Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
1ff2e5bb6fef3c4e2f8936c60035f432.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ff2e5bb6fef3c4e2f8936c60035f432.exe
Resource
win10v2004-20231215-en
Target
1ff2e5bb6fef3c4e2f8936c60035f432
Size
1.5MB
MD5
1ff2e5bb6fef3c4e2f8936c60035f432
SHA1
dc99bdff91ef5de2f7ef82d860492b534e8385b1
SHA256
20d3d6cbf2a63290b7f1c2eb4a0a72cf6502552942f02b4b0b51d37ee1b33fae
SHA512
f121f895b7e7cb1a6d14400fe62ddbaee14a7aeb5e28b9761ba99b91efde44d62e1b654419e9a849ff86c3399ed6e62bb473fef7eead40e764d000add6cf7ce0
SSDEEP
24576:aIad51fxmrNQFsbZcnSTjSItuDekfbh8OCgvCUje4mOjhTIh7ZJPVI:aVrxmhQmbZcnST2SuaPcLFTcZJPu
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
MultiByteToWideChar
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
KillTimer
CoInitialize
SysStringLen
��;�-�X�.!Z�@Q����l�<�����bs��6;���)QipA�#VzZ�D;WX�����2RC�=s;���� ����Qu�4�W���2���]h�4����>���`-dD�����*�A ����j�ۚ�d �K�:��x�:j���!NX[t��:n�s��fBmW����a�ب�9�aP��S�̖̬��٣�,z+���C���+J? �<�{���#�Zߏ��R���U]H �M�F� �m���<�j��6���j������d����Y�%lS����!��G�WBƱ����R��%�:N}��p1!��DA�ҹ�C�Oc��ʳ�H��DT��0 �⧼z��2�=��M�9��������Oq������[����� [UF(D�(P��f_s織[�x��T�&B$h����SyL#�U���uD�W����5�h*pr�Ӧ>>���Q�X���Y�bG��$��?�ljq.L�Zp�5RdI������$ Ӫ�/���h�[�S����\��������{V���8=l@%}���^�>И�O�P��->�?�9S�C����\7KbQ������R7G��/���W�vw��S�uX_Tr���g���?4C�>������X{G7#~������Щ��GYfJ�(4�N��⡷�2@���-�[���Q�?�*x/�����d*�o�ȋ�76o���i5"a�U!�4�yQ�xޒ_�����0�& 0X;2na��mc +��怆��������2G*�A��-o�aTg@\i[u">3=���v�#V�a�7�6���z"CAy�>��jf;kr}����6�0B8y��-���j�)34h g��j��v����3R��tM��B�K�Zff��&m�sҽ� :J����q�\B��v�6��0�x5j����!P� hWqH�x�P:��Ok���܁\���F�^m�/��#__B�|]{ߔA楪M�>O����%q�c�D)/�7ju�V�$��t�ǐv��*e3����3��Ї �?�Obd)o(��c��ӎ��GB�{ڟ2<����ڰ8�����%�������k��^�r���fM��㪷:�<������G��$��i�Q6x9Z��R�$�L�v��n�d��2��&�e~ː�QoZ�O�ڝ�n�_TE�*�;�� ��=����L ��r�J�����N5��T2���LU5�<l�ȳ*+��V���#2Z_Ԟcu�؝����[� U�G���e+��V�J��Y�����,�$e�b� G|� ��^ǥ��q�q%���㩍��FZsf��(�i�,��c��Q���i|�����2�ζa��|�ME ��2��p����s5Un8�p4��m��~ƴ�h��n�g����c�ڷ("�ґCNj��,@mą��CZ�٣�P�H_p��l'��eɓ�M!�������ܓd\*=�|�b�i���B���o������q2B!���������G�`Pr�>{�5 �W�X�ʕ�4_��A�����dTy��X��ږ������:%&1:N}&0��F��ȻfF����9���+^-���U�H��h���s-OӲ\W�E�~���&ϧdY�����m�E\�XQQ�h��,#����ݡ5�����c�o�L���~�����Z�6t`�����D�]�%ҋ��W,�ɸOA%�78�i�O����Ul�������+�Ȓf���Xq��@,�r�嫅�T~�g�8�-}86�D��b&VE�s�E4 !A��{�DS!������}�ca "��M��x�y�Y{�; �Ǎ|��9'�E뛦�gҨŅ�� C�]�w�}j$��b��-ȥۀ_����H�-��Z�w�=��۰��@�#��W9��C��c������ˋJ���q��ΐRry*�;v��T���T��2E�����ſ[��xU�� ���x_���j��b�ъ�M��2��7�"?2z��Ϧ�"1ͧM�*<4!�jiO���HW������4pZ�����<Vl�|�M��"i���C�w�1��:��<91L�=�����b���o�9���"���>yJ1��1�iy >�@Ju �(�b@%,��Fu8�(��~6�m��f���"Y4���QD��Q/0v���ׇ׳A�~�X#T%���{$N:�b��g�WP�]{wh�!RR)͂��<{�E�^?����ֵ �>�p� ��h�z~��1{�tI��t��u���d4qy~��Ӻ�}���ͪ �o�U�sYDS��%�95��D�wg�b��&�$��Gb9CG�,$b������ļ�������b���ʲ������ީ���3�R�L^P^yw"��9����1�o��F���)Is����;_���d]�����A��CmZ��+YG�����c�sp�����友�P�~f�4����q��j�K��%Di@�y)^���B�ֲ�ę��kˡp9$xL��v��^�Bu�7_'&��эs=ii������k����L��)���F䗄�ѡ�F��3b���o�Y��%�� �ػ�S�"[`��@]7����������U�{r���M� �����[Y��s�A���<^��Yi6�����?c��F� �>�ζ��u��&���x�w�W��#��ϛ���&�Ĉo��준SC��2��%h�Q\��K�%�KM+QX�����-X���r���@mI� ko�/�*�3���ܯ,`'�����:��Rh��w�8�F �`�`'��eH�4�ص�~��X��ѭ~NNxa.�J^ %j������=7�(��:��v���:�"�I��̩��S�GM�_O��'E��+_�N��Sltyjy,��(Wl˯�&�ΣAL�Y��?��%:�,ٛ�{a�M��t�� �?�F�4k�U&�"���c�3�l� ���W�H�]�#�`V&.�a� s�%n��i������v�&�-#��N���K� n�ݥZ�xt^VĊ<��4hPˍn@�2�rb��Ayh$��i��!Yw8wxL�� �}��ૐ���C��L0ۘ� �T�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ