Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
11ecb1711e681db0feced67d79cf5fe1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11ecb1711e681db0feced67d79cf5fe1.exe
Resource
win10v2004-20231215-en
Target
11ecb1711e681db0feced67d79cf5fe1
Size
1.5MB
MD5
11ecb1711e681db0feced67d79cf5fe1
SHA1
3eeccf3f77206563e3be8666c4b12d28ca360726
SHA256
d5426a26e0ce26b73d2fa8673e1e0b28b8c6850dc195710ee993d68b226c1553
SHA512
bf03b25d3234b44fae2b2391d4c9d5b009b3bb1cc2a7c237896ecea53ce224b35b2cffc89f4434218955a662200a7044149b3ce0f783bd643862c5ff080eea23
SSDEEP
24576:w691/ZPsgiM8e5IoCa+ZzbIZnyL8ENKer1OPL0fBIuMlgUrCKzidnbvFR0P/Vg:f1RPsXBoCa+ZzsZny5weZZIFVCKGdnb7
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetStringTypeW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CharUpperBuffW
OleUninitialize
VariantClear
.�<w�A��p������)O�fL��C����"jʢ��6os�Hh�#*�UL|qbČ�_��{���}Tq ?�x�m�n��&�[�-�lhR2�X��������G��W��CY~��@tv�>���O�ڞ+��]m-���]�G��s �5~e��]U����%�c�"�E�&����Q�ӏ�b�E/�8���k'~+�``�ˍ[V����?OiDV�W����0�c�.�����~$QsD���uz���E���d�I'�85�U4�&CH�Z<Je�$���w��{!+Q{�GF���T���ݺE�@�D0�t�PL3:<%d��-FoN[$�E�p�k|V2TNj��N��&���=�^NsP���v���-�|��5��g�Vz�e3yDd|Ѵ���s����T�n�f#;�o,��K��wO� ��Lc���z2�qnC���F�������e�+�I!eH�:�x���P|�x��K�xw����~�#�<O�ײ��MF%��a:�� ֪E ���c��� V ���cB��|�-�.�_�e�j�6����_�$/(h2�����2f'�}`�+�r@�lL�#������! ����C�D�cΉRI�7i8����>&�o��G��.�v�E:����;�eo�9���#�Р�E��Y�n���Ȗ���%H����g��!y3lp�s�>�@F�I �d>�S_0`�C�E�y#�����<Fp�����f!!�˴Ӏ�5yx��yy㓠��\�`!��h;:��@E�'Z}��W+��z)o�e��(A�&x��Ez��<�{�PPEL�&������S���W���F�=�~+'8�{���c <�v���A����G&&�IƸ0�)�#�s�Hb�q��<�/O�����Je�ZFp�H%� �9��C�y]�FVC2�/6�{�8��"S�!9*�5=��{p@����\;v���BN���o���j���ldm5�Z��qR�ÚH6�2�4S�0�& �|�[�4-� mM�:\!O�\$aJ∨���=�[���BdV��#�o����?��L�<��%0�yt�0���RU9��b��/6T�B��2{Ů@������ZI����k�scl6�TLIS�<��� N��{J����h@���Cb:D�QJְ���D���VƪL�w����u(:�㧳����],�<'������F�r����� n�-�!�D��������4�5����t; �!�ga�����*��b� ڇ�#�0������0ztw�]M ����ñ�*�:��p)�uS���QX@H�[D�W�h�� ܅}�O���J��Ȟ�:���Y}�� h8R�ڇ��$ �7�hS����9����.���,��f��\��C{U�QH=eI5i�>̱Yؘ+%|��F��oU�9-�bH��?����:��#�)&F�Ud4�>�&A�!�j��U�De�����LϛS�m�:�WI�r��Ӌ)�Be���8�3�'C��������_v݃8H4���e`�x�}z��Zc�g�O5')���M�b���9�zL��#�x����ԷX�f����U�sF@�(�� �ԯ'�ޜ*pr�����9n~�mX����^=��3��K�ŷH��J���� �*^��K1��¢��O� m�=����"��oJ��QCP;d�����nnk���P�P�2$����\��]mHol�U�������g�w�R~�m3:rby��ᘢ� �[�Jh���MW�I[JӖ��coq��UY�6!g�QgZ���7�1%����kp��� �����l��P��w� �i"|�c5zȼ��䍧B(U5�����;�ë��x�m�ag6������8����g�,�^q8��5Ta���쏦(���-?Lh.$���J���8q�Ldž��HW��d'�<x��+P���ƪ>�_���v#�&�*�� _��*J�/�<�A��k�_3N��g�Ƽ����t�L�3��6/Sg)XS�뷅C�s��%�[r���x"͂������F{R6�i,��������MB)��|��Y��Ԟ9�\����q�=�� vIj{�iq�$ %��|٣9z��Z���`ol� � �1ʤ+IN�OL1͓b��l�r�Qh�G(�mT6d���@�|g&��>�U�G�����ݼНKk�@��x�Et�'��A*Tɢ�f�&���m�{����^���M�F��\ �Y�n���5 d�c@�Y�F�L��`v���@� ڎb�"3kNܖ�ժ�H\��.N�:���c���v|����x�KV�a#��w>�}�F=��X��VA���mI_|�;�$���I���kܮ�\L\�/����So�j;4lײ�/5��!���O'H���75Α�ګ3�f+�% >`Ne���&���{��m>�Rwk�Mp��16�����sR!��I������O��܂xg��6��(�Hj��qc�%?ɚ m[�>VCx����n ���5t�Z��^�\0��� �rD�Tϥ��mj�`1�c}-$�g��3��*F6�I؍�(r���@1�S�}!P����02�Ď�O�1��Oa^:��U�ȵ��~��j�3��"�<#��n��X�A�iG/g�!�D]u\�q�*��4�Xq�إ1�9L� sB�ܸ��ыu�.~���T�k�,���t�.�4ZC��`۳K�@�2*�v(�Y�J._��Ӧ�>�gS�;E��q��! Og�Η��z�E�,7b��/�ͦd'0Ќc��^�d�΅����$�� ��?�!��/Jmr���QBD��ŵ[�]�__�e=%��� ��{&t�N��ki�ѥa�K�43gN�������KEF�_SS���jk k�����^H�8�谻OeY^���^p��%�� ���*K�L\�!sW��:+���H�2���t���}�GHZ_#��m�D��h��66�+x��0�m֨!���I�`x� �� b�ƥ<�퀈$�� :�@$���+��|r��LE������C�d�����M\����U!��;{�j�Gi ܗ��h:����E���R�eR�_�s���f���"���`q��w��Hs��#����M*�Eo�����+
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ