Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
Repair_Windows.exe
Resource
win10v2004-20240419-en
Target
Repair_Windows.exe
Size
7.1MB
MD5
22aa1013c8d7aade53af6e6bba5cce27
SHA1
4d2276885fd93104ca0be00c9a856858dad69555
SHA256
a7d3ca56723ef161fa9f443e70a1b5fe99cfaf7623fc663730e2f76f380966e9
SHA512
2e34fe72833961f1f94994b7bcf323a9a58a2c9af935815a1c8d5a80b18f53ba3207d8e61a44b1232f4aecd66130946bd9fac818c772367b3cf310fe310a2ab4
SSDEEP
98304:8bv19wXFdVEgo2ccABn4qZsZl9yOaehD82aCD3w1g2NeIZ7xTCBwDmVr1TgCYefg:SwKgcpZsZWUFaCD3wIItxTaV1fI
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
EVENT_SINK_GetIDsOfNames
WTSSendMessageW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
T�:m� Þ#i�1�&����B" �����ʩ7�=�y���9��C�5nZ��;�u[��6��$���0V�~�?ܿ�Yup�Ã�u�Oˮ5�E $������k<���.�-B^����5r�*��I��G��y���?q6�����ç��B�&6皙N�]�|X�����K��4Ֆ�Tݿg�3���T��IGo�$ �/Y������r����3 4�~�߀�X?�1EEFdѽ;�L}��@bm��������S��i���.�>V��C��zCz%��$�yDa�7���"u'\Q�V:�'E#[�pЧ���_3��ey����ʧ8wx@�F��n�+u¿�l\�]P��U�F86�sc�b_�.UYz�Y�l�̱�H�L3� ^�n.p�/�O�Õ3B9������n�#�f���DY�ef�SY�<�`r�;ϝ���Qm@��ia���"��?F�����Em �9�c�JD^�y�O�ύ��':��8��k#�v�p�����A�Sb�G�n�ƃ����- }(��R3��s?!����#be�>J?�A؝����(t(�Ɗ�-f�ve� Ct��j>,-ah�Nz��.�`]�h+y�<��d���iy&�qw�m�{����%���`GMɵ��l��� \J鮎�S�@(~��|�'��:�d��抠m� �WA�"9�{��ݴo�a<�����)jI�u�ya�tI����t����00s�V��r��g�����7Gɻ��G�G�i���'�~�fȥ���SK�{�C�5zn��Ɇ�������f~���W� �ö4Fd�zc�cbC=s1�/)"A��L��M��3� �Z����o?���IQ�zb��u��Vu�p�d���*� �������C��H��E �S��o���Ԃ��ˎyÕJ�|��P�u�D�:\z��M�!p�E��9��S{��e?�R��N�4�aU8=��ሆ{@rl[�x#_(�W;�,�/t�Ny�@HP�Q�����e�}�4c0�4#qސF_ӛ�W��F�EW��)Q� A�,�1��� ��/�$��,Zk7$�����ZU�ф[ELn�T�0������ȼ�aV%����!��r~���tۛ�r��o��U��я�'���]'�+��y�6��K�42]z���s¢r��č����h�.�xZ���cl���$Ϯnʑ�n�Ҕn,��p�����+:8Ӽ�-���c�-�ݝ�>�>���z���m&�=���,*_g�8�u�3̘P��MxmwO����zY�3='s\ü�������5����4�ddZ >6+��5�=I���m�F� 7�C-������G��FEqƀ�M���]k��*A��H�s�Rgו�`����?*h��3��އ��UiZ{�!�I.�D*c��-Qf�e4Hx�jk�ˑ2o7(�)����d�"�l���v� �5������p�~nK�1g�t���H-��7�6r\v0�Uu�&�F�@3E� c��@X?\�����ΔjQt]4�x{�ሬ:������+��S���ϛ�#�$:������>�\�C��c4U� �P�=��$��b�ѰOt+ޜf �yl��N���P����h�����Q��L�a�q�}���ܳhf�e��~T|9�� �����zcG�\����;$P���Ȯ�I7>n��#J�t`iZQ���~�\���� ����t�x���*�@�$�Jp��|+�>�]�o34]Z���ãY4ʶ� a�����5�T��A��S�A���As�k��*�0$'����T��l$К����W��>��3��P�N�����l��5uf��q���@����tl��dFA2��廬?�#�W�l=Z_k�|/`��V�`NT͆i��訇$#h�Z�P]=�0 �"�,{h)BKMi 5.y��+#�26Ea���Ю�F��8��tomT/�ެe��'✃�a;������i���oR�&^����7� �h��&I�����W/ϴ ��A������-<>�G��\�K̭UٝS�"�vD�U��s�/�]^K�&++1* �'a�A��JJ��T���]�{}����q]��a{��RF�@�����jZ�I@,�`���~��&��a��z����H����o��ȃ�QUǥ�X�%���R�7�'.��&i����}4PhMr���=�� Y��i����Y�����ޞc<���o{����1��������ɉL���K8p`O|��]�st�]$߈1��~���q�FG��&�$�ـ��,D�Y�Q���Կ͙���:������Dæ�3]��V��t����'��?��-v����]��c��A{V��"q[�w)�*��q,D�B/j(�����z5y�Dyn�P��ڃ6�[7Q��-7B�=*!�r�?Ŭ��9�N�C� Ӫ�~x)�r���� ��Y����Ug���� �@�ֱ�*FG�I��)4����Yc P�q�ђ����i�nVԨK;�H�$�8�z�M������ �vJn���E|�S]����rq(�ʽɓG!�q%�-m�s����_�f�1�����Euk�Wn$z.7�p>�y���h-�F��w�~��6�!�&e gT�5j��2k�I7��*�-Q~�Q9��,c��B��f�5`�WJr�a'B��Y���)��Q���^C�Z"�v)=C��>����Z��խ��R��0 t�|���qh�C�����'n��%��Y ��ke{�R]��m�Yp<#�ƙ/!N�ϕJF5_��''�/�4��%_ �\��̈́)k�?JR�PZ[ �:�2f����=���k*to�� 8�eޒ �|��S�ԥc�q�Ȓ�P�Q�U������+[>�������H��j�Q��AIL�� �u�j������b�|��IX*� �OG�Q�'�_���ϦQ�m�TU�n�R�6-�=��$�?��ڤ���)P�.5�����}��*{������)����:�Q��x���b��??�v� {R "�\?�ީ����sh;��.����6�Nᑔ^�:ݣ�r�M�{����.�E16�HM
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ