Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
49cd761f453185ff127947f4a6d309480504100f6e8c8ce5e4e10852513722ff.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
49cd761f453185ff127947f4a6d309480504100f6e8c8ce5e4e10852513722ff.exe
Resource
win10v2004-20231222-en
Target
49cd761f453185ff127947f4a6d309480504100f6e8c8ce5e4e10852513722ff.exe.zip
Size
8.5MB
MD5
836b9909f07ece872eeb14d69928e3a5
SHA1
96df17f4ae0d34da280446d7290f448952eda007
SHA256
08f4915dd090d54d2bfa4ba64569e85dec14fb32e234baf36f13c9943fb637ce
SHA512
d4244b195e154e4086569407a8af5ad3c7045e15e95f2f56d7903de14f59b558942cc4aa071d56fc407b02df586e7360e125b210c7dba46df8280bdbfc671498
SSDEEP
196608:WfmmwBPwc6PYz/hvSmiVtlupQuAN6VG3S60ZhU:HmwBwjYz/UluKN6s3SLZK
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
VerQueryValueW
timeBeginPeriod
GetVersionExW
LoadLibraryA
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetAsyncKeyState
CharUpperBuffW
SetPixel
TransparentBlt
GetOpenFileNameW
OpenPrinterW
RegEnumKeyExW
RegQueryValueExA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
SHGetSpecialFolderLocation
ImageList_Draw
PathIsUNCW
IsThemeBackgroundPartiallyTransparent
CLSIDFromString
SysAllocStringLen
OleUIBusyW
SetSuspendState
InternetAttemptConnect
htonl
CreateStdAccessibleObject
GdipDrawImageRectI
ImmGetOpenStatus
SetupDiGetClassDevsW
GetNetworkParams
WTSSendMessageW
[h-ěQ�����<����ld���p`��38V�Y�_Z�;�p�����9�������r&m���#4ljA�0$��Y:�[eF�~�9�]�Y�nx�h���1���5laCR5����nU~;2���j��C��f��cJ�QNl !7��{4���Rq-E�[������t��籠\�{i �n�I*� ���s���"�8[���3跞8jW<�/�8����l�1�{��k!|E�3�� l��!ʊ�z��͈�̇Q��%�e���wœ2S�V�P{M�b�곉1AC�#�5��3��J»!� �y���3��C��?�C�g)X�����P�6F5��F��WƦ�������d5�ݧ���X�;�v����x��~��ǔ8�|�s����eHT�{sIet�E�~xr=(W+��M�x��hH�e�F0.&s�0��w4��`��y�'g �R����?����N�U:F�9��Ʊ����H��m�����ˁ{}%�>�̍�Pض~�T�R� O J���F%�S��[�ܢBIf�h���f�����Ӈ������#��Y�l�ls�� 6ч�����=�S��Q\����f�A������)E�(��L�ˣ\B)Q�_�S�>xZ��Whx�����<��?��sy�)���J�R���A7�8��O�0��0X�>uU.�}C�&��6�&�8�hz}A��G���3c��L{����� �e_G��qQ��ƣQ�V�`�I�bF���/�d2�:Z�C#p1�6�,ֺ�y阫��NQ���� �i� R���u�k�����Q3'�Js|���v�V��[����e��/������n[�o��̰��&[[�&*���h�D�{Үb��j>�Q�+�ȏ�kM��1*���s��@$�M�^�E�a8C������hhʑ�7����<���u���N� �;#Sޙz����o��PR�p�'!�u,o2�e�_#����|$#l��������*`3(V�̳ͦ5hld��?O�ϑ�n{O�`(���T��]H| ,7��Gu��:VW8u�1�)*}�1h8��c6�6<GeReJ|�4�߷i�GS�0L�'��y(����ؘ��'*�v&�K����R>8���t�B�h�K�S专p��l�A�<�Z����X;n��]4�<_ ��nӸ�E����4�\��Cr���y� &I��|�=;Q�F��ѡSFPG`�'����AѰ���e%�$Tzǰ������7��cW{��oD���^�<{��`_~ۮ���_V⥷�y6b�&��>�����eD��̺��;~�!r)�)��;֨jBd�H�ć��Tړ����&A%ϥ��YW�O�.���/^�U�`4��,l��ηR�����3"�lS���v"�Ta��:<�O�5�ٮ�M.MCX�~]*R�4P8�YJ���0�_��n4k \(��B����i�/4a�tHq�U��3�i���-�B '�49�h����<�d#�RO"/�)�1�� ���χ���{�ԡIx��7����i�.Y��U�MB7z���7��FM����.�<���'|����Ӣ���,4���Գi$�7�l��Y�|#=��$#L�������Ǚ B���p -�o�#w��?��?b�B8���7ɥR�'xcA��܆������b�;�|a�DSZ4��c/��_���:B���+�3 �Ǯm�H�I<Wي�S�y�"�p*�"���fm%!j��3����x�~꼑8��Zf��x�%�_p�ڈ`Tw�_F�L�K���?���bn@L�T��a$�����D#&MS�4���WG�fu�|;��@)eB���_T�%$���P3�A�>f�d>~�'B�� 5��&����4�D�]�_Dž��<)0��|���Wb{TO ǂ{��&�FA�TS{YMe�[����O@� �ށv���]L������E;_�T�Ώ���v��t��D�g�k�fY��u�,�UK��L#�����c�����[�NJ��d�|��f:�xy ���b� <�Y��d��7�w�����C1��0�?DC�qy�fFe������{N���<�L`���Oj�d����6�����8�η��g����) ��%J_T� "�m#��'X"m}�'oI�\�p�˛���o{����ɜ�)���YNA�)O/�(䴍�뽲�0���Lp�>��/�~���(�y�Z=մ i�����Ӯ4u3B���K���x�I�)Τ�J���c�Tk�3�qk�a�1:E{�Or4L���w�k����F��+�BB���2�����S�Tc� �E'���3i`2��"tM&��s�&04�rZ���?3]��rl�^M���r=�>6���õ�w���z�M�=���.<�]�\^E5�%�,���l㤄��K>�u�t:,���������2�a JM~E?���!�?+��2CN����(`��X�z��p�ʪtw��@�Px��f�R�b H)Qͦ��S�a #�!�&���kC?�A�tX6�q����~�?і��Z�[`Q`�O ��)*��}�f�(�g-�ƃ�_�5�z��������1h�5��=ϵ�m?C~!y��dFKX��*�R�ܼZ��t�O��l�����=L9�̂Fs����ͬ�+|�m05|_��fզ �����HF>��� |R�3ֹ>O�WH�������#��o��o�s�����ǔ��䖙ߙ��r6�C�,j/hl��ŴƢ�e�(�����-U9B믫���Y/j��p���l��7������a�5�F�r��C=��9���h�D>���|A��ZK{ ����}BQ�$�%��]�w��N6|����i��+�"L���&�m�i(�ہ|�}en=�'�l`���Q�쀞�����#wbA���cs��-�S�L �0L�]�TS�b.��p�v��)���zG�03��q���מ-5�g2�4+~�m�9��."�Zr�����T�!)�R1Ʊo����2H��5ؔ��_!��@q�Gia)-�\oa�$��t�XS<� b���W�����|^���1!�c��?��`v�����K��9vq��C���ÚXx^5ε�W
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ