Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
f6efac5f3fe46860c39f3035925f74fde3a515994fd5e8eecb212662392c9c25.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f6efac5f3fe46860c39f3035925f74fde3a515994fd5e8eecb212662392c9c25.exe
Resource
win10v2004-20220812-en
Target
f6efac5f3fe46860c39f3035925f74fde3a515994fd5e8eecb212662392c9c25
Size
194KB
MD5
695124d41cd7ab3e1292688558ce7ae6
SHA1
20a403c601c771b2531879cb1514a881b06898d5
SHA256
f6efac5f3fe46860c39f3035925f74fde3a515994fd5e8eecb212662392c9c25
SHA512
d9084b911f74ab9cc58d0770c591e9d1ae6149a1f1f09f25fb7181c7986c205f895b866dbdf14f4628317279e2146bb51bdaa2453732635455cc1ffeee7d7905
SSDEEP
6144:W4G7bTJV+HisaJ1v+Yge23sgQE/xqn+Kr:ASHK1g19er
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DeleteCriticalSection
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
GetKeyboardType
MessageBoxA
RegQueryValueExA
SysFreeString
WNetOpenEnumA
SelectObject
WSACleanup
mciSendStringA
ShellExecuteA
ZwUnmapViewOfSection
capCreateCaptureWindowA
GetModuleFileNameExA
InternetGetConnectedState
���!����j���Q����C뇍7T���n(c8u���"3�S�{<`@$��c{�e�0�|��Y���*�|�^�O���|2;����Z���n]UO�M�E�}�?w� T�ۦ�}@��%�%�\�KP2��a5C��2������5:�2����l�?���&�Mz���A��؋±�~@�ȒCq/��0�\o� ����\���1�����{`J_�-�-���eؕ����q4�O@:�K��4�'��l����,�5�>=���#���%l_�Ɯ�;��q.���B��טr���1V�1ɿ��ƲA`��T>�J[I�����s�!����SL��m��� rpR���(���AD;6Z�@p+J*��#�{c�;@ܕ��������P�螛�U[5E��A��Ն�{Ԓ������AG߫��:��L1j(����������3�7"��a�᎖2������-��н����#e8�7ޘU�J�qh����?�UK���2�OQf��~]Π'����RL2�� �ņ����M-Z�+BBYBj�~W��#��8�`O�E��-�*b�-US��E�U'�A1[ tk豸t�(W���Ƚ���[��l�~���l�f� W\sH+����p;mNR:����Ta�7V-�ˢi>�\�al�O���{��R�i���-�씴�� �x@��#N���I��2�����sՁ :�CWO�A���+�8*�`�&5�٪.PfD�u: Z��e`��< ��zHcZ�"�",�;�k��i�eE��c{>cL���(��I�'昷�e[�_1��^����7�@���d�P�'Ό�d�;F��M���%���v�%Fmi7�F��(UW����͝ˉifZ�q�m�?7o���8��| ��T7�Ǖ�XdD�0S���K���'ހ�d�\��r" r��l�luS�ٓ��$k;Ҝ�0����K��> 0��p��k�3~�+TY���lJ���%A��`��jV�� ���x(m�2�hr�7,�3�`fH��{堟�MM�<L�A��0��R�v�群-�E�)�������ܙx~G4~�;�n,����@����5��x0G�H���IFbM�y�p��V|�W��l�Q���T���s"A��B���scH8�;�H����a�>�AЦ��I�ȳu�}u��� w�/#���Ն�s��U"8I"���Y��#̪0�.��*F*��@�ᦽn�b���`U������2���ˠ䟍m��`�{��^�C�`8��;�������A��������7"�P������ַ��d�e��[����2�W�b2p������F�93G���|��C��n�h�,����h,X���'��ݓYC�����zt�K�M C�#�WF.pS�����65�_�&>��$�ڼ�E��ɭ������T@��3��澚9�p����Qٗ�5 �ʩ%~�F��Ȳ�{>�$�P�p�Ǿ&:�ɢ�.�� �i�x��r�܃dž/�S��ئ�9���nW�`xf�VlϬ�חjv�3ǭDG�LQ�h�,�=zi��r��4�2m�=��ʜ�#�<zAt:�����,�w%��Z��^�ey��M!��eYI������-6ػ�j�H�,�(�lKK0J� �_�u�����T�E��a: �A��K�����`�~�ުx��*�����t����z_§/�E�r����m�/��6$�f If'��cS{�ɠ��RX�~�� D;��d�rW�h�U�Q��<�e<o�����*����VqG����7�y!>U�t��:�|��!�����<l�u�X�u5'�PS:�5��U�n�u`[{���7cGn���|��AK����u��Q:�.2�KA�x�U!�y�Ko*�a��Q� �7l5�s��9e ǀ�LfL�6���Y��j�ԶjD�d� �.����q�T<���]�i��^SkАw+b���4.�D$��u�������U�Q��1ڂ#-4L�@o^lc��$�e�?�'�B���z�xV)��'���=0�[���r���p�X�n��t���S!��/��ѥ����o���A����4�H���$�:�9ٍ���l�8����J@$��Z�3��\��$�m6��:-�'�����R�c�}��j�Gv멍���8@7����`���k��ڒB��pm�>�-�� �xd�X�^�������c萹},�%�1P�;ol� NN?"pd���[#��R�5�9�O�F+�*���m�W`V��8�)21�gO\9�lD����l>n��I��e���D� [�(=�?a4�¸����b5jm-�h�~\;�KUݵ�aځ5�V� ;M�+!Y=���f��|ؓ��?���ـ�n�H8�Ha2��k�G���Y��齼��m��.�g�у�6���"D��x9�Q��������E�$sP�G��t8�*�G5�dE:����V����W7.�;`����vY��$,Sc��/k�@���[ �B ��Fi�5ߏ4����%)�Wg����J�4G��D�W%/�h��[�;����24��罒�٦-&HWs� ���\��iB9 L�q$��m*���D��m����r��:�?�-��A��E��]=�uB���٥Ӈ��`Dp1q�����Yq�| �P��u����OB�n�X�����S����uH��3�:�Jz5R���.�N8""�E���]6�2 �N��;W[��SNj�rW6�����c"�`�,!�*A;�{W5��D��4Lc�ˏլV�������\�����v�y2���\~$j��t���H�1Q]���E�@�(�"�;���\�Q�ȡ�u����g'5J��7UG����|#��p~o��;%$�ԧ(��a����X���LړHw�i��P���p��U~4�l��X�rTI�ƒ�m<���Dfu��/I`n��$B�˞���Z&�w�����D��'�gy! O��9e�쟶�^/�E�)�_�gt�m�'�(PMx�k����{x�5r�oe��A�i��_\Z��������zݰ���@�l��B�֜M��"�C��;��%x�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ