Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
13a11ab8b96740f6b31d509287b6ef6d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13a11ab8b96740f6b31d509287b6ef6d.exe
Resource
win10v2004-20231215-en
Target
13a11ab8b96740f6b31d509287b6ef6d
Size
1.5MB
MD5
13a11ab8b96740f6b31d509287b6ef6d
SHA1
ca82dce4e3ba4133bcb621dd0d5faee0a57097dc
SHA256
42524465d224813e2feb04206236617447da1d3ec3e4bb6c75a108a2ffaf6912
SHA512
f30d0d1325cc3d2e1e94e4ae6b45fa31ee78ae6e26864ac8c2707c8467829aca0dff13a96bf2a5da2aeb3ed92c53753934cefc5e470999cd00d4ed9edd38308d
SSDEEP
24576:sAgoeB/anZvC9iiOXGOYbd/9Zj9Dx3sfyvWgeAye6zMArwducX47r+RoNPg4GOXO:4anZvC9iHGN5Jx8fy+gxCMswdqSRG/5g
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InitializeCriticalSection
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxW
CoCreateInstance
VariantClear
����qu�Y�b��� �Y��F�d}Q������y�/TIzgK�db�� �L��h#�ȼ]�o[��5��ѫY��ßX,�qZz6�� w9(/�K�Z��� vh�+"O�j*G�/µ�QU�^�mʛ(�.�� ���ݬH�ٷ&�]!?�?��9�����?h�3[�� WN����������瘆�u����U����u��p�\2><�P�7�R?Z�G�Dۛ-Ӧ�M�ci��핧@:ov��ٰ��$�5����F(�.;�v�t���qn��O���&[��6���Py�z���5���/��������҃Wa�dO�G?������������5��Z=:چ&/�C��������<S_�\6=|,^�+=���ا����/�!Ż��W��� Ae�q5 6�� �IQxCNvd R�����]wE����V��y��ȳ:��B�K#T��enz<E�:���칣Yh���}�$V�FX�N�T������ �r�[TM��GŪ)f-�����B����3�CZ&6*�#�����\i��t���o�M!��+�,�蒥mj)SO�LAR�J��U��ɪ�f���c�_��-�/�f�̲ʳ��8??3z�<��m�V��q�Ekv<��Xr�`.���2�Sz�&�:.�WT���F�-GU���B��9=���;�=�$�I�͘Jް��{x��������9�Eo¬9]a+�s��Lz��mn��R�/�{x.���a���S��N�J}�5�{��҇H��_Q�x��@��0��y�#y$����m��<��h��]�0{Ⱦu}H�;g"�Q���Ewr���xս4�Dst~��bu?�����F���ϒw��ktGWqV�z!�nr�%EZ�lц͚�GDI��Ct���(g��Z��w�ܔ��P_?�GX Ei%N����a��`c��#I2��DV�y�u&t���"�1A�J$J���� /<�н�����jk�����cB�fV���̂�{�]+L_9��bN��K�R�N�s�}�v�Vլ��/&���t�TQ�h,9j��ƽEi�f�8�G�=?rԗ9C�1О^�N�2��;^�k���C�j%U�f`�l7��W-�����~Z���-�/-[���9]G�0ySzU�@~rk1����o{U��;�II��}����Fv�n�ھ�Ff;Z�!��@me2���y'[)��a�T�4�ԍ�fn��~�SHp��"� pQ�M�)��c��h[�9@ir��c��̤���U���BU]��ae)~ke���>�HIqGJ �s��$?�X-�S��ج�r��l������#,OХK�詙�KF���Yt�gˏ��d�tӠ�.��o�a�k��Q���*�C[,��1�x=(Ԛo�.�J����� I/H���*�/�v�uS��'���K�Hh�4�G���Nd盕;_{ �k�2�����$��~,�mso�š���<!�e ��'���)DU�CJ��\Hw�����BmT�����LD�L�֜��tx1�.yGv�����.Ȳ�}�OuUI� T�3;{�H����8��16����h|���>��lÈ��\;���mv^K h�W'a�a�$�N��2!g ��~�r�:|Y"�ʸ ڍ��u������s�+o�l�y��]r�ݟ?���8e�l�8�gx�n��L`���ȣ��\#��IJ��h�n�h�[�Ɔ-�L��`����MS��*L�4�ci����U��VN�]p}.�>�V͖�D�� `)uB r#U���X��:����:��RKh��~�?����wޖ�Q)�P�`�l��o�_��K���*�H��ʻ(�m��_��SuI�$I�4^KւR�1z�(4�Z�%�LJ�B��x��=���Oٟ�lr��Nr�>��?���U�V�����]it�u3.-�8^)�_*������w�錨�5�r(�H��X�Lcn����O�G.I�:v�y͈iG����UT�q�� L�ԗ]C_���E������0�����D��3Yܘ�N�dN=9V3�:���0�I^���ʶ��ȝ�-�\�=i��r�E�J�q��?�"@�=�顀+1l��3�"���S]4$���9�����E 7�z��n�=�����@7�K�Y�%B6���=�M��l�I<f�pSZ����n�Y�<٘���ѳ �3$5W"�:јZ��܁8kJ�c�':z8&B�A��.�8��;h:�Y!M�^�(=���+$�X�E�I����;ҋ��1)�W�P,��h���3_�������t|a�#f��C{�@T�����õc)H?��7~���b�G �5�|�[Sۻ3��`����w-��Q�ņ��������D4>-s����4���ej���'}Zx<K���xex�0U��K�B��8RMsng�!ǒ�������0�#�,���������LM�P��L�W#f#�xmX�����%���L��W���P-��˰��uz�g�N��k�u4���h�åg�F9�Y3Ա��Z����pes5�� ��Ұ"�-�� p���1��h��?H��Ѣ��R�.R�ïІҮ��S��55QF{���cz�,���EdJ�j�ɖf����!������?/�4�_�K`���� \+��vSy�I;�0SR��.�9\�$�-$�i-~уW��IE�;)/��t�ȝ;[5�>��)*p�n_w;Y!�},�����K4!78�� �}%���I��}r����u�|:��C�?k�B�X'����c����>4���䵔þX�S���D f��H~�v��� `�uXj^{���.�s������T��,h�_o���F��b��:S�4Ōah�� ��Ȏ�����˪i��zx��#�5-���8/�V=�=�z�x�}��,{1�:ȟ���D���߿���U�����h<�-�6ɶ�"��z!�뢪�ƭ�B�$�&A�@.�J$K�ͼ�H���h &i$�����BRW��U��䉆GG��m�k���4��l�J��-h�`Q�k�-�9�V'�4��1��OQ���|�v&$�N7�.�U���2E��hMK�9�L�sqfE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ