Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8e2cf089a59489292fd09692752b0830_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.8e2cf089a59489292fd09692752b0830_JC.exe
Resource
win10v2004-20231020-en
Target
NEAS.8e2cf089a59489292fd09692752b0830_JC.exe
Size
7.5MB
MD5
8e2cf089a59489292fd09692752b0830
SHA1
9fab309e8cfcb9aede2ec22ea87f669bafdcd5e3
SHA256
176dc08f41e7dc298687c9054a60cd0516a9d97818c909032adb81f8cba6b1d1
SHA512
77e6c93d805ea5f82f8f93fd5bf75e02c30c33472875ef8edd0fedbe562dc5042e0f09d38dc51c3045949705d2ff28c0c954f5bc1b78e22bde8091397f5999ed
SSDEEP
196608:+Ld/SEWAgmXlq4lT3WTjMvKil/1vFtf7sAjjNBj2HxHsO8x:w/pWAgq84lqHMBLF1gA/NBj2HBspx
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
CreateSemaphoreW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
__C_specific_handler
WTSSendMessageW
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
Ï}�x�5c�;��K:)gA�+�w((͖Lx��0�3��3���k�'��������<O�;��}�l���J�9T𧖗բ�&2�@�`��Ejy�"ͫlYH��b��"�3�b��U��lE V�P6 s+�W��6�;5����g��(��i��p�SJh}���O�J��-HE�Ufb8I�vV��C�/�-���E�ג���I��'�w�����B�-Xޜgڦ�t��w�a����{J���P��;ǢzC�^�XU=�wI����4rs%o-0�b���A����~�PHߪ�y���� O�b϶/Fw$��?I1����?��_B���^��� z��p�X|PL �e��n0iJ��N���������@՝^y�����{�] }<�-���0y�Ъ��RL�>�7��L��LH��䘞`8�Fk�Z�)����yVQ��h���M�0�`C57eҡ)�24j�"��R��|���û쁱a��{�8��J̖R���jz�Hz:������w�?�|���;���� ��-w�/>�_�Y"��YB���ߔ��!E�?4�^��z���kv�?�S�p����^����'��GU������h<��?�R��5����[���ڽ`W=,H0,�eOJ�"�; ɒ=W|4[h5εq�mѭ(�K�JڮH�O,eu@!��8�.�6�Ąa/"�b��0>=�R����J����0o��8��}B�=5����CCl��B��a� �!G��|� X����u�r�M*)����U�}�{X�>�p��8�q8��� c�w5�?3O�."E��)�۩5K�Ҿ�҇2��ul�0�0����d���o2�����X|!ɻ��5k2��5S��B1j��H�b�_��Zʚ&�邵�x�N�0gg"��Le���O�)<��;�G(�~����h���Bߤ�ܞ�����Q �G� VQ� �{\5�Ůcl�X�n&�X��l'#���Kه���j-��UǾ����W�e�0�$S��e#R���mXӐ�* ��I�9��܃A)���)�� &��J����Ri�\�WOPc��sKy�%����ų���'�����U)��L�<����{��7�]2w��GA��1fl��X����phL}S�T� � �<���(�0���3}��G��u�M x�n�N�<��Z_p_i�^Xux���(P vƸ�bR��2�Af�%f�'Ũ��Z`t~�;N�.�����w�Ly��}��./��7z���betR|O<��h�^`��Q:u3QuX$�7G�|��S�ސe?��HlZ�F��w[�Qs��_�!=�|��q����}��A� �{"f?������[�l1�00����� ���SE=6�{q���(�-�צ!� w7�KjN�G=�#�R��=�Zq���*mt8����a�XO���k7Jy��U3���Ft��̵�|����h�Lڄ8�@f���A������\���^,��j���'�ө��c&�������F��{1]�o��p�c�tbt�;�|766oUoE�P@�����F���=�;�X�<���>tՔa-������ x�\5E�8�,:�gC�驛z$~�4y��y^��C��,�Q����:&��m�aH"h�h�ٹ�B�������F(Sa� ��[ď�$����n#�V"^� J���#<��92���e ��uWEs3�CmH��A����`�� UF��=�.� �Έ�|p�W͉��@Q�q<w�m���5��غ�o�4����$�����9c�ag��?N ��!90�R����u���}[Æ���E;+k2e!o�hL�n[�̦U�>�����V���M�͗����}6_�"aV%�O5�BI�����(�X�X_��8|�l�2G��)X�[n�d�D�à3%��l�?�LE�z��{m#+=�iQ�t�P'5��o��KH\���s��-e�E�,81 ��*�Y�������M_1������oPv�ۏf�!� �p���f�9(:8��u���b(�~О��� Ŕ����?-����\�O�^VʌyI�b��� ��He�+���Pbld���vm���-*4ܬo��=�b�� �]*\w�3�r���娭�ʀ���a�Z�g���B�}$���������F]��ؒ�me�r�%�?��y@�oFk�F����D���k�6{o;�Q�}�l6��u~��Ak������nZ-^:���X� ����a jk��r�<|/D-���mK��o�#N3�Ӳ*5�TBVa��>���u8��=LGÃ���sc]c�D5�+$$vه�+O�_���{�Em��i�w749a�b�[%����%�d�2�������̵t]��NN����~r�hΓ���`|j�L2��4!D���w��]$r1"�����]�)vn�LJ1�a�lx79`0�<���7�)���^-�,��q틓�] _�ʆ�YLĘ�� $���4��S.z����|��~�R�'��$�`G�t�� �?���,ٳ��O��<�kދ��)r����I��O�WG��P���s�Kf�"��\�@\���.ϱzϛ�S�2L�O�6�.���<m�La�4���<�?}1'����_�d���Hו�1�]�k�H������|���We!����{h��&�2��^sm��Q�pT���E�U�J��y �U��W��Λ�Ã/ޔ�jt>GV�������[ɀ#J߈���ݻ鐧3��+KO�6 �Cy�K���Yri�U��dCI���t���i��N]집�ryMJ�ʭW��m����rգ��Ǩ����j�S�E�&@귁�*%#��Hr�$3����}m?��Uo�^�X�N����>�{)Q��~�iH�uef͏r�O�ywUbu�p���0YM� ��3B�])\���1u�,�Q��AF�v�ɚPm��ܿ5�di�� {L�(µ�O�0�>�;�O����){�~^���B��`�4_E,�o�_A�'���|jJ8�g���6�V�N����Ό�"t�qcp'�~mQ����+�@�����F}?W5T� �Qd�eS�H�O�1��_�c;}����R���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE