Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
7bef22c1744ded32f0dca4e223f7399f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7bef22c1744ded32f0dca4e223f7399f.exe
Resource
win10v2004-20231215-en
Target
7bef22c1744ded32f0dca4e223f7399f
Size
597KB
MD5
7bef22c1744ded32f0dca4e223f7399f
SHA1
1b7333dcfa21e9c822ea347685db75b8801852c3
SHA256
120408adedb6813aa406d5d0e60061e38ecfe07c583925b2141d842cb56514c6
SHA512
6ba1c336c8efa04f3f0c42e60e2119158d82aeb93018eb03b9aeb9fb3dacab78f8bd953e15e7b686f94a2d6157c17247016fa194280656d89be2006898663ad0
SSDEEP
12288:U8MH1DyQyQ0YGs1tzxcAveyL3SjDOt3peNU72gBgzg+aSYuP8:LMH1DyZQ0av2PCC42gBgzg+aSYK8
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
CloseWindowStation
TileWindows
GetDlgItemTextW
BeginPaint
RegisterWindowMessageW
SendDlgItemMessageA
GetListBoxInfo
DefWindowProcA
SetCaretBlinkTime
GetMenuItemID
DefWindowProcW
RegisterWindowMessageA
ChangeDisplaySettingsW
SetMenuItemInfoA
SetUserObjectInformationA
CloseClipboard
IsWindow
MenuWindowProcA
UnhookWindowsHook
EditWndProc
HideCaret
ShowScrollBar
CharUpperW
RemoveMenu
MessageBoxExW
GetClassLongW
SetScrollRange
FindWindowW
SetCursor
DestroyIcon
GetMenuContextHelpId
CopyAcceleratorTableW
CharUpperA
DrawIconEx
DrawFrame
SendMessageTimeoutA
MessageBoxExA
SetCursorPos
FlashWindow
DlgDirListA
TabbedTextOutW
TranslateAcceleratorW
LoadCursorW
WinHelpW
GetShellWindow
GetClipboardViewer
CopyImage
SendMessageW
IsWindowEnabled
GetClassNameW
GetDesktopWindow
LoadAcceleratorsW
SetDlgItemInt
RegisterClassW
MessageBoxA
ChangeDisplaySettingsA
EnableMenuItem
MessageBoxIndirectA
OpenClipboard
CallMsgFilterW
GetKeyState
ArrangeIconicWindows
GetClipCursor
WaitMessage
BringWindowToTop
GetClassInfoExA
GetCursorPos
GetMenuInfo
CopyAcceleratorTableA
SetClassLongA
ToAsciiEx
ShowCursor
RemovePropW
SetSysColors
DrawFocusRect
EnumDisplaySettingsW
GetMenuState
DestroyMenu
SetMenuItemBitmaps
CreateDialogParamW
CreateDialogIndirectParamA
SetProcessWindowStation
FindWindowExA
SetWindowsHookA
ChildWindowFromPoint
GetActiveWindow
FrameRect
InflateRect
ShowWindow
OemToCharBuffA
GetCaretPos
GetInputState
GetWindowTextW
CharPrevA
MapDialogRect
SetWindowsHookW
SendMessageCallbackW
GetTabbedTextExtentW
GetWindowTextLengthA
SetMessageExtraInfo
MessageBoxTimeoutW
AppendMenuA
OemToCharBuffW
DefDlgProcW
ShowOwnedPopups
PostMessageW
GetScrollInfo
CreatePopupMenu
GetClassWord
GetKeyNameTextW
GetProgmanWindow
GetFocus
CharLowerBuffA
GetWindowLongA
MonitorFromPoint
LoadStringW
GetDialogBaseUnits
ChildWindowFromPointEx
OpenInputDesktop
EndTask
SetWindowPlacement
RegisterDeviceNotificationA
GetMenuDefaultItem
LockWorkStation
RegisterClassA
CreateAcceleratorTableA
OemKeyScan
GetPropA
UnlockWindowStation
GetClassInfoA
CharPrevW
RegisterClipboardFormatA
CharToOemBuffW
GetNextDlgGroupItem
MoveWindow
IsZoomed
GetMenuItemRect
FindWindowA
GrayStringA
AllowForegroundActivation
GetComboBoxInfo
IsDlgButtonChecked
RedrawWindow
InvalidateRect
OpenDesktopW
CharUpperBuffW
DialogBoxIndirectParamW
RegisterHotKey
RegisterDeviceNotificationW
SetDlgItemTextW
RealGetWindowClassW
WinHelpA
DialogBoxIndirectParamA
EnumDesktopWindows
OpenWindowStationW
SetClassLongW
ChangeDisplaySettingsExA
DeleteMenu
SetKeyboardState
GetClientRect
LoadIconA
SetWindowRgn
GetWindowWord
DrawFrameControl
CopyIcon
GetClipboardOwner
TranslateMessage
SetWindowWord
SetMenuContextHelpId
IsHungAppWindow
GetShellWindow
MoveFileWithProgressW
SetStdHandle
GetCommConfig
WaitNamedPipeW
GlobalGetAtomNameA
CancelWaitableTimer
CloseHandle
EnumSystemLocalesW
IsBadStringPtrW
GetPrivateProfileSectionW
OutputDebugStringA
UpdateResourceW
CreateFileMappingW
GetSystemInfo
InterlockedIncrement
OpenWaitableTimerA
ExitThread
GetProcessShutdownParameters
GetModuleHandleExW
GetCurrentThreadId
WriteProfileStringA
SetComputerNameA
VirtualUnlock
SetLastConsoleEventActive
GetProfileStringA
WriteProfileStringW
GetModuleFileNameW
GetConsoleCursorInfo
GetCPInfoExW
GetConsoleProcessList
FileTimeToLocalFileTime
CancelIo
LeaveCriticalSection
GetDiskFreeSpaceExA
BuildCommDCBW
SetEvent
CreateEventA
CreatePipe
CopyFileExA
GetDefaultCommConfigW
IsBadWritePtr
WritePrivateProfileStringW
UnlockFile
GetExpandedNameA
ReadConsoleInputA
WriteConsoleInputW
UnmapViewOfFile
SetEndOfFile
SetFilePointer
GetProcessVersion
GlobalMemoryStatusEx
GetPrivateProfileStructA
QueryDosDeviceA
SetVolumeMountPointW
GetDiskFreeSpaceW
InitializeCriticalSection
UpdateResourceA
GetComPlusPackageInstallStatus
CreateJobObjectA
FindActCtxSectionStringA
SetDefaultCommConfigW
EnumResourceNamesA
ScrollConsoleScreenBufferA
PulseEvent
CreateJobSet
GetStringTypeExW
GetConsoleCharType
SetSystemTime
UnregisterWaitEx
EnumTimeFormatsA
ReadConsoleOutputA
GetGeoInfoA
CreateNamedPipeA
CreateFileW
DisconnectNamedPipe
EnumDateFormatsA
ReadConsoleA
GetBinaryTypeA
SetEnvironmentVariableW
GetCurrentDirectoryA
CreateSemaphoreW
GetConsoleFontInfo
GlobalUnfix
GetCurrentProcess
GetCurrentProcess
GetVersion
LoadLibraryA
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
OleDestroyMenuDescriptor
ReadClassStm
IsAccelerator
CoDisconnectObject
CoInstall
AdvancedDocumentPropertiesA
DEVICECAPABILITIES
OpenPrinterA
DevQueryPrint
SetPrinterDataW
AddPrintProcessorW
ConfigurePortA
EnumJobsA
WTSVirtualChannelPurgeInput
WTSCloseServer
WTSVirtualChannelQuery
WTSSetUserConfigW
^U0�����N�8��g`mQ���+���s�kf����]�X��ӗ�E��N��\Eg���Q����!��A����/U/���h��ߦV5.[��{��ŵ��:c�i��R������n��5�Z��Fw�_+���#|��s�-<]�P�j�vC@�y�p�^�7B���uc��s\c�:�Mw��֚�虑$�^Տ���,DKjFS-��M@ �&^~[�U�^�Eb~E����_� K؝,s��/ S�?��ܳ� 5p�yu2�Ӽ�A!,[vIt���أc3C�%y�꽞�Mn����G *d�ڀ����/L�(������!��^u�b��4�D^����D�'Ǐa��nW�������e�c����Q<�l<к��M(��l�����Yi�U+�� ��pm0a#@�2�[2�E�o»���i)�#mz��X�bqe ��1�B�DϚ4Q^��6�\h��g9�������ٴ�x��S���lV�O�N���ޅ�Z���ރX�_L��u}�K:�<�TŸ}��z8j���H����>��D�Rp�X���ϵն� �t�E��R&��vH�y���N���� ��ah�O���ܲ�f��-�_Z�<�[i�DY�O�oå�swU˱fJ��X�0�0�G��'о�nr=L�j�-���h�cٿ��&������G=��?p�~�;�� ���'PgB��y�����Z/�Gh����� ��t�?P23}������M.�� >�7[�z���)��b%�n܃��'I��у�G�%esJ�aL]1�8��xw6L*���c��/�"u�9���荍㴻I�`-fEx�������@mN'O���2���,af`�U�_�r�{^�F���W��cxqt�K�@��b��[�p3l@)���'aw ���5%���nB�r�h�!%'r���z���p!]�-�Hm��~�@k�-��!�U9.ٰ��>q#j��� �G6���u��}9��� u3!AdU�ăwN�ŽH��%���_#�{ǭs���]3!���������?���o� �'��L�"܂0z;���Х�.��KY��J�%/��3��K�챉 N˘tGq��q��:A&�,�XRE �!5+��Q� �(Fo[8�y<���a�G��g%W*��]|8���[�Ёŗ7���1�p� ����u��9,�j������P�J Dn�߃��^ˈqEk������y��ߡ,�aփ�s��I�����ỽ]����iVG�8p���W��z����Fǻ�J��D t9���sxc"���pC�[��Z5 O�/�ܚ�]*�L�/R#i�P���1�jԽ���"qŽ���>n\��ȿ5d/�.��40�_�r���|�m��5&L���v6I��`⟹��G;q6��#)�(����WA ��?��4��K��bB��d�G`$�-���[��ݛ�R2��Ṍ�m�r����������'��0$5w5�;Q�� � l��|S�3�|�{��6��|[>�Z�#�=����}3�.Zn�? #H�Jw��#5 �����!9��쓯}�qrd������`����f)۞�2�:]�����Ӽѝ2�����i�p�*�Y�a��g�HE�l���\�������%͆C��̏o:��������L �œ�)�����ZYįsX�������g��=Vj�P���j3��Q�=����;KP5�*�o�<o4�)��e8�\:�4s!J�16V�,FÀg��i�I�e�}y?����ؗqN�j����~�[���B/Óz���=��ìW;z��u�'��(��w\Im������L:��Y� &Ҩձ�k�e�kB��5j�ݭ���s�n5{��k�Q�=+�b�����i_�.�L�����Ҭ�!��)u<�|5A��E�nߏ\�c��0��V������vt�z�ň����� �@z�OJ(���$_��>R�n�s$kc]��ሒ�$p���"�lp������96A��?��]8��9�6��-�6RKȉX�kd�hd&��-W�?]�H���>�|�yF�������wf�� R�Β���h}��P~^��u2�����s ������.`��*���q�s�R $�L����w"@qx(j����V�H&�^���c�'5�\0���6�T���� ��^䡵N�r ����⼣eD�J�����"p���˜8�"�Z|j�n�7 �?��"{��JjoI4&��V����R����n��4�iT�Ҵ��g�o�`��>&�u/�^|� ���7�û5�S-�d0�k�/�V]�&}��n�ߌZT� �� �d���%P�k�=f�U��*Z�b�b�U}q9��T��Q�f�{��"!������hܐ��g�X\��X���^��o��t�)�\����%"�KU�gt�m�)\v�8�����Ϯ�X�K����r����:/;�(Q�ol��J��įeV�� ͆h���kv'�b�r6���d�r�m�������Lre���s��輁)�0����]�K���gm(̵��ۚQ�'˰��s7eEJ��.�D�Zmi�XX-@��0!�3�RY]�]0v�.^���x��L������It��Һ���K��O��g8��j]����'�E��`) P'h_�J�*��I��d,�*�����Y;ތ�K�O����a�<��3p@��%^���`#�Jf��(`+�u�;+*?E.R���3�/��^6��;�-�0W�q�Ԛ� ��q��L`5�2�Z�f�>g�\����h��n�zCn��)�t�9�lu�|�?�Հ����6*�sν3f5*��m.[5�2u�e�tҷ ��,Bݳܥ �,����t��WB c}x� �OY�� ���;�ş�0&0ъ�a�%l��n{����ѩ5E��h�`��H��Z�m�����*��zk�� �ob3��R<�d\ FI� ���)�wt?R�J�p>�~��\�9����,�k�H<�_�lv�KқJ��Z�Ӌ `�-�J���{���>X��`{�H���r���TȡM����t�zaq����c�x6���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ