Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
1d207e2bcc29b80f53e07b908c5df761.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1d207e2bcc29b80f53e07b908c5df761.exe
Resource
win10v2004-20231222-en
Target
1d207e2bcc29b80f53e07b908c5df761
Size
618KB
MD5
1d207e2bcc29b80f53e07b908c5df761
SHA1
9ae8e239dcef5180066135f429fa92d84e5387d5
SHA256
130bb18b1aa01cdf24f20ebb0d1ebaaeb89be12fa7b2f1d06abfd79298dd96b6
SHA512
a855746d1cbddef8114157e3edb1606804e06da27225f1c9dd21906b50e0116d4c207581f3bb4ed7852cbbe657414c0b022490ab771f5260d7889035c655fc03
SSDEEP
12288:U4INC488VbQ28dM8JhAtRT3u4uQea5Jv0q4n7ENhM66Cd:U4m48VoW8JQ3u435JoEv/
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DragObject
BringWindowToTop
EmptyClipboard
OemToCharW
RegisterDeviceNotificationW
SetClipboardData
WaitMessage
ToUnicode
MoveWindow
GetKeyState
SendMessageCallbackA
GetGuiResources
GetWindowTextLengthA
SetWindowPos
GetClientRect
IsCharUpperA
CreateMDIWindowA
LoadKeyboardLayoutA
GetMenuBarInfo
SetClassLongA
ShowWindowAsync
GetCapture
DrawTextExW
wsprintfA
IsMenu
GetKeyboardLayoutNameA
UnloadKeyboardLayout
LoadCursorFromFileA
AdjustWindowRectEx
SetMenuItemInfoA
DefFrameProcW
GetWindowThreadProcessId
MessageBoxTimeoutW
GetMessageA
EnumDisplaySettingsW
CopyAcceleratorTableA
GetClipboardFormatNameA
SubtractRect
SendMessageTimeoutW
OemToCharBuffW
RegisterClipboardFormatA
DrawIcon
SetMenuInfo
CreateCursor
ShowCaret
LoadStringA
LoadCursorW
SetClassLongW
GetTabbedTextExtentA
GetAncestor
UnhookWindowsHook
GetClassInfoExW
LoadCursorFromFileW
GetListBoxInfo
ShowOwnedPopups
EnumDesktopsW
DefDlgProcW
SystemParametersInfoA
DlgDirListW
SystemParametersInfoW
FindWindowW
MessageBoxTimeoutA
PeekMessageW
HideCaret
MessageBoxIndirectW
GetKeyboardLayoutNameW
CloseDesktop
GetUserObjectInformationW
ActivateKeyboardLayout
OpenInputDesktop
ModifyMenuW
PostThreadMessageW
GetKeyboardState
SetDlgItemTextW
GetMenuItemInfoA
RealGetWindowClassA
GetUpdateRgn
IsDialogMessageA
UnregisterHotKey
GetMonitorInfoW
GetWindowWord
GetCursorPos
FindWindowA
IsWindow
EqualRect
EnumThreadWindows
IsDlgButtonChecked
GetMessagePos
EnumDesktopsA
CreateDialogIndirectParamW
UpdateWindow
GetClipboardFormatNameW
BroadcastSystemMessageExW
InsertMenuA
BroadcastSystemMessageExA
GetSystemMetrics
TranslateMessageEx
GetScrollInfo
GetMessageTime
MessageBoxW
IsCharAlphaNumericW
OpenWindowStationW
SetCaretPos
GetWindowTextW
SetWindowWord
SetFileApisToANSI
CreateProcessA
lstrcmpiW
SetErrorMode
ReplaceFile
IsBadStringPtrA
AddAtomW
EnumResourceNamesA
HeapReAlloc
GetCalendarInfoW
FindFirstFileExW
SetFileShortNameA
VerLanguageNameA
SetFileApisToOEM
ClearCommError
CloseProfileUserMapping
CancelIo
GetLargestConsoleWindowSize
SetComputerNameW
CreateDirectoryW
GetPrivateProfileIntW
WinExec
GetThreadContext
GetFileInformationByHandle
ReadConsoleOutputCharacterW
GetModuleHandleExA
GetConsoleCursorInfo
GetPrivateProfileStringW
ClearCommBreak
GetEnvironmentStrings
RemoveDirectoryW
WaitNamedPipeA
GetStringTypeExW
SetEnvironmentVariableW
LZInit
CompareStringW
Heap32First
BuildCommDCBAndTimeoutsA
CreateProcessInternalA
FileTimeToLocalFileTime
WriteConsoleOutputW
ScrollConsoleScreenBufferW
OpenEventA
FindClose
GetDiskFreeSpaceExW
ConnectNamedPipe
EnumSystemLanguageGroupsW
WaitForSingleObject
CreateTimerQueue
MapUserPhysicalPages
GetOEMCP
GetProfileIntW
FlushConsoleInputBuffer
GetNamedPipeHandleStateW
GetThreadSelectorEntry
LocalSize
GetStringTypeW
GetTimeFormatW
CreateFileW
GetProcessTimes
ConvertDefaultLocale
GetConsoleKeyboardLayoutNameW
PulseEvent
FindFirstVolumeMountPointA
lstrcpyn
lstrcpyA
QueryDosDeviceA
ExpandEnvironmentStringsA
WaitForMultipleObjectsEx
GetConsoleFontInfo
GetDriveTypeW
GetTimeZoneInformation
FindFirstChangeNotificationW
GetACP
GetLastError
ConvertDefaultLocale
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
FindTextA
PageSetupDlgA
ChooseFontA
ShellExec_RunDLL
InternalExtractIconListW
'ht-�q�r�~��뇢����v�(�{�0ayA a��a�*j�����@2'�.?"��}���ݒ��,Ч�o�W�������!���M�C�M���枖�0ǍL�!!�w�ź�š��DjDl�=rmF�F�B��{�؛���!��y�Fn ��w )7DZ�+�42����x�?�&��`C�78do�p�yF��wx����T�����J�x�[���X=����>�-#�)"�W���?gcx��hk�p�1]�O�]�;�ϏϚ,q�����v~�v���,��۲�������D{䜨NN�P�)W>X�B�3y��O@�\�y��x�Ʉ7mju;����� 2�]R���t���n�����6�`e��_|�Z�U����d��Ï�����ؓ%�pY����� �����sqP��������?�`����M�������Ct9�N�x��u��.](Sw�4@S��.������h;�+�X�c췫��l��m1��'��8�34���Ԍ)��q��*��ˁ�?��d�B����Fe�fr���rt�kY���~�-�����Ԟ����[�C���q��-~ &�l��mxj�`<�?� �lpH�< y�G�*�g����d�9�[�����&�m����z9�%���!��~a���p%�:��w���Y�U��δ����o�,����EZў�huw^5p�魟���Y�n��>���~�TФ Ԯ民7?s���֫�4�� uLcH�44��[���%�F-ث� ~M9�{�o���8��z����4?�^���Fnko�Ҍ�}Q ��S@��Д\��hERI��U���DMeT�l�؟����pZh�v�K���JN��Nkǻ��<W���$��r����kQ@�ØF 15G�5m���i�Φ� ���4�kBOnZ9���9���=�8MD��&LN0�\ɶ d�d�cD ����-��t�s�`7�R�_�� ɛ���wؿܹ!�z~4ky/իQ��h��j�\1��5Y�ʰE2�g�צ��f�9�JH�����V��O��h�֣�l�|�@���h0G�0��m��]�?W@<�s�-՞���6� ����_PG��Ή����3y��!�����u!�My��,[�D�>H��0�S���ўfp��v�nLH�NZ�n.�/�i3*����d��R�b_��=I�uU�e�x�c�M�#�17��ӆ��p���T�X>(�\ Cg7F'io�II�Ç��b��_�:観x/g>� `6�~h���h���2��L�0����f� C"�`�`�/[��SIR3�ЇiZ�.������F�_w�s�)Y�=�Ho�)���G'���=�������f���@���MP7 ��=���[H�$�^��t��5�ň@�.��r����հ<���e���mS�,��4d4ǂ��A�v���R�hm�}�$�.�P�����s�V��P�ڃ���Ä��O�V].f�!�SY=eˎԯ�7���K�?H�ޚ���9j���}�]�'H$M�~�������*{��:�$s�r|Umf�.Q�Opy�Л`V�����`�����1m��N[#'�m�G�cKi���E���P�?��檈2�͙c6`���:�W�+�P��>�QO Ԅ ��gx��� ���j�W��Cn�J���@n��5�� ���d���9�(&�3^�+�G��Hz����x'52�A��f�c�3KuCB7=��J�|`��eА������꠵�� k:k��b%�u���O�Pz??�}���2��R�j�.�(u���bNgr~RӣmeW��ڕӿ�m��=���rn�VI��� �������v��@C�a�L(�s�2T~��#�,59�س[ ��K����EK�^b�T�zx�߁��w#�Ɛ%�������5����g��&����&���\�#��s��)�l]���W�SJ1��FaÈ�Ђ��ʙ�bG�����T�k��Ál�5���!���mog�.-j^������<@/��H�(��0�I�u�Hj��r������o���P�G2�Y8&����bWO77�d���18о���E�����ܫ%d���R3p��`���B.��(V �r0:r�d�,��i,<I[����J���T�i��]� ^*�n'�:榾J��3�_��P�T��e���V �e 4����5���� �A&�_'��Qߪ�p0)'Iϫ��/8��9���<(�gth�ՙ�Ɍ�S[���KS9(���X��ٵ ��DZ�ƈ�B_����ao�J���1n�wЊ�6�U��8�pK)�����,��/� �Pi�G�������� z�{��I'T�˭�p4����zM6'����r�\� �%��.���/A��'G�B#��>�a) �/��Z���a�\��#X�~~�zx4�����!���!��;�-�ܘ�.���IjiU���_uv|�����_�Lu#��]�5��4�R,y���iZ�D�Ά��좂��N���D/�%R%�[��C��mF|o� ��W�_����!'���٣� ⷙ�2R� IE>/4��:|r�k!d�3��^�ȃ�J�$����(�ЕAe����+���~D���o=//?H���rƑT\���?kd���5�}9 � ]�#��>"�Z{����� ~ X�p�����-$�_��x?F_��HW��ӊ!c�]�;�L���oѩ��ħb���$�&�oG�蘫j�ep��L6�z��@�~�j��a�|z��������7 �T��������# ����Ef���-�G���� ;uM0&���&��6i�@��\Bmet��-�H� �����S}�P'���3��{嫒C��/�S`j�����KHc�*p���ߖ�PG�]`q m[Uޱ��è���ߗ��@W�\|!�tS��[�p� ���7ѝx����\݆�@2�zq&?6�q��K���<�^�E� �%���|?T�%@�}�8�PD>`��cp��4�JS�y݆ߕ1���t \3(s��7�����+f���{M���}�������a�)�p���%�b� �!��j��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ