Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
21f3f0839bf8249d1bc191f22e9d3db5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
21f3f0839bf8249d1bc191f22e9d3db5.exe
Resource
win10v2004-20231215-en
Target
21f3f0839bf8249d1bc191f22e9d3db5
Size
1.5MB
MD5
21f3f0839bf8249d1bc191f22e9d3db5
SHA1
94ade5dba04a37504fabf6a233ad3d36d58e2a3d
SHA256
18fc8e8b9bce91864d897de0da7760963edcef91d5c7b15b2e8c4cde4421c315
SHA512
b1fe4b42b3bf3c046aa6a28f2bc38cf3f8b311113de97cb3ba5322a78bdc06cf0ae2e0719f773b48d7e21be3d103ee2385805f374717dfeb4b649ecd002cf79a
SSDEEP
24576:IeA3sO3mVxkP0vxxkEmT1VK7MB0BPXiD7HwbpGMLMFlj6UNgs4voXALPCclZRT0Y:TA3736mcpxyq7XWQdGZj6C74vmALfUT8
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UnregisterClassW
CoUninitialize
SysStringLen
����D�e��09y-L�&�Lw6���<�/����7Z)�'58����5u/]'��� 0�hS�2��G?M)�N!/x��ߔ���=$�� =���4#b:�/� ���5�����u�ڸF�H�rZ�k�Ɇ�j��bD˪ �}4v�cghf�k�Bl\�U6��>��!IR��j�3�β� �x��z,�3�а�_;����=Z�'��*���d�.+����.�UHK��k�QQ\��,\��a���-�h�����V��ęb����FO�]��D�!�� o�0?l�-������G�:Õ���T��|؏�v�{�����8w�I��!(v��ۀN�%4쁙���I������%y �����?�㕂�u����)1��(oJg�XQ�Vπ۾�b��W��*�+Ȱq�م�th=Ե����� �- ���{����A!���������������NJ1C�FU5v�U?<*�(�S��?����B!��5�U�0ͺ���pQ��d�Zdb�~�{(Q����L����7/^O�XB��������3fM|�Zd�TR� �_l�����ѵ_�,��ثF'��+"4A����)u���T.���h&VI ��#^Oo��k��8A,�f,(�T��U���رl�������qA�h�yM/c���<w��d��T3�m%K�N'ó��#�C��?O5�����Te�� (�q!��S�h�qZY����Si�@\��x"i.�"JcX��c�������ɻ�C���*N�B�3c�ٯ�{���l3�[�E;�/W��V�B��/ A2I� ����MAF�(�,�n�U�X�e�~�U76{�u���p��#jt�<��4����8~j�Çs���d��C�|���� �dd���T_ĩ�qH� 6��l��Ԉ��qzt$����Y��oAc����^!������?�>/�_+����;��2�B��3\�Մ�_�[ތ-����=RaC��!ȒM�R����&"�_�&}��PR��9%�vT�yV�W�:�b#�Ө���� ���1�p�I0Ts����n��DjӚ�䋖���Gl̢y��F�t�z��}_�!��u*���ҥ�FP>mm�x���ک�2�|,ae~ww��1)-\x:���o��|%��Yo)7J�W�n�Y�-dž���N$���w[w"d$�&���v箅_&����ȑ��S�O��H�<1���5'n������������1a��M���0��q��h.C��9W�-M����N�f�c�z������I��_��f^W����)<���Lm�#�Eۦ�JR�҇.�������V_�zRH�E/4�F�{��A�o��i�������0>]G+e�v�j�K����L"@-W40���Pc`����[@�xk *SV���§l��' 9���,6�eb�0L�-�F#����ߚ��=C]䋒n �H�@-IJN�N*CXé�|�?�.����=^� �p�>�c�DR~F�s��\H���fAJ��u fl�G��g�ش��S�U��/ŒnjO��A��w `,���)*Zq3��F���ٷ�T �^Yy~= ��l{wj������`���AD�qhô�#x��>��ST��*�P;ϰ+��_����kA��"�Ƹ������x��+��b�Ϣ֝�O����[���{B��kE����h����ğ����e-7ۃ���]9�U����4��d��|�q�>E�݅��^����=�%'��=cevN�$Y�i�QGOL�i�����/�i���t#�� �o_e(0�yzw��6iz"�[�;&� ̣��m�m7���x�u���>a"��S��8�ӻ��"��?��a���Y�x�iUw�D�y�e�Ç:�2����18�1��5�����j�C���h��%}qp<�Y��wD����}��`����A��F�+ӈo?�K�w�������1yH��۫w� �>�c-�s<�k��&���*a�H�M��A���Ջm��Q��Md�i�/I*m}Տt����>T �f�83��+N�&�����-2� S�ߢN�Qg#�����@j��#Snx_7%�@�}��p���� ��,�#�}g)K*��!i����˫k�O{ly�tU�5�>��|�&g�7��p*k9+4����h�� Y���v����z��D{�Bq�)~ K��u[��d�b����ׅ"�X�9����캚�T-'�mx^�Q�閳��@W��vљ���&?{b��Y�Г��3d P��ojw%�VZ�a?U��(I=�u�a2r`~\�ϓ�/����V�푴�4�UO��4Ddм(.`մ?`*^`G�[ww���1DN��3� ��yz���Ԁ�)��рS�� ĕӆ�X�?����� �b�_j�O��^�7�� ީKM����������� ��E�W�Ȇ���(B��τ����[w)��H���� h/��Q�cDp�[pB�T���������%��Y$ϸ ��M;��J�0Jڿj�k��{�@2�t�{�X$Vq����( ������Ѣr@ŜEUe&}��tB՜!��A_eObi�A:TJ.N*m��ڃGdb�G�}���ܖ�w���Te����X�%�3��{����&���yo������L6Ą9��8��٭�����8���o��K,{���?{%����z��cR7H�|��t����fr `���%k���!��ӹ 6MtַhC_��\% ;������tѪ怊9 |lJ�$�U+tJ���'�����D�.*'����eo5��B�S��v�շ'�~7���3l�q�/]�;i�#�:$aL�j:=ޒˍSu3�cJ?��J�5̱�)�� �M� A�h[%K/W�Q�[��wj�������kX�#EE����(�P���������9�j�rv����Z`�%�7�R�>1���g8o����e�T|\�!~ы� ����Ƙ�B�i��ߢz�l.��RI9&��AD)�� ��3���q���Nr�e���CKo��F��%�3M��:,�5��ـ�a�ˉ')0���6<U8��h������^�!�`��4�a��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ