Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
53f7c3f921cf7e7f1a55e8bb2e9d611a.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
53f7c3f921cf7e7f1a55e8bb2e9d611a.dll
Resource
win10v2004-20231215-en
Target
53f7c3f921cf7e7f1a55e8bb2e9d611a
Size
567KB
MD5
53f7c3f921cf7e7f1a55e8bb2e9d611a
SHA1
9cab23de7cb219468aa69cf026661d50c807cb4f
SHA256
eaed3b5247ee13a952e2ef33b3167304ab0242db5c6e427870142ee46d0cc202
SHA512
e4edbbfaaca144fc4123ff758370a825574477f420b120fecc62b83f5fd924193b04a934ff6a3d011f2001e5fa2e19b2b89d8f2e291fc9c4d2787ed50d110cea
SSDEEP
12288:LGHoMbLz6R+m/ZZsJsjLa7pxkNHmVKdjyN664RTnpJvz1IE:QWR+m/lj+7psmVQjyE641pJvhF
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetVersion
GetVersionExA
FlsSetValue
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
OpenInputDesktop
GetDIBits
ChangeServiceConfigA
inet_ntoa
Install
LoadPerfCounterTextStringsW
PerfectWorld
ProxyAPI
ProxyDll
ServiceMain
UnloadPerfCounterTextStringsW
b#Wd��[�J�uLj����;�������Ԁ�ų6t�E�;Q�C�m 7�0�C����Zt{�$��gL�z�����P3جQ D|T�!*��:�l)F�;P�d��%����.QI�W��*�f���R�X�B:�]XȂ�*�&f,ͺ\}# ���鰪�ܙ���I�0z�1�%�w����I+��\�����䬂܈,c��o� ����a�Q7�r]3�)4 w%J:�i�ghQ7��d� ����\��Q1w�����Ɩ���6)�HI�:��*��%��D9���&����4y���'BWCG��9�XE<[��.G8I�卿���S�}m��;O�e��:m�S��y�%b���x2�/c��_[[����:���Tٜ ��O&�v#�0��k'������tn�I@��u�VH�X����|�q�t���3���2i�k�����������[W��SĘQ����7��9�����x���O�� ��ܹ�4�X�T4�LLݻ��Nf-j, M� ��R�w��u%�����vSۥ��\m�H�r_�U, �.劂�ٙ&��o-��Ǽы�DhQ�j&e�UY����PՌ_�P��ux�-�S1�O��'�8B7vv�rRϢ��p���Ƹ���oM.�r� �g�*fEU+ ����]�P`��� ���s/K���q3��W�E���3xܶԺku�V$b(�P){���͋ b���{h���U��xhw9����w��ҋi���ohۻ�>�p���ƣ�l��HzI�O��������Sl�EJ�8���� C���t���(�a� �P)���]+QmH�qc��2N�5��7��:����l2����~��Cs����ߪ��Tք�����q�(���KZB����s/=��u��8.18�-�~�����jɐ�ue{S��VZ�%�2�v��x}�c.�D%��G���$U�� NG�x2�TTs.~� �yr�h����E���Y�����%ϮмP!���nYM\Fjc�s����f�Lf�e�f[��M�(���i!S+��G��H˸UO@ޅ� 1F)rn'/J�bFz������8�s���7'oЁ[(m�+��鋭���x:]&Cp���k��A�h�9��t挄�7f�ce��'�·��oc�E��m���������ƖH��E���]���i��%rv����ɲڤ��G���J ģ"a�v<��o�r Hwj�RR�� ��IOJGσ�|���3@Ӌf���$}x��K^��Q��0~���h�G�^g��̵_D���6�CB8x+n�p�i��G�W��%,�S{�LY������/�"�,����F"g���SOBlģ�v��p/��F@�^�#���b���<�|��W�Ζ)���J���R���R�����^�~��R �Z����ӝ�3P'���dGx�����+�Άm��cO��'��Y�М�"T�[_�:ԙ����0������8�W���'����T��Yr]�M9�x�8���♎�h��!�^N�ɕg�;�=,�����dͯ��|:��m���-`_���I����j��[G�ט{�]6H�q/���Z{m�ál(���Uv t��J�BKS��~[] 2�,_A��4O�íۀY���a~��l��x��.W�P�$Ԣ�O����n|���G�3|��cV# �1*L�~�G�X���C���BIA�j�\���a|fiuK4�T���E������o����6��e$����[x�肎f�}��n��(o�� ��q���1/�u&�� ,�C)��4_3L�X}C�Ɇ�MՔ��l��&�8��|>@��/�C����˥��N��5Ҭ2J���@�=.�E`��}�������!V餃�}9HI�zAM8)y�32�����?2k Y�C͊���3��uHV~9ć�Q�-����>�̂�U��k.���8��Y͒w��]��c�]s�� �sk*]Ǎ*�%]{)0�T8��j�z�E�{�,�����}O���>��[��KE(d�M[�� ����ܟ.cNQ�����F���7�ݵ�,���e��]�E��Ck�j���,{��%#�!U���m��m8Y�[M5��j����ԮX��C����I�q,��ft'�Qz�=��n��\���`Q�ޏ��=4�@ eL2�d/n�1۷��Mk�����ay���#�8D�[���TӞ�1�u��jm�1�)M�O+ݺ��#�h��F��x����������koAAȝ�����r�[���sAm��PD|�) ��ӆ�^�٣%>�?�ǒ��N�p��I X���%u�l<9SO�O�!����!�p���+� �|-������fj�����+5�!QW�i�_8�`����'��yČ�~��:|A�P[r|с�)kP&�.,�ј�TIx�E�S���7�B����!�w� �����O (�=�Sv�����#$��1+�0�c� ?�h��_�zt:��b|p�o'�쾶��?�����x��}U�ۤ}d�N旰��F�2�2�����e����.�cᑫ7vEh}��ɀ2\ ��&��o�t�8��1,\���<�j������� �]U�bc�@v�����ۭs �\&�<d,j�[K8ҹ'�r�(�2���r�*&��;S��U��+u�6xw�nx�>#�!����� <0�=ٝ���䋭4gl�n�a)j�H�c���=E6�����:j8a��R�H\X�?OVq�2>8���@j�>ߺ��6��� �c�Dn�%L���"�A��Պ����Yv:�+}P ��.ۗ���d��>iR�;me��{����q(p��a��k�(p���F8) zִ��V:ކ��w:+����f^M e_U� T���{<��j�P��y��1��Jk�~�$�� 1���))�gl�����Q�@�ɥb�D�u �\Lx��tW~"*���Ť��A_| �i���<� �����FS���p�(B�f�%.wj���C="�-~�6&��Ψ�j�.�H�� ��g4�#IY �U"%i�kl� uR�MV�;"y�a�mҖ�w/C��C�C{�3�7I�ʲ������][���{
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ