Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
21c34875a911e04c8a7b49e28ae01957.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
21c34875a911e04c8a7b49e28ae01957.exe
Resource
win10v2004-20231215-en
Target
21c34875a911e04c8a7b49e28ae01957
Size
607KB
MD5
21c34875a911e04c8a7b49e28ae01957
SHA1
d887c895848ba9949eedebfe76eb6f091ea43150
SHA256
2beb7b237f224c55d431c4607999dff621085dc0a370871f106efe1cb4a09ae7
SHA512
0546c0aef454bcbb774d3a27224f58c270a15565e01552aeb29efa014cc308ad4d9c75e4141d2e63058e84f475cd2f780aa9e56d9504a25b564da07b23951c6d
SSDEEP
12288:ugtwn0FRry4+wl7LuWZDz5URgvZXqyd8BxSmZB8xQIusk6O4M:ugangXLZrURgv8B8uBwPuskn
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
SetClipboardData
ShowStartGlass
BroadcastSystemMessageW
CharNextA
OpenDesktopA
RegisterClipboardFormatW
ModifyMenuA
DialogBoxParamA
CharPrevExA
GetCaretBlinkTime
DestroyMenu
DlgDirListA
GetSysColorBrush
GetSystemMenu
GetProgmanWindow
SetMenuContextHelpId
DragObject
SendMessageCallbackA
GetClassInfoExW
MapVirtualKeyW
MoveWindow
GetDlgItemTextW
WaitForInputIdle
GetMenuInfo
GetClassLongW
GetFocus
SetActiveWindow
MessageBoxExW
AttachThreadInput
InsertMenuItemW
GetInputDesktop
TranslateAcceleratorA
ActivateKeyboardLayout
DragDetect
OffsetRect
IsCharUpperA
UnionRect
UnlockWindowStation
CreateIcon
DrawTextExA
MenuItemFromPoint
EnumDisplaySettingsW
CloseDesktop
DialogBoxIndirectParamA
CheckMenuItem
CloseWindow
GetIconInfo
GetClassInfoW
GetMessageA
CallMsgFilterW
DefFrameProcW
DrawStateA
MonitorFromPoint
GetCursor
wvsprintfA
GetDlgItemInt
SetClassLongA
GetWindowWord
GetWindowTextW
SetCaretPos
CreateConsoleScreenBuffer
WritePrivateProfileStructA
OpenWaitableTimerW
DosDateTimeToFileTime
RtlFillMemory
SetErrorMode
HeapCompact
SystemTimeToFileTime
GlobalFree
AddVectoredExceptionHandler
SetThreadUILanguage
GetCurrentDirectoryW
GetHandleInformation
LCMapStringA
IsBadWritePtr
GetCurrentThreadId
GlobalFindAtomA
HeapCreate
GetPrivateProfileSectionA
GetTimeFormatA
GetPrivateProfileStructW
QueryMemoryResourceNotification
RequestDeviceWakeup
GetCommState
WriteConsoleOutputCharacterA
GlobalUnWire
EnumCalendarInfoExA
EnumTimeFormatsA
SetTimerQueueTimer
EnumSystemGeoID
FindCloseChangeNotification
GetConsoleKeyboardLayoutNameA
SetCurrentDirectoryA
PrivCopyFileExW
GetPrivateProfileIntW
CreateNamedPipeW
GetSystemDefaultLCID
GetStringTypeExA
UnregisterWaitEx
GetConsoleAliasesW
GetProcessShutdownParameters
SetFileAttributesA
AttachConsole
BuildCommDCBAndTimeoutsW
RtlMoveMemory
GetExpandedNameA
HeapAlloc
DeleteAtom
HeapReAlloc
GetLastError
GetACP
GetProcessHeap
GetVersion
VirtualQuery
LoadLibraryA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetOpenFileNameA
SystemTimeToVariantTime
VarDecFromCy
VarCyFromUI4
SHHelpShortcuts_RunDLL
SetMagicColors
GdiFullscreenControl
GetGlyphOutlineW
GdiPlayJournal
WTSOpenServerA
CreatePropertySheetPage
�?��Y]���d_�\\E�xS>P4CoI�U�҅*j���i������}4�����3)�`��6SQ��}��#$e|�y�D_]�m����ă��B�W��4Z�'��'�����_��We��5������O����@�������3� �.��l5!����SH��j��\X~[���c�j<�Fh$������ٿ�N�@� �`\#�yVo���>���v���V��@�M����@��n`h���[�)�6u�jߚ�ʓpOt$�q�\�:�����OJ��^���Z뭏�$Q����Ť�˅5�K���6����X6�U�f�U��� V��2O��Wݏ,RjĔ�+_�OV����X���s>kE�Z:�e��˸ o� Vz���kv?�וuĂ$ �".���Nr��� ���?��kћ(���Nx7�0=��z�m#\g:��rI��H*���� g�J�(F��L-0�հ/>��^����C�'/����~�@tѴ�N�����]���m̈�� �+�W+��gmj[+�[ J~��A 5>��d+�0�$�������K`�y��r��~x�LH�"Ќ<:��W���7�U�\�{�;����v����`�c�}(:�&����~ȗȆ恳,�i8�RU��ʽ6�&}��S��l�y�#��*/h��v��ON� �L�"�-��6���:��͐�~!E��C]d$`��V����b��H5P���Qg�����><��������?n��aT���4;��S訃��Pέ��[k�6t�fn��w�����"g�Q ��&���g����G�Kt��\�"�|2\�����_��>��f��U@�RNgϴm[��I�?Z����h"��힌[R�QE���=�h�P�%�V��G��b�:q)� �Ww��'eY�T�)�:���8uXp,�%�������� 0�H���"ќ���E/��2�F� ��׆�T�+�Lu���g���+���9i�䁋23գL��ͳjP��� |\K~���X%V�R��w��k���>�]��;��R�2�Ֆ�O�r�r�VDX���3��Y�!V�$����`��?׃YBؙ�ݵ ܓ�sE�Vxf���� >l��o� �7��6[��'!�:;��Ny�z=���zƥ�]9�@�LZ����aP-���d�Q�n�3i��>�S�X�dZƝ�h+2�u��ǎ�s)���B]0k�%v��i����jF������D�-G"%�^�v>ט���Æ�[G��g��NԼ��u�_��_h�Vp|�Mx����o�ax�&#��ի���kK|# �aʩ�ښv�#�/�<oA�Đ�f�h:�a<�50¤q-�s�����7����J����X<:�>Q1涊� J����a!>�!�J�_�>&�L*p���H���jMd����ޥx1�OI<+ ��E�:&5J\��|�J��PA�ɧN�V�qj��1��GR{m�J��3���knB��>�/��+Ÿ��|�7s�?`eB�))������A*J���ϻ��0�ċ���#��'�s��M�`�Ox�$3��_���Ɠ�[C`;�g�S�#�Y#�Q����-ٕ�������) �ޜݺ#��Y��%����aE��a���j^H����;��������{�k�1�ќ�xE�� �4=�N���� ���s�ob9@�N5`�%��Y��s�����ܪq��"Cy/�R����He ��g9izܙZ���3�u.��a�&(bJV�m3����Aݎ�� &K⑇�1���� K���� Y~�q����/�X:�a���ޘ��������v����O0��{��v�� 9�d�z���Hۑ���r�Í�ɗ������5�M�F�i�$gH��ӎ$���R풘���D�&�!H��]���Ii�Ο>���F�OE��qAg`�$,2Z���)�K��aH�ʼ�d��n���*��,T}��[g��'�f^8���]��'��I���L�ÇM���T�9�cGZ���?Tk欝�����3f'B����,��@k�zB�»�7��'�~�ڸ5��0۬n���lҵ��H��2��+��ǺT�`o�����֭�����ey��q�c�&E���^��7���'A�:@�9J���k� �%���,�ӢC�+21"��/`d$��Om'.�j[�'�<ֱ{���v|��v�5A [���9e�5 ��M�a�Pe<� H��>������G�Q�;\�ЩΤ{|��@�����%��g/��U��(A~x1�S�#�Q�|��W�n�F�M�*����C�����0|��y}Kf@i�S0|NY����nx��a����5+YX>\�}�����(~��uS��:ix��鈕�kѭ���ã�8� ���f���h��ِq�2�ı�X��;r��L\�-�<M{W�1��?.��oa�_�5�/��v�Q+��[%�3��n�p/�DKH������S��4G32�#�]J?����X>�)��a.,�xJ������>D����N�� ܁ȳ����n��`ox͟��v��Y�N%�tnm��W�ù� �~%��{'�<A�M���Zz��0�{���0z�� 1�ǒy/�'`�[��S�P��� ��#[����":�1�Mݣz�&���+�����0d �'�և��_/�c�|��;Uǣb���Ⱥȗ��̲W�s=��]��l�� ��I���g5ǔ����n7&馄��1D����6�zX�3.�6��x����~گ_�+ِ��7*�/����ҐA�Y��-�0�Z��S>�"�[k�����&����k)uy�R����f �MH��-��m�0Wa��BLE���OĻ9��EG�&�A�w��#EC)S��8��m���*Zruc=& D�Ը�B�0�M�d�O���t����:�p���T�V�5��{�лݱ.Z����_c����0�۫$P���>�d@���W�Y�Å�p���*�>e����B���G� ��P��h�vho*Ԅ)��@$��B�džQ���<�Z�����o+��(�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ