Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
1d82f1a93559f4c55ac5bab06db05c4d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d82f1a93559f4c55ac5bab06db05c4d.exe
Resource
win10v2004-20231215-en
Target
1d82f1a93559f4c55ac5bab06db05c4d
Size
635KB
MD5
1d82f1a93559f4c55ac5bab06db05c4d
SHA1
c117ac5dcb15ef4bcf8caa8182f32962e22955be
SHA256
065088af6af65c05422a88984b7b1d2e0b29c2f0d15609788360b44c977ac09a
SHA512
86dbbd3a65af8cf9457fba5dab4bc48391e5b9fb1b50ae338737243c34ab6ebf89b5b0ff63e5803c9e06733e96ed7c47f6848c6792cf3090505c0847c27467fa
SSDEEP
12288:zqoUrKJCsHO2WCf6kEYOY8GayLKsI4GcH48x5iy07HUi01icMi:uoDTDEtTMfGcHNx5T8v0l
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
RegisterDeviceNotificationW
DefWindowProcW
GetClipCursor
AnimateWindow
EnumDesktopsW
DrawTextExW
GetDlgCtrlID
CharUpperBuffA
CharToOemW
GetAltTabInfoW
WinHelpA
GetDlgItem
SetMenuDefaultItem
ChildWindowFromPointEx
ActivateKeyboardLayout
ChangeDisplaySettingsExW
LoadCursorFromFileA
AppendMenuA
BlockInput
GetFocus
LoadMenuIndirectA
LoadImageA
GetScrollRange
UnregisterClassA
DlgDirListW
DragObject
GetClipboardOwner
OemToCharBuffA
DefFrameProcW
TileChildWindows
IsCharLowerA
LoadAcceleratorsW
CreateMDIWindowA
IsDialogMessage
RegisterWindowMessageW
CloseClipboard
PtInRect
ToUnicode
BroadcastSystemMessageExA
RegisterHotKey
SubtractRect
CharPrevA
TabbedTextOutA
MenuItemFromPoint
SetPropW
SetDlgItemTextW
GetCursorInfo
wsprintfA
ShowCaret
MapDialogRect
SetFocus
CharPrevExA
CreateDialogIndirectParamA
LockWorkStation
GetMonitorInfoW
CopyAcceleratorTableA
RegisterClassExA
CallWindowProcW
CreateMDIWindowW
DrawTextW
SetWindowsHookA
GetWindowModuleFileNameW
SetSystemCursor
CheckMenuRadioItem
CharLowerBuffW
SetProgmanWindow
CallNextHookEx
GetClassWord
GetWindow
GetMenu
LoadCursorA
GetUserObjectInformationW
SetWindowPlacement
CharToOemBuffA
ChangeDisplaySettingsA
DrawIconEx
GetThreadDesktop
SetMenuContextHelpId
SetClassLongA
UnhookWindowsHook
UnionRect
DrawStateA
AnyPopup
DialogBoxIndirectParamA
IsGUIThread
PeekMessageW
GetWindowTextLengthA
GetWindowWord
ToUnicodeEx
ToAscii
UnregisterClassW
DestroyMenu
SetPropA
SetClassWord
MessageBoxA
EmptyClipboard
GetDesktopWindow
GetTitleBarInfo
SendMessageTimeoutW
RegisterClassExW
SetMenuItemInfoW
FindWindowExW
PostMessageW
GetKeyboardLayoutNameA
PrivateExtractIconsA
GetMonitorInfoA
GetWindowTextW
SetCaretPos
SetWindowWord
IsWindowVisible
GetInternalWindowPos
LoadMenuW
GetLogicalDriveStringsA
SetSystemPowerState
GetDiskFreeSpaceExW
FormatMessageA
lstrcmpiA
OutputDebugStringW
GetModuleHandleExW
OpenFileMappingW
BackupWrite
SetFileApisToANSI
ReadConsoleA
MoveFileExW
GetThreadPriorityBoost
ReplaceFileA
SetCommConfig
GetCalendarInfoA
GetNumberOfConsoleFonts
EnumDateFormatsExW
GetSystemTimeAsFileTime
TerminateProcess
FoldStringA
WritePrivateProfileStringW
SetThreadExecutionState
GetCurrentThread
lstrlenW
GetCommandLineA
SwitchToThread
GetConsoleSelectionInfo
lstrcmpiW
GetStartupInfoW
DeleteVolumeMountPointA
WriteConsoleOutputCharacterA
OutputDebugStringA
GetConsoleInputExeNameA
FindAtomA
CompareFileTime
ConnectNamedPipe
GetDiskFreeSpaceA
GetUserDefaultLCID
UnlockFile
SetThreadPriorityBoost
SetThreadContext
GetConsoleCharType
GetTempPathA
QueueUserWorkItem
ConvertDefaultLocale
GetLastError
GetProcessHeap
GetVersion
VirtualQuery
LoadLibraryA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
WantArrows
GetSaveFileNameW
VarDateFromR4
GetAltMonthNames
VarUI8FromI2
VarR4FromBool
GdiGetLocalDC
LineDDA
GetStockObject
MenuHelp
ImageList_DragShowNolock
MakeDragList
#���7?e'�r���֮�dj���"&��*am�a�c]�4\A?S��JտT��x� 4�����5��� ��X _1��c!�C���K�l���u���R� �jJ�m(I�`�e���s?X$UI���*'��)���-m�8�0�rͥG�������_�vi���TҀ�� ���AN�~��E�;[��;�GR����Ć�ɉ����S;�_�F۞��Og�ܜz�W���k#>�zR.V4�Xw�]5W��h,/������A!eï8�U-=�W�����p����JI4�g�Lm�&�$���5[�A�B������^3_�PV!@��'I�����o� � r7T������U�� ] c?0����M�@��j�����*>&���b?�V��WÇ�6��{YA92��}S���q@M'�E����q����g���6t6ƕ˴9 �U�EI�@,�Z�т���lj��O*�'��������Pa��鵁�X�\��5�~�wCX��n���2����Jj�<�!hS�g��g�d��L����~�S;��Kaƌ�r0�KUV,Y <��qQ#��ٖ�y�ޟ���$<��=WzV���?��Y�-����>�N6���oSu�2���s�c1]ɯI:�$� ��f)�8v��" ��d�F�F�*��$���q�rSWt% �hp]���B�������W]���)�ӫ;��Z_z��BOto=��sp%�uI�Fl�Gp��Dz Wvȟ�%��C:���C.�77���_�tSf�4���n����� �H:�s�����ESꊡ�/�E� ��SlZu�ԉ�̦�,&-��9��x���7Kl+���M���>:WC���w�/��6&�.]4��,���g��@43�A �S �r5����m���M#w�7Q�I�P< ���f@�$Z��&��t>�JO�HA�ƹ�ާ�-䁥'�p�a��N�iyq�<b�v�P�!>��A��4)�Wd�������%sE�%A��|yx��jA�����DfA��g����K�g5.3���>/XKR��*l<4"�TOa�s*� ����� �&,cP��QU�(ѕÂ�9��b4� ���-��-��ݶ�"_�����|�>V����:��o����)��1L��:ru�uJL��dh��h��%�|y���wʁ�g�FI��n8E}f��0�ĪUG4k��T�-�-|�#w�ݨP�AU��ѷH���7,�HAƞ�͒$�6��BDZ���Cy���4-\�O����Z���"�������~a���� c��9�� �8��+������Cߧ{c� uc���a�{�)@a�h L�B#I��\�]_h�a�ig����d�;%��)�^�L��.blٟ�kU�F�?����^�?���b�9~P�]ݓ>����g�����6���(� U\UcS��m$2Y�����D���߷��nA�tn`L־���nw�E� �Pb�1����H � ´S����1���>{�j6��$�WT���Mj�L�Y�6��Ď��^���V,��뷨:�^�S���ֿ�n�������a<Xhͭ���+�H�O�rYW��UIkSv:g��G�ulAfy��$�?gF����P5熙��k���.���:���W��B��L�ƥ�����B��:͍� $cz�s���_�=��fǿd_0��!zY=ze����FY`�����b#]���2���T��/G2!g���E�'j��4-AOVx����"�� �R!�Ea�|Zͬ�$�o �(��=�\ĸ�z ^؈��$$��o��}=��@k� $����N:������y����يpn�&þ2%�ˮ4j�|W��YЩk���h�@H�"Z����J�H�s��7T��?�P����Vp���kUxH G��s�^��NP�ѲiG��β��i�P��m�c��:'N*rҕ�������:c�K7�-ZE�J�������g ���幱����~��1���� �Vc9`�^��=� Oԓ���8"ެPs�R�m[��ކ������0��O�dI�V�7������j-�t�`��Q¹�x���b��� �F���°��[M?�V��9�x������{��0Z���w����sVx�&�5v;��OR8X�׃Y�{}I�m��p������5Y_�^��@���7~�W�f�hZH��%���GH #�Ya��]�.���.�BSQ��_˕��ޒGg{v'=^~����!'�VM�TN���Ռ4�n~��i��cEDذG�s��j�ǖ�1�8|n���@���K_:hch��[�2��$��<>�(�d�E��ڱ����B#)���]K0Q|G���B�Mq����@~l���H ޯ]���ɢ��������e^3���k���xG����<a��7^t^H�ZpJ��Ә/6G�s\s�w+�}�Rs3:���F�����~pJo�-�!��KvuO�+x����Ŧ�B�9k�c0i_{��k����q�&U}aُ bn�c%��.ۅ���h1D�ַ�����-@��:e���*(��qڭ �dSH�+s���F�N"�WE8�@���&�/�+)�N_z����g��t��ex�Bn1$|��;<��a��']�x�m.��5�9I�IVm�#�s�&Xڲ���{5d��B*�����,�[�������*B��3�&��p K��ŝ�����p���h���P�M�l;<�L�!��R�)���X��!����7f��2C%���1rh`��:����f�� (f��Q�e�K��kc�ѭ����+|i��PG�E��6ƕ�/��W���6�X R�sl�j����!��3�"�ࣖ�-Ϊ,A��۰oM::ڟ��lt_Jm���� �a&�B� LՃG>bDE��������0� '���,CB�0�1��L$̰���GE.�k1��_���?@�x[B'"�}��o`��)���1�R�~q��x�x���J���l~�M%�����=��H����{�hr���̜�N�El�E�ec[�Y����9�u���\q��E�i�"�� ���b+�0�,��GZ��B���Ὺ@� �"�m`;�����ש8��Z���R
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ