Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
color-modes_version_x32-64_full.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
color-modes_version_x32-64_full.exe
Resource
win10v2004-20240709-en
Target
color-modes_version_x32-64_full.exe
Size
17.1MB
MD5
ed1173dd0b19ab008262771f9c2550d5
SHA1
7c50e328a07a5ac4e1efa8e0efdf8e7759d0e1b7
SHA256
581ce8656b40ca16ade4b099fea89802b6081dbf07874c59ba62ee76655c2a2e
SHA512
febe44657c29adabcdaa2741a0d179da0aa609b41656f0fe5860283c9963f0f4f5bb539c8b28aa19130dd625d6805b76b13ed6cf95b610dc2cfdd5f1dfddf8cf
SSDEEP
196608:eBbzl0sKYu/PaQtsI9iL4FMIZETSkjPePdrQJM93BMJg6x9iGvPoMut/X6e0ycEo:SzLQtsTQETSkvJQCJGG4MUXx8AKOR6
resource | yara_rule |
---|---|
sample | pyinstaller |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
SystemParametersInfoW
ord380
DeleteCriticalSection
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
ConvertSidToStringSidW
DeleteObject
J�rh�,�Ew��(q�A��lkZ,���x�-Η�#z������Δ�ĜZօ��<�����>@[h��?�r҇�D�S�Ƥ0�a�#�W�9�6��u~�1��$4?�Ӽ���KA�$��o��Y8�d&H�Aw<�.Gi?#� �K��kC ��s*�1�#@�d��"^���!���D�~��n �UɄ�7�e �E&����9j�/�آ�d�7�X�����6B�'rQ�Z�z�Z����o�:'���v?[������~y1ED�n倶�:��7Z�����C���/7ӓre~0|�C�c���}�2$$��\�V���I�;�d�i ���� ��>��}�0.V���zӹ�@���]]ti G����_-O*R�Hb���Y!HX���3�w��3��$?g�5e�����![�-?Cʍ0xf�VkO��z�0u�7���T'��cH�b�����y�{�-�-��q��`8!q�R�Y��nֺ� 4�.�^Oi� �j���p��v�6lhf�b����Y�� D�噩mm�JFP���t���c Z�f���fΣ{������߲�p�<��(�g�L���9���|ϪH��b/�T�v+ �/�P�p{h��߸5�5�D8�_��爑�{£��R���%��E���Z���l�l!�]�v���p ����pJU�V|��5@�p]75�JQ��.���i� jl��e&3���^-~�eCI��|hOg�e����|�W��Sq;�k�E�3�bRu��/��!7mB���o8���֞OT��L�:�J�B��sе�T +�[��I�����x���1i�ړb�����D�+vl��]\����A��Z���K"����������GT^�����\��e����d�#&0J�k�v�4JbkG�$&��ڍ�����L�C}� ��4��'�z��UX,����T����1�V}�__���[Z��U2�Q�i69����:v)ZU:��Şi�������"��H��u�^q�'�:�8AM8��#[��k��@ �(#<���ZBl.�Ջ�mknn-��9'Z�p����?�UA}%���ø�L��ʴ�ʹ�����g��K�Q�R�%�D��� ��i�uI��* �pz�;җ5�J�t��#cV�)� ��;��f5.�y<���s�9���N��M86�2.��������ܑ�����m�����F}b7��FZ���0z�Xxc��7Q�>��$��a���[S�'5D��b2�uVyzt�riig�%nS`�c�Ɗk$�G�1a.�|���nj�0�� �{b�r,��ݥ�q�iU/l�d��T��\�pi�О!�����d��#�2�� ����Rߔe�B�|���I���y�`TT ��'�����#�h ~Ӝziִz�bC�*|�R�·�}I����I����C��"�P�4&���r��Z?4y�����N�ELh�'}w��wh0�8ݩh�𘠁c N��}IN6a�7T��#V�$��u[�f7����(kʊʧV'����BѰ�y���=k�t�0�8��o�������9.1��}6T�h`?�b�4��D��Lx�E��i�|ʾ�j)/�Z��/G�l�i|�²��H��j��O~�7s��i��F��HS�3��b�X�^��FW��; ��3JIo��a;����6�+�Y-�C��vK8������7��n�-`������6aT4i0/t� ��iu1xze �f��������a���@U�bXs7k�)���Oh�H�\�]4�@03B+��n`N�e��yFR�y�]�98�� t�T��ɘ|o�U�-{M�t��]9]ˤK1��q�g"��ZR$e:Cw�\R���Os��̦�.�t4��,� �_O�����W��Q��9�w�?�W��K�9�?<,����5��(ޏ9�� ��j�M�`�Rt�tI��M=����ӹ���h��D-�RT��%z_]ň�j!*�<l4��AV�G�*$r2֫Y)�`����!���/��T-_���;+F���l��7Q���RL]��qԸ��o�id7�v�u�Tϝ��8�5� ���DMt����>^u��ؤ��G+o*�P��R����*1���i+�1�I��x�a���|!��W�z��vUHx�@-C��O0��2���]}�Wݯ���H�t��k:�{Q�bG'Ⳬ�>�t���e /�m�/�V76�L����C��&�+�Q�u�ZłW}���T;@ �B0���(T*:w���,y����C$�Rݯ��������`��������c�$/1����;[~�Yؠ���"�w �r$+�d����%!�����-J�'Wo�:�w%����32�*J)�"r��y%�_[Kzk��=J�-<:��5�-^>��R8�)���'LU��)���j��W��3nL� ?_#Z��1y��b2�i��U:O��noke�"t������;�N��lZO��v��0��'y�dd�C�����U�`���{���y�n���:��O<��\Pn~�9L9%�h���v;��(nY���0P�&+����8�z�B)�#���A�J��_A-"ϤS�Y��l7�7���\�e�S o��EGd�yU�+`�zSE�3z�ig�N�+ݫ0�`������Z3�g"�)�U��=��-�k�%�xgb�����>e2Q_�J���n ��~ W��`S�Lj�7)ҷ����~���*�?N���ӻ��WT�wB����j��7�����h��mP��F"�eJ:^ڲX�i�u�O��0���K�CL�u>��� ���c�͚���-�.��U��y��O�4���< �_�������������#�?� �0�a��[�6�v��W��w�v�b��H/�w|"sKM<f�!<�+ң�O���9U�ԍ�َ��DzJ�˖��8'�~��ǪB*�䟝��/<?��g�O ����^W�|��]u��P�����f *�DJ\,����֍�7�I1n�m��XAl���3�@'~!B|���Djl�6ꃚ�@���CGc���F�������� �]-F��Yi}���{VFͶ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ