Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
Auto.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
Auto.exe
Resource
win10v2004-20231020-en
Target
Auto.exe
Size
1.9MB
MD5
9b4892aa779b8c53cd16402c48a04588
SHA1
9c08d9b8b22fc0e06de851ffa59489e6658f1f89
SHA256
459c9822edbb0bb7d19180a2cdfd6f007b520aac27eac979f246d35613a17d40
SHA512
abc4bbe9622cb7226a27e39dadbae4074aec3bfad1935f4dd914f7061d268aa07c46d5e5bcac39eb31b3b4064688e540d393a75353c8ebcfce1db923de037917
SSDEEP
49152:9Bl3mO35eP5myIevDiyMWcyyKceyO3ojOjtd5rfbD:rxme52g/eriFMyKcyojQF
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
RegCreateKeyExA
InitCommonControlsEx
GetVersionExA
WaitForSingleObject
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CoInitialize
SysAllocStringLen
CharLowerBuffA
GetFileVersionInfoSizeA
��dmCDk�F'�����i.���sଡ଼���F�p4� �L���7�c&���/��������観�� i?����;�;�g��=��eW�D;����+�!Ƣ�ǟ���x����[|�s�B��;8q�*P'X��$@��BxT�)��c6��r{3�+�W�@����;�o}/bP{�Aو�ץ������4=e�|mw�4���������%�&K��FM��q� �Y!/R�Yts$����7�(�I-CH���G�*EPZ�*�[ ����2B%v��O5@ǃE�����/�=�����L,�|=�}r��y�#7����C:,\ɋ��W��i�%i'G@?L�TC����۔%A�m7y�/�Q��P�f� ��'��%��0<�+�,'�2lDbɂ�"�%=���n�����Ҽ�'t��2��ͣ����[�j@�Ķ���1R�-�qP�C�Z�'������Z�-0Q��iщ���6�;Ϭ?�"O�f���J�9�q�=�<�h}p-�!]��� Q���ٙ�e�/���Ȝ;�\� �9�a�9W��Sm�"�T����h��e�� !΄V���!��Y ��r��(.1��Utf��N��֗afyy�Hkg?I:�� ���)o�b��� �G�j'�=��p����+�m�.eq -fƆǻ� Ww�Ѿ���$�J�A��#e����v;o_�٪�az���,�$V����]Q���d�|�(+��^�R��C(��2��ʖ��*"�C�]�u�pj�qk�]�C����1�]٧mvYF�>��Ce�_s�4����)XW����f� "y3�*5��w]��a����`�o.L� �M�������W�^�:�z*��e@b��ww ���"G��7P�@^r�Ջ�h=���?�Y)3D�1Oit���S Y�$��ϫ�,e�T�z;��P�y���뜲g*��Oz����ղz�����g)T��\�;��\n���,�����n?b�u�m>q�[ufC�in?u/����G�l/ RB,�qBTC� ѡ��zCv�6�*�G�/(ġ�/0'i��}�\(�Y�N�bW�r�0��~~����)o-���J�TK7o� c�=�g�E����"n�.�����%���f��%����Ո�o携��p�$mlr�_����-7�}L�H{��ߔ)O�·�x���l�����f2$'xkz**ar��Xh�ZTVf�=F���ߌtS�C��6����*��%e�`n�L<�3=�1�i�_Y��Q;��2�j��:Op�6d�ARN���~��"=�Zݶ콾�D��GB��� ���� �r�$WtƟ0d��"�|���\��oEm(���ނ��>uK�,W��Li�Sdg����r�3ܔ������}2������vt���V�Cw�:E I��3(?��J#@=�U8�� H2�t�<jiX� �38րѳ�3�ؓ���Dkլ�Y�L ��l|�`�P��7b��Q�n*>=[)da��~�`�R©w���J����C���J��N��XF?�C�߿��'�; ����*�e�1����f�d�Z��^PsN˛Q�5�@X�X�;o ������ m������*��7�gYVa@�� �.�Kn@���y�lbF_+��栶� <�����Ȓ`�'u������9PϿ�GʡP�� �[�fB�z��z��=��ty�9�K� ;�Tr��Ng���>?�4� �$s���E���S�ɲ�jg]�y�VMp�kX����sutv㽝�_�,�;�>�3@��C':<�.W��?ݤh/3��/A�R�q5�h�^��y$C2ß�8B����"�y��G� Ia]7xg8I�}^����*ރ>=r"�I�zͶ及�2����>d<�AJ�����<�`��j���m �O_�aFw�b�N0W5��w��3R($���ah�f��0�Ѻ%�o2/�B�ցD�5�3|�iX�~ד?*�� U0֠J�>Wʰ�:R3�h\N]5Pl�;i���� ǝ"��LFq�A�_'�^�̷�� ��u4mc ;ДՓje6x����\4�z/�L�&���w�fe�S��K`g����:p#�5��w9���I�`��A���������u���".K�u0���0����"�L��C�� ю,r�� Vꔕ{�����O+�!+L����AN���9l�\ha}�?-7B��,��uz�w��x��~�[\Fe͌܉&� Ι���*���q�\�Y�S���7��4�df�A��Gn����GP��1ش�ueH��F��[���X�[��e�]��š��bxZ��'��"#���<������ Y�������:���}��������IH��j��K�����5 ��� ;�L;8ZG;#(�Wq��L.�����Sh �J\ ���C��&�߹����86��;o_,-����䊉��ԮdpeAEvc��� mkJW�X�CF���OL�~)Q85�W���m�%��T��6�윓��C4� ���ޟ?���a��X���sL����v&�Bd�cO�XW�,"fz��|���V�S���a��X` G^y�T&��~�̨�XH�B�nE����^V#���O˲� m��$/_��*5*T;"%���\#����U܂�4���Q���T���Qk��P2Fx���b��*a�T�|���Ԋ��_���l�>�C�"��h0�y�"0[���� �B M� �E�86�eVF��>��!����JU�+2�����-��3�e�'p�w�����P�/И,�fN���/�&�E�YoyسQ���LI֗み�f�Z�������٘��z����.� e;�p�4��ݸuc�D_R3f����}�9�X��V�����7{/�[��V��z1��j��������#P��~����0����H�cK��y��5z��ENh�4�R����� )�Mu� P)00iy&s���p\j?W��9�(��V�>��ak�'�X̠�)��K*��y�X/)��#��a��L9o.�ϕ�>ͼ�ێ��撶"m�j��}*��9����0�z���l��s�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ