Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
0f3744c66ae7732daecbff97d21df477.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0f3744c66ae7732daecbff97d21df477.exe
Resource
win10v2004-20231222-en
Target
0f3744c66ae7732daecbff97d21df477
Size
1.4MB
MD5
0f3744c66ae7732daecbff97d21df477
SHA1
7241cfde13759e076fda50add25acd9b99e1c6c3
SHA256
05685c0ad9bb3387ac1926e038a39fe08336d755923670a7a76ab87f3b587672
SHA512
f2f1b4b5bf1532a86f485f39e523e40d59fa2b963c019057e492053b086ae9510cd3cb623001ec9bd1ed9bd4bd0c005da23332f8270724f8d6de951bdad310b6
SSDEEP
24576:q0ypYRY8E9bSD2dbogkZ1b/bBHa0JfRwcOKAWTwpzfcsNIwibzg+FVoBBwrJZxYb:q0y2RY8b6p7k/b/bxa0J5wcpyz0ggbJq
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
TlsSetValue
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetClientRect
CoUninitialize
VariantClear
�1����~;f�ח���w9|�m��^"�����*�'Y|��x�K���5{ĬZ���d����EJ@=��ԙgʃ#G��)����G{X��qIOe��S���.#:Rӎ��*��r�PZ__���a�v�)�E�~�� ͆.��>t�V����ZU����)4Y9�'*\�Ԛ��Q6�k�ÿ��'[�p�@83�)�Q��B�]VlA n���W�^Z9��t�i�q�w� ���B�1 [��9g�i�#��M����c�B�*��(U�S�v4����$��S����S�O�=vi[|4VO��_/^�-8dF;Z�K��J��N��`�.4($o|y�fAO�)D����Q>���Y=���B�"L[73�N/�L�ed�$�=*�Z0؉��W�v�_K�����J8���a�2V�%��M�-��5\��{�h=��z��,���Q�&/0�m������Qؗ�� y�&����hS3�<�$sd����v�un��Z0Z��6��m���&b�8�,т���AX��R�2Ç:�^����'������#�ⓑ��v�j�f*]ǯo����]og[}�HG@nA������kzwSf%�\pP�ӝ��M�C}�����cpn����Ďd���S̗����a�ВP�{�)��1 �ٌ�kR�Z�c�5�I�D�C���p��4j�+�������e��D�KP�W�XK�8/���X����.��xQ��xE8����{�'��b_J����53�m�)��������!����Og�X褝�Dk�E��Lu��v��81�vQ��m�v�ܲ���R,��n���,��l�^kk`p��A�wZ�a����z���&���o�M�� ,�yp���e�OS�i:'myDo��{�[��.Qe��y�2+V��\���x�_��g�h��zv�� �42T⛽}Xz�ӟM������j�6��p�2�����]���8fo�3�C�ʤ���f��T0qDɹLb��;�&���;�z,��;t�"^.�F��e���E��kOOxiP𥿥(��r�K]X�c����ay0)``���|�9�O6t���B����_�gC����͚�#�O���o*D)n�iD����'����C\���-,]��71N����U3�ڏwBe��cS#���&� ��X���UhU�L|7�ϖy�IZ�jzU��/&$� �������5�ũ 4�"#z� 2��/#��h�'os�����1��M�ݹ���& ����\��<���7�#0�1�Fs�%�-,�V��4-@E���Ws��%5�I4�r]U��U�"~'e<LC�X�୲��np��*��J�w�����=�L�=���a@IX"m* ������l��zϟ��/R�P���e�I��Ѫ�ܹ��F`�\������T��7F�$C\�e���W���#"za2&�)�] f N��~���BN�G"7����gH*����F��� ;�Z4aÅL&}����z3UH���_���ƀT�~T�M�<������q? ��#��d�l>iGC�nS��Dҧ�Md>Z5{2�=n�\�6��]}QALx5�V���� a��G�X#�4�#fA���r Cjh�`��@�\p����j���kΡT�91�S�9~poQT-Q{ܢtUҭPƞ�E��ٷ����dm{����m`��29S����$���B�J?���E[�K����WV�\��Oє���{7@�d^�|2�u�d�m�i��B�{ �z6�*���]�YPZ��IS�6�-�8�R9�0��K�97��� �9�0�lU��ᷞ70��P�b��������B���P��ێT^��J�$`'�X�鱈{�'c�+/��?�����B�nG�`%��j���qa�������mj�k��f�oV ��������C���8�&ĪLb��_=|'z?�x����ΈN���3X�B��T0���s��*��!�4��&��j���)uG��kIH6�h�ʄ��`T�hE���f�r}�DKY8�~���s��䠫�t֛�%��-6/�o�+������eIS�!��E���y��dl%vo��&o�>�*�|fK��b�1b��E���x��*����@��Y�Z�O��j(����l�:���1g��<��$wc���9�e]����l�D�<���{1C�IG_�#�q��;LR��Ǽ,ܮ�@�܉��4���$�2*Z���&&)�B�*�\�/�QȜ[�D�Fr\��4���P]��u��v�X}��piD@�~�%f�2z�L��*�c�� UMr\�g; p�+�rKka�L��>���|V������I��V&��!��&�8���+�_Z�����,O�yP7������5jȝ�s1�Z�E# ��5s P�B��[R�:���{�Ry5!݂�<��!���_�fo�κTW� w�u)��iX��d��~[l�;K���c���PL)oUE�o3*�?�r��у6Ƚ�ǐ��������"����җ��T�@�n�`7h�D8�p���d�x�㼚j��X���T��M #��22�% �7�V+� �$@���8���-�1T�8:�T�Ip���o��b��"m�����S��ߌ�������Ӻ�V�i���j!7��9�2�S(@ �������(S�ݣ�]���I3{��}�K�p�+ l�\4^.�z�ʊM��5��ps�����a�=�;gaß�%j�Ƞ�^�&�& �FL��E͓� V����m��I���e�D��4��Ooo�#�ՉLm�c��.���-�_l����w�Y�����ik&����}�K����A4I),� Yk����cR��5;�hK\Z8Ǘ����}����\�L�J OX����m����*���qTAh��<m�,����g��o��r�ڠ'��z�ԃ�j��ܰ�8�4v�9����K�f�qc�~�[���aq麈�wӛ���x�����6aq&�L ���K�lp'%Z��#5�{�Z���+[���#��{ʢ�~��)�<�o�mm���[�������t-�^5,-���mK��R�n�L���D<�`#��������������AW?
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ