Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
prnfsdk.dll
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
prnfsdk.dll
Resource
win10v2004-20230703-en
Target
prnfsdk.dll_
Size
561KB
MD5
254cc44ce91502782700f57d8d15708e
SHA1
7c9eb552dbc9c928a4cc1b920a385cccbc72226c
SHA256
ecc34936abb58e91c38fd1417ef4c73edf29f1a2fbf756f8558c38ec5c8a6f2d
SHA512
fa821f70d72f018c418fdef50c63d2260f844951050867172cc131230b4e8559a46d752aaf25e6f6c6dada23f38ce50b8413b52c9941a836d69baa2e4fd3f50b
SSDEEP
12288:8nD1Gua++lefMAqzn9gX/Fq8WB7C5gnSsJo+IhXEm/:ID1xa++l2C92/FLgnzRIhXEY
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetVersionExA
GetVersion
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PostMessageA
SetPixel
GetKernelObjectSecurity
recvfrom
Install
LoadPerfCounterTextStringsW
PerfectWorld
ProxyDll
ServiceMain
UnloadPerfCounterTextStringsW
ncProxyXll
��q�dl�Z�v�m;s���Ɏ�O#1=L����h�T ��� ���� ��x�� cx���'R9�Mَ:o�[qr��}|)�����D|���7F�����w B��Qb�Ɲ��߯ �e���(N��f�������Y���xi�J�$�Δ�Xn�}y���b��M�:O��KKK(Ghn)5(�V�2��&��B���4�T@U�n&�/�'a ��7�I/�xnsǙ���A���8�(=�]?��˻��LT��{ �v�I}���!�h�c��:-��5�f����[��學*a)���/���-��!M���+�qN����I�?;rK�� G9�q��t�R��T]���uI!�E��f�ip,K:`��ª����aS�S��#��*ItFo�������V;��۵ѭ�c��p�s�����iPꇇ�G������� PZ�Z<��7�M ������5�^_��: �sz�h�{�u��nO���@�� 3K͙��>��9 ��!�E���G��z4H�@!�Ʌ�1�`�bcZ)u,��~��=Ph %�Ys?���E�e�6���؞ڤ����ux\���;D�3"9eG���;}����1SˡK��4q!�G�s,r�p%0d5C���R���1O5ԁ�z��&�$��'(�ʟb3�����e.�_��x�K�#f�"�uPlp�cw�yQ���,�+���:=k� aY����.B�TT��q��D���D�~�����g���Sʤ-0��<r?S�e����Tr� �7�]H��K h���4���Y.�+�r� /������w���������w6._��ZG��U�E�σz ����YJ ���y� ��E i|�B�ʸ3���6 ���O�/�x$��$d��}�#`�����B��i(��5ҭܖ�U0� Tg�%�9C\�hӌD��P:u>)$�r��ZR�s�+K6g*��O��z�:J�?z�(��O�̳��ƛ����ȠrwnzG��G�@,���;KoCՒm�i��{�V���{X��4{��jڮ��nϰl����2����q�5����X��?���6F���*b9�܋�3fBM���G��5˥��`D~��#�S�r����7�� �u�w&e�W�?�;��[�� �� t��;b�ic�d��U4�� I�Ɋ��/�pAx��М,�$�0O4?�ॆf�5_�Ьv�*��5\��A&��{9�n���~L�,�C �&������\����@iǘ�<8ʎ����w����ҷ�y�}��)Y%F�YΖ�Fc�I��H�c��\TOEpg��7MI������ܷ��J{��s�=J�|��oM�XG�����ACAW�b� ��@�k'�L�2WY��Jjb��|�Zk����m8� �{�������(��FDY��W�$��Cݐð��#U���WWm�F��"Y��� ϡ��W�WdD�\܍�%�~ �l, ��@�F��N����a���S�����3���e����8��zP�{�w��'�����v�}UQ'�Zn�E�����r�p�!�0�1����@�){�.��P�5(}v���m[xt�U Ҏ�z��'�쎝���;*�X��o*lh������1r�J�����ʰ"ɋk�)V���M��'a`��ʮ-q"G9lb����IMq2�]-��韩CF� ����$l6�(î�ϛ)���c�x����mhY�[fJ^��ހB��������l�� ���T�t]$⸓40���{���i��XO���zzK,���#�Z<J�Ģ1��ۭ�B6Coh����iP-8/\�����`ynl��$/ �q��-�R<�v6��U�g��$��&��E�SDI���MYП6�*��x/�#m3%�辱�1>�U��荂z��l-Qbb�[�@00��ȠM� 3'~[t�|�Cw�J��l�����A�����D�6K`%"b֘���*� i�L�`��~�m�{����?]��dk@�O"@��{�S^�����R�ȏ@��42�|��}�S��;�0F�mf>GI@�.�ک��5��!�Od���Z�_�~�_�� �+�wQRP"r�Rf6i���2�n��������l�����!u��W�D�2i��7��X�<����,�ƄK[m�z *�V�����"�&�~�g��Fpl�$N���0$_Ɓ����W�@c�Cn��Ͷ?�+;Dy��l+��N�t���~�Қ�r�\>���]`#�$P4��������џ�ۙ�۪�w[�^DQr���41��>8V�?f�ܪ�<��W^���������3���7�Aɹ1�����SI"L�����3��"s��I+vg;ɗDV+��0o���(�Z��YFg� �����6hU���+پ��s�&���N�k�O�0��3��`~��|E�a��.ZH���f�X-��+����cf B�ZF��/�0�?HEKK/ܤ�紘ނ�j|2��W��4;y�a1��f�0� ���W�1>7!E�P��:�h���5����V\���,I���p.�wFۺ[^���2�� ��^rΥ��|�γ�m�B��:f �N����4dql���c�_03�Ǧ��X���J@Bd|�!fW�р���p�Qb�,e�쩿T;5��6#WG���=#��rt�����j���9�� �v���l�m����f{�3`�jS��̜��]�>G�q��%+'}�`?�7sd꘤�� v�S"A���A�xѯ`�Ȥ��7λw?�ə��B p!$�vc}�c��� �}���� /��r�y%���A!�S;]�q��z�����|٣|�%X�<#Q�O�x����E{�Y����։L��p'���i��Ǭ�������Q��� q� ���AAQ�����pjK$�5H���Jzu���WS+z�8-� T7d�C����X/t��x��/x��1�Ne����f��j�n��H)��u����Nm�{�F��I��z7L�h�Z}*� [�J(UB=��{�[�˥5��` =���l���^U�L�l��^�%��b��;����0��������L�lkc�e_�Er�Cr^��nlj��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ