Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
5600ea4972512fa71e60637cb1776976.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5600ea4972512fa71e60637cb1776976.exe
Resource
win10v2004-20231215-en
Target
5600ea4972512fa71e60637cb1776976
Size
738KB
MD5
5600ea4972512fa71e60637cb1776976
SHA1
8ebbc23620ea72574dabfd9a8970a0a4fee62952
SHA256
239f8e3be6ed322a89f7e9fc83121b294794f12c6277e3874ef343b4b743b86d
SHA512
f0d024ad63992812d4578d24cbc5ca21ec0578296fc2a83a1547fe4e27732406f25f681af1cb67777b73694d3fc3fc28dc67d13481216050070d8512157dce2c
SSDEEP
12288:4lQnZrFxPoTIczhYbdxt8ECmidBBa/OnFU6mzQJBkYBcjp03:LZrT2NibdGd3We263kjp03
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
MonikerRelativePathTo
HICON_UserFree
CreateClassMoniker
HPALETTE_UserFree
WriteFmtUserTypeStg
IsValidIid
CoAllowSetForegroundWindow
HWND_UserSize
CoEnableCallCancellation
CoInitializeEx
UrlIsA
ColorAdjustLuma
DllGetVersion
StrRetToStrW
IntlStrEqWorkerA
AssocQueryStringByKeyW
SHEnumValueW
wnsprintfW
PathCompactPathA
PathRemoveBlanksA
SHRegOpenUSKeyA
PathIsSameRootW
SHOpenRegStreamA
SHSetValueW
PathCompactPathExA
StrFormatByteSize64A
SHRegEnumUSValueW
PathRenameExtensionW
SHRegQueryUSValueA
SHDeleteKeyA
ChooseFontW
PrintDlgExW
VarR8FromCy
DllGetClassObject
OleCreatePictureIndirect
VarUI1FromUI2
VarI4FromDate
VarI2FromDisp
VarDecFromI4
VarFormatDateTime
BstrFromVector
SysReAllocStringLen
VariantInit
VarI2FromI4
SafeArraySetIID
VarUI2FromDate
VarBstrFromI2
VarCyFromUI4
VarDateFromUdate
VarAnd
VARIANT_UserMarshal
VarUI1FromUI8
VarI1FromUI4
VarDecFromR4
SHAppBarMessage
DragQueryFileAorW
ShellAboutA
StrRStrW
OpenAs_RunDLLW
SHGetDataFromIDListW
DllCanUnloadNow
SHGetIconOverlayIndexW
FindExecutableA
SHCreateDirectoryExW
PrintersGetCommand_RunDLLW
SHEnumerateUnreadMailAccountsW
StrCmpNIA
EnumServicesStatusExW
UninstallApplication
GetTrusteeTypeA
EngAssociateSurface
DeleteDC
CreatePolygonRgn
PolyBezierTo
GdiConsoleTextOut
GetFontResourceInfoW
WTSEnumerateProcessesA
WTSSetSessionInformationA
WTSSendMessageA
WTSFreeMemory
WTSSendMessageW
WTSQuerySessionInformationA
WTSVirtualChannelWrite
WTSWaitSystemEvent
WTSVirtualChannelPurgeOutput
WTSEnumerateServersA
WTSOpenServerW
WTSDisconnectSession
ImageList_GetImageRect
CreateStatusWindowA
InitCommonControlsEx
ImageList_SetDragCursorImage
GetEffectiveClientRect
ImageList_LoadImageW
ImageList_Copy
CreatePropertySheetPageW
InitializeFlatSB
FlatSB_GetScrollProp
ImageList_SetBkColor
CreatePropertySheetPage
PropertySheetW
DestroyPropertySheetPage
ImageList_GetImageCount
ImageList_DragShowNolock
ImageList_ReplaceIcon
ImageList_AddIcon
GetCurrentThread
GetACP
LZCopy
OpenJobObjectA
LZRead
LoadResource
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
AnyPopup
SetWindowsHookExW
�(&jM�-)Q�?J���:Nzϲ��9�@�$�IN�U��s��d�ɜ�ol���56` �����N-������G��M_Я� ���k�6F�Z;N�>B�M��ps���YP)�H�c�0�����&���an(���M8.���a���K�������l�l�cy���*�m�G��5�ᢙF���J���HE��,RaP!�+���� w[���N��� �mR�y $���R���c�{�;S?�v,��-��W��L9Y�po��R�2�Md��D�I�)B�y-g��#r{�,=8�b)�`�ie�}��� �T�EҲ��KO ����H.���wYƤ+�r��DQ�JL�'(�����Y�5�æ�g͆E�#�����E�B]��|��@���r���&2���p�*=��s��=������� &R�[��������lܣ'&Ǡ0���z��C���a5s�kj��D�O����L���ʖ˓go�}��a���'���F�j�������xSb��O<�?l�ޤ ӽ��T�V�_��}�a_W�9�uŞF��}���Mb�y��歋����u ��%�6�/� ��<��E%H�r�zRk�6H������+�'��`%����4L�-���z|F)���W����������!?�� ���z�0�5m7����� n �{���꽞T;bכ�ͅ�>���t�~���~�q?Xt�����1"o � AO����"��6�!�|Og���u�m�k��K�e� h2d��|��^�p�w��U�{c���re���3�DF�{�2���b�p�Jγ?����w7�O jr��3sx�}j�~rz���=u��9�2Mo�a��j�hR��Q��7#���F,�αh-��+�|KW)�K^8:z�e.u���6Eq�����T�)�<�<;����ϭ�i}4*����q"��L0b?R�C�F+G�)�{!$��(�:�Eq��-��k�� ��G�SΙ��%�3�i�&�S_b���Z?�1��c�[6ony�eժ�x ��J6L�TsyΕ�Ӫ}�� ��U{���+���jF!�یH��A�������o�]i�{��\!��ir���VX���=v<b��#�y��U�ŰA֑��=1�Kf�3���V}"ī��t$NJ8�;�q��h���)�-y�) ��WԾ��|HUb�����&��,��M�HG��d�+J�� I&��A�!���r4\aw��N�Г��y���ƀv���4?8��R�j�:�&����M�ܦ��G�ƒa[}���ԝXW���T�6[���6�զd������N��E`��e�������v����?CJ#�� �E<�}\��>����M�_�t�����������_6�w ���u��C�Zv+����"kZSEF<"_��?{���.��l�0VA���9���ް�1Lq7a���ǟ3��^=?5�������Y���^$)v�"���m8ץ�-0,�戼�YN�;��zr�m�Zg�%�Yo���&��d�j�DER�ͪ�Sd&�Ux�����S�4����KM���L������o��Wl�L�}bA� �(cE�Ys��o2�,Z���Tt�~��-�a��횖���H1�G���H �4$�;�|�k��UM��P+���X����~���$�O����s�87lX&D���1�Gv=O��?b���U�q�:@=J쁃<�'��v�<Fl����:��c$2$/4�V�_� ��9�@�e�<i♢�m�w���j��Z�n��:M���*w���.%�K������S� =gE$ɲ�pp[v@��!��n4:�d����ÚO ��a��?�mTq�Z�&�����U�j(��C�1������, ���xX�~���{�?�x5�+����/��� ��d��ۤ� g�kU��>=�R�+��i� N�d�_v���2�|�镁0�:�b�q[-ҢμQK��߭�Q,ɉTJ �Wǝ�����swꃝu��nSPg�����%���z�D$J~��1 ѮfYH�ʶe0��7.e��R�O:O3�U��4��K����U�G�2�nub5����B�l�ҭ���PA�������^yꮎQ��2[�*��;��~Cc�O;G57�ɼ��W+SbS�)E*�\?mc�wKR���Z�נ��]v�.�#ݞh�_r��_L3���fg��Z �Y5���gL�Z��3A_��~"�ܓ4��T�5���.��T��{w-"�l�)��JuR<Le�{���˜WY�ܣn�� ����)H�h��9F�j��)W �JP��n�z�8�2�����P���c�gf:��,xjC��A�_�8Vp����<��{����@��V*)��|�F�ž�������i��̈qj�c�����ش��"K���w�K���/=i�(�{�|�����>�%�፠��)�vH��*1��k��BH����j���oDV�W뒗�Wȧ��Y3��t3��M_Jo2�U�O������7]f�L�p���ų0,'͎��s��W�(G�^p���?*��{�Ѵ���q�� �~91T�WG��x��(�H��H~� '1������Q��6� ��[ޗY>WN��gi��EL��gfK&��[��/`��h!����v�_�9�O�O�ouaC0�,U�>��g�1ڵg�>W�q��� ��$����I� (��͞�>xz�8�%��$z����JQM��� �m�:ɧ'��<r��3zq��l�F������9�ʥ�)?�jw�9��ZD��&)��m�c,2��y@��+~�k�'d��/�6H�)�%���h Y&J}�.Cy�Ǐ��jM���yf��e���v��XƠ�<e\��ke��rA�2Ԣ`U��T��_�Av<V���S\����z�z���:���X5�$/����5���,���}d���r��*G�9�����@�{X��'�~'��5��Z���YK9p�Yi[G#*��.F�矲X!Js>�IM*�rv5A�@�Mg!�;�L�XŹH��|���h@y��3�/��|�pw-�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ