Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
045cc866a19f6cce235077924cac706b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
045cc866a19f6cce235077924cac706b.exe
Resource
win10v2004-20231215-en
Target
045cc866a19f6cce235077924cac706b
Size
1.5MB
MD5
045cc866a19f6cce235077924cac706b
SHA1
8cc1f742a47f47a62e7651efb3cd660ccbba3dc9
SHA256
21a336a88903fd52d83c9983b662a665ec6235c3c806aff258da9f787d8f358d
SHA512
e88fb394db95fc27961097f1a6e3835e1b7b0b86af4e3df9bd2196c649d37ebf7ce73ce5b1c1420e023d4d5557b77a3d4f303eb2cda74f6e1378a10bc188323f
SSDEEP
24576:77xBdjut9UyP6JXHFbeFziPWG0hF7pQGViOJhS5adVgHVt1A9rZcRpKTMcn8q15d:77diWJVbwziOFj7pQWimqad21t1AVZcg
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EnumResourceTypesA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PostQuitMessage
CLSIDFromProgID
SysStringLen
9*b�����i�E7�V�$L1���8Rma��4�{��0P̧ԏAr��m?_�K�ܨ���R�Or�[��?����r�Gʉ�2}��|��9G�������HD�蜒��?q�N�3�/I4�`���"kk�H!qf��ɚ퉏��߆����+u������Z�I�*>��y Y>�����H���;��~v�����h�:B�2�U� G�#�_���X���O1��|�̙Z�W��:�C@u�-��O��U$�ڐ ����1%���!����e��ޞ2xmR�yܙΧw:�Ipr�!a�9�dUZZd��?���G��)is�j���F�ܽ�"UN�v��4��w<��i��ZS92�=R1e)����ZѾ��-��(���`�B�Z��`������7�Nj=� ��`�����4��NXя���ZF�fmc^4��e�(֖���>a�d�Ε�ƍU3��t�>�QJ-H��n �����+����rEG�I9aW�������P�s�K�zP���S=�']���a�B�uŮ��Lî ]�[p����v̸r��MK]��K�M��X$�@�Q����g��dY��Ϲ<�$��'b���=� ��L�[ݸx�@�.�Uf�����F��.�m�Z��k@uZ�[� Y�D]����-��T�����s�uߕ0m�W�������)t�SJ��H�g��D�ٕ�;ΟC%��ih��?���KSUFT�u x!HrRc����F�~�����=�`�zV�Zez�N��t��M��Gn>f�4�ּ[F��1u�u�@cG�* �U��B�PӁ ����Ҳ���Ӣ��\�!ME�}Q^��C#[?60��@]?Ys~��� �����e���~=�7���V��p(Z�K�j��~gR��# ֜.���L9@({1@AX��?D.kM������6�q*g�=[�a���E]n#0��ߗ]��`v����s��I�M,�v|j�#��W�b�@��'w���x�V���%��E�g��J5;���`���!��.��Nʴܑф�a/͠����ƕ�.$�p� ���H�|�4��|��pН������;�l�.�����'_���q�����]�eOw ��l�'�wjw����!4�K�ttt���U0ٓ2O5h+���b�Dx��tvEf��Vs7в^op��/]���X<e�"�,VwG���M��@��WGn�@i��3���C��l違h��Bh� ��Uച��C0H��1m�����˚�C,k!V5�rB�k|qE~i!z���і�)���0��� .�����A�fIS���v�N0��yPn��ϵ��A��B1��ݤ��i�;��[��P�q~���BH]!�|@�W?��������*�����*'&C�aim/vB_��X;����Pj���/���B>�e�����2��K��V��Dz�}���-mHy$��X�Q�}��s/�q͆X�V��K��U�>Ye"�o� �%��p���Œ�HcR<�����1�=Y��"�ddUZ�ѕ>�~�~��8�S����3�=`�.mǎ4�d�?�����ž����Ի�i��,�кq���E7;����B�~��B8͢>���|�[�~�@̤J~�RF#�#;9n ԣ�m��\Q���LI!���n�K�ƔP?B�V�9�յ�>�b &%�iߤE ō9�4p��(����� ���l �(t�¬��8�<��Vж�(]!�N�dU��צ���1�F��s5�\G����4.iB]ZBu�c�β=`r�8�rn��!���I�x��H�J��Hjsp�2��ޙ�����s�:��X◭2�c��d6<~ ��bxOC;B��Fq��.`�4����ѭa���sK�6w���<q�ۨ�<���1�Yw���'�k���w���Ǟc�d������5ܷ�+H�M�#o���]�@�S�WOs���`8Mn�yhs�>@]~K�,(��h��k�����3�����R]��V߫�`B�`K~�w�#������Ċ����tl?���t(.@[QG�910� F�lu����=ʫg�@�֜nW�B�\`��RK�ec��e�o���Q4��,Ȕ,��eG��Ѿ��E�T�gGL��=pH>+�@oP��C��}<�|#+����Јֻm٢;�O^�}�*�l�f�5��\��D���z��}����v> \r+������G�Bx:�,��L���b6.��ZC���"SvH����v]������$���Хm.�8Wѓ�~��)�y��Y��-��}�܍�$��l�MLbk�*��'��K��p(D;bO�U)���g�7���|��<�t���~)Vr�n�����*\���/�*��.�M'��ۘ�z �?�<���l���~��<=&v��|sw��Z����m� ���b�!�[^@k#�tE���#]�7S���YvY����iW�k��](�)\��s��%m%$ҝ�<�{���!@?�Ipl���~"��I���X�+��W"���!_9To��(���6��PQAҏ��0�6��{G�X���M4�A�RSӰe�W�������`H��7���q���P��*�|:����'Hlg�}Ƃ�K������ќ9t��������)��z���/M��{* ����q���8F�xA_�<�V�Io����vO8�[�[�v�Wt��]�Jw��a�~�I*�������[l��O�{��G�9M�6CݕY^��c�ߋ���kQ�0\9I$��T�/a&*E��`�?��RR۱�n�����s�����5a;�\�2���Y"F�-=�O��}��]������/�x��=[���z�*m �6�[��r?��.��Ug�륩{{ I�QX2R\]�_���B��t�`��Y��ث�M{���+�;2(��y����c��w���{�����OW��h�H�����,�n�!.�¥��w�E�$O�|S=�+o�8>ê�[[����>��z㐙\�C�i ���J�Ez��M��$�7mT�j})\�%�E��_:�A��.GU�$�����$O��9G@`CAk}���\���_`{�KI/Q[<N����)�k���^X�!���h�S$���-6h� I�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ