Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
1ce8a131c49521b9b04ae1b26ec8e8c2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ce8a131c49521b9b04ae1b26ec8e8c2.exe
Resource
win10v2004-20231222-en
Target
1ce8a131c49521b9b04ae1b26ec8e8c2
Size
610KB
MD5
1ce8a131c49521b9b04ae1b26ec8e8c2
SHA1
8da138167cbfe4613ee640362117321c6bd93f32
SHA256
23480a9fe68c488b805a4654da9746d6aae2f4986833c21db50fced563f758e4
SHA512
23b615d5c837d42c3ebcc603eb279b240d4c7810d273754640c91892d920710f56a6931bf05e16c9ec2f8c50da84594ed5b799513247cade2a56fad51c4b352c
SSDEEP
12288:C1B2eQgan5Uf60vBQ+PPnEdsyIc9QteQT8KTMBf:CfRan5Uyk3nYhGeLKu
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetTapeParameters
VerifyVersionInfoA
FindFirstVolumeW
LZOpenFileA
ConvertDefaultLocale
GetConsoleTitleW
SetUserGeoID
SetFileApisToOEM
LZCreateFileW
GetThreadSelectorEntry
IsBadHugeWritePtr
GlobalAlloc
GetOEMCP
GlobalMemoryStatus
CreatePipe
ReleaseActCtx
FindNextVolumeMountPointW
LoadResource
VirtualQuery
EnumSystemGeoID
CreateEventW
CreateMemoryResourceNotification
AddConsoleAliasA
FatalExit
GetProcessVersion
FileTimeToLocalFileTime
WritePrivateProfileStringA
ConsoleMenuControl
GetProcessShutdownParameters
GetFullPathNameA
EnumResourceNamesA
BuildCommDCBAndTimeoutsA
ReadConsoleA
RequestDeviceWakeup
GetTempPathW
MoveFileExA
SetPriorityClass
GetProcessAffinityMask
FindNextVolumeA
SetThreadContext
GetACP
GetLastError
ConvertDefaultLocale
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SafeArraySetIID
VarR8FromI2
ConvertUnicodeDevModeToAnsiDevmode
DeviceCapabilities
SetBrushAttributes
EnumICMProfilesA
VerFindFileW
getprotobynumber
WSAAsyncGetProtoByNumber
WSACreateEvent
GetEffectiveClientRect
DrawInsert
SetCaretPos
GetWindowTextW
AnyPopup
>@M͵!�\�:ӆj��_d��l���b�����4�3A!ؖ��*uj8�H�f��%W �k`��9��{tL��L�F��^(_���31,Ȝ��-T��sh? �f_� ��B��˖�x2H8��HC��P�B������,ug;�opMN������xDz�n�����@Gr}+�v�H7H\�X��?s>�i�� �i\q�����-��h嗌�u�_b\��]BG�P��U���t���&mj�S; ;qup��n*O��x��zo�_W�mS�ΐ��A�e���2p+<y�i�ml���3���K�#$�����y!=�f�q7����8:�;��5�<M9[�PoԮp���T͐�aKtf �O<�.�^@�Te=�����x�I�4�?��{霕$�! ˽���Y������dP�ѲGNrܕ�� Z�� ^�6�/|���Q�m�A�X��F���ur��Z$~{�l[�ZjA�U��{�������$���'��+>w�am�����\��#�'P:l�GW���{bV2@mH���q�<O9Q� zp0��J�K���y�������D����xh��`&V�j\욚�'m<�9����hb)���n�inT�.eu�E�����U��Eq�EB+��ĜX��̈�1J�2�1���eiV��j��N�'ê��ck�[cu�^[gċ/:2�������NѺ�ckV���O�1��O�ʜV�9��$��8Ce�����s�O%�K�����̗�b�Q"�v"�����\J�<��(������[��`W�|��n��pVc��wB6���w� X#����i�����p6��j�_�w�s�|4{�� <�oK&���d�}�d�mO�q���؋��JW�*c�3�������\T��.~2d�?U6�h�U�˘����9?��C}ߠ�(����������᱘���5�d���沵:���+�ä�*��|���!b�k3�rE�u�j��`iog�',����L�C��������v@q7˶R�YE%�<L����U|�gl�j,g�$�n&��w��p�p�:D��z[�ٴ�#$��H$r�!y[i�F�����U�(r�ha2%�=wX[,��0f6�-�������p~I��Ab�feJ�A���i )� �~�z}�X�����2"��L���,�G�.���RA ��d��N90%�q&3ۋD�#�Mz�,*�$qϡh�i-���h��9�) "n>��@`��9�G�$ϙAːy�2���L�-���O�H�C��!k����::��yx{�`k�XWvoaHL�B�\m��lnt.�K`�5����FU�7��V�8+v%�In^s�g̛F (ŀ�I�2b�6X��)�4�#�EG�q�2�}�,��˪��}:�ζ:�<r�dDk�8������H�ց����9���gRE�?*p ������ ��1m�r�� ��m�Kd%[�"] v����!�ɻ%���EAin;��w�[�r��X#�&����eڼ�Y%Є�mGF��z�G������hZ��*M���Yo�� $JȖ;�"1����v{�#�@�n�w���=JP��5F���vm7c�28ʓWt�縇P7��ʤv�A�l�C���-a9}JA�Aq��G�N�+�� �^?U3�M7i.��� �PM"��c��.Ȯb+� � p 7�j�������}����_���3�gU�A!]�W���Z����X�g�$�I=�#m8�P�ϳ�TO���phӌ����+M#*BB+FF��C8p����>$Áo�"�Z�jΪy�����cm?#:t�/F�*̊:�� � ��ݕO�>8�P@͑�mq1�uO� 곮lK#�������/X0_�{͍�I���0�$6��������|ZHJ� ��4����;2�-j�OЇ�n�}�v�f������G)$�TD����]�����¦E�tI�/�8���"��}�Q��#�N)��P��{Z�Y���Ű_x�]�\�"�Qx�o7S!$F�B: ����r��v�SuD��kn��� ���!�����+����{��89j&��KΓ�n�fA�U\�Aڀ����P�s šj7~W0�`4C�!qO:�_ {[�_8fƍ�?��'j��"2�h$�)���Ϻ?�Dr�~}�J���0kj�s꼁$��s�}ܼ��J�Vn�7��;3=�eʑ�m1B�Z2��>_�h�:Ѣs�ZC�1�o�D̵�_D��^ �z8%{N���9�\�� ��_LR �_0��כKU�ѥ�[� ��+^{Bb�;0���O��z�HG��f<zej>�t!�f�52}�E� ^����N y����5⌖(a�����WCT����ύ�n��e��������m�/>S����d�8ۭ"����V)��q8�* �#��I ���S���Wѝ��4�Mnˁ�kEm ��3�WF�i�����8T<MҙV�:V��{i�(��&�=���M�;����� ou/+��dtC�������`�fSX�g��w��1Ava��"�O|`� +J���«�A�8�X��n�X��b,^�نO�2D�oY*�|o�(_J���e�J�t��]r)ڗ�Vh�jh�w�� `L0���۫B˚S�� +8���W��s��H�0��G���\��,��>�-�Z� ��u��M��ӕ��%^��L�&%s�9#����цq��*5UX��$6�T��vk3��MJ�۰�rG5��!��C�ϫ�����N�������9�*X��!�k�������l,�t��\"q�6ϛQ�ZԆ��jS��Yb�B�c�#�>à�� �Jk�� FT ���� 0�D�?�ȿ�Ǣnׅ�kQ���!N,��u/-����k J������Ӹ��\g9�'Y�r�/�� �#G�y�')p�v��r�e�QVv�p�,�"�G�T0��j}h<��0p\�I����tJ�tbq�p [ 02�ߕ/�B�� �}7|�q��,�k���j~�U;gA�� ��*�Ev�e�s?萙�=�#{�li��S������*�Kl�~ ��M��댛s���b(����2o�f��ʷW48 �p;�F�%x��}���!ǹ��dY�|
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ