Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageKeyEncipherment
Static task
static1
Behavioral task
behavioral1
Sample
CompPkgSup.dll
Resource
win11-20241007-en
Target
CompPkgSup.dll
Size
5.4MB
MD5
9c6e1f33754c94cb6ebfbd2575a54857
SHA1
c5e1e29e64e190d18f90858bb583ed8bf260dc91
SHA256
8c915e7b7977b6ee76c47290e90873947f7d791043bce1cb118bd99ad5d8b848
SHA512
0ffe10951a3c4787087e236c970ae94783e18543e75b828add32083ac3d4aeba904bac4904d10c1e810f1993b144fc9ff3868a5d332aa7e2542e12d0db91ff25
SSDEEP
98304:IaY8oTQ4pX0AaoSwdgRxCSrbL52YR/dZ86nbT8scBBYew2AJNh+PDw:H2DJZgR4q2YR/dZesaBp0fQDw
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageKeyEncipherment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
AreFileApisANSI
FlsSetValue
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
MessageBoxA
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
WTSSendMessageW
�xާ��Eu����N%�K��C�Wga��J�����:�)L�P�c�V�G�+�{��|��M��)q�s�?�Җ������� �f�������z\��#�[�xz� Q^2����N���{�<d�9�t���9�` �<ZC|���U�[��,fUI��&C$����"Q���<5�1�:G�A�y�'�:,���l��B��m��ʟ�lma�0�����7o:��'��곙����q�֞3�'�n6f���JWz���hf��e@�a�[XM� �Q�Z91u�S�+a^�?�*��0�֒����A�A"c�� �shQ���B�S��B��ea�QF�dy��C���`Y��UT�����+"n>�Y(dЙ��g�:o���ŵ���Q {�]�>Z�������b|K�ͭPzk��g���K�j�d�j,�ky�4�y����;�ګ���w��[�>,wf|;j:�z1�W�O7;N�� ����ډg͘�uc���u����)�6�J%윞o�o^A�e7f��C=�=��Ġπ_93�-"b�r�V�R5^Q�bV����,CD������s���n�����'��.h����V=�8m�i c����JjT�Vx�P?�z�f ���ؓ����-��#N����*�X�s�ޯ�6�(9c����s��h�ȹgfs}�s��T�[�W.a C\��~5a=f�q+�������q��1�P��G�Ӕ5�E]��a�n|�ic��QWF�� ^v��=A�^-��8���is��uq"����e^��N2��K�z��0{�K�<��F���r^�А :W.;�r�z�i�v�l���숚:��+��<�4��� ��.ͶKW�VỢ�h������r���x�_�!��TG��]��ݔH�в�/ji��jH�A��\�0WX�*���e�e��4����0Ô�z�!�io���yNߘ�������(Q�w�"'���� ���U����]���Z��|���oF��J1s2�w���7x9���с���e��|ñ�Aq4���+�.���Hԇ�دZ�]�v�,��K����h $������^�6�Q�tD�IQ�pO��D�O�oT�I�6�߶ Q*)Y{[���1SjIG����3D��}̏]�9 ?(4����|�d��⥦O�h�ݎ8P�����$��K�\�W��lQ�pm�q�ATkW�yCMh��(sp�J�������|�Qh�[��W��7���r�҆�P�|��4}<�{�E\&YSF&�`Nl=d?�}�C��[��L��Z&�b���b�"��'ׂ6�iM�@�\�D�aDv�g�1י.���H"��7���R��o��ʕ:��������\s�G�`eR.�W�֦W���]C�z���'+V6}��T[���?>tUdѴ�q��\�������c��ဖ��\�����ґ7���o�h�%����O�KQ@3*���5˩H�ٯ��<ޑ����,qnz"ԺyL��/���Č�R+R�E�a����K,H�쒹&s⤤!��=��#��?�����f�� �� ou��@w\��xK�Pa|)��;C���1�{i|*�=/n��A�1�Rti��Wl�Q�s��m^��WU�>H����%��&����k��.����N��b�(�)+6�S0����ؚƭ��G?�W�]�ܝ���D� z�=xW|�4��!��r[|fd�)��(��jR��B��M�I���A\��"�DrGZ��SQ������./_Ƶ�(,�k_���g������rb�Ǥe;[��fw�s��b �ѧ�j3P����{�7�\'Rn ���G~������-A�'�g.���#��&���) �]$`��*Ot�n t��+k^]������*��"v%g�#������z��#��+�ϣ�O[{�*��cC��n:ģng.��,8��x*q��7�VXS��aݲR�x��I�%�=���������{�!�a�a�w�mh]�$.�áA<��;v�w�/o�����i�Yq�h2'� �����ɋ`�d�Oj�{̔8���~��{<G�-S�X��r�`��;�r�d��6W��.�π�"V���|~�� �V]����<�$�5�x.��oD2\��<�����KσK ��)����Q�yG��/��R���{E�i����ڹY�h\wH+� y��V�%�?W�����o%x��P��� �;{AM�������gm� ���y�ZZm��X�1��S�3� ���Gs �������Q8]6�3I�Q�4JV�b�zS�F1��a�$`���+�<�9��$� g�>�P�o��s����F��0:��w� @Y��BW����j�����Cˑ�X�{ڃ������*��Ԃ��U��)A��)ߑv����P,C?�zG���;��/���o�P�t�0BE]~���/�̓���?�2�f؎�O0�ɕ�=$���I^3[ �g����c9 �`\(=+��h�6F�ღ�MB�S�4��7���A��7G�� �t>3+rY�BUִ��q� )�ȼ����{��|���c�̺5Kپ�{�,_��w�CgZ���[��s3-��X vE��0zD����QN��1��?��X+����%z����]7����8�"�9B[����EBֹ��W������K-Ҝ���(��� �gf��1$�J�q�~lp���C���r�����?˖�PvAmw9���JPv�G�Y�TU���O 61���:�'R _���_�����?����>ݻ�# ɐq��$�,��a �"f�1�z�8����T�F�e�j5���&���|��H%�CE{�H\>�H �P���L/]O)���o�G�}�`8�$��'D +�������A+�Xzg~�)w��{� �K��r���15������C1�&!m��.E�N�$�o<�>�e�Ļ<A9�#;xW@۔WZ� �씁`�}U�}�K��������.��O-]*�h�E����P��(ڗ�e�\�ݢP�������oH�Ҫ_4�.m�G�J�U�t~��{$�(Ym��Vףم6P��~eS�����s�;�v�#
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ