Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
1dc746405aee178f685d2f24cd258cfe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1dc746405aee178f685d2f24cd258cfe.exe
Resource
win10v2004-20231215-en
Target
1dc746405aee178f685d2f24cd258cfe
Size
585KB
MD5
1dc746405aee178f685d2f24cd258cfe
SHA1
37eeb6720b77ee7500dffb9665899b3b269515c2
SHA256
22137b284d498a3438207eaa72df49f95eaa1c55e6222037426dab21fde88272
SHA512
0cea49bd4b847bf67caa91cc5c7ed3dccd62b6949ad7a771b1dc38512c90b6989e674bf687a280627809d736a3854f65b772e24bf42435f7ada18bed7f1e6584
SSDEEP
12288:VTStHGQQbjMG8KNhVFNGa/fVWIc0KgGGKbhMru:VTStqbjMGrN50wEIbOyu
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetTabbedTextExtentW
TrackMouseEvent
DrawTextW
OemToCharA
DestroyIcon
MenuWindowProcW
RegisterHotKey
InvalidateRect
EnumDesktopWindows
CharToOemBuffW
BroadcastSystemMessageExW
GetWindowInfo
BringWindowToTop
CharPrevA
ChangeDisplaySettingsA
GetUpdateRgn
MessageBoxW
CreateDialogIndirectParamW
UnregisterDeviceNotification
GetSystemMetrics
OpenIcon
CheckRadioButton
ShowWindowAsync
CloseWindowStation
SendNotifyMessageA
IsIconic
SetCursorPos
GetMenuContextHelpId
SetFocus
EnumPropsExW
AppendMenuA
SetDlgItemInt
GetMenuItemID
GetWindowThreadProcessId
CharUpperBuffW
RemovePropW
SetCaretBlinkTime
UnregisterClassW
SetClassWord
GetMonitorInfoA
GetForegroundWindow
FillRect
GetTopWindow
SetProgmanWindow
GetAltTabInfoA
SetMenuItemInfoA
MenuItemFromPoint
ChangeMenuA
GetListBoxInfo
CharLowerA
CharToOemW
GetDC
CreateDialogParamW
SetProcessWindowStation
DrawCaptionTempA
EnumThreadWindows
DialogBoxParamA
GetClassLongA
CopyIcon
SetCursorContents
LockWindowUpdate
FindWindowExA
UnregisterClassA
DefFrameProcA
GetMenuState
GetDesktopWindow
SetSystemMenu
EnableWindow
CharToOemBuffA
CheckMenuItem
SetWindowsHookW
LoadStringA
DestroyAcceleratorTable
AttachThreadInput
RealGetWindowClassA
AdjustWindowRect
SetInternalWindowPos
DrawIcon
GetAncestor
GetUserObjectInformationA
RealGetWindowClassW
GetWindowWord
ClipCursor
DrawCaptionTempW
OpenWindowStationW
SetRect
ScrollWindow
GetDlgItemInt
SetPropA
LoadKeyboardLayoutW
ReleaseDC
CharPrevW
InvalidateRgn
IsDialogMessageW
GetWindowModuleFileNameA
CreateAcceleratorTableA
ValidateRgn
CloseWindow
ValidateRect
GetWindowDC
GetMenuStringA
SetCaretPos
GetWindowTextW
SetWindowWord
GetShellWindow
GetConsoleFontInfo
SuspendThread
GetTapePosition
GetLargestConsoleWindowSize
GetLogicalDriveStringsA
SetFileValidData
GetProcessAffinityMask
GetPrivateProfileStructA
GetAtomNameW
SetVolumeMountPointA
Sleep
GetProcessPriorityBoost
GlobalAddAtomW
CreateThread
EnumTimeFormatsA
GetCurrentActCtx
LocalFlags
LoadResource
WriteFileEx
LocalHandle
OpenMutexA
CreateWaitableTimerW
ExpandEnvironmentStringsW
EndUpdateResourceA
QueryDosDeviceW
GetCPInfoExA
GetDiskFreeSpaceA
GetExitCodeProcess
CallNamedPipeW
CreateSocketHandle
lstrcmpiW
LCMapStringW
QueueUserWorkItem
WriteProfileStringW
EnumCalendarInfoW
RegisterWaitForInputIdle
GetTapeParameters
GetCommMask
SystemTimeToTzSpecificLocalTime
GetNamedPipeHandleStateA
WriteProfileStringA
GlobalUnWire
SetTimeZoneInformation
FindFirstVolumeW
MoveFileWithProgressW
GetNumberOfConsoleInputEvents
GetFileType
WriteTapemark
UnmapViewOfFile
lstrcmpW
RegisterWowExec
CreateEventW
GlobalSize
UpdateResourceA
FindResourceExW
WritePrivateProfileSectionA
ReadFile
Heap32ListNext
WideCharToMultiByte
FindAtomW
InterlockedDecrement
GetProcessTimes
TryEnterCriticalSection
QueryMemoryResourceNotification
SetFileApisToOEM
GetPrivateProfileSectionNamesW
GlobalWire
FillConsoleOutputCharacterA
InitializeCriticalSection
AddRefActCtx
GetNamedPipeInfo
DelayLoadFailureHook
SetSystemTime
GetTempPathA
SetCommTimeouts
GetModuleHandleExW
GetProfileIntA
SetFileShortNameW
GlobalGetAtomNameA
GetProcessHeap
GetLastError
ConvertDefaultLocale
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PathAddExtensionA
CommDlgExtendedError
GetOpenFileNameW
ChooseColorW
ChooseFontA
VarUI2FromBool
GetVarConversionLocaleSetting
VarR4FromI2
VarI2FromDisp
ADVANCEDSETUPDIALOG
AddMonitorW
CreateBitmap
RemoveFontResourceW
GdiCleanCacheDC
GetFileVersionInfoSizeA
WTSWaitSystemEvent
WTSEnumerateProcessesA
WTSVirtualChannelPurgeInput
gethostname
WSARecvDisconnect
CreatePropertySheetPage
MenuHelp
ImageList_SetFlags
ImageList_SetIconSize
�'�B!?HG��Ȩz�<���͉iN����_�d�,xV�����I�ќ}�% �z��M�Н�w�R9�rɮ� �̙e>�gMV�,!�(6���W� u/'�퓝�xv��sI�A�|j4���b^��D1���g�l���'��N�p8�P�L�Z`��1�-���Ȥtg���QG��� Q$~M�����!ۇH��̝n�2Ia�IZl��/N:D�W����!��uQ�9���wQ0�Dy����-���[����Ue�W��k��������V~q��2_��<gk���R���e���0J��o��ȑ��$�SC�wս��� (WHP���y�C��p>� D6��Ҽ�1e�%͉��XPMU�!��������ڕZ ��?�P]6�N'������L2� �)�O�Ŏ��C�+�����w8[y"FX=�x�d-�KL�-�Ҿ��9$�S��$rT�r��hL�p��1�0�WW�N�Ĵ��_����I!5� �8��/���e� �A �=��\�z�;[�sZ�.:��s��a �z0�� xu ������>�|���9��&�Kſ�6�����Y>�+ɰZ����c#9t�M���2[�M������[E�Y�t#��{r�$��Օ^��<?qZ:��R��g�4o�VٍT�I� �A#�E\�sh3k2����댇���|� y�ȪѨ qn����?��U�ġ�Pxm���/�'�5c�I���9b@�Fl�ax���Zq��Ġx���%)��_nK����"Ɍ��-��$�&J��FDu���̞pf��v����3��13��~,1���˳ݘ�臯]k?~��Un�6u��Iq�r�������c�2��D���S�ia�3� �[fSI)J������!w%�A�;�M��ɇ�|�H���e����V��6� �|���7cX:�������0�����,P�z|#��b���@��uo2��T]�H�]��n�,��� �P%��6�06؊�q�FkT�B�`�,��,��a[z���2��6��;[%�z=%EdRݾ�rE�F��\��V=03 �ۮŊ����хy6�;��(��uX��k�V ��+^T]�(i&g���{^^�H��Bz�c(�vQŵ�����MNg,EO�8�躭�DyҾ�� ݰ��A�ʊ�@����?g���9Ӆ��Y$ ��2uke��c�K���#����F�3o�~0��<T~���{��(ZhU�i��gжY����b.���ܫ*�W�?_�C��Xҽ7�2:��{����A���{U��e 3��t����]ǣVsi�^"�8K�g�4`P���U �ێ��P��7fx��9����{r.Vv�����"+h�꤫���lH�I�3��Bs�r��Őd�G�Z}�` ns�ɶ����R���%��0v�@x�͠�,���;}�U��/X#�]�`��_���%s�B����:Z�����3�r����6�w��ò�/#[��!b��Ѷn��p�۟�>���WLV��6t!���:��|B�;!����4m�����ӣZE�O Mܦ�ԑ�h� e:�n�A�3쨴�-h��88N�D���p.|"�G�^����;4��d�OWlv�R/=��%hq\�d����5L��ErDT�P���FĒ�� (uA�`�j�~�G1�ޛ�E�\F���$�����\��w����u��E��,�̬����,PeUB�>����o&R�����+5�"� �턑),a�qm�T 8yB�*�q�rX��Eu88K��[�Z;F���j�D2&vO���-�-�2���m��� �&+PcE%�DF�31�����Ӓ�T�v���ROҎ�G^:/]%([���"_��%�g��L~��T�&%$��>E>��b,�5q���Rh̲�O��)rX2�L���K�m�����7o&���jl���0��c�Ѯ��i�?^�6�'���9l��Y"Щ�/�":��[Ϲ�������!����I���`Y��=��B*̚:�Ҁ���� �k�WK���-����Z����h�X�v�}VJ����)�\؛�r�g�MNo��{�������˘mX�� ��|��YKտ�r�I$�,�ju�ЈU��zd��Ƹ��}a�%14l�}FE㜄��[��S*��Y��� ��?^���q��@����);��~��9��gqb9�yh���ǣ���D1�\�"x�(NBm2��!l�-�=a�do$*��-��%6#�¤���0��"���0r&�N���2-�jWE�N��^��2���N���K,c1E��₤����� F���,R���Mյ��G"ܝ�p*6jH��m�������6�L�c64a�~���L���9^mJ�˶��@�C����;FG;0I�)�4G���n�� $<gz�.��������T�:q(q���M��1�}B��i��o�Q��(yw,�V����B^�7;}�{K*9��8E���Y�Xq�8IT����n?����e�%��_5O�r�{c c�6�8��#Sb�6n��0��-,�Ҫ+�3�H����㾘���S���51+�B��<ᗔ��g���� �>X;�<7W 2ʹF���tɉd�I������*�y��)K��C7���,n9��9�ٕKӧ�䛝���u#�^l�Ki�d���?yT���?� ��/����<,����ݟ'��Q�>����b��#���SL���2� "!����[&E��yu�q����f�l��3D�(e��v��cbM���a-|7ЛO�k��2�AZC)<�{@����I�ox+| he�)X�����ʓ#�n.<�z��6*�A��`Ȟ~W3'|cap�;>��w��_(���b��ܬ�F-�� fm���q���=:���&du�qO1��GdK nqi�$K�y�^���:���v_{F5�khm�Z Yϩ�WmG�<q��(�����X6�i[pIT�FpBj�a�jEda>/��e㋲��� B��M��`^ ?��)�>�[����%k���Ž�1���2�����O���@9�F6qHE�<6�K���F�I � X�2,��P�I�0��22�����.��N
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ