Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
29600ca541fbb697c74e0c08cc2732d6.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
29600ca541fbb697c74e0c08cc2732d6.exe
Resource
win10v2004-20231201-en
Target
29600ca541fbb697c74e0c08cc2732d6
Size
4.8MB
MD5
29600ca541fbb697c74e0c08cc2732d6
SHA1
68faf0d62af05c1e83a42e582ef50c4d1cb0835d
SHA256
10e28ef1803eb8871ed5d5f8900dbee7eda0a2b573cf8a1aa57a8c426b71e717
SHA512
acd8ad63b4b10aab2f5dd7bfcce5cae51f79d63d278fa1841541db15b9beb6d769370b69d8f8a4621ce5eb0b4c370c383db3f5f76dff64502ea8d4a3ba04b447
SSDEEP
98304:E6/6VkuHaCRORmhKQIkhO8Sh50ywTsoIyfkqP8D25ewUu56iSDIJA9/pd5go6v:E6/6Vk0aZRmhKNNPWyGSyrN5wu5yshoS
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
��M�7� FvHͺ�5zё���3�2��$���wfjc�+�^R��-��G��Aڷ���hӖ(����)c7��H��1��%Xɤ�Z��%�_Q`��*��Ƶ��n�5U;���[;�Ik����&O����qgc����k�J,� u���"<v͟��i��r�'�kC���9�+��6��WXz0�1*�:]��^٢�|�B唋��˯9�s���J(o�zb�������ZU��rt��!�WFl ��S�V}��jT3����ScV��{~��#LUpG��!L:n#tQ<Jq����߮� ��QQ7����FK�'V>ߛ��ME��o[�!s#Z�#_a�q;��<�����XOO�; ��bާ�0�Joל~�� �6��]Q�'*DBFS���7�:���� ��;�Ad�(lo�xQ���|)�<��cq���d8�f\Ȯ �m�[S��B�Z����2�D�}��Z��������ʩ���_������X��[���a�>�<�p�3!q��)�hg/��.�}IM�cCQQ�Ll�����g;7y�H�a��wM/�+Ӌ옷�Y�����Sh�1�����������TIl�S��N�:W/���uOw����������%�S�z*Օ j\(pY|�'Wͻ���o�q!�TKs��a��`��ȼ�ȟ�d/�g8����F���{�f&vU����S�;a�8HW9��`:]Y��6�����*`�F6Db�`i�HItQ8�����-���09�����ة�0�%T��;�V�Gx�a���z~G �_<���YQ m��U��6Ͱ��[�� �DNb�N=��<�Q�K1Qv��`:���L �'��L�� mlCrs�Y���m�J��W�ev���H���� κ�a����X���� ��8 �+�0XSj[?@�U�.��R��3������͠����8AH��6OsV�7��o�x~Q-�(��j��?�] ���嶵��!_���50�[��i�]#�Y-N�p���x�S���)����λyo�s=�/&���s@��,B`��K1Ӹ���z��`y�y�F�#��C�*R���F��(y'HR>�%��!B�#/J��DVX��q)a7��*�|��)�{�{�=O��8��t�c�=W��+�z|�t�� ы�g����A�> ��OE���Ǫ�<�����s�}t�1���H���|X�$��q��C����Y� �C��ϦkY<�LG��G�6T�\�<e���k~� r��έ�=�xE 4BM�1�Џ_�ʚ�g��1p�5���D����e���^h}h���� ��`���?���'�M�!*��"�'�v�����G��8�S���G?zXh���Fq?�z*�}�`�n��x�t��0��2�C \2"C�;���>p�T�|w�zg~D����^��z�ޛ!)�x�yk�,�w��&E�ՇC�S��:u"<R� �,)oO�����&���A��K~n"��l�{�Qo�L�Z��7��P�"�B��A%�[���0���7����U�����(��I[ЂC)�A�|�O�º��=�K&9�!dM����:)^8�5�C������m��d��Ԏ��������T*B��������h��:����g�w�v��>�������lg9�`���8���k�a=Ck���/Q�-!W��{��h�uG�I�5����k[�(�X��|\_B�#%���fߊ��<w'��>�ź�ϼ��}��E;��v3m�h�Mo����Q>����:&z4�=d��#����(-���(`�a��%@8�[f`i��4����9��2���r�%����>Ĭn��y&�EtP�d;J�Xq���iH/�ja2�=SӾ�_��\P �������N��B���a�g��6zM���G�BH�z�A;nC=���#'͝��EF{, ?��o�֭n��~ �#ć>���ř}θh���}͎;"J�[-1�ؑ�i�-)aE��� �i��8�n����7����[/�X� x�0�L� yʲ��!ҋ���2�^c9�I�a�g��C�l�|"܄���T�2����ŒU5�]�b�@#�� ���T��UV��9ֲb��Z|,rH�n�G�]�K�*� )2���O��F@�r���e�� ����v�?8��l��2 �Q:M�ϭegʈ���w�Ín�V겭N��*�7b0���ܖAT�~�)V�y�wZ�d��Ɯ�-Vz�x�t��e���ⴣ�k�����U/Qp�X�����e)p�d��΅�������W�{���7����;�&T#�9��Qk(�������b����_���v窙x�D��z���T�_��w�x�ޤ�����#�w8�0nS��S���pK� sO�FKFoԼĎ����d�1���C`�-D�}�s�MS�Vֽ������&v_���۶� Ml�O9ݡ���]�Wx�MrUWxVZ�؇R�J��;�;S�|��?@�@�:�j� �6^��w�9y^.�E����h0y����Qz0v����*Ӭ��#�{��A��`��;���lo�GM�d}u��Q1�8���8x��)��4�|����~_�s���w}�z�}�����xS��ZM���vR�ڮ�)���u���$�kF�j�JYhO�q�����f^x��#?�k��5��?mfO�]�'�Ì����%�if'�R�X��Q-���H��vRHIX���Z4����g���j���L��KkD��9�P�!q��{�W�8y6�IS��c]a��= C�u�D4?�_�O����[)55qQe�K�� wZ�A� ��]~'iuY���Fj�����&�{�dq��| ^ZX��^����muXw��ɽԫ2���ߋ�Vh(P|�z���D�e��PD��}���~�Z���OTA���~�]�MA�є6Sw�K̩A��k��/��'� �����~�ZR��&�,���J/�6��pA+���W�U�5OqľM�y�A}�!��O9����4v����Z#m�N�h�W&i^��iD�z!0E{ct7b���`O���Ľ_7i�<�>~���#��3�N��r �ʥ~�/%{�M�G.�~Y�w p�OJ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ