Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
15ec4cc531a5355317be3ef4b5d53dd9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
15ec4cc531a5355317be3ef4b5d53dd9.exe
Resource
win10v2004-20231215-en
Target
15ec4cc531a5355317be3ef4b5d53dd9
Size
1.3MB
MD5
15ec4cc531a5355317be3ef4b5d53dd9
SHA1
b2d12c76782ee48070ea56ab0d07406a82ca69f3
SHA256
ebceebc376700b24c5c5671a1c3c874901f40cb4a5c291b7a77a268f334a6af0
SHA512
2e4666ee14841365c2c9dc86cf91b7573ec13d59e999c85f4399d95fbec4090f658c26dd76d63651f73fa717ccaabeb39aa2f5a009ceef6637406ef043af8bf0
SSDEEP
24576:8j9k1IVQebFF1TXgAp2GY0HHLyTUc+/fAvk0+WmGBnUWljCsU8m3MFYzHVh1CVfX:c9iebnhQAoD0HHLAWfm+PulWsUPc+zHy
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GlobalHandle
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetPropA
InitializeSecurityDescriptor
SafeArrayAccessData
VerQueryValueA
EndPath
CoGetClassObject
ImageList_DragEnter
SHGetMalloc
InternetConnectA
GetOpenFileNameA
bind
ImageGetCertificateHeader
CryptVerifyMessageSignature
pcre_dfa_exec
7v�9�2eXc���6�UO{XOHT͋d��ŵ@\�"�������a�y�;Փ־眧�+���(�� �C�ӰijYȡ���ca��M�����,�8g�M�8�����f����=ò��;��0�,���4�����h悤���� t�]Hp5�Պ�ij�Ɖ������|0�i����m�5<�nאx��V��|m#s�&���Úm�fs�;��!����{���W��,g��K2��*$p ���� �z=EgL��,7B����f���xD�[�g�}���e�� �kºy�E�Fe ��AC6 ⩆�1%0c�� 6�T�;���g�l����xԬ"���7 ��"[��b����U�t.1@�<`��q�u6���;��P�L@��2ܨ<u�~���M��l�0���8yq�X����s�\��z�����}`:.��Z���gS�q�����ͩ|{25��7iq����}�](?�oBc،��VN=��j�|�{"���f *�_3����+>��M�#�:.8� �Аet���Q�Mi� Y���UyA��� �$���ۜp�=�B��d�a,j�iգ�_��`QD{}�J��2X'K"�b ��q���x붼��C�/��A�������~�"��AZx.���uE/`�c�6p�����4��A%���W���~�hO�YE��)�Mw�z�ѷ��Rv��~u2GRM���0r�.�b֑ܨW����2Ui;3�Iƍ���� /��U�0�zDrz�Ru|5j���)����$�TV����ez�=H�� �~���:gFf��o�(�H����}tj��d�>������9�_9�Dq���l{��[Z.�>��Hk��YPQq��6T�q=[�B�X�!n����:?Oey�Jz��p\xP"&3���"@F���Se{����/� ����y_��7JK�B'm�I!�g��L�0�7Il��7�I$ ow� R��4Y�y�p���A�MV���=y5�{�y�7�/»1� ���Kn5�o�U\^��z�������`�XG��,���D`�ܿ� �G�,�P��,i�x'��18�ʈh$�(�:q����@(�����P�cR;ݐ��j �B?_�Mj[V�'�����mtx�.�T��~U�ߌӉ}�ݨ���Dw�v]�}ґDT������ؤ7s�B.h{���m��&�q�Z��r��R���%h?#r�ꑲ�]K���{C�< �!�%}h�Q�`�V+"|�Q$^�Q_R�@ա�i߳�%���F�Go)����Q�u�� <@:*�Ye���:��+9r��8���MT�n�cK��m��~Fq\�����?-k������Q 3���%�������u��N�&<� h��l�h+�n�zsU����Y)���Ύ|����*����?���T� y��)�DH��������&-B��.�>ܗ��wX_m/���t� ����Q����R aA���,g����a����2���\,���?u�^�6@��Y�W���P�T�S('Z��;�j|�C_��Y"݀�-�z\����%|ϊ�� o hr�/�m�%��^GETަd���d��͛�R'��n��+�U�v D[l$ء����_��7�p�{:�Q��!�������N.?�9����{2�91�Eg8�(D$�^�`Ҭ��(��Qe�:���ZMR:y�Ҿ�u�s�c+���:t��`�KcO+��������Q�S�IԦVח)�K��F8Xa=�é_3sR����>����t�G,_��%x *�8w棒�8pO�����m���9b�V��o����N%0t>E�7�`������E�PZ6,��E> ��l�F��h�� WD{�|�]����rp��˼��h�зG��#��T���3�rTF��.��Z�L�H�q#�N#m2c��he��<X�.��y� PPv�8��ҎMo�M���vc��Ո�.��{�(ZMN��Wa�;�}��p�h�g �J <Piዷ��^���=4��җ�.�A�Ӵ����N���l�������W^dR�{d�i)����D1�>�v{�?|!�����db h%��YJh͓�&n�#~{v���]@��5P������w��ll�4/�n�f7�`���i�5���,ը�F K���5��0���$�gY�RJp��w�2�rl�_�7�ts�pw!4t�a�6�Q�J ���Q·��H|�A�>ҘI��r�k���ޛC��46�0<l;PW�V�Bzmޤ��`�^�y�(��z�⾾ѿ��k�[h�ZCc-lA��%�{�j�p�6/M�?쉡gk:t����P+[镱V���ץM��SZ����u���+����1$�FTO�0{5������8-爇�������<�<��B,8_�������/x��څ}��l�^³)� �c�qm �;�Y�V*��X��h���6r�����DT�,�@���X�\�xܧ��Չ�V �U��&�K��J���.K=�mO���5n��y��@:�'�iED�(�9@I�_�A�)�_T���&���� ������CA�by8����M,���(��d�dP�) t�����e< �w1pwdsb5_n�O����Jd�U/��{�3ULB�V|vf7D$݅2�x��˟�KI�_�P�_L�=jL5d[&�*����茋U 2�ᑽt�F�>Ӥ�(�bk�,�\���(����;>��0�O���<��OR�����g1�����\B*��9���̩�b�nyD���>o�Y����������H>� ~ŀq&~�e|I�9!�8���v�~���kX�͗7�R8��G�'!x��]�)xp�:��?}&}�b���h�4��E��:�0�?E�8��J�.$�eC5�N����f�E�A���^�4$P#�⩗�4W:[�r�N� �{�twN��n����ܬ �K�?�P���]�h����6P�z���Z�N��?��䎰\d��]�榳�V�I�Xv1����hcgdx'��p�2�B�aR�M��P
madTraceProcess
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ