Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
01e21fb0c03f3fc1fc08156cddba58be.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01e21fb0c03f3fc1fc08156cddba58be.exe
Resource
win10v2004-20231215-en
Target
01e21fb0c03f3fc1fc08156cddba58be
Size
607KB
MD5
01e21fb0c03f3fc1fc08156cddba58be
SHA1
bab3dcdf47fd743ec4c3624c3a21310ace51499c
SHA256
217a602437a9d7d47bd161392159b3c7a426a1f514b3c18b3513f040f64705be
SHA512
a7161c8ae85cbbb82e0cbdbc502fcb5f1f21fa96806154400ca426308550194ecd21952c2b80471bb1611cadeb40f381184eff08371f7ba2caabbabfb280343f
SSDEEP
12288:nhGG9MSozbMcOqVSCssNLZoAMPjgqXMmDc9jv3BsNM:n98cLqVSCsCLZCPjgs6jvS
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
LockWindowUpdate
IsMenu
MonitorFromRect
OemToCharA
RealGetWindowClassA
CharToOemW
WaitForInputIdle
GetWindowThreadProcessId
PrintWindow
InvalidateRgn
GetMenuContextHelpId
DrawTextExA
MessageBoxA
SetCaretPos
LoadMenuA
ShowOwnedPopups
wsprintfA
GetMessageExtraInfo
EnumWindowStationsA
OemToCharW
CharUpperA
SetMenu
DrawFrame
DefDlgProcW
SendNotifyMessageW
RegisterClassA
BlockInput
MapVirtualKeyW
IsWindowUnicode
DrawEdge
GetDlgItemTextA
BroadcastSystemMessageA
SetWindowPlacement
SetDlgItemInt
InsertMenuItemW
LoadAcceleratorsW
OpenClipboard
LoadMenuIndirectW
IsDlgButtonChecked
FlashWindow
SetScrollPos
GetWindowModuleFileNameA
CharPrevA
DrawAnimatedRects
RemovePropA
DialogBoxIndirectParamA
RegisterClassW
MapVirtualKeyA
DlgDirListW
GetLastInputInfo
GetClassLongW
SetClipboardViewer
FillRect
ShowCaret
CloseWindow
CreateAcceleratorTableW
DialogBoxParamA
MonitorFromWindow
ChangeMenuW
SetMenuItemBitmaps
LoadCursorFromFileW
CreateMDIWindowA
CheckDlgButton
CreateIcon
DestroyAcceleratorTable
SetClipboardData
PostMessageW
TabbedTextOutA
GetAncestor
DlgDirSelectExW
GetClassInfoW
GrayStringA
IsWindowEnabled
EnableMenuItem
CheckMenuItem
LoadStringW
SetLayeredWindowAttributes
RegisterWindowMessageA
GetUserObjectInformationW
CharToOemBuffA
IsHungAppWindow
GetWindowWord
GetWindowContextHelpId
GetMenuItemInfoA
DrawIconEx
DragDetect
CharNextW
DispatchMessageW
SetWindowWord
GetWindowTextA
SetCaretPos
CharNextA
LCMapStringA
PrepareTape
GetDiskFreeSpaceExA
CompareFileTime
GetCurrentActCtx
SetComPlusPackageInstallStatus
DefineDosDeviceW
QueryMemoryResourceNotification
HeapUnlock
GlobalDeleteAtom
GetUserGeoID
EnumLanguageGroupLocalesW
GetDriveTypeA
SetVolumeLabelW
FlushConsoleInputBuffer
GetFullPathNameW
AddConsoleAliasW
WriteConsoleInputA
WaitForDebugEvent
MoveFileA
GetPrivateProfileIntW
RtlUnwind
lstrcpyA
CancelIo
GetFileAttributesW
lstrcmpiW
GetNamedPipeHandleStateA
CreateJobSet
OutputDebugStringA
VirtualQueryEx
CreateProcessW
GetThreadLocale
WriteConsoleOutputCharacterA
GetWriteWatch
SetFileShortNameA
SetComputerNameA
GetConsoleKeyboardLayoutNameW
ShowConsoleCursor
EraseTape
GetStringTypeW
LZOpenFileA
GetLargestConsoleWindowSize
GetLastError
ConvertDefaultLocale
GetProcessHeap
GetVersion
TzSpecificLocalTimeToSystemTime
EndUpdateResourceW
VirtualQuery
LoadLibraryA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PageSetupDlgW
VarBstrFromUI8
GetFormA
AnyLinkedFonts
GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoA
WSAGetOverlappedResult
WSAGetQOSByName
DllGetVersion
ImageList_DragShowNolock
ImageList_BeginDrag
#�T�/����謚>8H�h��� ��-c\'p�t�jdq���94���[�)�KBz����� {�������K�LYw��_ACp{��� ��ux��L�5�)L�N/�Z�}�F�p���h� �p��~<}!;6'����0U�<ݓ�N6���5�}��t���e��Bb'"'�v,�-��1]|<�EH�+<�>�f���߇W��&w-��%��a�>Ф ��{�3�ٱ����02�diՊ>'n�ֈ ��#D����m�0Ǖ���p��o��jߊu�C��㽭kN%D�Y1�����Cf*���5���J-�9��A���0��W:؞[2B�d,��H��(%I�Zg�����]�\ ����1a$K¦�]$Č��������_ ���}jY�$YL�eި��iCR~�[�G�����O��P\w[��KppKQ"Tx�� �x�e<���I���#$��8�ʣ��</�F����I4ABj��#��������~C{#�G��E�p��G;�~9� ��Y}Ej���_�� ��v��r����P-q�g h�C�2���H 4F��Ҏ �r=���L@�`���o$R�mm3��C�qR_vSB���SU-��c�ܗDo'��!4p������� ���_��W�U!g4(���I(� @x����}�Ӹ���Y_���b�[�t(�!�CP��n|�/���źH#�6q0��SMX���+��vt�K�$$�B��g�em7�k���nz�àO/��Zyٕ^�e��F���_�U�2{|0�j�-g��J�f�:g�?����]`�/ս�{qMk��/����+���~\ Q�[��\�� U�gZHz�����v4�_xjE'.�2-��6�j����M�CI1N��J���,�Y!��/�v����3j�m�0������$%s@$i�:2���X�\=��M� <q��e��鑥&�'\�)�͗t�D�C2����8Q�ݎ��~�Iz n�"�����h��H���U�ts��bB�y#}4��Hx�� �!�*��u"�M�כ.��=^�Aè�b��e�@�cQS��n��4�Q��zTK��BD4RpQ�"�o�u��]�<����F�=�J'[{A��-����V��H�������Q���.tm��)���>�Z=݊��c�\�R'� �<Z>'%���F y��8~3��:��� �����z�n��G��yPJP���7τ��KE��E�=��r6V���EDI�f0$ܻ��n^�h�E�#��d�1E,݊p�,�LXћ��{��$��"9f���^�݁�G}"��ߔ"50��T/�����bzf���o.���0��\�����3�{?:^��Q�U�+����l�S�i�@�|�����@8��r����CV^bK��+�7! �m�.槸�ο~Ϛ��KL�9.@yrO��Q*�.�s�\;/�c��j0ZL�O�Ϯ0EZ�ɮ��J\�b !�L�|�?�-rKt|6���^�`� �]�r��j��j��yB�Ԗ�z�ٯĴᷓ� �5��K3uU��<����fM��W��ᓓx���4�?]L��MSFR��q^��H�d�N�Im�ܺ�s���m�/s8P83�����dNX��8f����oIG�1�3�Z�ޚ�qTg8��D�*�mt�pcu\7Skp#�x�ȉwb��=��Ms&�Z�V�ݘ�E��U������_u�î%��u%mT������QU���ZB��Uva�8̭�'�DW ��aD� J�'V5H�5�$d�����=�K�Z�m��k��,�����t��3-�c.����3*JB�F�yvҪM����uEB�������>�ܾ��ާ�.A���f���%���,k�R�� ��7lc��!Q$�vY�뺳}��'�ex����F>X v��Z�z��9<�=�J�K�|�|Ҝ4_'�|���/�������v��AG6�ծu�����2�����N#�.���= �5(4f����]]��g�%O��5�<L����^��XOy�5���[+2�W��s���5ֵ�w!6��v����W�M��H�P6�S7��H.���3O�e�^�_�Md�k*����L "}�º��:2dMf9��l�5�e�|k�M/�e�7=��ju�mr[8�ݴFs@�1\W�2QbڢqC��g�pr|���D�,b � �f�?��a��w�q�����&������n��������ۈ)�����N�.`D�P ��c%�Z�L�ԫq �,��}v��§���G��0+������Z^.�vڻ��'{ ��mmBÝ��S�rEaYxLη�;SSV=)���m2��s�6��Fa��6)����{�<���V���0G����R��5����0f�<���a�{q�L1���2��h����^y(7��=Eb�ي���Ѧ�Y��D�o]�j۴Mi�~�l0��V�{�����L��$��L��7J�wM�1%R�r���q�q>AҹyQY�e� �š4��������^�L��Hv���dr;�R7lJ�ؓ�*x�٩��{�MP@��k!��L��'��IF���Cj_��|d` $�<��|�=�A��?'���on2 � ��N���hS��痿NL0�V�����*KdG��-����J \M`x!T�~�d��V��b?b�<R�)?2�ڑ�V:9����K��kpL��L������$�;��"|.��Uw�}j���j���R�c��^e5ҝ`��l�l�?��U�/��j�7����:�$ŧ�w��\F�/�٤�+ˬ������ZRm��D]�?bt�:-�G$-��]^�C4� �ŅP�G�W�/�& ����luG��"�?��:t�i#�����钊M���L�S��w�"8�l%����L8��SL��6�ə<���@cm�VQҏ����D�}<�G�����G�y�0����]��F'�G!�ש�$Cm LhA��!��i?�h���,�dE��'ԏ���4��d�/G��Ps��nc��pDi���v,4��Ѣ$TCy���c|Ы5�-A�e A�5�]�N�<PS�a���w��Ў�bZ�E� x:i�Ɯ��I �!Y��\�4�����n
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ