Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
004faad4371c1bcff9f592fff6140007.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
004faad4371c1bcff9f592fff6140007.exe
Resource
win10v2004-20231215-en
Target
004faad4371c1bcff9f592fff6140007
Size
1.4MB
MD5
004faad4371c1bcff9f592fff6140007
SHA1
145581ad18eba5b3d4ef36236265c49d89268076
SHA256
23900aed101b24e04a0dee2d1f2609b558347f12f8ad5428b82a0221218086e5
SHA512
db1242c47cfad465bf4e9e58d93bac6cf0eb8dd307c74051c53494389de363adf05344a2c6263505724017b61c118a4dd3d397d293cc37b83f102ccdec4b5f38
SSDEEP
24576:qz6mi73oiBWoQiPWhYjNE982mSY1OEJTGIzf2FwbBIwph8aOjT2zAyoP2DHVC:qmz4AWoBgsEjY1FJ3JBjmaOjT2zAlP2g
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InterlockedIncrement
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetWindowTextW
OleUninitialize
SysStringLen
�kD����Cw߆��gJ�G�K����1��;ᠥ�j�ɒ���c��/��#Ɖ4F����!���)�����X�H�iQ�%7P4�^���v��J�=��t��}z���l��E��G�m@O({�����Z���죓���7���uT�\7�>W��ŝ�#ʩ��Q �f`xb\�Y�|"2(BΝ.ќ[#V�'[���u�hAgڀ��i :�@��)H�<3�%h�X���:R�� ��śW�s���_����oZ���r�Kq�sA�2�ݚ6��ϴ�[B����d7���'�i�������uӸ�T�[�T�h>B�Iu�\������_n[��Y������k���>�����A�G6�s��0B�ok�U��.BH���n��>��2���`5k&�X���V ¤}2f�՜٦�ݚ�aQ70'|>��|�=��N��M���q����Qql�P3p�~�:�h� ��&������I�]�(ݩ5To �����6;J ��Ga-ܸ�E��|.��1�>�oԭn�J�_��c��l;'�%v��G�������w�5�!M~o�����TJ�����Q���v��.?��]�!F�k=:@��.1��4$�mM��b�q�s�V��-F��������A�� ���:��nh�u ڂ�A ��5��$�w;+�9,kj�H�{I�e#F/wm��s�B_��H]/jp����Y�"�܊���Ͳ�!$n��������=�����ӯ�����6�(/@��0A�4�b��O���<u�D��b���fxi�2���������KU�_�1�5�:�(���}��������߁����7e�iT���D8�?���%�5�J��He�+�I����Ryu`�y�厸Y����f�'ϐ*��:�tQ<�h���1㞱SЗa��cU�q �f�nz���Z}����h�M����B�I��|�3���=/d���Ͱ����1QMo���iN�n�G�?��d\ '��U�ۉ!qA�o�[��HGQˍp�)$V�HЉ��㏋��W<ɫ1�I�f�R�e�q}���q�'����֚ `�J������Dt8����l���|7�W.��e?���'Ͱcpm��z}i�� ,����䑆>| V۸�����Fxxy�����4�wm��h�o����&x�����*��N��=��8M/z?51!�bw'��`�e�(��xH����@$%��RLz��������u���ː��j1��~��ŭLI_��5�)fa)xI�����70�o���MD��RS���� ��,�r������]W7�O�ꎥr ���a'��go��{Ҹ��5�#F�� �#��h�f�{��w��P; ~�7ר��h�����q�V�D�#���a��j�B�jv��� (�3?w)���f!jt"fc��<\��*���2�� �싯:�e����Y���;�c��jE�[�ʍm@��g�ϼM 2W���ͪ[d��c�!M'_�����W�UU� N�O��E*��W��\�S�O;y���� � I������� T5���ª�3��Q��i�|m�w�F���v�w"尯��<��]��b�]x�'�0�D����l�K�������W�ON~^��o�Y��N��v�i�a .����J�[h7�ۣ2(I�z&�M][���~��܄M%F��@�Bx:�d��,���2��nM��YR������n�j�t�� ���K$��P��ֻ�p����M���3�?��s�hB;�n����$���,����Z6|�Z6�p]j��5�I?9 /���<�0 ��Đ=I�;N���y�ox���63�o���&b'Z�hژ#�և�~�ø���P@T�-�R_�̊\�?��1$y�U�* �^酾-�6/'?��z��M��� ��{xT7C����B_<��^���kC��6$SH��p���s��eq���� �U�[�=7��ȀL�Ra7J����H����ϯ��z�V�;uZ�DJ��;�:�q���^r�.)^�p�o�R��p+�̈́D�Wq��[Ĥ�T�pqH�צ�ܘT)�����+���=��v�{ b=�ٰ�X�l�QBF3Cb��n"4Xw��!�?��I'���a1�=KO��Mɶ��t���d���%�"���*-FiҬ���n�Bu?z4ʼnʫ����\3�e�?��0F�5r$&�UE��� Q�kǿ�I�S.�ˉ�_��� %�f���M��}�������J���B`��'@��;^�h܍O���u���i�`0����Y:�}��N� �p��������9c����!���Q`��{�e�w�I����#p.�ssw(��*� �>m(�>��_.�oc�/���O��s$�� ��=�"���L�`c�E�^Rʫ��Y�i<a����78}�%��c��E� m�����i��L&u��7�̭NI��έ�Zz 2�G,7�(�a��,��u�~�jLm�������~h��w�=�2�%�w��M\�<�8.)�no̅!���� ii!�p����H��2Q #\�d(�wj�5��s�,O�����ˁ�V�3��F�*͌M�7�OV���Gk�;$��kİ4����TvW�4�&'�6#hmw�����Ց��e�� g��[��>[�� �(��{��Bh���o:d�V����.����6�\��,�W>_r�|������L�DJ;J�s��pVj�Hl����L�hp��C懮2�e0��[K�)r���~6L���xWv~�Y^+���T �K%͕��.~�B�Z����h�����_� �A���*��x���,n�7)�������_}���փ@�����~:,KN�G����+;NꞚ��P.�_��������6D�!����_Z�YO�ϕ;ϭH�0�]��� \¤��B��(X�/�� �II��̉bSَF������!1y%�H��U�|k<߯�+��1�>'�rF���}]':_���9��H�μw��P�"��f@=g�ʹ{��p�&?����'9/��g�� �LJ��x����
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ