Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Target
GetHardwareID.exe
Size
4.6MB
MD5
5450073a2a1a622bf22f06f584612645
SHA1
d1b3cf71a98ab2675e34a47411bce73b9355579a
SHA256
7e1c2388f9dd9b7ec2dfdc1e5462eb436da7d61707a3e6c7b7abef6f39f267eb
SHA512
f43ff1b73431c7f207d020b4025a488f2b10e53a3f0459b9c87133fe297ef6cc4945e5912a8d1153a99d9b6243b1a599f66ecc7a023315234b7d6aae6ee10e8a
SSDEEP
98304:bwLWV3/F1OXFBg9IOOZXosoxptQtHwaA+iXs47dsDqYHeEvy+S1BLy:d3/TOX49I/4sQqtHwUiXFd+qYfGy
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
RegQueryValueExW
RegUnLoadKeyW
RegQueryValueExA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
CharNextW
SetClassLongPtrW
EnumDisplayMonitors
CharUpperBuffW
GetVersion
GetProcAddress
GetVersionExW
GetVersion
Sleep
LoadLibraryA
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
UnrealizeObject
VerQueryValueW
NetWkstaGetInfo
OleUninitialize
InitializeFlatSB
Shell_NotifyIconW
OpenPrinterW
GetDefaultPrinterW
WTSSendMessageW
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
�����K[O6�������uc�[`K�1{�dZ��,�W�4���Dn����"�"��<��ä�1L��o�]Z#�k �VSg��}gQ��!� u�`���ʺ2mG^ UFpU�4��$%h�q��FˮUcTךzf%�������\�H�RQ UV����Yeƨty=��wB;��٫���3�����"��B�ݨJ�4�8�K�_�b��ʘ�tM]�zU��Ax��m�Y@����V_��啩�:<6j��*���M�����`v8 �c����5� �^��b�yhے�����m��t������R�����%�`r�bw4��c<{Y0��}�D,�ȃ;���hU��ke�7��R]{� ���~���B�����?Mq�`c�tk]���yF�����(�������uD#��zfS�KH�$(3i�t�n�: �ƭw���K<3�N����y���+X1�5,ž\5�ں�=���q+���ad�<tu�i�k���,4D���n�= E:��4�%f[����6�<r����g6���bF(�+��+�����oC�kז�G���Y����܉ $#�xY1$m�yd ���.f@��&ל4J�R�Ts�.�ߌ�ΫR=��3qX��v��sWA�I���'��6�:-f��PEx�R,�4��s���� ���v�wv�Ӎb��KB;����hFA�t$Nq�&0�M>�ё� ������3B�����%�k�s�4ud����q�(7+�!a���$ GPqB�L���J:�Ǭkp�0�C@1��L���l�?κ�S0�?��9o�&�H���������(�\�8���Nw�H� $�۬�� ���d�����S�� ���<[j�Ni'0Gƣ�9k��ylӢ�[�1�K����/��J>��L�����dC�wh(���m5��g��g�f��9�?�9?�YUy!����aOoċ����6���aY#St�g���u�A.t�]��h�����x�tI�v ,'�5�$�|l��0?5p������|����I���y 8�W�!o�E.A!��@�y��Zd�R����7��g�ڡ��/�{���5��W���� �5��X��� �0V��)�;r�; H�3��G�݈���g�T��A<�� ��uVR��R�M��w��S�;�`9箤k�=����I��t�ZQ�~�J�-�lf�N��wU�1�献}�+��g�z�Weo��Λ�R]�Dm�N�\��~���ၝj����r�d2���蜹�r�:0@�+��ɤ-������l'h_xS�"o�0l�c�+K��W2��a�8d��?2���y�����|���p I0�Ϋf�M��[��`*[��8!W��n^�~��ųH(G��X����; % ]�{�J F�r�?t���G��z����Ә���ɐ��+������;���FWe���e����Ç���)hX�B�W������t�#�(���)���(]#$g_2?�'ܿj �v�X�uuj�!{�-ޭ'� �h��y4TBw��X�s�#���� �e��ò0d�5�P�ϣ��p�y�Z+�g:�+������BA%��4G�T�_�Җʁ.!�-�+<�ƹ䑶� 5';�%�mh28l�b}[3�o��PYn�'5y�c̼���I�U5U�I�ڌ�|�Ӄ^tP��zS��L�µ��`o(�5:��"�n҂����'Ћ�����UL�������7���J{�QR������V�v�ȯ��4�ik��~����J�M�3'" �!k��ۺ^lX��FO����0��\<�^wH�����C��G��x��I�� �~"�N)��\ב��[<�'����$�D���e��%8��,l��q�l�`f,�&w�Y��<���������^�\$y����OD-��B�ٙ*�[���UzHk{J���t�*2�/rby�]>@�`�PP(�tv�@�x(�ɝ��r�r�f�^��y����" ʥ�/%�ڈ�RE+uB0.ێd~�ӳ�^ �Z��5��N;�4��5ޘ��ک�Qɛ�k���j4x��B�c"3)�K�gY!���n�:��u�mͧ�o���K�?��\%���4_�}�K\����E�<l�� �Ȑ�k['l�r���Igq�����G w��J��o"[�@!_3�k1�����a� :S eu���H\���jw�>]�yY���}�`f�����i`�|��Q��Fme���O���]�>b'����`���#���C8�g)��KY�V��K��[�9ד�'a�{,l�ެ�D�e�Z�%Z͏=�=u5��PZiO�H�X�L�^(|�Lu�,}��|�� Nm�z�Z9�Q:7-�2�wQ{>�� tSA[�T�8���Sq�S���^v��\�5����Ha���ֹI*�������]��Ì߳e� �6ӳ3$,(�+ ��q�r���M��3#����N������R���-J4a>��+B��`�O��� XN�Y��&��t�Pǔ ���gͻ�m�-�W�MG�>�˦�{���r���#m��b������ڢ��S��ж�w����z=��7,��R�0Ac���&�����+Έ+���'�MX������D����@��k� 0��? ]\�>����[s0���$Z�K�V��e�s:���,���&Q���Q��Y>��U��m�����r�1ݚ��b&K��:� �A;�H���軥P7�q�yY㭢�x���� U�?����c�dG{[G��;-�b���4>��w�!��{�p��D��p`���{=dYRG\O�ɋF �A����8������vh��/t�OV����Ƶ�9��CL/���8h��ܗza��K�=���{> �PV�;�8�m#��-⠏���V��SVNޥ)��,���9������iyB� }<���`U�9F��=����Z�]�B�B��q�@��f�'�n��@�_����3k1*��ò�����v �̜�ta��&�Q�r�eL��!@���G�eH�V{p���bN7�H{�����q@�h�+&p��14�Q("�!�NU���=����06�:v�Ӷ'DF
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ