Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
53f7c1852fce5d0536aa28e0d2ccaa2a.exe
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
53f7c1852fce5d0536aa28e0d2ccaa2a.exe
Resource
win10v2004-20231215-en
Target
53f7c1852fce5d0536aa28e0d2ccaa2a
Size
4.8MB
MD5
53f7c1852fce5d0536aa28e0d2ccaa2a
SHA1
2d73d2fa87b3397d3b5f126f3281758c82919aaf
SHA256
6a835abffc0af86a6d9ebf2beb37941e885e0a0e3991290e35947361806cc0b2
SHA512
6ef0c9b6d52c2427c8150136f86fd7b1ad964c676506b07ce261d1ecfb27f41e7d8bab779935ec777ce2c10c2f05e6b748790c1552d73b42de42702fd3ac879c
SSDEEP
98304:4xPINzx0G66HdJlqCBBpWgIbYsWu9TTz+EoyAvCxzXZKG4/7qO:1x0G66HdbnljgTOEpzNa+O
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
�]T��1�?߁�����1���R ��������k僞�K��Ωd�j+�hW�L ����+�]��N �x�>^���:7�-����0�����[R��y.q�����7�x�(� ;���ʥ�i�ҳ���aނX������������D}��3ј�J#d��`����oTh�(^)z����8�w4�=���(��9U�����#�nar-&���WB���{;�<Ys��Z�U��Ƚ�7X�F"�P4 +O8F�����s����>�*�R{#h�ZŶ�[�gl ��u���#��M�H�� DQOd�@m�x+�5�V�#��Q'�`�����as�;<-��*��:pND��9OjQ�Q��M���8�UV��?�Je�5����n�j�o��t'$Q�]�y7�<^a[i~����a����h�=�m�Q�ܛ�.���J͙��c�<�`�?4�\��h��~o�����e[�U�-�����!����rZ�O��:�1!��<���+���kNJl�R 7j/�ΰ���_~���x"�NK��!p�AX�(�uzd4r�LdJ���!pYP�qŜ6�U�i��&Cw�Y��M^h@�+�16�E�t4D�<�&�U����G%�^�m*.��pVD"@���6��gn�6��g�3�������+q�||�O�����"����v��I�f��(N�Z���cuͯHL�مN�������Dt+��J˭l*�xՕ��2+����ʔ�F.�3y�⮣Ye8�8�s ̩.kFcP��*^?"���_�z���ܻ����qHy�]���v࿊�^A����ܐ^-I��ȴ��+�p�f4�A#����4�:Õ��/n&��1���uGI�!:��؉N�Q��n|�ɑ�tR����>��W���L�X���5ad�h����}otY��G�����#��ܕPֵ�3ZtI+���R+� ���n�PN`�r�9�e�l41S�dfL<s��@�Rஹ̔& �k6�H��R#$[F2[j^ģ�� >荂������5ꪃ���[�B�@=U��U�u@��Xb���֞N�yA�!}]7}�$SpN�@S_��m�S89�J�1 �R��*C5�e��(���� �&~y��݀W����*��Hd-�O͈l_� v������%�#��l;O ��=�� �����T<�/i�Mª�|j�(����f������)��~_�>}��RU���!z��w��E������|?nڼ,��� PeBQN¤�f z�P��A+�𩇻�T���s ����B���O��PJB`�IV�.��{�r�,��N1۩�>(/�E��]�ђ�;\)��P����'NW�V܄���[!��֖�ɞx�\�eT3'^$��f�,i���a�� ��E������������5�L+�won����l{����u��گ�9)l��暿'>M� HX\��)��{�,P�g�c���=+�W�ʏm�1�Rf}l5��B�q,�]� `�E�l�c?HXa,)#�S.�?b|�(g�7<{��&i����]H2�(��<GG{8Ԣ�0������ނ/F��gz��ds!L$dI��c����X�1��a�%�mLDi�;6��ؙ�5`�^皴���@��Ոfo�<S���������;U� :Ej�i�*�����뚎Y�W&Xv�O��6�&�E ��E���YIF���(8!w�E@o����6{��H���>��;��u_�#�į�T{@���OA�i��uӸ�U�@ ~��{�����Ԫ�c��2&�?�l�<T� ���l����UHLɭO�<�䱁��I�I+SGU*1J�$����5�X���G��B8V����|��l�B��#���"s���;U+��+�4��H�[�4���ƅ#?ף%:-pA`�����0�G��(V�cK���y(Mr6Ir8�N���J�(�X��9������*���jJ�x�����?�t��,���A�t��8ŧ�E�R�U<�N=;U�a���[�Ԭ o���M-:K��Ta����<�+O�n�%u�:#ݬ�1�8�<r`������7(C�f�҇z���a��u~�r+0�q��L�����6����)��g�za��x�[tЋT��r�`-�T�"�E[�?67�Ȫ�+B��+ ��_�o���V����':˝�>�a[�dž L��DDJ�Q}p/�Rj�l��ϻ?Js��E&"�!�`�0"���˞^��^f�)`��־Ř��Ī~e�k�}�l���� l��OC:��Śƌ�va���פ��,j*�F6��&b��R�5��l��m�{,�g8T���q��W�ҵ��^A-E��Dw��JJ!k|%΄ K|@{".�c�U����g1.:���k(t1�W��lz�;G9/�jMϕ9���,��/�S�2����O���V�F��M�����W��ك�UĒR��PC{7H%�d�/&`k p�d]�W0�� t�_u���*R��ʱ>�:dž�9]��JE�s[�co��i@���t �ST�{ɲ���?�g8_]��ԏK�@lK7l�a�\���1Q���p�r�J�<�Ъ �G�����v���s��W���>byS0��(+ў+6��u1X!�L�B�77��5&"L �9��i�[��a7��-Ǘ�ag>2���:�QjO��_����|�n��&sMinjq�p�ڷy��I_���C��.��h�k�Yh�*�^�Ǥ�_���(`���5$�?Eg�|Bຼ/=@� B�ÏƬ��e���k;�O�_�I��)I�d��������* D ���Fr�Ā��,f�#�h?���'�teʫIl�cBɽ���4f��]LG&�F���-C/��b\JRO=��m�� �W5F)�.��N��[/E�,J�1��bH�74l�W? �P�A�'�-�,�vSK�Z�oF=Վ%�!����"��|3hٳ�j.t��z���'���FV��s��m�~�d�-�_�R�j��-����%��>��T� |(�T������ߐ��{���}2nW�����{�Mj����𢡄H�8 ��Nǽ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ