Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
3b34b8222e2f367795e5c64459bb6414.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3b34b8222e2f367795e5c64459bb6414.exe
Resource
win10v2004-20231215-en
Target
3b34b8222e2f367795e5c64459bb6414
Size
602KB
MD5
3b34b8222e2f367795e5c64459bb6414
SHA1
ebba945d69c94aac61771eddbcd422fc64025e3b
SHA256
1268780bd4d4e27f57c90a494a97660c31ef85e12054632e45bea9b4a915ff12
SHA512
6b3c11360c7edbca280ab7b7848b975631893e2d963dec2627c7fe6571e169c3c809f855676cb454426f64c5205eed1ce524f1090c924cac1b28f434771dfb32
SSDEEP
12288:cU0/GFk2qgwSp31LXgRDK6niecVEIlsMbhOB8Rc7KRFMD:Al2qs4n1wHKQhPi
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetClipboardFormatNameW
DrawAnimatedRects
EnumThreadWindows
ModifyMenuW
GetAsyncKeyState
MapVirtualKeyExA
SetWindowsHookW
WaitMessage
DefFrameProcW
GetTabbedTextExtentA
DialogBoxIndirectParamA
CharPrevW
GetWindowWord
SendMessageCallbackW
SetUserObjectInformationW
GetMessageA
ShowOwnedPopups
MenuWindowProcW
CharUpperW
SetLastErrorEx
FillRect
GetClipboardData
SetProcessWindowStation
EnumDesktopWindows
LoadCursorW
wsprintfA
GetParent
LoadCursorA
DefDlgProcW
SetForegroundWindow
GetCapture
LockWorkStation
DrawTextW
TileChildWindows
MapWindowPoints
CloseDesktop
GetDlgItem
GetUserObjectSecurity
InflateRect
CallNextHookEx
ValidateRect
RegisterWindowMessageW
GetDCEx
MenuWindowProcA
GetTopWindow
OpenDesktopW
DragDetect
RegisterClipboardFormatW
PeekMessageA
FlashWindow
SetTimer
IsCharUpperA
CreateIconFromResourceEx
DefDlgProcA
CopyIcon
SetThreadDesktop
RegisterDeviceNotificationW
GetMenuInfo
GetWindowTextLengthW
BroadcastSystemMessageExW
GetClassWord
ShowWindow
CreateCursor
GetMenuStringW
LoadImageW
CharNextA
GetWindowDC
DrawMenuBar
GetSystemMetrics
InsertMenuItemW
EndDialog
TabbedTextOutA
CharUpperA
CharToOemBuffW
OpenIcon
TranslateAcceleratorA
CreateMDIWindowW
SetWindowTextA
DestroyWindow
SetMessageExtraInfo
PostMessageA
GetDC
SetLayeredWindowAttributes
GetComboBoxInfo
CharLowerA
EnumDesktopsA
ArrangeIconicWindows
GetFocus
IsCharAlphaNumericW
CreatePopupMenu
CreateDialogParamA
CopyRect
SetRectEmpty
SetDeskWallpaper
GetCaretPos
PrivateExtractIconsA
MenuItemFromPoint
EndMenu
SetRect
IsWindowVisible
OemToCharW
GetWindowInfo
AppendMenuW
DefWindowProcW
CharLowerW
AnyPopup
GetWindowWord
GetWindowTextA
RemovePropA
TerminateJobObject
VerLanguageNameW
MapViewOfFileEx
DeleteFileW
GetDevicePowerState
GetLastError
GetProcessPriorityBoost
LoadResource
OpenFileMappingA
OpenJobObjectA
SetHandleCount
SignalObjectAndWait
LockResource
WinExec
RequestDeviceWakeup
LocalAlloc
HeapQueryInformation
LocalLock
UnmapViewOfFile
GetModuleHandleExA
DefineDosDeviceA
BuildCommDCBAndTimeoutsA
EraseTape
SetFileAttributesW
SetCriticalSectionSpinCount
EnumSystemCodePagesA
GetShortPathNameA
GetACP
SetPriorityClass
GetDefaultCommConfigA
GetExitCodeProcess
CreateMailslotA
EnumUILanguagesW
MoveFileWithProgressA
WaitNamedPipeW
FillConsoleOutputCharacterW
FindFirstChangeNotificationW
FindVolumeClose
DefineDosDeviceW
FindFirstFileW
GetFileSizeEx
ReplaceFile
SetMailslotInfo
SetCurrentDirectoryW
GetCurrentConsoleFont
ReadConsoleOutputW
InitAtomTable
SetEnvironmentVariableA
DeleteCriticalSection
Heap32ListNext
GetCommandLineA
SetLastConsoleEventActive
SetErrorMode
GetProcessHeap
GetLastError
GetProcessHeap
TransmitCommChar
GlobalDeleteAtom
VirtualQuery
LoadLibraryA
TlsAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UrlGetLocationA
ChooseFontW
VarI8FromDisp
VarCyFromUI8
VarCyAbs
StrRStrA
SHEnumerateUnreadMailAccountsW
CheckEscapesW
EnumMonitorsA
EngStrokePath
CreateMetaFileA
VerFindFileW
VerInstallFileW
WTSShutdownSystem
WTSWaitSystemEvent
WTSQueryUserToken
WSACancelBlockingCall
WSASetEvent
WSACloseEvent
WSAAsyncGetServByPort
FlatSB_GetScrollRange
ImageList_Copy
����^��6�X��έǤް��� �� A�j�HZ���e5F�~y�Q��嘕=�N�ɋ#�$3�i&N�˾��z��X��X��/��+��<�Ǣ���O����]�N�����"�J ��b{�:5�W��}r������M��8��R�ޝ�b �����-���c�D�8�A1*�z�Z�~��3E/�K��v�� ������/��t׆��k�^��m������C@*��e�f���kX����������<�04؞%��>f.�/k��* ڝ����kHlCiѪ�U̽q�j�{̹�!��tv���6⢗E<.�q�/��>e�w�>��m��U���萓�3�lˈ�@B��j� V;6�B7}O0N���Б�en��O��`��D6�Ү����֔3�*�п��ӻѸL[1:Ԭk���&P/Ӳ�E~ ���B������;�o�.�\O/�5���m��u�\*��7-7@���~��R��k�+��u�H\@oU���s�����ӵJ��>���� hщ �n�6��{e�>��o����5��O$�O�����;9H�ƥ+�� xV[ Q���) g �\3���C���&�@Vj�?N�&���Q�*����BQw�y����z-�Ep A��+��YN#��G3�!��-�b��,R���דS��J�a�|�ml�Љ/:���m������W!)*���Нp_�r�_�����e�c��fJ�=�y�5�6M�z�֯�+��z�i߸RՒ}@/A���pPv�zg��,_{�oa d����V�0i~�oP�EO`��!��hϒ~�����DM^�J���\��K����gOB/����1��g�Ӎ����lAj�ig���8���^�y��B�-�5�ůJ��3�g9q�v�65f�0��j��g}T� ��fx��~<T����R�4*����+��m}?縜�I����X�A�i�ܿ����G�!�<} J�G%=]�\�ͧ.�M�o��/7�tg|ec�F]�2Mg���]��7"�$�YS~ہ��`4"�!&�:%y��!R7xU�a����$�����_�:�g�(��em�pȉ�7����ت�� �k0�iQzx�7 <�������٣�$D��.�5���=�)�,&q� Ub�}VO��� h��#�_-�f{�<�0" �Zz*�8qFf��Ci4�ʱ!|I��Ӑ:���M�A�qt��8o���cA�C�K9�1�������2�$�|^/��t��� L,�e+�o��:�5�R����,[�͐�������@�^6����z��!=��}�iw�UQ'��8��T�/��<���D��ƿNw�F��DEl "�UJ�=���]�H`�����}�~�O̼���zĝ�ˀ�r^jQ����A�&������x/'8%�KV��f�C(�t.Gt�u��tw96�D��ON��;����Q�$��V���N�~Z�OE��F̢E��ze���R�˝����[C�����i�9V+%=J O���N��KS:W� +�́HBY������L����;e�&WޫX�`l�Dcк�kqt��X:�H��T;�4�Pr$ȞSc;5$r)��}�=r���Ho��as�JvUgZ��F�,V���������}k����˩~p�D�1NE�X&6(�n~��GI��V ~��������O���cr�V 0�j�mKM�M�5�>�;<QG����mN��H��7�X���ȓRV����PI}�i��q��M�/��՛2��rOL��H�f�&^�T)�&q!�3�� ��W��P�HSi��:�U��+/FK��������r��ل�ٕ��bM���w�.���Z�`a\����ǖ���l���J;ZA�~���|�)�(&f�F���n�M�W���3L��0����X;�a�~7Do���|?+ӉZ<�e����){j������㌰��?7�������|��y�K/HqL��4��n&�K�������=`C<����T����R�|D*������K;��ݨn\��n��a����Xt+�G���������~F�� N����8�'3��KdI2HXKO+ӫ#������ (�Kӭ�MP������4�b��[�{2�9XަD�J/��q��0֜W���c�[�}̐8C��E��A�?x������lZW�$~����k�#(WV<pW��t��nZk��4U�]*%:��CpW��K~�S�r �S��DL�������&>��w�Qֲ���S���(<�� #m�C��= B]ЃoUOZ����n��١*[�.�;�5�+�l�b�M*K�:J�v�<�NN�V�����m9J�������H�נs���Ϟ��cm��(y��B��9��Z5O �X�m�Y��PV�Cl�A=�d.ٌ�Mz������<�t�����~v�O��s��1&ar�͉-��p���.�<3|!� �������̟V�j���-�?���TDw,LN.�"���S�����@��������;<�����Aq�ƢO4q_�8gC��UL��WG�C��WPM�K�&��g�b��z�T��p��E�h�0��K�z8��;����p���Յ�A �HB����z�ҭ�傠�KP B�[3�y����_�O�A���W��ތ���xg�c��ټy���#{������r�YvB$�Nr��:��Y�������W��`�W�f���[��N�ǿ�5�u'ЅR���<������~>�l� ��l3H{A�O7$�F� ]��Y=�I��弿VT�iw��<q��ה)��A����ҙ*B���i�~̸x9�7�~����L�p`����P�b0R��������������bycݶP�m~ӄbq��S����BC-3�C��@��k�� ���B˓ő ǚ�%>%�� �d?�@��LXjTk#ߡ�C�B�d���>�Š|��ʼn��{��MLԴ��6.��|�������i�� A�t�-�#����s�e#�:=����XŨ�#j��$u�x�U�K0\�#��B�HW�ˎ�����<݇v|���*9�j����D
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ