Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
1cf59813382be0f2330123ac90523c8d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1cf59813382be0f2330123ac90523c8d.exe
Resource
win10v2004-20231215-en
Target
1cf59813382be0f2330123ac90523c8d
Size
1.5MB
MD5
1cf59813382be0f2330123ac90523c8d
SHA1
c8ed81b064b26f7788597093d164086694b93ec2
SHA256
157f67fc888cfae145ff360c1aba7abd32bf69b38cb958d2d0488266b3390298
SHA512
74a3c5e900aef7654dc4c75d5aa23a7a0627ef20e7aedc3eaa870b21d44d619824d3697a5e063ba777e8c21d7c7c73a02129d0e6bc2e16fc846e9cb512e2586c
SSDEEP
24576:/++Y56B5r5grCfBfY1++qx7DyzmZqb/5FPIczpoqZ1Kcw8T/06dZ/IPViFdNWwFf:/kCIryffxXimE5FhtZEcw8Y6d6uGwFhR
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetStdHandle
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
DispatchMessageW
CoInitialize
SysStringLen
�WT�mΟG-�35��<��:�A�+�`@6����A�'d�J4\��T���Y��x7ߵ�L���G_�9�������Ee�� B:" Ƀ��sɫ�FNX.��>��`��k� b�&-�S �Fw�� "�y���ܐ��#�grI�4}5}ԥ�����J����.O��i*� �8���E�f!nY����)V��}���|&��p1�ѦR�銩�sǢ�4Vi��S8�_x�"��K¼��Lg����R��~���--C!�)&��E���/��C_Sך��@c�,A!L|U ��:Pr@�Z�y�� <�u�����r6���KKΜ���s&"�Mo��m�������p�ŋ�e���I-Zxn@�ۻ�O%X����w��6��}O��2+6�@�������� �9V���]I�s���oE ���Jl��*��X�yz�/Tc����ֳ�J"�&���[3v��ܻ�>���6�����Bn�1?'b}�aTՊ��[��>����q���I�������J��~�.eA>p�E��F�ظß|�v���0�ɩ|E��:� �6�w|�!���q_�錆m����o�����.u�,*��g���*].rf�e6\�f��{tFU�S�2��``���R4NJb2���Q��bw�:�q�yu�Zk�4Dj<���l�t�\z��_�(�M��s���ʮ��/�v��>��-�FK ��U���+ɜ7:$�9���ymYJ,��C����� � R?�.3��#��ݜH㠵S0c����GMk3�Q������>�_:��Ϗ+{��o7oF�o7R�1 ڻȬ��2Y�0UQH���j�GR.��*�(㏝"{C�C��IZ Wo{�;�.�x��4�2@ZcG��ganx��jj&��8���!�D}칌�XF��<��-Γdn����J@0�����d���{OU�N ���\����� > K^���)M7=d�)� #B��E� ���}8�8$��H�|���`�uAͩp3���j�(+v烈�&�}�3 �,Nk�`�K����BɣC�߉�������L���^C�R�$�+� ��V .�eˬ��n��jfQ��5�� ftl��`�����S&_��a �<[����j�81���u���$�p����8���ٴ�F��d$�A,�O��1J�f��$q�G����*��"�6�I��<�i1G7����[����v�J'ǖ|4�i�|9�o�a��]5�H�C�k~�y���6�4�����A�?�ϊc�@/>��bz�\P[���K�N�v�|�� ��uSG� +_�=�m�a�/�f���l��������B���3%�zl�OVe���|m������#7�y·N9��X�V5��w�@B���ӏ�&��Hm3҅O��13�ko���hc�����/�7Ԏ�����c�=������ޛ���=������p���4m<�/V ���H٤K�Ҥ����l�_��r��6{3<����o�pⶼ>�Euڛ~ !���1ב�*�l�o�x�Uя?�nH)��F���v4�$g��Rq,�L��%'��J����G�x����l=q�Zs��8`����R��!�����!ԉ Q��������h�˻�<O.5�a���]�Z��ĸ�=���g�<mܜ��n�ʬd����}aɋ��G=P�(T�&Ri���icR7���ٻM� �!$wx�)��1�u���G�q�Sm N��픱�%�(J�c<�����F* ���H>KŘ�{F� �:$l�؛���O����F`uA�~c����c "א c�؏�S��\BN7��e�>���L�����L+J�6M%��T! � ��4g^�@�O�N���QT\ ��n��Yd����^+��f�����~�����ť=��h[�uxY&/�ɲ#o.(ȂO{V�2�, ���T�b�����ee�-с儓��s�����9���`�'��� (���6T��;� �%��-A�`�MR$2��7�X��i-��ٷ��������T�{����`ۃ�mA�o�|��e$ħV���E��w0享~�:,-����}U(I���A�����L⬫F\:YP�O9�I7�*o�9�LU9�����(�����s���.{�Qe'�����7�%�K�m��5�����H])��]�iݽ���'��a1Z��Kb� 6���^���'�ֻOf���Pdv�# ��6F�Ƅ�qRS�`��g5�tyER�[���v��qK��'"X$A������2����+L�ʊ畉ap���\J~!w�ÓN����a*K���2�Cy���\-ݶ�ϙ�O��=�l]Q[^6ӽ��Ul&�J�� ONd+20N�J��g*]�w%��5 Ƥ�T&��Ne�]@�H��l��O� ���4�o�$B��`&(��Ŗ���c�������i=b�1�j-W����$�%kׇM ��3<��:����!c���"?�ܓw?� �{�������Շ\��{�6�{��i�;s�cGZ�)^�����rSw1)U[΅��ˉ���,��?�z �&�ux����T��$ˍ�4})���La,n���H� ����'(�I͖ʉ���r�F#4ąߞ����*�ߎ�����ڮ*'/����TM�s/�R%�7�Lk��m�{�o��7j��Fa�FzI'*r�=hd�+���|뢂��CQz��S5�~���:������(�8(�0-�;(Wb�/�^�y1 V��,�4�cat�P,چ�pC(N��6F8�N��z��Z�r'�?u��0�kL��ig>�c2�ZJ^��2��ܰ�UN�7�b����b�8!"�9H.0H�m�2m�yV1 ���@��/I���ŢpV��g�Wo��C��ԟR���Cb��+L����yWpA��@µY�hўڽ�&�����'hrN�4+�c��k����p 8�.��ʈH!8,\{�����`����5D��˕�"�T� 8>dh/oqO���!���j������n��}�����?�L7P)���y橎�du� 2W赹:��.�X���a㦱2o|;�����_�b��Τ:�{,��0H[BC[�Hje]LY>4�O��f�� �Y��If��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ