Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
7246e05e5abed528656a29936d6cde62dbf472dd34abde581ef5c56b5ce806b9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7246e05e5abed528656a29936d6cde62dbf472dd34abde581ef5c56b5ce806b9.exe
Resource
win10v2004-20220901-en
Target
7246e05e5abed528656a29936d6cde62dbf472dd34abde581ef5c56b5ce806b9
Size
1.5MB
MD5
82e1079c10667250b1966cb6df9f3e70
SHA1
bea56b9572111ae03150189ba57f0d72d9f9dabe
SHA256
7246e05e5abed528656a29936d6cde62dbf472dd34abde581ef5c56b5ce806b9
SHA512
f9e3c651c074d62adc60d3eadb727acf57ee8c3295d05672f5b290d385f96cb044fdf2d98a4dd530318b7abcc352c6785ce1557986e8ad7bcf91ab358baf76d9
SSDEEP
24576:Wjir6XiqXfB4qdGcHay7ikbgQbJnhwWc499nDDr41pzQCb+PIa4HkX3QN/vkXw2a:Air6yqXfBJBay75gQVq6fPrgQCb+wHkS
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PostMessageW
CoInitialize
VariantClear
N�n:�B�5��C�i��6����Op�a�����:�"bni�hX�%~=�G��K�Ʊ�P�4�8����^�@���iG ���S�-���,���;~��\A�I�|�=Q��͟@>-���-���y�"[Z0�Ô9���B+�q�Q/�s��7�n�ʂ&p��m��|�&'��slo\��E#7ʃ�$�e�!�a{�n�G�g�(�f2i�b�� ��|��U���fً�;�I�(��z���H���m06�1�T!y�(k>���t�'1����;j��ŝ ���⌯��:QdPX#%l.�`S��qL�[�`��=�/�v}]{;%w�q����֣U"Aj�'S��/j�_2��I zP�]e*��TVg9�|8.�J�a���m���&���1y:y6O���-C3Fg���Q��9�ŽΞL��4���.I��EJ�x*)���j{�7ρ~���i���u��c{$!ڏ`��l����Q���Hn>�r����sx��0�X4N��E�|��� ��ꓱ��A�C��3��AKفqXz\��������Һ�N�>i�A}��w�W�R��>gI3X���Z�Z��yx��@�Fq ��-=�"$��z��&�4�7��'�U%V�0E�>��exRz��Goߨ��M�!\�>���D���Y�)NN�֔;R��Y���rs����&wA��ث���� .��S�� ��: 7�)jg�������]$�vW�8�Q�-~�+��+\����9��),��Xm���s)B��%�������*�9��<Xg)RS���"{ ����T������9�ʖ����8�����&9.�����mZN�8ZPj�ۘ��(��.�y�(E������2�?�Xf�Ҿ�y@1JCS�;�,�c1!L�pK:5���RGD�Ӵi���4��T�P7�J�Y2.�ލ��c���1�-�����R�[x4(�z��"��#��.����8�K��}�� �Ғ�`oH��c���OL�pn\�d�W{���6_���� qD]���~;fu�?�}��n�Z}����8yrNTf6���9����4t����eS9J�=T�k.)X���� _�"n�M�����$QWD�t�}���� ߏ���� h�Ƣ���U���u�R���]�����ϐA��j?��vVJF��@گ�ק.lm'UjTբ���gi��X3�%L�p�}X���Q��+y���#�~k"$�����X!"�>:��Du��G���R�35�����%S��&A�B���wG.��\�E�ЅF�"5�נ!��=����J���V�8���?�+�C��;��/�(��%�&? ��d��˥�'H*� �*s,N��,mX��ų �v\����T1����Xl[��w�,[��H\�j�9V�3���Ȧ��@�tb�hH� ��q�7̨[��"����mw_�A��+$v�������C-���b����NVIH����`̷)!\�� |��SHU� Pq�or�勂������Pc|r� ԝJ~c��!�w��A���O�u���/S| ��W�!�>��R=�j/���Im$�2q� ��%!������Ѯ+`+z�0�w���?�<pZ?��v�#P3c ��s��C���$ݵ�M����Fa/E��P'�*����6E�W&�Ƥ�^~gy�T��.ŵ������{�b�]����(���d�u�-=Ꞥ�y?���LH{y�>? ]/�x�l��a����P��oU��Ò�!e����>���/�ׯ.���C��m�C �=Z�h��_ �$�@�y���� �� ��*!�+���Qud�i����U�h�r8��~b�M)(���Q����z�I:���ʏ,峚K�5C���Z��@F`(��݁@��<d ��d6�:<��nP?�6>������Z�O<��S���],�V�*������:�h��>��"7��s�4Տ]ba����{�I�c�����LHц�۸R�u((���3ą�܇AS��z�����eP�.M � <=��K��Rэ�]]=dh"����B� �;��>����U��:���XKiM�oA?�.'����ٍ��m�'�>�����{!��T��b��8~HK�<�ɋ_�6���?�}yu#[;��TMk��v3�X��%� ��<��'0�"��Iȗ�w����S�2�1�����"j���!�����i;��Q��$v�G[�Yv'/��Ӵ����S�H�{�i�Y���Y��֜�8 #_�;i���p5��W݀�摷Ur�B;x3R��m5 ���н��~65���`��@�:7�uvPG��8����%w�S#�K�a~%Q:[B��;�[�� ,�(J�sK��#��\3��`����4��$���vňR��.P*�l����0��,�~�6c�2ɲH �:;}9}, � _���.�=�(���42$xT��K�oa�ޓ��d�̯��M��p��M���lgC�.��Ͳ�-"�1����<1{yL�Q.D������/�..����S�h<y#� Y���b�ԋ%�\���#&S���uЮ��U�3���X,7kz�e����H�L�X��h�x*���{�_�^��3=ș�PC�c�;ڕl�}X��~/J�أ%�&��U����$�^�:T�SDv����*G�@��p)b/��}�N�E��~��j��%��<�I�0�܅��͜�Y���C&|���W�֝/v�=�A���ї�\Q�PP���F}�C�)����6cw�ENo��)�w��]�������aճ�q.��$Ztf���H5-� L��N4N���L%Ħ�������W��=�����S9c��a�`���{9�Ћ�W�b�!dw4T��1z�z���[�z���}, }��:��lG3��� T�m�%���C�:S�,*?�ӭ�H�R�}��r����Av�����9Y�u�EE�����W���Sj!���NR��C�ůk�Y��u�+,��N��]:���%]�C7)�����tE���4����{���;�=` ��]2�5%�8X5�W�>����2hl�����J�J](�vz�c�uSy��&<��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ