Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
aa6d67672a9affc8394ede5fdebd546501f8180f2c7b628079699cadb4497230.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa6d67672a9affc8394ede5fdebd546501f8180f2c7b628079699cadb4497230.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
aa6d67672a9affc8394ede5fdebd546501f8180f2c7b628079699cadb4497230.exe
Resource
win10v2004-20240419-en
Behavioral task
behavioral4
Sample
aa6d67672a9affc8394ede5fdebd546501f8180f2c7b628079699cadb4497230.exe
Resource
win11-20240426-en
Target
16954318354.zip
Size
16.8MB
MD5
ea1f9761358725adc003230fee3016a6
SHA1
0c63a1c4eaf75a222e6a0023f7f032ca118c9993
SHA256
6d0cdbbe6efdc60ec5e4c5b5a82f40fc86846824425c1aca2063ff4486ba243e
SHA512
3cc2cc1cc4427c843a5d1439e351a7869d5016dadc8775447ace042b270b05317284a7b2da99fcd64a457635d79bdeeeda606398be0471636fe92714d07a7173
SSDEEP
393216:j18yRQC+eNrgWtk1WuG11jMHuxE+OUHtrlojc7IgF:myR+gzkStjxE+vHzoA7Is
resource | yara_rule |
---|---|
static1/unpack001/aa6d67672a9affc8394ede5fdebd546501f8180f2c7b628079699cadb4497230 | pyinstaller |
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetClientRect
ord380
ExpandEnvironmentStringsW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
OpenProcessToken
CreateFontIndirectW
/u��pF�����{��]�����1��pCZ���P�'�v"�v���2[�:Q��ذrDrɘ�L�������QlI��P�I=�����}�8 /���OU�^.W5pe 5�E-|��%�4K���Jq��M# �@�"���̄��1��a%��v��:�,���[� ��]3���z��$W8#,�����q,����`���E����6@1�C�I��"�)r����z���� ���F�Y.���v���6Ӌv+� �W2�O�#ݓG�.EI3;e�c���ʧ~�&~�?�$R��f�+y�. ��vZtf����{�7o����d%J�N��}lʎ�D�(0�('�D�e6����|�b�(�n ����B��������d(�Mf~�V/�&�);/u�Gփ���=������uH�7��|S �(���b�����sZ�ǤL����c�'��M�{�L�Ä���T�DOn��)��o@M�.*+�����<�l�������NoWH�k*�[��G�B��'>���/qM����@����K�1킌-�1�M�l�I l�e�[�P����X�O�y�����M^*B�%VN�Cq����(4ª��2�K�F� �oY]�$$�"E��#�Ī�3��Re5}g�K�uj(>R��]��c�r`�n�+�[�cؕoa��ˢx��uL,���}n5q��������|6��U���osu��*G/U�˅ϊ��y��t�w(�=P�d��^���#��:�J�xK1���(�s5�2M�d���ȡ��-�=[��cc� � ��V�O��`P$�At��P�/�vA�q���֦'����<���������tfa�$/!�� ~��7;tb�B��_W���jDq���Q�lP[|�ք��B�oh�� ��a���H�%)O~�?��2�<��P����,wj�s :���%`z��i?�A�B�]H�g%H�\w�^IWp��z�P�y�Z�h��˽i%\j?���۠�)�ʊ��Sj2��D&wk���?�S�yqn�a0����� �͜'y��5�^},]�(q`�^3�7ƨ��y�k0�z��ی�- �>�S�Ni� ��^WC������6��J�jJ�NXX�$�V�����iA �!��֒�i�vP��X6���l��*<�|H�ܝ|�ۉ�}���mZ�H}���"Z���s昖����r��bۯ� �����}b��,"����f=���N���_șݑ�٘x��<M�'h����/�b�x�Ȱغ�%���yi�BW�����s�s�<ً%�����?� w��Բ��hpq9ɜ ȧJQ�"�L�vз��1��f ��'���u;���j��.QL��(�9��P�bmW��U^�(^C!��O+Ƭ]��>c�8Q ���U`�F��BA\���I[*Q+�L9�����M����cH�3y}���7k���^�g�t��>��MN�����R�WU\�8 b)�G%~K� ��l��R:����·��46Qa��� ��E����c��Y�Y��͐0gn���2����|اl��m��w�3�/���0�`�S*%[�vĂ0*ߣo����Q��Z��*�����c��4��EW��9"�1��#Kx9���A�r���b{ҁ���u�C��\�O��(�7�$ۉ��\SB�ˁ�5���N�� R��1>'�'KBx���C��(������f�f�y��I5Ǫs����g`cU��"�g��9�"Ux�ϩT!������w~�. �'Yě������t�KB�э�a}��*�8�-�RE�I�xDQ K@�'p����J�S`�h�@#ng�����`��j�M��Z�g��ՠ"�����U� �U�`ȋ˵� 3}+ċ�pA���"���K�����B��Q���43U\i-�3����S�( �3��=��ޔ^��3���3Z5�$g\���0��gcԅʯ;��\���W僱�vyq�G�]�SJ�5�j�Ej.��E����8�h�Md^8N��q�IG�GKg�|)~?,<�=��PdY��-��I4W��pݛf��ЀQ��n�l9x:�������n9�m�8���)�M�n�n�j9%�#��_Lg�t|e�tk.dsҘ7�C,�ᾑ���L�����O~��������+7F3��f?���9�%����ގ��`��@?�'_7\S%�cE9� uUab�����"�ɀ##���F��D�:UiCy�/�p�@=H�n��u���s��)H���+���f�$�īr�ܼzZD�S43���]z� �r�cn:�9A�=�k�ކC\&!�QDayF�!V/cO�G�>W�P9����)}�-�� �t?QƔV/�h�1!B{mn��k�\�"�������.�.�������d�l;Z��nr��FE�7�_*��?��ꬌ��M��L����n�YL J�'�=��A��uq.�7��6�p���^��`m�p���S�Oz��>�Ǭ��B��'2�U9�m�`U(��&:�VBִ��X�K�Xݒ��D*�!��{��j}�mWw�f��媨�M�� ��a����?&�߰���.�_�g3�4��/���d��4Ehh����} V �b�,��i?!ͤ�l�ń�� 0lk�Zʼn.�q(�C�9�x��n�s��@��� �A�ݍ���X����.��[1Chw)"�fԹU�Rkߥu�t+�c>n�M���zv,��!k,0#�ۆn��u��[����ճ�M-�9xs�t19J�\XR�tjׇ��N�l���_�����6e��@�CJ�@���d����x_h���Yb2���i�Κf)sS&f�'�C4U�K�H-�n0��ó� \ߞ��ф� ��pJ�\�ɜY�Js;�����P>|�9~�j���t�uc�p���=��L���3MT�����Wчoj^R���y��Y�E��z�����㲟!�lk��+���E��Ϫq���x��y�����Bw�3�� ��X�&nE��)i/53YU%|�LΑ�@v���b4S�]@��k���v��g� �T�u�>��,���D2[��x
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ