Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2f562fffd91b55974d2ac258382f045d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2f562fffd91b55974d2ac258382f045d.exe
Resource
win10v2004-20231215-en
Target
2f562fffd91b55974d2ac258382f045d
Size
1.4MB
MD5
2f562fffd91b55974d2ac258382f045d
SHA1
ace1654f7d2f4d37f68626064c59ae66d0d380b6
SHA256
156943c3151e517f4c87ad4934759f4b504651272226e64da72f4f1bdf89436d
SHA512
90ee7de58f9012a5a410b4f1ff0d148c0106d450706b2aa5c6ce27e71ee53718057681dca238f27374766d5a389b83e516664fd3eb6184aeb2cbf09b7d9b9140
SSDEEP
24576:/VEQcgfuCn2hqhD4i55AoOjBOYnKmz6CbHf5kvNeI6Dmz2hIGBHtSCLZLVb:/3WCni3pVOuKkHfCNeI6DpfNvJ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetLastError
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
DestroyWindow
CoInitialize
SysStringLen
�#z#q}�V���V���?��f�X��1�:Z��B-�R����v�IˬwШBx�_I-�i���Of��S*��jD]�A����PG���c�E����e�>��V��Bn�#��r4}��Z+"$��l��+�d��[�(bv�?�Ύ�=� �� *{��:7�3q��2�0��iµ��c�2-g�C/Kk%KD�訇V�鿾�κn� 0��Q�i�)�cr�m&{��Ç�qi��O��m�?�n��qƢ4�����2`6 ���l�p�o<�>Y���Ȍ���\��?h��C�^Ǫ�8s����.A|�� ���Y#�k �;��n=2 M����e��gk�� W���h��N-\�?Ͷz����j.;a](���0ү������L@z-|���ӄZ� +;!�%?tHҮ�B�Y�E�� SP�Z�\K|1Ҋ�e3�?*Qs'� ��f1[k�(���uW�?��'��ǘ�I�- Iw�6 ��!�RBږ��=�uO�v���k;om��ΨR����S%��@�P"��՚Jn>�HVB/q5X����ңtbƕh���/��zKN+�t&���w�����(k��x1�����y,��� �Y[G1���*�E�v~E @�*nQ?��A+w�秪1�=\M�<d�L�rx%A�kͼDSx��w�1C���iㆽe'H���� O�\��^�v4��>� ��\yd*A�py��6K�S�a��)�`J��� �^u��� ��#����Jw�N�M!��ﻡ]0�~�T��B�m�d��%�I��y�+o�.��g��K�V�y���P*'���^|���:�m`�s"CB*�k���A8���F��J���(����4E��2D�;K���V$cJ<�ۊ��[܋�M�Ac����f�r�Q*qQ!F�5)������i�9_�XO,-�O�lf tb}��� �Jj�a��w𬆱6F�#v?e;����M�,1~Y��:�c[q��|̫ƌ��FKL������❏Q�`�擣r1W^r$�w(����� ���{y���(�+� �y-Yd��3ZP�q��}?�����Yc퀙}����"�&r���88=�a��9��W�k��qKd���/c3/#�-������ �G\5��_C%8�k�TL�6�el~[ա7�lE��_�;��=��ׅ���E��A�P��:�e�:�O�n� ��TVw���%x�lӳ��V��m�E��8����t�S������5c�Ld�W~h$�+m�56ҙ�cAr��θfڴtڊ�g:�ե�l,�dK����^'��d'�>������:�!<��S�M<�� �4F�p�r~��'T�R�tQ���)��e���)Ae�5x���f��n�[y ��J���K:^�����{K��HA?��kپ�*�oAj����͕퍻@磗�E� ��j��z�����@�{�g-6Ip�;���0�m�X�[H+��Sf�+�=ԔZ{�?��wBF��]S��F��8��XiѰ��Kc1->��.t �������q�H�[�����)Z�g����.tO����q�%A���t�Nm��Ĕ��mi~ы��kkF%��O��b>�Bp�n X��\adP�����ӶX ��~͆�L7�~�F��9�3�g�yg�)� ����6iu�"�%W#X�{��0�\C]~9�ۚL��N����Nʺ��kr�s=�-��e�n�L!��&�l��0�y!���v>'���[[} �B.F�Åa9�՜��m���}YK@�4o�����(���S��I5ujӂ�[�mf����1���=�dUκP���T6r�k�a�i>����/���.a<�v�f���qZ/V=�gh�̅/�ǝ�%Ƶ�� >r��{bC2Llį}�ӊ+}�}����s����!Ď��j:A�Pj`��������%�C�W�n� ����+ʹ� "�U�c�������V�.�]�B�Z)�[�v9VO=�z0Ic���3=�jZ���r|\��QY�i=�䐚��� b/q��LB�>}�b�cT�n#�1�Z��hc$k���<��]e�k��ZCVӅ�sVi�- hh�q�=�\���T�g����6���F�ַK��#(���s�|�`2B��7���@a�$i��%y��Q�#�+�ʈ-�1�U���� v\q����Kd|�Z\R4���P=@8hv��+�v��H���/_vv�֝ ���=2����)��Ԋ�i����sУ�gP��2�����^Pm��+ҟ���>0§Pĕ��M9kԲ�o;��e�Ӿ�!�Q�T��G�1����=|�t\�pq�rN���h����JaTK[m�495 ���籁A�?$?�,�����5;t��j���� *�2HF^��j|67=~$��K��2�0��u����}� �+�����{`90���u�T&J6-6�F���G=���Q��ݪ����H���z`���0t��+UK��88���bI]&z�h��͇"҅��z�0PᲢ˽p�W谬@s��0�r5�U�U{9�k��H�e�\(iH�%D��RIxB��U���>U)!DW��� �r:��a�#~ҍ���j����M&k९:��[bԫQ �M�K�}e�8jl����k,!��Nd[��X��W�"=��t��c8���#g���S,V2Բ��J]��K���D�>�So�P]��ET��?2����Yծ�Gs(�WɅ�UZ)���������ѳ{&�L�[�H@-/,[J�X�X|:��{.]�I�����L�E�["�*������B#��i[G�Q���.R��T�F������ �h�n.X"5��zܶ�3q������$�@^��h���(��e�T泥��y�� {o�0�8�h��WI�NtG�%�$�3?���$���@j�q�p����U�',p�k��B�h����ȡl��>�R�\�^�qE���J��2 ����@i]\\��d9� �����Q}��?m�[���ʛb5�{�O����k)E�9b�����Ogחg��!v�]f�DK��c�4�x�e3�>��9xH�����UC�b
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ