Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
1fff72d6e8ff181b4a60bde40e980304.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
1fff72d6e8ff181b4a60bde40e980304.exe
Resource
win10v2004-20231201-en
Target
1fff72d6e8ff181b4a60bde40e980304
Size
4.8MB
MD5
1fff72d6e8ff181b4a60bde40e980304
SHA1
649d8ccaff08ca2173a79f530118f493131b43a5
SHA256
5c33774f498579ca5c5918af547b11021568ca168dd0f8268f76e28e89e49f92
SHA512
d8e5f5bd4d0f47185162ce1708fb420d556d58bb112729ab23f6638f1f2f51d779e1cf140a16e5d32db9f37d83797cfce6a3c200a1fe57aafc3a8be7aa200d5e
SSDEEP
98304:i4ITYuNpXH55SDFT09zSMWLc6qaShSVzKf+ylF7v6yS68Xo0:ihYG5oDFQ9SMWY6/cSwf+6I6840
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
N�&�q�L^�%�)�[/Uy�E-K��h� u%cm�ߩζRMO����g��nb���u8%R�����í��K��*H����Gψ{�g�;�p/�/$������b�z*"�sA�ͽFp�,G�{�v�j��_�x!��\%)��?K}������sOj1���o�!���z��}R�VZ�Pp%��G����_�7S�md�^&�����Z�R��5�Lx;7rmv"�_8��%@o�RF�����ͅ4��u�R|�&��M9"�� N� v�o��2�g� cZQ�z�[�Q.Aй)=j:5s���N���~��\�u�(P�L�U ͡<� x9�� �-�t�<�XF����C��1�͌s��ɺ���&vl��v8ʺ&�,9Q�X�)W���4'*6�ȶ���]����)�C���GNI �mSq�{e����٠ D��~b�GyG�=M�h�܆��7���ig ���68Z{DX2��?42��s�������|4�[�I{l����$��bX���-�%�D��/X�K��W@:|���`/���p�h�}\P�I�!z�7��o�wCI���NAf�i'4z�]���n6���t�0����\�BǑ�T���k��A5�'�Tt��Z"g�p9���"�}f�`�����H\<С�1�p�I��_�{N�E����������4ɱ ~oN~ �94��FZ0�Z�����-O�N�tx��\�l��\� !�L�L�3�_*)���+����� ��)F̱"G�)*��� >4=KO��=�a����^z�d %��S֢XJlZ�E�h�K5���ؑ�8w���,��Q\��T�l�t��n"�������] t���J�1��O�!�T+��u���ͼ�)T!NY^n��F���Ͳ/J�a���ȟyK�A��ټAК���D��O��!����)0� ��h#��V!��,y=T|�C�J>̠uڱ����@ gxyz�R�����hi� ����Hؿ���䛤i�q�M�<���g&�{a�ݎ���q�(l�+@ں�^�dl7���e�3ll���).�� �QL��n[x�PO���)�$��͕��cwП���� ��n� �&$�\|;�4��'HG�r��F��W�!�0�A�|��֚H���Q������P�Q�CcrnY��X�h<{Z�v!�(q�a1�1^�s� �+r����-U�H��W���y� i��q�=������pb�Z<�6vV]��}F���f;SDH���l�_��1�!�̝b ���9꠆O��5�����������(�d\��&Qy��x�O�g��j��vfӎ���x !-�p���?�1P[����K�7�x���m�!�"h��I�7����1�ͺ��#����r)Lb�o9l���+f`�x���pih��H���e�B�>�a�vGnרޔ1�S=�?v����Ai�gM����93�� �Mr=9G�ωa(41D��Yi���E�,���zy�`\� í�:5���v�CX��(�$\�9�%[�IvlG���I�,�;���,�0�n���v�dC�� ѐ��>�fwj����ǯ��Fś���eΪBcF(�����l"����϶���d�k`GIG^����rjߔse�=_��S��5*�;1�B���ş!D(w&mݯ)#/W�1h�tu���#�;�5E�� 2(]ޛx]���D �xF[x��h�d#!�i`�y�ڑ~Hr���5k������ͺ@N�t�;�[V��-/#~��C��/)�S�����7�'9��ܢ���(Է�r+Hb�7��5�Lx8�du�d�oɯ�M�&��`� �??7��vM-=*ҏ�7uh��+���~�&a�~��}�� ������ :�~�Y�;�6�����VM�}�@��x����>F�No�o"����e|Q�_M9��E��]=聡�n��VDM0r�V���4=��w�5�E�v�*BFoԳ}�H�\��v`K�����K��Y� X� �z1�ke�������E(˓T��X۩B�sa}f���1CL�=(6�-�%a�⌋N�+sK���W�~=���쳳�<f?j�IV���꿴y��`��}�Ru7J�O�/������WE��n��mV�8�N&�[ ��i��]�e�$��J� ه��@E��Ӥ�sl$]w^�J�w�����-�i���(��/4���n!pl���|/ז �����Q�%q"2�2UT�24���m]ͫn��<e�ވ�5�?���ˌM7�T�.��j�� �RO�(��śt�@(CY%ӞڻaF5�xv'���n�I�U���F��Q��RF�x1c�&�&i���A�F�-ބ�!F�1A\��(ԭ�J�a0�<��b*�D?����K³yN��\7tĭڄ� ��9�AmD� o���w�S��d5�<�)Ht}�{w�S�ߛ���Q��4۵�v�I�����,r�ZZ�w_����_�Z�m{���f��}�@���p0��Kڊ\�e1[�k�*`T/K?x��nx kyF-���qL}���蒿�y�bf� �}AKA���������Gͤ�셬�V�e��X�)b�W��W~�������G`��%5a�<C�O#6�|_5�U�B��ſ�"pt~�������j�}6�a�PŠʊ��7wY�-��͢�^������5s�c��*pZ ͟V����+M}���̜[0_e����h�Ё�9����`�F��������p������O�mJ���W��as��kp�_4U�H��g �Մ �JI Z�B:����k�K�-�Ͻ��mO�G`���O�F�>o�f�vm�ރ�:Rb��6�w�'��������l 2��W?`-�PB8ڦ�r��BQ��L����F�}$�fi�ρ�����o8��u����o�8���Q�Yp���p�/ܬ'��h#�U��W纒DK?Y��Q����t���c���hl�i�J <��5���/���w��;v�ΐ/[І�)�u$��Ɯ�����E(��Օ�=�Qp�A��Nv��lY$+�o��ʅ�:���/�r�d��RG�)����+
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ