Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
0b163f2ce785c06e84d81f80b2632128.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b163f2ce785c06e84d81f80b2632128.exe
Resource
win10v2004-20231215-en
Target
0b163f2ce785c06e84d81f80b2632128
Size
739KB
MD5
0b163f2ce785c06e84d81f80b2632128
SHA1
dbd17bfbea188af55f2e729455c1d2c688d27907
SHA256
103c4804c460158e00cb811c24ee4313cc434d90d56f81374f4cff34338b2329
SHA512
9b3b6645284d4632e74aa29648d1209826147fe822feb744dbf29c6da557c363d350cb1ace8dda769ee96e17d51cafce07038ab04b565db4214a3bf5d08cfea6
SSDEEP
12288:VnkNpWI4HKJnxkPLvXopQTbyKn/zhOfe0qYrB3bU0S:qNpWI4qJneLvW0LkfYy3bU0S
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PathRenameExtensionW
StrCmpNIW
SHRegEnumUSValueA
PathIsDirectoryEmptyW
PathUnExpandEnvStringsA
SHRegGetUSValueW
GetOpenFileNameW
GetFileTitleA
GetOpenFileNameA
dwOKSubclass
VarI1FromDec
LHashValOfNameSys
OleCreatePropertyFrameIndirect
GetAltMonthNames
VarI1FromDate
SafeArrayAllocDescriptorEx
VarUI4FromR8
VarR4FromI2
VarBoolFromR8
VarDateFromDec
VarDateFromI1
VarI4FromCy
SafeArrayCopy
VarUI1FromUI8
VarUI4FromI8
VarUI4FromR4
VarBstrCmp
VarBoolFromStr
VarDecNeg
SafeArrayGetVartype
SetJobW
GetJobA
EnumPrintersA
AddFormA
DeviceCapabilities
OpenPrinterW
AddPrintProvidorA
DeviceCapabilitiesW
GetPrinterDriverDirectoryW
ClosePrinter
DeletePrinterIC
EnumPrinterDriversA
GetFormA
EnumPrinterDriversW
SetPrinterDataExW
AbortPrinter
CreatePatternBrush
DeviceCapabilitiesExW
PtInRegion
PolyBezier
GetTextAlign
CreateFontIndirectExA
GetObjectW
GetKerningPairs
CreateHatchBrush
GetCharWidthInfo
SetPixelV
GetCharWidth32A
GetTextExtentExPointA
GetTextExtentExPointI
GdiEndPageEMF
GdiReleaseDC
VerFindFileA
GetFileVersionInfoSizeA
WSAAsyncGetHostByName
WSASendDisconnect
WSARecv
WSCDeinstallProvider
WSCUpdateProvider
WSAInstallServiceClassW
WSCWriteProviderOrder
WSCEnumProtocols
WSAGetOverlappedResult
gethostbyname
getsockopt
closesocket
WSAEnumNetworkEvents
recvfrom
WSASetServiceW
WSASocketW
WSCInstallProvider
WSARecvDisconnect
ImageList_GetDragImage
FlatSB_GetScrollPos
ImageList_Duplicate
PropertySheetW
ImageList_SetOverlayImage
ImageList_LoadImageW
CreateStatusWindowW
CreateMappedBitmap
ImageList_DragLeave
ImageList_AddMasked
FlatSB_SetScrollRange
CreatePropertySheetPageA
FlatSB_SetScrollPos
ImageList_SetIconSize
ImageList_GetImageRect
CreateToolhelp32Snapshot
AssignProcessToJobObject
GetVersion
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetMessageTime
SendMessageW
]:��ts�C�-d���g,���c�E����'��NA��#�`���ZL5��D���99Fw����D�')q}3������*{���!jR�ʸs��]�f��pAJ�"8��P8�����:ի/��3ז~c�n�I�,��` _[Զ�ކ����1��^ÊS�.�H7��{X��J:�=���*��X����P����+%U��$<�ʝ�Iq|�%���xP��1L�i ��\�� �=�Z�����e} &�������I�xѯIl��OwL��Ҫ~��w"��������-iM��⑨�}o��y��v�A)U�OgqCH6��SέG��)� M��A�jT��<�9k�r/PR��l�c�z�brU�mRZ;ɕ���Y&�y�OU�у����Xd�;q#���+�1;���k���(D�ZP�F8V�=X��M: ���n�+.B4�φ��}�y��?cB� ��NCV����1�ȟ���.^ �����Vo��z�F��p�{�C��p��1y�A��ۉ�V]ư�6]�o.��s۞0�O-�GwX���lCMe;ل�k f�v��ڍ��g�>���eT4�+EIϬ=PBJ����P�s�c����:�{�UHp���.��P&����ѐ���l�����m���a���S/$J5�,I{2u�1q�,˨L������DR���� 5���j�7����eUq�D��K����f��JB�1���{�!�$�����^��@ fu,OE̓M����-]�i�)+zb"[r5���= �?/ �����Ͽ��z{�6�z�����t����V4�^���$mc���N�T�W�r��6$��RDٹ��L��vV�Y�tE:��8�ږ�A�)۫ĵzԍ�XBT�3�ц7GM�ʄpN+c�cQنP{b��BJI��f���K)Q��8W{9X�D��G��2�=%�h�je�stO�i����ibe*��f~��s��}3�S`�!�[N�uQ~�;p���3��GԎ�{"npЯM-b�1�B��WwS�e�Z��)���J-���]����Y���LaI�2C��]���'���䔽�ό �d��%d��5�1.�L�\�]D��}%�{��w��Yqn��F�-[)Ě�d����˃�Հ�n�cT��a��}��~%<���:s��̆$��kC"x������sI�v���E���F�v�7�z#� V�i'�z�9�H7(�K`!|H���d�l+�<S���n�[{��+��W�%;o�[R� H����G�Ǐ���v��:8�\�������T-��R�b;?��ơ����3۩� �K2ѵYK!J x҈��`h�M]�nK��^?k�n��LW�&Z69� HmV��ؔJy�i������2�Û�:�d��(7o0�0�����|#�:Zۂΐe�S�����и߰��ϳ�� ��H�mO{��\�iBC���x�ul'f�͏ν ���Ӻ4�c&��+1u��F8[�+E��pkP������_R�(#& �?j�"K��n!�d�����VnH��ܻ5��YB�\�U�Q���R� mJ�&��1s/�H���)�5r��4o�,�ݷ7�w�[ �j�x�z��Ҕ�-�2WmhC�7���$�)�������d�� %l�t�#��hs{z���N4g)�]�s�����nUUJ����~|��.���_�4�t� � F��>�2�g@��i�`9����b�dW��X#ࠞs��������@YIP{�WxUܠw-�b2/ïPu���s�c��;���k��˩�-wg�fm��s����SS��=�\ɪX���S����p ��vP|2�9�@ \"����'U�Y��7̸�o�EA�K�rI� �S7�I̔���f^+�v ��J\���2���7Qyiv��Q�chu��&��ﮏh�U7�l�qh�����@cF�9���|c�yr|���[�@��;�$�@y05?���;�1�(��0tџݭ���@6x���r^��A#��A��;���.��'����-�S�&�^��v��?t�}Op���©j��-�@��'����@E,�h���p3J�bv�Y�6��(W!�͙��օ�~�Ǎ���Z�B��Cger�v>/{Wpx@�D<d�a���P�̚˰�務����,[aIUxqw�v=������a�m��R�R�#��7߈��9`�� �q�_bW�U�J��)�2#�BѺ�������R�3��T��O�� �6|��K�͏� ���x����5c���{ϳN�\�~�/V+��U��K~U{���U6�A�:�l��vru�tn��S���Gcz��������먪Y���u���Hz��m��Ͻ�0�W���'�\��e4�ZY� �w��J���-����=_���S�\ԍ�IXZ�aӵo ��?�p���>.R�?�j�ZnOy����ka�����-�أ��,$����韩��|h�M�8I8:�nx�����Gq4��X=#6�ߓ�w�A_�5��ˋF^�����8/'W�>�9>G4˒C���c�Rk̜�*�,��'8R��RU�+q�9&�]kk�s��yDnQ+3 6RFx��� m{�Ӎ��q��>\.P�Vh���e�����~�ϵr�!E�xO��q���Y���01J�160yz��!���i�������]�5N���P���X}�7t�s���#��5j�&�b�i?F2� ����Lfu��}3��<��]��o8#j�n���5��e7�N2^���ps�/1Bc���4 �X�a�`��U��!lV�cwɰ���G�����,y�����9��F����pn$v�`ctʥ��B>% �Hk� �rM8|�,����6�7�Ge�^b��M@�_���#��f��=t��,���/yW��~�7uWQU&?���_�Bi��b��Lh�;rg]k�Pށ�BC 6{�!¢��:�"�@N�"���?�9z֯��ݙ�>]��b5�Eq�Xm��&v�����>���TqD1ެ�s�W0����@��NQX`+KiۖH��m�s�śT
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ