Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
37e0d08c67a17153a7d187e17fcf3d2d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
37e0d08c67a17153a7d187e17fcf3d2d.exe
Resource
win10v2004-20231222-en
Target
37e0d08c67a17153a7d187e17fcf3d2d
Size
1.5MB
MD5
37e0d08c67a17153a7d187e17fcf3d2d
SHA1
521394ba8fcd9ac69989f822df75650c13744210
SHA256
1157fe44f9d035a26428212e7f21bfac88b06d144152332e065f22d20da7e42a
SHA512
a9498c7233db5fde011719a6f9414a58e9ffcd1b12355d72b89158033f9129a6800c422b1d15ddb7fd7685b4c2ecadcb3b5974b91172ef4ba6ffdf1ff47ac7cc
SSDEEP
24576:aR+5XQdObF2xWgoCijVHy+y9WDcmWRWpvrIXDMVA2HavlGXyHE3dPS2aJ9dF7XkH:rtQ0bFBjZtyUYm8AvrrX6dGXPrOd5XNW
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetStartupInfoA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
KillTimer
CLSIDFromProgID
VariantClear
!1�n�&�C�\���GIk��[�4 aj��1P��%�]�x؆�Gm#ZO'��� z u+h� V�_0�����덻��g����R7섃s� �QS�\��Uax�9Df��]q���'9؆I�J�-��E�2ȷ�)��/�ճJ�p�xo�k�dM�pG�n� ���A_P�"WG�9���5� ��t)vǜ�˒f�������� �Ac��F�Q���M �ģ����%6�Aᨅ��_�%tFg�`�U[�S%��(�'�Ko�T �������zg�N =N�;�䯕���IYB̮G��r��F���y+�<ώ�m1į�gj�F�/� y�k% ���fGI2�Xο��k8���\�_0pg�z�A��^-�J����c�2y�A�Q�خ�4E^y�5������%'��h�7DV�Z��U�n�:6���i���R�r^�0a;F#��n'�e��7�.MQ�U���8G)��tR�+G����P{E�Kg����ih�4g�� �wd+�p|d&މ5�[S��\}�?�H�"�R�Fבgh�"�\�oQ��$/���곧�P���l(��3b���ʜr'F �.���p0zn����^���(���[��^�I8ݺ�f�o��]!�$�蕬�� ����6VR��r���������a��\�Ʈ����'�}�A�B �v��&��j�3|�iT�����91k�#�?L���]O��m�1�os��u����Gk}$�;RF{Y�|t�Rx*7��6a6S&��f�uPS2�1�o���fD�f���@�7��,�?���<U�A{�V�os�v�P��`����9Kz��S�4ɦsϟʍ�P9�����s����Ƒc��%��PL�Q��|d�g�z��z�EAr��A��V�|&C�R!�x#�b���;�}����20N�H��f�s��Ju���B;���ғ'�}]�����=Ϗ;��'~�`9ÿ0������d��'���~_�%��M��)�? ��v���Bg��H��l��)��,��A�ow�]4������':J(�q��\/��{z� Z��t(uJ}�T]nS_���+Έ��MV ��/���&v��0j�G�B��z�[j�q9cȁ 4��f|��� ���k�z�Y�O�-B@~�k��թp�� �O� ��n��k�]2���D+E_ZH��)1kJ�[��bw���'0���b�'� �֓fN�x�[�kc���R��9H���3�_{�N�"���&RǐCE����}����%��0�~8H1 �T��rvk!3���E���&akE���D���c�R�Lq��T��O���Xj����z?�e��~��ȵ��;;UD����?����76��6>i6P�(��E�Ќ����ণ�HʈT=FUw)��<�������;}%w��dk����nE�[������w���]]I@i����ܵnq�䥏O����N���P��8Ȱ�6�p/�����&��tW6;tF�vOV*�Z�Gо�wp>�E��#6q}�K�tIl��:���1�)�&��^��h�x]���_��w)�\Z����1A�T���h�]��)ޛ����]�k$�:�SI?�T0�$,l�������'n���5����z�9���YK�?E|h�^U�Ks?q���"bv�f����D�{��JG|dZ� h��pc���Q������,о,��|^��=*3=�^k�eI�y�m rO�aJB�ܵ��-�b�N�O����ٞ�N?�F��6�p?��!�_1�x_�N��@�.�-]�FÛ�Ɍ�����t4ɤaܶ�����3@Z��t7+�թO��e�.��/'kc��d6�x�Z��s��S���z�%�a)�%���9t^�Tk�n��a�Z�K��X����D��c��2�V�X߫A��A�`����x*zH��٢Y�Kt�w��P��c�ơlX� N�!�'1m�YP�ڹ��/���8eX�)�����]�[�O<��A�w#�t�a b��-ZC8YZ�H��"��}��Ȁ(զ��� � ���{I�"7m����?('���˶��������1��?;[�zw�Bݸ��,Ok{&_�ꕎ}���)����]F�2��f�r߫Y^�I��2)��X�͑�[,v� _���^������v��'0�c��^R�| \bm��K��c'�h%Z��)���p厓7���G���� b9���!�3}�2!6�܇ūEc�7��V�8(��L�>�-���9"z����U�T�4T,�tei�x����sz��.���g&,..����slAʡ�k� Q�9��c^�Z���Qb��`�D�e8y�{�� �蝔T*����q�����iu���İ�E��J�bń�ڹ@�!p+��Jv��J��C0Rfhor��~˧�n�QqåT4�6!4G�U���O�> <��[�T��?�C�X���y�z(���C�����������K;X�`�6� ���/U��[&�Ky�ק�רWj5�����G�&���ݲE����Dor�����rC�)�`�0��ƌ���V���ʏR��-HB�;k~g[Ս����7M=���m��-Ł���f}��?<Ln��w"�fD1 ]Eh,���t.b�\LDLȸYȏ\�^�~�� 0`����J�.1�H���XR�XyH ������ܽ����%�U��W�L%w�Z]������dЕ�Q��u�]��C�i�n������M�5�~ N�@hY�qm�T��¡I0�Ֆ+��2��ٳx���ẅ́^`��SH�tn���p`/�A/I�LL��`;� K�pw(aƅD,�\0����x�S��LAF�M��:��7a�Ԇ�U`��+��Ɖ���ȵ�����-�Y*�Ʃ���ݩ�����np�G��GQP��XY� x�}R��μ�P�<���=� �}��K��Ʊ���1�;B�l�*% )̧ћ�����N��-��f2�iev7^+����ğ}�ⷾ2�3�W�����IF}�O����lrd �U'�,Ͷi�U]Vz�������竒%���������t �,���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ