Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
启动游戏.exe
Resource
win11-20240704-en
Target
启动游戏.exe
Size
7.6MB
MD5
0a35b412cb6ec227c3ee1642269982c3
SHA1
17d121ee2bbf7afcacd81b82a9915979c79339cf
SHA256
7d4b6a3a6fa47638299f646a989167aaaa921bca361124e21c8550e305e0cb40
SHA512
638cfcf201084394b53b165b7df136fc2e3446e1a682e79bef8747fc0994181243b941c604acde91fe26b798cffd673cb85b029ca7443dd75cf2b0d359a43de3
SSDEEP
98304:wf+Wss4Wn1pE7J6lPkiMnwDEQktMuHQzpbMwyRGUJZXprbHkLUB7rcKtgVzI6/jB:wmWdc789krn26WQJTvfB7rcKtgTNrb
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
LoadIconA
CharUpperBuffW
GetTextMetricsA
waveOutUnprepareHeader
OpenPrinterA
RegSetValueExA
ShellExecuteA
CLSIDFromString
UnRegisterTypeLi
ImageList_Destroy
inet_ntoa
ChooseColorA
^!fuY�]���*Nύ'�O��ԱV��!��2�Pc�)��#7���4-������:#����i�;��=�//��?�x���ͨ2<���h=7�Â�� vk%Va~�6� ��C��3�9���.��ZJv_�*�s�%��6#LT~�Mb�N)�s̛ k ����vvm�?A��A�E.J�(;�7�Lp��u8C�t��p���:$A����"�.�JV�xg�~��6�=le��Q��%�yV�?aް�WOȘ�x%�Rq��$J1��IrE��j�h��s�4������=8�=Y|:�"����%�:���[�����9�oLo��{��<��9�O��>3t�C +a7;�LR�8@u��+v~]ʷXbҝ��Q�����ώᚢi�Y����g��2m�a���K��>�v�����0��j��x��9��f���Kz4YA���@.���{�U�l��p�ۛH�&U!�F�y�x�'�{��^- �T-SaР����$T鎲��9Gl���4�[)��Y�[C0���6����j̟�6)p����$c{cW����h��.��y|�T }��U�X|C8a��y��o�%N�rkr[hs��$1����隟.�+��D���)4Ft�m|�'?�af1C� |�%��E�ER"���`��m�߈�b�R�q�g�:D�:�/߃����&i����,�u����*W��ʴo��(�o&{`�Q$(����L�2ג�f��I<1&�͕��X�x���v�0����<uJr��CD��Q�z�J�~XW�%���,ǡU]��F���������0,�i0����=,P�߅P��}6���R��[k����m+��wy�"�\�^�.�E$����e&�����U�+�I� 31Zw���n�����[̑�U��Xr���J� ��gQM h��ӗ���C;=�?*�Q� j���+��pl�4�d8t�_T:�z7�]Y��ʀ �9T�<#�� bf7�N���rF-�~�+�D�Ƣ/~�Px�T�y���Ŝ&~���w��tD��Em�~����N)[*�j�vm;���;��ȋz��s<���m�@��b�¹*���H �z4��Bv� ��E��}n�� R�pvS�c$m��#.!N��c���Y���G#�U&Cڬif��G���'��_{<XU����\��oc]�^�ȇ^o��a(���a�xϕ �:k�7�����ūbS�@��G������'}��l� /)w��QI˞ Y��u�6����:B|��W(�u�6�}4璓]|�ׄ"���?.-���e�L�1����7u����� h���hX��l#4?�ہc�Zx�ֈ����15��g�����%!S�U������'��LM"O{uv��,к�C-;�����2�[Ɯ/`o*�.�A|�suM��㴛�3J�>��L8��c�.�����L������`�h�{�����j��~� �ֱ6�q��d�����h*�� ��_E����5�v����Bݛ��JKNJ�3��)�|�#�y��!@����n���2��1fd��yhp�l��-0y'����Z�j3�����M�1x���/�r�9'G�:F�j��҂Uk�����P-q� ?m��5��V�r.�TW=�V� <?M@, ��ZCu5ݼR���j��(?���z�@�'J�ߤ����x����z��tJ��U�&�p$��-+-��i�nM�x"M![�Nq^� �_�U��[��"�tW�똧z��$��K*�r#�gX�����m��"�)s�6���'�ִNzt�T�$���3�-٬�\u�7�gu�����Hd��@\���G��K�I~C�۔��-�8�Y��T3[��1��c��Uy�R��p�c���V�̄��1���~5�K��[J1��@�WaT ����}<��5$}�����S��'D��� Q����<�R�x�����wm��7jT��x{{�������u��,6��V�X|*ޜ�h5G��VJ�-��(�����B�Rm�~�����?H� �I�O���%�OP�1C� v�H�O|�c�.���8_�I�M7�5q�U���4q�y䐰j� O�up7�u�w�E�-�l�"/+��C4 �.�7C$��Y)�B�V\|e�V|p]��S���D�A+���e�tLU�@l��2���6�g���(�3D����%�����cЎ>ɝ��W$\���Y���Y�bT�ϰ���fP��yF Vej�q(��1� �V M89���S �o#�h���Ľ2;'�{e��tC�6�K�d@7�� �X��Ab������Fj5m52�e��\���B#��J�{��R�^�u�;gw�V)Fփ�z0t�3<U P�!�&�%�EW~��g+~�X��'�79�U�v�~n?=!j��U�}m����j$�@�,i>SO�٨�^��c�'�C{Q�1zh�ke7��U�Ƽl�H\��t�̃�[�f�0��� �-�:��ʈ�'�N2Ф�?����T�ͶsF"�<2� �r �"]��Uꁺ=}?�0��>>����'fl>�9@@;}�09���z�7�)ع�Ѐ4�l�eFK?�G&��� ��6Yz���r�!���� g$~��(��H�ɝ�� ʹ9��"i9D���zqe�:�e�ᰛ��ͳ�/���;���^�Y��QW��v��t�k� �T�<�U�ԋ�(ߢ����Q���˩�:����A�d���'�H�ِ����7�.o���� ������c���/~ʎijX���Z7O(l]���&]`�)#vl8��, ����xQ���7�A���+r!�Ƣ�\hua+#�#����Y��8�P�J��;�;n���״�$ީCx���Ne������S���ډ�*���z�z�s�Ĥ�������]�c}�x��Y���7���;��&Y����!�a%��i�q� N�R�M��@m�M�D��ȧ(�1����?O��m�����c�1��W�]ƥDF&�4���J.m��lĂ��]0��k�\����)�\����%*�ԃ���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ