Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
1bd9b6c31e48892bc3a79496d782f149.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1bd9b6c31e48892bc3a79496d782f149.exe
Resource
win10v2004-20231222-en
Target
1bd9b6c31e48892bc3a79496d782f149
Size
603KB
MD5
1bd9b6c31e48892bc3a79496d782f149
SHA1
09f87e32f08ac00393a171f6524132d5e39a249b
SHA256
209ad32c7c82ad383eeb774417ff1ca2066f4b4695ec56e7830cacb9fcaa9380
SHA512
46eb4dd70a8c6c834b7406ead25230a58a2c835d35159132982df40da2f49fbb1fce5e12aa81db2f0dfdf6624f46de6e9c806a8a8c04c9ac37fa396a73d51cb2
SSDEEP
12288:zdRpC1uzGc1GkmyRf2U5gcZ5d4IfzRZ7WvT5KcMI:zdRpCkac1BRfZ24rfab5K8
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
MenuWindowProcW
CharLowerA
CreateDialogParamA
MapVirtualKeyA
PtInRect
GetKeyNameTextW
LoadStringW
IsCharLowerW
ScreenToClient
DispatchMessageA
GetGUIThreadInfo
SetWindowWord
SetClassLongW
MapVirtualKeyExA
InvalidateRgn
SetCaretPos
CreateDialogParamW
IsHungAppWindow
UnregisterClassW
GetWindowTextLengthA
SetMenuItemInfoA
LoadAcceleratorsW
GetLastActivePopup
SetClipboardData
GetWindowTextA
DrawMenuBarTemp
LoadMenuA
GetWindowRgn
CharToOemBuffW
SetDebugErrorLevel
wsprintfW
MessageBoxIndirectW
SetFocus
BroadcastSystemMessageW
FrameRect
GetSubMenu
SetPropW
LoadKeyboardLayoutA
GetThreadDesktop
LoadCursorFromFileW
IsDialogMessageA
SetDeskWallpaper
CloseDesktop
SetUserObjectInformationW
DialogBoxIndirectParamA
UnregisterHotKey
GetDC
GetMessageA
GetUpdateRgn
GetInputDesktop
GetMonitorInfoA
CascadeWindows
GetCapture
EnumDisplaySettingsExA
PrivateExtractIconsA
IsWindowVisible
GetFocus
DrawFocusRect
BeginPaint
GetMenuItemRect
FlashWindow
GetWindowDC
CharToOemBuffA
TabbedTextOutA
GetUpdateRect
GetClassLongW
AppendMenuA
ModifyMenuW
SendNotifyMessageW
EnableWindow
ShowWindowAsync
EnumWindowStationsA
EnumDisplayMonitors
GetMenuItemInfoW
RealGetWindowClassW
ToAscii
SendMessageTimeoutA
PrivateExtractIconExW
DefFrameProcW
SetDlgItemTextA
RemoveMenu
EndPaint
GetMenu
DrawIcon
GetClipboardFormatNameA
GetMenuBarInfo
ReleaseCapture
CharNextA
AllowForegroundActivation
ArrangeIconicWindows
IsCharAlphaA
EnableMenuItem
PrintWindow
wvsprintfA
SwitchDesktop
ValidateRgn
GetSystemMetrics
MessageBeep
CharNextW
SetCaretPos
IsHungAppWindow
GetWindowTextA
EnumPropsExA
HeapSetInformation
GetSystemInfo
DosPathToSessionPathA
GetLocalTime
UnlockFileEx
FindNextFileW
EnumResourceTypesW
IsProcessInJob
GetStartupInfoA
QueryDosDeviceA
EndUpdateResourceW
GlobalFree
GetConsoleTitleA
EnumCalendarInfoExA
GetTapeParameters
WritePrivateProfileStructA
GetProfileIntA
GetTimeFormatA
DeleteCriticalSection
VirtualQueryEx
SetCalendarInfoW
BuildCommDCBW
ExitProcess
FindFirstVolumeA
WritePrivateProfileStringW
GlobalDeleteAtom
SetFileAttributesA
GlobalLock
CommConfigDialogW
GetPrivateProfileSectionNamesA
SetFileShortNameW
SetThreadLocale
GetModuleFileNameW
QueryPerformanceFrequency
Sleep
AssignProcessToJobObject
SetThreadUILanguage
GetPrivateProfileStructW
SetCommState
DeleteVolumeMountPointA
GetTempPathA
VirtualFreeEx
GetHandleContext
WinExec
CreateDirectoryExA
CreateMailslotW
LocalFileTimeToFileTime
LockFileEx
LZStart
CreateDirectoryA
ResetWriteWatch
GetDiskFreeSpaceA
GetConsoleInputWaitHandle
WaitNamedPipeW
GetStartupInfoW
EnumResourceTypesA
GetProfileSectionW
DeleteFileA
EnumCalendarInfoW
DnsHostnameToComputerNameA
GetLogicalDriveStringsW
RegisterWaitForInputIdle
GetLastError
ClearCommError
TransmitCommChar
GetLogicalDrives
GetAtomNameW
DeleteAtom
CompareStringW
LocalUnlock
GetCurrencyFormatA
InitAtomTable
PeekConsoleInputW
ReadConsoleInputA
GetProcessShutdownParameters
GlobalMemoryStatusEx
EnumResourceLanguagesA
GetProcessHeap
GetLastError
ConvertDefaultLocale
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UrlCompareA
StgOpenAsyncDocfileOnIFillLockBytes
HPALETTE_UserMarshal
ReleaseStgMedium
CreateBindCtx
dwOKSubclass
GetOpenFileNameA
VarI2FromUI4
VarUI2FromI1
StrRChrW
EnumPrinterKeyW
EnumPrinterDataExA
EnumPrintProcessorsA
RegisterServiceCtrlHandlerExA
LsaGetSystemAccessAccount
LsaSetInformationPolicy
RegisterTraceGuidsA
GetCharWidthA
GetDCOrgEx
GetDCPenColor
SetMiterLimit
VerQueryValueA
WTSDisconnectSession
WTSSetSessionInformationW
WSASetServiceW
select
WSALookupServiceBeginA
CreatePropertySheetPageA
ImageList_Copy
CreateMappedBitmap
ډ�-S��J'���s����?3*=6f�ZJz��-Tfx�WC6�3�~�^�ne����#�_�l�Y���C=��Y��Po�,�Td`��2���Xռ��f�렍N�Uc,[8jk}��/x�["���;4x�Sl�9N��r}p%�J���W#j&��1t��,L��� ��p�=٬�C9���P�'�'������`��h��ag+��\� �l�mZ/����qj�**��UΛ�xQ��2�O�W�<aٲ�MDߟ,'�|�.{�}���t����|�����Z���F����S�j��,�Iоz����gt�|��67� p"|��|f��� <G�$]U����a��@.��ؔ�L�CS|>�����v�C��Uv[��Y5��3]�o�5��Jc^uq)��v�2��x|�]����ro�[x���t��n�֟�A���C2'_� +$�������JIS1��lBi���t���m���sޠ�ʍ�̓Eyv�//���h;��݂/���O�<��X�bjt�fy^�W�Z�=&ӿS��'�!���82�����P�j]���F~J *�{�}�vb�����y�&���!�V��t%���au���Cd����Q�~|���J<mt�2��>%��l#�?��V�Zj�W����Ov��Y�����KBu:�\���͒��4R���rp��N��n�� �p�cc�� T���B��X���J�q��if.����ǎ]��B(��������Fn���oZ+VH�uL�7���Gv�N���������^��N��p�� ��I���b)? ���C�l�l=�-<;bU�j"3���`��8hu��`�/8��vT5oP��7�]�D�J��@��� IHVO�uuKK��q~v����� �-R}����i@-��ѡ���Q����"��~Mqdd+���X+|�a;��r���W���dQ���]q���jD<%�V����T ������^�ԌY�!U��Y���'����H[̎�(u�,��u���Lz���mO��~4%ZM�T�H���0�����`�6��d�����>5��0���3�mF^��[P��C�V��R��`Ȏ� ��I7tmW�\wU<õGq�]�n��W�r_>I�q��kz�t�3���w?�O�/�ƃ�= �sث��"�ͫ���zYL�Y���-M�VE�i�A��M����b���ά�IM���ư�|cs��"[��!��1�'p�J.c���&��8�=�/�l.If5�R��DS���쮵�lK�1Z�i�.U�������Y�'������{Ҵ5���������I��q���⼉���N|h<��J�#Ɵ���Q(�QD���|Ǘ�o��xń�����Zr0V߿pOnD�r�u5FOq���~�-������fЉ ��rj�,����s�o}��{� �i�:v��kN<ݶ�X�I���V�9��u�з�G�̷4�����x��AC�VO��J���a�I��\�����f�J�jkL�n����\����E2Y�zj�m�ŀK���l�Rύh�<�U�D�`�v�[ύ��@�0�R��_*=MHÈ�߽y�����A�2��G�0����S"����9e����-�/3����h9S����A:Z6�&w|�s�vI��l�!\s5+�q\3�+�=�#*p{7{��$v��}�2K@��Ev��`�����q^�t{u�|Q��>�➫0����L{=���o�l��Ɇ�$߉����F�v�۴��zF��Bn~��Ŋ̲���ko�ݘZF��L��HGu #G �pA�.F�� J��8huSM���Yv=���rZ=��iaL���@E;���IT�<��>�z�=��H�@����V3���"_˲���Y��d�6��Z����4����ck���&���}�%<����=>���P92��������$�� �@�9�t�N��kJ����(��/��{����Kb/�Շmyע�Tx�┋�Q�����a�2g�+:�pq������>��_@,�(�ǣ���x��[��5�D}kp���[���K�@B�4c�v�g�,ȚT#���]W�RcBX��ZYdr��1��b�2]�r�W4.��55 M�]?ΏJ*�*+^��˶c:��~���>i�oMq�P��%/�MaƆY(<nVrτ ~*�8��q�}B��d�fE�?Ot�N*#��Jz���n@<�z�ZȔ�������i��9���Q�ģ/֓ t���k�w���eç���ϖ��p��!�8L,do��� ����}U��D�.�����pU��/ ��jO�s���A$M��͙��ڤ�:GY��@�� �yx�����>�I�\7�q !^��i:��#�/�u�hj{�#F�ϔ��ab�����y��� �5הk��kn|�=�5��L���e�/�$Է�MA�e�b�������C�$�y�@�!%��������g�����<���cVԂ�:fMV�]��Kރ��e��=���W)OH�9�2���|3��m@;X�����8�\����e֙9�\U���I{ԃ!�m������vyI-���$�6�q����a�^��vz�|��@�<��9��|N$�]�w"�C�}���O��IHP�(�_#N��)X/�3�dU�(�%��b��1�� �<q��z)��C�5�OeNGk�$i��d�v<���q�T �<������@����It.Y�!p*��?�E�R[�b2/���04U�����!/�X��������]��!�:�6EurlI�L�'�� p���.��&�D��Q�˫�v�h>��pSF��k-j}�9��K�[j%���8��D��p��߁Q�B�r��튽���훓����F�))R�8ψ}�˴&�pn p��.{m@�t�NU��Zt�1㝟�.���I2��<�^�ǔE��HʘK1y� ����, 8�]�{{�T����79�u����\W�{�06[ �IR�AXJ�����ݟ�WZvg�|)��yp����m�ς��vN��yUv��ؿ�D>�Yd�{���~�n�Q�z��dr�^N~���ln���7@�Z��6|ދR��2�ѼM�5��M|�$
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ