Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
1af42937a766f92b8413f16d00502e77.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1af42937a766f92b8413f16d00502e77.exe
Resource
win10v2004-20231215-en
Target
1af42937a766f92b8413f16d00502e77
Size
585KB
MD5
1af42937a766f92b8413f16d00502e77
SHA1
6c2a7a406de67f169eb887211b0c4a37ba1d47f1
SHA256
24bb64806dd20376935a198f908e62b08afde9ca58e936a01d31021cb7acad3e
SHA512
2ab7148baaec95dd43a8104200e3e10f9af44e4695f32d87d79c477d630748c7e1c32a2cc3c74d9a09d7846ff6d4195188d7262bb8b8b8b13d9821912bc3b772
SSDEEP
12288:IMoP9b1SG5q2o3zmwNkadmajr0tGGObhM/:JoPVYj2o3Pj+SG
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetTabbedTextExtentW
TrackMouseEvent
DrawTextW
OemToCharA
DestroyIcon
MenuWindowProcW
RegisterHotKey
InvalidateRect
EnumDesktopWindows
CharToOemBuffW
BroadcastSystemMessageExW
GetWindowInfo
BringWindowToTop
CharPrevA
ChangeDisplaySettingsA
GetUpdateRgn
MessageBoxW
CreateDialogIndirectParamW
UnregisterDeviceNotification
GetSystemMetrics
OpenIcon
CheckRadioButton
ShowWindowAsync
CloseWindowStation
SendNotifyMessageA
IsIconic
SetCursorPos
GetMenuContextHelpId
SetFocus
EnumPropsExW
AppendMenuA
SetDlgItemInt
GetMenuItemID
GetWindowThreadProcessId
CharUpperBuffW
RemovePropW
SetCaretBlinkTime
UnregisterClassW
SetClassWord
GetMonitorInfoA
GetForegroundWindow
FillRect
GetTopWindow
SetProgmanWindow
GetAltTabInfoA
SetMenuItemInfoA
MenuItemFromPoint
ChangeMenuA
GetListBoxInfo
CharLowerA
CharToOemW
GetDC
CreateDialogParamW
SetProcessWindowStation
DrawCaptionTempA
EnumThreadWindows
DialogBoxParamA
GetClassLongA
CopyIcon
SetCursorContents
LockWindowUpdate
FindWindowExA
UnregisterClassA
DefFrameProcA
GetMenuState
GetDesktopWindow
SetSystemMenu
EnableWindow
CharToOemBuffA
CheckMenuItem
SetWindowsHookW
LoadStringA
DestroyAcceleratorTable
AttachThreadInput
RealGetWindowClassA
AdjustWindowRect
SetInternalWindowPos
DrawIcon
GetAncestor
GetUserObjectInformationA
RealGetWindowClassW
GetWindowWord
ClipCursor
DrawCaptionTempW
OpenWindowStationW
SetRect
ScrollWindow
GetDlgItemInt
SetPropA
LoadKeyboardLayoutW
ReleaseDC
CharPrevW
InvalidateRgn
IsDialogMessageW
GetWindowModuleFileNameA
CreateAcceleratorTableA
ValidateRgn
CloseWindow
ValidateRect
GetWindowDC
GetMenuStringA
SetCaretPos
GetWindowTextW
GetWindowWord
GetShellWindow
GetConsoleFontInfo
SuspendThread
GetTapePosition
GetLargestConsoleWindowSize
GetLogicalDriveStringsA
SetFileValidData
GetProcessAffinityMask
GetPrivateProfileStructA
GetAtomNameW
SetVolumeMountPointA
Sleep
GetProcessPriorityBoost
GlobalAddAtomW
CreateThread
EnumTimeFormatsA
GetCurrentActCtx
LocalFlags
LoadResource
WriteFileEx
LocalHandle
OpenMutexA
CreateWaitableTimerW
ExpandEnvironmentStringsW
EndUpdateResourceA
QueryDosDeviceW
GetCPInfoExA
GetDiskFreeSpaceA
GetExitCodeProcess
CallNamedPipeW
CreateSocketHandle
lstrcmpiW
LCMapStringW
QueueUserWorkItem
WriteProfileStringW
EnumCalendarInfoW
RegisterWaitForInputIdle
GetTapeParameters
GetCommMask
SystemTimeToTzSpecificLocalTime
GetNamedPipeHandleStateA
WriteProfileStringA
GlobalUnWire
SetTimeZoneInformation
FindFirstVolumeW
MoveFileWithProgressW
GetNumberOfConsoleInputEvents
GetFileType
WriteTapemark
UnmapViewOfFile
lstrcmpW
RegisterWowExec
CreateEventW
GlobalSize
UpdateResourceA
FindResourceExW
WritePrivateProfileSectionA
ReadFile
Heap32ListNext
WideCharToMultiByte
FindAtomW
InterlockedDecrement
GetProcessTimes
TryEnterCriticalSection
QueryMemoryResourceNotification
SetFileApisToOEM
GetPrivateProfileSectionNamesW
GlobalWire
FillConsoleOutputCharacterA
InitializeCriticalSection
AddRefActCtx
GetNamedPipeInfo
DelayLoadFailureHook
SetSystemTime
GetTempPathA
SetCommTimeouts
GetModuleHandleExW
GetProfileIntA
SetFileShortNameW
GlobalGetAtomNameA
GetProcessHeap
GetLastError
ConvertDefaultLocale
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PathAddExtensionA
CommDlgExtendedError
GetOpenFileNameW
ChooseColorW
ChooseFontA
VarUI2FromBool
GetVarConversionLocaleSetting
VarR4FromI2
VarI2FromDisp
ADVANCEDSETUPDIALOG
AddMonitorW
CreateBitmap
RemoveFontResourceW
GdiCleanCacheDC
GetFileVersionInfoSizeA
WTSWaitSystemEvent
WTSEnumerateProcessesA
WTSVirtualChannelPurgeInput
gethostname
WSARecvDisconnect
CreatePropertySheetPage
MenuHelp
ImageList_SetFlags
ImageList_SetIconSize
�'�B!?HG��Ȩz�<���͉iN����_�d�,xV�����I�ќ}�% �z��M�Н�w�R9�rɮ� �̙e>�gMV�,!�(6���W� u/'�퓝�xv��sI�A�|j4���b^��D1���g�l���'��N�p8�P�L�Z`��1�-���Ȥtg���QG��� Q$~M�����!ۇH��̝n�2Ia�IZl��/N:D�W����!��uQ�9���wQ0�Dy����-���[����Ue�W��k��������V~q��2_��<gk���R���e���0J��o��ȑ��$�SC�wս��� (WHP���y�C��p>� D6��Ҽ�1e�%͉��XPMU�!��������ڕZ ��?�P]6�N'������L2� �)�O�Ŏ��C�+�����w8[y"FX=�x�d-�KL�-�Ҿ��9$�S��$rT�r��hL�p��1�0�WW�N�Ĵ��_����I!5� �8��/���e� �A �=��\�z�;[�sZ�.:��s��a �z0�� xu ������>�|���9��&�Kſ�6�����Y>�+ɰZ����c#9t�M���2[�M������[E�Y�t#��{r�$��Օ^��<?qZ:��R��g�4o�VٍT�I� �A#�E\�sh3k2����댇���|� y�ȪѨ qn����?��U�ġ�Pxm���/�'�5c�I���9b@�Fl�ax���Zq��Ġx���%)��_nK����"Ɍ��-��$�&J��FDu���̞pf��v����3��13��~,1���˳ݘ�臯]k?~��Un�6u��Iq�r�������c�2��D���S�ia�3� �[fSI)J������!w%�A�;�M��ɇ�|�H���e����V��6� �|���7cX:�������0�����,P�z|#��b���@��uo2��T]�H�]��n�,��� �P%��6�06؊�q�FkT�B�`�,��,��a[z���2��6��;[%�z=%EdRݾ�rE�F��\��V=03 �ۮŊ����хy6�;��(��uX��k�V ��+^T]�(i&g���{^^�H��Bz�c(�vQŵ�����MNg,EO�8�躭�DyҾ�� ݰ��A�ʊ�@����?g���9Ӆ��Y$ ��2uke��c�K���#����F�3o�~0��<T~���{��(ZhU�i��gжY����b.���ܫ*�W�?_�C��Xҽ7�2:��{����A���{U��e 3��t����]ǣVsi�^"�8K�g�4`P���U �ێ��P��7fx��9����{r.Vv�����"+h�꤫���lH�I�3��Bs�r��Őd�G�Z}�` ns�ɶ����R���%��0v�@x�͠�,���;}�U��/X#�]�`��_���%s�B����:Z�����3�r����6�w��ò�/#[��!b��Ѷn��p�۟�>���WLV��6t!���:��|B�;!����4m�����ӣZE�O Mܦ�ԑ�h� e:�n�A�3쨴�-h��88N�D���p.|"�G�^����;4��d�OWlv�R/=��%hq\�d����5L��ErDT�P���FĒ�� (uA�`�j�~�G1�ޛ�E�\F���$�����\��w����u��E��,�̬����,PeUB�>����o&R�����+5�"� �턑),a�qm�T 8yB�*�q�rX��Eu88K��[�Z;F���j�D2&vO���-�-�2���m��� �&+PcE%�DF�31�����Ӓ�T�v���ROҎ�G^:/]%([���"_��%�g��L~��T�&%$��>E>��b,�5q���Rh̲�O��)rX2�L���K�m�����7o&���jl���0��c�Ѯ��i�?^�6�'���9l��Y"Щ�/�":��[Ϲ�������!����I���`Y��=��B*̚:�Ҁ���� �k�WK���-����Z����h�X�v�}VJ����)�\؛�r�g�MNo��{�������˘mX�� ��|��YKտ�r�I$�,�ju�ЈU��zd��Ƹ��}a�%14l�}FE㜄��[��S*��Y��� ��?^���q��@����);��~��9��gqb9�yh���ǣ���D1�\�"x�(NBm2��!l�-�=a�do$*��-��%6#�¤���0��"���0r&�N���2-�jWE�N��^��2���N���K,c1E��₤����� F���,R���Mյ��G"ܝ�p*6jH��m�������6�L�c64a�~���L���9^mJ�˶��@�C����;FG;0I�)�4G���n�� $<gz�.��������T�:q(q���M��1�}B��i��o�Q��(yw,�V����B^�7;}�{K*9��8E���Y�Xq�8IT����n?����e�%��_5O�r�{c c�6�8��#Sb�6n��0��-,�Ҫ+�3�H����㾘���S���51+�B��<ᗔ��g���� �>X;�<7W 2ʹF���tɉd�I������*�y��)K��C7���,n9��9�ٕKӧ�䛝���u#�^l�Ki�d���?yT���?� ��/����<,����ݟ'��Q�>����b��#���SL���2� "!����[&E��yu�q����f�l��3D�(e��v��cbM���a-|7ЛO�k��2�AZC)<�{@����I�ox+| he�)X�����ʓ#�n.<�z��6*�A��`Ȟ~W3'|cap�;>��w��_(���b��ܬ�F-�� fm���q���=:���&du�qO1��GdK nqi�$K�y�^���:���v_{F5�khm�Z Yϩ�WmG�<q��(�����X6�i[pIT�FpBj�a�jEda>/��e㋲��� B��M��`^ ?��)�>�[����%k���Ž�1���2�����O���@9�F6qHE�<6�K���F�I � X�2,��P�I�0��22�����.��N
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ