Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
1c04dcc90b5b71a58b05b0f427177df3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1c04dcc90b5b71a58b05b0f427177df3.exe
Resource
win10v2004-20231222-en
Target
1c04dcc90b5b71a58b05b0f427177df3
Size
1.5MB
MD5
1c04dcc90b5b71a58b05b0f427177df3
SHA1
938367d8bdd837982beb84aaa25a94cebb8299cd
SHA256
129f18bb4205cb2c56a323711b3681755c9e79338e4871fd5adbe1e82fa5cb25
SHA512
3a245aaab1c065e65c3e01f1d60ec621f799f609222f3ea3eafc61c3955484256bdaa73d3589c316a3b9ee4afc4990302276068a6267c748115854f712907bcb
SSDEEP
24576:bAtDNYBDPZA1FId35ZR88f5S+iMsqQELxq9wDuVTxwe3gMq4NvZtZ35Q1Bm4ExrX:ktaBDxA10350+pr893RueUAv/ZJ+cD7v
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CharUpperBuffW
CoUninitialize
VariantClear
@�����6��߇�g>�y-��}�F�{����`���|���A��-/Ʊzޝ�(��G+�3�Χ�;!�)".w�Mcͭ괒a-1+��C2�͇ո4�`�^��D{$Ta�9�tL%|q'k�0�5H4��=�5\�F���(��B����|E���5�\� `� �ܱ&`�R0\�V� ��矻�ʑ���!lK_��vp�����/!��ng�W#����wfoʬ������7W:�K����Tl%�Ϲi��4r&�</�[Nyy#g�.���O�'t��Ɔ4�泹�.����"����9q����c-vk�ȷ��L��2��co�7���o"fD&C�m<�Fإu�IW"�Vl�"C�Ԫ�̟|Q�{��`'��U�'f����;�ͤVE�C�^2��ക*a�8"|,j�G��|5��o�l@)����u��z�������߽��{0ada�������$y�ǁ�CpI.�����R��r:X�R���O����1��'E۪;�y�b�Θ�i)3wjT���m�,+if(�vYG����b����-[|���� �`�����q�V�yK�V.F�~��̏�?��dg�P'�upS/` �{�9t�Jv�Y?Ǭг����� �s��cjf�K�&������?�:����&�9BP�c�&z���������^> @yšHJ�7���4 " R-�u�(9fQC��X����@���Sz��T|��F+�)kk�c���a��}�阅��Ͽ���B���%���+��Y��$G�W8��G�oI�N���Z���dA&Jk��~�3 ^���R]���S�6���]hO�$�U�Y���.I,��y������k��H��6dg��$��+�i�B8��%>e�Ҟ]5Nh�\�����$/�F�_%�x�-�_��݆�uK�����/�㠏�m(%�7�囚��]{�uܥ{2�2�ؤ�ݕi�i�3���_tFX�O\��������ը����A^�������y�C��M\�H��|�Ʒ�I?����{:�t������u�:[��`��:�P�$�W����6 TY�Ք�P��6O���DV���Lg#�1�"|̊L�\��M4DžgÓj6<^�;���&� �"E�E6R[��j�K��n{�FȪ����d�߽S�~OD�HĔ����6fI=�5��c�4��T(�~��69��|�/�ӬZ�s[��D��P��^�2إ�K���ά�M9x�N���P�w������x.��ѓ�z�j��.�l�����<��%���~t^>/F�n�{��fH�#�����3�nP���a�;~3��NG��5կ��iW �>��O�J�>��g\P�T�+��jl9l��o�w������Y�2��.5@��� g1[ �WsY�V�pTR1��WO��_ǁgJ�K���zP����ݸ�Sl@��(��2n=�r-.+�Uٗ�ڦ�����ӖXp���3���T�K�6�Hߎ✲�f�x`��"��T�%�Xšꆏ֤.C�T��n�4��ÚtP��(#"�H@T�����A�a�M�;=��T<��V�1b�<��2$��E�.��-젼vrJ��?S̔����}�?��5��<��,���bߖ.U[��]����ɝx�s�:sх�=�v��g܊�� S�������"f���!#[�{��cI�� Gui�h,�����!�y]FTB��B�b��HaD�t��#o�Z�m�כ]� �,�'�G/�}���ق�_�d� p�G�4�M]ӛ�P����|�q|�k���w�t>��[�q�ap�/���^��HR ��˖�'���}H嵍�����!�2�gl�Y'q ��6���z��L�+gu|D�/3��f?�!�����3���#�3��[�q����p��~���ߚı���=��$5絸^�2�\���a��+�6�����Ix5�=�������S�e/�&H\�P�^vE0��2Q��!�~QEξ����� K߆��b�T��;�E�����D�-O�.1+=ë�uXY�6����>�$�dH4�ЄG]�����{7���t�4ma�Q���Q�"ܒ��[]{�Iָk�Ƹ$��?UE{u�:��_�\@�S��KL��S�R�B\؆+���'���W+2ډ���2�w=Z�3b���$٧�<�Z\G�]ࡀ���m���h'������:\ӛ$Cة ϐ������ ��U�Hߪ�O�� =���&��*��6Y�b��<ؽ�(] ��.CwY�|]Bi��-���J�U{59| +S�8݃c&'��V��<-�yqJ�D��'eRLTl͋ddnV�� �O�� ��5(�(�G܅�`�X(�űg@��Î�tHՕ���yU0 &X)�C�K�%�����8�K���7�� �@+Sm7�g���m*>����5²���a����ɛ�o�f��O�&�����9t�l�Oq�.��,/�j�-��˯���zīh�U\HY�-밣É��HMYcm<_L��[��f��>f�eR��`Fs���aռ����^f��H"�Qp�x�-��m�]����ƭ�1��(��j�Y��A4����kf�5.�ck��CӦ�f��3K���ߊ܉@V�=D�38�<5��# xz���˝���+��[��1�TC�4u1���:Ns�����su���U;��t,�<`F�^ñ��@S�֏RJ�P跡��d�>�SH��+��W�0|�eζ��}ٛP�G5��R�nd����eD�+!U|ø;�o�/ 4_�@ŧ��?�w҅L7X��tm�"!���C_�b%�N����.���ٸ(+I�@3������DR��y#�l�Q`_sb.ސt���Y$���+��Йm�I��:P�/�����7���C� �Qb�5�HM5U6e���\[$�'[xl�K�F�=� ���������ź~:駿!L��k5(v�2#�r�b���/ݦ��[_"����26Z�$M� t�gs�Kl b������Y�g/�F6�1Cme�ɪVe�Fn�,�ۃdG!Q
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ