Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
17806eb695dc8e4d022069cbf45c0a9b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
17806eb695dc8e4d022069cbf45c0a9b.exe
Resource
win10v2004-20231215-en
Target
17806eb695dc8e4d022069cbf45c0a9b
Size
603KB
MD5
17806eb695dc8e4d022069cbf45c0a9b
SHA1
256d745fde0286e02de26ce91b66da3bb1456fd2
SHA256
051bf1264bcb5c4d854c4e80051addb520e5b8d4339f29bd961ea8744041c8f7
SHA512
095933a91ca43b2f5024a5839c25bb119a99337fc2249fe09ec1c6d023e3bc4579d5e20aa378a5fed34ed842b1bcc5a3eec645e2a0b522cb51a876f2e8e22b78
SSDEEP
12288:YTQXC4zF8mhDDqbU5gcZ5d+fzRZNWBT5KcMD:YT4Wmh92lrf4t5Kf
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
MenuWindowProcW
CharLowerA
CreateDialogParamA
MapVirtualKeyA
PtInRect
GetKeyNameTextW
LoadStringW
IsCharLowerW
ScreenToClient
DispatchMessageA
GetGUIThreadInfo
SetWindowWord
SetClassLongW
MapVirtualKeyExA
InvalidateRgn
SetCaretPos
CreateDialogParamW
IsHungAppWindow
UnregisterClassW
GetWindowTextLengthA
SetMenuItemInfoA
LoadAcceleratorsW
GetLastActivePopup
SetClipboardData
GetWindowTextA
DrawMenuBarTemp
LoadMenuA
GetWindowRgn
CharToOemBuffW
SetDebugErrorLevel
wsprintfW
MessageBoxIndirectW
SetFocus
BroadcastSystemMessageW
FrameRect
GetSubMenu
SetPropW
LoadKeyboardLayoutA
GetThreadDesktop
LoadCursorFromFileW
IsDialogMessageA
SetDeskWallpaper
CloseDesktop
SetUserObjectInformationW
DialogBoxIndirectParamA
UnregisterHotKey
GetDC
GetMessageA
GetUpdateRgn
GetInputDesktop
GetMonitorInfoA
CascadeWindows
GetCapture
EnumDisplaySettingsExA
PrivateExtractIconsA
IsWindowVisible
GetFocus
DrawFocusRect
BeginPaint
GetMenuItemRect
FlashWindow
GetWindowDC
CharToOemBuffA
TabbedTextOutA
GetUpdateRect
GetClassLongW
AppendMenuA
ModifyMenuW
SendNotifyMessageW
EnableWindow
ShowWindowAsync
EnumWindowStationsA
EnumDisplayMonitors
GetMenuItemInfoW
RealGetWindowClassW
ToAscii
SendMessageTimeoutA
PrivateExtractIconExW
DefFrameProcW
SetDlgItemTextA
RemoveMenu
EndPaint
GetMenu
DrawIcon
GetClipboardFormatNameA
GetMenuBarInfo
ReleaseCapture
CharNextA
AllowForegroundActivation
ArrangeIconicWindows
IsCharAlphaA
EnableMenuItem
PrintWindow
wvsprintfA
SwitchDesktop
ValidateRgn
GetSystemMetrics
MessageBeep
CharNextW
SetCaretPos
IsHungAppWindow
GetWindowTextA
EnumPropsExA
HeapSetInformation
GetSystemInfo
DosPathToSessionPathA
GetLocalTime
UnlockFileEx
FindNextFileW
EnumResourceTypesW
IsProcessInJob
GetStartupInfoA
QueryDosDeviceA
EndUpdateResourceW
GlobalFree
GetConsoleTitleA
EnumCalendarInfoExA
GetTapeParameters
WritePrivateProfileStructA
GetProfileIntA
GetTimeFormatA
DeleteCriticalSection
VirtualQueryEx
SetCalendarInfoW
BuildCommDCBW
ExitProcess
FindFirstVolumeA
WritePrivateProfileStringW
GlobalDeleteAtom
SetFileAttributesA
GlobalLock
CommConfigDialogW
GetPrivateProfileSectionNamesA
SetFileShortNameW
SetThreadLocale
GetModuleFileNameW
QueryPerformanceFrequency
Sleep
AssignProcessToJobObject
SetThreadUILanguage
GetPrivateProfileStructW
SetCommState
DeleteVolumeMountPointA
GetTempPathA
VirtualFreeEx
GetHandleContext
WinExec
CreateDirectoryExA
CreateMailslotW
LocalFileTimeToFileTime
LockFileEx
LZStart
CreateDirectoryA
ResetWriteWatch
GetDiskFreeSpaceA
GetConsoleInputWaitHandle
WaitNamedPipeW
GetStartupInfoW
EnumResourceTypesA
GetProfileSectionW
DeleteFileA
EnumCalendarInfoW
DnsHostnameToComputerNameA
GetLogicalDriveStringsW
RegisterWaitForInputIdle
GetACP
ClearCommError
TransmitCommChar
GetLogicalDrives
GetAtomNameW
DeleteAtom
CompareStringW
LocalUnlock
GetCurrencyFormatA
InitAtomTable
PeekConsoleInputW
ReadConsoleInputA
GetProcessShutdownParameters
GlobalMemoryStatusEx
EnumResourceLanguagesA
GetProcessHeap
GetACP
GetACP
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UrlCompareA
StgOpenAsyncDocfileOnIFillLockBytes
HPALETTE_UserMarshal
ReleaseStgMedium
CreateBindCtx
dwOKSubclass
GetOpenFileNameA
VarI2FromUI4
VarUI2FromI1
StrRChrW
EnumPrinterKeyW
EnumPrinterDataExA
EnumPrintProcessorsA
RegisterServiceCtrlHandlerExA
LsaGetSystemAccessAccount
LsaSetInformationPolicy
RegisterTraceGuidsA
GetCharWidthA
GetDCOrgEx
GetDCPenColor
SetMiterLimit
VerQueryValueA
WTSDisconnectSession
WTSSetSessionInformationW
WSASetServiceW
select
WSALookupServiceBeginA
CreatePropertySheetPageA
ImageList_Copy
CreateMappedBitmap
ډ�-S��J'���s����?3*=6f�ZJz��-Tfx�WC6�3�~�^�ne����#�_�l�Y���C=��Y��Po�,�Td`��2���Xռ��f�렍N�Uc,[8jk}��/x�["���;4x�Sl�9N��r}p%�J���W#j&��1t��,L��� ��p�=٬�C9���P�'�'������`��h��ag+��\� �l�mZ/����qj�**��UΛ�xQ��2�O�W�<aٲ�MDߟ,'�|�.{�}���t����|�����Z���F����S�j��,�Iоz����gt�|��67� p"|��|f��� <G�$]U����a��@.��ؔ�L�CS|>�����v�C��Uv[��Y5��3]�o�5��Jc^uq)��v�2��x|�]����ro�[x���t��n�֟�A���C2'_� +$�������JIS1��lBi���t���m���sޠ�ʍ�̓Eyv�//���h;��݂/���O�<��X�bjt�fy^�W�Z�=&ӿS��'�!���82�����P�j]���F~J *�{�}�vb�����y�&���!�V��t%���au���Cd����Q�~|���J<mt�2��>%��l#�?��V�Zj�W����Ov��Y�����KBu:�\���͒��4R���rp��N��n�� �p�cc�� T���B��X���J�q��if.����ǎ]��B(��������Fn���oZ+VH�uL�7���Gv�N���������^��N��p�� ��I���b)? ���C�l�l=�-<;bU�j"3���`��8hu��`�/8��vT5oP��7�]�D�J��@��� IHVO�uuKK��q~v����� �-R}����i@-��ѡ���Q����"��~Mqdd+���X+|�a;��r���W���dQ���]q���jD<%�V����T ������^�ԌY�!U��Y���'����H[̎�(u�,��u���Lz���mO��~4%ZM�T�H���0�����`�6��d�����>5��0���3�mF^��[P��C�V��R��`Ȏ� ��I7tmW�\wU<õGq�]�n��W�r_>I�q��kz�t�3���w?�O�/�ƃ�= �sث��"�ͫ���zYL�Y���-M�VE�i�A��M����b���ά�IM���ư�|cs��"[��!��1�'p�J.c���&��8�=�/�l.If5�R��DS���쮵�lK�1Z�i�.U�������Y�'������{Ҵ5���������I��q���⼉���N|h<��J�#Ɵ���Q(�QD���|Ǘ�o��xń�����Zr0V߿pOnD�r�u5FOq���~�-������fЉ ��rj�,����s�o}��{� �i�:v��kN<ݶ�X�I���V�9��u�з�G�̷4�����x��AC�VO��J���a�I��\�����f�J�jkL�n����\����E2Y�zj�m�ŀK���l�Rύh�<�U�D�`�v�[ύ��@�0�R��_*=MHÈ�߽y�����A�2��G�0����S"����9e����-�/3����h9S����A:Z6�&w|�s�vI��l�!\s5+�q\3�+�=�#*p{7{��$v��}�2K@��Ev��`�����q^�t{u�|Q��>�➫0����L{=���o�l��Ɇ�$߉����F�v�۴��zF��Bn~��Ŋ̲���ko�ݘZF��L��HGu #G �pA�.F�� J��8huSM���Yv=���rZ=��iaL���@E;���IT�<��>�z�=��H�@����V3���"_˲���Y��d�6��Z����4����ck���&���}�%<����=>���P92��������$�� �@�9�t�N��kJ����(��/��{����Kb/�Շmyע�Tx�┋�Q�����a�2g�+:�pq������>��_@,�(�ǣ���x��[��5�D}kp���[���K�@B�4c�v�g�,ȚT#���]W�RcBX��ZYdr��1��b�2]�r�W4.��55 M�]?ΏJ*�*+^��˶c:��~���>i�oMq�P��%/�MaƆY(<nVrτ ~*�8��q�}B��d�fE�?Ot�N*#��Jz���n@<�z�ZȔ�������i��9���Q�ģ/֓ t���k�w���eç���ϖ��p��!�8L,do��� ����}U��D�.�����pU��/ ��jO�s���A$M��͙��ڤ�:GY��@�� �yx�����>�I�\7�q !^��i:��#�/�u�hj{�#F�ϔ��ab�����y��� �5הk��kn|�=�5��L���e�/�$Է�MA�e�b�������C�$�y�@�!%��������g�����<���cVԂ�:fMV�]��Kރ��e��=���W)OH�9�2���|3��m@;X�����8�\����e֙9�\U���I{ԃ!�m������vyI-���$�6�q����a�^��vz�|��@�<��9��|N$�]�w"�C�}���O��IHP�(�_#N��)X/�3�dU�(�%��b��1�� �<q��z)��C�5�OeNGk�$i��d�v<���q�T �<������@����It.Y�!p*��?�E�R[�b2/���04U�����!/�X��������]��!�:�6EurlI�L�'�� p���.��&�D��Q�˫�v�h>��pSF��k-j}�9��K�[j%���8��D��p��߁Q�B�r��튽���훓����F�))R�8ψ}�˴&�pn p��.{m@�t�NU��Zt�1㝟�.���I2��<�^�ǔE��HʘK1y� ����, 8�]�{{�T����79�u����\W�{�06[ �IR�AXJ�����ݟ�WZvg�|)��yp����m�ς��vN��yUv��ؿ�D>�Yd�{���~�n�Q�z��dr�^N~���ln���7@�Z��6|ދR��2�ѼM�5��M|�$
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ