Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
196e76d4a4f8d29323396c46c9b9e3c0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
196e76d4a4f8d29323396c46c9b9e3c0.exe
Resource
win10v2004-20231215-en
Target
196e76d4a4f8d29323396c46c9b9e3c0
Size
1.5MB
MD5
196e76d4a4f8d29323396c46c9b9e3c0
SHA1
e0fbdff87c3711b43d5b08ecbb18f1c3b15d6b34
SHA256
1154979a59d1d90b00d5bb5a7340291dc9f5db9d177f78d72cd783c9ac593e1e
SHA512
df94e2b7e18e6675224effc1f3788659ffcbca684e30f17ac004c5243c1c4f33ab1acc5e7f8978038d76b29fff85e02e81e06a2faf8f6292b42fd6670be847db
SSDEEP
24576:HKmwmRqisx2R60cnn1P4bMvWkYZ2dR09lklTgCYpC4BEZx1V1tmxmc8MCWhOVu:HHwmRqxxSpcF4bsNdowcCd4BEZx13tmR
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetStdHandle
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetWindowLongW
OleUninitialize
VariantClear
&jx^dD�cuV����l>����3M���������0��#�% i�,Ҭ#j��}W�4��l3��`�W &.[/V#rRFzôt������w���f*6�����E�x��l��O9����/�M7r�\��jO�+����?�vX�p� ����8�}�L?#����0�T�Ӳ+��fC:�e�xH�;�!�`h�-?0�'Q��h���ss!J2)�����g�����9=��1�8~Ck���Q����J�:������q�P窯.Z�Q���Q�vn1��;:(�rW����o�ʹ���j����L@�>i�x�L��L�&�և.��}1�Sv��) ���w����¤3I*����ǜ���eᢩ߫���,[��hT�<�f1���y\�ڹ�zd�;��'��R�V��S�;�?���n��d�0�J���>����qv�dt��O�����m0(�A�0s֙�S4���[��`�t|�TTȚp����~�O���js)�)�#��s����3X�z��{i�������q����9��}�4=�� ����&'g���&L��>�*��"[~�z��ZDH�]Wt|��ۀ�Q�,� *�jQ����[����,��u��>�$ԡ�p��� ��E�r��_� 8kJf�&���$5�ģs���*�(:�����N���H���ݝU*�J�b�`N�� lmJ�(8���z���m��r������Ǩf��<rC[� �`g�sH�jd���ӷ��*�a���i���c�P Wؘ�@+��6{�,�}��,�����G�g"��5yUR*�r�$�������'���}�7�f��GxF�v|��xu�Q6�Òk�j�9�s�][,�ᷢd�k��%� �����O��1����,��8�۟�QD������V��߮�s@�7m��&1��V"��HXi��=�@8c8M�/"!*�X��.��-�Z�-�n�7��3�}�Cf6�IP��M��5�a��'��� g�$���_�׃F������+D1*����[��@j�B�����_lO����&���+'P��;��.*�W$��������5�4m��S`����(g����b��[��� �jV�,���)Y�F���#{�$�O�J���(���!�]V*��&|�^����Ի��Vl:����E�)O*Ku4�:?t�B�FR6��)�R�&�u��U'�Bxb'y�〚t����3iW.NE�J�����eu��v���8���_ @Nh���66E��h�B������S������<��5i�\@��~&> �Ż>M���@�$�`γ�8��@�\�5�]�1�$��W@Z�¢A��G:z�T��^�M�m�(8��-`Nl[����/���K�;�^(}���#MEyYӟU�������PAw�eN�Y��H`M1��vj]l ?%A2_�7"%S�ѵ��'��1��%��9no!��=���_a[�3�A�D(R���n\��?�P5&������N�g�،���� Q��m���m���j�p�-���� i|�� ��q�W������DY���7���������n;f�nSw�r:ȉ�d��wX;ӥ��_�h t�$"��y��fG���q��ܟ m�L�F��cƗɤyL�yQh����h�˨<�&]���� U������2�ǧ&�4f�C�����y���73rW��D�p����CB������/):�l�V�k��5����IՇ�9�����to�!�Ǡ���� fJ�E��r�W���_v��\��acA��ԝ��(Y�O�>O��[/~r�\t��܇�.MYe�>���'�q��V�ٴm���fЯ����{��3Yd'���Nl�����C����63�B� ��CiaN>CWѐ�dE�[s�*��Aw1����c9m\���ƶ#aȝ��貑�ú�A�&����'ך�Ղ{��䬨�g��b����膌��*R(o�좵�8��O���C��DO��\���С�\�u��OQ��U@�T@�l~��[� �,&���E��͙א�'�D��#]a��Ci�6!Tt��:�qX�%{ٗ.h�b*P;@���������2��U���,h�L�9|��)�{<����g�e���*gS���FQRj��\�8���Iz�N��9�ڥ��&��gW\nL�s��0�6�;6QKW}��E&�����VXLS��O�o����*=5�D(���\��C�*�@�S��w9V����r���� ��8�����C�%����k� ��a���K�V�vԲ���>d����uul������SQ�c�ա.R�G>@�b}�O(���+����@�u�0��Anڝ��;����c�]W��ᡪ�5���[T�3��&~�˾خu���&�Y��Y�&��M�8)�n���n�dp+�2#g�?�Я_%�:�h�J�Q��C��^�!����K�V��Ze|9�*9���h�{lվ"�J>�;;ɸ�A��;�ҟ�@�Y�s]�{�s6&��ϰA�G���Y�k| ^ �oz��J�A�s:�_�6E�����������H�3>��-��TF�v���Q����V^����y��ʭ&�A�XAe�ܣ�Nwl:�]L����Y������];�~&e��,��N��!$��6%���#��h���I0���ʺ�[��;��o�.zA�}L�g���$��ɶ����pl�*�5|O����28�QZ�p������mP� �"���J��V���;]p+y�E%"2��K4Wu=4������G&yK�yqaȡ��w�w��3Y���b�*&"�Sec�b��O�#G�����K]��e:s��{��'��m�����~�L���;�n=s�̟v,JߔXt E*�Q�g�E���I����ν7a��y]s����IkO���3B~��w�B��@�*��.��Փ��d������g"�9�b�s��51��2���q��IH�QYI7X47��Z;k��~ٚߣҐ��7���|�:�Z0(�Te�]��g��/ W�;�� �;q��9sV[�!gd��Q�]��$l����cZ�<���F�<�I�x�%*�c7y
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ