Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
48be8ae859618db58b6c4f7c8c4bdd2ec898f1dec211284eafbddb6a2bd335ac.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
48be8ae859618db58b6c4f7c8c4bdd2ec898f1dec211284eafbddb6a2bd335ac.exe
Resource
win10v2004-20220812-en
Target
48be8ae859618db58b6c4f7c8c4bdd2ec898f1dec211284eafbddb6a2bd335ac
Size
1.4MB
MD5
918a31259ce40ad126bf0ee3e21ca100
SHA1
8550d6bc21b403dcf7224d3e13e1cb234dc63126
SHA256
48be8ae859618db58b6c4f7c8c4bdd2ec898f1dec211284eafbddb6a2bd335ac
SHA512
51b3837d120c1dc014e4a43a054cb9291a71f65add345ba80f506a9e7e7db358b4017992f910371cd526b23dd32bb977bb90929554db67afe7612df03b4c957c
SSDEEP
24576:zWNI+XIsw8/OguLHGoPJZbeTxKAsx/KstCXaNxndNBU/NrFFoSsq6Gjd3dfmuUc2:KKanwaOxlSTE9x//tCuxW1RFD3dOjvF1
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetCommandLineA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetClientRect
CoCreateInstance
VariantClear
����Y����qn���j�Ng��w�9u�L�re �Cn�M}���=�d���eU7%����� �5@⎀E���^��% hH���-�Z��ޓ~���#��?��н%2ݺ��%�C�Ħ�}���U��m%�߲!�[������yX��DPW-�'����JJ¿~��D <u���g��3�2.Y2E���@�K+x���� oDtC�^��I�� �n�P��EG5.�-�;�����ߐq�p��"U�"� vL�g)����y��͎b�A�?�ī@m�����b�R�} ���Z�|�M���2��ƨ�B)�-q��o�F�� 0y�Z�`��Ѳx�� �`IF��mo�&�{��?:&��X�;k\�4������9���f�s dŨz�N/:?�r��U�Z�����������hB� ����_��9Q�^ �ؗ���:b�D��5�lC��%�ȶc�O���>n���]kW_������:����X���h�����VQ��3�5�+�B�� �et�g�=����"s |�;�$;d��z*{+���Z�c�P�\��Z���j�( T����б�;m��������x����oV��.�ڣ��\��cj����|�Lf] ����g[l#0�� �X��><�}�S�Z���� �j�<�z������F�N��2`�&>jBK�.@�5����Om���{�Kf�����Y�a���cx�T��]W�[!��L��M�s��d@�2������#'�2˚g$k�S����:�X�,�q�-!c������� ��"M�Q��f�.�3�n3��иGaU���k������^Z�����=íS����V���B!�� ������oˬ����R��/�9��m#�)�V���.���u�JAUTX�R�nT�EL ��I�6���"O�����yUY�W��Y���8O��EӼ$<�P#"�en��P0��z�U�L7p��:liV�7jT` �� �������\�[��D*2Te+`}�ҟc>�@ ����6���;|�7�;`���Ϥ:~�d��- ���G-�/��9���^�k��Sm,ê&cjN1PB�H��w������B2�M���"�$P��N���Z��ȍD��7x����`��p�ܛ��s�����3بYR�<�Y�pyV�+5Z�vNݢ��V`)�q)M�wz�����{f/�C���B��o�ȷ� �-֩ͻ�mXC�Y���aވ,�#����`+i��S ��5��Y,�]��r����O �3>~�S��(�gy�D�Gv&I�ym�q[ﺛS�$@oN_�-��R�vK�&�~wj�CVCz<P�Xݐ���ߍ�pl�:��;e/�~�������~�ld&ڞ��H�$����E%�b��=4?� ����P���"���{�h�e��>��YPe�}s(��� RMOݗ�6_Z2bٚ�b��Cg*��u<�Xȫ���:H�����6���i����蕚��e�|$�y���c�-�tcs�B���G�(��wq�%\�TH�����\7�į�Q�9����~-δ����`�����vJ�]�z����*���,���g�v^xvD7�g6��� �Wy���5�mf������StD ��g��WA��b�ohK,�Fx���ڌ��.���ΏS.������{k"%81TF#?֜��ܟa�8��y��$�:��h��g-��MC:� 9ԉ�l�]r% �t��b���I�=��ӿ��_Z<�e.�Yߞ�U�F�� g����ʸx{H�i�������H�j��c ��ON���Y�͠���Q�.'�{�BL�Ps;��q�AK��Ɏ�%'V��|�l�����So�� �@�#lGr�N�I��a����t��c��\Zv�đEo-����}T�d&�mV���ǒ(O�U����X���W����ݩ2y��lw$���?�Z�ٛ�� )P�+,&�Ľ�oܲS���o�9���!?W���-ì��R��B�� ��.��S�"��Nf�3BL�6�7't��j�!G�ҳ�&aРɞ�Z~���.a�y�V��'���0�ceIwJ�%~��~�V�� �ٜ�8�����Zb��c� ��b�?h�?�h&r�����A��!�9fg��B!l��*����� �-`�r]�RT�9�W��Y�J4)��n��=ީ�mԽNR���J=�:�M/���߸�C�`w��n�إX1�J[�ɹ��쫥��,].V�����(u���������;g[J*7Q��^��H�X/���u�c�֓#k�5���BS.w��L�3�No�i^��C�����+�z{5۟��*�R"R��G��r8��^M��Y@��/��%����&;,]����L@%{ͳ@s��]��8z��Qe.=�{1 ���|L�L��"�(z��'�y]�BN�^ ���*��(�_�]�|(=+���k�[B�I(ږ�S�tW�M� )�7w�'����k���:n���J]h�n�4�}�����4$�;�Ǫ�b��b.�����eYk��K��y+E\l4�C����)�<R; #=�d�{��R��h[����Ugj�Z�-�"xC�.�Z�ԫ@�!�!����Ge�(37M���1�gw)k�9D;&-[��� = �����F$t�I����Lpd?���4"���iL��)���"ġǜ�~U�K����a�����2�h#��dOq�E}i���|y��� �IOw�/h#DY:�T�Cr�w^ԗ�Y��B4�X��2�S���!��q�wA�Q���d�%����ݫoE�qb��|��DpifV���/��*�P(r��Ǫ�k�g}UV��~vaH�$�RV)�3D��R��o(�mDP�����q��A�������`P��r�u���~G��dcJj�����{���zhG�h�.�����ކ,�!��Mzg�����H}~��ys����ʍ����y������u����9���/�n����F4�+x݂V�d�et��6�FigَP����8���ì��٪b��i�I_�������߱+gz:�k���C���Ɔ��}SZ����
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ