Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
1bcfe0a03eb055078bf3940f2c1f2ccc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1bcfe0a03eb055078bf3940f2c1f2ccc.exe
Resource
win10v2004-20231215-en
Target
1bcfe0a03eb055078bf3940f2c1f2ccc
Size
1.5MB
MD5
1bcfe0a03eb055078bf3940f2c1f2ccc
SHA1
c0692a571fb9c5efd902d71c5a7ff245bc668945
SHA256
104b8f1454a3d1ff4296ec6345dd1c9f21295e6d2774ff2c08ee7f03fc433b45
SHA512
825d54fc7244b8fae1f2b9d280fb56db9fd06926594ca58b82e066c49e4302fdd9e64f3324740187d929a15086cd3f0224a2432f008f2c6ec1ef86a68656f6b3
SSDEEP
24576:qwEMZTyOqv5SseGS6mMbp8n7WkJqv0dBtEWkX1en/K0xPpOlt+jd1kNLR0d90pa/:qwEMZWO+FeG3mQpynccd7ERenC0xRWwx
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetDesktopWindow
OleUninitialize
VariantClear
�bg0\�ކ�e['I1���F�đ�K}�X���)x��٫�;$.�z ��@��D\.Y%M}ܤ�hu�R/�uKa��?�z���Ė��Ψ>�)�@1�l��,#HY��A�q-��wP!9ZRkY���i\�J��D"�}�)�p��z)����Ѻ�T���sk\��8lv"����DJ5V�e�����+�,7�ϖ����G�T�;K��ۥ��]䜅�t$°\"�x��!�/&@�:����+��g�w/����S@����S�H]��d�5��3_���Y"��#�$����o�꽀�}2�s�)/�f#w���V��4�]���o{B��l��6w�\��jl��(B=/����EAcIV"I� �_�V�<��z^�-���-Õ M+�:�o:�%^��j{^�S��0u#�������l!չ�������.Tv��������"�ˑ���^ѷ��L�y�nJ���9��Yr6Ԍ����I�����PF��T3�g�r��E׆�l�0�o�~Ţ-����M���9��H��}P�����ғX�!!��kP��QQ����8�B����� �m�^F����57%�%��%�G{�9Н�-}�r�R�����4��c^�0J�Ǖu3C}����4�z�[`�t�k��\��PYp�mTd9!��d3����X6v9�G|<n��s��{7�g���2���Mj&�e1�}�)�5��_ŅX��{{6�[��?�oc�L����)� ҝ8h|��<!>�X��P�����a���/�}�җ�r������ߠ�Y=Nی�>����xz1'F�~�b��O����P:��wbR�Iaq@�X� ����B�e��̱��=`JfQ��Cw��fبgH��%i�b]���7r���WVϖ61�şz�}䈁A�9a����:���y&,Y�h�f|S�B��������p��M���w��2ʾLथ�X�L2e^~��x���p��S}�O��p�3��.��Hs)���):�ԫs\7'e�O���H���^���Du�!G��lw�h7k��ٗ����s٘�v���\���@P��Jn�Ƀ`|z��2�CS,�s>Q������Q�H�n�89H���P��G�1K$�� Ipd�}:6�4��B����˖���`�O+0n���W���H�=|*�~�d��;�!�� <�~*IkX���s�� 7��5�s#���p�4b��ڏ;eW��@↑qm�?�qL1��y+��m��a�0(��~0u6��!�i�:b}CX��@� F"��6A��&8�Z��@ݕ8p���.�E������y]���\��LA rZ���s��&����t@�x[l���Y��� �l�I��D�_���ˀ���4��u%EқӸ�b���r)��[zmj#�9ٗ�%�B&F(� %h�o/6av���K�X���T��]!M*x��*!�+�U]o�3��Z�.�C@�8*5���7&u$�BH�zK�w����N!^������M]��� Sk�P�������(���+���@�%qtEē��30,�����Q5i|{[����M�r>�'6�_3�� ʂ������V���I���P�YJÖGL0�/�9ew4ʅ��1�V'kz�����w��9A�M��v�v�x�I���H���iE��K��Y!GI��z���� iq<�����ψ�L���/�L�04���h����K6��~ZF�5� _�s(��unޠ�X"瓧���� 0�~ă=�v��ho��d�eI��p:��ݖf�>A�%�����i� u�ҌY�mn{q�q9��Ѽ�c�*��98 S���>l����c3�C��5GL�w�H�N���D'yO� z��o� .�k��XrE��5������m��;V��<p��ޅ(��nS�@ 6�W��|�1#A��ຌ^:6�~y��g�t��ū*� �8RzS�y�sĬ�0w2�̎�����;�v|��&%F���$�k2)A���lu�.5����Z��ʳ���h�����Sj�Jh�������&T�c���)�u���"��g��+�:���AG��aK\�{ c9j^%��uZ�X-��e�����������ϲ��K_%�K[��x�N��]S� ?���?| �!��\s2�[��9�$��E�- ȏ���[�Ұ�k� P���'�kQ�h��K�:�%J�ٵʌf��D��w��v���/[�9�`�����XC�U?^�Wn��c���M��tב�E�/b����E�6�� �zȚ*�x"LW��'��� 'G�o��̑���8Q4�L�r5��kv���X�%5�,ķ!�P�#�Ұ0&�S�\��5]��M�'���%�tY���̉��j��c��0.�����k�L�-������>��X�GHV o�Nqi�9 /���j�ӎ�0�\=NZ�����aB�y�(#J'1rc���Nt|'��w2��-'���0��g�7�� ��^�8�q���(@���|<�v�v^ʕG��w?fZ�/�^F\w%&����(��*ǂ�u�!�w7Ui�S������QL c+�K ��4,�� Q�j���:k�h�@q&��0;�����+m���j�&��p-�!�����<�S��D�h�S���(ś�@�����$܄�} 8ۓ�ӨLz<�U������[O_�vȜZz/y{Uu����6��WZ����_^�[s����S<t��s�ƻ�v�H|4�%���f�$6�]�L�Bp�\�D���W�ۊ5a������ȡU!n,��|�H{GBm/�2�GoŪq���4X�\�٬~���������=�b�_�{2)�Xq�PWv_������)���܀VS�s��$�� qn�q$=jO�oz�#�08�N�F<e���r[@���r�?1WE�ٰ���GqJ%7A�W��5Ͳbn�r�>��⇤zw +)h�x9߀�m�]`��붖#�y��{�QD찿&��ӓ W꧷�J���$ � �i^���A����)id�z����;i��,����+����;����Ӆ>D%��lF�5g�M�.<�xx?� ����v>������딎}y� v_|-�� �|
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ