Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
09a6a9b941f99c573afe8cb921937ea1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
09a6a9b941f99c573afe8cb921937ea1.exe
Resource
win10v2004-20231215-en
Target
09a6a9b941f99c573afe8cb921937ea1
Size
585KB
MD5
09a6a9b941f99c573afe8cb921937ea1
SHA1
623be6175568a50ed056ae71f434569512aed82f
SHA256
1007d887e60043e40a797c14ba3e99ed2b557520209f483cfaf16010bea8256f
SHA512
d7e4280a51d2a4628318c0deb5a3400d67617fcfeb462a17b06b9695fd3735da8bbd6fe0c576c3c4f207595ee6810c277466cad4e4af504cd078d065e7b162f5
SSDEEP
12288:Elhb+RnFzv03nc6oKqnNbFecC60YGGObhM4:ElhGFcc6tUFbSZ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetTabbedTextExtentW
TrackMouseEvent
DrawTextW
OemToCharA
DestroyIcon
MenuWindowProcW
RegisterHotKey
InvalidateRect
EnumDesktopWindows
CharToOemBuffW
BroadcastSystemMessageExW
GetWindowInfo
BringWindowToTop
CharPrevA
ChangeDisplaySettingsA
GetUpdateRgn
MessageBoxW
CreateDialogIndirectParamW
UnregisterDeviceNotification
GetSystemMetrics
OpenIcon
CheckRadioButton
ShowWindowAsync
CloseWindowStation
SendNotifyMessageA
IsIconic
SetCursorPos
GetMenuContextHelpId
SetFocus
EnumPropsExW
AppendMenuA
SetDlgItemInt
GetMenuItemID
GetWindowThreadProcessId
CharUpperBuffW
RemovePropW
SetCaretBlinkTime
UnregisterClassW
SetClassWord
GetMonitorInfoA
GetForegroundWindow
FillRect
GetTopWindow
SetProgmanWindow
GetAltTabInfoA
SetMenuItemInfoA
MenuItemFromPoint
ChangeMenuA
GetListBoxInfo
CharLowerA
CharToOemW
GetDC
CreateDialogParamW
SetProcessWindowStation
DrawCaptionTempA
EnumThreadWindows
DialogBoxParamA
GetClassLongA
CopyIcon
SetCursorContents
LockWindowUpdate
FindWindowExA
UnregisterClassA
DefFrameProcA
GetMenuState
GetDesktopWindow
SetSystemMenu
EnableWindow
CharToOemBuffA
CheckMenuItem
SetWindowsHookW
LoadStringA
DestroyAcceleratorTable
AttachThreadInput
RealGetWindowClassA
AdjustWindowRect
SetInternalWindowPos
DrawIcon
GetAncestor
GetUserObjectInformationA
RealGetWindowClassW
GetWindowWord
ClipCursor
DrawCaptionTempW
OpenWindowStationW
SetRect
ScrollWindow
GetDlgItemInt
SetPropA
LoadKeyboardLayoutW
ReleaseDC
CharPrevW
InvalidateRgn
IsDialogMessageW
GetWindowModuleFileNameA
CreateAcceleratorTableA
ValidateRgn
CloseWindow
ValidateRect
GetWindowDC
GetMenuStringA
SetCaretPos
GetWindowTextW
GetWindowWord
GetShellWindow
GetConsoleFontInfo
SuspendThread
GetTapePosition
GetLargestConsoleWindowSize
GetLogicalDriveStringsA
SetFileValidData
GetProcessAffinityMask
GetPrivateProfileStructA
GetAtomNameW
SetVolumeMountPointA
Sleep
GetProcessPriorityBoost
GlobalAddAtomW
CreateThread
EnumTimeFormatsA
GetCurrentActCtx
LocalFlags
LoadResource
WriteFileEx
LocalHandle
OpenMutexA
CreateWaitableTimerW
ExpandEnvironmentStringsW
EndUpdateResourceA
QueryDosDeviceW
GetCPInfoExA
GetDiskFreeSpaceA
GetExitCodeProcess
CallNamedPipeW
CreateSocketHandle
lstrcmpiW
LCMapStringW
QueueUserWorkItem
WriteProfileStringW
EnumCalendarInfoW
RegisterWaitForInputIdle
GetTapeParameters
GetCommMask
SystemTimeToTzSpecificLocalTime
GetNamedPipeHandleStateA
WriteProfileStringA
GlobalUnWire
SetTimeZoneInformation
FindFirstVolumeW
MoveFileWithProgressW
GetNumberOfConsoleInputEvents
GetFileType
WriteTapemark
UnmapViewOfFile
lstrcmpW
RegisterWowExec
CreateEventW
GlobalSize
UpdateResourceA
FindResourceExW
WritePrivateProfileSectionA
ReadFile
Heap32ListNext
WideCharToMultiByte
FindAtomW
InterlockedDecrement
GetProcessTimes
TryEnterCriticalSection
QueryMemoryResourceNotification
SetFileApisToOEM
GetPrivateProfileSectionNamesW
GlobalWire
FillConsoleOutputCharacterA
InitializeCriticalSection
AddRefActCtx
GetNamedPipeInfo
DelayLoadFailureHook
SetSystemTime
GetTempPathA
SetCommTimeouts
GetModuleHandleExW
GetProfileIntA
SetFileShortNameW
GlobalGetAtomNameA
GetProcessHeap
GetLastError
ConvertDefaultLocale
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PathAddExtensionA
CommDlgExtendedError
GetOpenFileNameW
ChooseColorW
ChooseFontA
VarUI2FromBool
GetVarConversionLocaleSetting
VarR4FromI2
VarI2FromDisp
ADVANCEDSETUPDIALOG
AddMonitorW
CreateBitmap
RemoveFontResourceW
GdiCleanCacheDC
GetFileVersionInfoSizeA
WTSWaitSystemEvent
WTSEnumerateProcessesA
WTSVirtualChannelPurgeInput
gethostname
WSARecvDisconnect
CreatePropertySheetPage
MenuHelp
ImageList_SetFlags
ImageList_SetIconSize
�'�B!?HG��Ȩz�<���͉iN����_�d�,xV�����I�ќ}�% �z��M�Н�w�R9�rɮ� �̙e>�gMV�,!�(6���W� u/'�퓝�xv��sI�A�|j4���b^��D1���g�l���'��N�p8�P�L�Z`��1�-���Ȥtg���QG��� Q$~M�����!ۇH��̝n�2Ia�IZl��/N:D�W����!��uQ�9���wQ0�Dy����-���[����Ue�W��k��������V~q��2_��<gk���R���e���0J��o��ȑ��$�SC�wս��� (WHP���y�C��p>� D6��Ҽ�1e�%͉��XPMU�!��������ڕZ ��?�P]6�N'������L2� �)�O�Ŏ��C�+�����w8[y"FX=�x�d-�KL�-�Ҿ��9$�S��$rT�r��hL�p��1�0�WW�N�Ĵ��_����I!5� �8��/���e� �A �=��\�z�;[�sZ�.:��s��a �z0�� xu ������>�|���9��&�Kſ�6�����Y>�+ɰZ����c#9t�M���2[�M������[E�Y�t#��{r�$��Օ^��<?qZ:��R��g�4o�VٍT�I� �A#�E\�sh3k2����댇���|� y�ȪѨ qn����?��U�ġ�Pxm���/�'�5c�I���9b@�Fl�ax���Zq��Ġx���%)��_nK����"Ɍ��-��$�&J��FDu���̞pf��v����3��13��~,1���˳ݘ�臯]k?~��Un�6u��Iq�r�������c�2��D���S�ia�3� �[fSI)J������!w%�A�;�M��ɇ�|�H���e����V��6� �|���7cX:�������0�����,P�z|#��b���@��uo2��T]�H�]��n�,��� �P%��6�06؊�q�FkT�B�`�,��,��a[z���2��6��;[%�z=%EdRݾ�rE�F��\��V=03 �ۮŊ����хy6�;��(��uX��k�V ��+^T]�(i&g���{^^�H��Bz�c(�vQŵ�����MNg,EO�8�躭�DyҾ�� ݰ��A�ʊ�@����?g���9Ӆ��Y$ ��2uke��c�K���#����F�3o�~0��<T~���{��(ZhU�i��gжY����b.���ܫ*�W�?_�C��Xҽ7�2:��{����A���{U��e 3��t����]ǣVsi�^"�8K�g�4`P���U �ێ��P��7fx��9����{r.Vv�����"+h�꤫���lH�I�3��Bs�r��Őd�G�Z}�` ns�ɶ����R���%��0v�@x�͠�,���;}�U��/X#�]�`��_���%s�B����:Z�����3�r����6�w��ò�/#[��!b��Ѷn��p�۟�>���WLV��6t!���:��|B�;!����4m�����ӣZE�O Mܦ�ԑ�h� e:�n�A�3쨴�-h��88N�D���p.|"�G�^����;4��d�OWlv�R/=��%hq\�d����5L��ErDT�P���FĒ�� (uA�`�j�~�G1�ޛ�E�\F���$�����\��w����u��E��,�̬����,PeUB�>����o&R�����+5�"� �턑),a�qm�T 8yB�*�q�rX��Eu88K��[�Z;F���j�D2&vO���-�-�2���m��� �&+PcE%�DF�31�����Ӓ�T�v���ROҎ�G^:/]%([���"_��%�g��L~��T�&%$��>E>��b,�5q���Rh̲�O��)rX2�L���K�m�����7o&���jl���0��c�Ѯ��i�?^�6�'���9l��Y"Щ�/�":��[Ϲ�������!����I���`Y��=��B*̚:�Ҁ���� �k�WK���-����Z����h�X�v�}VJ����)�\؛�r�g�MNo��{�������˘mX�� ��|��YKտ�r�I$�,�ju�ЈU��zd��Ƹ��}a�%14l�}FE㜄��[��S*��Y��� ��?^���q��@����);��~��9��gqb9�yh���ǣ���D1�\�"x�(NBm2��!l�-�=a�do$*��-��%6#�¤���0��"���0r&�N���2-�jWE�N��^��2���N���K,c1E��₤����� F���,R���Mյ��G"ܝ�p*6jH��m�������6�L�c64a�~���L���9^mJ�˶��@�C����;FG;0I�)�4G���n�� $<gz�.��������T�:q(q���M��1�}B��i��o�Q��(yw,�V����B^�7;}�{K*9��8E���Y�Xq�8IT����n?����e�%��_5O�r�{c c�6�8��#Sb�6n��0��-,�Ҫ+�3�H����㾘���S���51+�B��<ᗔ��g���� �>X;�<7W 2ʹF���tɉd�I������*�y��)K��C7���,n9��9�ٕKӧ�䛝���u#�^l�Ki�d���?yT���?� ��/����<,����ݟ'��Q�>����b��#���SL���2� "!����[&E��yu�q����f�l��3D�(e��v��cbM���a-|7ЛO�k��2�AZC)<�{@����I�ox+| he�)X�����ʓ#�n.<�z��6*�A��`Ȟ~W3'|cap�;>��w��_(���b��ܬ�F-�� fm���q���=:���&du�qO1��GdK nqi�$K�y�^���:���v_{F5�khm�Z Yϩ�WmG�<q��(�����X6�i[pIT�FpBj�a�jEda>/��e㋲��� B��M��`^ ?��)�>�[����%k���Ž�1���2�����O���@9�F6qHE�<6�K���F�I � X�2,��P�I�0��22�����.��N
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ