Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.0480733246a505dd24fa2680d915fa30_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.0480733246a505dd24fa2680d915fa30_JC.exe
Resource
win10v2004-20231023-en
Target
NEAS.0480733246a505dd24fa2680d915fa30_JC.exe
Size
1.5MB
MD5
0480733246a505dd24fa2680d915fa30
SHA1
1e391810f1d74136db8ae354c6b12d509ce99fab
SHA256
6400e6661d0d664c51f372e05eedaa40ce151688b81c86e58a91a6b2eae421b4
SHA512
172fcd568293b94535ebe121bba59ad773015f3d92d8475bf3ee622f154e71403507f82c441529affb641da4c08f0e48a7402e405d93bf25724d2b4023f4f94b
SSDEEP
24576:4/7JVD8Q5aHNdIHR4mktBZGi9Vv4T1ip2fpGm4lRP5wtX//7UHpzIRVt:wJVD354yi359Vv4T1ZfYwtX/zUmR7
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FindResourceExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CharUpperBuffW
CoUninitialize
SysStringLen
��F�_q�1�vQG�� ��h.�;2zZ��OM��B�[���DM~Uw=f�K)��9���f���Z'D�1��!��n��F�"��L_"�P�l<ƭ���鲍��4��֍��U|Q�@(u��)5�Ohv�q����>�z�b]_dU���tJ1��N|�k���4�c��!��Û�W`�eW$����@��G�����egҷ �uqJF#O�e4v��q-���g�M�� ��ټ{�9m�.��}�!���7�L�z'��5wZ�w��{:0�5[��|����]�_���M��98�/T�����3��A��`�L1� ���͵|��!�L:����"�I>��0��a�F�fk3R������5�`���X�'q� ``R"� �SVcYȑ�'}V���F�U���vV*MJp�,Z��0���=��qI��[�/ĭ�eG����1��,���l<�&�K@��ǖ���J�1���/j�?Ve�ט�V�jE��'�k*v0J��V��<a��ʉ��FH��L�qcM+:��Qײ�9�iه}0{ �͂,���h�Xc*n��.'�×0r ��+ԇpVW���x���:�{q�}�CP��"��Bf�� >���3"���G*�n����Ev��Ȇ�ʏ���-�C6Yˤ=��;])B-7R V�y��Q]~���AϮ��H��MZ�� �6�������м_�=��A�f�Mv��1�I��3�tLF�����C�Z�Ygwɽ"�Wa�+�T�A��)8���G����dw)����{wWJJ�xl�p�Ȣ�\6!��ZWma���K���g�S�����x��a#����E�o�B��b_v�w�k�P?�=Jnfo�{Ɏ��������q�[O+����`�JcW�:t{))"�T`��U�O��l�����+�?��3�z����ʹ���1T<������T�KF�'9J���5��e6��o��,l��媁*�!\�������Q�.SJ:��Նi�Å �b�{q���Y��p�h���&>'W�o�m���D���S>��0/��*G� %�&���vQ���#�l8�&�����HF��ԅO������y����;kd��I�gOj��J�0�*�ge����b�noڿi��˚�j:p.N��z�N(�Ċ ��H���Ʒ��?��!a�cM�5�I=͚=#��&��8���p�P�$��&��ɺ�E��o�Q�k-�W�X\Y�5�.�0�_縶���>ԏ<0�}b�E�P?�I*�*O3����ǂ�W%vE���rR1�&j��@�G�q@~�A2'�'��S��*rD�͈�k�g��_��S��F��3bt�$RP��%S�m���[?�1^\�ߙJ]b(��PW <(�!�~��� yk�N:R��m���i82�`�r� |�M��ڱ+�jD��/֯���bC�����'�|�u�ΰ����U4nY\/��h�JV� �z�Ӽ��nERv:�i����dw�$�xT��Ͳ �#Y�v�(��Յ7��?4R��ϸ�� p�����CCim ��d{�i�m0��r�&�v� 1�s����l�����.���H'�&dL{l�->Ny����������Fk _8�#�����}w��(������L�-�%��=��%3�gէ˰H�������_v~�z�N����@v��!�z�z�����B^�r����%-I���'Yj��m[ShA �q��x�f>��!8&�2h бn_T����u��H�D�����d�m����>.���$�+��G���H��$J�{_���mmBfS㿰\:���apl�k�^�EtZ����m8wN�ŰwÖ]Oy��?�X��2�Z��:&7�W��p�"�N��p����D"�0�[�����ih�b�Y��l��o���g����]V�P_�[G�vv��c JK���7�=� � ����C�O����R��L�l��h,p��67�\mvL������/61���ɩx_���ЏS��W�nj~��>g��)����SW\�P4�8��������� 3�T��&�J�:�h�5�3�*˶�(u"���5s��v1��K�1f�S�2#&�:b˒����*b��.��H�'"kR�/$�w�˃Xc@%�kʻĔ�aĥޝqƦ�\�*l*�v��_\�b�8����aNf� ����4@-���#��>�:On�0��psz8� �\�K*��p����a���%@��mS}��I£����b�ABT���2h���u=�� 4D�������}�|�g��]DT�V �>}��`��u#�tE�Eu�:�ܷջ�B�r�_lk*#�@�^)r�0��\�Z���.�}�s4�%"��)��j�8�_�����ȩ�7��A����N��g���3�|��e��D����̄�g��������հ��8�[Jߊ�ʰ�Q�@�[��E��`�%�}+�A�'������>�������L��5�SB<� �=���k��3�7g1��{�WcW��n�x���J|�7�`@��Ԡ����g�g�h^�3�)r�9�@�\��]� w�.K��Z��ŭ�OHx^\PQ9�^�9J���!��J¸^�}CuL�5��k���Id;�s�%�X�x�b�Nx#�un� ߵц�������� �� "v(�����Q���s�x�xQ|����ʹѷrן���BX;̛���J/�������@�F������ ���f-����J����Dh�͕��zg�f�xs2 �9�=8t���#-�@��X+?K�#4�1v��AQ�~�Am�0D*��q�!7�JK%���M����iaF&����IWρf<s(-��,^qr���e�œ�˦\�Η��� �G��a�劕U���q����J��m��Z��cw J�H ��̪)G�x�"���7��AEΚ:-�/� dn/y��xNB��O�����!-�l��W˓�D�yB��efF��]j�9��}�GK��a��`-P�k[��?4��X՛�!�A���1��b+Bkj�N��K͢��̙9c��=�֬c�(
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ