Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
1d2e9ae48074ff857902c43b5008a7f6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d2e9ae48074ff857902c43b5008a7f6.exe
Resource
win10v2004-20231215-en
Target
1d2e9ae48074ff857902c43b5008a7f6
Size
602KB
MD5
1d2e9ae48074ff857902c43b5008a7f6
SHA1
f278c0beddc216d6a8f07b88950670466d1e0f04
SHA256
221929c2777b6276018678dbda78dab5c652899991534a7ff2e7491b89448894
SHA512
1f92707038eab01074ebb2703f5f604dc96d8a7ba388b586c5fc2dfa76bfcc27686b8cefaae5b6b55ffa5fc1f613f877cfdfbe4546420f1e6819451a6ec29bf8
SSDEEP
12288:fhALMTTC/j4b8kVqSIEMbhOB6MRc7KRFMk:faMiLyNpTQhad
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetClipboardFormatNameW
DrawAnimatedRects
EnumThreadWindows
ModifyMenuW
GetAsyncKeyState
MapVirtualKeyExA
SetWindowsHookW
WaitMessage
DefFrameProcW
GetTabbedTextExtentA
DialogBoxIndirectParamA
CharPrevW
GetWindowWord
SendMessageCallbackW
SetUserObjectInformationW
GetMessageA
ShowOwnedPopups
MenuWindowProcW
CharUpperW
SetLastErrorEx
FillRect
GetClipboardData
SetProcessWindowStation
EnumDesktopWindows
LoadCursorW
wsprintfA
GetParent
LoadCursorA
DefDlgProcW
SetForegroundWindow
GetCapture
LockWorkStation
DrawTextW
TileChildWindows
MapWindowPoints
CloseDesktop
GetDlgItem
GetUserObjectSecurity
InflateRect
CallNextHookEx
ValidateRect
RegisterWindowMessageW
GetDCEx
MenuWindowProcA
GetTopWindow
OpenDesktopW
DragDetect
RegisterClipboardFormatW
PeekMessageA
FlashWindow
SetTimer
IsCharUpperA
CreateIconFromResourceEx
DefDlgProcA
CopyIcon
SetThreadDesktop
RegisterDeviceNotificationW
GetMenuInfo
GetWindowTextLengthW
BroadcastSystemMessageExW
GetClassWord
ShowWindow
CreateCursor
GetMenuStringW
LoadImageW
CharNextA
GetWindowDC
DrawMenuBar
GetSystemMetrics
InsertMenuItemW
EndDialog
TabbedTextOutA
CharUpperA
CharToOemBuffW
OpenIcon
TranslateAcceleratorA
CreateMDIWindowW
SetWindowTextA
DestroyWindow
SetMessageExtraInfo
PostMessageA
GetDC
SetLayeredWindowAttributes
GetComboBoxInfo
CharLowerA
EnumDesktopsA
ArrangeIconicWindows
GetFocus
IsCharAlphaNumericW
CreatePopupMenu
CreateDialogParamA
CopyRect
SetRectEmpty
SetDeskWallpaper
GetCaretPos
PrivateExtractIconsA
MenuItemFromPoint
EndMenu
SetRect
IsWindowVisible
OemToCharW
GetWindowInfo
AppendMenuW
DefWindowProcW
CharLowerW
AnyPopup
GetWindowWord
GetWindowTextA
RemovePropA
TerminateJobObject
VerLanguageNameW
MapViewOfFileEx
DeleteFileW
GetDevicePowerState
GetLastError
GetProcessPriorityBoost
LoadResource
OpenFileMappingA
OpenJobObjectA
SetHandleCount
SignalObjectAndWait
LockResource
WinExec
RequestDeviceWakeup
LocalAlloc
HeapQueryInformation
LocalLock
UnmapViewOfFile
GetModuleHandleExA
DefineDosDeviceA
BuildCommDCBAndTimeoutsA
EraseTape
SetFileAttributesW
SetCriticalSectionSpinCount
EnumSystemCodePagesA
GetShortPathNameA
GetACP
SetPriorityClass
GetDefaultCommConfigA
GetExitCodeProcess
CreateMailslotA
EnumUILanguagesW
MoveFileWithProgressA
WaitNamedPipeW
FillConsoleOutputCharacterW
FindFirstChangeNotificationW
FindVolumeClose
DefineDosDeviceW
FindFirstFileW
GetFileSizeEx
ReplaceFile
SetMailslotInfo
SetCurrentDirectoryW
GetCurrentConsoleFont
ReadConsoleOutputW
InitAtomTable
SetEnvironmentVariableA
DeleteCriticalSection
Heap32ListNext
GetCommandLineA
SetLastConsoleEventActive
SetErrorMode
GetProcessHeap
GetLastError
GetProcessHeap
TransmitCommChar
GlobalDeleteAtom
VirtualQuery
LoadLibraryA
TlsAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UrlGetLocationA
ChooseFontW
VarI8FromDisp
VarCyFromUI8
VarCyAbs
StrRStrA
SHEnumerateUnreadMailAccountsW
CheckEscapesW
EnumMonitorsA
EngStrokePath
CreateMetaFileA
VerFindFileW
VerInstallFileW
WTSShutdownSystem
WTSWaitSystemEvent
WTSQueryUserToken
WSACancelBlockingCall
WSASetEvent
WSACloseEvent
WSAAsyncGetServByPort
FlatSB_GetScrollRange
ImageList_Copy
����^��6�X��έǤް��� �� A�j�HZ���e5F�~y�Q��嘕=�N�ɋ#�$3�i&N�˾��z��X��X��/��+��<�Ǣ���O����]�N�����"�J ��b{�:5�W��}r������M��8��R�ޝ�b �����-���c�D�8�A1*�z�Z�~��3E/�K��v�� ������/��t׆��k�^��m������C@*��e�f���kX����������<�04؞%��>f.�/k��* ڝ����kHlCiѪ�U̽q�j�{̹�!��tv���6⢗E<.�q�/��>e�w�>��m��U���萓�3�lˈ�@B��j� V;6�B7}O0N���Б�en��O��`��D6�Ү����֔3�*�п��ӻѸL[1:Ԭk���&P/Ӳ�E~ ���B������;�o�.�\O/�5���m��u�\*��7-7@���~��R��k�+��u�H\@oU���s�����ӵJ��>���� hщ �n�6��{e�>��o����5��O$�O�����;9H�ƥ+�� xV[ Q���) g �\3���C���&�@Vj�?N�&���Q�*����BQw�y����z-�Ep A��+��YN#��G3�!��-�b��,R���דS��J�a�|�ml�Љ/:���m������W!)*���Нp_�r�_�����e�c��fJ�=�y�5�6M�z�֯�+��z�i߸RՒ}@/A���pPv�zg��,_{�oa d����V�0i~�oP�EO`��!��hϒ~�����DM^�J���\��K����gOB/����1��g�Ӎ����lAj�ig���8���^�y��B�-�5�ůJ��3�g9q�v�65f�0��j��g}T� ��fx��~<T����R�4*����+��m}?縜�I����X�A�i�ܿ����G�!�<} J�G%=]�\�ͧ.�M�o��/7�tg|ec�F]�2Mg���]��7"�$�YS~ہ��`4"�!&�:%y��!R7xU�a����$�����_�:�g�(��em�pȉ�7����ت�� �k0�iQzx�7 <�������٣�$D��.�5���=�)�,&q� Ub�}VO��� h��#�_-�f{�<�0" �Zz*�8qFf��Ci4�ʱ!|I��Ӑ:���M�A�qt��8o���cA�C�K9�1�������2�$�|^/��t��� L,�e+�o��:�5�R����,[�͐�������@�^6����z��!=��}�iw�UQ'��8��T�/��<���D��ƿNw�F��DEl "�UJ�=���]�H`�����}�~�O̼���zĝ�ˀ�r^jQ����A�&������x/'8%�KV��f�C(�t.Gt�u��tw96�D��ON��;����Q�$��V���N�~Z�OE��F̢E��ze���R�˝����[C�����i�9V+%=J O���N��KS:W� +�́HBY������L����;e�&WޫX�`l�Dcк�kqt��X:�H��T;�4�Pr$ȞSc;5$r)��}�=r���Ho��as�JvUgZ��F�,V���������}k����˩~p�D�1NE�X&6(�n~��GI��V ~��������O���cr�V 0�j�mKM�M�5�>�;<QG����mN��H��7�X���ȓRV����PI}�i��q��M�/��՛2��rOL��H�f�&^�T)�&q!�3�� ��W��P�HSi��:�U��+/FK��������r��ل�ٕ��bM���w�.���Z�`a\����ǖ���l���J;ZA�~���|�)�(&f�F���n�M�W���3L��0����X;�a�~7Do���|?+ӉZ<�e����){j������㌰��?7�������|��y�K/HqL��4��n&�K�������=`C<����T����R�|D*������K;��ݨn\��n��a����Xt+�G���������~F�� N����8�'3��KdI2HXKO+ӫ#������ (�Kӭ�MP������4�b��[�{2�9XަD�J/��q��0֜W���c�[�}̐8C��E��A�?x������lZW�$~����k�#(WV<pW��t��nZk��4U�]*%:��CpW��K~�S�r �S��DL�������&>��w�Qֲ���S���(<�� #m�C��= B]ЃoUOZ����n��١*[�.�;�5�+�l�b�M*K�:J�v�<�NN�V�����m9J�������H�נs���Ϟ��cm��(y��B��9��Z5O �X�m�Y��PV�Cl�A=�d.ٌ�Mz������<�t�����~v�O��s��1&ar�͉-��p���.�<3|!� �������̟V�j���-�?���TDw,LN.�"���S�����@��������;<�����Aq�ƢO4q_�8gC��UL��WG�C��WPM�K�&��g�b��z�T��p��E�h�0��K�z8��;����p���Յ�A �HB����z�ҭ�傠�KP B�[3�y����_�O�A���W��ތ���xg�c��ټy���#{������r�YvB$�Nr��:��Y�������W��`�W�f���[��N�ǿ�5�u'ЅR���<������~>�l� ��l3H{A�O7$�F� ]��Y=�I��弿VT�iw��<q��ה)��A����ҙ*B���i�~̸x9�7�~����L�p`����P�b0R��������������bycݶP�m~ӄbq��S����BC-3�C��@��k�� ���B˓ő ǚ�%>%�� �d?�@��LXjTk#ߡ�C�B�d���>�Š|��ʼn��{��MLԴ��6.��|�������i�� A�t�-�#����s�e#�:=����XŨ�#j��$u�x�U�K0\�#��B�HW�ˎ�����<݇v|���*9�j����D
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ