Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
3dd0023653765e58e3dd12a7ec3c0fff.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3dd0023653765e58e3dd12a7ec3c0fff.exe
Resource
win10v2004-20231215-en
Target
3dd0023653765e58e3dd12a7ec3c0fff
Size
602KB
MD5
3dd0023653765e58e3dd12a7ec3c0fff
SHA1
2aa4be8f85febe91eb3c7a93a4a3238c03cee097
SHA256
1672213408d6b18ac4336a8402538c2ddcc71e7cceb2662f3c81cfdbe4b5374e
SHA512
25a1c11f29e9cbaee417d220e9cb372f480b8b71534b6d9f827e6773bbf11f89221c3793d1887b5f8849fa3824e33403d8334190e1a04935ebfe9e747f06f285
SSDEEP
12288:KktTuVyHDcjpJqZN9J61qQMDz4680cLnKigyhNBRRfPCAMm:zty+cjWPJ61Vc98ayhNBRVCm
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DialogBoxParamW
WinHelpW
DrawEdge
AnyPopup
GetProcessWindowStation
MapVirtualKeyExA
SetLayeredWindowAttributes
InsertMenuItemA
CreateIconFromResourceEx
MapDialogRect
TrackPopupMenu
EnumThreadWindows
GetWindowThreadProcessId
DrawFrame
EqualRect
SendDlgItemMessageW
CheckDlgButton
SetClassLongA
RegisterClassA
LoadStringW
CallWindowProcA
ScreenToClient
SetDlgItemTextA
DrawIconEx
BlockInput
EnumDisplaySettingsExA
DestroyAcceleratorTable
ModifyMenuA
EndDialog
GetKeyboardLayoutNameA
RegisterHotKey
SetParent
EnumWindowStationsA
LoadCursorA
DrawFocusRect
GetMessageExtraInfo
SendMessageTimeoutA
ValidateRgn
GetSysColor
GetTabbedTextExtentW
SetProgmanWindow
GetMessageA
CreateDialogIndirectParamA
PtInRect
CreateDialogParamA
ReleaseDC
RealGetWindowClassW
LoadCursorFromFileA
SendMessageA
LoadImageA
DrawStateW
GetClassInfoA
WaitMessage
SetWindowTextW
UnregisterClassA
GetDCEx
RealGetWindowClassA
CharUpperA
GetClassLongW
ChangeDisplaySettingsExA
TileWindows
EnumDesktopWindows
TrackMouseEvent
MonitorFromPoint
CallWindowProcW
GetActiveWindow
GetUserObjectSecurity
DialogBoxParamA
SetMenuInfo
EnumPropsW
UnlockWindowStation
GetMessageTime
GetScrollInfo
EnumPropsExA
SystemParametersInfoA
GetWindowTextW
CheckMenuItem
PrivateExtractIconsW
InflateRect
ReleaseCapture
TileChildWindows
IsWindowEnabled
RegisterWindowMessageW
GetKeyState
GetClassNameW
GetAltTabInfoW
CharPrevA
GetWindowDC
DrawTextExA
GetMenuItemInfoA
CopyAcceleratorTableA
AnimateWindow
MenuWindowProcA
LockWindowUpdate
LoadAcceleratorsW
GetSubMenu
GetUpdateRect
EnumPropsA
GetClipboardFormatNameA
TabbedTextOutA
ValidateRect
DispatchMessageA
KillTimer
GetInternalWindowPos
SetCaretPos
GetWindowTextA
GetWindowWord
MapVirtualKeyW
CharPrevExA
ReadConsoleA
GetCommProperties
EnumCalendarInfoExA
Beep
MoveFileExA
GetProfileSectionW
ReplaceFileW
FindNextVolumeMountPointA
EnumSystemLanguageGroupsA
SetCalendarInfoW
GetThreadSelectorEntry
SetCurrentDirectoryW
FindFirstVolumeMountPointW
GetProfileSectionA
IsValidLanguageGroup
CreateConsoleScreenBuffer
GetConsoleDisplayMode
QueryDosDeviceA
FindActCtxSectionGuid
BeginUpdateResourceA
RtlMoveMemory
GetFileSizeEx
FindResourceA
GetConsoleFontInfo
MoveFileWithProgressA
DebugBreak
PrivCopyFileExW
RestoreLastError
ProcessIdToSessionId
AddAtomA
CreateJobSet
WritePrivateProfileStructA
HeapCompact
IsValidLocale
GlobalLock
SetThreadExecutionState
EnumCalendarInfoW
SleepEx
WriteFileEx
ActivateActCtx
CreateTimerQueueTimer
WriteProfileSectionA
GetCurrentConsoleFont
GetDateFormatW
CloseHandle
GetFullPathNameW
FoldStringW
lstrcmpA
GetCurrentActCtx
GetSystemTime
HeapAlloc
LocalCompact
GlobalFindAtomW
SetTapeParameters
GetEnvironmentVariableW
RemoveVectoredExceptionHandler
EnumSystemLanguageGroupsW
EnumSystemGeoID
BackupRead
WaitForDebugEvent
OpenWaitableTimerW
OpenFileMappingW
GetVolumeNameForVolumeMountPointW
CreateMemoryResourceNotification
RtlZeroMemory
FindNextFileA
GetLogicalDriveStringsW
CreateMailslotA
InterlockedCompareExchange
GetSystemTimeAsFileTime
GetConsoleFontSize
CommConfigDialogW
SetPriorityClass
Heap32First
CancelIo
SizeofResource
DnsHostnameToComputerNameA
lstrcat
GetSystemDefaultUILanguage
GlobalGetAtomNameW
MoveFileExW
VirtualQuery
SetComputerNameExW
SetMailslotInfo
CreateEventA
GetACP
GetLastError
ConvertDefaultLocale
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CreateBindCtx
ChooseColorW
VarDecFromDisp
VarMod
RegDisablePredefinedCache
ClearBitmapAttributes
GetMetaRgn
WTSSendMessageW
WSAAsyncGetProtoByName
WSAAddressToStringW
FlatSB_ShowScrollBar
DllGetVersion
<����5:S+,<�+Z�����������{���O=eȆ@W>�2w:�#�R�.t��m~��' ��~��N�� �YC7l*/%�\�UJ�Ņ���;�ֶ��f�.e���DУJ9���z�����k�����)�S%�p��9b7'�G� ώvz��.���p-�����Q�c�Z�&G& ��l��ñ#M�,��q�JoVTr�|�k��"�iG���@ 8I>�۹�>�� �1����m�a �[q���)ɡUV�b)�iK�3���F��S�$It��7.�-�1�*EJ��Ƞ��ne�zj� ����U�������/�X�C[�) 50r����=2`�шz�A��m�(!��:t����h�Jz��@��Ql/��a��*�x$�=�HQ�/r��פv�b���Edcu�{����6�hڑ��g��M���y�l�`#*�z!��s�4n*����e��=�ʠG��^�W{h��=xX!ޤu3�f�eB��}0?r��MYŃ�mrY ������{W��ɤQ�]�)-?�������C��d镌����%�2x=��DAd�LuedƓ�����(W�AT�_.��R��<"-u�+F�s�첥$��ST��&���%�6l�f��z� �?l�9����*.����^қ��r���է�pH�k]K Ve��#6'q#��YCw�:a+Y(K=V*�0[[��jq�f.�K�?l��M5z*��f����};���3�eF��eǔzB�����`9���j���FoW .�n�X4�$�(�R�*�d~(Q+�'Sl@��<Lb��xst����Gk����3|;gb�M�> ��?��}Giָ-ij��̭���Md�F��ƟDNd�%}尷h�i<,����`����3�#UuG���ki� Kve6�w���q/�O��a�fi�5cC���ު9Z�����X�&�.��柠����*�KN���5q�y�Z��:���/ي��V���۹~ˬ[,_�VIt7�����W�eTD#�;sf�Ͼ�r���i�:ep�Ɛ�A�=.���춿z��&�[aE��a��sQ!���x�,Y=9x=��/�l24H<g�֥����������@������Zq=���K��mA81�҇?�2�뉀)mJ�Jl�,�ՏE�b���A�n��9D���o�u���χ��{Q���=]^y�I�iւ��Qڏ��O�c�c��I-'��ik[��n[K�T����xɮ]&�ӷ��<>x�cs�<+S�x���e��lP �4N����=R���Xe��HO����m.�0r-䭩`��Ņ$�k8SVn��Ih (ObF.���{����m�9G"#a����_5\����\��'�a:5���]d���A����%�V���"U}U�WX�b�kfˉ|�[���[,uw�Y��#S���<$y7h��&�S���<9�m����sd�<�K���S��S��7�\<mhV��G�%�AdsE��m>��zp]w�l�\�$8�o�DkV��U�_���>:"��.���'��%��i��0Ϻr�Ъ��e:���5/�u����tߖ����M��"r8�(H��s��I������o�ܿ��:Xx��WUoRRʳ�FH�u�%�1(��nog�g�V��۟�'%�ء<�ᴅ���{O���I)����RPF|U���7���9��bUWbE_��P/�d�eި�� ���m���+W$����g�]z/��A�](ث��x�����Ќ����*���v��"l�a��A���Hv�[�� Z3ǹ�8[O��8�w�2N=}Z�����z��;��o&6/�'�k��nO�V�A�x�U� ���kr�V�M�#ü7!����"6����Y)�'�����?r�"g�lbq��.+�&�m��kfbW�G9:��U��+f4o#��/��"P��`��s ��=����z!��<^VܖƄlY�VI����8#_�K�G���Y3e��q�c];�����Qi�ui�aWϽ��8H$�v.Et��CK �Y��� �z��G���:G�Aج��>¢���>�b�1�n?�����v��Cޝrz�U�����)�5�����d�����p��$"��u�4���o�a�F��?���.�����d�^���ҙCj�ig�n�յcפ��.�?��wHm�g�3� Q��� ����T�ϣ���3%�Q6�4�����{ɽ&B��<���vD��-�I+#gT�����7�y�I��öi�,������)əi$�_�u�iǪ$C���`Z����o����w���G��oks��Tg��YR(T��233�q�tԷa}n��l������S��ڰ-i��3�;��V�K ��ڊ�v�v�=-@*~y��j��ifbW���D��b���}�i�i������������~���_��KJL89�s��?�r��9��6���O�ư��]�<��n啇�~����Wĵ�1A���D�)_CIk��6�-�Cv�4 �+�s?����^3����a�W��qZ��!�+������r�u�#�f�&؈@�_U!�4ŹK��KF!ť5<J`2G��2�txI�B�)�ά{�fJ� �탆<�e����̄��J��^þ��b���� 0N�UYD�V6ށ/�5�ݭ����u!`o�^(�Y~.�s_�ʵ�t�T� ��}�s���y�gJo�FX*�h� K�M�*�r���䠒!7�9�>�+?��7DP|�R�hw��/fa�R��`�w��U_�/��VZL�-<_��� ]��*7�ev4�C�����؛�>���e0��{�;�-t���� ��I{ڣ����=�� W��1��ѨiR�p<vy� FYY��ï�פ�WlYHs�����"bo37 ���ѥF��Y�N���AGR�M#�>\"~�H4���zE��n�&Z\}Q�'T���T��EK�1LC&�`d/��D��)ՠ\p��>�̧�`�<��&3�x�{��5��If@k�Ga�3���&,mI7->�,Ӛt�Ģ{Ҝj�.�˻����%)TԊ�#����o��X.�"TL/@[��0V��� T�K�;}1����2|k4|
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ