Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
1d18d431bab061d83e11b151ba1afe9f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d18d431bab061d83e11b151ba1afe9f.exe
Resource
win10v2004-20231215-en
Target
1d18d431bab061d83e11b151ba1afe9f
Size
1.5MB
MD5
1d18d431bab061d83e11b151ba1afe9f
SHA1
859aee82633bc7efbf439f155785beba38ffd72a
SHA256
054b576f5a69be5b4dde8ab3ecd574822804d17410d1868015346f2449390694
SHA512
80f13ccbf451b03a5cf55444df64b2898149f9508906f373033a7632b920c19f7f21795576dc5f26b68368b4359f8c245b3ce0c3f19adc5a1ea54348014dcf92
SSDEEP
24576:IJHGCdCBi3wnvZ/Qdhr0CndF+TJ9yU7L1X+WBcRvB3d+KAGyFf/BmvPcLkT9gXCl:GVo/GB0CnjMJgUxFGlf8GyFfc3cgTmSl
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FlushFileBuffers
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UpdateWindow
OleInitialize
VariantClear
���ʤd�Ai�8�(@w�1V��p�&�XF�,@A��r���Y���8��y甧v�~d�<��d���L�c��P?yG��Y"S��HT����c���ո����5�nr��+ 0#v����A /�&<yT@M�Z��*�n�Nu]���p>�۹�y4*3�b��q�'a,�����d����h���8s�{��"���HQJ��T�����.�p�ɐ��J�@P� p 6����zyŌR+]:��/=�u�=�����",� �fњ���u8�[� ���w�%U���)R$�f]��T�ힹs��_������-�[�A��bq�Xh�톹�ȋ��`M1�f���6qr��j�E|i�{����Xw����g�J4q����C)q}�3x�iU�?R�8����EHP���R`��S�*�3�&�$�/[㳲b�P��4��8���+h��H�V4o�<�[�>:�Ğ�v'=���Q��\�m���7g<#1�h�i?@h�2ՇJd趛�_E�6e�.�ŇB���h&B�8+r�}Zbx52�IO��Y&殞eX�b��\�oZ�j���?R�K� �I��Vvím`��y`�H�tv$e�y���:�$�ٻ����O�Ԑrv/�4^ו��6�P���� 8^�'Hl�/�Y/1Lh�����>�I�+ �R�������w��r �����/�/�Vڜ�Z�ۺ|[@�(�r;����]Z����Z��o�Q�=/���J�4Dk]��N���gIх�C�davq�v1�)6�)֓4hdłmQf�O��7����X��V:)p!���A�]GT^�b%棍�H�����Q���]G��i��a�� 䊟�pn��������sՑ�!G�Px� yX��l㶱Ms��w»I��o�ɪ�W�#��L^��e� �����Q����c11dU�5c��c���� ]e���杢���=����)������(=� �0��h�7���q;����&��Н��l�����r���n%aKk|�z���0�X�x�VL��_^�>��H�q��ޫj�-z�c=^ �5%�HB��o���N~�g �L���˻~�����Xm���d��b��{(��%�n��R����[� ��`p��� �n���>�'�&I�zF�ۅ �{f�KO�L\To�:�����'����G�=��J������p��֎oS���R����h߃�e���w"��`Hiֱ��t��MT_�F ҈D���Ȧ{�@�tw�%���ˋ��Z����Qc���((���j+,� ��_�z��u�3�, "��'q� ��;�ykL�Dgm�1�%*�*s�#�Ti;YlU+Xl��|�se��|P�|-Iŀ0s;sS��7\v (� 8YEY&FA��� l)�r��1����m8�U�-,~i(q�4^�L-���[��+|�[ �8�hP����r"�:��)��vT��6���, �L�����5�����"T����o]�з Jٕ�Ru��X�V���3i��ރW�*m�ѯ��iu�N�1�K^M�2��$s��8$j���3�'ToCtOɮӺ=�m~ �Y7���(ViBm�- j=� SK�� �����˓��%�� �v������#�>:.I��#B�R�͊���E��2XgL�9�~�f[�m���他������!�����w�����E����k�|�7��N=�9����Q2=<Fqp\�t�0dπE�1���=�\�(jə������ɠj���07_{�b�!����괤N�j���X�/pz2�@�Ab#o3x��cN��d��ܶr��*���i��2�i��xj��KoX�RvXTto��{�hEL���7)�B��A��������31O�v�� Ĥ�������cOdC�1�n��(sWXo|�!������s�42H�����Ic�a�A^��a�@�/rΤu��bs/��ܩ1��J\T��9T8R�A�*�9�NF�F1���eW'�Y�0X�݃Q_�>����т3A��ǻ�6����L����$��+y���Q_R= �i^p�\� t1���=W�o���m��b�@��._BOYꃧ�j��r�f����2�&�~c�%�gՈ�E�,6�G����2�K���0�};��&u����uȣc���՜ ���G�J����7���~�6i �5�yN,���MH[-�W�����!��s7E����U����2�ahs��AC� 2�V�W����R%�D�+�C�#�2s9����Ӷ���;�ԥ*Nh���<��x���T-Cҙk���������#�lnpQf��#��*��T���h0�$hT�[ I�v�@��������nA�O�o�}w\�wĥ��V����FɃ���w+�m{��:��"Q�3~��u6�Y����u͡$?buɅ��CK�5[�P5��R��gl*�v���������E=3(�K;}JC�ט�X�{]\06C���7}u��e {!��E���Y.�����i�j��5�n/% u��ɡ_|6����2Yu��Y�3�k�ά=�:�ln��yd��ϱV�T�g��B(j���.,j`���������^��w��!��e�0)�N�LFhSy~��zw�ڴ��Ѥ��ʧ����b���H��p�%Nj��D�ߐ(z��m�ν��1y�9��fݍ���H��mm *��X�i���W���?r3�I ��ާl:���* 6�C�r�|-ybI�ԫ�u�h���6F$l4)����U7�������-��H��^� �)ŕ���4��z�uJn�-�äb��� 2)��6���5����U9x'1�=��$ĸ�qӃ�2��LüxsN�=��(1�34�s29��,�@L�M���Na^'#L��� ��S�u������[��Yd=Y}TIޞ���lvh�a�U���=�O����r�b����ފ�K0�I�S�`�I��u�ps�T�O=��!�*� ���6Xu+rـ����ү��f PyL�����=Қ�[�_ik���c:�z���Y�iD�b[y`T�1�@ݣEg[��-��'�y7��a�笙��'K�{I�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ