Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
d6b16e997d07a989959eb4a11dbe96ea.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d6b16e997d07a989959eb4a11dbe96ea.exe
Resource
win10v2004-20240226-en
Target
d6b16e997d07a989959eb4a11dbe96ea
Size
9.7MB
MD5
d6b16e997d07a989959eb4a11dbe96ea
SHA1
6f15b7663f74947bf82d7817d3bb71f0a26424fa
SHA256
72a68cb7df4532b45783cc9957589b7c1d9fbb1553a3a3a237aae1d46efc8bda
SHA512
2981bcfa874a63ea5a3decf648d94655c2fd0251010861229484850649b26df614f9a0dd003420667a738cc3700c4558ffe94d4be23080975ae240684418a98c
SSDEEP
196608:K3QD6UJmTGPq42Xjq2TEnV+V33TqqiUsOXZB3U5TKxklKthqc4Nxj:HDjJmTx42DEn8ZDqqiUsW/MVK+c4Pj
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
accept
GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
ClientToScreen
CharUpperBuffW
RegOpenKeyExW
ShellExecuteA
CoUninitialize
SysFreeString
GetAdaptersInfo
CreateDXGIFactory
Direct3DCreate9
D3DXCreateTextureFromFileInMemory
ImmSetCompositionWindow
ord211
CertOpenStore
??0Assembler@asmjit@@QAE@PAURuntime@1@@Z
??0CodeGen@asmjit@@QAE@PAURuntime@1@@Z
??0HostRuntime@asmjit@@QAE@XZ
??0JitRuntime@asmjit@@QAE@XZ
??0Runtime@asmjit@@QAE@XZ
??0StaticRuntime@asmjit@@QAE@PAXI@Z
??0VMemMgr@asmjit@@QAE@PAX@Z
??0X86Assembler@asmjit@@QAE@PAURuntime@1@I@Z
??0Zone@asmjit@@QAE@I@Z
??1Assembler@asmjit@@UAE@XZ
??1CodeGen@asmjit@@UAE@XZ
??1HostRuntime@asmjit@@UAE@XZ
??1JitRuntime@asmjit@@UAE@XZ
??1Runtime@asmjit@@UAE@XZ
??1StaticRuntime@asmjit@@UAE@XZ
??1VMemMgr@asmjit@@QAE@XZ
??1X86Assembler@asmjit@@UAE@XZ
??1Zone@asmjit@@QAE@XZ
??_FVMemMgr@asmjit@@QAEXXZ
?_alloc@Zone@asmjit@@QAEPAXI@Z
?_emit@X86Assembler@asmjit@@UAEIIABUOperand@2@000@Z
?_grow@Assembler@asmjit@@QAEII@Z
?_grow@PodVectorBase@asmjit@@IAEIII@Z
?_newLabel@Assembler@asmjit@@QAEIPAULabel@2@@Z
?_newLabelLink@Assembler@asmjit@@QAEPAULabelLink@2@XZ
?_nullData@PodVectorBase@asmjit@@2UPodVectorData@2@B
?_registerIndexedLabels@Assembler@asmjit@@QAEII@Z
?_relocCode@X86Assembler@asmjit@@UBEIPAX_K@Z
?_reserve@Assembler@asmjit@@QAEII@Z
?_reserve@PodVectorBase@asmjit@@IAEIII@Z
?_x86CondToCmovcc@asmjit@@3QBIB
?_x86CondToJcc@asmjit@@3QBIB
?_x86CondToSetcc@asmjit@@3QBIB
?_x86InstExtendedInfo@asmjit@@3QBUX86InstExtendedInfo@1@B
?_x86InstInfo@asmjit@@3QBUX86InstInfo@1@B
?_x86ReverseCond@asmjit@@3QBIB
?add@JitRuntime@asmjit@@UAEIPAPAXPAUAssembler@2@@Z
?add@StaticRuntime@asmjit@@UAEIPAPAXPAUAssembler@2@@Z
?align@X86Assembler@asmjit@@UAEIII@Z
?alloc@VMemMgr@asmjit@@QAEPAXII@Z
?alloc@VMemUtil@asmjit@@SAPAXIPAII@Z
?allocProcessMemory@VMemUtil@asmjit@@SAPAXPAXIPAII@Z
?allocZeroed@Zone@asmjit@@QAEPAXI@Z
?bind@Assembler@asmjit@@UAEIABULabel@2@@Z
?callCpuId@X86CpuUtil@asmjit@@SAXIIPATX86CpuId@2@@Z
?detect@X86CpuUtil@asmjit@@SAXPAUX86CpuInfo@2@@Z
?detectHwThreadsCount@CpuInfo@asmjit@@SAIXZ
?dup@Zone@asmjit@@QAEPAXPBXI@Z
?embed@Assembler@asmjit@@UAEIPBXI@Z
?embedLabel@X86Assembler@asmjit@@QAEIABULabel@2@@Z
?emit@Assembler@asmjit@@QAEII@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@00@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@00H@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@00_K@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@0@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@0H@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@0_K@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@H@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@_K@Z
?emit@Assembler@asmjit@@QAEIIH@Z
?emit@Assembler@asmjit@@QAEII_K@Z
?flush@HostRuntime@asmjit@@UAEXPAXI@Z
?getCpuInfo@HostRuntime@asmjit@@UAEPBUCpuInfo@2@XZ
?getHost@CpuInfo@asmjit@@SAPBU12@XZ
?getPageGranularity@VMemUtil@asmjit@@SAIXZ
?getPageSize@VMemUtil@asmjit@@SAIXZ
?getStackAlignment@HostRuntime@asmjit@@UAEIXZ
?make@Assembler@asmjit@@UAEPAXXZ
?noOperand@asmjit@@3UOperand@1@B
?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KABUX86Reg@2@IHI@Z
?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KHI@Z
?release@JitRuntime@asmjit@@UAEIPAX@Z
?release@StaticRuntime@asmjit@@UAEIPAX@Z
?release@VMemMgr@asmjit@@QAEIPAX@Z
?release@VMemUtil@asmjit@@SAIPAXI@Z
?releaseProcessMemory@VMemUtil@asmjit@@SAIPAX0I@Z
?relocCode@Assembler@asmjit@@QBEIPAX_K@Z
?reset@Assembler@asmjit@@QAEX_N@Z
?reset@PodVectorBase@asmjit@@QAEX_N@Z
?reset@VMemMgr@asmjit@@QAEXXZ
?reset@Zone@asmjit@@QAEX_N@Z
?sdup@Zone@asmjit@@QAEPADPBD@Z
?setArch@X86Assembler@asmjit@@QAEII@Z
?setError@CodeGen@asmjit@@QAEIIPBD@Z
?setErrorHandler@CodeGen@asmjit@@QAEIPAUErrorHandler@2@@Z
?sformat@Zone@asmjit@@QAAPADPBDZZ
?shrink@VMemMgr@asmjit@@QAEIPAXI@Z
?x86RegData@asmjit@@3UX86RegData@1@B
���:����J(S�XT��a�����{.����l�l��3�U�@yڻ���wY]{��?�|�͉�j���1����2j/��<�P�_��� �0b+w�G�W�m��Ru?��P����qX�*S�f��3#�c�?��w�8{�.�_Mv�T4'g���6M0�����:�~���(w����+C��G+���Qf�H\_^ܩ���H���|�O`��6k:"ΰ��X��-��(=�H�ؚU�O��ʜ�k�8N�#�����]{gx�C����2ɝ�X�"���+Ʌw)��a��ܨ���Cfƭg��D�:�{Q���FN1#2 fw�w1��Y0�O44FPEknF����˺ ���D�y_�{��dh%,C���쮲V����7��}��M����hs�����Db�:�v־�Nbڻ�_K��� ���\�x�)�@�#�P@TT2*dQ*46峉��L�)��@����%��3�A�az���U�纣���I,�s��1^�dP&Q vd��L�$�OO�j�XŔ���?��Ex�:k!?0)�{�8X�h���!\g=�|6�E]':�Y��(�y=�M��Aa��Zح4~���V#��r���i�Z>�����+����y��n�� 8��7�h1u�:��;f5�iL�3t�np1�J[`�,�H��`�t���4��hO�b�,:/�<ݵ����7%���X�-�%:���[�A��%��������jg�]�P��S��}[9�~h&R_k@��PD��lV���e��Ɨ��H���+�-}��Ԑ����#�49���"�:� iKY���D�B��W3��=O�s��m���9��oh�r�0$>��V��ACRQ�1��x? ��nc�1�y@g���-�}ç��=в�Jy����$�)�O��a���\Rۣ��o}¤���0��o0�`�"���%�OP���86��� l�S��G��C���I���G�@0�T��x�.�%���A�W����1U{�5�t_��G����:�8$P��mdRA��Kb�Q��(�*o �˔�� v���vl�r8�W�L�RB�5�B�fUj4g߮U�E��->����� j-������~�LmE�=���"Qz�t�9��~�,J�5m�R���A����D�)���П�n�+<�;}�|irP�4�g�`g�B�o6I�4s��C�[ʕ���˖����J�(4�h��cHd5xڋ����|E���i(s����Js�� nf�M[A���@e�g��$���h��$ ��p�Z���X���ɗe�o��\{!9X�2�8�o�+b_�E����6������i5�RP��� �@�F'O��N_�g����O�wO��k��b��{����Y��G�c�2�t,���l� ��j��B�\��v]����]�s�<�q!�8v�sr�Z�G�7��*h L�- N]���憨�P���Yi� �Y1�U�E����ҺHWe�У�p�;�7����9I�hBD�k����b#�ư뒣���,Ȇ��"�o��p��!"�v�r8�Ұư �>���o�/��b�m�Z����=��̻p��G��^Ǻ�C?C(�P��|�a(R�6��O9���܋�3,��҂%=�����O�}}��RNcʤV7���4��P-!w�*x�Gc�F��� ��Kc�M^����`M8O�T�y�z���;��(�$�������p\�㈨�'u�Qm��O V��rٓa�L>�{ڦ�a0S������c���J���ZT�Yҵ��)&lR�� (�e&1ֻC��L�U��e*:Z���(?����?��e8i���f]ǐxij�b0UV�/�J0Gx2�2���хQ��=>C�Q�٧�G��o�����)G����텁��Vmo�C�Z^|`4�(�B��"P����ʧ�7��8�>p��9�]�n�W ߒ�%L�q�n��M��z$T��$-�lɆ�M���� �oZwtNQ-�;�ՠ���p�s�k9�&��7$QD4)Tהϻ6���v� !� y�V}�g �pu�nsG�eޝ;pp #U��y\�,*袶f���su(�o�� �QJ�f���2��4r �'HQ_.<Bw��s���>5z� ����Dc��1��p����̲����K��m�j�|�|��%��Q�5*-U_,��+!$������x,�����?H���i�T����u..h���m9�i~w����Z`?����G#nN�?���A��SC�[��N�+l�ơ:s��ѿ���:���ٵ���rG�kT�6h}3u���Y�½I#�?��*ԣ��'�8�xm��Ѣ��Ta�Q?��+�1�����T�pK�7���T��`�>5f�M�J2�ء@S� R8���[������ Ď�j���t�3�1�Yr�b���� �d���]L�2��n�=��Y)�^��n�Ϟټ�?MIZm�E#��]m�>��]�s�5�B��W7��Z@����X�U7>�2��L��#K�k����);Q�G�G@�q�eu�Flпv�D�n��?� �����:�|S2V~z>d ����a��(���LZ?� ����4� �O�1��(?�"��ǔuS��w{<�tP�j�_�z� ���}U�6(]nx���++�x� XD���Ҙ%�q<�lZ���^ĈB����=�_���Ǎ؛B"\���0�K�:so����H9��'��I�7�<��1x����Mo��9~d��\�x3I3c/�}2խ��⏇i庌�XL~� �3��Y�C�s'�7��s���V��X_�k+���v��_���pLCӹ�j�*X����k�)����������V��ז�kZ���C-\�{�����}�VN4�~�O�C���%����Jrb��'�V��.�����s�bq�L��K�<)1���}+ �ۖr] ��/�.���%:2� {xcJ��'َ�Fq��U�����m�mV����?�2H��_͈fu� BPP��_.�N�$�P"P�h;�[�hN�� \Llx�tA:��S$�p���NG���8vM_�r��w���j���)��(�5���4$_������~��<H͛˙Š���m�����NZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ