Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
1707284b0b05d38cdba495e8fd002c76.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1707284b0b05d38cdba495e8fd002c76.exe
Resource
win10v2004-20231215-en
Target
1707284b0b05d38cdba495e8fd002c76
Size
1.5MB
MD5
1707284b0b05d38cdba495e8fd002c76
SHA1
2e3ac0800a272634f46f9f697a38505f96c33a67
SHA256
06e941856144d5b996cebc4ad56fefb4a75537d47647a3f017071c79b5991436
SHA512
015c240b1bee59cd3d01bfdb2db1244e8792bb6cc7b1324337cb7dabcbe24c32ea43e525801b093226ad2281507e3e52502923010a70f1e62a62796a3ee05a1c
SSDEEP
24576:ZnZUtMv7ClL7wxMOxaMXQ9C23q0kFsc09m1FGVr6ChxqqsKcsynMPm+N16XWgpbI:lZU87MguOxO97rkqP9mSPUzK1PHN16XW
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FindResourceExW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CharUpperBuffW
CLSIDFromProgID
SysStringLen
�s��π�M%l6*F\��ɭV'sW�d�Y����Z���+�?\�q�㵿r��;��,*S�!H��CW�G��**�\5��:*�Nw+��Npq�|�"f ��)%u�,�U��EBù^��{���E��P�w�Hϻ�� K�-�������#���Pr������ap�Y�u~�0>�"�M���@Q�!�t�w���������/��� $ #�����.�V��r�m���hY��^��cv��- Qy�������S�^�xXX���noT0U�����_g����pk]�t0����*z�(�����7:��T��d<>|Zx�����.���P֏��cr�)g��<�V�XqT���.�O9 �Ү?����N����AG]��۪=L]��/1�E� ���4� E��������"9z1��}mL���G ��yw��˼LX�p/]��-sqa_7g�R��,��@v�_nEY}��q���3k]�_��αH)S���1'l�O�OI�+��ϒw�}��}��F��"�n���,���.�e��_��@�ћ�2�Ҁu���5�s�yh���y"6\^c'�>����֨Z9���*V�U��MzKp�g2$��)Ԉ�:���d�������$�z��q�xƐ4(J��a�u�Cz�����.��H�*���@z?F�������f!@��k%GM�{֑��ѧ�H�m���f��u��Xh��7�}w�1E��@���K�I�T�I�~��1�3�#Z���� ��F����A���E]G�[& �?�8����Q:�$�ݑ���5�6\� ����l�/�&t���Fb���T9!~@e�M���9�h��$j$��K�ȼ%�,���Y��Y���}�^N�˛5��p9�f��m�`�j�c7���a�� ��sd"�+F&��a��sJ�t�˳�J�=B��d�'<EE�2$��y�srk�D�C��N�5���,�-o��Oy�S���%;��^�o�TҎ�՜nuI��B�Ǯ��B��..,a&��Z��jC�(���:p(�᪈���o����Jo������ז�2l�� .��,L��@@=|�����F���H��h�)��;DIJ 5����W9����Q�52J�T��(w�k~?�����Z���oP�����f=6�� ƹ=%柄[�앞���4?ޗ�9$ �.4-�9�,����sÂ�fr �6 �3�����e��@��{b�N��;{�ʝߔ�s����]�����-Y|��u�$zw� �ys��iGD��WW� p+���r�a��Eں&���L�%��z�X"��gN�9��~_�����&[�8e�5'��U*a����ʦE����ȝ�ſ���"5y~Ϳ>�U�ap�A�r�l~o&i�Ř4E�ObHȉq\.����V�U?i����ⳟmw(h;lS���s�jw�(�b�&�5m�����]]��-�o>�=}L�،���o�����S�h欞��~2���?���@�,�b�9B����<H�A\���cI����M�?�g������!�E��]~nD��9�1��$�gH<��`PC��@hU{=u��ctn1��m7���S�qQ(a���6Cl�$�+��v���\h4TL|hM,M�C�0��{�x��(��#ʞ�(Ĥ���n�6��'�/�:�k�C��\fݥ��V':�h(x#�f�a�tRh�Y͜yMQTD��b�x�bS"�����\��F9��x��L.o4������1�G��Kg�a�Õ�3w��n^�����(`�.�9er ���4h!"썩H&�# Q'�Tߘ�RL86u�]��N����.P��:VD�m�{w�A��X�������9n��!`9�hⰐs��5i����wf5k�zc?��K� ��4����<@�G���xe���9Շ�6�啕��楱�?UR"�=O�wxa-Q��Z�S�P�x���r��|HJ����Y�X GV : �����e�;��a0=ﺔ� J���6�`�BTQ�;��]�(��`R���3��{�ׂzO��p�����f��a�d��;��C(:M/��F[J�>��%f�!2i�3y�N�k��u�- �+��@P3�&�wx�`��WM��e���S��"�h���c�����%�V��?�*����y[�q�}�>"@v�Y.�a�}!`B摺���ԫ D.N�lc��N�qS�� f��NHR����%Z�|ƀJe��N�2����q3�/�����O�{����"#�2�����[�'D.�(0�a�c�/�,�QE��A����N��d��Vԋ�ϝ�ߒSfl������Ŵ�4%H�A6T�|��<Z�vuM�LR��¥��ٗ��Hȕߧ�<������).H��� 2��[���RKL�n*��a���k���� X�ύ:ǜ��r3�/?���[�,@�����V�,��%뱓H���j�G! ��*���w��Pe�g��/��)�4t~���3����C�/���oѵ�s�y[`�d�a�;I�q�3�R�g��&_�1�5��E�_�R�^�`��e�; K���U��L��I��&L��F�A���Ȓ'���5uw�?���&�>A����T���N���;�~3꧅����@|x=���tӘ扪��$��~�|>�m_^7��0,�w�V#�w���ZCr7�x������LR��rw`�Vg���wB�;�2���@�����܁}yTVac���0�#}.����̕Q��[ �}�Nb�{)��<&�"<�6՛�A� p��A��2�vD z@M��ҚK��?hZ_�~1� ��%��,)Ro�4n[Y�ݾ�q��}��;��/�V&���8[�����>g���Z�����E��-*�8�q���E��H��1�j���b ��T�����=Mbq߅����#};~b���6��A$��10x�]�B=�̆$+5�a�k-?' �(��e�"\o�7�ق��m��O�����N/5�{���A�O�����e�=����~٠���� �xN"�ML4}ȏ�#<�x�p�wFJ�"�*��(�C�s��O�P�PM�95�f�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ