Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
10bead3fb8af0b77efd7fd6510790ce7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
10bead3fb8af0b77efd7fd6510790ce7.exe
Resource
win10v2004-20231215-en
Target
10bead3fb8af0b77efd7fd6510790ce7
Size
1.5MB
MD5
10bead3fb8af0b77efd7fd6510790ce7
SHA1
fe23992cafc4da1e984d36044ae1ac1cdec6e625
SHA256
14476961b7790b532440fc371eb9cf527fa884f927f78ec8245ac37d9a15071d
SHA512
5ce32924aaa6f401cb91e9df930acccb1e70fdca3eea164cd8b7f55943e1ede1b142ab86c6fef3e3da6ec067fa36bc1a6439b296bc4a1723d99a320e09963029
SSDEEP
24576:HQKPIHEu6VbZDAh5+5XpRZWegzjADmBGdT5F+Y0aaogfriqPzNL2f2fUosXOkEVB:HAKV90hI1kegBGdT5ETaaHfrikzsf2fr
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapCreate
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
KillTimer
CLSIDFromProgID
SysStringLen
9V����/G���L���/�z3�/��&���M2Q\.����!����������ĦI���;`=� j���WX��o�v+I�h��[3/ ~��ɩ�N�&;Hg|���?�m�RT���t��w96rB�f�� 6rh��`��xv��`��[��� �r͜�[~�O{,o���R�� �i#cM^�֑��B+�zO��e0�^^2zL�.^�(�����J�b�P��] �'�[�W�����ۆ��gk��;+�0�i��5��OA@Y4Sz����ޗ���&���Ů�8��v@���M6!^1r�!ˮ�����u�M�;`�s[~FW������`I�(�6)뒖��1��ZKIx��>�)(ƈ��'C�����C����R"��ۊ-��o�����]�_��˲��~vw҈/>�� 8���/S��Շ�W�;����X�Oj��dc�Ү�(��v3�C�^�j����3���7��ꋹ�q`V&�$�e� '5z�&3�����/J��6�T�z��7��pzB�ʁ@�P����b�Gsvg(4��( u��M�YN�Z�Y�vؼ�a]:�2,K���H�Ȳ*���l���f�N��)���������4��l�>p ��� :"�tW� �j��ivB�O$f�{��`]`J��=�0m��M�s@����Ҿ����̊"D�c�F�F�_�д%���ſ2!�� `�נ\�y�G��n��ṉ��������M�zZ�,�\[?���'�7ȣ��"B����g��?� ˒yU�}���p�E%}�u�`���u{À�0ֺ� c��x@�j����DB�o鋗��F��Z���Z�v�1_J�1N�[̿u�w�j-� �����^�yv¹.�_���P ���^O�8�v�Z�pC�7���19��˝��~��v����Ӭ�����-M7�Qx��t�7p-w~���>���Z�'�}�~���^�5��l>:�[�����f�d��]zo�(Ƌ����@AL�>6ܯ�a�� ����U�D���!r�C�굸L@]~��,���%d���1>���۴�C��>���1�˥�ʏ$)�hf��B+x�)Ab�3龚 P;�&��:�}������ܝr>�z�h@�%2~�1[b��4���*ϓzP} ��dv{]��dm�����*������\o�@��?��6�Eܴ�-���;��ƕ�7����{� ��� �ލ�K�/���Ny;8�|Lpa��/g�y[3ޠ�7� ��f�F�ޗ�~����x���h�q��FR�Z����G���:��(k�7�B,<�5��!iF�x -��*�b�T7�[��m��qЂȧ&5+i,%>;2Y+Y�������?tp�^/��k!�M�z�"�2��^s�R'�U<x!�Ҕ���F�@y�+������~.��:�����2����:v�G������� hp��j��*qXj��XR&�0�"� M��D)��/ �}p�f�[t�Y4�(�=L���(�|��w��n���~��A��2ɯ ���P�����;���X����ChK�'�?պ}hl��)p�2��ܵڈY�T�x�C��h�5�9���kg��/C�����R_C4b�5p�V�=����;赿[��D��C{q�4�~]Mfg�f�8��AD4��v+�Y^$�2�֦�h}E�z?���~lH���"<b�{5v����P �Uf7�2�V�2�ko��~��|5R��bV�˘��S�?Y�mXЄĿ���r8+�,5!M�� ��A���5vL@�$�H��$ZpL�$���"G�ʗ� �Xz��I�u[t�yV���٬�?���!W��,>)n��;z���VG��Yz2^e@voSs��{�a�����\ �WP�%���͔�Jy��s�r�h�p%X�G�T %��C$��Ղz-�sZ8�����%V>1RQ��ì�1T�qR *��Kf����^A�/ ���;r���k�����*� SԢR���y�_� �y�KԤ�cb�D�E�5э*E̍h{��ՁLU�'t�N�~ܴ��V���`鉶#���O�Ojk¦������5b�xת7Zou��\'�-$��ov� � ��S�Z���@�! �\VXig������:�� ���L�~�[���=�Х����3�z�":�Zr��bVfn���ceV=�� >�?'g�,�ۋ� *��;BCkpg!�U���d�a�z��'��I��eU��Ӛ��[C4��۳&��� f�����]�����p��p��l����T�S�樿C{����)�LQQP�D�!+��}5ҊQ%C�����a>�V��H� 2)�a3i�ʸ���F �x8������"�XZ���9��j�1���S������(��ʷ��b�*�|�$��NF'撩_�AkX��~!v�0h���-Q�I#7���:��P�v����q�I��B�269�Ñ�rd�Ej���h���ĺ��J�y~ev�L���Ǣ�|�ߛ��rP(����i��s��W�x��@Oٻ䢪�At_��&dQ��]���v��xU�#q�p����hж��I6� <y��7�p�,֦����%W3?��r۴�a�98ʿ�O�?J���*A,W~Z���[K-�>�m�S��f�jD��>d��H�0��t �*go@��}��;=.z���:]v��6��e��}˜��L�������q?�8�{1T�ע��[��V6̩H%r��jF��y[����C)���!� �iPT��� �����&a�)� YG��!h��@xʟ���N�.%��t� ��q�ܰ4%��82�%S�� ��6�ej�<s��h�V+q��T�� ���w:�������ĔO���J\����3���0x��dz�1/5ٓ]�%���q8V�R�����L n��C,�YCY��������l���^vEcUJ��V�fM���I`�;�=��m�� SP��<ꤪ)��Lr'=S��1iVЦ�E��m"8��o$�h����K�%�WT]��e|����W�20kk(;���1�K��9\�O����`�t9wY��H�U&P�����w� �+c����m�='Zg�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ