Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
c091867a861e795cb9e7424339cc30ce.exe
Resource
win7-20231215-en
Target
c091867a861e795cb9e7424339cc30ce
Size
5.2MB
MD5
c091867a861e795cb9e7424339cc30ce
SHA1
55f77c3f259708f6568023d89d160a287fa887cc
SHA256
ce6bea40400991b66607c21e824c773b93d2601dd0efdea01349f1740d3fb710
SHA512
67a22e351110eed29b5e770135669b01a89b9a801670d63de7209466377adfaa408b71a57f3291ead262d8dd883885240f89b29efb9186c2eb4cde95b3e0ad11
SSDEEP
98304:wK8h9oXemPwLPRVs9h3YzGuhg8R+tElnW79GTqG5Vl2DJD4Lp:wrboXVodVouhgOkQQ9GTqzJ09
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetVersionExW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
wsprintfW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
BitBlt
GetTokenInformation
SHGetFolderPathA
CoInitialize
GetUserProfileDirectoryA
CreateTransaction
BCryptDecrypt
CryptStringToBinaryA
StrCmpNW
WinHttpSendRequest
GdiplusStartup
WTSSendMessageW
P�����`���1Uq��6с�(�F�bF�ꭻS4���vɽS�Ƨ����Z0�D_����E�Cl��&���{�`6��NF�0l���SO]~�C�:����8,S��ER�,ם\���2�K�����r���� ANݪ�,�R��L! |���i��#��i��͘��j���֓��f`���m�D�YJZ �B�m̢f0��T���xʯA�y%gpF�J���؉��8��4�+%��:7�?)�v�����Vо���S�(����{�(�&��w��=q�M7F������G���.F����2�4�����*�~ʊw�}���e�0x����:����(�������GA�hW~O�Y�ѕCs %�A PI�Zl��2����tb��-�&1TɈ����� V��6�cP��U��u�D��dO�+[�e�Z�j�ݗ��喰��_�����4��2�J���2/�U$ׄyW?Rk���'�?p�/�i�8I��$��v�����!i䏦h�\���r��n\gw��' �E�G���Nl�*�,��TZI����(mj�ƀ��Ը�T��!�&,5r��C�8{��:�tW�ےޗO:߯\��q�8 K���:�\N��ۆ�,U��0���r���K&�(h��3����0����³�<�e��,���������q�uKX�}n�Ǥ���|g���om�}8A�� ��Fl�O�+&��A�u�߱�ʖ�`�R�R�?�3'�8!�yY�i�b������1�����w<`!$�E`��}��*U����w/��9��3�%%cc��g�^����2��":���SK��c�h��㖊��u)�s�Nj�����d�Q�}*)S���l��2��[Bܓ�m��yV�S�? ���RD�l&�������ց�<xg��𣻛�ι���z����|LX�7��>U��f{�����.�tx"H�8�G3rޗ���W%�ʿ��P �}��c�k�Jr;,w���Õ��Ľh� O��nM�5^z�-��Y;���w���8��>�X]-��F�Ǯ��H�99�}"j:���6��Q�)~y�� <��%�io�`e���f�2E�n�*F�!�'? � sI5���R�T���ԓp�<4;R�ʙc�%�Ԍ=̮��\�����Tڬz���(��e�P�Φ=���a9�%x.��x ���p�K=y<�<��;K�AБ4�~{��9��靎]�K�s�z���?:�>~��Sh,w�z��ޤ�K�'���2���n�L���줾*�nڥ?�8E� �� 6��}�O�6F��f�a2�O��`ݣ�<3�dP���j&A��Ccy�6���Z��|���_Յx�^\s9Pt'���j�0�U7$�i�W�v����Z��}&���U6A@2S���}sU�[���}NJWQg����(�A�J ���Ļ�ag Jzfޘ�����y���>GU�� W�o��.W��{�[j��r��z(�o�."C���,��[P�x�]np��b����*�yh�����8&��?�����Xl�~�������m!z�f����Q2��qǷ?bS�&�����ė3_x����&O=m��� 3 "s�:/S+�֏�s�ڂo�/I��=/�>���!q�����D�H0�شn�Nx�Q�6~>��Uo}��nN5<@P���h,�̮ ֱ�HZ�벨���|�zx��[l���F �ٱ��`���:l�����/������t�f�{�{�⨅�]��[��N�<��>�Ϊf.D�J��aE��f0�-@� ��}9����r�\-�4�:�e=�җ�T��]�2��|�\m\j �<��֤��*���qm�/����'�������x=#��cJ�&6-j=h���ta�8L��)�����yH;J��4A�ȼ�qߏyf".0�>������]װ�E��o�^�k2>�c�HS|x^�i$(��W��5#�ly��ɐ��V�����[t��Xw�Kf�>���9���X;���Mu�P�9pa\�ҶKP*&,���}�2 �b$1���W'�1dLcpRL d��Mֳ^�jWw"�������(�]��/��ĖdS��b�̅!f���wyX|����q&����:��+������trDZ\`��wEU������S��H�岖SҰ��(GhA]�k��z"8��7hr���k\�$e=Ō���&=���#�N�d��KΈK3����H��i�P�)��1Q��\�D��`�`.!DCe���}����J��1'Ŭ�F"�����4�-��>`1�5~�Ϸ�v��R>���ȼ�A�lP��P�w���o���*�DL��\���߭w`3�.֍{N�C�f�jq�{��(�X�h�z�<89���� j$Ay�.����D��5�0�����������^B�h��YB�p�/���O�U'>�â�v�b��J�v����YuR��qi�Y\\a8>�kD�����l66G*r,Z� ��N�6+h�����+�0��|���核�{��m��*ft3k:U�I���O)ѕC��oз�ͦr��U]B� ;�}���X����ř/�����q��H��-�nA��~ܠ�7�� �f��F�V�>ޖ���R0�v�o�!m��k ��Z���YLVRr^�4V���k�ݨ��̫��@:@�����7��J���h1���Ƥ�(g� PKn�e�ͯu�cS�"�h�e�:�p8����]��֙�y�B|�R��� �A��̍bٙ��Ww�Z�=��4d�;���T��/ ��d��e�:�ښ�q��#v��nVO-&���z�H%��M}p��-��dG̬�BS���|V.1���J��R��d|&��A:���a/�*���`V����B��V�u,�&����bAn `��SV���m���kj�v�2�m[`d��H��LPvb��u�L&� Ƥ�=h��(�����j�q��lG(�_^�O��rc| >��Ǥ�� ��7�O?ƚ7�$��L�G�f:���������;�%,���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ