Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
157db5a5624c116a30ca7b96ebb34ce5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
157db5a5624c116a30ca7b96ebb34ce5.exe
Resource
win10v2004-20231215-en
Target
157db5a5624c116a30ca7b96ebb34ce5
Size
602KB
MD5
157db5a5624c116a30ca7b96ebb34ce5
SHA1
318f51bc13d2f2b372e7cd931b3c21b636f35c40
SHA256
49de14ad1402d427591b5ec4d933299086c3d19ef6995c2f6b5fdb4e72f6487c
SHA512
996adaac99c22c053e82834bfeef5aaf7b2840c97bda1d20077e665fe50fbde97e8c45d7e8611dc60cb2524a0b1ce9376b7058206775889200a8272be6647db4
SSDEEP
12288:5VKAfRDXfYsuWMorq/O5P0bZzBhMGIJqFyT9ONtMrP:5VX5DXwsuWTkhTFyc2P
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PathUndecorateW
PrivateExtractIconsA
FlashWindowEx
GetMenuItemInfoA
SendMessageA
IsCharAlphaNumericA
MessageBoxTimeoutA
DlgDirListA
GetWindowRect
GetMenuDefaultItem
DlgDirSelectExA
LockWindowUpdate
DrawEdge
MessageBoxExA
GetPropA
SetInternalWindowPos
CreateCaret
SetActiveWindow
UnregisterClassA
SetProgmanWindow
SetMenuItemInfoW
LoadImageA
ChildWindowFromPointEx
OpenWindowStationW
ChangeMenuW
SetWindowPos
OpenClipboard
DestroyWindow
ScrollWindowEx
UpdateWindow
GetCaretBlinkTime
CharNextA
LockWorkStation
GetComboBoxInfo
SetMenu
GetWindowRgn
IsDialogMessage
GetKeyNameTextW
SetMenuItemBitmaps
FindWindowExA
TileWindows
UnhookWindowsHook
CloseWindowStation
SetThreadDesktop
GetProgmanWindow
DrawFrame
EnumDesktopsW
SetWindowWord
GetDC
wvsprintfA
OpenDesktopW
TranslateAcceleratorW
DrawIconEx
IsCharAlphaA
AppendMenuW
InflateRect
RegisterDeviceNotificationW
RealGetWindowClassW
SetCaretPos
MessageBeep
IntersectRect
InsertMenuItemA
RealGetWindowClassA
TranslateMessageEx
GetClipboardFormatNameA
RegisterClipboardFormatA
KillTimer
AdjustWindowRect
GetCursor
GetInputDesktop
wvsprintfW
GetUserObjectInformationA
IsRectEmpty
GetInternalWindowPos
GetWindowDC
LoadImageW
SetWindowsHookExA
OffsetRect
AttachThreadInput
LoadKeyboardLayoutEx
GetClassNameA
DrawFrameControl
LoadMenuIndirectA
IsWindowUnicode
SetLastErrorEx
PrivateExtractIconsW
ChildWindowFromPoint
GetWindowTextLengthA
DefFrameProcA
GetMessageA
LoadMenuW
MessageBoxW
ActivateKeyboardLayout
LoadMenuA
DrawCaption
SendMessageW
RegisterDeviceNotificationA
GetDlgItemTextW
PtInRect
DrawFrameControl
GetProfileIntW
VirtualQueryEx
RemoveDirectoryW
LZCloseFile
PrivCopyFileExW
CreateJobObjectW
SearchPathW
OutputDebugStringW
GetCompressedFileSizeA
LocalFlags
TryEnterCriticalSection
CreateTimerQueueTimer
FreeEnvironmentStringsA
SetComputerNameExA
GetThreadPriorityBoost
SetTapeParameters
FileTimeToDosDateTime
SetEnvironmentVariableW
SetUnhandledExceptionFilter
SizeofResource
GetCurrentActCtx
GetConsoleCursorInfo
ReadConsoleOutputW
CompareStringW
CreateSemaphoreW
OpenMutexA
RestoreLastError
GetStartupInfoA
WideCharToMultiByte
ReadFileEx
GetCurrencyFormatW
GetProcessWorkingSetSize
FindClose
GetProcessAffinityMask
FindCloseChangeNotification
WriteProfileSectionA
GetEnvironmentVariableW
CreateHardLinkW
AddAtomW
FatalAppExitA
TzSpecificLocalTimeToSystemTime
lstrcpynW
GetOEMCP
MapViewOfFileEx
SuspendThread
AllocConsole
OpenSemaphoreW
ReleaseMutex
GetStdHandle
GlobalCompact
IsValidLocale
GetTempPathW
LeaveCriticalSection
LZSeek
GetConsoleTitleW
CancelDeviceWakeupRequest
CancelIo
RtlUnwind
EnumResourceLanguagesW
SetCalendarInfoW
GetNamedPipeInfo
GetUserDefaultLangID
WriteConsoleW
CreateMailslotA
IsBadHugeWritePtr
AllocateUserPhysicalPages
ReadConsoleInputW
SetThreadExecutionState
BuildCommDCBAndTimeoutsW
CreateMailslotW
IsWow64Process
CreateFileW
GetPriorityClass
RemoveVectoredExceptionHandler
DeleteFileW
GetFileAttributesExA
SetFileValidData
GetFullPathNameW
GetProcessHeap
GetUserDefaultLCID
VirtualQuery
LoadLibraryA
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetOpenFileNameW
dwLBSubclass
PrintDlgW
ChooseColorW
VarI2FromCy
OleCreatePropertyFrameIndirect
VarDiv
GetRegionData
GdiInitSpool
SetBitmapAttributes
AbortDoc
ImageList_Create
ImageList_AddMasked
GT��H�8� �Xe�t�oQMhd��WV�)^;icU���i.�� �K�ƀJm9�G��f@����Ê�1ct��t��'�g�+?o���Mf�t���f:1B��S�S�pj�$�Q���pj6��J����Nh���xr�����gO|��l��.���K��Ua�u�Ւ�B�Ր��1��q�����Nc������3@+%Xa���<&�mAk�@��=Q����0���8/���"�F�P�$� �m7���0�6P�i}5d�q`��dA�K�D.��7u��j6Ia�v<��A�J��HK��_��켏È^�z��"��Ns�����S� �؏cEC<,9��S�l�>wYMB��O*s+�� ���LI7� ��Kn�Y������F��עiQ�� ��Q˷�9��z�uV�t���Խ���~�\��ˉ[��at��aj��d����5�)�^�O _p.�%��ͥ��[��>��z1���2���I�I�@ ��[�w�Qd������k,W����'y_���X4z�?R�L�Xeb�p����������s4�T��o^(qV�~��J�ٿ���a�'�qW�.YH�\8O��ۇLAl��P�Jc�"�4��C[�%E��s���B�t����:_%�����:iՐ�j|M�Zl��x=p���k��}:�p�5�gOjӶ_�d]l?��u,k�}?���B��w�KG�E{�n"�����'t�;��J��P�^����m��m����.&*?��(u�V��8P�o�n7�ELUM��H��Կ�B��ԍZ��KZ�*�i�BJ�yte��}6��Q/�Qn+�3�2�b܄1Ow��fح��#���6�ޣ�;��Fz �$�_�#��˙k�\�| ��4���g]`�}���;��ڳU(FFrˈ8���W�t�9Ԛ��A7�m Za=*��$������.-PB.�̨(G+YX��` o|�E��&�����]��M�����E�s��8���,�qD�W�|�3Y�>�e�d�oQ����b�p�y��Gj�uO�g`�4qp��ܰcO��J@ۘyf����ð����h���lO2��,% d+���O��:li�Mb����հ�R�(Z� ��Dv�z�M�Z��� t��9F춯3'��%����~c�������L)%1c��O���"����^E�d����G5�;�:��k�p�߲�,pxA�W�[^���PN�X�u;Fp��ɫZ��Êv7����z���]�&j�cz�S�k���� X���ĵoe�(��9��SZ:�s�*��R��Y��M�`��l��%����15ݝ~�އ}���*̕�Da(M�@:-x��WrP���o��zY���Xʓtď��"�/$���V�;�*�Pm-��6k�4�x�^k0H�l����@0�6��@�t]F��������������� �OQ�,�%@���3����ƹK-������%�C/Ц�X���{�<P�?;h�w�f�R���� �)]qo��+4��X�Zp�~�����=�H�o$W��>�8'�:JK#�2�&�b�7I�h0M���ejss�86wA�� sX�?Mӗ���~�g��M<��&�]�Բ� ��r�.*���E����3d(N�|��u�[bn0����n���4���6��"k2@�(�~�Q�����A-�]����u����|#!_ˉVքAzW��6�t���{��M��.�|��IO�[v��.�����y�РyG��o��GzjS�o6���%���Tɦ�#�q~�:�s������\rА>�֔�d�淵G�+�r%��c� ����.)���r������f n(a����rUO��G��u(q05�:��c�0$�z�0]T� 3a��5)�L�/!��!��/4���_�.gw�W�Qn'���}[���n�F;E�JJD?���`l/�{:�{����|n`ƫ�S�������^;]��%e������pn-��ú���{�?�1�g쯾$�ѹ�?$�3s6���oO�P�f���e;��X�8�ϓ��7��+�@�\����[r�E����^ӽ����%[�a7�� �,wh���{� �O�����۪I���U ��mk�$X���*G��v��z�{�a���ۀr�#�Cg>g�3��U>Oǧ�����XW�J��=��5���3L�jk\�&�B2ϡy�5��ϭ�C��וֹ?��u�_��D�=p�-�BU�����CX��ճ��X�,Q���gՠ�i~�ϕ_j:����b���2a�T��0"�Wfu��\q��P���q�|�E%4dÀ�æ���C�h��� �ߐ�d����H�f+�8��a��)P*��Wm� c:��=ЊH�'_����M�o�F��aZ�_M]��ᐕ�e�9�#��R5Kt�8�9[�&%@�K�3 �C����~�e���?�m\�Z���.�c{>�#Qh2���&���=D\$W����В��J[���0̄��9X>h�N�����"��\2t���8:�k�����Υ9�2��>Ά~,��]���7�3a�v�-��q%�+;�C��Vŋ���S��Z��T{!�A�N*l�z`���q��M�����N������I��ވ���^��/�|��u* ��,ܤ��'>B�1\oY�C[O;9fkr4�; ��띮��X��*����s��Y(��m�K��:?�=tG~>7�j����p�!�K��^9|��/�x1�;r7�W:�ҧ��@�?�b���<^��Zewu&��M���z��R�*���Z��EH���6�P�a_��|�rq�NЄ��YTeB<y�6�Q>��1;����a��z�g��\��"97lPe5���g�����mB�s�L4��x��q���B�\��"�]>� �*W�C����x�?{�n3��M�_4.��4O['���Z�#]s:��8G 1<v;���)H��d���l�FT����bk*�U�����"n������fS��V�ZP7,*���(\9b@7H�O���?n4�d�U�?�������������
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ