Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
844e22dd38a08217c64322ee018ea293ede53e660b79e841417b78ec8a28d0e9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
844e22dd38a08217c64322ee018ea293ede53e660b79e841417b78ec8a28d0e9.exe
Resource
win10v2004-20240419-en
Target
844e22dd38a08217c64322ee018ea293ede53e660b79e841417b78ec8a28d0e9.exe
Size
4.3MB
MD5
59d0282fcb01a6735aca82dfaf1098c6
SHA1
affbbb62e498264858f37b6b540e952371a17831
SHA256
844e22dd38a08217c64322ee018ea293ede53e660b79e841417b78ec8a28d0e9
SHA512
4449b3b6408fe112197f7b9405ba24eaaab294d13c661f3386b97fb0332c8bfba6c2daec8ec023a24732f55b330fc46b9ec93585a074e64bbb2aecd1e539f510
SSDEEP
98304:lfgl8Ig4nttHq4oaU/7jigBljWiqSmhJQ62W/ok6f/R4H6:l4KIJtaFBwiqhJSW/le/u6
resource | yara_rule |
---|---|
sample | family_hijackloader |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ImmSetCompositionFontW
ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
StrStrIA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
GetDriveTypeA
GetACP
GetOEMCP
SetEnvironmentVariableA
FindResourceA
GlobalAddAtomA
GetProfileStringA
FreeLibrary
VirtualFree
WideCharToMultiByte
GetProcAddress
LoadLibraryW
CloseHandle
WriteFile
CreateFileW
GetModuleFileNameW
MulDiv
GetPrivateProfileStringW
WritePrivateProfileStringW
LockResource
LoadResource
SizeofResource
FindResourceW
GetModuleHandleW
GetTickCount
ReadFile
GetFileAttributesW
GetTimeFormatW
GetDateFormatW
GetFileSize
DeleteFileW
lstrlenW
WaitForSingleObject
TerminateThread
MultiByteToWideChar
lstrcpynW
Sleep
SetEvent
ResetEvent
SetFileAttributesW
GetDriveTypeW
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
CompareFileTime
GetTempFileNameW
GetTempPathW
CopyFileW
SetCurrentDirectoryW
SystemTimeToFileTime
GetLocalTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
lstrcpyW
InitializeCriticalSection
DeleteCriticalSection
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
FindClose
FindNextFileW
FindFirstFileW
SearchPathW
lstrcatW
CreateDirectoryW
GetCurrentDirectoryW
CreateProcessW
GetFileTime
SetFileTime
DeviceIoControl
GetLastError
SetFilePointer
SetEndOfFile
GetVolumeInformationW
GetVersion
GetVersionExW
InterlockedIncrement
InterlockedDecrement
LocalFree
LocalAlloc
LoadLibraryA
CreateFileA
CreateFileMappingA
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetProcessHeap
GetSystemTime
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
VirtualAlloc
GetDiskFreeSpaceW
SetVolumeLabelW
MoveFileW
FormatMessageW
GetFileInformationByHandle
lstrcmpiW
GetFullPathNameW
lstrlenA
GlobalSize
SetLastError
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
lstrcmpA
DuplicateHandle
GetCurrentProcess
FlushFileBuffers
LockFile
UnlockFile
GetStringTypeExW
GetThreadLocale
GetShortPathNameW
ResumeThread
CreateEventW
FileTimeToSystemTime
LocalFileTimeToFileTime
GlobalGetAtomNameW
GetCurrentThread
lstrcmpiA
lstrcmpW
GetCommandLineA
GetPrivateProfileIntW
GetProfileIntW
GetProcessVersion
GlobalFlags
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
SetErrorMode
GetStartupInfoW
ExitProcess
RtlUnwind
RaiseException
CreateThread
ExitThread
TerminateProcess
HeapReAlloc
GetTimeZoneInformation
SetEnvironmentVariableW
SetStdHandle
GetFileType
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
SetDlgItemTextW
IsDialogMessageW
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
wvsprintfW
LoadStringW
ValidateRect
GetMessageW
GetDesktopWindow
ReuseDDElParam
UnpackDDElParam
SetCursorPos
WaitMessage
GetWindowThreadProcessId
IsZoomed
ShowOwnedPopups
GetDCEx
GetTabbedTextExtentA
SetParent
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageW
GetWindowPlacement
EndDialog
GetSystemMetrics
CreateDialogIndirectParamW
DestroyWindow
GetWindowDC
SetWindowPos
ShowWindow
RegisterClipboardFormatW
DestroyCaret
MessageBoxW
SetScrollPos
GetScrollInfo
ScrollWindowEx
SetScrollInfo
BeginPaint
EndPaint
CreateWindowExW
DefWindowProcW
CharToOemBuffA
OemToCharBuffA
wsprintfW
wsprintfA
CreateAcceleratorTableW
DestroyAcceleratorTable
WindowFromDC
SetClassLongW
TrackPopupMenuEx
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetTopWindow
CreateMenu
MapVirtualKeyW
GetKeyNameTextW
SetMenuItemInfoW
IsMenu
CopyAcceleratorTableW
GetMenuItemInfoW
CallWindowProcW
GetMessagePos
DrawEdge
DrawStateW
FrameRect
DrawFocusRect
GetActiveWindow
GetNextDlgTabItem
GetWindowLongW
DestroyCursor
GrayStringW
TabbedTextOutW
EqualRect
GetSysColorBrush
RegisterClassExW
SetWindowRgn
SetRectEmpty
DestroyIcon
GetIconInfo
LoadImageW
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
GetClipboardData
OpenClipboard
EmptyClipboard
CloseClipboard
TranslateAcceleratorW
LoadAcceleratorsW
EnableScrollBar
RegisterClassW
SetCaretPos
ShowCaret
HideCaret
GetAsyncKeyState
SetCursor
DrawTextExW
DispatchMessageW
TranslateMessage
DrawTextW
DrawFrameControl
PeekMessageW
PostQuitMessage
IsIconic
IsWindowEnabled
FindWindowW
ClientToScreen
ScreenToClient
SetWindowLongW
DestroyMenu
SetMenu
BringWindowToTop
SetActiveWindow
IsRectEmpty
GetWindow
IsWindow
GetClassNameW
GetClassInfoExW
DeleteMenu
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetFocus
GetDlgCtrlID
GetMenu
FillRect
InflateRect
GetCapture
ReleaseCapture
SetCapture
KillTimer
SetTimer
LockWindowUpdate
UnregisterClassW
GetWindowTextLengthA
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
IsWindowVisible
GetSystemMenu
RemoveMenu
IntersectRect
UpdateWindow
IsClipboardFormatAvailable
SetFocus
MoveWindow
SetRect
CharUpperW
OffsetRect
GetCursorPos
GetSysColor
ModifyMenuW
RedrawWindow
CopyRect
GetWindowTextW
SetWindowTextW
GetMenuStringW
SystemParametersInfoW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
AdjustWindowRectEx
ScrollWindow
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
WinHelpW
LoadBitmapW
LoadCursorW
InvalidateRect
GetDlgItem
GetDC
ReleaseDC
PtInRect
WindowFromPoint
IsChild
CreatePopupMenu
AppendMenuW
GetKeyState
GetClientRect
PostMessageW
LoadMenuW
GetSubMenu
EnableMenuItem
GetWindowRect
SetClipboardData
GetClassInfoW
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
LoadStringA
CharLowerW
SendMessageW
GetParent
EnableWindow
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthW
SetPropW
GetPropW
CreateCaret
RemovePropW
MessageBeep
GetTextExtentPointA
GetDeviceCaps
CreateSolidBrush
CreateRectRgnIndirect
PatBlt
CreateDIBitmap
ExtTextOutA
CopyMetaFileW
GetTextExtentPoint32A
GetTextFaceW
GetROP2
GetBkMode
GetTextAlign
GetPolyFillMode
GetStretchBltMode
GetViewportOrgEx
SetAbortProc
StartPage
EndPage
EndDoc
AbortDoc
CreateFontW
StretchDIBits
DPtoLP
SetRectRgn
CreatePatternBrush
LineTo
IntersectClipRect
ExcludeClipRect
SelectClipRgn
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
StartDocW
SetTextAlign
MoveToEx
GetCurrentPositionEx
TextOutA
CreateDCW
SetBitmapDimensionEx
SetMapMode
SelectPalette
GetDIBits
SetDIBits
RealizePalette
CreatePen
CreatePalette
GetNearestColor
CreateBitmap
SetBkColor
SetTextColor
DeleteDC
Pie
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
LPtoDP
GetMapMode
GetWindowExtEx
GetViewportExtEx
GetWindowOrgEx
CreateRectRgn
CombineRgn
CreateRoundRectRgn
CreatePolygonRgn
EqualRgn
OffsetRgn
FrameRgn
CreateCompatibleBitmap
Ellipse
CreateHatchBrush
RoundRect
GetCurrentObject
GetTextColor
GetBkColor
GetCharWidthW
GetBitmapDimensionEx
CreateCompatibleDC
BitBlt
StretchBlt
DeleteObject
GetTextMetricsW
GetStockObject
GetObjectW
SelectObject
GetTextExtentPoint32W
Rectangle
CreateFontIndirectW
PageSetupDlgW
CommDlgExtendedError
ChooseFontW
GetFileTitleW
ChooseColorW
PrintDlgW
GetSaveFileNameW
GetOpenFileNameW
EnumPrintersW
OpenPrinterW
GetPrinterW
ClosePrinter
DocumentPropertiesW
GetUserNameW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegEnumValueW
RegEnumKeyExW
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyW
SetFileSecurityW
GetFileSecurityW
RegQueryValueW
RegDeleteKeyW
RegCreateKeyExW
RegDeleteValueW
RegCreateKeyW
RegSetValueW
SHGetPathFromIDListW
ExtractIconW
SHGetFileInfoW
DragAcceptFiles
SHBrowseForFolderW
ShellExecuteW
SHGetMalloc
ShellExecuteExW
DragFinish
DragQueryFileW
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_Draw
ImageList_GetIcon
ImageList_AddMasked
ord13
ord14
ImageList_GetIconSize
_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_Create
ImageList_LoadImageW
ImageList_Add
OleIsCurrentClipboard
OleGetClipboard
OleSetClipboard
CoCreateInstance
OleDuplicateData
DoDragDrop
OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
RevokeDragDrop
CoFileTimeNow
ReleaseStgMedium
CreateStreamOnHGlobal
CoUninitialize
CoLockObjectExternal
CoInitialize
RegisterDragDrop
SysStringLen
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
VariantTimeToSystemTime
SysAllocString
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ