Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
0d74612b47874c6dfc0d0dfae03dda57.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d74612b47874c6dfc0d0dfae03dda57.exe
Resource
win10v2004-20231222-en
Target
0d74612b47874c6dfc0d0dfae03dda57
Size
618KB
MD5
0d74612b47874c6dfc0d0dfae03dda57
SHA1
245660828dbcb3a4b21943fe100b1fedef60e9e3
SHA256
055175cb2c2966ed420dd458b225f659563ab3253baa7b45ef139be52c231671
SHA512
e3baf6b87ef5c5df79bfc85078f1fe80b97898f825e554ded251a591d3b206f2d41510f988afd92357c58ef16171cd34914e0483412219a928b2ec7042f63554
SSDEEP
12288:Xu1xdK7cQa/MVO44B2G/PS9G03u4uL55Jv0G4n7ENhMo:d7cZ/MyB2gG3u4y5doEL
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DragObject
BringWindowToTop
EmptyClipboard
OemToCharW
RegisterDeviceNotificationW
SetClipboardData
WaitMessage
ToUnicode
MoveWindow
GetKeyState
SendMessageCallbackA
GetGuiResources
GetWindowTextLengthA
SetWindowPos
GetClientRect
IsCharUpperA
CreateMDIWindowA
LoadKeyboardLayoutA
GetMenuBarInfo
SetClassLongA
ShowWindowAsync
GetCapture
DrawTextExW
wsprintfA
IsMenu
GetKeyboardLayoutNameA
UnloadKeyboardLayout
LoadCursorFromFileA
AdjustWindowRectEx
SetMenuItemInfoA
DefFrameProcW
GetWindowThreadProcessId
MessageBoxTimeoutW
GetMessageA
EnumDisplaySettingsW
CopyAcceleratorTableA
GetClipboardFormatNameA
SubtractRect
SendMessageTimeoutW
OemToCharBuffW
RegisterClipboardFormatA
DrawIcon
SetMenuInfo
CreateCursor
ShowCaret
LoadStringA
LoadCursorW
SetClassLongW
GetTabbedTextExtentA
GetAncestor
UnhookWindowsHook
GetClassInfoExW
LoadCursorFromFileW
GetListBoxInfo
ShowOwnedPopups
EnumDesktopsW
DefDlgProcW
SystemParametersInfoA
DlgDirListW
SystemParametersInfoW
FindWindowW
MessageBoxTimeoutA
PeekMessageW
HideCaret
MessageBoxIndirectW
GetKeyboardLayoutNameW
CloseDesktop
GetUserObjectInformationW
ActivateKeyboardLayout
OpenInputDesktop
ModifyMenuW
PostThreadMessageW
GetKeyboardState
SetDlgItemTextW
GetMenuItemInfoA
RealGetWindowClassA
GetUpdateRgn
IsDialogMessageA
UnregisterHotKey
GetMonitorInfoW
GetWindowWord
GetCursorPos
FindWindowA
IsWindow
EqualRect
EnumThreadWindows
IsDlgButtonChecked
GetMessagePos
EnumDesktopsA
CreateDialogIndirectParamW
UpdateWindow
GetClipboardFormatNameW
BroadcastSystemMessageExW
InsertMenuA
BroadcastSystemMessageExA
GetSystemMetrics
TranslateMessageEx
GetScrollInfo
GetMessageTime
MessageBoxW
IsCharAlphaNumericW
OpenWindowStationW
SetCaretPos
GetWindowTextW
GetWindowWord
SetFileApisToANSI
CreateProcessA
lstrcmpiW
SetErrorMode
ReplaceFile
IsBadStringPtrA
AddAtomW
EnumResourceNamesA
HeapReAlloc
GetCalendarInfoW
FindFirstFileExW
SetFileShortNameA
VerLanguageNameA
SetFileApisToOEM
ClearCommError
CloseProfileUserMapping
CancelIo
GetLargestConsoleWindowSize
SetComputerNameW
CreateDirectoryW
GetPrivateProfileIntW
WinExec
GetThreadContext
GetFileInformationByHandle
ReadConsoleOutputCharacterW
GetModuleHandleExA
GetConsoleCursorInfo
GetPrivateProfileStringW
ClearCommBreak
GetEnvironmentStrings
RemoveDirectoryW
WaitNamedPipeA
GetStringTypeExW
SetEnvironmentVariableW
LZInit
CompareStringW
Heap32First
BuildCommDCBAndTimeoutsA
CreateProcessInternalA
FileTimeToLocalFileTime
WriteConsoleOutputW
ScrollConsoleScreenBufferW
OpenEventA
FindClose
GetDiskFreeSpaceExW
ConnectNamedPipe
EnumSystemLanguageGroupsW
WaitForSingleObject
CreateTimerQueue
MapUserPhysicalPages
GetOEMCP
GetProfileIntW
FlushConsoleInputBuffer
GetNamedPipeHandleStateW
GetThreadSelectorEntry
LocalSize
GetStringTypeW
GetTimeFormatW
CreateFileW
GetProcessTimes
ConvertDefaultLocale
GetConsoleKeyboardLayoutNameW
PulseEvent
FindFirstVolumeMountPointA
lstrcpyn
lstrcpyA
QueryDosDeviceA
ExpandEnvironmentStringsA
WaitForMultipleObjectsEx
GetConsoleFontInfo
GetDriveTypeW
GetTimeZoneInformation
FindFirstChangeNotificationW
GetACP
GetLastError
ConvertDefaultLocale
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
FindTextA
PageSetupDlgA
ChooseFontA
ShellExec_RunDLL
InternalExtractIconListW
'ht-�q�r�~��뇢����v�(�{�0ayA a��a�*j�����@2'�.?"��}���ݒ��,Ч�o�W�������!���M�C�M���枖�0ǍL�!!�w�ź�š��DjDl�=rmF�F�B��{�؛���!��y�Fn ��w )7DZ�+�42����x�?�&��`C�78do�p�yF��wx����T�����J�x�[���X=����>�-#�)"�W���?gcx��hk�p�1]�O�]�;�ϏϚ,q�����v~�v���,��۲�������D{䜨NN�P�)W>X�B�3y��O@�\�y��x�Ʉ7mju;����� 2�]R���t���n�����6�`e��_|�Z�U����d��Ï�����ؓ%�pY����� �����sqP��������?�`����M�������Ct9�N�x��u��.](Sw�4@S��.������h;�+�X�c췫��l��m1��'��8�34���Ԍ)��q��*��ˁ�?��d�B����Fe�fr���rt�kY���~�-�����Ԟ����[�C���q��-~ &�l��mxj�`<�?� �lpH�< y�G�*�g����d�9�[�����&�m����z9�%���!��~a���p%�:��w���Y�U��δ����o�,����EZў�huw^5p�魟���Y�n��>���~�TФ Ԯ民7?s���֫�4�� uLcH�44��[���%�F-ث� ~M9�{�o���8��z����4?�^���Fnko�Ҍ�}Q ��S@��Д\��hERI��U���DMeT�l�؟����pZh�v�K���JN��Nkǻ��<W���$��r����kQ@�ØF 15G�5m���i�Φ� ���4�kBOnZ9���9���=�8MD��&LN0�\ɶ d�d�cD ����-��t�s�`7�R�_�� ɛ���wؿܹ!�z~4ky/իQ��h��j�\1��5Y�ʰE2�g�צ��f�9�JH�����V��O��h�֣�l�|�@���h0G�0��m��]�?W@<�s�-՞���6� ����_PG��Ή����3y��!�����u!�My��,[�D�>H��0�S���ўfp��v�nLH�NZ�n.�/�i3*����d��R�b_��=I�uU�e�x�c�M�#�17��ӆ��p���T�X>(�\ Cg7F'io�II�Ç��b��_�:観x/g>� `6�~h���h���2��L�0����f� C"�`�`�/[��SIR3�ЇiZ�.������F�_w�s�)Y�=�Ho�)���G'���=�������f���@���MP7 ��=���[H�$�^��t��5�ň@�.��r����հ<���e���mS�,��4d4ǂ��A�v���R�hm�}�$�.�P�����s�V��P�ڃ���Ä��O�V].f�!�SY=eˎԯ�7���K�?H�ޚ���9j���}�]�'H$M�~�������*{��:�$s�r|Umf�.Q�Opy�Л`V�����`�����1m��N[#'�m�G�cKi���E���P�?��檈2�͙c6`���:�W�+�P��>�QO Ԅ ��gx��� ���j�W��Cn�J���@n��5�� ���d���9�(&�3^�+�G��Hz����x'52�A��f�c�3KuCB7=��J�|`��eА������꠵�� k:k��b%�u���O�Pz??�}���2��R�j�.�(u���bNgr~RӣmeW��ڕӿ�m��=���rn�VI��� �������v��@C�a�L(�s�2T~��#�,59�س[ ��K����EK�^b�T�zx�߁��w#�Ɛ%�������5����g��&����&���\�#��s��)�l]���W�SJ1��FaÈ�Ђ��ʙ�bG�����T�k��Ál�5���!���mog�.-j^������<@/��H�(��0�I�u�Hj��r������o���P�G2�Y8&����bWO77�d���18о���E�����ܫ%d���R3p��`���B.��(V �r0:r�d�,��i,<I[����J���T�i��]� ^*�n'�:榾J��3�_��P�T��e���V �e 4����5���� �A&�_'��Qߪ�p0)'Iϫ��/8��9���<(�gth�ՙ�Ɍ�S[���KS9(���X��ٵ ��DZ�ƈ�B_����ao�J���1n�wЊ�6�U��8�pK)�����,��/� �Pi�G�������� z�{��I'T�˭�p4����zM6'����r�\� �%��.���/A��'G�B#��>�a) �/��Z���a�\��#X�~~�zx4�����!���!��;�-�ܘ�.���IjiU���_uv|�����_�Lu#��]�5��4�R,y���iZ�D�Ά��좂��N���D/�%R%�[��C��mF|o� ��W�_����!'���٣� ⷙ�2R� IE>/4��:|r�k!d�3��^�ȃ�J�$����(�ЕAe����+���~D���o=//?H���rƑT\���?kd���5�}9 � ]�#��>"�Z{����� ~ X�p�����-$�_��x?F_��HW��ӊ!c�]�;�L���oѩ��ħb���$�&�oG�蘫j�ep��L6�z��@�~�j��a�|z��������7 �T��������# ����Ef���-�G���� ;uM0&���&��6i�@��\Bmet��-�H� �����S}�P'���3��{嫒C��/�S`j�����KHc�*p���ߖ�PG�]`q m[Uޱ��è���ߗ��@W�\|!�tS��[�p� ���7ѝx����\݆�@2�zq&?6�q��K���<�^�E� �%���|?T�%@�}�8�PD>`��cp��4�JS�y݆ߕ1���t \3(s��7�����+f���{M���}�������a�)�p���%�b� �!��j��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ