Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
29-03-2024 00:44
240329-a3kxgsch6v 4Static task
static1
Behavioral task
behavioral1
Sample
17bcehjkopqrswxz.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
17bcehjkopqrswxz.exe
Resource
win10v2004-20240226-en
Target
17bcehjkopqrswxz.exe
Size
18.8MB
MD5
fc550461fe770b0de1846f381e424f3e
SHA1
b32198072ae328ec1a44ca521c0775d7a6e870b8
SHA256
7d69b0d2d4faa7ffd46cc908ca441e69814c82e10b95590f60a05853d657aaf0
SHA512
6e53c445b6c4135652f6b649c20f464bcd70c5f131061779661e432ec1b2d8c53023d3796f08fbd21798ea2eaaf4da682173d35559d513c6eb022601c9234c47
SSDEEP
393216:ieOMFdSGA5YMeU0hsRGUCTRADYT0RBCofgMDyYCKZ9oWKa6wt3b6nXvN:ieOiSGAGfU0hsRGU2AUgCofgMDyYCK58
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ioctlsocket
CertGetNameStringW
HeapReAlloc
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
CreateWindowExA
CharUpperBuffW
RegOpenKeyA
CommandLineToArgvW
CoCreateInstance
SysAllocString
GetIpNetTable
RtlInitUnicodeString
CreateDXGIFactory
SnmpUtilMemAlloc
SetupDiDestroyDeviceInfoList
Direct3DCreate9
D3DXCreateTextureFromFileInMemory
ImmSetCompositionWindow
BCryptGenRandom
??0Assembler@asmjit@@QAE@PAURuntime@1@@Z
??0CodeGen@asmjit@@QAE@PAURuntime@1@@Z
??0HostRuntime@asmjit@@QAE@XZ
??0JitRuntime@asmjit@@QAE@XZ
??0Runtime@asmjit@@QAE@XZ
??0StaticRuntime@asmjit@@QAE@PAXI@Z
??0VMemMgr@asmjit@@QAE@PAX@Z
??0X86Assembler@asmjit@@QAE@PAURuntime@1@I@Z
??0Zone@asmjit@@QAE@I@Z
??1Assembler@asmjit@@UAE@XZ
??1CodeGen@asmjit@@UAE@XZ
??1HostRuntime@asmjit@@UAE@XZ
??1JitRuntime@asmjit@@UAE@XZ
??1Runtime@asmjit@@UAE@XZ
??1StaticRuntime@asmjit@@UAE@XZ
??1VMemMgr@asmjit@@QAE@XZ
??1X86Assembler@asmjit@@UAE@XZ
??1Zone@asmjit@@QAE@XZ
??_FVMemMgr@asmjit@@QAEXXZ
?_alloc@Zone@asmjit@@QAEPAXI@Z
?_emit@X86Assembler@asmjit@@UAEIIABUOperand@2@000@Z
?_grow@Assembler@asmjit@@QAEII@Z
?_grow@PodVectorBase@asmjit@@IAEIII@Z
?_newLabel@Assembler@asmjit@@QAEIPAULabel@2@@Z
?_newLabelLink@Assembler@asmjit@@QAEPAULabelLink@2@XZ
?_nullData@PodVectorBase@asmjit@@2UPodVectorData@2@B
?_registerIndexedLabels@Assembler@asmjit@@QAEII@Z
?_relocCode@X86Assembler@asmjit@@UBEIPAX_K@Z
?_reserve@Assembler@asmjit@@QAEII@Z
?_reserve@PodVectorBase@asmjit@@IAEIII@Z
?_x86CondToCmovcc@asmjit@@3QBIB
?_x86CondToJcc@asmjit@@3QBIB
?_x86CondToSetcc@asmjit@@3QBIB
?_x86InstExtendedInfo@asmjit@@3QBUX86InstExtendedInfo@1@B
?_x86InstInfo@asmjit@@3QBUX86InstInfo@1@B
?_x86ReverseCond@asmjit@@3QBIB
?add@JitRuntime@asmjit@@UAEIPAPAXPAUAssembler@2@@Z
?add@StaticRuntime@asmjit@@UAEIPAPAXPAUAssembler@2@@Z
?align@X86Assembler@asmjit@@UAEIII@Z
?alloc@VMemMgr@asmjit@@QAEPAXII@Z
?alloc@VMemUtil@asmjit@@SAPAXIPAII@Z
?allocProcessMemory@VMemUtil@asmjit@@SAPAXPAXIPAII@Z
?allocZeroed@Zone@asmjit@@QAEPAXI@Z
?bind@Assembler@asmjit@@UAEIABULabel@2@@Z
?callCpuId@X86CpuUtil@asmjit@@SAXIIPATX86CpuId@2@@Z
?detect@X86CpuUtil@asmjit@@SAXPAUX86CpuInfo@2@@Z
?detectHwThreadsCount@CpuInfo@asmjit@@SAIXZ
?dup@Zone@asmjit@@QAEPAXPBXI@Z
?embed@Assembler@asmjit@@UAEIPBXI@Z
?embedLabel@X86Assembler@asmjit@@QAEIABULabel@2@@Z
?emit@Assembler@asmjit@@QAEII@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@00@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@00H@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@00_K@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@0@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@0H@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@0_K@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@H@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@_K@Z
?emit@Assembler@asmjit@@QAEIIH@Z
?emit@Assembler@asmjit@@QAEII_K@Z
?flush@HostRuntime@asmjit@@UAEXPAXI@Z
?getCpuInfo@HostRuntime@asmjit@@UAEPBUCpuInfo@2@XZ
?getHost@CpuInfo@asmjit@@SAPBU12@XZ
?getPageGranularity@VMemUtil@asmjit@@SAIXZ
?getPageSize@VMemUtil@asmjit@@SAIXZ
?getStackAlignment@HostRuntime@asmjit@@UAEIXZ
?make@Assembler@asmjit@@UAEPAXXZ
?noOperand@asmjit@@3UOperand@1@B
?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KABUX86Reg@2@IHI@Z
?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KHI@Z
?release@JitRuntime@asmjit@@UAEIPAX@Z
?release@StaticRuntime@asmjit@@UAEIPAX@Z
?release@VMemMgr@asmjit@@QAEIPAX@Z
?release@VMemUtil@asmjit@@SAIPAXI@Z
?releaseProcessMemory@VMemUtil@asmjit@@SAIPAX0I@Z
?relocCode@Assembler@asmjit@@QBEIPAX_K@Z
?reset@Assembler@asmjit@@QAEX_N@Z
?reset@PodVectorBase@asmjit@@QAEX_N@Z
?reset@VMemMgr@asmjit@@QAEXXZ
?reset@Zone@asmjit@@QAEX_N@Z
?sdup@Zone@asmjit@@QAEPADPBD@Z
?setArch@X86Assembler@asmjit@@QAEII@Z
?setError@CodeGen@asmjit@@QAEIIPBD@Z
?setErrorHandler@CodeGen@asmjit@@QAEIPAUErrorHandler@2@@Z
?sformat@Zone@asmjit@@QAAPADPBDZZ
?shrink@VMemMgr@asmjit@@QAEIPAXI@Z
?x86RegData@asmjit@@3UX86RegData@1@B
c;Aq������e.o��ʨ���eO�ɠB��j�����[%������˽���h�0�D��FN�Z�0W�1�7a@�Ig��q�c�-�D���|�MW��2@�9s���^E~cD���Ԅ�̅��J���r�>轸#��n*��ڧ��$��,'��q"����f�,h���:�����A�L:3�*���Z���)^�"O^�q�y$y��1�#�9��{�)��`М˓�tq�xC���mc_��]j0�!�����sxf�+���v0��I=A�V���ũ�`�$Gh��� �0�\#��$���z�)�:V�*�mɬ���>�BH럫N����_=��1��E�>$��-�X~R>�UU�M��:� V��(!^Ș]� ~�w�������t����s�q��]� ����bA`�-Kvԑ���6?��Z=���ͻ�]M�����x���g��mk���{B�y�>�>g?Y���m�)6�WV(s֢Cfgk��r�;p)T!#���5���A?����/����MC*&6�t<���(գ $w�z2�3����P�4����d�@��U�/%՝F�v8 �I����r ��+��T����x����i"74=H �6��r����ysI*x�������d�G*��H �B�u��Y�Xǽ1&�`��K���./M��R}V���i�u(�kb�;���U��X�"�O� �I9w:G�зT�� L[��6�"���.�%1�Aâ�>��$N�4�~�P�0��m�j�UB]����{) ���׀��ۉ�O���p%�;j��U�y4��ye�*���ߺ��T{���T�3P�X%ׯ�;����C�����i�v�[9��N��,���������'�פ ��%.��.���ƍ0�/�&���P?b(�j���<�ֱ�/~���)���Քg'�UZM�����k�����7c��В�p�ʰN�n� ���1���K�M��l}�$�C�/���ȈcF�{b"G ҃M�S�m�Sh��e���k���}X���}�J���Q4e ���Zr�Q�˖ΖxT0y��4�@&�[k�s�:��t�q2u�����;q�[=���B�s�"�.hMhfF��8t ���/��ݺ�o� Z��^ ǀ,���1��N�h-�V3^½T'������QL3!/�F���+�-�K�&*�UV�*�d�����9KQ��1����+�H&q�b��c��Y���˩��/khI��֨��n�k�W* �e= -����3('�֣1v0�(}\������ ��/�g�.�;d=����N�w��1Ti�`TI)i�ׁ���9�� ����y�� �N.�r%et��] Bi���n�TI)���~�\B��*��PV$� ��dp�^����+�q7��0u�jv�q 0�'�i��+kNc0��9��B�c��Ϲ��]��}��K�� �.A�3�n�p����!�_�ŭ��H"HӬ���S?&��#a���eP�����s�,;o-��\���gw,�"�M9�z�Q��A �AO�����aE��}���b�2���o�fxy;���Bf�;x(���S�D;}>��������!�o��� X�N|������&���/~-�8Ѕ[]s5#�9�� ��:W����L976@�(��T���Ɓ�l�W�&�[���2V�������m��֒�wc�oN�/q��r��o�����[�jr�iL��9K��WB�ʑM\P��gt!�n�^iz��;i���]$���'O��q���n��(_�#�W 1�s��'@CON�C��1�-Tp��-z��Ϭ��hiv���#(s��EvÎ��ɳ�Y� �x�6�?ƐK蠟ueA�>�)jWPxI4�iiړ^����f��t�Д;��� 3�P��T�/PK�V(4>d���ۭ�}&��c�z��4���N;X���Pű�X��|��y���=NbҚ���**6�?��ݯ�]]�t��%���o����� �H�d��d0���7���#�,�Ys��S[�E�z��|��YC�~/I��oB�'���#Ϗ�f��&���ɬH�j���ֳ���y(*�����szuCv�{�:'�$�'���R|De��&'��vp���Z�[�%Vè u��}} �ť4k�q�z|�ƿm�@ѳO�t=�"zw�Z�� t������9���}<5W(�� �!��N�N���7Y��vˉ�-$e��٘O��^��L�����Ѽd8�#oG�$�?��Y�E��;w)m�����v�wXy���C�8�r�B�<4c�N��?]� �J������ g��c�[u��y1w���-�v�5��n��~�}l�R���,��:s�D_�h�F�I75��<b�=�����c]r )/�p���4yleu� ��P����\���6X���Q<,��ʻQ{�fWs�ԃ��1rE�������\�/��oO>`=�E�Ȍ��;����� �� u��KM��!����v�M�`�m�Ō�L�|�B����U.j!���|��c�T:��a ���UMI�,���M-����6�L�}Q�f���2.��59s��{��B���Ki�N� �nD��,���g�2)R� tr�� mz��6cuN�wQ��D{ֱ�aݧ��������dY��y����봍8�����k��O�o�X��<�7�2�]��$r��i �} J�C��-����A�3�oV���k/���p�kR����$,�L�J�k :��K��2f� �<��~ɐ��v� Ɠ�#�F���`ڄέݩ�{ $��Ԉq D�5C�p�-��3�Î�� �C� /�B�:-5�����1�Z&�5# �iQf�+���������LR� w�Y�p c�り<9��&��*�7�v������Ժ���1����쥶m�ǒ���&H4���t����R���I uIp2-�7� ��*ꦁ�_�lhf0����1%s�� ���D���b3��Rw"RkuQ˩���fI3�-qfq4���h}���jM�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ