Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
4aa8fcad0e4d36c4bc26296a2c85971f7f1625a93ae09594783a31f704c943fc.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4aa8fcad0e4d36c4bc26296a2c85971f7f1625a93ae09594783a31f704c943fc.exe
Resource
win10v2004-20240802-en
Target
4aa8fcad0e4d36c4bc26296a2c85971f7f1625a93ae09594783a31f704c943fc
Size
9.3MB
MD5
dab84544b48f289cbf16fcbf0e8c4117
SHA1
7d24a97d8f2c5f36111f0996cbd4b3490db76882
SHA256
4aa8fcad0e4d36c4bc26296a2c85971f7f1625a93ae09594783a31f704c943fc
SHA512
188ca5fb97f812d54d9d659547f2070de7fb2b5e8f8248dda74c9f608973add132f579f1fcb125c18edb8aed773b79efbdcd758e77fa043aca6581b6e585ffc6
SSDEEP
196608:PeAJlSnKkM2IUNPF4Sv4p5dXN8kWPoXig+TUnjkB6yMDYBy1:GAmNM8mhuAXbNMMD2y1
ExtKeyUsageCodeSigning
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
getservbyport
mixerGetDevCapsW
GetFileVersionInfoW
ImageList_Create
HashData
CryptBinaryToStringA
GetModuleFileNameExW
InternetReadFile
GetVersionExW
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
EnumWindows
CharUpperBuffW
CreateDIBSection
GetOpenFileNameW
RegQueryValueExW
SHFileOperationW
CoInitialize
SafeArrayUnlock
WinVerifyTrust
ADDFILE
ADDSCRIPT
AHKASSIGN
AHKEXEC
AHKEXECUTELINE
AHKFINDFUNC
AHKFINDLABEL
AHKFUNCTION
AHKGETVAR
AHKISUNICODE
AHKLABEL
AHKPAUSE
AHKPOSTFUNCTION
AddFile
AddScript
Addfile
Addscript
AhkAssign
AhkExec
AhkExecuteLine
AhkExecuteline
AhkFindFunc
AhkFindLabel
AhkFindfunc
AhkFindlabel
AhkFunction
AhkGetVar
AhkGetvar
AhkIsUnicode
AhkIsunicode
AhkLabel
AhkPause
AhkPostFunction
AhkPostfunction
Ahkassign
Ahkexec
AhkexecuteLine
Ahkexecuteline
AhkfindFunc
AhkfindLabel
Ahkfindfunc
Ahkfindlabel
Ahkfunction
AhkgetVar
Ahkgetvar
AhkisUnicode
Ahkisunicode
Ahklabel
Ahkpause
AhkpostFunction
Ahkpostfunction
MinHookDisable
MinHookEnable
addFile
addScript
addfile
addscript
ahkAssign
ahkExec
ahkExecuteLine
ahkExecuteline
ahkFindFunc
ahkFindLabel
ahkFindfunc
ahkFindlabel
ahkFunction
ahkGetVar
ahkGetvar
ahkIsUnicode
ahkIsunicode
ahkLabel
ahkPause
ahkPostFunction
ahkPostfunction
ahkassign
ahkexec
ahkexecuteLine
ahkexecuteline
ahkfindFunc
ahkfindLabel
ahkfindfunc
ahkfindlabel
ahkfunction
ahkgetVar
ahkgetvar
ahkisUnicode
ahkisunicode
ahklabel
ahkpause
ahkpostFunction
ahkpostfunction
�3>��C��C��"h�}�k�I�z�J�ԏ����&���� �ì1�v� D��⸤�������z��k���8�pV�/�K�X�ly(��~������O�0�y"��>� %ZJ8������'�kY�nc��x������e+�s���M~[�8_h��v`� Ya]���Q�x�We7��] ��P�g.�D���}`VYaL����w=�����О*/��#�Ղ~��8��F�� ]� 0a�P ٽ�@���Q՜�/VȪC���Z��L�=.��W쑻��{�4 �iC-��j>*�(o$���l��d�>����¯�|W�p����@���C �{3jVTtt�C����\�sH44"���NB��SoIc�{n�4<K���@�?b����/ ��x ���`f���>L�x@UU�O�2�����9Y�ѝ�`}�&�Em�oɢ�4�6���Pܝ8o�� %T��`i%T;����Ϟ��&���/ο�������:P6,:��Wͪ��;�0�{���վ���\�c�A4��@Jt�9}�n���D�m�/~���4Χ��A�$h�-� ~a�� O�(��3b�7o@��Xl�LN�v�pK������H�n�QJ����@1����W�%�4���p�ɮh(�7�x�q�R͇�EE=��ȝ-`�P�Խk������-�sۄ���hC �����BE���k��I��&�,�����x�F�c������TJT��E���e��M-� [m(gU[,Wc��C�����/�F���!�>l���xO%�U��/�W�,�I��p��,W`�#W7p��"�=��3�5x�������r<����(����k��$�ovvW�O�����d���}�lN�#��4�+t��6�=4�hy����b9I@��y8��w�ǥ&d��:�vQ��z�M_�7�Z9�Հ����0����ކ*�e��f,-�V/���>���dΉ�|���zl�AE�>�p�zUR>夲��B���l���?��u��u�}�ںM{s4����yX6�"F��ܦ�G���dE�`���tE�(���1~����*5rc��q@� R�I�R�����nq�űB�x+b?�F�~{`���-���H)��������'��?�a�l�N�. ��*�Ip����oq|^K���;V�6��!�PY�Sv�w%��ݳl,�S�|����W�:�I�!���W@����L�7������-�_����6�g}Ԥ}����|�m�o\��Y3�/4�C�!� ��g�D�o��,� B"���� �Y���c�`3��q~�&d>���\��ǏM�5���K�2<ζ�L0�t>�r��������6�"gϡ0ד��S2(Y�'��3��Z�c=kϩ�H�5n<eb<N���{+?�r�Vm`�`�ӕ[C�XĔD����`q\��Р���"�`���ÚI�%�¦�C��z�n�*8�ɣdCT%K���1ɇ`Lヽ�����h���(ƺ8��PsF,��k��yn��2����\A�,�1"[���Cܫ��4_h���������`TDc�)���x�.�@���@��� d�������hbF K���>#����oؿ`�}�%C�_}�����%�=�BT���a�Sz_p�sgL�m�G[~��}h��,��+���E�9S�椰ٳ[_V@O��%����1І�"�_�,�m�����_>s(驱z���@���9|�����-,<�c�,�!.�?6�����R${��t���W�h��:�M���g�����_�:���p���-r����vᯖ��Fq#m�L��c�����,W"��g�0��Zs.����j��N�&�jh������~E�����\�/h��8 ��G��M��A�[5�듓RHO�On�"�������������T�\���;���؆4�G)�<��s*՟]~�� ���_�����z>>� �x�����r�WR�����P`PU��1�e������d.X1'[u��9��n|v���\M�d�t��%������K�1N�P����D`�:�V;�-�f��2E3�����+a��T���a[���m/�b��؇�FA���?�b�7`'V*��D���k�: $<o�q��H`E���Ō`���W��o��}��0�� ������(�4��p5���yS�,���V��|%���w pM��A������(i%̏q��u��;�W�����ҡL��DY��KU_�"\5L����`,���GO�y.*��4z#1��~w=?J ��� ?�7���^)�r��~\�7�Ҝ,c���qG�<�YE�~���-p����>�E�]]쨼�xkO� $1Z���UݒF<G-���|������U8l @8f��ϖ��)�u��`���� E5^���F��\��*���8�Z��3Λ�LLv��� �aP��F�����W�.�m�P �P�1'�z[��=Q)9��m�0tC��[�D���K�2 �^�X�g���'m u��/�<0��HTZ�G�z��$��߉���ZxN�${e���T����u�)1�G(4�0��Q��K�$�~�'I�����JJ�cC��V�%�n���B��� �b���>�͓��R+B��Ⱐ����JA����Jsu���2�����C��z]�S?=��Ǽ���s�,�����U.W�5�+։�hb�/�6�Re ^�G5v��9_���9��������8og�D�CMLZ�E�:)����q�/��N��]� .������B| ���.����k����vTU����&�n)��k���5�3�f��S������-`ļ:Oj����*/����V`"J��P��u�d�c]uG���/z�Ӎ`�\����,Q�i���k�P���`���������]��fi5B�J�D�����L�Zd�'��f����my](�1"�$�� �h4���y^ m��2�8���Đ(Se���nRY���_2i� ����Iƪ����n(�Fr�+�jWp.�s$L�����<����s�q�Lel��!�l��ޣ��� XΈ]�y(��Ǹ 1��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ