7�F�Ҽui��֓%����˹����c`�"�bZ���=�N��Y�0(���0���9,(�,5y�[��:��>�y���E.ֈq�b���1��uH�y��.� � �fj ���S/:�[�W���EE�=-�)��i<`����N:L#�[�M��.���ݒ:6W|^���h�.}���=�!#��i=)*�DIk;�z�V���~2�[�����X|lP�M�fS���[ф����5�E|=z� ���5_���7�!�=,�0��m�p�!,��1� �O�C���E�H�a %ӈ��(���ޜ��2��"��QGiܘ��}���A�
insthook
sethook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ