Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
0f5ec9b0c9c0ef909590f1ef59ae60b8549f8136707d3c6321c754157f98810e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f5ec9b0c9c0ef909590f1ef59ae60b8549f8136707d3c6321c754157f98810e.exe
Resource
win10v2004-20240226-en
Target
0f5ec9b0c9c0ef909590f1ef59ae60b8549f8136707d3c6321c754157f98810e
Size
10.8MB
MD5
d1ece02c4b1e17501d4a5aed60851e48
SHA1
1c7af19eff675320d57d66439b0097a0c469fc4c
SHA256
0f5ec9b0c9c0ef909590f1ef59ae60b8549f8136707d3c6321c754157f98810e
SHA512
e69d754597c0af6b0e9ecfcad56d28368d8827090d2c473dd4b527c9d0517a7bb09b44a15c8f10b3da28600e9a831fd7ff094e1f4e9c31342f663b85fde47ad6
SSDEEP
196608:zoGR9HJWMO6W0SkOx3z3foQcrJi51DZ24cJ6LUsteUckG8EoOw/ISyLdqSyLdF5T:cGbHPO68Ljoxrw1U4W64cp5E4LYhY
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateXmlReader
FPS_Decode_OTP
?AreTaskKeysDisabled@@YAHXZ
?GetPESignature@@YAHPB_WPAEPA_WHH@Z
sqlite3_bind_int
GetVersionExA
GetVersion
GetVersionExW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SetFocus
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
StretchDIBits
TransparentBlt
GetFileTitleW
GetJobW
RegDeleteKeyW
ord2
ImageList_GetIconSize
PathFindFileNameW
OleUIUpdateLinksW
OleCreateLinkToFile
SetErrorInfo
GdipGetWorldTransform
?Serialize@CTransRecordSet@@UAEHAAVCTransArchive@@@Z
EnumProcessModules
NetUserGetInfo
ntohl
sndPlaySoundW
WNetOpenEnumW
ZipCreateBuffer
UnzipOpenBufferRaw
IsFileEncrypted
IsClipboardFromEncryptProcess
GetFileVersionInfoW
WTSQuerySessionInformationW
WTSSendMessageW
SetupDiGetDeviceInterfaceDetailW
HidD_GetAttributes
GetUserNameExW
IpRenewAddress
LresultFromObject
ImmGetOpenStatus
ImageDirectoryEntryToData
� 漹�Q?�D�MZ �,{àV�}�fC%��V�#�ާ���+&�D�$͈1��>�%|T�B=~��fwqX�����r�����|GS'��~s?����*D�l �������i�.8٢��ȉWR4�\8�I�n�TRhLj�J���摗�%��r�^x��Di�9.�)��x���'L�������9����D�I�"�T%8�|X���ƭ���ȹ{��� �1u��M��,lyj���=e�q�4���s?�e����ɜh�����'f�G%`�*�������A��[�������Hg�oI��B��[7�k�О�!��L.E�tF�/�6�/m(�����P�����Z@���e5`~���۽�\�f}̆�m�[��E{��8RL�Bf�t���Ǭ`�ƄM����zuڅ�]�� %�V��8��v#T��=?�v�N�GIC�Rr�v���������U���㳿���N��`�nGf���U��e��k)\� 2*�u#��Qzϱ�*�����/|��ٚ����3�����i���@m�X��ʤ}c�Ә���@Q. ��^�Ԇ�=k�o�DnA�7�;����F����3��V��b�y���\?�:�9��ᰯ���d�&�g͈�?:'[��TdP�Z�)u$2N��덑�.��H���i\�r���#�s{Q�asj� ���xZLo���+��,(�_�y�Rx Q6���vx�ޜd�� ���-��v�;�G�-f��+K�T ���A�������DNw�]n�֫�)����O����`MP�Gb���:լд|�.��N���z}�R��C��[�'���n��>����I���J��R)��$3IB�)�'|���Z=밳�6�R�!�E����O����)��O6g��:�4�R��j��Px��%)��50� ����4w���T��b��l��r�b�I�惔���@������Pț4֛�-8�gқ����j� ��s�+�[��9�{s�饻ĝ���_�s����QJ���%���h�({[p��Z���:�6a���d6|Z4�]��d�:@.�&5�g2"�-� 5��Z&��-������?��u6����D+~�~s/���a9�WW���n=IS��<nC�8Z�l�{��a���M}h~4j�k�'��PE��_a٠ ��K�W+���<�����)��WK�"Ԥ�M �3jy��l_̍n� �#h�*�oW!mL^�f˕&�~��9N����"ue9t���C%M�=<�b��Ib /!GI��D�W����B���`��ޫ��jL�y�P�?&���k�`��M��� ���f�@1��S�2#o�O� q��\��aU�Y��/`������k��Z�: ��� ��`�.<�娩C���T����eu��)�v�F K1mH��ܵ�:��UZB�/� ���䕖�(t��OR���{HÕ�-�A:�;�E�������� �t1F����REI�H���pT{(?DžK�_�ui �s������R��3��9��٤pĵ��hQ:�a�TW�5��֕�q%`r��C�ѝ8!ɗ�M�h_��E�}��'��ƽDP������-�U3�^�Ӏ[xBY�w�v���P �e��}��6ȵ;I� �o�j|���4U�����H�4Ԋw�>D�;�N�K� שև�Y���J���ta�1���)����t$\q��~Ċ�o�S������o���#�xK�L?]�d���ێ>t[ɂ~����V�'ϝk�~�lF���|N��a�P���Xhs���Q�ۦ��`�0�>糽��D.�%�2�{���~~�$�3?��ѸyTþU��r���>ǧ{�ox>(�z���,��{zJz-�*�� ���yS�cp����9�����.$����?,����� F�E��X�Ϛ]� 6��]�kb�?ԃ�7�ʭڟQ�k���WV�1=��q��&��,0����0��J���<$��|?tb$���:;>������$��Q܅(�6Sj��[8�a�����{���$s��y�р�&�RdM��t�۬��L&c��4��:e�) d�;9�o ~��//�X�˰��RCa����e7���X:��>*����J�6w��Xl��e�r�+���m���,o �#�ʼnK�~ l.����Wӏh���l�)DɌ�����Q���B���N�~�.L��Α��x�4���S�,�U����s'�1٤��-�����$7Wȥ���ye,��+����e��_����8טm��+��ݝPwBk/�����ZSa�`��9�B/�1u�m�3����\��Yfl .�ғ�>�a����IJϦ�@�+����Q+�z��x�8���z������CU =O��摡a�O���20�K���"�����KN���t_�"�gS?}�<XYz��V��h�h�~$A��(���b��p�/�R�a��j��?����[�K~,��6���2+J���+���e>�fy� c;���a@=��-�L�_���[�"tSaz�B?�7�FC�l�x�=��%Q/9 x9�9��N"������N 2�.iw�"2f��h}T�����\���գ�w��%�t.����,�ܩ� �t${�]w�'�����0�;-���i+_R@��U�~�4"�r%���^A$u{�Y}�%�<z��i���ڲ[�� ���gQ�LȪ4ߞ)"�nO�^�r:��q{k��'Y^4 L����͉l}U�B�ђ��=Q3X���nMo�+X�R$:��� !,?�=SU*�)`�x���3�@W\z������u�#����_TC�n�x�.Z��p��֭7��WL)L�V�����(�Dvl�섀�x�ۡe>����.�=�r���$o���!t6�ִ�h������5�U�e\BC$-�H� vt�^�V@2��h���f�XBW���+�'#rv!���]kr*�6��Z�s���� ������8bq�x��w�/$r#��]Oة��/�8�I�1-��p�Q���F�d�m���b=���G�L~oB��r�Uj���,�t���H�xp��?g�{y��*p�>�2���K��d1�m\nR���~i����������
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ