Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
140b66b98b1cdccc53bc9f668d4b4809.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
140b66b98b1cdccc53bc9f668d4b4809.exe
Resource
win10v2004-20231215-en
Target
140b66b98b1cdccc53bc9f668d4b4809
Size
600KB
MD5
140b66b98b1cdccc53bc9f668d4b4809
SHA1
6978e70b4bc592e632a969ee81e4f6ae5603aa1d
SHA256
24760453b1d0f567b2b8026f87f6aa9cdf4bf099d1fc5b9b477b640fe4c78897
SHA512
4460a9cc70186182fb66cb5bafe970e01f21b7b9230a33c7ff377cac4aa6c7a3709378cf189cce5832f842bcf51b79ac8973f6b5c34a75342b160cfc98b7e269
SSDEEP
12288:sUzvEsVF7uqEay+grAM8gkVgucXIltivMYQyFLMu:sTsO/aSOZcXyWZ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DrawStateA
AppendMenuW
GetNextDlgGroupItem
SetRect
SetActiveWindow
DrawTextA
LoadMenuW
BroadcastSystemMessageExW
GetClassLongW
GetDlgItemInt
GetKeyboardLayout
CopyRect
InvertRect
PeekMessageA
DrawIconEx
IsCharLowerW
SubtractRect
GetActiveWindow
UpdateLayeredWindow
EditWndProc
EnumPropsW
GetNextDlgTabItem
EnableWindow
CharPrevW
GetShellWindow
PrintWindow
ShowOwnedPopups
ToUnicodeEx
BringWindowToTop
ExitWindowsEx
SetClassLongW
WaitForInputIdle
SetMenuContextHelpId
PostMessageW
SetMenuItemInfoW
GetClassLongA
GetWindowRgnBox
SendNotifyMessageW
GetWindowInfo
GetMenuDefaultItem
GetWindowLongW
GetRawInputDeviceInfoA
DestroyCursor
ChildWindowFromPointEx
EnumWindowStationsW
LoadImageA
CheckRadioButton
CharNextW
MenuWindowProcA
GetAltTabInfoA
InvalidateRect
SetDlgItemTextW
CharLowerA
SetKeyboardState
GetCursorPos
ScreenToClient
SetClassLongA
UnregisterClassW
GetSysColorBrush
ScrollWindow
SetCapture
CharNextA
CreateAcceleratorTableA
GetScrollPos
GetClassInfoW
GetMessageExtraInfo
CreateDialogParamA
SendDlgItemMessageA
RegisterClassW
InsertMenuA
SetScrollInfo
IsWindowVisible
DragDetect
wsprintfA
GetClipboardOwner
RegisterClassExW
EnumDesktopsW
GetAsyncKeyState
GetDialogBaseUnits
SetCaretBlinkTime
DestroyCaret
ChangeDisplaySettingsA
DispatchMessageW
GetKeyboardLayoutNameA
LoadMenuIndirectA
DrawEdge
RegisterClipboardFormatA
GetWindowTextW
AnyPopup
SetWindowWord
GetProcessHeaps
GlobalMemoryStatus
SetComputerNameExW
FindFirstFileExW
HeapValidate
lstrlen
ReadFileEx
GetDefaultCommConfigA
MultiByteToWideChar
SetCriticalSectionSpinCount
GlobalReAlloc
HeapDestroy
IsWow64Process
CreateWaitableTimerW
OpenEventW
DeleteVolumeMountPointA
GetEnvironmentStrings
WritePrivateProfileStructW
CompareStringW
HeapCreate
FlushFileBuffers
QueryInformationJobObject
SetFileApisToOEM
PrivMoveFileIdentityW
SetMailslotInfo
GetDiskFreeSpaceW
VerLanguageNameW
GenerateConsoleCtrlEvent
GetCompressedFileSizeW
WriteFileGather
CreateTapePartition
LZInit
RequestDeviceWakeup
CancelDeviceWakeupRequest
CreateJobObjectW
GetVolumePathNameW
EnterCriticalSection
GetProfileSectionW
OpenMutexA
FindFirstVolumeMountPointW
SetVolumeLabelA
FindClose
WriteProfileStringW
SetThreadPriorityBoost
WaitForSingleObject
GetCurrentConsoleFont
LZStart
RtlUnwind
IsValidLocale
SetTapeParameters
WriteConsoleInputA
GetCurrentDirectoryA
UnregisterWait
ConvertDefaultLocale
GetACP
GetProcessHeap
HeapReAlloc
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
WantArrows
dwOKSubclass
ReplaceTextA
VarCyAbs
LHashValOfNameSysA
VarI2FromUI8
GetArcDirection
GdiGetLocalBrush
GdiConvertDC
ImageList_ReplaceIcon
ImageList_GetImageRect
�f ����MWX����yi�ҽP�=�������X�������*'�|��w �Q�y³ԥr��`������A�O�m���#�pU��T^�X0��kh�<��Q�v���ljW�����ʶ"E��|�ÜJ�؟m�4?n��1�\�ğ�o��t5��S�{;�i���VI�r�O���Ce�vܺ�* �2���}��yeP�.��"1$BO�ߣ�$�{9ܲ�K)z����Ϩ�Ú��f\�By��T�L�«�{��p�I�w��ch6oM��_E�9�Sl���}�B+#:z"j_��� <���c��n��Tm���]j�.$-��n$w9�M$��}�O��vP��R��[����M��s���+�C�1)�+h�35+��p�Iɫ�]íbqЇ����IA�c#���5#8�I$��@��Yp����_�f���ˢI��U��"j]bF�l�bx��4����#��1L�7 (�Ee�������J����%��n0�� b��&*U�|5�l#��)�O��Z ��˂G����T��?���m�_/�-^N�e9c�Q�����H���?=��ք�/�ʰ������`q��F���$�\ӡ A:�w�ܠ!�w2!;��ܞ���{�����!�܉��օr�5�d������V����_@O�\A2�p��Lg[?|�pA�zaRs�5"�]��k)��"�Μ��6$$u�����t�����D�NJҧ���J�i1��i���������^��U�ނ/f�g:a�� (�r��4�Rf�%r2H�I�E"�o6�1���`e�)4�D������z��dzq�%q��Z|��0@�9�^�-y�{��T4�$m�s��k㒲�1`�7}�`�����3ַ3����wB���*����|eE�X�&a�+?�~|�ʾ([�q��q�������%h������BC��X���������A����Uz�尷��z �����$2U�������c�=_�F�����E�����uJ{A 3��gy���H Z��욹�0K��t>��T�,���o�Ϩ$ȵЗS:+�E�*�/��\��'�^g��8�����e��Ǫ�!��=��*+�ٺ��³�E�f�ӻ�`Z��?�Rq��C� ��Oè��������������Akk-�J�����<#�����@��&i�s�L�ipR��MݯA��zAM����觽)7x����y�yx�XkoR��P�baM.�A��qs3�jr�R�խ nT[���e�(.qWA� ��/A�s�F���W.�:Gsp!@IH̆�G�7�poi�UY|f�[�m4��I_w�1HY{�pn���=x���h;Զ_�Qv�OF�ɸ� �r�����N��<�������"���aX��R����/T\�n�*�N�`��Qn ��z���[u˨r�������l`��MH!�DF+(*�DK6�i/�I0��I�K~"��J�)����>���7����;��{�"������]I�������~L���O���]ߵ�g"6�M���"\���-x�XR����5_x~����|�I8Z��\z?O���E&8�1� ����&��N��btQ��@�O���6E �q��i��ie��5?�oѨ9�^W!5f$�q� qR!)��)Yۊ>�W5��RK�s�Z�$ʞ�iM3P�������o�\���l�&%sʙ�!����yM���'��Gbix�y�]u��S@��X@fY2d�Ulq��r�$� �d���"9k{��0�医���@O�~��@�:N/N�A��;6�:n͒y�V]�J�>��������o"٭��{��:��j(,�:h�{H�u��Q�xn�O�G<bu��� �w� � ��p��6͜%:�A�� �����H9�h�]�<��N�;x®|�::���ɴ$�XV�8f�5�ʨ��y�;2p #�|(���59���*I2�$��:DX�04?�.)�����,�7H�.OY����{g��b�Z�?�#�@��Cp{�>�㥰ib�ÿ�F�H��f~4hR�&c�u �ny �x��X_���qK3��B�w���VP�<$��|p�rف��1�cRWj���1d�=��NJ�0�IB&�I�v������GqD��!�s���=h�ݻ�$�;;�o���ģ��ڴ��Yϝ )uF�7s� ��f�I�:e�݄&1��1q�7D�wa=����NG���[��/�7�$i�^�Ee��/��� b'��}*֔߾1.� �ܪ7������X�Ś���#{u��Wn�ަ��ꖶ��7�W�&�t��ǘ%g��C�gM��c���Bi�+�k��LM�PR �I�h���B�'��sH�5{TZv�m�j�6Date�j��<NN:��p-�RjW-� wC-g�b;K7}����X��!7Kd'N��羘&�'�5[q裵�i�I�����yW5!�\�1P�g�a��[̜��4{V��f���{ ] ��&��d����(-B��d�5������B1��/?x;;�իW��i�������.�����t(ڕ�w-�'�{��(��z1+�s ����O�~N�\�������S� �3�;�ilĖ��8��V����u�Ȯ�A�C��0�E1x@���뼟��LHT�<���V����C-1�a?[���^���Ȃd��d����RI�.<H��lU(N��?��<��xA�P���ۋ��;�49���!�VQ��K`�"�7���2 �t�C�u�����^��6�p��$�������m�ڐl�ݱ���Cfs��YQ%��k�]�n��@(��%�T7�y�t�f��\q���Q�8����}����b���$�&�gѼ�Hn2-������;��Bp6u������lp���k2�MEG���d�^���Ǝ)L\R���=�E�����a��5[PS�it�`��F��c��bp�_ �!�F|�Ն�zE8��I.�����1trvv�-�����e�h}����"�XO�����F���&\��i�(yǏ��bh��Fu@�PH=��׆GTb�g" �7_���� �54#oɻ�����~|���1Z;����j�O�(j
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ