Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
1c34c216f14ec99e8ec79a5f9c1d2dda.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c34c216f14ec99e8ec79a5f9c1d2dda.exe
Resource
win10v2004-20231215-en
Target
1c34c216f14ec99e8ec79a5f9c1d2dda
Size
694KB
MD5
1c34c216f14ec99e8ec79a5f9c1d2dda
SHA1
62d42715f7261daf761cc7eac38a4b74a05caf76
SHA256
05856be7bc5da885a46ca5ad8df1ca62e3645209df9fb9b110c5e1fae11de61f
SHA512
b5e2dff0ae2960300bd193e1bf254f8511a7ca0dbec2c226131c52fc1d243784973a46cc654b9d1284e1609586d36c7e5518ac39ef98481e4cdb8e0743be5a18
SSDEEP
12288:+lJPm3fV38IwyUEC7LzEJ3Jxlu/giH70A:R8yKq3JxMb0A
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PathUndecorateW
SHRegCreateUSKeyA
StrCSpnA
UrlUnescapeW
PathIsFileSpecW
PathGetArgsW
StrRetToStrW
SHSetValueW
StrNCatW
PathRemoveBlanksA
UrlCompareA
PathIsDirectoryW
PathIsContentTypeA
StrToIntW
CoRevokeMallocSpy
CoFileTimeNow
IsEqualGUID
StgOpenPropStg
OleQueryCreateFromData
ChooseColorW
ChooseFontW
ReplaceTextA
PrintDlgExA
WantArrows
LoadAlterBitmap
ChooseFontA
FindTextW
SafeArrayAllocDescriptorEx
VarCyInt
VarR4FromUI4
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDList
SHPathPrepareForWriteA
StrRChrW
StrRChrA
ShellExecuteEx
SHGetPathFromIDListW
PrintersGetCommand_RunDLLA
SHFreeNameMappings
DocumentPropertiesW
QueryRemoteFonts
QueryColorProfile
DeletePortA
WaitForPrinterChange
FlushPrinter
DeviceMode
PerfCollect
EnumJobsA
PerfOpen
GetSpoolFileHandle
AbortPrinter
DeletePrinterIC
SetPortW
WmiQueryAllDataMultipleW
TreeResetNamedSecurityInfoA
SaferiChangeRegistryScope
GetTrusteeFormA
LsaQueryTrustedDomainInfoByName
CryptEnumProvidersW
CredUnmarshalCredentialW
CryptHashData
LsaSetInformationPolicy
StartTraceA
LsaGetSystemAccessAccount
GetServiceKeyNameW
RegEnumValueW
RegisterEventSourceA
WmiQueryAllDataA
GdiStartPageEMF
GetCharWidthI
GdiConvertPalette
STROBJ_bEnumPositionsOnly
GetTextCharsetInfo
CreateMetaFileA
GetTextExtentExPointW
FlattenPath
GetTextExtentPointA
EnumFontFamiliesA
GetFontLanguageInfo
GetEUDCTimeStampExW
ExtEscape
PtVisible
MaskBlt
CopyMetaFileW
GetCharWidthA
UnrealizeObject
GetPixel
CreateDCA
GetClipRgn
EngDeleteSurface
VerFindFileA
VerQueryValueA
VerLanguageNameA
VerLanguageNameW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileW
VerQueryValueW
VerInstallFileA
WTSSendMessageA
WTSLogoffSession
WTSUnRegisterSessionNotification
WTSSetSessionInformationA
WTSRegisterSessionNotification
WTSEnumerateServersW
WTSEnumerateServersA
WTSOpenServerA
WTSEnumerateProcessesA
WTSShutdownSystem
WTSCloseServer
WTSVirtualChannelPurgeInput
WSARecvFrom
WSACloseEvent
shutdown
WSCUnInstallNameSpace
WSCUpdateProvider
WSALookupServiceNextW
WSANSPIoctl
WSAUnhookBlockingHook
WSACancelBlockingCall
WSAGetLastError
getaddrinfo
WSCDeinstallProvider
socket
WSAEnumProtocolsW
getservbyname
WSAEnumNameSpaceProvidersA
gethostname
WSAGetServiceClassInfoW
getsockname
getnameinfo
GetEffectiveClientRect
ImageList_Destroy
LBItemFromPt
FlatSB_ShowScrollBar
ImageList_SetIconSize
ImageList_GetIcon
ImageList_Create
UninitializeFlatSB
ImageList_LoadImage
CreateToolbarEx
PropertySheetW
MenuHelp
ImageList_GetImageRect
ImageList_Read
ImageList_SetFlags
InitializeFlatSB
ImageList_DragEnter
ImageList_Duplicate
CreateToolhelp32Snapshot
AssignProcessToJobObject
GetVersion
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
�����X�Jz�ƚh�`ON�bTl;dw��ߊf���M���6���Ű��"�z>�i=��]�U���ukDwn�}�J0J�o� [��g����&v�{a�'��h%��l�\� I���_��&���~����}�mX:���q���5��� ���Ӛ*HS�� �1ܢB����3A�!�#�\Jr\̼ϒ���Mk�ړ�E���H�|���H6]6�>���St��G�P8d�������`�T�#Pb�?Z����0+�����l���?X�v���}����^��U��X�2;.Uo�V.� !�B��*]y��pY��L��Ki�>�?��F]�L3o<����i9��A#d8��(µ|�\���� +'��v��\1F��#1&��M�M䝴���P��W���-�p��j�]2�����А��A��JJT2�\Wy�V����"�J��Y����:q�Kh���[�t�=��$�9 ^��M�����B�%ͱ�N���3��%McʹVאͮ2"/�y~��H�����)����8�B1���9�i+��}���y���j��m�{����Ba��Xx�����2<I� s<C���/��CC���RB��j���O���}o��$r�^��������焄��B��L�.�v:�D���t�z3�(� ���n�|������d_T��2;�E��FO�pk���̣���I NڷE��w?j�S�Ri�����{���~O< ���2-�n��Y�A�#nu��i9S`�(^y���ꅪ�=aqӍ�I�Uz��^ �`�� ?O����!�R�_�e;�')M�kk&[^���a��r+HM�N�H��+ȼ,�#��l��~�'�F�u�|>�[/�9�9�:yr+��Q}���BѨ��a�O���%�䍑z� ��A��N�xA]�"9bjIL0�l��j'aє��b�~������ǜD�i5�k�D�����P�V�Α�S@�;:j�W�����'��F����\��r�(2���i]�F�Ō����{�[��?wgV���� ӗ"Ȟ]v�Al0��Л��^�� $;��1�h:��S}-R������������ ���}�t�͋�1Ej�̯ ٢��e�;��|�"��n�Ɠ�i��qJ��U�^��K��vX�ܝ���U��Y`!�V���zK�X~�2.�;�x��ǹ� ;2��^Nҁ���!/j�_Y?9L�ygg�זBҠAk[�.�ru-��4�sf����8$������7�D�ߺ��e�u��D���-G�+ݨ� 0r(��7^��®/�c\�Lvz���o����4�^}�F��a�GD0V�'���V(�-6����k��w���!YAn&�T��������bpjҧkP�fU}Mq��]�r'���eS-^Ud�P��C��s�d-Ĩm@o�^>g���H�JI" ��A������~�@m���4���&�o��P�G �$2'��%@A\���l�jC��W>�T�ӊ9u�C!�V�%�@��+�x���yO�z���V&�L�����o=�����s�u�Q.#���p/��D���8\-�jh�.9�WT�@�-=?������'�����o"daZ� �s�.�:lx���x:�Ӏ��m��,��1��EC3����k��?�@VOWӖ��t� ��2i����3�]ϖ��u��Ri��}d����[d�sKu�HhGA.���5̦�g0��{���@!B��rǶ�(����&A9Ė)�1�|�@��Ў���c2��Xp���/�F��nH5�T�����3����*��N����(��N/(��=�F��m�#Ս�OUCqڣ#�"T�d��]�"�I2>�� �����|P�V��4��/��&K�I!�Q"Yɢ{�~w�r�Y�9��l���f5(��9��8#<��Q��` �:�$V�A�I ���~o�}��H�1E?�����r)��nu��ĩ�j ,ZŭsQ���q�55�Ұk>�;Bl��V<����q��Ĥ��BWTp��_#>�ʬ}�I��)^N���ˣ=���\T4m�^�k�Ƿ�QbyN�/"S���3a9��W��#��Ic����yz}�%kD�:�^�[��vI��/��O@�ι �k�ŷE�>��U���g���)���#7��ac�5��\��=U�X?Œ�g��̴]��N�Q�t��ی0��f ��L����}Hh�]Co#��Wa�%�V�t�G��^��94���)��j�(�� s>M�ߺ��'���� ��Sg�=�Q��5l��OX�c\��Y'뉟8�UY+q�w�>�Ԟhm��~3��^�o��n�p����~�N;���^�������*T�.�2{������z����ڻP�E��T���&d|�q�X�N�,M^M�8�dU��a@(��f�����-.�[Ƈ�)��HJy�5��#���~��Y3+�l2����m:�_���ŀOZx9H��A�'��r��|ɞ(n��HKr��8#��_˶Ҕ��x.�,R�E�'Z\�:��쪞e�H{���a�y6��@� ��!��H�f�.�t?�����Hn}}��Z�v��� 5Mv�F�8�_w�sR>��根��� ��%)�-��gvm@'B��0Z`�=��fV����OϬ��<;߆z����I��|M�4�8�T�Hw��>��ج��¸��\d\^c���\�ޢ~]��O7�+�#��Ͻ���%��� b-�9��;�VBEp����z0����]7�9B%�����[���;0�)����ۣ^?���h� ��S���q�$+)��-J`K.{� ����8j96��Zf ��k�����L��Z��k[Ly5�bt(B��R�� .�G��8Oա�-ivE�/� o�t+�d��49KsL0�G�/+B���/���H�G��'�T<�h�����<�7#��q��D϶���RZ�Zyc���[�(���3���XIe�!c�\��z �a���S?�`�xeѷ�t��ֱͼ�Z�屽|��Y�s�:_�����e����N�����^L(_�Y��=l%���P���\?�=��}�^ү�fQ��r�b+Mɱ��kT��^�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ