Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
1a7f47387a8bc53f9d16667d23df1ffa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1a7f47387a8bc53f9d16667d23df1ffa.exe
Resource
win10v2004-20231215-en
Target
1a7f47387a8bc53f9d16667d23df1ffa
Size
603KB
MD5
1a7f47387a8bc53f9d16667d23df1ffa
SHA1
2ce1a651c0792e9f7913ed59b5ccd769ae0d2ef5
SHA256
13879e1ed152bc15e12b0c1805fe39cde173f6e416308045f959586dce0d748b
SHA512
76b7b554794699f8ceb9ac85253c7bc2e2af28a8704f95511b1cbeca340696ad530f55da0a2c400751a7f3df08b72856de13af380d57cce41ab0d333e0fcc745
SSDEEP
12288:PJ6vmYvNhlIDDFyxF60YkvY9LU5gcZ5dwfzRZNWBT5KcMU:PJM3lIHFUYkvb2nrf4t5KA
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
MenuWindowProcW
CharLowerA
CreateDialogParamA
MapVirtualKeyA
PtInRect
GetKeyNameTextW
LoadStringW
IsCharLowerW
ScreenToClient
DispatchMessageA
GetGUIThreadInfo
SetWindowWord
SetClassLongW
MapVirtualKeyExA
InvalidateRgn
SetCaretPos
CreateDialogParamW
IsHungAppWindow
UnregisterClassW
GetWindowTextLengthA
SetMenuItemInfoA
LoadAcceleratorsW
GetLastActivePopup
SetClipboardData
GetWindowTextA
DrawMenuBarTemp
LoadMenuA
GetWindowRgn
CharToOemBuffW
SetDebugErrorLevel
wsprintfW
MessageBoxIndirectW
SetFocus
BroadcastSystemMessageW
FrameRect
GetSubMenu
SetPropW
LoadKeyboardLayoutA
GetThreadDesktop
LoadCursorFromFileW
IsDialogMessageA
SetDeskWallpaper
CloseDesktop
SetUserObjectInformationW
DialogBoxIndirectParamA
UnregisterHotKey
GetDC
GetMessageA
GetUpdateRgn
GetInputDesktop
GetMonitorInfoA
CascadeWindows
GetCapture
EnumDisplaySettingsExA
PrivateExtractIconsA
IsWindowVisible
GetFocus
DrawFocusRect
BeginPaint
GetMenuItemRect
FlashWindow
GetWindowDC
CharToOemBuffA
TabbedTextOutA
GetUpdateRect
GetClassLongW
AppendMenuA
ModifyMenuW
SendNotifyMessageW
EnableWindow
ShowWindowAsync
EnumWindowStationsA
EnumDisplayMonitors
GetMenuItemInfoW
RealGetWindowClassW
ToAscii
SendMessageTimeoutA
PrivateExtractIconExW
DefFrameProcW
SetDlgItemTextA
RemoveMenu
EndPaint
GetMenu
DrawIcon
GetClipboardFormatNameA
GetMenuBarInfo
ReleaseCapture
CharNextA
AllowForegroundActivation
ArrangeIconicWindows
IsCharAlphaA
EnableMenuItem
PrintWindow
wvsprintfA
SwitchDesktop
ValidateRgn
GetSystemMetrics
MessageBeep
CharNextW
SetCaretPos
IsHungAppWindow
GetWindowTextA
EnumPropsExA
HeapSetInformation
GetSystemInfo
DosPathToSessionPathA
GetLocalTime
UnlockFileEx
FindNextFileW
EnumResourceTypesW
IsProcessInJob
GetStartupInfoA
QueryDosDeviceA
EndUpdateResourceW
GlobalFree
GetConsoleTitleA
EnumCalendarInfoExA
GetTapeParameters
WritePrivateProfileStructA
GetProfileIntA
GetTimeFormatA
DeleteCriticalSection
VirtualQueryEx
SetCalendarInfoW
BuildCommDCBW
ExitProcess
FindFirstVolumeA
WritePrivateProfileStringW
GlobalDeleteAtom
SetFileAttributesA
GlobalLock
CommConfigDialogW
GetPrivateProfileSectionNamesA
SetFileShortNameW
SetThreadLocale
GetModuleFileNameW
QueryPerformanceFrequency
Sleep
AssignProcessToJobObject
SetThreadUILanguage
GetPrivateProfileStructW
SetCommState
DeleteVolumeMountPointA
GetTempPathA
VirtualFreeEx
GetHandleContext
WinExec
CreateDirectoryExA
CreateMailslotW
LocalFileTimeToFileTime
LockFileEx
LZStart
CreateDirectoryA
ResetWriteWatch
GetDiskFreeSpaceA
GetConsoleInputWaitHandle
WaitNamedPipeW
GetStartupInfoW
EnumResourceTypesA
GetProfileSectionW
DeleteFileA
EnumCalendarInfoW
DnsHostnameToComputerNameA
GetLogicalDriveStringsW
RegisterWaitForInputIdle
GetACP
ClearCommError
TransmitCommChar
GetLogicalDrives
GetAtomNameW
DeleteAtom
CompareStringW
LocalUnlock
GetCurrencyFormatA
InitAtomTable
PeekConsoleInputW
ReadConsoleInputA
GetProcessShutdownParameters
GlobalMemoryStatusEx
EnumResourceLanguagesA
GetProcessHeap
GetACP
GetACP
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UrlCompareA
StgOpenAsyncDocfileOnIFillLockBytes
HPALETTE_UserMarshal
ReleaseStgMedium
CreateBindCtx
dwOKSubclass
GetOpenFileNameA
VarI2FromUI4
VarUI2FromI1
StrRChrW
EnumPrinterKeyW
EnumPrinterDataExA
EnumPrintProcessorsA
RegisterServiceCtrlHandlerExA
LsaGetSystemAccessAccount
LsaSetInformationPolicy
RegisterTraceGuidsA
GetCharWidthA
GetDCOrgEx
GetDCPenColor
SetMiterLimit
VerQueryValueA
WTSDisconnectSession
WTSSetSessionInformationW
WSASetServiceW
select
WSALookupServiceBeginA
CreatePropertySheetPageA
ImageList_Copy
CreateMappedBitmap
ډ�-S��J'���s����?3*=6f�ZJz��-Tfx�WC6�3�~�^�ne����#�_�l�Y���C=��Y��Po�,�Td`��2���Xռ��f�렍N�Uc,[8jk}��/x�["���;4x�Sl�9N��r}p%�J���W#j&��1t��,L��� ��p�=٬�C9���P�'�'������`��h��ag+��\� �l�mZ/����qj�**��UΛ�xQ��2�O�W�<aٲ�MDߟ,'�|�.{�}���t����|�����Z���F����S�j��,�Iоz����gt�|��67� p"|��|f��� <G�$]U����a��@.��ؔ�L�CS|>�����v�C��Uv[��Y5��3]�o�5��Jc^uq)��v�2��x|�]����ro�[x���t��n�֟�A���C2'_� +$�������JIS1��lBi���t���m���sޠ�ʍ�̓Eyv�//���h;��݂/���O�<��X�bjt�fy^�W�Z�=&ӿS��'�!���82�����P�j]���F~J *�{�}�vb�����y�&���!�V��t%���au���Cd����Q�~|���J<mt�2��>%��l#�?��V�Zj�W����Ov��Y�����KBu:�\���͒��4R���rp��N��n�� �p�cc�� T���B��X���J�q��if.����ǎ]��B(��������Fn���oZ+VH�uL�7���Gv�N���������^��N��p�� ��I���b)? ���C�l�l=�-<;bU�j"3���`��8hu��`�/8��vT5oP��7�]�D�J��@��� IHVO�uuKK��q~v����� �-R}����i@-��ѡ���Q����"��~Mqdd+���X+|�a;��r���W���dQ���]q���jD<%�V����T ������^�ԌY�!U��Y���'����H[̎�(u�,��u���Lz���mO��~4%ZM�T�H���0�����`�6��d�����>5��0���3�mF^��[P��C�V��R��`Ȏ� ��I7tmW�\wU<õGq�]�n��W�r_>I�q��kz�t�3���w?�O�/�ƃ�= �sث��"�ͫ���zYL�Y���-M�VE�i�A��M����b���ά�IM���ư�|cs��"[��!��1�'p�J.c���&��8�=�/�l.If5�R��DS���쮵�lK�1Z�i�.U�������Y�'������{Ҵ5���������I��q���⼉���N|h<��J�#Ɵ���Q(�QD���|Ǘ�o��xń�����Zr0V߿pOnD�r�u5FOq���~�-������fЉ ��rj�,����s�o}��{� �i�:v��kN<ݶ�X�I���V�9��u�з�G�̷4�����x��AC�VO��J���a�I��\�����f�J�jkL�n����\����E2Y�zj�m�ŀK���l�Rύh�<�U�D�`�v�[ύ��@�0�R��_*=MHÈ�߽y�����A�2��G�0����S"����9e����-�/3����h9S����A:Z6�&w|�s�vI��l�!\s5+�q\3�+�=�#*p{7{��$v��}�2K@��Ev��`�����q^�t{u�|Q��>�➫0����L{=���o�l��Ɇ�$߉����F�v�۴��zF��Bn~��Ŋ̲���ko�ݘZF��L��HGu #G �pA�.F�� J��8huSM���Yv=���rZ=��iaL���@E;���IT�<��>�z�=��H�@����V3���"_˲���Y��d�6��Z����4����ck���&���}�%<����=>���P92��������$�� �@�9�t�N��kJ����(��/��{����Kb/�Շmyע�Tx�┋�Q�����a�2g�+:�pq������>��_@,�(�ǣ���x��[��5�D}kp���[���K�@B�4c�v�g�,ȚT#���]W�RcBX��ZYdr��1��b�2]�r�W4.��55 M�]?ΏJ*�*+^��˶c:��~���>i�oMq�P��%/�MaƆY(<nVrτ ~*�8��q�}B��d�fE�?Ot�N*#��Jz���n@<�z�ZȔ�������i��9���Q�ģ/֓ t���k�w���eç���ϖ��p��!�8L,do��� ����}U��D�.�����pU��/ ��jO�s���A$M��͙��ڤ�:GY��@�� �yx�����>�I�\7�q !^��i:��#�/�u�hj{�#F�ϔ��ab�����y��� �5הk��kn|�=�5��L���e�/�$Է�MA�e�b�������C�$�y�@�!%��������g�����<���cVԂ�:fMV�]��Kރ��e��=���W)OH�9�2���|3��m@;X�����8�\����e֙9�\U���I{ԃ!�m������vyI-���$�6�q����a�^��vz�|��@�<��9��|N$�]�w"�C�}���O��IHP�(�_#N��)X/�3�dU�(�%��b��1�� �<q��z)��C�5�OeNGk�$i��d�v<���q�T �<������@����It.Y�!p*��?�E�R[�b2/���04U�����!/�X��������]��!�:�6EurlI�L�'�� p���.��&�D��Q�˫�v�h>��pSF��k-j}�9��K�[j%���8��D��p��߁Q�B�r��튽���훓����F�))R�8ψ}�˴&�pn p��.{m@�t�NU��Zt�1㝟�.���I2��<�^�ǔE��HʘK1y� ����, 8�]�{{�T����79�u����\W�{�06[ �IR�AXJ�����ݟ�WZvg�|)��yp����m�ς��vN��yUv��ؿ�D>�Yd�{���~�n�Q�z��dr�^N~���ln���7@�Z��6|ދR��2�ѼM�5��M|�$
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ