Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
4ff52ad537860359ef63b0794b004b78b6a382185941e75023dffd16726790a4.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4ff52ad537860359ef63b0794b004b78b6a382185941e75023dffd16726790a4.exe
Resource
win10v2004-20230915-en
Target
4ff52ad537860359ef63b0794b004b78b6a382185941e75023dffd16726790a4
Size
7.2MB
MD5
3336181635c3679d22ccbfd69c907fbd
SHA1
5ee388903c57726d416da2f02772ea99aff3f67a
SHA256
4ff52ad537860359ef63b0794b004b78b6a382185941e75023dffd16726790a4
SHA512
c42f24446619ee006670e149835dfa9d9e1017a9a58013c36a05fd39607dedc11cbd9378d8755541d263c49a83ebdc17887b5b36c0dfc0ca427899372543f541
SSDEEP
98304:wFHhsW2QyVmOqAJvneIN6FMe2kRFOP+R+WDWUAS3BveyxqP06JV1LpRmO/0GFKw:wVhG2OqAJveIN6iPkWIN/rgn1/7FKw
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
__current_exception_context
__stdio_common_vfprintf
_c_exit
__setusermatherr
_configthreadlocale
_set_new_mode
GetCurrentThreadId
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
CharUpperBuffW
�� +d�`"l"�z��4��$(�q�vH$lZ��vݩ?A��߬ZL��䬢,/Y���5 s�B6�ej^�ıF�3c�U�W�e��IO���:�Zޞo�^��_�O�A��d�20�6��L��� 1]VbԆ�&��S�#�� @/�<ކ�J��w$R��QV �M��.��\�*�Uzi�>�4MT5(�C�d��[�\H3S��aL�7���C[+����M�}�ƯF�zG>�UH*�(��-�=�L�:����HaW�`.q)��� �Ls�Rw�0�����ڇ1���fȜ�0��V�&���jFrz!��6C�`���o[��u��(� X�w6O#Aa�/{Zɔ�7�3�nh�?V-���r66K*���|��-�ZD��2A��Ҁ����ݸI��0�����C+0IO��n�Ƴ��w.k�F��R� ����0l����h)�P��JrhnPG�XE\�$��tnˣ� ֱ��-�G��:�|�����2�I ��o�䗬���(��odq),�z �t�Mjki���UZ|����\���^P�/{�[��)��Y�~�2Ӻ�W!�1����y����85���y1FDԯ��^���R�=���s�VX D�����a S�,,'�Z`rA���* 1��x =D���K�����{�YBd�:�����Cu�݀�/m�r�I���-�*�x߿�]�=���C7 �A�+}7T:/%Q�)��|{v�%ܭ��A��;˽](�:�Jg���M���̮��F����ߜ���t�tM���47��#�V�4�Ƴ6=�v��Yr�F�rh�C�}���%���eѠL��n��%�'��ҵY�k��ڧo�X�D�Z�i ���b�τrKQ��0��@Y^5́5�ьA�~�� �E��4>��0U&���R�QH���~5�0"X�������%����t@�2���~�8C�(+_�.�6 h�y)��k���-|����6�2��ÔO��I���fk%_ w�g�HLD�"l���MAʓ}`ۯw���Y����G�9{m'�]�]o���죳1 � �f��WN��^[�n���fO��F ��2��Q�Ai����wR���@�7r����A��P���Wn���EN-���?��z!|��gw�YA�;��lCc�7{� �,S]w#�l��n�ad`y�����Pl`�CՇ�2�[��m[;�XC,�E0���X&ߕ�. "��k��P�>ȕz�D�Yt%���:�`Y]�mq�_j���M+J���7\p�,i�C��Zf6N*��E�q��<��Mr�w��DM�����f!r� � ����~u�-�ɸo��x#��Ĝ:x�kW�� q2=��l?�Z��p�=�"�]��������N��,�n��{�c��^?Q&{��#����)�2+��7�9�M-jUx�<;gd1Zٲ3��<�w)�g.}z���X���p���07#q_~��������Z��mkzJXA۠�L�T�N"0>C���X�Z����v�z&eJ�ђ�j�Xu��Kk�)!��f��bf^�tScj�Ë���-�z����Pk���4s�yvF{��n2�i�j�_�Rh��x�p��S���'�y% ��xS�� � ��7�ꫥ��]q�z3��~���02�7KX�1�U�a]����X����ZT\�8`!�Rb:��Z��c7��Ǜs�c؝�� s�楅�F��<<㻾����S.m��;TF�y�ёH�N�m�~椔���s�#����j�C�z;kJמ�uirn%q6J���A�-�#n��/�w�x����YCu&<@�J������<��P�l�Gq��,1���`7�w�jk 2N�m�.�|37V��8�P��Ƃ.��n�C�μ��<����mpʷ�%���s��7�ߏ?H1D���9Z�p�r���q8�� �*����U�!��Qec�y#�B��rx`XR'���-��SȪ{�oL&_�0i,lN�8��&�g�ȍ�>.5ts_G���^�'? 5��<΄��{]���{�j?���oW�W�q�z��V�4�>�L��Or!���^[��;=�9�.��T����HE�|?W��qP��ޓ[���KC�N�Ρ\��y�����!�G��"����%�������{����佧{'��zl�F�%�-�ӳ�*_ď�����atO2fNi�Wb�6Zn�������}���.���+,>����(��D�b�����|t��袒���zaiN�\ޮ��p�$�I��!���)vD�T�K��cFN`��f���q+�#/�F$�h��/�hOb�Բ���z��m�1N-�|��{�_�n �j�tS���Xt1CY_�Ӫ(K�D�#��fy���I�.�D�W����ӄv�����A�,��M��阽de�7���!�p ���.V�K`�Dj�����~���a�,�O�ì�c\�wܬ�a�s6�|��� 7�@^)��q)�K�bq�+h�bcϋKH)�^�+ERP��-s\�L�,�<z�T���,˝�ߗcx�v\���E鍛�,E㻋j]�R~�H@u�M��]�I�J�'u��>�F�si�7�C���z��N�|䏜��d�Ŧ������Y��>Ӄ��K�?�~&Y��+���U;�& y�y��U�p��9M����mL�p�1ݺ�de9��=z^H���R��VR }��]|��a����O��;���,���ᢗ2�l�!W ��T?���}Z,�� �Ċ\���|�)���/ �� ~k��O���O45M�%�Q��3C���ol^��9+�E��I.�gň�$#|�e��m��H:��S�=�\]=yu�y��%Ĺ@��Q���T3#�go%�$�G�L� �N�Ҡ����6�l+�!X������51&'� .�e�{��H�"��rP�;��K[����Z��f �ʃ����V� =Fn���Gl}%F��@n�?�"����]�`�es1�,��x��H����{�3ZR��MP%��Vc���iچ��S/:f�L�G�K�~I�t"� �\@���0��U�K�k�=������4�{�~���5W��ҋ/�v&�8^���fV$�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ