Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
1c9f0fc93c91f41814f7b2e1f018f51e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c9f0fc93c91f41814f7b2e1f018f51e.exe
Resource
win10v2004-20231215-en
Target
1c9f0fc93c91f41814f7b2e1f018f51e
Size
1.4MB
MD5
1c9f0fc93c91f41814f7b2e1f018f51e
SHA1
fea5e4d7cd3e97bc289dc4ae0c8ea73f35cc6f9e
SHA256
11aa1d062d742e21b141a150902e04bfc17a77bee81ff253428a478fec220541
SHA512
e685fd51ca60101f572bf9fc621c05cf1b84481ba50c8def083e39c9baf07f8457b33b4513248fde0997a210cd2ffa4deb7fd7270454e7e743c7a4e631388dd5
SSDEEP
24576:HUaJ6mRttufVE/v2N0DBlIPL0ienovdlHQ50DjfpvA5QBeJ55VdiNNxEap+VPlVz:0jyudE/vRlID0y9QejfxIP3wNgVNN
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WideCharToMultiByte
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
RegisterClassExW
CoInitialize
SysStringLen
����n.�Kl �(�6��r��v�Y8k���ٔ�-��`[��+��<�\|(���v�0��7�6�v����3���?)��'��ʐ��"o�=����1��+i��OC��4����@��`���:��\5o���bG*߫�̨����+_°E�A�eh��������8ʣ��:k�/�ʄ���F�䒉����I�P�����`��A�lm�|�+"���?�t���Ϣ�~N�1��e���k�eL�:fzѨg(H*:8η��,����j��(�{��[�߃����D�|y]�?ڪ6N�ϲ�ኝ�U%`]�zk��p����x��n�d�hr��-�Zz��}��Q�0�S ]��Rrq�%���n� �"&���p���>G�S�X��=HxQ�Yh�����KR�y�9%X�S��Rм9;��+i����e��U����^pm�o�3}_xmB����Hn�A�)�Ҧ� ��3b6PGc��ϵ�i�>떌^�U؇����5\%(����ﳔj�/���>&�46����&�����gep�4@L}T.ح��s֜N�����j�T�\#���n�Kq{�$'J��o7B��\a�Ύ^�=�)�òz��l���=ϒ�K�z0h�nP:��v|,�K��!8{S۵^5˺0M_6C5�8Ui ۽e�*%H��U�_cj�5Mjx@��g �?�<C���6��SP �~�b[{<"?w�L�a�t[Y��7�r��_���/�#ӻZɐk�iM��F���5�Ce��j�Aէ��I2iX��>v{�H!/��@�8��E�4zO�噃8���ː�l�����gnkE���unC��*�`ؔyE��*J�$ę8��{ƍ����f���H<���G��螿���Ǖ���*T]G-�A�&j"]x垈 �� T��������^��+ ��rD"��^���j�x����[�ؤ������r�M���~�E�<�)���^h�T;He�����Fl����O�Uǻ�pH����G�MUԞ^�y�Ǽ&~�t�Pav�b��N���A���(M̦�<"�}��E��D���}�{Zꝳ�V�/�at�wq��DN?x�iˢz/���7=b�i2��X�t�N,EIo���}�*���dC�� �Yy�,^Ta`|�{�� t���nbg7�5Z�p��{�P�G:���'e�;)�I����Q���#���S-g�r��b��� �UeÄL�����j��v���_��Uw������)L�xv�V L��o�L��\C�����T��5�P�£������)z����B��;~����f=r�Smq����~�k��=GS���-�79 j�^U���s;�5�7�k�LIUO_�6� �HUxZB �;�z8����jc �\�����w+[ư��7�T-$�vKW��:�1@w��*J>*Miz�N����G���G0���`�{��=J���C�A +��`��X��,P^x��m�#sE�S�(;�P�|�32��@w�jp����?bz9�^﵄Ϡ��1,h�Ѣ4�mN�q�b)����n��y�l��-);�ޭ����>�R���6��@�Xβ�oTd�����NX�'8�#ӏ�Wp�+�|�s��o@jZ�D�F4�5���nNzmg���9�A+h�c2���4=ŵ�����c��+�ۯIM%��!�*�(R�X"Zw-K.�(S�I�%l���m����ׇm�S���,tc�匃qn>�F���Z���Q���¿f8�_�+�Hԅ#̄���� �7�M�����}e����F[F��\��axF�/�곾����M#$dQ�F��&{�x��� 3)��{L�������^?N"2�S䏋� ʙƖ����o,��!�K�}F�c�����-J(�S��|�) 6�G��1G��5<W��Y*�ykA+�KQ���K3[u�W��pl�W"��שX�ycߣ*���I����GntSy먻�3xud���R��^8$�� ������ ���r|5����D>Z���yi���;�98`��I�q�}���]�1�=�l�=�G���ڲ���d*��]6P˓��`������K��BӘ@����1����]�,rY�p��J.!���uS8I����j��pn&��6�%M�ZE�y,��_��˙�I`�0H�Yo�d�K�s�ة��$m\�����'���i<�t�����Y���(�U�j��)y���Uf.�V�s �9��6���$&�Ұ;�]���)�t�J��\�L��u����ԩ2��(����B�j�F.���j�9!��(�d�A���Z<Ge6^QH.E��$�v(��^T��K�Ǜ��T�PS�?�C�����C�����2F��\��a���MA�Ш�eϰ!�_�e��ζE���CT�ĭ�c�d������H!3�F�[�~���� R3F��9)K:oJ�9��\5YI����q�z.P���,`�7�Z �)��z�?�w��U-����t�g#lI�㔠Af�\h�G+x�������3��5�U<�`Q W��w}���S�az�Bk`�:i~��eTu?n����F"�ES�?]'YKЋ2:�H�� ��g���F�F~��μ�xZ�N�3��ϙC�F���b��k� �T���$�ؕ���G�$������- =M���==Y�[���;��j�>]k�j��ǮM`�����R��]|+����7�y�,��ɠ��%t[u�u��:I�Lr{4��%��$klOKO3��<Z��bj%�ׂx���1b����>N�U��Ah���-��� ,f��颍��ľ��a=����[�K�����c��~Ԇ��/�I�F���J3���iP���)5\�ߎ��6�v0����39D�g/}�4e���9��H-�Dn!]q���^��Ru7��㦫�q$)(�"Q��ׂ�!��:-�f�mڿ���\u�f�͘�|���c�����T����JkZa�n�?��탶�z����*�4���@:RZA4 P+9i>%���U��vJ��2�ϙ?�0N��Ɇ��^�r�C4^r�;.
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ