Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2f7a705121c4562261a45d5e01e8785b.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
2f7a705121c4562261a45d5e01e8785b.exe
Resource
win10v2004-20231201-en
Target
2f7a705121c4562261a45d5e01e8785b
Size
4.8MB
MD5
2f7a705121c4562261a45d5e01e8785b
SHA1
83ec23c3556b116b7d2cacd321b13a8e46da5683
SHA256
cd60a507ed8c7a794eceb21639581bbe0c9e5225fa2172187604621ba5bd221d
SHA512
78e7ef2974535fa4bf697eb9b5399d44bb0abd393eeac456788de8e10fcf5e208723906aab9b2af6ed80d445d76a884db6c7f15a50a03f0341f67100cc132c09
SSDEEP
98304:NVHr5Pw5gdCmymXNtGTYr9GS2naybrrjF0x070G7J6oUqVsP:bHVC/mXNtGSkaGrrjF0Mj7ghquP
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
\=�S�h]HT���I�A.�� �(�K�'?{a�����E�����7��?LLb�[b1G +��2s�����Sqt��}�\���>�ݷ����4�� (���)#�'z�!�'p�Yt�d���Z��+C��w��,���8˖��E@H���/�qD��K�� �W\��*����d�sh�\��ב�#j�Sei�z��MZ&�ΧPQ-�h@������F�ߝ�}H�3~X��UGF����]����x���6�Cdl���tm�&H\�Æ�u4�$��b�^ɠ��LA��<N�;� ��]$��m���x=�#����s�}F���}��'tJ��H*��nJ�*Y^�ojY-Ɔz>�u7��yK�3��R�=�1 BԹ�7�9,���O�'3�N\5����z4��P�*��,m�Wp��Ⱥ� �b��y'�t ��D�W�XMOy�p�y�����<�~߶����V=�=�"D"��I�+H�떑�O��$� �X���;���5]�S����[`Aq�� H�����[ߛuu��};=�3�����1�n�U��ݤZ�y���f@��ĥ�}{���xK�ȉJB"�����ʦ����z�.Rfk ���4I��o������s�e Z�:�����b��Y��.�����R\E�����;�C�����L-�%�1�%�|mo߇X�@8��/1��3��2����5,�)[%�@>� "\ ]@^T^���πQ���ȁ��f�I^ؗ�1��{�~���E"X�dY�C�8l~Mҗt�̐�`>,��%b`���q��"��+��#��<���dq^�����{��m�����������-S��E%DdD�zO_Һ8l���oFm�YSAHwD�G&�</ �D'��̣����&L��,���*�\����r���sX�v���v��( �����15��5u��!�'�bM5�/Dd��v.��Bd����Yq�k��*�ϯ�ܷ�K�pn���rlw�$G�(5��k�B��בM0��~�!T/��۾�� 0>#��b�>��r�:�r}k28)N�k������:oJ,�G�!�.����T�Vo��}?� ��o�0�Q�T�D�2��g&�9���t�p�����>���cd2��9�ͬ����֟���Q� j��e�?�J�SQ�2E4ob0�4D���Gd�#�XV��'U�I��JU9�%�_n�i �c�*lG̀�d����8�$J����=����~ �n��a줦=��}�W`��p7y ���s`*�_Q���b��m������/+U�l]&����)����l �$�����[{s~L� yam�6��R��vx`N�o������ &��w=Qn,�܁����o��:ۑ���@���*�w6�n�5�,��B��94�5����&p(�5q��Q��ww�7'B'��Y�8(ʋ��_��H�1*0a��A�.3�I��m+���-+����� x�c��ѭ� %�'\T�S���x_q�jNW�^#:Y���&q�k^06~�GP��4D�I��}��Ȗ�#��k�2���{.p��t�t�bЎ�5�Ҋ��ı�E<���}Z #�Ep�/f�����`�C�ᨸ�c�%�����,��:���HE'�OR�uP���<�|� �A�v8��%#��s;��7���*�mXAgz�ߜ������X�ͣiF� }{ʥ�fJ�������F���))k��$��+yC��&{�5�ɳ%��lq�Ru?�q�p&&��ԕ���̯�������PU�d0��+e�AD7~M���&�����!]v�fX9!Vu��/���F� � ���Sg��L��`�uӏK��0�+�vhI���!�żpA�(�UXA��v��� n��l���?Ҁ"�W�=�����F�<����m����ьқ���.IW=�x䷥�2"&�A����1�l5)��u[��E<T�I�����Ӟ_ d��5&�m*鴽����j�%�5�ďu|`%�>���I�Vv�u����U�~n-߀7?�e�L ��˻KM�G��0�G9깋Ѥe1-8�Ti��(��c�HT�� �Z��^�YUJ@d�L�����A���e�d���PȂzh��P%L�䶃�[�U�L��HG]���Z�$�t�2��|���q�{�v��y����o�w��%(`qY�B���� e*�ǻ���p�T��7�]~�%ƴ���3������"OǙ-�w�N��?<��u��-q��$v��*�U;qa��%8b��������#��{�M�7�Q���HDz���A4�nH�D��PaQ�0�g��z��Iƞ7���>�p�t9� u=]�ӟT�>#�U�� z%��������d���v���y%�+���ڧZ��b�fت�"�ޓ$&n�^�*ߝ�AimBA2'����-���O|!wv�t�-�a��<�b{(�|v�Ŕ@?#�uz�3%�MP���*����0+a�P����&�t�G��|�F�S¼{��a�N7��m���'|hڻ �x�Ԧ��C+2$DQ����w�7:�+�݊��)5���4�j���L���-���v����qVHdzy�=�Ɉ;h�J��(#�;7�A�0U[������Щr �5����D��<�t�na6� �O�a���.Zg5;#sF�O� (���<��w(^ �1�unӟ���N|?�#nvΤ'r��$�p��bլW:C��6�"l�\�2G�č��O��µV���iϪƜM�`���Dd�&zB����j )0�o��TD�~Q�J���3SNή�)Y|'<"�� ���^)� �~yC���3���w�)!xs�H�X D�pu\����='/uΩ��N� ��b��v-�����A���1��& �{��"� /'���:Ha��\�uV�w+��<�&:�6k����n!R�i �(l�{�� F�B5�|�e��] ����I���;ؒ�t|&�o�;�k�q���#v��M�x6����}z�읋�T��G+S���;��D=�N,b�>s �D��pr[�4���He�R�+�������_]M��l6.�%0J-�½ 7�Ҷǫ�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ