Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
3a92a80c7288fdfaf093a4ad3defbdbd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3a92a80c7288fdfaf093a4ad3defbdbd.exe
Resource
win10v2004-20231215-en
Target
3a92a80c7288fdfaf093a4ad3defbdbd
Size
607KB
MD5
3a92a80c7288fdfaf093a4ad3defbdbd
SHA1
686cc74e1e2726f0a0463d434da388530637a824
SHA256
1536761a000352b134f9ae15e8749bead0fb37def08d40a9734189e96ae991b1
SHA512
bcfda05fd2b5271d6b7ebcfe08b4e724fdb28480288e80943194187c3e8af9bf2330f6e0da43e8f1f7eba679be49dfa44336a462fbeee1ca588dc779d580ff76
SSDEEP
12288:lnfOx4gSwGoMXp8AAVI2nZmlRgvZXqyd8ByymZB8xQIusk6O4M:lnEnkZ8r3nZaRgv8BLuBwPuskn
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
SetClipboardData
ShowStartGlass
BroadcastSystemMessageW
CharNextA
OpenDesktopA
RegisterClipboardFormatW
ModifyMenuA
DialogBoxParamA
CharPrevExA
GetCaretBlinkTime
DestroyMenu
DlgDirListA
GetSysColorBrush
GetSystemMenu
GetProgmanWindow
SetMenuContextHelpId
DragObject
SendMessageCallbackA
GetClassInfoExW
MapVirtualKeyW
MoveWindow
GetDlgItemTextW
WaitForInputIdle
GetMenuInfo
GetClassLongW
GetFocus
SetActiveWindow
MessageBoxExW
AttachThreadInput
InsertMenuItemW
GetInputDesktop
TranslateAcceleratorA
ActivateKeyboardLayout
DragDetect
OffsetRect
IsCharUpperA
UnionRect
UnlockWindowStation
CreateIcon
DrawTextExA
MenuItemFromPoint
EnumDisplaySettingsW
CloseDesktop
DialogBoxIndirectParamA
CheckMenuItem
CloseWindow
GetIconInfo
GetClassInfoW
GetMessageA
CallMsgFilterW
DefFrameProcW
DrawStateA
MonitorFromPoint
GetCursor
wvsprintfA
GetDlgItemInt
SetClassLongA
GetWindowWord
GetWindowTextW
SetCaretPos
CreateConsoleScreenBuffer
WritePrivateProfileStructA
OpenWaitableTimerW
DosDateTimeToFileTime
RtlFillMemory
SetErrorMode
HeapCompact
SystemTimeToFileTime
GlobalFree
AddVectoredExceptionHandler
SetThreadUILanguage
GetCurrentDirectoryW
GetHandleInformation
LCMapStringA
IsBadWritePtr
GetCurrentThreadId
GlobalFindAtomA
HeapCreate
GetPrivateProfileSectionA
GetTimeFormatA
GetPrivateProfileStructW
QueryMemoryResourceNotification
RequestDeviceWakeup
GetCommState
WriteConsoleOutputCharacterA
GlobalUnWire
EnumCalendarInfoExA
EnumTimeFormatsA
SetTimerQueueTimer
EnumSystemGeoID
FindCloseChangeNotification
GetConsoleKeyboardLayoutNameA
SetCurrentDirectoryA
PrivCopyFileExW
GetPrivateProfileIntW
CreateNamedPipeW
GetSystemDefaultLCID
GetStringTypeExA
UnregisterWaitEx
GetConsoleAliasesW
GetProcessShutdownParameters
SetFileAttributesA
AttachConsole
BuildCommDCBAndTimeoutsW
RtlMoveMemory
GetExpandedNameA
HeapAlloc
DeleteAtom
HeapReAlloc
GetLastError
GetACP
GetProcessHeap
GetVersion
VirtualQuery
LoadLibraryA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetOpenFileNameA
SystemTimeToVariantTime
VarDecFromCy
VarCyFromUI4
SHHelpShortcuts_RunDLL
SetMagicColors
GdiFullscreenControl
GetGlyphOutlineW
GdiPlayJournal
WTSOpenServerA
CreatePropertySheetPage
�?��Y]���d_�\\E�xS>P4CoI�U�҅*j���i������}4�����3)�`��6SQ��}��#$e|�y�D_]�m����ă��B�W��4Z�'��'�����_��We��5������O����@�������3� �.��l5!����SH��j��\X~[���c�j<�Fh$������ٿ�N�@� �`\#�yVo���>���v���V��@�M����@��n`h���[�)�6u�jߚ�ʓpOt$�q�\�:�����OJ��^���Z뭏�$Q����Ť�˅5�K���6����X6�U�f�U��� V��2O��Wݏ,RjĔ�+_�OV����X���s>kE�Z:�e��˸ o� Vz���kv?�וuĂ$ �".���Nr��� ���?��kћ(���Nx7�0=��z�m#\g:��rI��H*���� g�J�(F��L-0�հ/>��^����C�'/����~�@tѴ�N�����]���m̈�� �+�W+��gmj[+�[ J~��A 5>��d+�0�$�������K`�y��r��~x�LH�"Ќ<:��W���7�U�\�{�;����v����`�c�}(:�&����~ȗȆ恳,�i8�RU��ʽ6�&}��S��l�y�#��*/h��v��ON� �L�"�-��6���:��͐�~!E��C]d$`��V����b��H5P���Qg�����><��������?n��aT���4;��S訃��Pέ��[k�6t�fn��w�����"g�Q ��&���g����G�Kt��\�"�|2\�����_��>��f��U@�RNgϴm[��I�?Z����h"��힌[R�QE���=�h�P�%�V��G��b�:q)� �Ww��'eY�T�)�:���8uXp,�%�������� 0�H���"ќ���E/��2�F� ��׆�T�+�Lu���g���+���9i�䁋23գL��ͳjP��� |\K~���X%V�R��w��k���>�]��;��R�2�Ֆ�O�r�r�VDX���3��Y�!V�$����`��?׃YBؙ�ݵ ܓ�sE�Vxf���� >l��o� �7��6[��'!�:;��Ny�z=���zƥ�]9�@�LZ����aP-���d�Q�n�3i��>�S�X�dZƝ�h+2�u��ǎ�s)���B]0k�%v��i����jF������D�-G"%�^�v>ט���Æ�[G��g��NԼ��u�_��_h�Vp|�Mx����o�ax�&#��ի���kK|# �aʩ�ښv�#�/�<oA�Đ�f�h:�a<�50¤q-�s�����7����J����X<:�>Q1涊� J����a!>�!�J�_�>&�L*p���H���jMd����ޥx1�OI<+ ��E�:&5J\��|�J��PA�ɧN�V�qj��1��GR{m�J��3���knB��>�/��+Ÿ��|�7s�?`eB�))������A*J���ϻ��0�ċ���#��'�s��M�`�Ox�$3��_���Ɠ�[C`;�g�S�#�Y#�Q����-ٕ�������) �ޜݺ#��Y��%����aE��a���j^H����;��������{�k�1�ќ�xE�� �4=�N���� ���s�ob9@�N5`�%��Y��s�����ܪq��"Cy/�R����He ��g9izܙZ���3�u.��a�&(bJV�m3����Aݎ�� &K⑇�1���� K���� Y~�q����/�X:�a���ޘ��������v����O0��{��v�� 9�d�z���Hۑ���r�Í�ɗ������5�M�F�i�$gH��ӎ$���R풘���D�&�!H��]���Ii�Ο>���F�OE��qAg`�$,2Z���)�K��aH�ʼ�d��n���*��,T}��[g��'�f^8���]��'��I���L�ÇM���T�9�cGZ���?Tk欝�����3f'B����,��@k�zB�»�7��'�~�ڸ5��0۬n���lҵ��H��2��+��ǺT�`o�����֭�����ey��q�c�&E���^��7���'A�:@�9J���k� �%���,�ӢC�+21"��/`d$��Om'.�j[�'�<ֱ{���v|��v�5A [���9e�5 ��M�a�Pe<� H��>������G�Q�;\�ЩΤ{|��@�����%��g/��U��(A~x1�S�#�Q�|��W�n�F�M�*����C�����0|��y}Kf@i�S0|NY����nx��a����5+YX>\�}�����(~��uS��:ix��鈕�kѭ���ã�8� ���f���h��ِq�2�ı�X��;r��L\�-�<M{W�1��?.��oa�_�5�/��v�Q+��[%�3��n�p/�DKH������S��4G32�#�]J?����X>�)��a.,�xJ������>D����N�� ܁ȳ����n��`ox͟��v��Y�N%�tnm��W�ù� �~%��{'�<A�M���Zz��0�{���0z�� 1�ǒy/�'`�[��S�P��� ��#[����":�1�Mݣz�&���+�����0d �'�և��_/�c�|��;Uǣb���Ⱥȗ��̲W�s=��]��l�� ��I���g5ǔ����n7&馄��1D����6�zX�3.�6��x����~گ_�+ِ��7*�/����ҐA�Y��-�0�Z��S>�"�[k�����&����k)uy�R����f �MH��-��m�0Wa��BLE���OĻ9��EG�&�A�w��#EC)S��8��m���*Zruc=& D�Ը�B�0�M�d�O���t����:�p���T�V�5��{�лݱ.Z����_c����0�۫$P���>�d@���W�Y�Å�p���*�>e����B���G� ��P��h�vho*Ԅ)��@$��B�džQ���<�Z�����o+��(�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ