Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
0c52d545ca4158a87abe8039048cced2.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0c52d545ca4158a87abe8039048cced2.dll
Resource
win10v2004-20231215-en
Target
0c52d545ca4158a87abe8039048cced2
Size
332KB
MD5
0c52d545ca4158a87abe8039048cced2
SHA1
2db16974b71d74fca510368a204ffa2d9d7a54c8
SHA256
8450bc98029f966a366f3917dbae6610d37e137fc1e7653a19380b9584b56e9d
SHA512
9a7024cd562887ed2a12b902a5d18f23d9256654469a93477bd4106968ef484a7823ad2b32128906a4e1e6e2f40e4fb4efda8224182ef0d49cf06bd92b0eb218
SSDEEP
6144:kjp979gljGgcbnZ+CUWlGaYiFBOxTTtI5XWyYfvaa0hgdyR8:kFAjGgcbNUW1fFBevtIwDaa0hgdy
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DeleteCriticalSection
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
GetKeyboardType
MessageBoxA
RegQueryValueExA
SysFreeString
VerQueryValueA
StretchBlt
CoTaskMemFree
WSACleanup
InternetReadFile
ExtractIconA
capCreateCaptureWindowA
waveOutWrite
acmStreamUnprepareHeader
GetSaveFileNameA
@�U�c\��>Gm����uR���Gp�s�OB��m�Z�X6� v�E���~�~H��o�oƞxh�����0`r�yq���5aP���=�]K�?�� ��_)���(!�=F�.ҳ�҆x��?چ,�p�bu���n��B�K�nD6n���Z�dӝ��$-/"f�qԚW��!��vS��XC+z�V������� �h�Ho�m�_=6W�p`�`t��V�ȑ�_aW�� �������9�� �j��ا�S�&�v�����5�ōuWf��.�/���p@﮶r�V��,�<��78l�v]�?6|TF22�}�_^H����s� y��o�����y�yp�]��NfH710�"<!����'˪�.$����9?>�;V��FF�RNj�LfWld~�k$���P�ͫ���P��#��҉�Y������ �&ת0�|���m� �~}m�9��;(�0nr��U�8�+#G7��-|�N;vG��&x�����Y����ؼ%1���|��,�����t�%���6�C!�Y�9���UG�����w�ЈVD��nT�$��%\��d�#(�g�IO�� $p���~� Z�}�OK4m��ӝ&�`�A�C���b�c���B�tT��Խ8<�������� \�%F�*!S��|��p��g�e�II�W+X-aPu&5'�*Ma��xZ��ʈ�a��L��ͳù�K��i�/�+��C�D�m�ہ� �}iz��u*��Q���FNO� ��L��f�XeCZmj�a���^�u؟@���֭,���[$|15ҝ���k�������5�ry.�>ʭ��`�?z]�������օj�����o�R X�D@��TX#�:����jZ�������e��g��(��A~�E�=Mj�'�2Zd����sA�n�ہ�8�|'t�X?�ts@��(%@~�㠁X���g5 Y�/옞��?<ա����pŧ�K:%��B?ʋ��𩼠#g�Wp1M�A�Hs�뒻���\F���k2�'�_�Lス�(d���m�K�e�Y���V?���(S�%���'��.���E�ŷW��pq�E���_n�f,�&)Ga�O�ƺI/����}<86U �!s0Q�G}2xc�7�v$Y���D� �� f}f�jH�[�~W �@EbѨ.������x��wzFܳ�D��z�5Ư���#��ad���ƥ��������ISf�/�����Ѭ)�}����`h���h��+g��}�ڥ��&��N_S�5 ru\߉C�� [)w�*�3��ʽ�E%i*�wEX�<;�њ�Ӷ��z ��a������J"�aՇ2O���1���CV�����AYv��q�ߡtv�?�;��ulh���} ��,��ʔH�0���`:��T ɶw���y ��7��F�X��`M0�KQ��1��*]�y����Y͟'͘��K����j��h ����~�f��G$��~!���Pc�71�TC�UO��9hE���r��5�tu� Z�s'E*�L��0N|2�̘�$��#U����|�6�xA�������Xp�0��f�^�:7�����´OmYJ�Q$�0�s*�ȱ����m56�:�ɐ�-[����E|�^��Sp��B�0!�wk�-,:E��%ߨ�7}����:��� tY��2a��r���=xq���* �lj�Y�O}���S��b�F����4�����8�T:#� J �H`*$�ŕPt_i��������f8}����ˈZ��뢑8�%�Vp���x�g����t 䵇�Y6z���S�$uնU����R�M��i�$�RU �֍�pn���1$�P�|�WC[;(�#�\�,N�|��+�3��V�h]� y$~1ώ '̿�1zF����'��M�DL�TGE:Xj[^�>n�ivCߵ&/y��K|A��t{���cj+���� :����9�pˏ�TybL=*ﷴ�Z&��8n/Dlu�5'f�s%�=��R�[�vfnyBo���B��L 4;�qs���&��6 �?<����a_0�gj¹���^��[.j�F .(�%�hMb@H�n���*� �+�R���ۗ�-z�Cz��ݱD#�/mȮ��B��"�zU���]������lPyf���H]S1O\(-T�C1C�kUރF���:-��;��F��S~ @0ٲ���aM�L�`]�߀3�{����+A�J�ى����;*C��6[L�}�ƧM�B�q�J������~) ~؛��T�����T?���դ�_���/��r��Ȩ�J�M��5�%Jn�r8��^�c��(̉�3��<[0����|r��?G�/l�bFp����(�DJ�D��<��b[ ��c��p�T-��x|�u.8�l��� o�U�����AA��yJ��-E�]h���x�hC緣��#��s��9��ôZ�SB���Uߞ0��;�xBZ#�Ƞ��zK�#��vs�_e۰q麇�D�ĵ����}ܩ�bъ����X%=OrsѴ��/O�c�Y(c'L(��^�I����~��%�*m����+{��h�_V�z���qX�$�<�5P*�&��T�"]��7���i�1�넄�M�Xi��� �V� �����l)�����Ğ^zS폙����YZ��.�a!���ҿ������L�?K�zm��V�Ib�l�gx��1|��+�cß���M��<��R&�'Ȥגؾ ޣX�}5�Q�>������%�s�[Ȩ1MC���Nx��No��M�n#&� 0���%Aw�A�����é��2�s2 ���k�.S�'l�� SR���^��0�O��!��Wf�ס��s,��jǟ��]�y��@4#J��!��4 �������t]��>j�"�ۚYX�"�p�c��)���jѸ�=i�C�I!)�h*������ê�3��F�j�ED3� �H��K]Ё���+��-�JO��9(�1�=�%Bo�4!�aיG�p�����Z�^*ʫ]���R�g���ԇ'@FL����:"O#��Pp���?#F���:�`���l����=�ג)Ͷ9{Ε�gkl�S��b�N�[;��e �C�PY;��^u������b��}�(�(�ZN��KԇC2F��������� >��s�
ServiceMain
ServiceMainManual
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ