Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
setup查看6034.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
setup查看6034.exe
Resource
win10v2004-20240508-en
Target
setup查看6034.exe
Size
654KB
MD5
19c1e8dad0974df594dc425077aa59ae
SHA1
2481b3ed82e299918b82a296133f0bcb01993e96
SHA256
1f7563a52347dd04eef3919ed5b8d3652f134b5566d1025701cd45f407cf6030
SHA512
8443309a6668d324dd097fbab9f96908184e81eb44305a4676553510f4ab4eb319e1d9aa00af62114559cf270bd6fc4667c06e0fd57d960559d3e5231d956965
SSDEEP
12288:gbkPQSWaIPHl2x6XjIsJXYqUTX+Q2ftWl0Ayx2SiF62svC96gJWBYJJsxkm1:gAP8aIPF2x6XPXMTggyx21FSvC0gJUYG
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
LoadLibraryA
ExitProcess
GetProcAddress
VirtualProtect
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
�r �$yЩ��qT����k�;h�H��+�q�t�x�a����+����n�p"�g9�$E��nj����[.�A�Ԉ��S����@V��?�^�c�e�١��[�X��D6�x��*I�C�|gc/��7cE(Y��K1��@e�zj��Apc F��t"tH��/:)�x?,�<�B�S�Ĺ\(�c8'�)/f�����Q Q\�dhxoY�������y����#2TD��+@�F�� �8�,���dR�f���֪غn��Ӆ�eg� �m/#�q9�m���cS��VY_q��'��v;Y'���cp��q���r�0#���-9:-�/3�5AnZ`$D7fCZB��F�ʚ7��V���bF���WpIe�8�V��g�*M�^�4�yQs�� Sݍ.9���̃LBG�gvY�5���F�P���]W��c��Q:�L(x�����(\WE=����C�iC2Zp�/�k�&S )��Ip]�0^���돓��}���Y�Y��'t4r����;�[.Zs���s��Z�L�Ʌ%D)���U����s�dV&�6��!c�7�����V��'�9�}���W?�p��F�{�8���W�,@Nc�8��&�Xx�T�����Ϊ�G��B\���G��!�g;p(+�#S㋊����^k��T��E�����w59ڦ�E$��Z�tD��R_M��)����T���N�Gr �'�����?�z`� 9��xC�/Ҽ]���K�?F��v�G����.���˪� @�.7]�۔s�v| ��|S���㘿LИڌ��L�Hv��.�!��d��Q�۴JF%� J�ؽ���`3xy�/�;��a�Bx ;��^V�z����� Yx�����|��������pb��FJ����H�s����U���լ�ǚ�2�Ɨ�����NIF˳���qE2-E$�!�SNܗH�WՔ�d����j>�$}��wE��G�51�*���s ?��R��g)���y;l�2N�<}�_��N�-�qZ:�Ķ<�7�\}7e,0�ыtL�+t'�4�f������36� >��G�?�� �:�_��\A����v��?K���(yit˧�':*�i�F��s?�=<�vi�N(Nf���R�����Iޱ�6[ )M��%��FoY {���o���!�.y�8�\����H����:9�N'�����+!|��5;�&�c�#I��dh� }=��9�"�y�?綪���w\o��|��Ǒd*��s���vJ�� ﴨ�V �{+l�����I�G�78��F0�k�R�SJ��xbu����K2i��/��#c�x�k�4�+��K�0����CJ��F0�"{&��Z��9�H���R�N6*���z2�xk�pV^.��k�� g*ɭ�I�������Q��Y��3#� ��z�)h˨� uUd�*,����y}?nfAA��d>}:����(''��L�o`����NgzJ�R�;f8.S:o|pFpfH�����$����/�ܥo�B ��}~�qs~�h��"w�M��/�`���u�� Z�jR�_X�Z�Gb+c��2��Fo�xVH���P�*7b��b���lD=��x��՞w�����&���>l�3���<� E�D��*V�$�ɂ �(�;�7{��P� ���H����#�" ��Ӧ�<y� ? n����� �VG2M2+=Q/N_�cHN��CU��-*���K���Y�.�\��RXZ�zī��: G��L�\G- [email protected]]d�AQpc]�r|�=Gv�wV�9��E[aH�� ��ӛ ս���/��J���<����=��e�KE����a��pH�9���S$h4k�>�������9����&A�{U�5�<W���t8����v˃��Γ� T^&�t��U�nd����[g�"�h���X;-�K��up1��w )oKj�#Ns� �6%�;���� ��Y�M�"A��������G��O<�Kn�7��FX�,�� L�;'ŷk=.��ސ�����Bg�.�p����A����:��V���$�H����Xڥ��ю,: `��$��볿��o�d�3�c�I5�� ���;s���>���!�d�B�"���7k�篈y�������K��Èt�u�x��\)�͊����~v���G�V��!�DaV��%.x�|�=�#͖��Nů�$�EKJDS���^�-����^�<L`�Z���ږ�W�S���у���6�S1�)����;��?��D��-p�Y�\K1�pr(rm��XL��`D�.�r���!]���.�xo��捄ς�����~��k� v���E^�UL�,�.�A�U��e����z(�@}@N�.$Կ4p�*ba��Ȟ�W�C&D �m�.���o�tO헬H�07v`Kd�`%���c�|�"60��r�-B>6h>>"qV�; Zv���sS�&�t{>��Lu��4�| ������8�a��pi��[{C�����z�ى<=+���;�As��h��?0{˝zk\1�us{#P��L)�<���9���\����e6���A(/7[�x��jL$���A���ߧr�����86���; q� L���>m��r��T�R��G�ʠ;���n�s.��1�i=�%���J'ڍG��7 �:i,�}#�hqN�pCD|�B:�U���@@��(�Rz�+�Q ��2��N�6l �b�/X�F��. �B�kK�w6;m�7U�8μ�8�}#�ꁢ�D�ok͵M%0��#O����햗j�lH��x���b/�{��C�bz��=3���t�/{�9/%�Լm!����Pz��S���Ok_Z���})����Kg8��c@ ��T,,�bI)� /k�>�Kq�{��D7[��ϯ4|���h&�k�����Fg�8T�S箓�?�7�X���V�c���T�H�F��_�]�z�7����� D<L���Mn_���h����6�Dn� ����9I.#H�o>�����>�{��Mۯ�֡�P��bG��':��]����i�m4�(���랭(x�E��/x�uφ��j�w��_lW����K��R6W^�$;�W-}I1(9�
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ