Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
368b769f0c2519e28f59123e70f9eb9f.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
368b769f0c2519e28f59123e70f9eb9f.exe
Resource
win10v2004-20231201-en
Target
368b769f0c2519e28f59123e70f9eb9f
Size
4.8MB
MD5
368b769f0c2519e28f59123e70f9eb9f
SHA1
c40a882a994c9d09ee73b66ba519952f8c9c72a9
SHA256
7967dc03c56c8f048533fdf40dcb131a34d4154c7ba3c64c66431f56af938523
SHA512
32f7b40505637e8f75a07a82d7dc1b5382480883a45a557acbf14e7eb24c880b7fcba475a0fb2b574212666b8683631d11c1a418ea0379afa64223c0cddcb92e
SSDEEP
98304:aCFy+5m8cDlqLivfUDv5TkEYJ+Rdzwnkd5GEhMfbwDg:9yqm8qlt6hTkEYJCwnfEdDg
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
[u��G��2�j����2+@S���|�kD"= ��&������'� zrt�J��}��|oAZ�ZDE�),Mbu���s����hasb�V�� @f�tV���3��0t��Mv��������D�W�F�ݴڮEۈ��s'j#��������C�B�g�@���;������0��7}E~<�yܿD�A�????���k9Lu�V#rMz���Z���IEt�bk��n鎱UAF��+|��)�颤��Pׅ[���g�Ccؚ;�G���N��^����U�N�cda- ������ỽ�s��b%���|+6���Q~Sc��e��k)+}�@�2��$RS�b�t`�Yo�p�;�-� s�m��׆I~q�+�<LƎw��@'���C����(�,~h�m,��7GԠ&ɵ� �>{n ���;��M�v�g�9���[^�=� �W;��uI�ٶ_���D��~��b���ͧd�����L+ұ�K��eZ��<�#)���Ln��d�oanѴ�r�q>hi``�>"B_ϭ�z0��<QG ZU��� �gD�-�T���p��DXB��M�*�o,}���r�����7����R���/%�E���L'@�J�-'��� 5[ҩ6����^��w��̧�Wv7A?�d��mKa`�R��u�|�^H� �YV�T@n=������Ϻu��L*SG��-)�v$)x ?,��t}yS�߃���>�]~� �>�{ϱ�����.��G����Ek$Q�KM����Q�2�|��Y��nqN�#>��5z�v9��m� R�i&U��Om�kn��m��(����0���(� �"a���|�W��N� ��M���~����P�R�1�]��<�6����j3���:�5�+��S�2Z+�e#�~����=^>'��C��~�>S�g�\�VdW�3�3HԌ�0�~km�������*[n�̲��(W�yٟk�m���'���t`���G�9�\2��֔���u����Ds4�5��_ݢ�*��%SS��~��x�����<�x���}?��,������w�a�d��L��Tx�t<g7:Rg̵aWJs?ڽ�i�����_�k�TB���=����o���~���m�b�A�+3��.#���0��I�`D�U �O���g���<ĉ��DZk��\!7uiMM]}�W�Eo��Y�t ��g!�?��)���d��7��-m<�齹BN�?'BNV8���,`��������0ְ�4Ĺ?�X?0|�io�������K��Fj����}�@�ஷ���e�dx���z��|�~���'�&7�mJ�ukږ���M˙7�4�"����~�n��w�b{�=�s�ɣ���Sp�/z+���^��8�?`3 �"Шg�By�%�>���GϲA3)�{��u���9\��� -o��]��i{�!�c��'��;%܈��Du�y1���i�ۧ5q5�yԛ5qhz�n�x � E��Q��w���+Q���.��t���!���$4�R��͈S�reB,W�Y���E���uG)���9O�2*�YZC��,3�x���\�P�o���ީo�!�I�ƾ�|o,��eew��X�o�� �:H^�����I{��X���}��bf:�<������}�\��ie�M� �(˒8�ɷMo�%j������!�h�Bvm������������k���E����}��;�j䓺7�fh�νBZ���*c��M�F�"Kp���^��cWH��a;uf4ؔ1O7 �K�G�Q#��pV����`?x�H`�l~�.1��Fz��uf�j����!.t�3�Q�E�O&�F.���`dd~as�څM����&�u�i��S������3|���%�[�KX؟Z,з[���;Ny��&��08O���w���k���h-���%�p�ړ|A�VV�c�qՔ ��4��5W �:=���J?[E}��9��j���e�t?6�{�,�薪O�j�g\M��.�H�b���!Vh=�J\�Qc O�"���ʭ½z߬ }X��]O�#/t0`������j�����f�f�U���(2,�#+��Y�z�X��E���Ʃ�J��+H^�SA�R\pqm�ٶ.�p���\7F�����؛�T��+�P/�nL�A�P��K3A����.#�-�V�?o���Sj��X������#������X 4mr��Ĭ�=���p�ׯ�3�Dq�B:�Eq���;y��\��Zb��L�}��c!�P ���9���˷Ҵ�Ӊ��c��(���'��F̥�;#e~s�p�����!2K��-�r�I��0�\����arWR�"���JM�L������#����"[�$Ex�|�7�yN�J]����N�����'jo�V?s����f���V����S��6��ͳ<:F�wH;un85W���v/տ��K�_���>p�8E��6�!�AM���)� ��D4 �c��U��؞������<�P���*�7h������ON�s�ĈQ��\ܢ����][|�@Mگ�`B�5�b4Y=��G���K��.���5�p|X��ҦS�/��V��c��m3����wY{y�x��@�6w�b�!�w=�O���',t��f�����> nk�!�9~�Չ�ʦ��R�a"��Bo��҄�ܺV�Z�<#��>��������v�/l�s�w#���w�}���{��k�ܞ�6M?)5��Y<��%xL�L�yt�� @tS��8?�M6�N��j�U�1}��z qO�` !���k{�q%��k���xs��V��f�ɟoH�5�M1i�$�3Qc� �}'��f+����S^)�f�ǝ�w�^<Z��d�e�`�W<ZT��j�j�塹��fu�'��sd1� ����ĴN�J$z8B#r��wF��=l-�uK����EFOUC�sm��9438������H��I4�wE�!k�� )�V�o�5ˤ������$,B;�q�rl���û�Ќ���8�p �$��^:��ǜ������b����r���L K�F��ʥ8Ѫ�$�E)h�5�ߵ�Tؿ��t�6�`Q*�D�+��OD�E跪���T�H��1[
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ