Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2d0d48645ecc9da5b302dc9d47a2c97e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2d0d48645ecc9da5b302dc9d47a2c97e.exe
Resource
win10v2004-20231215-en
Target
2d0d48645ecc9da5b302dc9d47a2c97e
Size
1.5MB
MD5
2d0d48645ecc9da5b302dc9d47a2c97e
SHA1
b8da3153edddc953052a043139e5e66ef86c8d7c
SHA256
11e7347c2cf93a9f890702956e426fddb48779cccfbfdf4504c3b18745d263f0
SHA512
32df8e925f505b835b2e5426bbdcf4b287a302ebc7f35bfe6a66caa0d7a23ce56fae1d0ea84f4019f9aa48e7c403801b4f57cd8a311b052aacb4cd900df8c3c9
SSDEEP
24576:i6+h6OwF9hrNopa6TB5rjuffNLxmcyXMow6tBu1k/XB61jVu6BM5sruP4G5zI+VO:iBduZov3UVLwDX1a1axyC5saP5Rc
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapReAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UpdateWindow
CoUninitialize
SysStringLen
!s�u�%�����]W#9�Y�[� �r����,\��(cLF�t��J£�T�����J��a�����9ŕ� �X���`g�|;�d��(@S$0���PG�~h���;~���bӺ{x�-�6me|g�ڮkN"�5"k��XEf:�0}ݒȖ���|�X��2�2Y^��O�:n�p� n���[x��[��6pEn}�eG�� ����R��o���cK Hb,c%�����y���]��d|��C�z�y��=����$���d]�����/�x�X&�� ��2'���`�zѫ�;����B��QU�"�} ͂q��ή�]<���� �XǪ[$�Wd6���۴��w�u��%�3b�ߣ��xܒ3�ܭ_m"ܐe�ƾ�X��B�l�� ً��_��T[wMI�C+��N� !�H��KoD�`EE%����6Q�>�~W�p�E�1��n�P>Y�q�l��BA��#�"M���{nx������Ŕ��R�����%|8I��,�i���=��C�7a�E-g��o,#G*�c�o�ťmb�6h߸�����N������I�݆���f��9[^7i��de%��M����(^�l���/O-���A�,60O?� %%�0�|b�C�9:�8,�90�|}�ƛ5n���I����˞i]��tӇ��U6Y6����^1L�90-�%��<�7�C- { es�{ W���2��z�G>�|ft�c�j��|�S�Vަl]�Aɹ��{�g�0����Ü�>V�Y/�X/0��h�!�A29��C���V��+�����$�'����f=����X��!;�z���J�mq�W��D��X��aJ� R��H��p 3�������u�_jJ�"pS��k�Q��V�Ͱ��(��=�$Vq�Q�Yr↺(�xg(.c�<KTUv��킠-G�Vu�V:���k�z˨=�Y"2j|�U�=2,�ǽ8�&G���=6$�P�P�����4����(�w�b��&�M���q}�ph0k}L���J�n��p�͑�o�\>ʹ#I>&��B�X/�����b��Du��~�� �'�5]V� �:#��F�W�� B����މl�T����}�t�y�2������F�-s���5b��HQ==�vn������@s��H�g�� L��W�C?�=���KN��&���M�g,lR}%����mn^���6~k0������Q�EQ.����ñА�~M�8\�x�G�� F:�E:�Zm�E��X `"|���F��@/� Z����a1�-��j8� �&~ ݊١�,�¯�6��o��v}I��; ���ӗ��",�e����7�"F;;��鴢 �y�i��B�R2q���P��� �i?�b��o]�x|&3����y�x@��цkCqԘ#W �����<S �T��8�\y���E�������=:Gj�La���\&�L��J «��ͨ��,�!��U��CDw���k�D�Ӂd���I��2��O�5Nxؔ^n+ �%{"2��aj?��WD|���O�lu�?�G�%�@KK.���~8��������-K�p�<���q&�sv��VHD}�\J��,��h{�5��д����s}�]<t�TO����6�S$ק��@X�+��P۟t9��P���j�B V�P\�N�-��>�|�)aV}�J? Y�N��.���Y�-��pF�4�m����2?�j�����y�B6B���2`�?C��/4G{���f��n�w���r<���hT�d1_����DZk��83�4�dV��� �pm&�M1�ܨ���dz��[��9����ߗÖ6%��1��5��i�U�����K0�e'�_��Cc���,���`���x��[*�������d��]EL'�x��upM�E�_ .�[�L>�K�>�g�-�9�z�_�89R���q���S���N�2�z��<a�d��� l,JeGp�D�o�,0�����1����k�.��`Y`a�G 7-+������ƒ�%:Mx��ݗƁ�$��w7�����w�� ���D�Yq��yi!��c����H�f�e�b� ��3.N/ˑMš� i��9*��I�Jۤ���{���QGwO���b�]�6U*��r��-l�����Z$6��m�!>;��<v�e��s���q�m�I2�u��{HF���y�!� �B�[�VHr���4�Y栋D�ĭ��)Y�*=�跤�qj���p�8{��ї�����\4�l�j������H=s_� %��'�)ք]�'xOS��Vkn�*{@H�@���椖�lL�8��X��%�y����Ob��(Xx�Po[�O��ȿe��F7P�Z��40b)Q�Zz'������,��q:�DX�;/����R�h�o[������E�B� �A��� ��wOy,���ʊ��!��Ʒ�3��y�U�K��{7YHO��nd �vI1:�[{c�S��7ӒX���7k���8|s�����_�bs�:��טa��=R�GV��M{�D�.B��W��r_�+�b���i��^�ޣ�)�av�y"r�,s݉�E��p�bJ�Q�i�ރk���y><D�(eT� V2a�z�IW!&� f�dڇ�e��4l#��1���^�s�ܭ����-g���oMi�'� ���oJ�����sz|��~~jx�u5$�� N�59&�����Q˖�������)ƭd���Y,��Ϋ�mMysu�`l��;�ѿ�r�xJ.����#3��(*���Ǿ���ʚ(�����:�Mד&-��b6R�c{)M�f�Zs27qĒ�Y���dĤw�B�a�p�|m��[r�g��*���Q��ec���{�ƻZ�y�=�h�"����Ϫ��=�3q"�b��u�f(� �a��R+�-��!�����Բ2Hdw��L�_��t4&�ku9)�o"-O�+r�W��A��G��g2��H��_{��S�쐎���pOŕ����$��Kߺ�@N94L����3��cA"�4D�7O7uݐ��I�/�s��e�,Iqt�BE�Q�z'"��V�L��-��lFe�R�\��pn���wb���Ap}͡
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ