Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
tpl4x2xfgo.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
tpl4x2xfgo.exe
Resource
win10v2004-20231215-en
Target
tpl4x2xfgo.exe
Size
18.3MB
MD5
fb46f82c2f7e88be5a60cb176e368bd0
SHA1
e1434d38683882528aa23d9d33eb337c8a8e4693
SHA256
ee533c25e3051e54093f35aa1329df415b0c9e2f0e5fa819a803937364d038c4
SHA512
0a99b92cb32582afb7cc0e643177b29d148915da56da704b9da101896d2907d01ba4821a2a1414db9b9a9cf0c410a15d5b374a949c29f2c94d1972c42af1f398
SSDEEP
393216:5Bv8/FZylna+Ss7Kie+ikOzceXkJk6ZE2XUKbTSblYSL4h0jmg8qsOtV:5l8/FmnJu3kGCkkfXvbSYC4hP
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
gethostname
CryptDecodeObjectEx
GetFileAttributesExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
MessageBoxA
CharUpperBuffW
EnumServicesStatusA
ShellExecuteA
CoUninitialize
VariantClear
GetAdaptersInfo
RtlInitUnicodeString
CreateDXGIFactory
SnmpUtilMemAlloc
SetupDiDestroyDeviceInfoList
Direct3DCreate9
D3DXCreateTextureFromFileInMemory
ImmSetCompositionWindow
BCryptGenRandom
??0Assembler@asmjit@@QAE@PAURuntime@1@@Z
??0CodeGen@asmjit@@QAE@PAURuntime@1@@Z
??0HostRuntime@asmjit@@QAE@XZ
??0JitRuntime@asmjit@@QAE@XZ
??0Runtime@asmjit@@QAE@XZ
??0StaticRuntime@asmjit@@QAE@PAXI@Z
??0VMemMgr@asmjit@@QAE@PAX@Z
??0X86Assembler@asmjit@@QAE@PAURuntime@1@I@Z
??0Zone@asmjit@@QAE@I@Z
??1Assembler@asmjit@@UAE@XZ
??1CodeGen@asmjit@@UAE@XZ
??1HostRuntime@asmjit@@UAE@XZ
??1JitRuntime@asmjit@@UAE@XZ
??1Runtime@asmjit@@UAE@XZ
??1StaticRuntime@asmjit@@UAE@XZ
??1VMemMgr@asmjit@@QAE@XZ
??1X86Assembler@asmjit@@UAE@XZ
??1Zone@asmjit@@QAE@XZ
??_FVMemMgr@asmjit@@QAEXXZ
?_alloc@Zone@asmjit@@QAEPAXI@Z
?_emit@X86Assembler@asmjit@@UAEIIABUOperand@2@000@Z
?_grow@Assembler@asmjit@@QAEII@Z
?_grow@PodVectorBase@asmjit@@IAEIII@Z
?_newLabel@Assembler@asmjit@@QAEIPAULabel@2@@Z
?_newLabelLink@Assembler@asmjit@@QAEPAULabelLink@2@XZ
?_nullData@PodVectorBase@asmjit@@2UPodVectorData@2@B
?_registerIndexedLabels@Assembler@asmjit@@QAEII@Z
?_relocCode@X86Assembler@asmjit@@UBEIPAX_K@Z
?_reserve@Assembler@asmjit@@QAEII@Z
?_reserve@PodVectorBase@asmjit@@IAEIII@Z
?_x86CondToCmovcc@asmjit@@3QBIB
?_x86CondToJcc@asmjit@@3QBIB
?_x86CondToSetcc@asmjit@@3QBIB
?_x86InstExtendedInfo@asmjit@@3QBUX86InstExtendedInfo@1@B
?_x86InstInfo@asmjit@@3QBUX86InstInfo@1@B
?_x86ReverseCond@asmjit@@3QBIB
?add@JitRuntime@asmjit@@UAEIPAPAXPAUAssembler@2@@Z
?add@StaticRuntime@asmjit@@UAEIPAPAXPAUAssembler@2@@Z
?align@X86Assembler@asmjit@@UAEIII@Z
?alloc@VMemMgr@asmjit@@QAEPAXII@Z
?alloc@VMemUtil@asmjit@@SAPAXIPAII@Z
?allocProcessMemory@VMemUtil@asmjit@@SAPAXPAXIPAII@Z
?allocZeroed@Zone@asmjit@@QAEPAXI@Z
?bind@Assembler@asmjit@@UAEIABULabel@2@@Z
?callCpuId@X86CpuUtil@asmjit@@SAXIIPATX86CpuId@2@@Z
?detect@X86CpuUtil@asmjit@@SAXPAUX86CpuInfo@2@@Z
?detectHwThreadsCount@CpuInfo@asmjit@@SAIXZ
?dup@Zone@asmjit@@QAEPAXPBXI@Z
?embed@Assembler@asmjit@@UAEIPBXI@Z
?embedLabel@X86Assembler@asmjit@@QAEIABULabel@2@@Z
?emit@Assembler@asmjit@@QAEII@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@00@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@00H@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@00_K@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@0@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@0H@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@0_K@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@H@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@_K@Z
?emit@Assembler@asmjit@@QAEIIH@Z
?emit@Assembler@asmjit@@QAEII_K@Z
?flush@HostRuntime@asmjit@@UAEXPAXI@Z
?getCpuInfo@HostRuntime@asmjit@@UAEPBUCpuInfo@2@XZ
?getHost@CpuInfo@asmjit@@SAPBU12@XZ
?getPageGranularity@VMemUtil@asmjit@@SAIXZ
?getPageSize@VMemUtil@asmjit@@SAIXZ
?getStackAlignment@HostRuntime@asmjit@@UAEIXZ
?make@Assembler@asmjit@@UAEPAXXZ
?noOperand@asmjit@@3UOperand@1@B
?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KABUX86Reg@2@IHI@Z
?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KHI@Z
?release@JitRuntime@asmjit@@UAEIPAX@Z
?release@StaticRuntime@asmjit@@UAEIPAX@Z
?release@VMemMgr@asmjit@@QAEIPAX@Z
?release@VMemUtil@asmjit@@SAIPAXI@Z
?releaseProcessMemory@VMemUtil@asmjit@@SAIPAX0I@Z
?relocCode@Assembler@asmjit@@QBEIPAX_K@Z
?reset@Assembler@asmjit@@QAEX_N@Z
?reset@PodVectorBase@asmjit@@QAEX_N@Z
?reset@VMemMgr@asmjit@@QAEXXZ
?reset@Zone@asmjit@@QAEX_N@Z
?sdup@Zone@asmjit@@QAEPADPBD@Z
?setArch@X86Assembler@asmjit@@QAEII@Z
?setError@CodeGen@asmjit@@QAEIIPBD@Z
?setErrorHandler@CodeGen@asmjit@@QAEIPAUErrorHandler@2@@Z
?sformat@Zone@asmjit@@QAAPADPBDZZ
?shrink@VMemMgr@asmjit@@QAEIPAXI@Z
?x86RegData@asmjit@@3UX86RegData@1@B
��{��W�.��q�+kHG��ɏE !�EdB�S ��)I�|��-V�]�>�om�ͽ��������cL E�?���7��� ��z5RP�t�?�by����XEȆL͛ ����X���m��G��ŋ�e�N"���0���Dv)YC`櫳)�%��4�����Z��tR)��-�.�_�u�8v��;�v^��S>D��I��d=�㑠��G����W��U�u7v��x���D�\9��R�����Ad�%0Kh�+@F|s1���9c�;��N3WI�)�#������E����g(S<"����Fm fH]R�V�ԩ���>tYG�T��X�n�8�[����y(<�\��p�*����R#���J8ߤ����w�MD[���-���tG8/j��D���UY�k�m'#?$�DJ���[r����w/����pEos)�'��I,p�)K�o���+�%橠,XM&F)����*�L�������hg���Bc�B��c�����`5Hz����¿*X �Ѝ�w��0��ڜp�l���E_��c�|��1ڋ�� vTe �:vX��[�ͳ�G����t�r�M�.}Ë}���XL�� `�V����ƛ0����Z��>����=A��C8*0������#p�̿��G�������1�ᆾ�J��#�{���e�Stn�Q��^���|B��i�|�W�k��?5�1�"�Uu$g�2T�ʸ"_N)���D�ٚH����J�p��x}*^����ey�wi�,�*��2:7bx'����@zʮ�s��k���w4�����b��l�.9�/I5��<JS1�iatc?8"J���q]5�aM�U��Z��]~��R.�Ա����zG���Jb¬�3������|����cFZ�B�\�M˥ �n�u,,�@<Q�2�i��O����R��Fe����� �!�~EE�l��0[�V�6��s�x2D�H��Tka�T��,B ��g_�� p�:��,:��H?�φ��x�Z����!����`� �zR{B�5�J�����r.�²�W5Ӈ�d8��t���̎t���>�� [h�*�2r%U=��rnѢq��� |�Hzr��Wk�U�Ua�R��HD�z��XR��D���:��Q㠽��=��������he��!�k�E.<��7DQ�w3n�(p��E�c#��3=Ň�m�]3����d�_5��b�������b/^�x�a�s cHHc�] '�Z�y[�y�D����DŬ3��J��c�UA������A���J�����ɒ���T�F��ƛ���)�/�T@Azɫ��lAu�@���O�tt�g>D]��ƌg�5��GGCY:���7)�k����%T���A�O%]����=�U"#������g��t �����ˮOY�ί�rx֭3<�b*ܿ B�}Yq��q�+C$}���2Y�30)�)��W��W'��;�F��hHƕjM��l�\=G[�h��W��t}o!�B��"�Zxo�t������7�^��(/��<�"Rl�-�{~�R�%z6���Ǐ v�� ��w�����0��9V���Z�m�9MǍ�wYn�[GVX�����vU2|O��n���ij�����ʠ�xu^���K^�N�U����-n���Q�GR�nX�+j�V��pN�n�)�}�����N�v��X��;E�2R���$��]9;��� �ߎ� |,�FR^���?�:V'~/�;��t ��t�l�Q:&xL|�cUEۼ$Ղd�!ݍ�w�'���������v��J�)����^��s�oC|�g\7?�:��uVU�0����W*��{�eQ�.���h�B7ZsD\$�M�5\�f�8=@�QǾ"�~��77�x��^�� q�Z�6��,���t��Uh�����J�P�t��M:Ö�yy˵��aq���z<�0�{z6j�{�X��C���$p*ݱ��((�Ot��}�������na|y\!�ЦO�I �Ey5Ԛ7W|� c��ԧ��WS鶑1,�7�ie�*�XY1�x)���CCwWDR������`��j �2��.�qB�II�Sm7��Bͺ7��7��4����n?�'%|2�Q?LZ,0�0�W1��i�gBq%��h�{�_�m}��z.Т^@+cS5�H�֟��#���`w`����i��5��'�/@�i�77� �LN_�����I�e��_G���X���Sϗ���ò����z���1�.Ԁ�U���u���d�T��ٵ7�������.3��%��u-�Q��̓�0�6ސ�]Ti���y���sa9�a,z�zʽ�ϲ�T'G9Nh}��� �����]�Ҝk�͛�P�K5����N��{��:�^��o���Qn��'�W���"���J`{ۈ�U��У2{W�Cq�L��G� ��E��sv2��'��mPa�r���yZ�8�P���Ї����F!ÿ�QW�>���v��L���;��N�u Xozg����z�QЂ��4 ��n��-�^m<_��4�BX[v*����4�Ŧ*��\(��S2a�S�q>���a쭰^UA����qg�ذ.0ڡ;��<��EJ�#��N���(ɛ��f�B����5���v�+T���.��FԔ�,���G)~���y,����M�T��4}���O�Tݪ��=�p���{ͭp (`X� ) �@����Ӵn���r�)>��5����lg������T*�/� �V$J}�d�L�K��Lg�+� ���2�o���4B��I{����8T����ZZg�)�� �so.k�w���R��`����ga�������8��V8%�e^�q�"Ӹ�����X��i���֫0�>,���V��]�u2F�x�#�b�j�!4�L!���c�R�#�΅:J��ndb�Mk���Ե���䴂U�og@�b[�S�'c�@��4#ZT=&G�[^g���(��@�o hS�d.rIz.���>ӲN�y���O/�'$���Ak���q�b��lP�ॶ8�Z&��� TZő���NH_�˓e��D>��eʖ�˷��6]�؍h���8��K=��\���nv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ