Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2b1a38a7304cf721c0b4ac9e7b55c668.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2b1a38a7304cf721c0b4ac9e7b55c668.exe
Resource
win10v2004-20231215-en
Target
2b1a38a7304cf721c0b4ac9e7b55c668
Size
1.5MB
MD5
2b1a38a7304cf721c0b4ac9e7b55c668
SHA1
57178c7df51bb07831ab82baffb9083e656c4f44
SHA256
06ca7d8cb15137903d383fd43925de3dc63115e980c863850ccc32cfbc082a4a
SHA512
5f65d365b95a907c760d1cfc4205e7e45375beeacce0797c751f3f11e76c045223a062b7a27d9aa9335bfe647c8f00349b06770b73063f72d5e67ae6b2f90c58
SSDEEP
24576:gWO1avXBwvVdt8+UuKnTYLEVdT3OM3gPnme0aLXZUE/UyE8R01ZgMbnKUvEEwdyz:VIPC+LwYAVN3OMQPnLbLpUE8f8kZg6nr
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetStringTypeA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetWindowLongW
OleUninitialize
SysStringLen
jZMO��*��m`�K�!���;t��.S=βVb�2��D�D7P�KWO����f��Դڡۙ�� ���n������ެ#����ފ|�����|� ���,}34�}�����QkG��J@�"Yˊ���6�0��q���}��fEa>�N��q�XC|@}`bt�D�zk?Af3���|���S����έ�Ɩ��X'���s�&-2�������tw�L��t&(.J����l�Y~��B�9q�+@������a�مu _֞��9�����*���AS� X��u~�f�ǵ&1~3&�b�%UA���梣:��X�ٺbV�K"Z�_���v��I��>�Wi�x{�5����$�T�3�qƌ��_9�(�4��^J�T��3��^��j��z�-y.�@�KU%�>��?%vr�sh�W��`z��nmNR��r���d�HAR�Nz���y�^N���ΌҐ�BH*b؈������@�'��(��^Ǯf<y ���g�٧B�#h��9DG$�����4S��*אL8D�a ���w�ٖ�e�8m.ze��b�/���+b�LXu�����!v�`�WT��(�y[w�eP�uN���+�涡pM��tT���h��@|��s|���+8Ky,���m��/p��0���]�K)�,���佮����3���S��ʬ���>Ҏ�d3/���Slw���྄'����l>#ͭ��0��g� `�]��2X>��r�����e����i'�ߡD�� ��n3�<N��3�-��[RW�{S�(���P���,AzH7� ެ�� C4��kL�I������mo�j{?��$c������[��dM!�X�UBn��fJcDh��H�p@�s΄�m����G��)Qw��V��&���؏�\й�!�܇��^"0Ky��&�!D+&f)L����I����s�yS���4����73M�x�lf�A�!�ʚ�'٬cg�c�$6���t��qv�M_�|A��Pȷ�+�)S��20�9?�:�a��tJ����jB�A��f�q+-����5�� P��8�С�R"VX�@k�' :�'<F�N ��L���D�6p��a|�A#+1C�� R ĸ���L����P��o��z��C�����C�YЉB�o�%Ү�k4ロUj�Rtc��-r�A���q���WG*�Sr����� ����t���-z�L�5k�$���,넏��lM���֬-�Ho�p���C�@�Gv�>�㢳n��� �T��xVN�K�������l$9oV���f�fZ�97)<���!�f"�X�#Ji��y�����jw2�+�ga3����L�YX�1�V���v�U9u:W6����ᾍi�v�%�]��i�R��r,�͌�g�E�<��7[[�<�N'w�� yIE��!��<���UT.����~�S0/72S�~�OyނB��X�qL� u�����W�M �VX����LFojL����I���W d];��7/=^lpW�>u����5Nx ����3��w�� ��kK� B��1WM���g7���.:���(��� 橮3mHU���#�C9�#3�C�����O�U�AGJ V�Y��i�|��r�������n2_��v��I�~�=tN�z:*�xrB�W� ,����x���m 4�zѯ���.��������~��&��w��v}3Q�(�HE&{vL5��1����I��f��t2CL�Q�avoBwi<�������V�8��?ՙe�̜*$��3��������"xt�RGT�� ��#�C6���1'g&p!^xP�H�"?|�fN�*����6�T�+@���I����*7�N��̟ I�;JR��$�^̝ku�R\m�N%K����@��� ���bzv�e�94Mݵ�̎\!���,眮)��w��g��-��G�o�Ӄ�ͼ��l��GH�M/LQu�V(�b/!W���c�{���W���9��A5�D,������=��y��a�6����F��nK*��R�$�Qw/���u!b�)�Ztu�8Da݃F)��}..����x��m�1���ƖB����,�m '���S�º��g�"n]� A��ѕ%�B}��X ��������G��VtGӗ�����2F|B��$��U�9@�$l"M+���k���m�ˡ-G`Ҽۢ�<����.��u��v��o����&�Ck^; ^�2V6o[���p��ʫS}3^�b��a�W)�7�����֠�����8�����̧5�jMpؠr!;�q{0q�>��BǤ����k��^Ko�[W=�t������C���}4��+<�^�r8W� �������!�G�u���:1�:6�ND�H PV�m;k74��[o����}#i���%�f���$��;��(W7�� ��a)Է��s_���\�v[�Vb-��8�6�z@���InF:OS��(,~�C`I"e�i�J����3HLD+�[����Z���&���� ��u��3���0�h��ٰ����W�� �UܦX_c��Tu�$YHylYF�ͣoqA�;:��_��b����,��,y�!� �;RegX|Q���d�l���84zх��qo!G.nz��th.:gO*X���y�h�h�P%��_9Qu�i��z�{��j�(��ƦRE�,��]��ѳl^�ƾ3g70G�b��,$���rb�@�CZ�i��Ļᖿ��y�+�eN���f(anC���~�ޕ����D��2Ve��������3��d�F56#֑�I [xM�R���pX�jJ�Rm��(��}^7�FŦa�V�o�<��T���K]��d:��rE�Y:�o3�^p����,���AM�(b���\>��� ˥��o��e�p���6%>|�?�h�1�R�c�^7�g��ΰ̑��y�)�I��51IY7��\����=+��� ��ա��2.q3� �����P˿�`[�ɜB&��! pW9]lpu+y��*v2�I��b;�KU�mrIң� �v������8�exr�Y!��]�pk?m3��[@q_I�%Ќ8�1k%�xc�p��������}3�p�cX�'n���OD�;Q�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ