Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
SysTool.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
SysTool.exe
Resource
win10v2004-20240802-en
Target
SysTool.exe
Size
10.9MB
MD5
dcc71c178c7f777860dfc575681f663e
SHA1
dbb86ddf7b7ef6da51a37e1b859e10267c48a029
SHA256
062d501e32baff2988f0b3014fd0f1b5e24f455e6f66af67d3f219e81b1428bd
SHA512
fc6ab2333a247fa40ce99cebb456addc363e6811513b66ef0da419f41da60ab3ab713524e127cc86ce49892b37ea02f808ff9a7a55ccb4224765b57263423930
SSDEEP
196608:JH6ezxQE/q0D9r5f5vHWoRIgRqvJj4PSyMde48rS8U6EJfuo50Y:JH6eE0Jr55/JR9EZ4oqrSHL50Y
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
select
RegQueryValueExA
GetVersionExW
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
ord680
PdhGetFormattedCounterValue
GetFileVersionInfoW
VerSetConditionMask
CM_Get_Device_ID_List_SizeW
BCryptGenRandom
GetUserProfileDirectoryW
NetShareEnum
CoTaskMemFree
SetTimer
CharUpperBuffW
timeSetEvent
DnsFree
ConvertInterfaceNameToLuidW
CertGetCertificateContextProperty
NvOptimusEnablementCuda
�[7�h��r�5��e�lj�ߙ�� ��u.�pTν��Rf�e�״�t2cgd3r-x3�7=J�k���Bt��/�P�@җ�P{q�bIz[��q*�yݥl�l�^�������C~��T�j���Q��oZS�K��e��F���# ��`���{��y��Sg��H%�;��v����Ѫ�^bD;��Y�)B;ف�s�@������7?K;��O�6��Ec���ɑ��\���<cT�w�݄iZZ���EK���>��C�Tz.��P���P�&(����=�0E+�D�z'��;��m8�u�|�g:�q��l�c&9��1���[�Ζ)�S�R��j����r�|Gq���2�2�o0.儴>I�����&�_�uYB�4맬�b�����n ��� �,8��R�!\0�n�D�b����e!�)�8�L ��0=R��z4��*�9�7�]wK�bT�߮f���-�gP�^�ʹ�Zj��W��1����~N�]�B;FZ/�c����|���e!q2f��,� l�����x��n�u-Q�����"��1���ذ���s�5�.� >�O[��YG &ÄOk`L�1g���՞�_�7 +wV��?�T�L}<�--�h��݁�)��k��Yo�0ϯ�˂M�!�s}�F��-�'9�uQ�7.�H%�� �S�o��<���gN��1���L3Uª%�����L4�g}���c��7�0li�纳�|�0v�f����X��<�,4�F�P��d��Sk �K��m�����l�m� ���Hc9�5~a�*(9M�AF�݉5qf��TY�蕔Z�Rp�.k}e՟��X�TM4$W6U�bN�� Z��ZknJ��b5u�̏L����YO:v`B}���n��d@⦡1M�|���N0zٞ��Z��g��c��X���h�pµ�o,0�91='M�'�䢺,Q:�[�Q��=R@D�:�n��1��%�5��� ���UG��������.�� �`D�$���J"�DM��<��R�{Zx-c�e��D_��2N��;�y��Jh���E�zW��mfY>��,X-�J�<�`�<S�y�ƞ#��>(2�1\%7*U�y����[h!�sL��-k��:��+�-������0KrA0��$*�tҷ_�p}6C��p����I�G��^6,�F� �ya�_z�}b�����I�o���i���wާ�g�?���8�Gt���:�@��ު=�b��5g�F��9X$��4��<8�����߅�ਲ��&=S�w@M����Q���kF��-����XNn��t�4���k�x��i��r�� W��d5PtI��"�0�v{$�C���e�wE����0!�!�r2��1X�\GhY۔��!�� I<'�(��-^V�t�}���F�{� >�]7 �|,� 8o�s�+�j;d}���;��Xm�(c�*�����g�,�k|��\���E�� Vs6X�N\��j{]Z�2�j��%�?�6d������\��X�b1�Oy�:����8��e��4�^�%��$<5�2��G�RU݇_F�=_���<��`U5:ͯYH��ݪI@�~�}>��<��L~��Ba�S�������Y[�O�h����u�y4����X�9�� q�����id�z���ؚ��� h��w�YF�ao�:1��M"^^��d@w=Q�r��ۙr���9��!?��������_��q�z�7j��ձ���"Y�^�4L� ��C\��1f z��ϱ�^�����6ʦ�g�U��b.�������˓B�K+qlwG�g���#t����*��_z��2U�-�O���id�9�i����z�9�n5 @��PU��� � A\���sI�ی��F�*27h������'(+x�V��^�Q�×)�&�&��)�.\w|]9v2п��N���o�O���ɒ<%.+�F�$�x*P�C��2�4\{Ր�8���.��.dIMJQ�Q�r-��*��ن���hAk(vɅj�^�#�{�����G �}Q]�kє�^�{��xZ�� hp71��ݲ���9��.�P�=��17*ʦ�GE�x5@���0�J�� z�p��]��F.( �#_� �%���SI;52�P�������U���XUw�f��U��Ly��U��P�'� �E� Mm=��Z�W��k�$�����hI�H�?�TV̏G��l��qI,�l��K+��A�J ���]��r�#T�Q�m�%��;:���\����I��x�:6�"�*f��k���-N�NBr�� ��&��L�����Ñ�=U�1�G[+m�1pT�U}0�e�C�?j��v_ion�2���B���C�gs���͘��>���ߏ4<IQ�*�m������b�l}�s9�i<+���P`�˂d�RJ�=���s�ok�iVr��u�j�קd�u�0� SU�j��.��0&���P�1U ���>���R��{���D��q��XP�r�բ���f'��e9�����¬b���}$��*z_ �w�F�� ��$\ ���(qW5���A�iF��GM ����ּ7�C���&}G�9�����Z~1yw�f�当 �S�������$̧r%(�eE���rF�R9B���V�w���x������l0����{K�W{���S��4���l���B����bV�?B��{���,ytB�zM��y�x<�� L���]�����k���'%r��%^d�¤��9�!�[La��<bo��B��DU�C3�9��t��2����yT���2A*���� ��u�1����%`-���5��b��8�X緐��܆��t��"ש@�'�W���tD�ݑ@t��? �� Ko�.�l갦�<ڰ����I� #���PG��}j�����%[���|�+;kL����J� ���� ���&�uZ�Up�|�fѝ>�@+ ���m{:~�m��bAD��6�Y�f/ �}�5NLA���j;苽S��d(O��'����=k��?�s=WR�laR�)"�L� �>[���$ٜa"�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ