Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
093a8e4840d0271170a15b5171dcdd27.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
093a8e4840d0271170a15b5171dcdd27.exe
Resource
win10v2004-20231222-en
Target
093a8e4840d0271170a15b5171dcdd27
Size
1.5MB
MD5
093a8e4840d0271170a15b5171dcdd27
SHA1
e5f95309b23aebf7929f83aadb0e584f1cbe8ec7
SHA256
16662dafab1eac9619dd3db9c53861699342e82df065b160c65c61a9e1cdc5fc
SHA512
94869514996205377d07283c07e0bb5590084bd4413b16600f0f922f40a4cda2c7b5d41cdb179281067bcdb1a155a991100d8590d7c3dcff24a2cea47648e5e2
SSDEEP
24576:AIkIKeEZuxgmKAO6AAyVBRxMtyzakpzLwskvzx59JNVG37DdlC4rFgIsCHWX6aVB:AoKeE8xbchVpMtKaCzvkXjNk37PZgTkg
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetStringTypeA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
KillTimer
OleUninitialize
SysStringLen
�yMx߅ g(�t��\a�� �����>��>(T ��(`�r5�6�*drY��VR��B��1�0�3Wiޚ�Z����8�����o�"�l��"�7��ӺS~�!��;�i�`c�^��oU�� ����(�-��$��@؉&��x�b�r��1!+�� �n3CU��K؞�>`��Vg�.&"u�_��n�% 9Q��X'��->���t�܇��o�u�F���m�)����f������l�����Eg�����"RR6r���0+e4Ju�6� ���)^��|�m�Mz�+�E�%����g�b�LWT�Jr5��넨��xVyc���V��`��*.O���@���q* ]˓I�>mA�{�xX �²��ኴH��(�Ɲ���RX��z���2]�Y~�VYO�>�� �?�*_��^�W��^&�[�����m�'���&�K���V�Sw/��\G�Z���b�ž�FV�3���b��*�K\K.ŞG�<�~� �y5���h2��q��>"f�걛�"Ygo��C3.��^_�g���̊�ʯ�4m^C1�5+2�Ǣo��@nR��ar�,�=jOd��*��x��:���R�v�n~�� �(��ÕӾ��Y�t ��a��K;e*�n��j ��Ԃ�愹9J$i�>��lK.���\[A��Z�3S�5X�.��ew�U����]b�O)H@~H �a�q�9�� o��&�Eٳ�C����y*�ˍ����7t ����O������$��n���Z��z�ߖo~͗�T��sD�{Fn�R��`���)G�k����Ix� �(�뻉b��b�,��j�q;(uҐzM�5�І&4�0�c��e>�}(L�vW�f��i���N������`qO��T�s��x��I�����}+�edZ��%���`Q���W��nى�Z{���."u� �}N]^'��uVh���V�y���7��o���T���P5kP���W��������.>���kˑ9B����|���r�S䴴d��Ù�D��1�(��J���8����mT��Rl�G��ߜȬ��J��i��D���. ���I�jw�^��H�x�YU�(C4����W>u��y�����]�A�I��w�8"q�Maή����U��<]%V��ب�x6!"�#���H�ޝ=��ي:�5�GAok��SE*d�l&��j�\�a��Lf��]ƒ����o���|IO���wE�P�3%����{w��0�H���}�u���_����_b6iW���|]U���Ve����������S ���IS&apm�w%Om��r�������{���n^똊�.���ǝPB���{P�2imb ���9��R"��Z&����§�vO�Z�N�>�\Im0�QX'�0�tV-�_���[D� ���o�}.0�1S&fF�C��lȷ�O��>?�,��!��֧)^�!���7��0!��E�Q�%��,�%7Ot�v��Hg#��W�6o$�����%����K��''|��a6��@��f����]��8߹�;�L�Z��Ȋ�Է�����'��ڢ*�!����!�n����l!023dA����6��R���l(^Q��@��-�B�=퐮3@��Kx�m�ˎ�^?��˪.A��%V��gD��ܸ1�%S^tF�����2�$x�^�<&\W�e�D,=�n�A)|T⧖H+�=ٚ��x��d`?�R�2��˒Wc���_/s�x`Vp��y6�v��Ĺ ��~w��y��J)R���4�������H�K����YB���z��y)�S�>{<e.������ب���@�h/������� �P'{ ���Q��s���⮫z���P�����oU���ce������?d� ��+�!�_sdNL�Ӱ�� ������YؾIk��$X��P�����[z`#6��M[��%~ٌ��Ҍ���kp��:��[�jp���fO���٥�J�/��md�B �� �����"p�`;ͯ�bu�?��� �����aN ިZÃ�]��ZI�@�_�?��QSFW)Tս����7�C� ���q'���[l���I<C�uIBN��Ō�z-�)F̟�!<tȸ�`�',(]1�>X� ��L�6a�9[��̒i��t�i���@�^�P� R��KU�aT���K�#�w.c���p��D�G�*ɖ�ؼ��l���[_��#-��ߛ�r��a����� qi��(au�,y��|~����}V���&���/p~�;�y����t�ͼ.w ��̧X��� %fzq�pcf!�M4����߿���f��p��DBƧ ���짊�ŰN2�GC�?��h0�L ��}J�o�1v���5�M u5����hTӡ��T���r����]�Lq ���0�G?���ꓭ�M�H�IB�*.`�o##�����D�┺��I5�v��n���{:�R$�8�1�s�߿��r�ɒ�[�T�F1��l�B�À��ه��WJ���k�d�x<���1��A�X��F�ۚ_;ۚ�r��t����^��µ:�?D}��D�l�JFb�U��]q�e�W�����I�.�4� �ƌ��\H�\��'n��o~�|A!�q�2s�� ��(�������QiI��C��q��O� g��H�R���{w���m~g�, � �ʉO�I1��O{���"��;���]k{�,:���Xb�f'��@�H�i��4���%a�;��B�|<zkiNp^D�Rt��Q�3�WS;�%t :j�C�pb,���^���M&��U���0_�Ecu��k���N��V��p.�Ȫ�����~�Y+&b3��yǧ�;�̺��M���7��������m��jq�?W�9�T7R;L�����v���G�شm+�K�����t%�\��#�z���G�{m)�m7H1�͛�Q��ͱ�酼3.cKJc{[ ���3��8�ș�ET��e ��,�i#�π�aCW��P��E�y��q����D]R �T#��� �3j���R%x��g����O'ɺ���C�6|<�O4�A)�提�|�X5�) 7H�mv���%�ri�G
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ