Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
20c600de850d40c438a275286cd7997e1277e9504344acad44305d80f0fc90c8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
20c600de850d40c438a275286cd7997e1277e9504344acad44305d80f0fc90c8.exe
Resource
win10v2004-20220901-en
Target
20c600de850d40c438a275286cd7997e1277e9504344acad44305d80f0fc90c8
Size
2.2MB
MD5
620a0e4e75928c51da2a812d67a2bda0
SHA1
6ba42cff0b5ef9b42e954fb9c57d8db26f1d3e08
SHA256
20c600de850d40c438a275286cd7997e1277e9504344acad44305d80f0fc90c8
SHA512
35c67e9657b5c054ef5e876664f1963df9e39a3292bfe9cb696143ea5494b69078ff2070a14cc2effddcb68f9addfae38bfb6cd502603cefe5fb70543fe1c6b7
SSDEEP
49152:fdUtboVqizlTIT19NJTnkxJi5BhCZSuvTyLySh4zEdZXJbVeOKzWMcv:FRKNJTnmJihxuvT5EdZBLeWNv
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
SERIALNUMBER=1691630,CN=Quakeup Media Production Inc.,O=Quakeup Media Production Inc.,ST=Ontario,C=CA,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13074f6e746172696f,1.3.6.1.4.1.311.60.2.1.3=#13024341
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
�I����l��R�V�����|X�et\�DA*�w��yf���bV�?�K&̸����"�W�vM]��I��ʖ:دM����t��Q�������scE�>)�� ����j�1�dY���j�����^���uʻ����e��fR���{��!=n��O��)(�����, �c��܂�z�Il����*GU���sy�26+�9G3~�K��?C��_R�vyl��:-���`���$�C���*��q(�NT����!�u���0�ݶ|N��w��z_�������;��}��{<�R� ���{�� ,����B&�� R}^�U��2D/��u�RT��{2a���!��<�� ��;�i�p��j��\��0C�����R�O{�:�V�ΌU[��f�+e���%>Oc��/P5�<$�xP"�G@�C۲EOz▢&����2E�h�d�5���X���1$�J]�h�<:�Q �Sz"=j\���2� d]��[�c�m�o>��Fm��,��b�3������sm4h-k��Yo�����O��ʊ#��@�J�MkV�;~�Ė�7���nf�%y}�'Z�'[_�H6��#�å�s�^�Hg�ܶ2놁*�Y�] ��t{<��@�Q���/�z���~[_`���U��niJX:�#f{.����l�y��,8���ێ�ӟ�wN0�ܱ��֚�&���¸�ع�����M�y��嫠~1���s[�D�]�w;����D��t��쵝�}�|�b+�~��W�T�=��{u*��S������|�4�0��=_�M&3�U�"��i@��̟��"N@�dhQAݴ��{�c�@��v�z-�x�l!�2����hd�¨��a4^=��F��AL̉�.'/Zf���"*7E!��.�-������ݞU�����.c�2d��5tk"�0�0�yP��r[� ��Y�6ϦݨC�M�Y���5�9��Ť�g�B�惩��Y��B#� 1S��<����+�vJ�yʌE����e:�Q���I��+�V��~)Cf���}r��OY�B͠�o����o�UL��"1{��>�[���=��0t\����� ��(N�(�vI12\���Y��{heuJ+�g�QBncꢪŤ�BL:�GE���&��#v�o'�=&�0h<� 6&?�dݱ�7�/�%t�}Q2����|���w�ȋ��g���[p��bU� "v9������,���>R��5rg- �5]H!��"�1.8y/N�H�f�/����u�����O�Ɉwf�h���q���C�D�U/��H���?_�܇o��|�z��kbD5O�B�6_�w`�s;;����W�r��Ȋ����Eh�&�V��ھ�{����܌g�d�����7|s�֪$H�9Qs}6)b��W�i��-/^;�d����}r�����ٙK��p����ˎ���U� �6,}��'a�6�*i��ug$g�e k�]�p��E����ڽ�(t�"�I�'*�G������{gj�W�>�o\��MPլ,"E-p�����YaÔ\� ���Xygu��b&�����@�Yl�(G�����}��=���Gi- b�.��Z�Ĉ(�俩s�İ�>sT}�E�����n�K�� E��������T�2|�&G ��6׳E�P�MAk�1�>�+#w�tp_�E妔�%��?�k�a~�nx�e|�Y_8h������Z�L�$�M��\�A��H~��U*t�8t!ԡ��Hܜ�)��{���(��� ���T��6_z.�����,��rִV&�3,��x��/�3���C��1���Bq�D���cF�Tk�j��v�bm�%��@�; ��hǘn�z����Y0� &WhT|��C�lU� �-�<��M���d!�}sa'6����z� �_�U\��p@r�DʏŘV�Qý}�8�KU���L��e^�ץs���sL��Tv�����"-�=��h7�$�}�������>{wM˫P������ų�:��|����^ �*n��NY���n����e7�B;=R>�ge�]�IY C[�m'h-��M{���p�64��0�{2s��W.=Z��4<��q���V�v�:?����A�*����G����{�m�����-v�WmVbF5^tۄ9,!�ا:Q[m�"ow�yn�W��'Q�s��7b?�����;+������������,CX>��Z��Nyi��xH��y9�3j�c���@�S�ڭ�V%h��Ĺ`]NBVe^٘!`�3P��6o�����p��8洆��%F�+�25C̟�#�sI���u0����ѫ*9�U�C��h��-�v.�2�%�%nP�%dZ7K�Vda�2��?��{�k�Z��\J���� �x����V�F#�����,U8��3_1(I(�?��a����;U���X��}��������:�;a��j2 ���]{���M*F��56���a��z_B'ߍx �S�吜�:��èd<~���G��$���Q�$���f�����{� t�����"C�uǓz��/g�������Bކg�](��]CTM�6��� �t;�F��i�H��{�5�3 ӧ���Ni� �.��A���M�Ӓ�˲�O�ڐ�47��u��^��?v� ��Y�WC���{L��F)�l����h�|[U�j}��a�� �Q���嬚H9�Q#�("�����;�υ]����b�X�^y6N�����,m�z��n�ֆX]+y�01��ۦm�bBN�X��U3.�o����^�v���-�7K�3 Q�7<�e� 5�ˊ��|�%�}W=��r�����0��!��,З��_�!Pf )���`B� |���q��F�D���P�t ��Tt��n�ztI_��{tE�<<�.���8���<u.G�վR��դl���5���e��?���[j=l�ym�lh��-�?�ȉ��\��܀�щ��P'`�����"�=�E���>Bq����X *�ʗ2����-�����7vx�ݝE�Ǖ���]�P�h]�z\�������� �"�fƆ�rI�����7�d�8N; �JQJ���Pn��Ag��Z��Kf�d*�g]��L����9N��A��a�/��n�Q<DO�<�=�(�[2�{L��`�Lk���zl�ܻ5�h�i�6�#�y�h�L� ���n.�(�H���[���+���5����a�[)n .Yc���[�I* �6�3��;��u�6ۆ�P���ލ�@XBc �6�P�ץ��x�$����+U7����\.��\��F���@����Q)QM ���Bz��J����9�_��N���
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE