Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
Repair_Windows.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Repair_Windows.exe
Resource
win10v2004-20230915-en
Target
Repair_Windows.exe
Size
7.8MB
MD5
66b5da7e45711147718d1eeb19fec55c
SHA1
5ea24e1ffa621520290a9dd92ac87f8151a0cb56
SHA256
7da637b73e54379e5b370f573c74973063a8598324d1fe2051087747f1ab9a10
SHA512
8a8717e7b58e8956e3f7ed6c7a4c4481d6fa5b593731705861803236d9e0fe103160b928dd5659156dbeb4a5ca55acf13f5700c7d23258654c3904ec41079c2f
SSDEEP
196608:etiKyTyhy1ZkIPyvdpWRO5lYwDEeT/CJeXNQHAVmT7biMD:qyu0FKBgwARJedQ/7GA
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
EVENT_SINK_GetIDsOfNames
WTSSendMessageW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
e��9���D�uc� B|�e���Z���IQ\"z ��h�En�F���S��ZR��gS��<���6����~_�zs#t�N�ѳ�PQ�[^���~��������"H��d�H�<�3#i$�t<�qcB�V5���v+LL��?&�����4�f���집����H���nPd��5;x�I���l��v�-r�ʗ�@U 5�D�;t'�jl������.]�]&Pȯ�h=���P� �/�(R��@'5�8���닒 e҃�ԚR�֤�(�������۩x���c�U��|��L]B�:�d$.o��c@���獎�Z��(��d}�x"|�I�t,�@�)���bӍ]�eEBmW$�-�PtB��EYC����j�|[L� Xp8k�^;����r����oC�θ�^�f^w�_s������P��1�������?;�z�.0dRr���=��&}KaL�i�t�������V�":���͈��j!���>~�`U��"�|�����~v��D>��K�-p��C�1�{��b�jn��-��ڦ����>h$&��Y����oO����&��$rY�":zGJ��؎�R�^r�䷚^DF��`l��8�zO�2$���8X �;���E�Q�H�G��:�$�,iH�Vm��]<6=�:��n���?V�#؟H�Cc�O%{)�3E�m6�B��h�+�'�W-Q��.�:W'P���7����|�,�ضdѓ/fѕ�>Ѧl6�L�|���fj��O��Qs��t*^���]z��T����xдf���m�T :��q���n��[O��̇o��V���7�I����t�۠M��g ~��|�iV�2�+z+T���V���mFcˀc�%LAj?��vZ�4��*���w��Б�B����n��@Q�������!#-6ZY` e1x��TG���6��x�TQe�&�L�b�܄�Q����Q��oNЙ��sx L�t,�`f��~T���ˌ�V���zY?5�oV����kh�ăQA4�d�.y������WI���.�ںb�[�T3Y#<LE��?<.�L����}2^,rb�4TTg�;Vב��;_�y�� ,�RtH}"���OsA�DQӑ1��������k��T����-&���_C�|�9��сe,ivJ�1���νyH�1��ߎ�N'�p�Hފy^Ͻ:��K��[.�JP���|h����x=�+��2Ƃ�v q�y���kD�u����������@������q ���3�c�����f>x,�߱oI!E��7���$ ۤY��Q���9�4%�JK���-s^���t]+ ��7�����Or�}z/8�:��+�>�6L�[����sJ� �Gs4��q�Y��"��9�AA�k��7��'W�r�#R@K���ϣ�%�n������^��~�-� R7yqg�/T>5%=сk:�*�X��_��� �Ӯ_�u��E�fL~��:�L��H�kn������I���M_�<�;+�����˃5GH[U3�B[�m��� ��#�k'�c�0-h���a�t�i5wX�}B�ĢWŜ{�o���jv�\:���K��� ��}�=KBT���Խ��ےi���_9,\� ���n�B�:����:T5��~�~l;^��w�L{+�����Z��1��`�Q�'x7���X)=����y5���e���?|���p��peK���̭�6gx�ɪqp����ۇg�J�E:d[�bE�� fT7/+�{j��S�W��N���$gF���%�r�Ͼ�_ߥ9�RJ/e��ET �_쌎��A����~�+�,�«ȶ�O{!nfSk#`�O��1��G�Lșal���[�뵏��5��6���JKґǰ��M4�F��@c�r@2)h@a(�%���)��z:�ڲ�W�E ���J�Cbg���m�#BŮ�*t��-ڮ�xA���E��I������Te)�X�ȝ��3�7�K x��*:�t��C<�=y�W*(m!�(�ߪj��P'�p�I����J���h]L���S?K�(��m�y��&�*��Mw��^Y�7LM#��A��x���s��(!�U^<�(�Lڇ)#bzc�=5ɚ��n��Z��B���͘��� �3J���(�*����\q+�ud�>��z�o�TM5����=~�4H�룵BMfM��������i�鉈��՚z��6�&�4vbõճ�p��M���b �����k?_��!�V_kJ4w+�%�CS���;a��L|����{�uw�.⎷T'�����e1h��Of�����+voGTM,�W7��G ]a�~O�ӳql�q[�?{��.��I��#Ze�+�t�}�)�~����לC���{y��NS�p�r���r�A��Qki!�W��$�z�^�$_�$h �N��B���5�)z@���a§`'>B�q��� Ũ_�)�������F �f�ƅ�!�[���T^��R�P~Xcf^k�P���j�_���kz��\�z��(�9�����̓p�+#��,W�8�@5�LYF����n � x�ů��<z�o^��Z���S7eˉl����jL�ϝ>5�1�ػN^��u�gFE��7��&��[�r-鴱M�L������ܐ�Ay���5o���|:�?��4:�7���N{�RSf����8��,Ϋ(~�i�;V��\���"��.�>��>��*����CS��,����=L�8g��"��qXVEt���\�Z^���}�'Xvj��a:l�Gb��!`�!�w��3���W����/�B�0�GPX(�8spt�<�k6����Nr�V��ߕuHZ�$I�6��s<�z�R��"J��[/�h�蓻F�}n��2��ЄX+>B�2��a�ZI��j@�2�!L�fe�/mA�kL�A(!>�i�3�岸����sL���Q�j��UC���u [���c} }p/�G㙘B��ܛa�GL�6�Ԯ!<rh���_%\3�r����<�2�EP���0CQ����hI�>m���KD�`I�V�aq��mAV�ʌ�֮���Tޱ,�/�����.�ڡ����W�-��o\!3���.�lm���ϴ��x��i����K�9;���*��x�t�֊���x�{
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ