Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
NX_PRNMANS.exe
Resource
win7-20231215-en
Target
NX_PRNMANS.EXE
Size
30.5MB
MD5
19c2decfa7271fa30e48d4750c1d18c1
SHA1
e6be97ca9e79b45c671c6531908f70b353d47994
SHA256
6eebb5ed0d0b5553e40a7b1ad739589709d077aab4cbea1c64713c48ce9c96f9
SHA512
60006e8c8a6570559def752b811e04e6dd94e038b4d2381a7682530763bb2afeb1bda363ce60fe19c569c9143642bdda5bb319c254e8164e14847d7fe5892e19
SSDEEP
786432:voXlUdC4EtYuQ56BDoESp6EUoUJwZkIsqN8:uUo4ruQWDojQotTsZ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
CloseHandle
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
WTSSendMessageW
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
i�AA�M��G~�8>���V��MQ�ߕ�ƊJ%Jg�M��k.X�+ȯP�m͜R�����n��g��ԓD��gݢ8{�f3i��߾>4��,s=mKX�W�OV<(���r�(|��D!�T�ο���M�V[�NV#`�O� �6�q߁��m[5σ�{ot�r˟�R�ٍ(2�<cz��a�zN�LFp��6i��pa����S�T�Zt?ѸsB7e�\<�G �>O��X�U������}�ǎ��� �?F�]soA���`�2�c�q�6[�oWo�!r#�h�z�_����Ԧ!��tHB�π�"^_J]���~��!z� ����̝a��� �A!�WM�9��e�Kh*�1��➄��q� P鮻bD����yԺ���y��Az�8���^J�#�~`n�F��o�X*u��Rj*�,y���h#��Oz�K���^��\�e�_,����`"�,zqBeS�}��P��߯��j�'�0�ˢT���ƧPN2�˔}�˖m���~k�(?W��>���o��,�J���Ff�DH�~�Z��vu3E��喼)t�t�$�a�Ncv�]������ �~�n�c ����>J�{� �@Vx�SH�NV�mw䖁2���^e��!ONDLb��9�l�$��$f;D��?��������n�B���V*�����q�X�妧�S���a!��c#��^m��gW������� �m=�SW�~V3��>ݙ$���m�n ӆL� #�~y���V����>�;�mS�_�����U�/�W�k�}�'e�����6k6$o�2~W������$�+r��bF���8{�5�A��4E��5mg�q�B8߶>�^S����e,\��!��?�շ#�49����ir�:�,��Lp�Mq��h��5r-����TX�t�?�ri�4b"h/W�e���>[�=CCiu�K$����- �%2��i�O�`�L�r��t�k��"��=�e�1B�|�p?yf��ZRQ3[�e�@�J����2���tW��P���{Z���0�����A��ޕ��CS�h)��O��0:*�]�k�F�� ���A��uf�]d��L�S��сӷ�6��Z�L���<n��q�����r��C]h����6Z���c���� .����y��!|%(������\��� 5�V�0Y�L�ˏn7L#du�=7��m1 $����}T�C��Q�H����o3 ��G�I��,�sS�ծk�(��<P52�-H����UcL�<�ݞ�r��饛�K�� �s*�J��� }G�:V_N��_���"�X�pB[d�8atI����H���ŇIQ�?<���*Z;�%�.���4�Oz����s��]���Gb�����T�����r<���|2{9��P}��c�:�gs�g4w�+�=Pz��f3��HQ��p[|��y� j��*���Ku=9��*����S���1.`�$�%앹C���8�ʫ�(�1���ʞ� ���p���}vJ�s(1�ҹIdQKS��f�P(�]{_gd[K��ʟ���Fi�]�ƺ-~����2� ;�笅+h���cu�����j5�f�O�����cP,4Q����� u�4��.QSOT/�ƙ�r��մ��������C��߄:�b�V�`_�_�wJ�������ȴ���q��W9�O��K����j����yʠ�`��(�t8��:��x�������IC �_�Z�Lk� /PN�E�f�uޓ� ����V�+\/լ?��dS�I����mg��+�hU�"l��X6$��.���dt��;��U����FY8��3Vz�J� ��}���7s���xIbΕ��8�[ܺJ��^�8�v��DM��? w�U=������EȀn�����b3Ӂ����K:��#\��ճ���b�|,�M�p���m>-�^��ْ�}���C*bB�S�o���l���U���Jȹ[T���G�99��@�l�z����$;\��l��ʛ���Nr�W��J��:�*l���D<�D:�gÆ����D}�0�"J+���� >95WQ���5�wH��6/;���Pް�=t�\HȅDO!�{�9��NtU��Jx?mi��m�*e '��Jn���v�`^�-q2� �F|�r�+ęRp,�mxf�[tި�]"Om�� �á_,E�ڢ�����篸��M`�u�~=L��4��_�gs�~T���͛cz�|rR�tt*�:0��v��|����#[�\�:w&.�9;1!kRְbm��⪂<"x���t6ë��uq?呇��~m#�����֘�����I֩�%�衭�[�E������&�����e��}A���;�^��}|{O�Ͱ�p����댡�,c���1d��*�8���T�5��MΖ�/M�cX�J''��n�)�9eo��δ���ɇ��D�ʬ�<ew� �5��2����ߨj�^�_���OG��R���C��Τ�B���t�X��������Ÿ���KN�g�YԮE0L�Q��}�6"'N4A3M;��p���I��4YG@��*G����M�~�A���y��d �/�;6�^�o�wm�bԾ}J���X?�۾y����(��7d��&\eN2�e�d����B>���Fb���.��r���i�-��)ٗ�JƳu���FRk_�2io����[J�TO���q3�R܈H���V�n�( ��{�a��q�J!y�l�6�XJ�q���5��:p�N %��r�8[�o�[rJ_�_�m9R��$�L6r���� 3�}E0���z;lϕ2��:�#��B�/�'�t���y@a1yI��M^Hw'Vr"�L�֩� �%i5Op͖a�Rx�j�<}Ϩ"ݬU����D�B��;u�aP��&��pT3��h �:/����� Q���D�J�c��0S�z����I��X�b=���B����;< ��kn�o�@�+�U\n�=����@�q �_h�'�B �=���輖���=%XW�X���/���pM�O�P�MoBO�O�\p�ō��#�^�}`[ ��Q-1��cT�0h��D��]#&.p�Xn���zγ.���Hn'C� 3[��/��\n��ް�s� .X�3tXv@@���m%����
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ