Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
c6cdde43a750fd4099d3bd530047b74513717884e5ed690a37b30e1d930b0c18.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c6cdde43a750fd4099d3bd530047b74513717884e5ed690a37b30e1d930b0c18.exe
Resource
win10v2004-20230915-en
Target
c6cdde43a750fd4099d3bd530047b74513717884e5ed690a37b30e1d930b0c18
Size
7.2MB
MD5
0385bf856a2220c5a7704f7e54e4ccfb
SHA1
4828fcd573e456a06c13de3a4b7d06aab5861099
SHA256
c6cdde43a750fd4099d3bd530047b74513717884e5ed690a37b30e1d930b0c18
SHA512
c368d8dd36c840e3bebea3433cebc7ba376c8797e007757af26a974c8bab8994cc50dbd9767c432474916e20d6889d199ea8a704782341412c861f3d0cbd9256
SSDEEP
196608:LEpSQqgs+RHBLya3yNewTaWjBytqTsSC/6kVlVh4nFKw:Ik85yaiMQ3BytYl0jVmnFKw
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
__current_exception_context
__stdio_common_vfprintf
_c_exit
__setusermatherr
_configthreadlocale
_set_new_mode
GetCurrentThreadId
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
CharUpperBuffW
r�S����g��L ���K��(>~���R4#���˾��������)����<�����|k9���e�k���0��o��"Z(ޔ&�,@���٪Re�·��f*r��e���[��4�����c��!,]J��DX����Ϳ��>�47�a�OT�-��c ����$���3�:�����B�5Q�<��J'�{���;�t ����3%����u�}%�f�� �Ve�J��_B�Wf�#ڪ8��~�m�:���oU�m�ZJb��AWn���B'Z3MJ�tA����ȷ��Y�W�v;:O��3$��lJas���Py�V9-z\����i�ٞ%��Q#��4g^. �*��K���4J��u=7�+s[���a�u!��B���n���Ɏ Ɋ���џQycq3�<_|�ȅ���̼1t�[�u6[��z�H�{u���Q��f+��g�^룡/R �G�y Y7�Z�Q\!`g*bh�f�J�½�����y�pQ�[2�b�?�mw���lK}k�1�'f �>{z�s��d�Li�7�[+�'��K�ڀ�(�4o���d1bƵ��S�xM(��V8 ���9���C�*&������'�}g�e6W��Hr���M�]�!��:�a=Agj��� 8�G �e!-��6�b~�dЏ�����j��]�V~�P���$�MujF�^W�0boq�ڞW2��T<jS�k�4f3���\)��"k������5�^�Љ)<�":O-�8�Z(Ť��" �|�M�cS�E���ɨ��(,�&Ą�u���;D���;,��X����f�b3���r<�p�<��)s�<�1�8OM g��lA�C�R����������/������� +�>�Y|��Ѡmӊr�DIA�ԃ�L���XD� ���2����*d�����Y|�s1N��p�����>o��痿����a����2*h�Ӫ��ts/�B�Sʗ�W�jE�&<����q��A�0^ɉ^s�EҬ[��C��mQ���,`z�l?�c�=댋��w5�it��Ft;xL���dI�R���7+�-�m�#R�z���=y��N"��a�4�V?9-t%ly%�R$2z#St��`�Ӆ]_�C�{gn.��|Y<�,� �Sô¯�TB�X?lm�2��@r� �&�lyV~'�xY����+U/h4��yU����"mJ{�l<J��O6�>������|��rX�e�%9am�~%BI�w2-=|��#8�5O�$�fI$��Yץ� 2� k$A �˧oQ 7���2������=�}W�h��礸A�@���fo�᜵���+)g�Sip�|=W��HH��P��0\�4;�Sf��k�ӗ�6�4��Ǒ�A��84�dv�6.��4���}�"&�Դ���v�LuB�rzI�9*(���A��v�# ��CKG��`@��1I��>��� ;>%3S������[8��ֺ��a�������֣���^�u�v믵��r����J؍~.[���2�pb�f�g,�W_U��r1ۇ��ʳ�yi�ԋ�,�ዲ���ly|�P\�F � �1���Oߋjm�6��D��h5�H�aPpr��4��,վ��-�F������<��vy�k�z0w�LRu�����zi �����A�7^X�%�SM�z/L���P�*W���<�d>�D�_/�- y���2@���Vp�Iŵ6&�u^8���@Wb�`�*�*��A�W�y:z��0�B��2�:i�#��i*r�W���b�~�q��{5m �R��c����W�2��,k^��G�Y��zI4�DDӞ��{��`��ý���C�T]�o%�X7�^�䮐�9NP=]��-�g;`���zW���PK�/����-���T���M戅 N�8C������R�뼐7���"�e�(xts(��v�'~���2�5�F��p.�{j�!����uc� 20�鴪�e����i��4�%G�������\�-���i3u��: �0 㕀�+��_�!DT�H^�0[4��Z�6^*$�e�?����H(PmR��OSY������}e���w�k���)��9�=�;�Z���A�D��]{;�1��$#�u��;vZ �]o�>���J*��aU��o�Oԓ���X�ᮦ"R<.%�q�쬱Ip�ZC[m?x�N�����}��]�t��B��DO�$�ԥg���XzO�ܵh'r�ڠ��ӒGw�{��}WZk�d��ǜl����p �u��HN��� v��`�8nk���hG}�e��M�Z<'�_I>�D�/����;����:GKY��;���e_�qE�%�CJ�@�L+Mn�е�I������VL�%�a�X�r���:��(졑 (,eMr�7X, �`v�Q��L�2l�pi����R-���~~zuU�}�DӇ|��P!5�� =h-�?`LHȀ4�#�����y_���$�Q�y�_�55q_SIș(�pV��XKK`>�3 җ�E%&�_11 `L��{Sx����������@y�ebUr��OJ]~�v�e���U�G%G��d�oQ~�����%Rq��'Z��\��+�P7���Bo�l1Y�æ���ل��[z��DڶYC|�WI~YK�#��5 J� j�?F���b�������HV���n��w>e��(����?���8����1���ܻ�@#���QIe[��y:�����e�L���(��!��V.�*�XgJ���z���x��/E�������pԸi���l �t���YQ��@�*��6%�~��C'\H���/�T�Mwۯ��)2�&[S����?u�8D}�c)*/Yr��;^f*A�ț�7m�o +�L ە9F��K�$�ɢ ��t�jh�O����@a���& ���+��* E�j<��Wt�s�2���r�������s~����ⲏ��q�2JԩV츸��Ѻ2EC~ݸ��А�յ�ݣԟ:z˚?C�.Sp�tc��C%�Q��/��0oʚ���#�V�56z�'�8pH�6���B\�KE�Y6��Z��<s4f8|晖����%"W�� �ہ=M�9�����8�oFe����#&d~�Jc2t�91��� � �ߏ�2���H�^[\�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ