Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ded9ef65a962698795182da1672dc70b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ded9ef65a962698795182da1672dc70b.exe
Resource
win10v2004-20240226-en
Target
ded9ef65a962698795182da1672dc70b
Size
739KB
MD5
ded9ef65a962698795182da1672dc70b
SHA1
c0c1570ecf5538fb48e0d4e38d880e34a2c4edd3
SHA256
2434f382b40f40a970c7f4315d636f5f2a776e0dd14dbaba836906d6845e99a1
SHA512
4522d65d732b7b350462374fe3ea3cb7d84e7d1714506353e4eb4de5b3870d4e6909c5a3c9fea358e9ad092c5615942ad4aed49c75665785be55ed73f3ddd6a3
SSDEEP
12288:yW0V6wCHKzEuPvyKn/zh4Mfe0qYrB3bM0/:h0YH61PvZfYy3bM0/
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PathRenameExtensionW
StrCmpNIW
SHRegEnumUSValueA
PathIsDirectoryEmptyW
PathUnExpandEnvStringsA
SHRegGetUSValueW
GetOpenFileNameW
GetFileTitleA
GetOpenFileNameA
dwOKSubclass
VarI1FromDec
LHashValOfNameSys
OleCreatePropertyFrameIndirect
GetAltMonthNames
VarI1FromDate
SafeArrayAllocDescriptorEx
VarUI4FromR8
VarR4FromI2
VarBoolFromR8
VarDateFromDec
VarDateFromI1
VarI4FromCy
SafeArrayCopy
VarUI1FromUI8
VarUI4FromI8
VarUI4FromR4
VarBstrCmp
VarBoolFromStr
VarDecNeg
SafeArrayGetVartype
SetJobW
GetJobA
EnumPrintersA
AddFormA
DeviceCapabilities
OpenPrinterW
AddPrintProvidorA
DeviceCapabilitiesW
GetPrinterDriverDirectoryW
ClosePrinter
DeletePrinterIC
EnumPrinterDriversA
GetFormA
EnumPrinterDriversW
SetPrinterDataExW
AbortPrinter
CreatePatternBrush
DeviceCapabilitiesExW
PtInRegion
PolyBezier
GetTextAlign
CreateFontIndirectExA
GetObjectW
GetKerningPairs
CreateHatchBrush
GetCharWidthInfo
SetPixelV
GetCharWidth32A
GetTextExtentExPointA
GetTextExtentExPointI
GdiEndPageEMF
GdiReleaseDC
VerFindFileA
GetFileVersionInfoSizeA
WSAAsyncGetHostByName
WSASendDisconnect
WSARecv
WSCDeinstallProvider
WSCUpdateProvider
WSAInstallServiceClassW
WSCWriteProviderOrder
WSCEnumProtocols
WSAGetOverlappedResult
gethostbyname
getsockopt
closesocket
WSAEnumNetworkEvents
recvfrom
WSASetServiceW
WSASocketW
WSCInstallProvider
WSARecvDisconnect
ImageList_GetDragImage
FlatSB_GetScrollPos
ImageList_Duplicate
PropertySheetW
ImageList_SetOverlayImage
ImageList_LoadImageW
CreateStatusWindowW
CreateMappedBitmap
ImageList_DragLeave
ImageList_AddMasked
FlatSB_SetScrollRange
CreatePropertySheetPageA
FlatSB_SetScrollPos
ImageList_SetIconSize
ImageList_GetImageRect
CreateToolhelp32Snapshot
AssignProcessToJobObject
GetVersion
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetMessageTime
SendMessageW
]:��ts�C�-d���g,���c�E����'��NA��#�`���ZL5��D���99Fw����D�')q}3������*{���!jR�ʸs��]�f��pAJ�"8��P8�����:ի/��3ז~c�n�I�,��` _[Զ�ކ����1��^ÊS�.�H7��{X��J:�=���*��X����P����+%U��$<�ʝ�Iq|�%���xP��1L�i ��\�� �=�Z�����e} &�������I�xѯIl��OwL��Ҫ~��w"��������-iM��⑨�}o��y��v�A)U�OgqCH6��SέG��)� M��A�jT��<�9k�r/PR��l�c�z�brU�mRZ;ɕ���Y&�y�OU�у����Xd�;q#���+�1;���k���(D�ZP�F8V�=X��M: ���n�+.B4�φ��}�y��?cB� ��NCV����1�ȟ���.^ �����Vo��z�F��p�{�C��p��1y�A��ۉ�V]ư�6]�o.��s۞0�O-�GwX���lCMe;ل�k f�v��ڍ��g�>���eT4�+EIϬ=PBJ����P�s�c����:�{�UHp���.��P&����ѐ���l�����m���a���S/$J5�,I{2u�1q�,˨L������DR���� 5���j�7����eUq�D��K����f��JB�1���{�!�$�����^��@ fu,OE̓M����-]�i�)+zb"[r5���= �?/ �����Ͽ��z{�6�z�����t����V4�^���$mc���N�T�W�r��6$��RDٹ��L��vV�Y�tE:��8�ږ�A�)۫ĵzԍ�XBT�3�ц7GM�ʄpN+c�cQنP{b��BJI��f���K)Q��8W{9X�D��G��2�=%�h�je�stO�i����ibe*��f~��s��}3�S`�!�[N�uQ~�;p���3��GԎ�{"npЯM-b�1�B��WwS�e�Z��)���J-���]����Y���LaI�2C��]���'���䔽�ό �d��%d��5�1.�L�\�]D��}%�{��w��Yqn��F�-[)Ě�d����˃�Հ�n�cT��a��}��~%<���:s��̆$��kC"x������sI�v���E���F�v�7�z#� V�i'�z�9�H7(�K`!|H���d�l+�<S���n�[{��+��W�%;o�[R� H����G�Ǐ���v��:8�\�������T-��R�b;?��ơ����3۩� �K2ѵYK!J x҈��`h�M]�nK��^?k�n��LW�&Z69� HmV��ؔJy�i������2�Û�:�d��(7o0�0�����|#�:Zۂΐe�S�����и߰��ϳ�� ��H�mO{��\�iBC���x�ul'f�͏ν ���Ӻ4�c&��+1u��F8[�+E��pkP������_R�(#& �?j�"K��n!�d�����VnH��ܻ5��YB�\�U�Q���R� mJ�&��1s/�H���)�5r��4o�,�ݷ7�w�[ �j�x�z��Ҕ�-�2WmhC�7���$�)�������d�� %l�t�#��hs{z���N4g)�]�s�����nUUJ����~|��.���_�4�t� � F��>�2�g@��i�`9����b�dW��X#ࠞs��������@YIP{�WxUܠw-�b2/ïPu���s�c��;���k��˩�-wg�fm��s����SS��=�\ɪX���S����p ��vP|2�9�@ \"����'U�Y��7̸�o�EA�K�rI� �S7�I̔���f^+�v ��J\���2���7Qyiv��Q�chu��&��ﮏh�U7�l�qh�����@cF�9���|c�yr|���[�@��;�$�@y05?���;�1�(��0tџݭ���@6x���r^��A#��A��;���.��'����-�S�&�^��v��?t�}Op���©j��-�@��'����@E,�h���p3J�bv�Y�6��(W!�͙��օ�~�Ǎ���Z�B��Cger�v>/{Wpx@�D<d�a���P�̚˰�務����,[aIUxqw�v=������a�m��R�R�#��7߈��9`�� �q�_bW�U�J��)�2#�BѺ�������R�3��T��O�� �6|��K�͏� ���x����5c���{ϳN�\�~�/V+��U��K~U{���U6�A�:�l��vru�tn��S���Gcz��������먪Y���u���Hz��m��Ͻ�0�W���'�\��e4�ZY� �w��J���-����=_���S�\ԍ�IXZ�aӵo ��?�p���>.R�?�j�ZnOy����ka�����-�أ��,$����韩��|h�M�8I8:�nx�����Gq4��X=#6�ߓ�w�A_�5��ˋF^�����8/'W�>�9>G4˒C���c�Rk̜�*�,��'8R��RU�+q�9&�]kk�s��yDnQ+3 6RFx��� m{�Ӎ��q��>\.P�Vh���e�����~�ϵr�!E�xO��q���Y���01J�160yz��!���i�������]�5N���P���X}�7t�s���#��5j�&�b�i?F2� ����Lfu��}3��<��]��o8#j�n���5��e7�N2^���ps�/1Bc���4 �X�a�`��U��!lV�cwɰ���G�����,y�����9��F����pn$v�`ctʥ��B>% �Hk� �rM8|�,����6�7�Ge�^b��M@�_���#��f��=t��,���/yW��~�7uWQU&?���_�Bi��b��Lh�;rg]k�Pށ�BC 6{�!¢��:�"�@N�"���?�9z֯��ݙ�>]��b5�Eq�Xm��&v�����>���TqD1ެ�s�W0����@��NQX`+KiۖH��m�s�śT
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ