Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
3e93e498af2bb5b07d45c86c5315aca6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3e93e498af2bb5b07d45c86c5315aca6.exe
Resource
win10v2004-20231215-en
Target
3e93e498af2bb5b07d45c86c5315aca6
Size
602KB
MD5
3e93e498af2bb5b07d45c86c5315aca6
SHA1
8552b3d35baee2393c4a488e504b75780d914379
SHA256
10d0b8a16bdbb0decb2b06af983546121cb0a083df70dab0c31f6efae6cf3b09
SHA512
c1a82d055fc09f598f755a0a93d32d6f51fb4d9d88e765b1638fec1185c19d7f60899fe60dc196b0b4af2d59f1f4be1857dc31cd0ebad527c80c97b1dbd2ea04
SSDEEP
6144:Y9isQOn60kjd5xQkF1PiL4kCZm1jxDUR7aN8RznQzsl15Ng44hyC3rnG5JFJ3DTm:Ysb/DbMNPfK35NkE5Rvd12KuA8MA
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
wvsprintfW
EditWndProc
ArrangeIconicWindows
LoadAcceleratorsA
wsprintfA
CreateIconIndirect
EndPaint
GetClassInfoW
GetWindowTextLengthW
ChangeDisplaySettingsW
SetDeskWallpaper
GetMenuItemRect
WinHelpW
GetKeyNameTextA
InvalidateRgn
EnumClipboardFormats
GetGUIThreadInfo
ScrollWindow
UpdateLayeredWindow
CreateIconFromResource
GetAncestor
DefWindowProcA
RemovePropA
CopyRect
SetMenuContextHelpId
GetRawInputDeviceInfoA
RegisterHotKey
DrawTextA
CharLowerA
DrawAnimatedRects
LockWorkStation
InsertMenuItemA
EqualRect
CharToOemBuffW
DestroyCursor
MapVirtualKeyA
SubtractRect
GetWindowTextA
GetWindowModuleFileNameA
SetClipboardData
LockWindowUpdate
GetClassLongA
BroadcastSystemMessageA
ShowScrollBar
IsCharUpperW
EnumWindowStationsW
SetKeyboardState
GetDialogBaseUnits
DrawMenuBar
SetClassLongW
AnimateWindow
SetWindowsHookW
GetGuiResources
RealGetWindowClassW
GetClientRect
CharPrevExA
GetCursorInfo
GetWindowTextLengthA
PaintDesktop
LoadKeyboardLayoutW
ShowStartGlass
EnumDesktopWindows
AlignRects
GetDCEx
RedrawWindow
SetCaretPos
GetWindowTextW
GetWindowWord
GetVersion
GetPrivateProfileStructW
InitAtomTable
GlobalMemoryStatusEx
AllocConsole
GetFileAttributesExW
SetEnvironmentVariableW
CallNamedPipeA
OpenSemaphoreW
Heap32First
FindResourceExA
HeapFree
GetNativeSystemInfo
MulDiv
SetFileApisToANSI
FindNextFileW
PrivCopyFileExW
GetProcessWorkingSetSize
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
TerminateThread
FatalAppExitW
GetFileInformationByHandle
EnumSystemLocalesW
ExitThread
QueueUserWorkItem
ReleaseMutex
GetStringTypeExW
GetConsoleFontInfo
ScrollConsoleScreenBufferA
SetInformationJobObject
GlobalFix
GetSystemTime
GetAtomNameW
GetHandleInformation
SetSystemTime
GlobalFree
MapViewOfFileEx
GetFileAttributesExA
RtlCaptureStackBackTrace
GetDefaultCommConfigA
ReadConsoleInputA
GetCommandLineA
TlsSetValue
ScrollConsoleScreenBufferW
SetThreadExecutionState
lstrcat
lstrcmp
WinExec
CreateDirectoryA
SetErrorMode
GetNumberOfConsoleInputEvents
PrepareTape
GetVolumeInformationA
RtlUnwind
RtlFillMemory
LZStart
GetACP
GetLastError
GetACP
WriteConsoleOutputCharacterA
UnregisterWait
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
AdvancedSetupDialog
SetPrinterDataExW
Q6�̕8\��X��i#��{�> ��]A��"(���*�paH(5nz��*C�Ɍ/��<��_2���=�ktQ֯l9i4fgh��kLZ_l`��d{�͖ż)��}�������5/|�<�i�C�C �xEǧ���e�f�뎽k�W������STf+�rAy�N�b vpV�y_�����;�� ⓼`�G�]5�k�=��;�]mi¼-o�E]��HB�?�V���x�P�:�c���jHf5S��;�C~JPpt���N�w������F^uk��s���)���.�9�c ���O�L$oQ\�A��#�͘�����0�o �0����H�ȊS�O���*��^бF�m�Z��0�]�4O[�4��\�+�й��=~���0��cV�g���~�)>�����w�I}�� ���L�v��ձQ,no�}8CvDGoWK1��(x�|�MXn��V3�=;�5r"|Zlr��S���Y�*�5�/r���/��J�{(�����qDV�ma���\O"��R0�_`�F.��O�����e,�M(7��2�na^r:>���\a�}g$��P��h�1�CJ{�5���',�W��>j0����?�`��u��_����\[�_�*9B�;bi.V}�$�48�sa��e�v�Q*�g�@�l���vD�ǻW/��$ը=@��W�1%PL�8�.yD�Pr�Y3�Ou�:|8�T]�9t���)NSx��2۹����� ���|=��p�9�2cB�[*�݇B$�od�E���3��mY�fB!����Q2��9x�%��;�s�E'���K��Y����P���F��A��G癥�I��5=�V��$��k��.�09Ⱦ 7�F�]Qwk���8!�qm:�Q\�s�3�_��2]fg-�4�dȋ�>ejzL��<v��\h!�e:��0m����^��nH8��C D��������w�K���=��5��W��A*쮀q*�u]n5�3-��=N�%jZ{]A�o�EP��"@9����E#sia��B_>m�?�(u�(1��� A{������/�!����1T��������I����Zd����&İQC�ڤ89c@!��*�_���H��?��Q����JKV9�� �e��S[�0|"K��ډnޥ��qA*/D�c<*3#j�� �h(���euYᗮ,���nQs��!��GU*9I���֦'#8+mBX��J2�C�����60���l�������$�no�Nե���]��E*�:��L���r��ۘ\ �O2;Z�gR�����]n;�vx�y�/2�>(ݦ2]Q%������b^�$��N/�H�]U�?�yB��>�S[�{���۰���3���ҹ�_� �BX�뽐��+�쓅����a��a�r�I�{w���4E.ܬ����_��ڣ dN����l���A��)�����\��Yu��z�s�*�t*��^���Ɂm�l�&0��> r0��jR?6�ev����c� ��5�bM ��r2�<��'�~]�XJ *�D��6���ҥ��(-8���;36�����Dkb^uxH�X�V���Q:#'����T�E{��p �;��7k�㟡��>��Э8���:R���"%��͘b��<�z��Np�8�80�0���+�Ka c�n���#���A����@�f�`ܠ�uQY���.PV��s YKbU?̺��nK��9֞�vQ�R�-�&�<̭�t�CA��`���1��f|��-b�nZdx�5����d�/�8N���N���mҞi?R�:�k��+TP��pbv��a�ƅ��7�P~ݓ��'�J�\���i��ATtj���֦!���Ē��ݎ�Ũ^q��,M�<'��s���`^D�"�{�>�2����R3���X�U!E�&��b��a�s�Un�����x\ԭ;�����]F��\�ߥ��b�)�G�y1odx�G(�{����cl$��{X�:֮��s ���m�LJ��:2hK�ű��_�e�yw=E�#��������oԇ��wB�F��27����H�J� w���Sf��ܾ03�� �I[B�%��a �#u'Z��<������y�Z�x�Ǽ�ח.|lu �I�Կ�b�%��)Кw�kMm�z��8��|-�����P���%I.�'6M��&X��wP4'�S�3�]��oc��<��6�/I��4l�3������!�2D�����4����Q�����-ȭ�`��p{�z�}�pc8N< ���� ix�)$�$|u��� *�� ��3=�T�� �z��,��l�|�ց����;�C��Zh��+�o�L�^nJj8kUu �4 ��^0�S����~7����i�� �|M��"�����(�!rQJ�s� ��é����E��C`��+iTcbL\A�|��Uhz��*�-P.�M>���z�J�_�O}DF���٣9�.�~��#���Aކ{+�D�T�q6C��9�iߍ�9�xA�/�-jF��`��'���E��#��\�3���:���ΜYd0vfԠk���_�q��&�;�j݈_p���R��-����(�5����15�j�P��q���F3��/'�M�Og�HO>�E:�^;[�h�&�1��=�β#b��Ӗ�sҜ�|��gu�1�CK)�)�W��5��5e� �(Z�жW+a���)��{;���*�9`뵔�S�O=u@5���,>�������Z���^y�P��X���fTE���x��K |j��f5y��8��5��c���3�~?�eC�3��� l̺?��c�� ���;b�,�l�<��/����v�y["Bv����̀�J��W�Ir^�j�G�j�*�&��!o���A�:���4Yw5� �e5��H3��a�-��k��q0� M�A\��؛$�Ql=�54��<-an���h�φ���Z$����R����L��_'i=~��V�ފ鳳_�����F��!.��e <87�^�;��^�.��Ul�{�i�t��4��g>]���)�qр-{���S�]�=���066� `R4��?8u�l�/Qr1!��<��|�sDb9��}�nu�Z�u���>�yհ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ