Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
3630ade5e7033b9d1d5ed3f08123e932.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3630ade5e7033b9d1d5ed3f08123e932.exe
Resource
win10v2004-20231215-en
Target
3630ade5e7033b9d1d5ed3f08123e932
Size
694KB
MD5
3630ade5e7033b9d1d5ed3f08123e932
SHA1
718ceaa5d5e6cbaa823c2143056238da4a494865
SHA256
22220590eb84c59d815a39bcc341d331ac0d40d9e312185489f00775320c3b23
SHA512
1170321cda97b9aad424e7d615ef11797a9c3c99de3a65b7ec2c2a85f6cc4a2e9d76751ca0c772306db55a4d0486c0dc7cbfc9a72577b454710206842b9f05d8
SSDEEP
12288:OQepFPmJcVf/uLgiZV3zEJ3J11/giHX0c:veptqEaBZ83J1d30c
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PathUndecorateW
SHRegCreateUSKeyA
StrCSpnA
UrlUnescapeW
PathIsFileSpecW
PathGetArgsW
StrRetToStrW
SHSetValueW
StrNCatW
PathRemoveBlanksA
UrlCompareA
PathIsDirectoryW
PathIsContentTypeA
StrToIntW
CoRevokeMallocSpy
CoFileTimeNow
IsEqualGUID
StgOpenPropStg
OleQueryCreateFromData
ChooseColorW
ChooseFontW
ReplaceTextA
PrintDlgExA
WantArrows
LoadAlterBitmap
ChooseFontA
FindTextW
SafeArrayAllocDescriptorEx
VarCyInt
VarR4FromUI4
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDList
SHPathPrepareForWriteA
StrRChrW
StrRChrA
ShellExecuteEx
SHGetPathFromIDListW
PrintersGetCommand_RunDLLA
SHFreeNameMappings
DocumentPropertiesW
QueryRemoteFonts
QueryColorProfile
DeletePortA
WaitForPrinterChange
FlushPrinter
DeviceMode
PerfCollect
EnumJobsA
PerfOpen
GetSpoolFileHandle
AbortPrinter
DeletePrinterIC
SetPortW
WmiQueryAllDataMultipleW
TreeResetNamedSecurityInfoA
SaferiChangeRegistryScope
GetTrusteeFormA
LsaQueryTrustedDomainInfoByName
CryptEnumProvidersW
CredUnmarshalCredentialW
CryptHashData
LsaSetInformationPolicy
StartTraceA
LsaGetSystemAccessAccount
GetServiceKeyNameW
RegEnumValueW
RegisterEventSourceA
WmiQueryAllDataA
GdiStartPageEMF
GetCharWidthI
GdiConvertPalette
STROBJ_bEnumPositionsOnly
GetTextCharsetInfo
CreateMetaFileA
GetTextExtentExPointW
FlattenPath
GetTextExtentPointA
EnumFontFamiliesA
GetFontLanguageInfo
GetEUDCTimeStampExW
ExtEscape
PtVisible
MaskBlt
CopyMetaFileW
GetCharWidthA
UnrealizeObject
GetPixel
CreateDCA
GetClipRgn
EngDeleteSurface
VerFindFileA
VerQueryValueA
VerLanguageNameA
VerLanguageNameW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileW
VerQueryValueW
VerInstallFileA
WTSSendMessageA
WTSLogoffSession
WTSUnRegisterSessionNotification
WTSSetSessionInformationA
WTSRegisterSessionNotification
WTSEnumerateServersW
WTSEnumerateServersA
WTSOpenServerA
WTSEnumerateProcessesA
WTSShutdownSystem
WTSCloseServer
WTSVirtualChannelPurgeInput
WSARecvFrom
WSACloseEvent
shutdown
WSCUnInstallNameSpace
WSCUpdateProvider
WSALookupServiceNextW
WSANSPIoctl
WSAUnhookBlockingHook
WSACancelBlockingCall
WSAGetLastError
getaddrinfo
WSCDeinstallProvider
socket
WSAEnumProtocolsW
getservbyname
WSAEnumNameSpaceProvidersA
gethostname
WSAGetServiceClassInfoW
getsockname
getnameinfo
GetEffectiveClientRect
ImageList_Destroy
LBItemFromPt
FlatSB_ShowScrollBar
ImageList_SetIconSize
ImageList_GetIcon
ImageList_Create
UninitializeFlatSB
ImageList_LoadImage
CreateToolbarEx
PropertySheetW
MenuHelp
ImageList_GetImageRect
ImageList_Read
ImageList_SetFlags
InitializeFlatSB
ImageList_DragEnter
ImageList_Duplicate
CreateToolhelp32Snapshot
AssignProcessToJobObject
GetVersion
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
�����X�Jz�ƚh�`ON�bTl;dw��ߊf���M���6���Ű��"�z>�i=��]�U���ukDwn�}�J0J�o� [��g����&v�{a�'��h%��l�\� I���_��&���~����}�mX:���q���5��� ���Ӛ*HS�� �1ܢB����3A�!�#�\Jr\̼ϒ���Mk�ړ�E���H�|���H6]6�>���St��G�P8d�������`�T�#Pb�?Z����0+�����l���?X�v���}����^��U��X�2;.Uo�V.� !�B��*]y��pY��L��Ki�>�?��F]�L3o<����i9��A#d8��(µ|�\���� +'��v��\1F��#1&��M�M䝴���P��W���-�p��j�]2�����А��A��JJT2�\Wy�V����"�J��Y����:q�Kh���[�t�=��$�9 ^��M�����B�%ͱ�N���3��%McʹVאͮ2"/�y~��H�����)����8�B1���9�i+��}���y���j��m�{����Ba��Xx�����2<I� s<C���/��CC���RB��j���O���}o��$r�^��������焄��B��L�.�v:�D���t�z3�(� ���n�|������d_T��2;�E��FO�pk���̣���I NڷE��w?j�S�Ri�����{���~O< ���2-�n��Y�A�#nu��i9S`�(^y���ꅪ�=aqӍ�I�Uz��^ �`�� ?O����!�R�_�e;�')M�kk&[^���a��r+HM�N�H��+ȼ,�#��l��~�'�F�u�|>�[/�9�9�:yr+��Q}���BѨ��a�O���%�䍑z� ��A��N�xA]�"9bjIL0�l��j'aє��b�~������ǜD�i5�k�D�����P�V�Α�S@�;:j�W�����'��F����\��r�(2���i]�F�Ō����{�[��?wgV���� ӗ"Ȟ]v�Al0��Л��^�� $;��1�h:��S}-R������������ ���}�t�͋�1Ej�̯ ٢��e�;��|�"��n�Ɠ�i��qJ��U�^��K��vX�ܝ���U��Y`!�V���zK�X~�2.�;�x��ǹ� ;2��^Nҁ���!/j�_Y?9L�ygg�זBҠAk[�.�ru-��4�sf����8$������7�D�ߺ��e�u��D���-G�+ݨ� 0r(��7^��®/�c\�Lvz���o����4�^}�F��a�GD0V�'���V(�-6����k��w���!YAn&�T��������bpjҧkP�fU}Mq��]�r'���eS-^Ud�P��C��s�d-Ĩm@o�^>g���H�JI" ��A������~�@m���4���&�o��P�G �$2'��%@A\���l�jC��W>�T�ӊ9u�C!�V�%�@��+�x���yO�z���V&�L�����o=�����s�u�Q.#���p/��D���8\-�jh�.9�WT�@�-=?������'�����o"daZ� �s�.�:lx���x:�Ӏ��m��,��1��EC3����k��?�@VOWӖ��t� ��2i����3�]ϖ��u��Ri��}d����[d�sKu�HhGA.���5̦�g0��{���@!B��rǶ�(����&A9Ė)�1�|�@��Ў���c2��Xp���/�F��nH5�T�����3����*��N����(��N/(��=�F��m�#Ս�OUCqڣ#�"T�d��]�"�I2>�� �����|P�V��4��/��&K�I!�Q"Yɢ{�~w�r�Y�9��l���f5(��9��8#<��Q��` �:�$V�A�I ���~o�}��H�1E?�����r)��nu��ĩ�j ,ZŭsQ���q�55�Ұk>�;Bl��V<����q��Ĥ��BWTp��_#>�ʬ}�I��)^N���ˣ=���\T4m�^�k�Ƿ�QbyN�/"S���3a9��W��#��Ic����yz}�%kD�:�^�[��vI��/��O@�ι �k�ŷE�>��U���g���)���#7��ac�5��\��=U�X?Œ�g��̴]��N�Q�t��ی0��f ��L����}Hh�]Co#��Wa�%�V�t�G��^��94���)��j�(�� s>M�ߺ��'���� ��Sg�=�Q��5l��OX�c\��Y'뉟8�UY+q�w�>�Ԟhm��~3��^�o��n�p����~�N;���^�������*T�.�2{������z����ڻP�E��T���&d|�q�X�N�,M^M�8�dU��a@(��f�����-.�[Ƈ�)��HJy�5��#���~��Y3+�l2����m:�_���ŀOZx9H��A�'��r��|ɞ(n��HKr��8#��_˶Ҕ��x.�,R�E�'Z\�:��쪞e�H{���a�y6��@� ��!��H�f�.�t?�����Hn}}��Z�v��� 5Mv�F�8�_w�sR>��根��� ��%)�-��gvm@'B��0Z`�=��fV����OϬ��<;߆z����I��|M�4�8�T�Hw��>��ج��¸��\d\^c���\�ޢ~]��O7�+�#��Ͻ���%��� b-�9��;�VBEp����z0����]7�9B%�����[���;0�)����ۣ^?���h� ��S���q�$+)��-J`K.{� ����8j96��Zf ��k�����L��Z��k[Ly5�bt(B��R�� .�G��8Oա�-ivE�/� o�t+�d��49KsL0�G�/+B���/���H�G��'�T<�h�����<�7#��q��D϶���RZ�Zyc���[�(���3���XIe�!c�\��z �a���S?�`�xeѷ�t��ֱͼ�Z�屽|��Y�s�:_�����e����N�����^L(_�Y��=l%���P���\?�=��}�^ү�fQ��r�b+Mɱ��kT��^�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ