Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
1ae43410da89dd6d19898b89d0d2ed5c.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
1ae43410da89dd6d19898b89d0d2ed5c.exe
Resource
win10v2004-20231201-en
Target
1ae43410da89dd6d19898b89d0d2ed5c
Size
4.8MB
MD5
1ae43410da89dd6d19898b89d0d2ed5c
SHA1
7b1ac71af0ce3e723145142fd00c9a2128d34484
SHA256
ba39faa9a298ae8e6678bed3e752fd94d2dcb1ed0a447eb533ab3c821d761d75
SHA512
b1289e3cebf0f81a4029dbcbae39b97a18524cdfc24aade31a57e923140d39e76d61875375a4ba1e9c2feb1bb87c6120b4f989b39725c637a5677a972d860b0c
SSDEEP
98304:IyhflStW6cam0oVTLka4zmHoXpElXoy14Onr/6R8rI5romtj9By+B:IyhAkS1Es1z6YpElXoy1dz0roW9nB
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
ɠ[jO���X��e�Z�3ք�X��#D��O|tdN� V�f��I`#)��Ͳ0=/�}���,�~�c �Ƙ��uA���k�5y�t�i/���)�og ����Du��!8=�'nΤ9n>��8�#gn9�c�Z�\0ǩ��4�GN�2�e��x�48��obK�~mY�WH�x*�3E;dz鈛�����f���3� K��͡0�o�\ci�zҕ�ts>�C�����:�G�V0���<dy�-.oC&,���w8�0����;�N�(��A��s�;_�c1F�uV�I�<��;�g��퉝�̷C���Zу;�>� ������zeݴwD ��� ͈T]cy��?����� `�ez5�Lj��m���H���h���Z�.sܬ6����8��P�s� ���f�~�����<��l\�1A��fַcEK���A���� 1���&:j_�4��}P��n��a[=�#0�L)�ƀ�_����Z�tՑұi�B@A�wr���ƾ��c\��\�nJ�� ��$��J�Β{ABzDtǶA���順1f�Z_I�T[.�g֣�Y����G�}T�3��$���?��!�y���L���z��{ C��t���킗N�*4�d<M$�9~˗Yu�љ3h^L��/k!u�R�� �&�q�F�]��=�t))�[�G�7��_8��}�w�����f�D�<i~߿�<�'{wp��6�iŶaw���z��;��ּ4"7�dL)��Z+e����4�,�[�ţju���w�Ԍ�_�Zb�Pg��c�ؘ7Y�9�.d�j�A�"�ߖT�U�� ���L�ʷJ%�L��39�N6����Z5��G�T� ��'P:DNt����H峕s����{�w=��{.��$p� 5I$g% �e��L%FG�xW�W!K���o� ��=U�(��^�b��O�}i��?���GCm �i##�D4{����*����C�%D��6�0����{0y�3?*�u���\�Ax�m�5��˅M�XH��"�]���5� ]"M�A��8�Ԏ�*"Aަ�B�|fAy���[�A�F�~}��h*W���x���IL+k�0����g;i��*�'�-���rn��#"&"�S��ϖ_���p K�N��l����|#⼍4�ӑ�D}`�.�@��h��8������,^��ϡת;��{Y��� p��M6K@��6�N�k-�'_�3�� v&�cs���-Xl�|�L����H��m��;%�S�z~��KI~/O�Rm�y=dǹc ����K���f$yW�Ft�C_E6�?���jB�k�������xST<����S��*�N$���>�ط��8$&��7u3!v:���ه��w��=(Ə�Ǹ��w���ޖ扤X[��5C� cz�ZC=�F�TџY��,�Q�lD�Vx��p�M�c�N��rqG�XVe���J�$�����WӞ�>��ߠ�){3!�4:X�U�����ިL��9����]4�L�+���EA��A��`z]zk;�7e���1�KČ� ��>��5 P���%������7Q�ߞ(x9RzILאV���L��Db� �ঢ়O�Fc���K/1_6ԋzD�P�Np��{�;�P}���{��N��)�3�<�����Ɯ �݉>�?���4��yqX_b^4��76���c� �����|�'@��+[D�С®�������H_&Kٷ �fX�6t���<G��҂�p������``(���K�9v%���u%��Z�ٿx��*s�ef��y:��vf�s�|]�,���y��'"���BQ�j=�):��g~�����"a/��>��H�0 ��T\����W�lS�H���<"�)�������J��e9��Wm�����k���Z���{ld� ����91�}=�f�ЯwT2:�HJ��owߓ�>{�lfw�q��,=�UC�i��� ٵQS]��o����W�9�I-h�v� c�����vx��O-�m9�ysG�$r���h��~<�mVÏE5�tp#�3�}��YZ���3=�潋�ظ�8U�i���N�E��0�ޙf������rt ���@�ĩ'���,F��l���+��g�FZ�:S�Dt�]P�����g���a� ^�y}�>���/gZ�ӣ>�M��Uq��Θ>٪>��c.Vg�g)l�0�yGQ�S|�RB}칼��SE �ޱ�I�FF���\���/�DX�� ƈY�[�':��'�5��5�'��ܔ>(V���̗(�K�Y��ʜ�}��lhV��5��g`&+���n�k���[){(z}�j��$���u���NFz��t�"̽����O~�t�c��X ѩ �G�fz���6����9��"�BT�]�ؐ6�>������8iXFU�� j�������9��Ip�X�'�`�>�����\5�4�_�s�0�n�T٪����P�%"���&���W3�H�"�p�S��vF��h�o�j.��hT2��|�,+Z��щW��'�P�� �]M�r F�0 K��Ь:��a��u6L� m�N2��P���/?� �&ESi,ȥ��%�\��E���`=����--���7G�*-n�в�8��^�?�L^�D��pq�x�zyG��FDG�Y��{MIHj��� Z��C�'�-�Nj����D9�nP�e� �N���MC�^�2�+sW3����� U_;&�rXs�������;ø�tC�[��:O9E�^�W"�16��[��2r���9ց��$+��W�X®+}�]Ar��� E��y�.�)���H��2t��XTw������z������{&��������*r����-��(�,�f��� V�L�_��]�ȷ�� �JF���X/�Jst��1�� &��F�����t��w��G��Txp�r�K�5g7�`��C:wB��>j�lu¡e�ը0a҈�㝣�����my�1c�a{or���5P�9����!}[C�j~Qͭ~���r��.JDY ~T d'p��D�[d 2��{��d�PZ܄;II2�����5�:���PF���)�n.�!�Ӫ�����E��~�1�r��Jz&�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ