Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
164afa9d9fdd0fd0d9faaa1fad3a8206.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
164afa9d9fdd0fd0d9faaa1fad3a8206.exe
Resource
win10v2004-20231222-en
Target
164afa9d9fdd0fd0d9faaa1fad3a8206
Size
1.5MB
MD5
164afa9d9fdd0fd0d9faaa1fad3a8206
SHA1
48745eec45b4602338a84cd3cc0d359f2c028623
SHA256
181b90b4536d6c55d6499b7902642af284950e55fc6859f0b2411c55dc4e2e8c
SHA512
84911a4f9e5e0301d8ecea050d97b7e97e67f0484d29bb8452acc7224226c7ebb2f0691b7a15ee7a19f6886fa58e01883b257246dc0a96952cb7d790a0c43218
SSDEEP
24576:IXNU5TmSRd6GyDMMFNlQiFLkS4Mfi7zVdnuKgRADki7DkK/J3ZoSwjhnRPjWoaRc:IXNsV6GwFEiFLsMfivVUKlDG86nbPKoJ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
TlsSetValue
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
DispatchMessageW
CLSIDFromProgID
VariantClear
���B��r��B!�9��?_}��r��:dH� m\D�� �H������|F�O�ek�u��v�j�*Z _��pc�����t�={��I�jyŀ7����{ B �-V�0�?\��O��9.b��[d�qЕ'��r�8��=���o�����9�� �g�/�e���������Sk ��z0�V��O��]�� ��v�&� �6�9W+҉���� !s- ���֍8��7ʹ��Yܲ�b����Q+l�J?8V����2'�8;��@ �?�P���I%�y~Cu�.�����\�Z}�7�(W������7P��FD�V�S��B�Z�u��^EՌ�������5P��1U�0��}$�_�������$bN$L/|�HCS�+���ע�Yj����[s�6k�s`n��#��N��:*�q;�]��B�|P��]j�m�m��©�Ĺ` B�J��3Kl��Y���8���s^3y���p�r��]4��%1xj�2�r���:3:�tÀ0��t�匿l��r�s`��ٛ��$��t��%�m�� �ڒHeE�����-j�V_:.o|)��\����Դϔ>s�ߣ)�T��S3u�& =�r�����>�vX��~���~=�9ß�B,�����䄜I�_X��&�iV���� ɴ������"���ҭ������^Wb�G�*��λ)d�䈯0�Lߠ����)��_ �2"[c5�ڷXKw�=dq�Hì� h�F����ɢM �����$f)�I�܀����#=�4���8|8Ϳ��h��$�$!T�6]8g���NZ���^��5�TG.mnć�}����!�n��;�#)�����4��E��Ǹ�Z�9��YV(5��no���W���A�,���*F�\D(�$�:����}�ja.Q9KaJ��4u�Q�wE�60��g�� Ϡp[;9�r���g-DW���bnŷ2ZC(d�U����0�0�{���u�zk/�.�u��-�?`1��JIpnN������}AƟ!���%H����\nK��oc�LLН�T���*� ���|��Y���i4d�Vզ6���A@ޑ�#�Y��s$����_wHk|SQ6�L�mz!�s�e��Θ�C����Iow����r�Wg�T��Xl�t�5��S�w���-��G��k�N"�Lқ��٦����}�|b%!J ���h��DM��:m�pt�ݓx����9(T,� 5Ex��_h���TB��J�5݈��&���H.؉�3�!�lԧ����y�́w��^\�.��+`փs�����3��$e�Ƒh�?$b�" ��D5������r�`��_X�_|G����&/��8<��2 ����?�Y��h�����!�i�쐂�aG��7vme5[�.sY���"Б��١A���"�SVǺ�گ�*����E������}Bǐ ��XwY�i����� \kS�םɼ�VU.��d�F�*�P#Š�}P�^R�Hꔣ�J���&��W�.�]�$H����K��_H�0�9�~�v�����־dU���)�˒�x; �B^*�8T�W��K���������?+<!&�ε[o�3���z�/7�����We�O*!C�Dt��������!�j9[)]�:�n�$K�)���K-���:7-�<r��`���C�G�� ;��é�+L6�zڀ �\.�^���N:C�e��>�D�8�ٮ� %�Gk��GUt�ľARZ���`��:���cm�`���sؚ����;��zٚ73��k�lnRҢ �o]f|I��J�[뗪��F�z��v-'�����;d m͡����%�"ۘ�{�g:e��! |�%����XG���8���s�+At,��/tT3=�������Pb�C����7�aJ�����}/"V�)�p=�&��nU\�6q���Ǻ�[v�eœ�C��_��l�0�_,����ӵR8��G�5��ٜ�u�k�- ��5���L���Y6uK����rg�Jlֶ�R�nA�}�h� B���%47����{��E�{do����Rz������c�&]M���~���U�6���:9Uu�,؞f�$yhU�(z��D�܊��v0'+s@3��zZ��z��pؖEg��[+�+%�<�@��}N1��3��X@���Qr����?u�B+��d>r� ���xx�'�A�F�� d�t�_ @5Nhg���o�C��&�Ϙ�������oOt��[��A~��s&���Qk�C:҇��?�IN!��~|X����֨�5#Ϳ�M�[ŤI�NG��O�E' #��y���75.�i,P�L��� �eM�o�2Mn�yeN�Jv&�(�ہ��tr�sJxj����¿s ��r��������%P@�ݸ�ጞxy��ȷ�Q���)�5[~-�e�b's.8�La|�Yx�}�/�������y� �eÄ���"J��,�� �Z0|_*A0�7�����ܭ/C���Ojḯ���aǰ�>ļ�]�~k�!�� ��G}{�oc�)�{�0U���D��<�p2?��A잮d��G��v��S�d݃�3�\0�F�h-��Q�_7�0%%���kT�I��;{:ս����=K �C�Z��Є�o�(nKB�I�� �D�ŷv�FaX�됷��q1M� ��47kLjY�"A���>-��l8�ޥ���T9rR~��F�w��?���n�Pט�OE`��#w�(?�!?t�Mv�abT�*/5s�LR�U��5�������:\�o01���ޣ��&ҝ�(H1���R�c�.E$Uq��lV�}:&������q�=VL1W�[�m:�Z�Lѵ�!��d`:��q�i���J�Z��{Y�'�R�-%�){#�C��賾��A�����_ �[�� 52�v��R^ ��k�k���=Q���|��������h0���:�p�q4��^-A�N��s7�k��,,� �����_�,c`��ŵ�Ƭ@�7�$E* {>%7� �b���#������I�rAS������wu�X�ѳ^g�+ a����(�%�Q��dTÆw��}��uo��㦰0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ