Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
31f3688ac2f010531bad30f43b0eab83.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
31f3688ac2f010531bad30f43b0eab83.exe
Resource
win10v2004-20231222-en
Target
31f3688ac2f010531bad30f43b0eab83
Size
1.5MB
MD5
31f3688ac2f010531bad30f43b0eab83
SHA1
b789d89446055acb13e5d68e1704c1b2b2444be0
SHA256
20502fcfe297bb2e61eb27a212c5009f22ffcaad333044bc9bb4e977753694fb
SHA512
bb80e6056af53fc08434a609c07d057e74a90cc7ace67c143798a34ed4bf3580e6d28219188bcd7045ff20bed2a48f9d70e3d5fcfca670f96aed12b4d09df364
SSDEEP
24576:00hU1bZaO/qn49icz78Qg791cu66NCWZ5lVtXb0IKd0polxbbv8mZ0ETbrBcVN:iN/h9vz78j1LxHEOmvbbv8mC0Or
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sleep
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CharUpperBuffW
OleUninitialize
SysStringLen
�Z��>M"o(K82Ur[>�ƺeD�X���5�x���RW/]��z��3 RBfߑ�7���㟊��R{���_~_�If=�Ԇ����e<f�:������1.\s�����ш������d,b"�(-��>c�S��x�q�4�����c.A����r�B��7�oAq�:��H_Yvج˱�3�5�R ������u�`�� ;&w�����X,������;~��cU�l����e�����{0N�INQh�\;������@����s�a�ԝӅN�N����JAn/��<0Z��A�Wl��*[(�$O�������?����� II��9�>[��ۥ *{F�ʙ5�s>RD[��M$�gK�1�$��]S-LyO``�wd��D����� )�_?sk/�|蚞�)�S��g��':!���\�7)ⶬ�w�����F;q,IW9��%��M���z��dlX�fG�p#�j��6�oD�Y���3��@�m�]gh�P2�"a��`Ό��Y<פ^�I���4���5��+�Es�@ho>�'M �&�d�P�p�� P@�ɔ.��q\!l�lDA��F����D gjl��B�0N���!]R���6/ ����DW�|��D�V2��a8���qf�4d�ئ8���<Uv��?Maȱu�D�tf��xT���f%��"�a.@#/���Y:���טA�� 7�<��X�1��"#�~v&���\�zd�u4�,�$#^'C����~������9��^�nܦ�r���/���-4Şݷ�<�=>�����./�͋�u߄�T��^�Yb�P�t�E9��!j�5l�EW��2[�s,j���b.�\����s��N�W�xg����,���٩u��.�r�����u��tz,Q���~ ���y ���[l|�c�N��D�Dͫv��ekV��mG�"���>�dx0Z�`�q#����2�gɟUG�|��1���~�_�uv+ū@�<ak96��&��j\�@qz��3�I]��������Kq<�w��X#j!��a`E�1�oy%F T1�{�,�Nr�g3�fIl�|�9�� �ќ ���(w��{�����0��CT��QĿ��2�ܝ�t�=48��Luq�?�Kp�WrG;�ي2��v�|j���I����.S9�d<�rƣ�iw枽+�UںIq�-Y�F���ss���ֳ9ǘ�囧����=! ֲԘ���r��Aϕ�I�RM=��A�(����5���.��#�X�`�+�~`Cf"q�S� \�Ԯ��F��~")�/�Q�3'Ґ�m��� ������;�>9��k�^�#�I1@����a0h_ ����s����B��Ze�VND�z�/��x|!�;_�ųs;�+ϫ۾����S��C�&��\��1�)��<���Gi��j�5�!�1�:u�U��umagc?�^�5h�B3�~�D�Vr��.YD�`k;n8Z�iłJ���G&E"�?fL��W�za�5��M~"!�g~�Y�{J�^���ڱ� �'�(O�z[TzYi�} =�[i�]����5�|Ĥ��eQ�N�� t Uj�eáil�R���÷�?J��W�S7��eGo�(�IŜ�x)p����ש�`��߲g�k�*����T��5����wUn�F��<g~�4[�3 )�ZmC4�_����x�����[��4���A�q�������/����H(�����F�x:�S�(���>��t!E��g��f2kB��).����R�ݧ��Y�O��D���^[���f,�0�{����D�8�"|u4�$����F!t�*@[f����X ًЂ*6���hG��謔�0��Q�Lj�G�Md�'ӶI$ʢ���Q��1�UC�˔Qa��˄������'�S�m�X�qcp�S�T�X��> P�05��K��?{� �>`d����^l���!w��9g����5���R�i] k!�,>9Ţtw����'�1iݖ'O5,��T�Ub%�M���kY䈁�{?;`�Z�T3�贈Z�DffL���������X��+��m��(�VڗW�g��=N��)P� ,�df���������M�?Μ�Dv�V�ű�bl�J}����ӗ)=re���{�J#9J���o�\$��.d�8�uS��M����.���8���u�B�viT��O�[^ʣ|d%^�㟚Ʒ����i��h$�Q�?��������H{D�k爑���?�I$��>���W���O��E���x��<�G�2�UL���&�3�ğ�İ<�ja2d�|�������niUUWlHX��5b�!���X��1����������[��������C�vu_����Z�� a?�rW���BC����J���W����57W�n�p{���&�+ؠ���7ɂ�KU�b_�����StS�x�8��L�����eO�i��d�u/� ��f���C�t���OjyԿ�N�;�����&C ׄu��S R Z���������$�3�2��/vH�O�05�S�����\�b4ODz���X]��*#2Vb���~U$0X��"�Q�Α�1�����At70�����-+�p>��T���2��ii�"=�o~8�}w���� A+�����P�|��F������rS�l� y A���0��P�S��|���y�F1�R��!AH�)(�� ��I������r��������%��4hO͓f���QŘԇ���w0��ӲҦ`k�@64�� q���VƸ�v��e���� �G���GʨF���%jڀ*L�D?)z�Ak��1pf����� \��-�v��d�S�4{��]�Y�3#�l=����J�������.dm���SR4���3(�tn��5������'�[S�A�G�s�L�q��z2d}���6_Ù&E`�.��NI����YTڬi1��p��d>{a�R�� ơ�\u���C�x�n��fN���pxU�=����*�k�Ϥ=����� g�ߨ�T��� $��~��#ǰ.�C���M��fR1#��>�8.kک�3����^lm�q��H���S��<���ߜ83
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ