Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2a788209c70a886c487ec4263d5fc33f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2a788209c70a886c487ec4263d5fc33f.exe
Resource
win10v2004-20231215-en
Target
2a788209c70a886c487ec4263d5fc33f
Size
602KB
MD5
2a788209c70a886c487ec4263d5fc33f
SHA1
84131a738c244c8b0808c62bd0daae09e502233f
SHA256
14afc88d138e67d1ec0597e17a6c2cf8041c8ad053bede53abeea4291caa6220
SHA512
51109b060477dc0bc701672cad43aabaea72e4d388d57871e617239eed5dcabcaa221aebd24415b1f00c609e0f1798bd7647c0cdc8b53680d8a20aae160da99c
SSDEEP
12288:tUWQBgcXJMzkcpUSAeeoU5gcZ5dz7CKe2Mk:tUbXZ/32GOLi
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
MenuWindowProcA
CharLowerW
CreateDialogParamW
MapVirtualKeyW
PtInRect
GetKeyNameTextA
LoadStringA
IsCharLowerA
ScreenToClient
DispatchMessageW
GetGUIThreadInfo
SetWindowWord
SetClassLongA
MapVirtualKeyExW
InvalidateRgn
SetCaretPos
CreateDialogParamA
IsHungAppWindow
UnregisterClassA
GetWindowTextLengthW
SetMenuItemInfoW
LoadAcceleratorsA
GetLastActivePopup
SetClipboardData
GetWindowTextW
DrawMenuBarTemp
LoadMenuW
GetWindowRgn
CharToOemBuffA
SetDebugErrorLevel
wsprintfA
MessageBoxIndirectA
SetFocus
BroadcastSystemMessageA
FrameRect
GetSubMenu
SetPropA
LoadKeyboardLayoutW
GetThreadDesktop
LoadCursorFromFileA
IsDialogMessageW
SetDeskWallpaper
CloseDesktop
SetUserObjectInformationA
DialogBoxIndirectParamW
UnregisterHotKey
GetDC
GetMessageW
GetUpdateRgn
GetInputDesktop
GetMonitorInfoW
CascadeWindows
GetCapture
EnumDisplaySettingsExW
PrivateExtractIconsW
IsWindowVisible
GetFocus
DrawFocusRect
BeginPaint
GetMenuItemRect
FlashWindow
GetWindowDC
CharToOemBuffW
TabbedTextOutW
GetUpdateRect
GetClassLongA
AppendMenuW
ModifyMenuA
SendNotifyMessageA
EnableWindow
ShowWindowAsync
EnumWindowStationsW
EnumDisplayMonitors
GetMenuItemInfoA
RealGetWindowClassA
ToAscii
SendMessageTimeoutW
PrivateExtractIconExA
DefFrameProcA
SetDlgItemTextW
RemoveMenu
EndPaint
GetMenu
DrawIcon
GetClipboardFormatNameW
GetMenuBarInfo
ReleaseCapture
CharNextW
AllowForegroundActivation
ArrangeIconicWindows
IsCharAlphaW
EnableMenuItem
PrintWindow
wvsprintfW
SwitchDesktop
ValidateRgn
GetSystemMetrics
MessageBeep
CharNextA
SetCaretPos
IsHungAppWindow
AnyPopup
EnumPropsExW
HeapSetInformation
GetSystemInfo
DosPathToSessionPathW
GetLocalTime
UnlockFileEx
FindNextFileA
EnumResourceTypesA
IsProcessInJob
GetStartupInfoW
QueryDosDeviceW
EndUpdateResourceA
GlobalFree
GetConsoleTitleW
EnumCalendarInfoExW
GetTapeParameters
WritePrivateProfileStructW
GetProfileIntW
GetTimeFormatW
DeleteCriticalSection
VirtualQueryEx
SetCalendarInfoA
BuildCommDCBA
ExitProcess
FindFirstVolumeW
WritePrivateProfileStringA
GlobalDeleteAtom
SetFileAttributesW
GlobalLock
CommConfigDialogA
GetPrivateProfileSectionNamesW
SetFileShortNameA
SetThreadLocale
GetModuleFileNameA
QueryPerformanceFrequency
Sleep
AssignProcessToJobObject
SetThreadUILanguage
GetPrivateProfileStructA
SetCommState
DeleteVolumeMountPointW
GetTempPathW
VirtualFreeEx
GetHandleContext
WinExec
CreateDirectoryExW
CreateMailslotA
LocalFileTimeToFileTime
LockFileEx
LZStart
CreateDirectoryW
ResetWriteWatch
GetDiskFreeSpaceW
GetConsoleInputWaitHandle
WaitNamedPipeA
GetStartupInfoA
EnumResourceTypesW
GetProfileSectionA
DeleteFileW
EnumCalendarInfoA
DnsHostnameToComputerNameW
GetLogicalDriveStringsA
RegisterWaitForInputIdle
GetLastError
ClearCommError
TransmitCommChar
GetLogicalDrives
GetAtomNameA
DeleteAtom
CompareStringA
LocalUnlock
GetCurrencyFormatW
InitAtomTable
PeekConsoleInputA
ReadConsoleInputW
GetProcessShutdownParameters
GlobalMemoryStatusEx
EnumResourceLanguagesW
GetProcessHeap
GetLastError
ConvertDefaultLocale
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
StgOpenAsyncDocfileOnIFillLockBytes
HPALETTE_UserMarshal
ReleaseStgMedium
CreateBindCtx
dwOKSubclass
GetOpenFileNameW
StrRChrA
GetCharWidthW
GetDCOrgEx
GetDCPenColor
SetMiterLimit
VerQueryValueW
WTSDisconnectSession
WTSSetSessionInformationA
WSASetServiceA
select
WSALookupServiceBeginW
CreatePropertySheetPageW
ImageList_Copy
CreateMappedBitmap
��lP�{T���> ӄ�.�~�j�Ɗ�m���L�|��j���y�4w�^����a�m�MR K&^F}B�cQ�WjF���CY��N��_��HN���~���I{1��nS��<~d��oi�� �44A����{�3}�p��4����S ����:(�Vw�CR�I|6��ސ^����!#vyݮ�}�9��e2��I�kL}�7u_�K!H�?�E?�E��N6ۡ;`M�LE��Ġc>�m��w�pb�4t8����K+4g�g�Q�$��|(.<F3���#�ؾݭ�jA�65.<�^������*{x�������n�~����jqt��8���+^���,�7�Bs�D]&1��/��F�V���| �"�l�`J�sO�u��|���Xv��{��Fl���ݭQ����,�~��%|�����lڻDMp-y�AL��ԕt��4G}Bǧ/ո)��!6��cj�"z�q�Ƣ�<Q��s*5Mڃ�X%��*Z9`1�>@"��K�YŪ�K������+*�)���)�*�0���w�����@:u� ��XM�X)4X��T�B����`fbF��l�\գ�HS<�-Ƭ���kr d�D�����m�ykW]�;H㐾������K������l�Ԏf}sڰ^�-X[��Mʘp������!����H�w����M�-0���\�4a��`�3�5�������q��DW|q�=�^P�;�4}�:����E�s��D�Iԕm&��sH�c<��E���δ�>P���~�^B�.���G�?E���]��������'��D\921u�Y�� � 0,�D3��F+�ÜyI��M-].�7��Vp��ժ�'�WT7�z��F@�?�?kឱ���1*�U����ݖ����Us�ҭ�V��@�G��-v��%VW���1�p���|aN��9P��V���(�����b�=PB�p��1ñ�v���wUsv+���k��߃D(!ҙI��˥�ru�C.:5Mu���v�� �2(���Lj�r�^6������^�H�ٿ���c��x�6��]J��po�5�4\B��w�#����י�����IPt�p��8M*fm�#�J�ez{q�f�4{X�ݨk�V�������@��ld�A��KgyF=x�~y��7N��";��&oS�f?�Н�f����ʐO�er��8+��~�����MܖR������0:�˽/chq0��Y� �I`�8����$�v&��cN~.�����������?k�=�ӆv���c�E����c*�Oo�V�|����v����.|#�<<;@m@��WGK��?U�ur�J�hN����j�2I"���8�9��{�6��e�x����|A��D�યX;��5�Yc�D~�����= �b˃ �m�e�(��@� m�vF�}��w��SD(�o�G��.\�w��tbO��=�_�8O��&����s:����Lg�`���q���_¨�v�G���kP~٦(C�t��b6A�m.�8 �V(�}�e=;O��8NO8���(ٛ����@�}�w�y��O�<�ӑ�t��y�w��b�,J�P��| �.Zg.�Y�qH֠�[�b��d�/����~�L���m{����z��$JjP���d�����o��I-ɪ�?o��C��P$��il��^���*H��i���.�����e:�^����O�;KÄ^�D ��[*/,���� �b���Q�|�����x��C������K90�+�c:��6V� z�^����_GLo8K�4֧/�˾�^>!wl�4���A����1It��g*��xR=T2��e��̫����H�Sc��֗� �/.�������yta�������<�r�&6������J����4V��9��9����-�v��Z��I��-N�� \�H6��!Z�)�42 l��U� Iy,YL�3\��w_��P�{fn�\�b�!�`�?=��������LC��~�Z�����2�:�ٳf�k=���/�8�{(Pz��*��B꼝L<�A���zBRb��b.0�ѳ��M��0.�(/t^;6^_V�S���R�'��~�����now�V�cU;���_Z��N���*I���|s�`h&�H�ct#��.��,���Xl�2le�.�OS&D�����X��ZJ%ǿ��)��͵r�=7d���u���f>��*�U�٩�g >o4��q���������5!��p����U�lwΥ+��n��,�z,~�<��;Օ�ʸ=^�ŷAn�`B�,��|yx��2�GI{�Gn�j'f����8�7",s;�0�����v ���@��2��N"%H�����W�%�0��X�&�p�m�Q�g��`ix��M�W����������}Ac,D��j�toߦ�qgV����W��.@���10���[�����T�?Ȳ����rY��oӌ�z�vg���p��G�c&%1� "aw9�t��t�������~$=H�y1ETUHEE�W�n� Yʡ�'�BX p��mtخ����JNb�߽V�$Ȩ�(|C����߆��"18��%�m�?��}F�gν)���s�@=�pQDx0y��RA� ?&ƚj�i��Յ��b���[!2�� fQ�z��X������D����f�}���a˴�m9�u���L������텕N-�0�fs��s8H-���:�Ӂ�T�uS�����NA��Y���_}u���U�IFz��c�L�2��+�}cˇu�kb�1Ax��j��qc 0床6W�R~�(A?i��=���{�Ћuk:3�sb��w�q ������t��o�+�Bѡ�Z���D�<���h ���ׄ)�<����#��Y�1� הe����]wй%D؊G���aCM�a��+/��i��.��X�����0/��,μ%��õ�J��kv %s��[��4�qS��Y����A� Ki~%1_�� ���hV�jz4\�=������L�go��E�����X���c��� �"�ܟq("]���UM�"m��?$�'���U�!緥���6Bf�� )�,�}1��d����\A�_����aȯ���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ