Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
ec24d6e256756396268f1de4d7c4650f352bc23c6383bfd847fa269beddad242.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ec24d6e256756396268f1de4d7c4650f352bc23c6383bfd847fa269beddad242.exe
Resource
win10v2004-20220812-en
Target
ec24d6e256756396268f1de4d7c4650f352bc23c6383bfd847fa269beddad242
Size
1.5MB
MD5
0649a4f7a46474b4b85d3e3ed674fa60
SHA1
37851f1458db33971868aecca8e1ae61524f9707
SHA256
ec24d6e256756396268f1de4d7c4650f352bc23c6383bfd847fa269beddad242
SHA512
1d8c628a152a249b0f811e927f00b9fa41489eadf446b5f85724ef3628828ed8d9992ae70dafe89bef0f1d08014d1a5d86f3334b5c6c05fb1fa82f428db4ddd4
SSDEEP
24576:UgBHpYut2ZizBCHY/5yVwrWcuqfWBeLXQDHZcl3iW8k0eY8IqHLG0HcBIglrVs:Uy6uJ1CWyYVfW08DHalSpk07PqHLb8nm
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetThreadLocale
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PostQuitMessage
CoCreateInstance
SysStringLen
��z��?�1��Z�Ҩ�����tC���K�Ns�g�_+"(����Ji�+�7QK7�B����. ӱ%v���#��+:��w����sx���d�1!t����J�s�;��f=@��+����nT����`-��j/xQ���#(��8�,�?���M����衿%��[<�*]2A�i Eo��s�`rHQ�2�>����XP��>Zqb��w���. Q�u� 1��̵, ���*�ih����Q�XV��;�PTD�h!�bZ�1d�ƥ#0�wE��D���9�G���dYA��%�[>� q)-�X/p��~T�%T�S+UMqȰ��i=Y�lz��[")�*��T�����W��C�4P�{~�X����_�� kx�~d/�L�<��ѥO&��K>F����О�W������8i��]mg;���`Ϸu{h�i�1��b���[Y�%�X��2e<��ɱm�DD���q�:��i��x���GƝD`��x�?jl�8X�Wtº�z�P�-~�Xo,�wA1�U�M�;�.'�ٛ�F&�q�5��eL�E K����pG�+T�KȉS,$�o�ـ*�����LG ��Zil��W��sA���O������v�~Q{�qW/)�$r��Ԏp��(�e�F��ߏMZ$5��Xy���UiX�ލ�(�5�SnĈ��TZ���]4��/�g�8���/�}'6_�|C>���D�p�l+�m9v �;�hR��G �Mc-�������G���!�J�)�2�n�3+\�0` ,V2!r�)�Q���]�?Ȧa\����5�۬@��L�7�yh�މO�;�x�� ���Bx+�[�~����o������K���z� Q�Ɉ=�v����1�o�mjF;�8.��~��e\?�Vӂ�̷���3t��风s/�d���Us��M�9[o�G�~Ppڠ)"���x��I`�?�,X��@��_sMޭnҺ��D�m�" �6~Aw�-�!C�j�w �ߗ��P< d�at�B�WΊ;�����Y��"�Oh��6iX �=���g?���U�A���J#�\c�DK9y�N)�@ڛ ���(���A��s��dC�>�)��y#01���� ��~^�t.���7": ����L�Y`�,u����? kЗ�%ʌ{ ɴm��7dnh枟�q�mZ�4���rR1�x�1��v�Z>G閐S_��$q��e�x��\�`6b:�ry�Nh�1<@�dy,=��O��ܽߒ��X\_)}�5�X0i���4��(���X�X��d�M=�xt���?xJ��^͛�c�Q9��_AF�Ӕ �����˂�ڕs\�CW=}�K�{�A���nʻ-$"�rl��}9�6T�����GlW�s�)5t�(p re�����oMqSIy����� ��(����=D4w�՛�K�V�H=?�E,�Zy�"$A�x�^�9�BCA���p��mP:Cm�`B�������R7��^��?�`�#^�-]�6�uhN�ĉ�ړ�s<�Nȿ��TM��M3��e/Rz�_���zt�D �@�S�֟M��G��6�N~�Q۞Z��h@�� ����v�qUV�n�_�p�oL7��!i~Z�h��ô����;�y4"(}����/i��4�`dHG�,���j������FI�42��C����.r�������m�a*X���3T�Q.J����YQ���Ĉ-�w.R�ң� à �4���w� �O�[Ɋ��[M��� x��S��ʬ53gW�*��8Tz��, }��i�n8�T��l�E��=�]UGf��j1c���� ���+��~� �Q���,M.�vH5�Z�/���Զ�l�ۭq��"�?5ӑӏDk���7xԞ�������N���<��@�6Գx��{�J{�,jă#2���i������!#��#��a5#� �Ç����Z\l��~�/J������fMb_�[h1p��v�Op�&T ��T�*.�5̑��Q��aYoo��d� K�%?��^Xr\U��$U��N���m�ޫc��'�<멌Ы�I�qJ�����l��n�AZ%�(�0��IՇ>;!����ɗ�@�M�4��7u�Δ�N�9M��۵#h6� �%�_j�G��o�@.Y-,�Ϯd"K+�}/ՖMum�Ͻ�����4�-�u������H| G��,�v���=�%J�i���;�ޝ��R����,�.�B�� (��wж������ �[�+kX��T�0)7S��L�Y2ڜ��U�����W5Qb��>�/l�bO(�,T���ry�h���)<�`h�*�[�Rt"�����0��pgF�� OAsK.�3�H���"[k 3�Z5��mJ�5��ty�s.�=V5-�8Ⱥl��cgv�Ȭ�'TI�9�8��Mz�ˀ��{�5�lg9�iϑX�P_O���h�6[�/�=-tSy�?g��R�ľ�ҭ�&�lߜ�#��Q�7gO�rn�&��z��w�� #��� ��a<a�ˁ��C0p��d�!��}�"�i�O���q?��^,�<���gg�TO��ײ��R������M�Y �\?��槆&D���ѽ�|��㷋҂����l�ѫ���`j�GЭ:��KeJn:���>T�S!ȞyO���Ш(zYꢨ�9��%kWC�G�L.�/�U�:2;Y��??2�Sɮ�����~x�rÆ0B!z�ʔ ptqn��e�f��o��h�m||)��g���ϏlJ���Or��Ai��j��Tj�exAY����Z��w_�U]2���}K(A5���0��5��(�ؼ� �[��/�Ĥ V8ҎE�-�t��"�f�yw#G'����-��[MX��i#�$1����+V/��!�f�V(�sO�R�g����D�H�˜��M�H7RY�C�t����̔����~h�w�BY�ڀ�Qʐ�� 0��rO ���'��K,�h��J2��F�+ :���x�i��:J�!\�wҠ-�CX%��'����\��Ȣ��q��΄C�1I��}մ�)k�qҠ#����MG;f�����Y�vN)�j�� 2#G:���������Pة!���c�����(̗^f��c������*�>S���4��N��S �{%^��q
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ