Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
d5f0cc5e5bd05fdeee3bb0e188178c9d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d5f0cc5e5bd05fdeee3bb0e188178c9d.exe
Resource
win10v2004-20231215-en
Target
d5f0cc5e5bd05fdeee3bb0e188178c9d
Size
4.8MB
MD5
d5f0cc5e5bd05fdeee3bb0e188178c9d
SHA1
a7615f2c5feb20fc084e93f71f33b7767d0fdebf
SHA256
349ede77315b863340849c38c4714c9fedd63b96dcfb6e3cee31406778b7385c
SHA512
efdead35ccdc45c7bd0abc942e6efb72662e82cb273aa97055bb5d2cff47472df50df3bf802e0360de387d57e587b48a0a9e4c08a050a78cec8705ff2ee0f40a
SSDEEP
98304:iJSGOAt5O37oSjBsWqxkSa1KymTl64JlOHW4jkpcO3fOCn/:pGOnUSjBsRC6hTl64JlOlgiWh
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
���N�~2߿jI�7Q�d�q��� ���<�7�N�QT��H�x��}qo�������0!թ��8�b�>�I��;�h��p��f���ǔ�������R�N���!K��c��H�wT͍q��Aj u��R�3�L�_4�S�Q ڥ; ��jZ �۟C�i�nO#L�žq�ҡ�5dn�\Ȥ˜�N���0k��"ݡ�]��Q������p��'��&�ʌ�� �2q�9֙DZ=�=��ݴzM�W���k����v`����۰p�F$iw��]Nf�G��00�yV�q�����Ef���[�]�C''�K��� �h��J��_��؝WBig�ǫ-j^s��!I�Lj0�>�)2`:��n��,���_ ui�P�}ժj=�y��������t��>jb)%�nc��[��M+�;q?n�ӱ�3�0������W(۠����K|.��(�䶯��W�x}�����dɤv��7}(־��e!�����g�GN&����{K^Q��#��/\�����6�/8e��~�&�%Cy�>}/��m�v�q��b����.��%����)m�4���"�0��`����N`�e���ڨP|�J�핌(���$�c*Ֆo�k��2�p9Ҡ��3#;�-� �ЬS���zK+ђQt,<������ct� ������*�{�B�ֶh���痑n^��7�`A3����8�����>4/��0����\�t ����d�a�mQP��۳B�>N�rR���a5����G�oV?��c�DW�&�]��.x��g��]�\�۽�w��9�2��N��su5�?�� a�� �a��������c��;2���h�w���U���6��8�����P���t��5���4�ݷ]1|C�"����q�:������E[�Mu>��(v��F�b9�q�k�΄g\i���]��i��(�Zr�y.o�|^��E�O�>Lek��"IC:�L"����4�FuF ���u�12��4�������B#���}pXkڤz����$q �� -�o������sZ�|�N��%������V$�$ڷ�"�P��C+�|w�$ܪa�Y�BfZB�#G���*�!�{��Ν���N'���x�P�%~��b!Z4,$�W��x�����h1�� ;�0��i��$�:ݎs���� ��"A�a �������.(�t5$V_H��4�~S:�C�5���K pb�S� M�H�*K�q(���oa �~��3(�d��R5�Wa'h7�h Fݑ��4�=�g�^�%�`1��!�SYXs��}ł���~6�ς��u��6f��w�%��<���n>�� ��v���85�qi�A��?��M�� ,��(�E�Ki���ДI��0��6p����rigf���]r�B�c.N1�Nt����4��<�S�f�y�sCSD�N��d���e��ܸ���D����.��������K�y�����5!���@t�Z�$�u6n!'��v#~��}��f��L`(��P��CU� YF��E��Ќ�5K�o�;:#K�΅Z@Ki�V�>ȿ��B�Kw5�Zz!��°���� ���I,eQI`O'��%�Ӥ� <ք]����.� �����n)�S�-j�����_�n��b`;a�aN�^�� !yM������X��F����N�>��������ɡ��|��ㅩ>�� $�ge��u��?�@�Ck�vP�/���jR�X7�>nB�A,q��hzJ����t/�_�ʰ�� �#[jr_fN�x�F�b�����X���[���w�E 6�� e{��~�N���!� ������=�(,Y�X#`�z�a�XW�G���mn�>$l]=���;> h���K6�L^������x���0m�JGD��n�yK�V��C6��{(�6V�cW*��FA��6/��J�M^>Tx���J�D������E5P���S������/���/aNH9'�4r�q����]y�|�]��=`$+�_��c�{>��Ф���*���a�gzz��[�K�}-�V�]�u�;.�.�s��˧�9��o���]�����F��-�:a��k�@dj���W��/8�Ry�/ �F��U�Z Wg&R7%����J���˙�(�.�B�34��NqT[B��B�>���*�>3@��J��wD����H���nͼ���6����GaD���P��%��|�}�aΟ��AY����|?[{# ��1���m����zg��^aЄ��=��r��;��f:�Wx��P�)§6!p!�����ff$9#��@��/�-N�+�Wu3E\АcƁv���䯣=�hkieB�CUV(~ �����嘢��r�&�J��O�-�������t���i~�U���w �6Y��p�l�.��eXE���uX�wU}6�ʀ�'����A��m��@�1�B�-���"��_45B�c����ҽ 8+�����q�~7ݹ'������4��K����Y/�������Y ZM_�\ �����z@��'�l�<����[��Hl���� �#�`Jj�-ǔ���\P;����V�'�F�]�@ъ�X����=k������\S��.VYk4/���I��w�OC ҏ۹.[V�\�U�oO~�f)��"�j`�J�1hY�������-�bn��X�m��ai�{|�yƨ*Nt0&g�@-8��^�����QO&@�����p����n��ɌF������ ���R�������L6h,q�gȯZo�+US,`r��2�P����>�� 2���쮑�L=n��ݑg�<��U��{���?O%�t�q����!-�������Kil�V���Z�Ԭ2�TX�tɋC��h�:1�L���З�̨D�0V�$� �K�t�!we�Z��Ԓ��#�������PT��hAIs( ��ګ_� ���2�3�G����e�oYo��,N����=�K�i�) �~���rj~?}��w�>�W�qar���@]E����7�����O�;�(6�9m�wMf�����Y�\>J!�H�&=�}<�zɫ��@䕪���t�����:t]�a�Ǟ����~VUj��}��V",�)d=)+S����2z�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ