Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
c43f9c8a2161ca860f43e39151dc3891.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c43f9c8a2161ca860f43e39151dc3891.exe
Resource
win10v2004-20240226-en
Target
c43f9c8a2161ca860f43e39151dc3891
Size
695KB
MD5
c43f9c8a2161ca860f43e39151dc3891
SHA1
e85b0e2cafaff7ce36e2d992687a65d607029e02
SHA256
5079b6083c9bc0a463ebc24cf8df8d2012b89d80a02b2e38dc82d966db93c2d6
SHA512
84a99906c916223189c23895011632d24c9bfe7ac8c1a69b1d1c99a9c50851837f7414363f341bcd47ec2ce24558566a51fb0629d8b056f3420d382ab72e1f7c
SSDEEP
12288:+u09edC/Nq/vkkzojl/TBMB+zEJ3J1KFixkfNm2m0p:pookIwbO3J1KFiANml0p
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PathUndecorateA
SHRegCreateUSKeyW
StrCSpnW
UrlUnescapeA
PathIsFileSpecA
PathGetArgsA
StrRetToStrA
SHSetValueA
StrNCatA
PathRemoveBlanksW
UrlCompareW
PathIsDirectoryA
PathIsContentTypeW
StrToIntA
CoRevokeMallocSpy
CoFileTimeNow
IsEqualGUID
StgOpenPropStg
OleQueryCreateFromData
ChooseColorA
ChooseFontA
ReplaceTextW
PrintDlgExW
WantArrows
LoadAlterBitmap
ChooseFontW
FindTextA
SafeArrayAllocDescriptorEx
VarCyInt
VarR4FromUI4
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDList
SHPathPrepareForWriteW
StrRChrA
StrRChrW
ShellExecuteEx
SHGetPathFromIDListA
PrintersGetCommand_RunDLLW
SHFreeNameMappings
DocumentPropertiesA
QueryRemoteFonts
QueryColorProfile
DeletePortW
WaitForPrinterChange
FlushPrinter
DeviceMode
PerfCollect
EnumJobsW
PerfOpen
GetSpoolFileHandle
AbortPrinter
DeletePrinterIC
SetPortA
WmiQueryAllDataMultipleA
TreeResetNamedSecurityInfoW
SaferiChangeRegistryScope
GetTrusteeFormW
LsaQueryTrustedDomainInfoByName
CryptEnumProvidersA
CredUnmarshalCredentialA
CryptHashData
LsaSetInformationPolicy
StartTraceW
LsaGetSystemAccessAccount
GetServiceKeyNameA
RegEnumValueA
RegisterEventSourceW
WmiQueryAllDataW
GdiStartPageEMF
GetCharWidthI
GdiConvertPalette
STROBJ_bEnumPositionsOnly
GetTextCharsetInfo
CreateMetaFileW
GetTextExtentExPointA
FlattenPath
GetTextExtentPointW
EnumFontFamiliesW
GetFontLanguageInfo
GetEUDCTimeStampExW
ExtEscape
PtVisible
MaskBlt
CopyMetaFileA
GetCharWidthW
UnrealizeObject
GetPixel
CreateDCW
GetClipRgn
EngDeleteSurface
VerFindFileW
VerQueryValueW
VerLanguageNameW
VerLanguageNameA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerFindFileA
VerQueryValueA
VerInstallFileW
WTSSendMessageW
WTSLogoffSession
WTSUnRegisterSessionNotification
WTSSetSessionInformationW
WTSRegisterSessionNotification
WTSEnumerateServersA
WTSEnumerateServersW
WTSOpenServerW
WTSEnumerateProcessesW
WTSShutdownSystem
WTSCloseServer
WTSVirtualChannelPurgeInput
WSARecvFrom
WSACloseEvent
shutdown
WSCUnInstallNameSpace
WSCUpdateProvider
WSALookupServiceNextA
WSANSPIoctl
WSAUnhookBlockingHook
WSACancelBlockingCall
WSAGetLastError
getaddrinfo
WSCDeinstallProvider
socket
WSAEnumProtocolsA
getservbyname
WSAEnumNameSpaceProvidersW
gethostname
WSAGetServiceClassInfoA
getsockname
getnameinfo
GetEffectiveClientRect
ImageList_Destroy
LBItemFromPt
FlatSB_ShowScrollBar
ImageList_SetIconSize
ImageList_GetIcon
ImageList_Create
UninitializeFlatSB
ImageList_LoadImage
CreateToolbarEx
PropertySheetA
MenuHelp
ImageList_GetImageRect
ImageList_Read
ImageList_SetFlags
InitializeFlatSB
ImageList_DragEnter
ImageList_Duplicate
CreateToolhelp32Snapshot
GetTickCount
GetVersion
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
��� 2' R�z����C���a�� -g4��N��������<��L��ك �O]p�D�N�Z�E��d���n� w�D �9O��B��+�N���D��= B�]�� F�ʬ�a%�� ��F���P O`��1_ʈ�X�Ζ�b�N�Z�l��" u��?A��`D��a�@u��q��Zr@;9��@6��;�z��'WL-t!8�`�������O�W1�K�Dӥ�6�Әw�j|�<�Z�:����Jeb4�p����*�}�t��@Q�-��8ݢ����v��PGv�lň��s~ߕ>P�C�$t���V���QO��KSglNHe�� ����.X���X��6�FnLęP�p]�0g�u��h �`���i�C�(&5J]E�K�P�aTu�I���@������� 3y"<uӃ����H��{��K���]E�$����m�EA7��}55L+��Z�e�����L$)&a�<8e�>�'�Qkޢ��~#��o�(�@���.��kR�Fj��t�^��}C���&����n����4��O+iz��aX���4m������C�15I%Tö~b�9h]� 2��k{�d�I�"�[�8�ʃ�l���I�6�탈�Q����R�5_�R�-���_�c��`u�KMg��������G��s=>���$&� �8���l�/�qQjb�M��-P=�w*�������՞[�Ys�{l�̔�����k��|�D���K��]�Hp��JI�6 ���T���B�6�q����B�+1�x����b�7-?*B���6|�J�r��s�t.G�N5��Y��,�g��0?4��S����)��f�I�z���d�HASC��zd���4��AU,T��g��w���b���� Q|�^�OY9H�Hg�GH�|�����]5*����?@$��jZ##��B�k Y�bcXvfs�K��zj�6������&w�)�t�=� ''�"u�����+y Y�.�������d�;�^�C�:�,���}�V�&�D�u����v@2�Ir{�m䔃&cn�U�3 �� �d�Hǖ=�$��( �/tF��%�������� �5��Z�s,��q��̀�ڲ |��Z��#6ދ|��!Bryd�K&-���G��-��D�&Ȱ�a��b�ӛ#/k/E!0 �<y�3�y�����5�&*�ۘ�MV�'��;WggR�LFx]j�QZr���� �і�;˟��W���i�Dv�=E�r7�-E��Wc+Y�`xGrm����+���~xqLZ�*�:�+�r�"M���E�s3��?S��o@2�d�p]�䗏���*�zƳ�ͱ����2���g+��^0ʸW�i۷�6vh�'�`ߜ�/�|��ko�QOD|�"��μ�W��*':h\�k���~7�n����LK2�G�N3pM�����̄�s�1d�ͬ�0*�ʆ�������+�� L�A�4>� ���-�m�Ģ_�`��2#�uΗ� %@�4F&&</>�1����P ��YPV%ܵb5�L�n}����1�g u��7��P��|ڼ�/G1z$}��Մ����>����D,]�y����7���ɑ��9��^ ��еz5�T��AP&��Țj�a����3������Uq?�5���Fh�bl�5x2���q��B�|�Hj���8�*Ҳ�|ԅo���Q����c�I�o44��z!�掉��� R�J$fn'^A<�br�� f��@>�}�3̇������}"�P�!�������A`iQǔЃ�\<���/W��-�2���{���Y+b�E������Ͳ�N��D�@%�I1�J����y���"�Y�c$[*���VG?p�ج_�xn4���^�Y_��+�!)�{�ve(1��zf��*J��5�k�"�W�X&s~�QYoj�ox�RR%���?�������=`2�8V�������;��˃hC�O�3 Vb?� �K �C�I����^Q?+%L�E�R� |DB���a�ݪ�U���^bM�#-k�`��2BK�wN��ϳY�? �37F���u��a�F��)�``q�����U0*��]�"T�k�ٚ1�]K����6�F���^�e�hX56��Ū�0��̭��hP��6M�1P�%����G������ U��k��W� �-��P�.QW͇�1����o��l45�%��� N��7x�.ԓ��`����\�໖x!Z�7]���m�+��Ǖ����I2DG��+Q�9���&7V�������>��n#��D���氕�V����H�Of�$�'B2������)~��i�2�diIa�#Oe����x���Q�.�L�Px�V8�f�c뵗Mt��k�����H�L%F+>�5Q�R������<�v�H��8�D;�O靁U�c��Q�c����&�/g�ҟ���2�r8��/��*�œe<��������(���q~w�a{�����$;ج?v"����Ey��K=Q�*��.�� �gۏ �}\>VH��< �����WxU��kTi��&��.|OzX�s�����'����e'g��`�-A䎡h\��<���ek�m�vv�)[\��L6���l�h5�x���&�J��1k�Տh���W-O���p �o �<LԳ.�ʛ������!\D�li�0���� ��k���pGb�˄�%�fz{��d+u��Cb&��5|ȱk�b����n��G{u���L�� �u�b�l�qSJ���d ��ɠ��`/6�x�,�Ɍ��r1Z���KW���~��A��1�)c@,������{\d���m`�U�T�R�q��[�-���LA+S�͚\��ޔ����s�@_����c�%MoG_�Sj���n߫m����^rKl~ G��F��D��Ҋ�kLt��vBg�R-W����#+�=�j��t�|ں��@o����gr�MK��XS+a|����>��M$.�y&�`#I4��xIu�l�لa�� ������Y�D����c`����ܢ}~|^%(=��r2#j�v���WMߒ�kC>i#�p�Qv|Jyߟ�5�)*�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ