Extended Key Usages
ExtKeyUsageTimeStamping
Behavioral task
behavioral1
Sample
225a8d5e2bc03dfd40e108db93135819.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
225a8d5e2bc03dfd40e108db93135819.exe
Resource
win10v2004-20231215-en
Target
225a8d5e2bc03dfd40e108db93135819
Size
5.4MB
MD5
225a8d5e2bc03dfd40e108db93135819
SHA1
ed19fbb73b5cf9b3f1fac1fa5bfac79688fda49a
SHA256
87f1be40c399c9f9bf18a42510821122351c9132008e1c9ebfbeade479ed3f7d
SHA512
d836f5984d87d983071ace74ed042bf23db91f28ed298654a68ff84eea78e4369118cd86704952d148d0494a1ba8beb9f81b2af569ebb46626844eaddb8f079b
SSDEEP
98304:MP/AZa8Yf9h+2qcwNMYuTU4VzG7fn9yEQIU0n3kveVamaam0PX6NwGZSE2heF7Cm:k/AZa8YFh+2xwNI6f9yEQf63PVjHm0PO
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
RaiseException
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
OleInitialize
SafeArrayCreate
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
���Z.. �n���UuV����1�e�[����h J��P�m�x�Xн9��H����� �O�#l�ASCt�q��uC�� !��\��`��X�'��N�(�8�̱�Ф��M�:Yn���zh�^8�v)t���RUH����lT�qO�]�D!��6/�QT\T��&rpU�*��=����</;�����]�c�ՠ,�@SO������*����c�P�P�%COZx�}����X�=8|P�h*�5!�6��z��;�6�!�C�@ã��]E�O�S��H ���c��р|�.^��g��v��d��f5⌲��� R@vj�u�!G���ޡ02�ƚ�8JG����E�=�=ʙI�5)z�����pZ$Q�0h��s4�T���WN~eIg�WOF�_����,��Zl�����np�eb�g��|��Ej�PT��Sr�{�����{���zk��B���U#AS����u �8]���Ϳ���������,� 6�1��ǹ����r.�7�N�H�Q��(_����G �k5��BO N�-x�a}�2�aP,�D۷����*� dO�<>7,�S3��W��w3�p�K{����T��Վ�`�<�<�`�������_���_Jѽ���1{�КE�[Gm��]�5����B+Ʀ�y`�B��BwG�u/N�ǥE��<-9�p��Ɉ��R3�T��蘭�B�æD�t���0H�}�[a�T�c��! ����牷��*��r8��`�t�T?;�t��97��3B�|K�LV!�4��v���G[�t�T����tS�Z��.1�l3��*O���צZ�7E5��j]��%�F���6��3���L�yw�S��Ԥ𩁩>G�p�)&�%��v{���C� �©=�:�o�FZ=wkR2pw��7}�`�AM�w�^6U�´ݒ5c:��fJ�H�-���ݓ�R�����s�8���̱��t���l�P�rN;\3j��Fr����AoL��^�:�*�3_%y�tR�_0JM,s������}1@�����HvW�<Y����o�E3o�����<�-�/SK$�����W��E��+�8������+oʙ6�)�^K���j��Ą-ҵ*UOC��~Bb��a��r�e�%����]��5� �J��Zp_tѓ��C��+Cp���ص��*�������n���;��!������G�N��/�IQ{�A�j�FG7U+z=6?T+���j�G}�<v���K��Q�M��qW+ʿAS��*��L����_ln�N ?�s8�k `YqR��[[��[��9���$�^����5C���,�x�ٺU6����Ó$�h���1��w+{5%)u�Kg�{��p�J� - ӪW�7�X�:��2y�NQ�K ?���V6����N��z��� �zx�<-98�� B1v;��A ��Ȅ*�$�K��L��G�d��m���H�봌�l�|���t�i�<�����.�r*�[R�{18R����g��(�<���R�o�Sj�ʹu���^q���9��im|���R��A�����}��BU�����m;����x;�,\8� �_�c ��""~i�\E@o��p�8,SE )n����*ty�𦀐m�%�Ψ�m�w`�X=��ʥ&'(E�E��>��ّ�{[�OǕVlJ{Γi�����wG?�P>Ա�������`�J����G�GF�E Ĩr��x7H�8�[���;x�F����v�LT.�W���/���2�VSX��V�x�?s�{��v ɻ&ĺn5 O�����E�!�Ld.���X� ��$��܌��`V�$�:k�j�Y�[}`Sv�-i�:����0�F����A�����(���䃝̡Y�9Z��2��=��T���j��[�<��GXhSs�����f� }��������B������הp,B����QJY~����Yt�lh%�1�A�N5�z/4�Œ>��h�,OϪjTk&dt\!:�Ƀ$`i � �s= G���˽6�o��*}k�;mp<L0�_�ۊ��Hzڷ��zD�@�T}���]������D'�dĬ� �^�Qqp ���w}'2�k6An�C徨��t������d�8�0^G�� �_;e�&UݝI4H�%p�f<�(�<b.Z~_ϑߙ�'0::��Ѻh��L��^���o��֜�=3V!��% �y���5�W�@ɰ|6�:�gJҘ�;��6�Ɠ��OLr丷(���&N� >��~m�>�EgL�`�������1�����l��{AH�<#&��3�� ���:����U)�8��'�6h���O��[I���G -�� ex�D��l�r�Z��֣�Y!�OBM�@~}���LQ���:]�f�m� 幨M4;&�x�wWVp���Ꮖ��e��\S���3�)Iz��:rsJt��P�\&���Ę�E`�ͣ��w���D��Y�?�A��N���j���n���l��5���O*��̈́�2#�}1���=ɕ�Y�R��k`��%'_*���ɾ��1���B(����c|���Y8?,V��\f@���-�����C�ci �&�K8����۹��L=ϐ�O�p�V�1J� Gx��;�����|`��� p, ���al1���ɸ��!��D�l�c_��{<��v�1H���Q*{\�(Ԉ�����9o,��-ҚF B=!V�)��D���:�9���,�d@\��S�.cB*_���0��[���_�+���o�x�.E�'z�l��v���G�՝�^O��P�F���Pc!* �,�XwrC���I��T�|�"L��}տ�|)����ٶk��1Б#"��}Z]cMe�&�dıx�PfH�� ����Tk��=�>�b{�������.��$d�Xd灄�{� ��!�����$�����x;nz��Pvgl� �W���ˤ?��&i�\N篦p����W��f+�����K�Ց��M����0�>-�-}Y�S�`�!��R�1CPT���4���;q�����{��\��k��rɆ>il7���;�$�I�6�Mk�����B\�l�ɻ%���L��$�\�:#H� o�+�"WaD��T|�i�&B&i����wm_�ߕ�>�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ