Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
b10bb1ded5bc58575fc3b39a88a5496c95af7fd1220877fcdb2c632606d319d4.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
b10bb1ded5bc58575fc3b39a88a5496c95af7fd1220877fcdb2c632606d319d4.dll
Resource
win10v2004-20230703-en
Target
b10bb1ded5bc58575fc3b39a88a5496c95af7fd1220877fcdb2c632606d319d4
Size
738KB
MD5
6a522a32fc1035e0a69301f2fe79f47b
SHA1
b417f9ea1bde83ba61e167c0d7c7dac882451ea4
SHA256
b10bb1ded5bc58575fc3b39a88a5496c95af7fd1220877fcdb2c632606d319d4
SHA512
5c53e5152cb1200e8aef5c84084fa82d42c0f78dc61e577bae882e0cfad2563c5ef15d251488c1f0ac7f18ea8900fa24a4c507729642f4290f13dc6475a5a1ce
SSDEEP
12288:rAQqHKCMVxNcrcr3Q+BWglZm3R1so6G94qiMXZtu4eXDL/Ze0KJo4gwSdmrdn5ya:rkumrcT/BWgrmfso66wMXZt4/UnG4Ud9
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CertAddCTLContextToStore
GetFileType
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CallWindowProcW
LogonUserExW
,���B����=���d >+*7�;�ݎ�Zgw����Y-��sQ�%!9��~�=ޢH%�q���U�\�2Po���?i��@c��-�)�ǥ-�UL��OZ����w�����Sy��g���=����4ɟ��#G�U��V�sx��#mJ �����4N�?-�T�.�mP�o�re w�[�Z��qr��3�)�����)��M��9T'�� 5��yJ��OEd�B�.M_��U��~*�"eP����������iF�N�َ�{�_���f���7�n�+��:k����~�����p�)��^׃���� �����ӼO��ä>�2nL� V�ݔ%����Q���" �"tfGѡy��w�^��at�q�8�'+�W����Ϻ� ��6�XW؎���L�2��1} �R��ۤ��ؽx��Y��%�dL���h��Ԑ��~�q�3��� ��R�����;)����}nQ�t[�UK��GG���ہ`'��V������ݛ�l��gL]��n�����l=�`�s�[�ya�+��[}��|u4R��@���k��x� �9�[w��f�0PD��b�gRf!Э���Em��R$�w$���ٖ��s���G;v �� ��]�-)�͓��j��Ѽ!�[ F�J5��B����f���?�FL^�+2���m�#r��/������*�OZl�_2�8M�3�ܝz�ȑ? VԐ%���ZM��K��Q:;UO(�9����A�S��_G�M˞��Dx�ʧ.<�5�<څvpoa�0���Fd��:.Z���e��`�錶<�*���=: `��Z�@�FNT;����x���OGE���6�FŁw�CH_E�R.�����1��4W�*����S������ {t�$9�e��x}@�gR��q4l.jq�2e�������Z*�ݎ�n���\ ,�_�t��3�����S©��D'Y�k�A���i�}�6�$Y����_�w9���Y�I~�N�3 �"�B���^a�y�}'S�%�Ԛa����GF�f�[T��N�j������,�����T"���1��t��F�dI{�r�V>�{�]����x ���M���'�BC���6u�<�ќ�����i��=!�[��a"��z{sA'���=p8�s'�Q^H���O��(W��Bw5���E��d?Wٓ���T�V�lw� mrˎ�=��hL�4>�GV��%{�C�?�~����p��=�!�����4� ��{Z��gTu[qI�7~�T��L�iy���4���e4��i��zXߕ��B;0��Lx���燽$dD�?���b�z�eU��a�[Z�U)f��z!w�c�^�}��)� L$��Ă�UOf�)\���E�3���:n'[�ne�-^��(��Mx ���%qʾ;+z~�+P�A�V���~a�y�]�����>�NJا�,���,�k�ܽ|Hb��@��ā����$�pG&����K������L���M�uY�]�+���0ONy��#�R����� ���[&B�3���M��L�� �M�3��M��m}����.�t����ؾ�L��xl�r�n���ñ�-�2$\�^��l���եa1��r�r�Q�����kPP�+�}��(�4�\����Čvd���7�`����r��4-�\�5�r��GF@��q� Z�r8�<�y`kƪ'54��*�m\��F�KᛲE"�'".��dv[�=�G���E��Mt�*�t@*�p�s��{���mAE��BC�Tc8������Ta:->,ejF��u�MJn*��)���(0J<�\�5C�o�:� ���sH2��pJ�&��C˷�X~��ܦz��e���C��ry �5Ɨ5�D+v���!v|��b����T:?�Z�͝��&Y�=;6ʅ��UM| Nla)f@ۣ���K�u�"�np�۵���ۤL��������!e[9�+����L�7W�s�9�pF�}�M�0h���n��Ӱ�����]u���{'��ʚ)v ��C�#��)�c��U�$X�9���ēb��4Y-�3�^i��V���DwinO�o��3+�1��4oW���>a���hU����I�e���^�S��+`����^j֘�oδ���n���=�W(�kߜj5�l��>�訧A\-U.1�k�2<7|�b���g �A�豉����@z|�������h�P��hTl���* ��E���Ȋ�2�r��{������.��������0rl��� 0�{���xּ�ѯT��7o��rz�p�d��<t�#V��k�_�o:t�&*鑠\��Y�a�X��c��<�~8A7�3{?�_�(���慲7z���qtn�����PfC��0ק����^�L6����m�N-����zp]�bW�T')jH��2T��v���釤�&�K:����j��q��l�L��l���U0+��@f������E�Ŀ,��&$_2mv��v�vfe�=o�{����ӻ٪s:�z�ZQT��C %�\�%�-����ߟ=mǜ?���)��_�@@vცۑU���'�C�4 �m%kB^H~��m�k���+�����&B>�<Nȍ ~u���X�ij\����p�+��(^]*��La#�Y�2�Jf\�:/no�} ��Zn$�ea5�J1�CH���!p��Y��^8ڕ_��w��eN#V�#U��5��7�۳�8�۹+Z](�d1���%Ϛh��# ��0�?�V��� �Rn����6���W��9�����|5HA�ޠ��䣫��.p��i� Xk�`;xO��~�9xIڍ��6�zp������֙�� ���p�X�r�]-<��c����۟H:¢���b*DC�_�4<���ڨ��kB���5�.ǘ�X}�"��˒��L�&g<d��q "��k��v&{T��,��Ų_jX��L��f��ij��[L"��T�8�;�ȲY�,'p\�)0�S,2�~2������,3<y��8��>����m�my�I���Դslٚ���F����ٖ[�)�\�_ԫ�����)�j��y�`5�:��s�g�f���O��Tt���9�#���[�D�y��͟�1�p�%c)�+�0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ