Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
SyncSpoofer.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
SyncSpoofer.exe
Resource
win10v2004-20240412-en
Target
SyncSpoofer.exe
Size
2.5MB
MD5
10c51aa1fc224b93206f1083082f02be
SHA1
584d370ec990a36e6b0b8920aa2a31975ef1d5c6
SHA256
f4e72d601237b4b9c807bb10eda596cb25912b6447db75f9d554b3398133fc79
SHA512
411febdaefc44f711dcf926c576ff519062e5eb854f606770f730426fa6a586c9e4fc6a7c3c523255cdaf02c721afb52d20b1e0d498baa029d5df8ca04429274
SSDEEP
49152:ucvAvIUj4MlR9zMKwS/R0Tg5iWzu659A6/q7fUn9ZTF/cYFylcJD2uxN:ucvAgUh/9Pgv659A6y7fUn9ZTF/NF9z
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
:������8k�qVM�aB�9'������R�qJ�l�"���z���b�LO:����ş4�����e�:��J��ynY���FHÖ�2����O6tqt���k.��"�M��POd�Vs־�N�3���hn�YN|PJ���UB-ryk �E~�(Y=�ГѨ��X߱�D�}:K�h^Mdl�H�g�MaC�����X�բ��S2��T�hſɨ��'����LR�Q4������64���{q�L��s䫸�-Is���^YV�NJ!�����裃�&33a������!1I�18���R� ��\Ty��s}��mn�|����9��R����!4����=;������h��Z2����l�i>iqiݕ��t#�:�lP�?�}�VM��d��Y����7 �$X��~���`D��+���eY�O$Z41żh���<ԅ䌨w ���s��)��>���`2o�C ����~&�+^ϵy��q3�T[*�|z��[�!qW4#���|)F���J�2'!F�2%�)��>���%{d�G�|�S�_A�����m���y���"5`d5�'4����j� ���ÔTA��8�.�m��e����H���u�r�����Z|�tm*[7[2��L�xG� ����;��H 4���p� �cUo��t��n�09�6�wTf1��JX˷3����ѱ�=�@��b�Y�W~ ���ydt�"����<�g�^��;�V��%������:��O����v��|+�0 i�����g��u���U^�Ū��@!VѴ�`_a��I�=Ѥ�Nn|�n���� +c��n�Eq�Dq�tC�@��L(?�И'x��G�k%"_6~�u?.)������2���S�s�8'`���r�������ڪ�U�N������4�h�S��Rf�K��~��o�7|�XJ������*()EzTy�Z��I���������Pz}I9�d��r%Ip�ؕQ=Rm>�ބ�4�(��o������d�O��`Dl3�z�j"�A�����8/R1�_�x@���Rs���$(KI��m�PV�Q����x��f�5��s��ާ��X�"ﶾ��=}����=|����P���E���,�G\� V�6+�L�� �ma����3�t�Xnx4��4��a�g=�-��a���)}�_dK�ͽߜM�kS���y�3�[|���=� �xE�Ș��:y�֗����6�/f'A�i,?T\�T�����X�g��LT��/�&e_�(�1�t�sy/t����Q�S�3|�A���T��d$������`f8p���l4s����)�A�J��� G���]O�2�-�ܽ2_��y:�������x�.k,y�-<q'� ��S]hg��tE�n�.�������縮̓����AϷ��ګ.�����R��mP9\b*V�X�#�z�y������40�UOv���Ɵ�'�b�@��F�;�j�Ϳ��6������� ��Ɵ��6�i¹�=�Ѱm��.�Բ߽$�r�>=��GC֎���pm���5�dW��x���j�:��ʞJ�Mֻ[��'�\v���E�o:S��/���\��wS�$l���G��O�hz�W8�b��e��6h��\������pQOp ��Z��?W� �S�������9K �a��pӜ����� A�9��4 ?K� oQ��k<�k\�I�H��� ��ǯ���K��� "��Z�<�&w�5K^ ?)�f����w a=`�ߩ���~;?r�rI��Y��21�m�0�\�_w�0h&7h��5y�ǝ�)�` ����e@ᠫr%U5agM��Υ4���5����/!_��6ϱF,ßʁƛD/�B�1E߉��CT����u�o2��0���O�v�.G��K��3̛�k<���Z���V�ϝݳ�����X�e�fdh��\�� �1$�#��;[��͓��e�����q^�/Ȋ�9��P��^�F&^ $F�����%�N�z�%� �<oȋ���\з����$��q�ުC�Nv�1Gm���gm�� ��x�s�Ӷ̠>����m�1��v�*���8t&�ȅ���f#Y.xROe�J��$Vph��Jڤ�Ú�z�E?a�q� �.��58p�V,qp�X���2����k9�<��YCS��F9ʚFE��!HP꒚'��U��W�rL $�{q(�+f���h6�5�w~���I aGdtDw»���^�m�n�#i[G�48��"�a'\�v����lu��<�&��<����@{~vY�b����cҌ�@���8>�-_����G�l~����A�2⠩��~��5�0���fH�t3 �T��J ���*;�{,}S�� c2����)�z,k�*�t�#��r �� �d��q����� �̦?sQ�QK;M/����yS����=�ȼ�:��Lc�nUm�NS�1z�.��9��+�*�eF/��^8#E�3����1��e?0����NB�;�Y�ٻ��Ȥ��P��v����� �?/UrIZ���gv�$ӊm�6ޭ���Z��Y�0����(B��Ŭs����'�Pʪ�X0qTW\p�|��x��_�u������x4�!�( ���6.�3$\O\�����%-���%�p�^Dk���k�U5R9�R7g,d�-��n�:�$(5���h{oU����}5�8����������]����h�܊�C�A�+"�1���_9<Lg �8�2ЫG%�7�^��tzMmbȇ?Ĩ�Y� �:�L'�R�_���+2��6 ��� 4U�ʿ����ژ,R���f�����;���21$pj�������-���.aj�����������TşA���i?���f�/.~�#���v���z����P���,�mV��ְ��I��i)u��D��Nqf��e�)�;&�������:�!�-�kD`�h���t�,��˰�s��G�:����ޜ��������Y� ��t��Īw�{������@�&�G����,כ�)H��r̰ҋ��$Lm-��$����j��$���X�Է��zq�؛�H�t�=N��U� ���QZ��M�VUn4�}N��n��2
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE