Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ba79eeb70d649e5abe266df7f05d789b.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ba79eeb70d649e5abe266df7f05d789b.exe
Resource
win10v2004-20240226-en
Target
ba79eeb70d649e5abe266df7f05d789b
Size
739KB
MD5
ba79eeb70d649e5abe266df7f05d789b
SHA1
0c5b383e05d51ce6bc0441294f9f6de79aeb4e2d
SHA256
2379e5cbf61f8f7dd27f288c4ade70284a52bf72743bbdc5428999ecf5b7eca8
SHA512
1348e69e4e84c564a7bf16ab6fb4d77a1e848f7cd0a9501b5e0c4cca3d4fc7e623cd3984ff4c36329e37db2b46e44c5fd5185fd5d5b9857651507b0968fd45df
SSDEEP
12288:mOARfjYY2Y1+SmYdRUR4Z/+ZkWXyKn/zhZ2fe0qYrB3bM0N:mJEIGC+ZkWHv2fYy3bM0N
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PathRenameExtensionW
StrCmpNIW
SHRegEnumUSValueA
PathIsDirectoryEmptyW
PathUnExpandEnvStringsA
SHRegGetUSValueW
GetOpenFileNameW
GetFileTitleA
GetOpenFileNameA
dwOKSubclass
VarI1FromDec
LHashValOfNameSys
OleCreatePropertyFrameIndirect
GetAltMonthNames
VarI1FromDate
SafeArrayAllocDescriptorEx
VarUI4FromR8
VarR4FromI2
VarBoolFromR8
VarDateFromDec
VarDateFromI1
VarI4FromCy
SafeArrayCopy
VarUI1FromUI8
VarUI4FromI8
VarUI4FromR4
VarBstrCmp
VarBoolFromStr
VarDecNeg
SafeArrayGetVartype
SetJobW
GetJobA
EnumPrintersA
AddFormA
DeviceCapabilities
OpenPrinterW
AddPrintProvidorA
DeviceCapabilitiesW
GetPrinterDriverDirectoryW
ClosePrinter
DeletePrinterIC
EnumPrinterDriversA
GetFormA
EnumPrinterDriversW
SetPrinterDataExW
AbortPrinter
CreatePatternBrush
DeviceCapabilitiesExW
PtInRegion
PolyBezier
GetTextAlign
CreateFontIndirectExA
GetObjectW
GetKerningPairs
CreateHatchBrush
GetCharWidthInfo
SetPixelV
GetCharWidth32A
GetTextExtentExPointA
GetTextExtentExPointI
GdiEndPageEMF
GdiReleaseDC
VerFindFileA
GetFileVersionInfoSizeA
WSAAsyncGetHostByName
WSASendDisconnect
WSARecv
WSCDeinstallProvider
WSCUpdateProvider
WSAInstallServiceClassW
WSCWriteProviderOrder
WSCEnumProtocols
WSAGetOverlappedResult
gethostbyname
getsockopt
closesocket
WSAEnumNetworkEvents
recvfrom
WSASetServiceW
WSASocketW
WSCInstallProvider
WSARecvDisconnect
ImageList_GetDragImage
FlatSB_GetScrollPos
ImageList_Duplicate
PropertySheetW
ImageList_SetOverlayImage
ImageList_LoadImageW
CreateStatusWindowW
CreateMappedBitmap
ImageList_DragLeave
ImageList_AddMasked
FlatSB_SetScrollRange
CreatePropertySheetPageA
FlatSB_SetScrollPos
ImageList_SetIconSize
ImageList_GetImageRect
CreateToolhelp32Snapshot
AssignProcessToJobObject
GetVersion
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetMessageTime
SendMessageW
]:��ts�C�-d���g,���c�E����'��NA��#�`���ZL5��D���99Fw����D�')q}3������*{���!jR�ʸs��]�f��pAJ�"8��P8�����:ի/��3ז~c�n�I�,��` _[Զ�ކ����1��^ÊS�.�H7��{X��J:�=���*��X����P����+%U��$<�ʝ�Iq|�%���xP��1L�i ��\�� �=�Z�����e} &�������I�xѯIl��OwL��Ҫ~��w"��������-iM��⑨�}o��y��v�A)U�OgqCH6��SέG��)� M��A�jT��<�9k�r/PR��l�c�z�brU�mRZ;ɕ���Y&�y�OU�у����Xd�;q#���+�1;���k���(D�ZP�F8V�=X��M: ���n�+.B4�φ��}�y��?cB� ��NCV����1�ȟ���.^ �����Vo��z�F��p�{�C��p��1y�A��ۉ�V]ư�6]�o.��s۞0�O-�GwX���lCMe;ل�k f�v��ڍ��g�>���eT4�+EIϬ=PBJ����P�s�c����:�{�UHp���.��P&����ѐ���l�����m���a���S/$J5�,I{2u�1q�,˨L������DR���� 5���j�7����eUq�D��K����f��JB�1���{�!�$�����^��@ fu,OE̓M����-]�i�)+zb"[r5���= �?/ �����Ͽ��z{�6�z�����t����V4�^���$mc���N�T�W�r��6$��RDٹ��L��vV�Y�tE:��8�ږ�A�)۫ĵzԍ�XBT�3�ц7GM�ʄpN+c�cQنP{b��BJI��f���K)Q��8W{9X�D��G��2�=%�h�je�stO�i����ibe*��f~��s��}3�S`�!�[N�uQ~�;p���3��GԎ�{"npЯM-b�1�B��WwS�e�Z��)���J-���]����Y���LaI�2C��]���'���䔽�ό �d��%d��5�1.�L�\�]D��}%�{��w��Yqn��F�-[)Ě�d����˃�Հ�n�cT��a��}��~%<���:s��̆$��kC"x������sI�v���E���F�v�7�z#� V�i'�z�9�H7(�K`!|H���d�l+�<S���n�[{��+��W�%;o�[R� H����G�Ǐ���v��:8�\�������T-��R�b;?��ơ����3۩� �K2ѵYK!J x҈��`h�M]�nK��^?k�n��LW�&Z69� HmV��ؔJy�i������2�Û�:�d��(7o0�0�����|#�:Zۂΐe�S�����и߰��ϳ�� ��H�mO{��\�iBC���x�ul'f�͏ν ���Ӻ4�c&��+1u��F8[�+E��pkP������_R�(#& �?j�"K��n!�d�����VnH��ܻ5��YB�\�U�Q���R� mJ�&��1s/�H���)�5r��4o�,�ݷ7�w�[ �j�x�z��Ҕ�-�2WmhC�7���$�)�������d�� %l�t�#��hs{z���N4g)�]�s�����nUUJ����~|��.���_�4�t� � F��>�2�g@��i�`9����b�dW��X#ࠞs��������@YIP{�WxUܠw-�b2/ïPu���s�c��;���k��˩�-wg�fm��s����SS��=�\ɪX���S����p ��vP|2�9�@ \"����'U�Y��7̸�o�EA�K�rI� �S7�I̔���f^+�v ��J\���2���7Qyiv��Q�chu��&��ﮏh�U7�l�qh�����@cF�9���|c�yr|���[�@��;�$�@y05?���;�1�(��0tџݭ���@6x���r^��A#��A��;���.��'����-�S�&�^��v��?t�}Op���©j��-�@��'����@E,�h���p3J�bv�Y�6��(W!�͙��օ�~�Ǎ���Z�B��Cger�v>/{Wpx@�D<d�a���P�̚˰�務����,[aIUxqw�v=������a�m��R�R�#��7߈��9`�� �q�_bW�U�J��)�2#�BѺ�������R�3��T��O�� �6|��K�͏� ���x����5c���{ϳN�\�~�/V+��U��K~U{���U6�A�:�l��vru�tn��S���Gcz��������먪Y���u���Hz��m��Ͻ�0�W���'�\��e4�ZY� �w��J���-����=_���S�\ԍ�IXZ�aӵo ��?�p���>.R�?�j�ZnOy����ka�����-�أ��,$����韩��|h�M�8I8:�nx�����Gq4��X=#6�ߓ�w�A_�5��ˋF^�����8/'W�>�9>G4˒C���c�Rk̜�*�,��'8R��RU�+q�9&�]kk�s��yDnQ+3 6RFx��� m{�Ӎ��q��>\.P�Vh���e�����~�ϵr�!E�xO��q���Y���01J�160yz��!���i�������]�5N���P���X}�7t�s���#��5j�&�b�i?F2� ����Lfu��}3��<��]��o8#j�n���5��e7�N2^���ps�/1Bc���4 �X�a�`��U��!lV�cwɰ���G�����,y�����9��F����pn$v�`ctʥ��B>% �Hk� �rM8|�,����6�7�Ge�^b��M@�_���#��f��=t��,���/yW��~�7uWQU&?���_�Bi��b��Lh�;rg]k�Pށ�BC 6{�!¢��:�"�@N�"���?�9z֯��ݙ�>]��b5�Eq�Xm��&v�����>���TqD1ެ�s�W0����@��NQX`+KiۖH��m�s�śT
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ