Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.005604aa02fdaf66c8cdcd8a6a010ae0_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.005604aa02fdaf66c8cdcd8a6a010ae0_JC.exe
Resource
win10v2004-20231020-en
Target
NEAS.005604aa02fdaf66c8cdcd8a6a010ae0_JC.exe
Size
1.5MB
MD5
005604aa02fdaf66c8cdcd8a6a010ae0
SHA1
868047898a22163c6c3111e813584e4f971d4280
SHA256
ee5871c3c3ff21e5cbc633883272dce24e93900c363b09350d991bcc81f97733
SHA512
02310b78cc69f198095978d5863e571bcb9d0dcd5148c4d1809be9bb15a3df9396d27f7fd5d8cd2a70b1a746c8948df5423bd84a1d8b0707166a6bb39320a58e
SSDEEP
24576:UNrkkNC8PyjgoSRl4sa55JfQVm9CR9Cie+2D3FMFirgSSNUSGBBzOdrwVc:Q97sKuD55umER9C7lpM+gSOGzerw6
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapReAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
LoadCursorW
CoUninitialize
VariantClear
wd3�3�]�ۀF��+{�F�{��ɓPXXd��ւ���o�X8����{��+0��l��m��������>)_Ӳ���[�3md:����.��K���Hb ����"��4���qW�O��{^謿N�C�J�_2+��6���v��ב*� �ї�a�(���Ã��I>~��:`�c�X���ȡBy㐗 ۭ_k|3�,Nޚ/��f˞OBI���Kq��X��Q�)��j3��W�Om�i��1�b��� ٔ<W� +hy<V�J���C��+t(�`��w���u������h��6����.d�9�~3\��~r'�)����%n�.��ASzcq�l�@��{_���o�]!�K�<�c.�nF��,�l^�1hS}�OE��oi���RU�Ch{�nM���Ϯ�8Y��S���i^���'��1��T=�������k�F�����1�jb�]��X����26�V�h�0��P�j˂�c��G���ZS�{�UB������mx�*������k4�����c}�-+ρ���/q���v�n@&>YJ����)�A�4�[?��k\Ⱥ!����@6�ѦN^/�$q!3�JR<<v����G��>C�FN[wMr�5ēT���"�I����#!�o�-����Y�Ծ7idc��j��Y��%���N����ws���.��O볘�ɦ8��ђ�Q>�� ~Ǧ8��T�|R�F�2��dk���C`�g��W����L����6h���Mm2rю�O�,�X�ެ�RY0 !�G���:/����0�֟�l���h���q2Y����Kq�e��?�"�8�IM� ��]���\�~(@b[�7!�*���UF�c>�#-���r�+?��)��}�Ad��/���Y���������fΥ�>;��r�w`r/[if�Z�&����Z��<�NX�!�M�*/��fv��0��1b�G�0K��h6(Q�|�]�.r�Y�x�Mپn�S]��<���ܚ��r��<֗�rm���M�C��E�����|Bx��J�Vvk��iPg�1�v�1���@��ǖ�E�S-��m�w?��>����{����a��(�e��b*��7x�֓���3���!l���R���=#`� ��u��b�M��EG�����G$�&Z{����NpW\ݬ����#��o�j�.�Cg�S�����G��?�^�.ߒ��g#��ʑ���(��{iU� !��/�#�O��w��5M6lEW�{e{�B#�\9���_���[��������<�wRL0��C�á�x����q�`)̒�>��$���$���n!.�m��i��ط�`@�ބ�6m�T˜�* ����}�M˝�)p�ܝ���^"U�};�N+;Ġcyd)��`1�TPeuu+���yՠ�~�Gu�{7���QC���=�1T93�Y;�y3���4��`6���$as�^�< ګ��E�� ®�>�Yـ3��F#���Y5a���T���Q�9�Wv^F�FB^�[�1��a��y@�������|�3,�=�@�.��Z�~PC����X�/E6���0���s$ɤ��@H6E�ߠM�i�T�#���r��ďgb������!$�-�}���pI��d'���/A�f�H�l�1�9��ʲ�oK�/�r������������*Q��*e_#�ju�GET�k?J3�����g���[�,R��z�^�O��ݺQ���jN�����M��Y�WXH�?A�m1:����]��繭q�[]l����h9 L�����ڭ(}ќ|� � q�-�j��j/+@-�h��V\�������@��Σ���/{Q���Ci35)Hz'f�Dj�s+5�N=�Bܖ���^��j2��5"R��ю(��1ʝ����R[]�����V�S,'ELXRݷj�:�Qԗ����D~�v�H�y���������-Ug���1=�����H|����2g�B�tr�d�י�ج�`��8��D���yo)ϗO@9 �� 率���m!j��~��҆�B�#v���b��S�I�M`x���������5_��N�ڕ� ����R9���b��r����8=���gJD�^3&4�{�-Һ[�\��m���b`�ﰜ�<s4G>0��}��rO���w�~�D����sG�5,b$э<f�[K��Uxm��������8A��$wI�FӦ��9�<T\�����%�Qb/)��CM2�ޟ!� 7�"�I�� ��S�2�� �#_�B�<�NP��*���ð���s�Y6���!�w���99/���Wx�_����C� �F�Z��̏���Q{�M.�y���meJct�#wRB�Z+����b��.���<�8�a�w�)X��&�*������J�=�f�p�Q�)#�)�m�糋�&E��<snЫ���PF����>A��+�u��9]hj�[lM�`���q:':?�N�3f��3�8�J��V��~�ߊP�h�̙$��>b�����a�}��,n��CKq�RR�����z�Jl*dx��v�&ձ�z��!�\���+����7����'ʈ%"���g�_oj>s��~2B4��{sR�����b����:��㤊O�sIL�a��zEi��ͽ�r��d� �5:�uBP��܂���]��Թ��1}r������f4|/sXh�>�@�������δE++�Ё�$(�x�moS�q{����9��ʌ@� Uȼ]k\wb�?/{v &(.�W�$��� ����_/�0�s)�F��1��q�[�����}#����T�s����TT���/P��O����M��H;EAL�m��D�����>�hi���ޡmeQ�K�o`<.(�4�?ݒ0 m����0��:oN�3GDHXm���z����v�!����1%���z^>+�7/ճl���QFe���Ƙ�=V��1�E�먈�ϝ���ιX�ڞ��S��a�A�`�����:;�7���GD��[�N36Ga��N��=j�M���Dq4�6���tDycH��S��1��!��UN#pRr�u'V,Rܧ-_����_X8+��2���X�4�I��r ��f��lg����=�Y����!�����#}�{H��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ