Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
77943e4fa7971b32ad3451e0221849e7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
77943e4fa7971b32ad3451e0221849e7.exe
Resource
win10v2004-20231222-en
Target
77943e4fa7971b32ad3451e0221849e7
Size
608KB
MD5
77943e4fa7971b32ad3451e0221849e7
SHA1
43a5b71fcf8ecfd4ebe9163f53974ff4915b5159
SHA256
158cbd798a101f8a56cf0f90b79b2e050c65c7ec0fa92b02f49cfa315e940f89
SHA512
0946ecf5d6901f9baef1da8e04a2c2b40cc5aa48e4044391b97ee2a7589453db6264f2d05a4c723b7de9fb2d338169c81a90d872806b1ca285e317f7b698620b
SSDEEP
12288:aWInH0o5VoFl5bMpDnDz4680cLnKighrwXRC04M9:20o5Vuun98ahrgRC4
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DialogBoxParamA
WinHelpA
DrawEdge
AnyPopup
GetProcessWindowStation
MapVirtualKeyExW
SetLayeredWindowAttributes
InsertMenuItemW
CreateIconFromResourceEx
MapDialogRect
TrackPopupMenu
EnumThreadWindows
GetWindowThreadProcessId
DrawFrame
EqualRect
SendDlgItemMessageA
CheckDlgButton
SetClassLongW
RegisterClassW
LoadStringA
CallWindowProcW
ScreenToClient
SetDlgItemTextW
DrawIconEx
BlockInput
EnumDisplaySettingsExW
DestroyAcceleratorTable
ModifyMenuW
EndDialog
GetKeyboardLayoutNameW
RegisterHotKey
SetParent
EnumWindowStationsW
LoadCursorW
DrawFocusRect
GetMessageExtraInfo
SendMessageTimeoutW
ValidateRgn
GetSysColor
GetTabbedTextExtentA
SetProgmanWindow
GetMessageW
CreateDialogIndirectParamW
PtInRect
CreateDialogParamW
ReleaseDC
RealGetWindowClassA
LoadCursorFromFileW
SendMessageW
LoadImageW
DrawStateA
GetClassInfoW
WaitMessage
SetWindowTextA
UnregisterClassW
GetDCEx
RealGetWindowClassW
CharUpperW
GetClassLongA
ChangeDisplaySettingsExW
TileWindows
EnumDesktopWindows
TrackMouseEvent
MonitorFromPoint
CallWindowProcA
GetActiveWindow
GetUserObjectSecurity
DialogBoxParamW
SetMenuInfo
EnumPropsA
UnlockWindowStation
GetMessageTime
GetScrollInfo
EnumPropsExW
SystemParametersInfoW
GetWindowTextA
CheckMenuItem
PrivateExtractIconsA
InflateRect
ReleaseCapture
TileChildWindows
IsWindowEnabled
RegisterWindowMessageA
GetKeyState
GetClassNameA
GetAltTabInfoA
CharPrevW
GetWindowDC
DrawTextExW
GetMenuItemInfoW
CopyAcceleratorTableW
AnimateWindow
MenuWindowProcW
LockWindowUpdate
LoadAcceleratorsA
GetSubMenu
GetUpdateRect
EnumPropsW
GetClipboardFormatNameW
TabbedTextOutW
ValidateRect
DispatchMessageW
KillTimer
GetInternalWindowPos
SetCaretPos
GetWindowTextW
GetWindowWord
MapVirtualKeyA
CharPrevExA
ReadConsoleW
GetCommProperties
EnumCalendarInfoExW
Beep
MoveFileExW
GetProfileSectionA
ReplaceFileA
FindNextVolumeMountPointW
EnumSystemLanguageGroupsW
SetCalendarInfoA
GetThreadSelectorEntry
SetCurrentDirectoryA
FindFirstVolumeMountPointA
GetProfileSectionW
IsValidLanguageGroup
CreateConsoleScreenBuffer
GetConsoleDisplayMode
QueryDosDeviceW
FindActCtxSectionGuid
BeginUpdateResourceW
RtlMoveMemory
GetFileSizeEx
FindResourceW
GetConsoleFontInfo
MoveFileWithProgressW
DebugBreak
PrivCopyFileExW
RestoreLastError
ProcessIdToSessionId
AddAtomW
CreateJobSet
WritePrivateProfileStructW
HeapCompact
IsValidLocale
GlobalLock
SetThreadExecutionState
EnumCalendarInfoA
SleepEx
WriteFileEx
ActivateActCtx
CreateTimerQueueTimer
WriteProfileSectionW
GetCurrentConsoleFont
GetDateFormatA
CloseHandle
GetFullPathNameA
FoldStringA
lstrcmpW
GetCurrentActCtx
GetSystemTime
HeapAlloc
LocalCompact
GlobalFindAtomA
SetTapeParameters
GetEnvironmentVariableA
RemoveVectoredExceptionHandler
EnumSystemLanguageGroupsA
EnumSystemGeoID
BackupRead
WaitForDebugEvent
OpenWaitableTimerA
OpenFileMappingA
GetVolumeNameForVolumeMountPointA
CreateMemoryResourceNotification
RtlZeroMemory
FindNextFileW
GetLogicalDriveStringsA
CreateMailslotW
InterlockedCompareExchange
GetSystemTimeAsFileTime
GetConsoleFontSize
CommConfigDialogA
SetPriorityClass
Heap32First
CancelIo
SizeofResource
DnsHostnameToComputerNameW
lstrcat
GetSystemDefaultUILanguage
GlobalGetAtomNameA
MoveFileExA
VirtualQuery
SetComputerNameExA
SetMailslotInfo
CreateEventW
GetACP
GetLastError
ConvertDefaultLocale
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CreateBindCtx
ChooseColorA
VarDecFromDisp
VarMod
RegDisablePredefinedCache
ClearBitmapAttributes
GetMetaRgn
WTSSendMessageA
WSAAsyncGetProtoByName
WSAAddressToStringA
FlatSB_ShowScrollBar
DllGetVersion
�˟��.L��X�b�jx=Ӻ0~�)�IvR�W�2e߉k:ӂ(��į���s@sQ��FOLu��uRD���, � '�X>D̹=��2Pu�b'M���c\�3<6��|�� �Ŷg7���0�/F\��el��ݧE��#��ckP�&�`�~�\�O!���9�L��/$,�m9K���u���n�� X���0���z��`Yu6�u�J��v�}��.kN�+��2^&�P[� ���4昃�hI!`c���#�X ����N��fj�V���YAYN[��5��:g���'w�K�0�7�nd{�d˛���*�}�1��Ke��^�k���Pe=f�74��������J4;�1[35ڮu@��7�7�k�n�B4�2W��N�@.�&���O>��SF�� w�"5>� E���8�;����K0��d<~�<�n��Lr���W�'�,R�3��D�����4�S����Z.+�)��$�&?����� �G2��7��?�|���_�}�^"lW {ʘ�l�F�� YӪ��C�MH�b��{^=�p��/�&Cr�� }kk������c��D�u&���v�by=��)��B�0���p�*h=���}�5������y��r����넽�#O�[0V�����ޓ�L hR79��a奲�ͼdJ�����Ph�X t+wO 9j_9��J%����h��l���V7�xJLԟ����Bñ�N1r���FD�Q!��Wę�gҝ��� �U�]O3-�'��r+��x�5eބ�$[�^�,����;J�lL�T���<�fܡ{�?C�̤� �k����F%�:�h��5o*>�b1VG��x�=�a�Eh{��Ǐ��\�m�$���q�.�Po$����^�o���]{�b��5�U�B%��j��a���d��"���ȏ��"��Fܡ[{AM.b��F�[�r?���Ge�C�8�;�q~wX�[����ģP�Y^h}6 /�����m;���q�6[G��J��/���Xt��=V�������}@��2�9}P���� "�v��<�(��'�ĩ�54�'�sZ�S�͌=xl�>�Gq��y������&"�wZ�e�|IG�}`L�[19������1����i��4�NA���zo.D��2/���}�������"�R�\��Ʋ%V�7�8��F >,5�gk����c�d\F���6��Y%ŭ@�IlAn�����O`tqeн-����P� {�rm槹 ;R[��vh�BO�œ����4��+���G�<���m�\����ZˡX�!���d���������Ӻ�٘k��ҋ:��G&���ի�K����r�p�Kx^�? �X��.��kb����4>��/P�w��guk��e1)��k��q+�O�oUI��G %<�FPgY?�K��Ԫ��M@7Է�(�`�E�7U�W���q1E0�*���d�N�Nȶ���~HB��� yE̡������;2�KM}T�܆郎������gߠ�AT�u�4/�Y&z�8�{�� ��de�0�ן��=,=��M��_W����W��g��>s����(��\0& m�G�|^ f5pK6�49�qñϡ � ףN��!^Bq�';���'wwq*���Jy�6Sq����V��3&W¯&xJ��Q�u�}�lU�#[�xTe��ژc���"�M+�v�ܦ��)-O��!��A.H��&p yu-E�z]´��d���ZJ�i�����xi.��>��Ť9[i�6G1a,�ݢv�S��� ٙ�`�Խ���0�~� �V&���.�_ܹ��:�<�_�dW��vj!���G/ lV�����v��2�'� J �1���#t���k�0��;�,�/��i�2�GP����?�()�H��� x%�\&ӕ+�'�U��������{�`�9Ň�t�gv\�Ç1��Z��0u'��O��ga&�5��4)k�GH �9gԖ[q'� ��Ke�>}�/^ı�wrm���wI2��̧S5S3�9hqd���hh�V1�������cG�*�~1ԒJ�H��0c�@�_�X���gl�����ų�4�~���!dBvq� ݽOeO����Q�n��cP��:u�<�"O@�X���9>�T�9�aN���P�؟e�m�PݣvtFV���:;^P�.�"f�v�2=>�(��S�?�'ů�} �Lx(�.�{Hm/8����������)��PK��%!�"ި��@���`�#�r?;�:}�p�1�(پ�����֕�Ӎ̼���� ���!�K1MS���ZY���B@�kq��t��l��[������d�$�&�3�/��<�k(����{Ŧ��A�X�2�"���|�6U���%DHW�ivn�æ&�k�WLۏ��cZ�����Sjy���+sH>\�)�'_���͆���jI�p���O?'�=���<�p����g-��E���%7���FV��]vEr;���!نfu�Cn��=��N��3��gC�(�o�HT����)���`��N�l������r�Xj��n[�֜����Gq��R\]�xXj�~��ۊ��]k�:qlqǦ��f�e77�` Y�������\G��|Q("�Ώ��}J�E������3���6E���b�[�9�A���MNF\�O�!��Ȩ!~Wֳ3�^�*>�����Bq��ɲ4�Ϗ��:�J|��'��oJ������7�gY�?B��T����J�U>�W�QT_t��}me����\1��лi�f-.��Ҭ篁�bZ��%©pw�e��h_��#Kt�:�d��1���XFo�D�W�r��Vӧ��xKѧP[)�/X�5 �VL���r$w�E�s3���F�����'aƦ��O�?���i�Lr�$:��0$V-�?����>R I��&�o��P��3��e�K?����_�x&xP3Z����yFԛ�ж*��.�_�e�c%�C��l6��uv�%�,P˾Z!�������Z��G>��� ��_L��I<�Ȝ�{��E�G�j���zx+a� a��BWS�#^��ڂ�*e.�S�"���!�Nez���Z�l
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ