Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
3c3ffb4225a8d09ef863c41c25b9e8de.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3c3ffb4225a8d09ef863c41c25b9e8de.exe
Resource
win10v2004-20231215-en
Target
3c3ffb4225a8d09ef863c41c25b9e8de
Size
1.4MB
MD5
3c3ffb4225a8d09ef863c41c25b9e8de
SHA1
0a7781785aa8079c2c67c31190e9fcdc98e4a944
SHA256
161d82eb277cef3422194fc104144971964e732341cc6c5f1eadd75137607638
SHA512
baaf84a1ddbbdfb9b0bdc268b3ee0c9dc1783165e3300653daef52dcd55d993132bb2d5b3f81548f485f554d752295564541e814ec6334fb5504f7e736bca438
SSDEEP
24576:BBj5a9G8kGPuFEl7r8XN2LEExpvoGuTYFHQ575l+DlKLW7MsEOAQq6TlwJHU3Up3:b0SGPS2K2poGuTYFa75lUKLZszq6Tlab
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetConsoleCP
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetClientRect
CoInitialize
SysStringLen
�G�0҂'^�'�Y�^�qK��[�19-�&©4?1PsnOB�y�\�[ǎ������#JX�adg����d^ߊl|҆� �$n���Xm����_d�K�����)���_&[��<Le�ǡ*�E���X&$5o��<������3E������՚ê�8��"��&�9�����+',��y��Tx�A�-o/ʐ[�2�hT2 ���H¦{�9fQ=\{�T���Q��wLf���p0!��b�T����D�+)����0�c��W��$~�5J�fgBPG l��˔ � ��a+�xR�S���F�UH��G��S�������F^[v���&�Ogz���������90��$j;��2ٽ(�y���6��X��A���s"��[d�)A�t���3Z3�4ۍu� �x��Q��+u"in�Ϊ�]��g��H��t%�PF�zǑnmb˄7�����FH�a��f|B[��*خ�f .� �������������U[3��~�:1M�����ThYνd�\�tAd_��W=G�`,U�W�V��|��1��| 1+Վo�J�m>����o�)�. �b��T`�� ���C�t��6�烂�a�t 3<x�rw�A;7P�Ҝ@G#����|-�Ј}�y�˃;f���,�A����z���ៀ���SP�Pc�K�C�n B�9B�>N{�����B��}� �Ө��Y�?r�&�ZR՚�1V�P5�͵�o�njby�Ax(����_0f�0Y�84i��^��������%H<,b�W��1��i�^���s�T�����[m��Į�HQ��h�y��ܒs}A�����~c<�haa�ZWz>�C5��Բ�W���D%E1��lm9�[H������ϣ]\��i)��P���X�����%ޭ~�p� GQ��|�?vom���������\�T�2�Sf�i��d��$" LXq���TZ���U� ��>��P'@�X���`>�/�u0�R\ī�S�]@��ԓ��F&q�b��Q���_8�VR��L���] ���������.�,�s&��E�3*q �?8�l�a #���t��0�F T�Ý��\i�4y)�$������$�oj��s ��2��4�n�SX�;��[a���iT�RQ�íCH�\�[%�a�vݪ.h�N����N4�Q��k�m��)¢�8Hҽi& v�z�퀶�W�;�|�7��R�q��N�>jb:NSU�vU\XMQ^����э��|���虯� ɵ U"�8A%Xˇ�G�pADHkX��f�M4a� ���X�R`E�����$��F�����Fj����d/���t�`%O���B��T^��-S� �6������y��)苶H��]EG�������$"�/>�]�����86�y��I�Nf������vԏ�K���"�@���A����\���}���#��}<�=ғ��9�w�B���'�j)��|�:~ԭ���f�oTnmcR��F�I�GJ�^l�S;>�2�2p�`�Yҕ��~�*HB���֛u�����.���'�k�j�i��M�r���6���4���.���f�����,�e�J�Y�F� �4�v�p<=��a1��ʧ��~B��;�I��9��g�S�_�~I ћW��۽p�&5��Y��}4Jl*o#˕�TF��_/ˇ$E9Jj��,,�����%�Ƽ�p��7� ��O)���Z�:ɜ�CĮ�G)�+įwt��T�+��ze>]��>�W���(���V�����.�V3��!�{���ٵI�щ�y���'H�Q�_�8X��2�$�����V���k���CY�yÌ�������\�h��\�+��[8µ��T�f;���zT�R4y��11�� q�=�)1r�{{�g��ڮ�f��X�e������r0���µgqb>�3<�����t�N��V5��t�ܐI\)[��͓����sR�ae�x�E�K��c �CMn]�XY���Q�<�^�T�x��"��r�n9��w2��y�r&L�Q[�'����rxU��+;�HZz'�����(rI�&�h��3.ʪH������} �gt��ÜR��cr�V�P)�{}c�6"ml�5�\o���ɬG2�sgb�"¨���.d��?*�s[�5�Z�+)ogK����,q�V�ȁo���Q�7#�� _� ��0�Zc6R�M�}eҡ�2�U��є e�����J��N���|����!bՇZ@��w���#��Y��#�Ë0�y��&LD���R�C��eL��]���$+�>�;_� UM$Oӹ^tKs�� $�����h�]E���%��B_����LBF��Ɲ�������k��v�[ ̵֮2Y|}�?.>���tk0 x�Q}�m5�WE#�r`�y smL����h�u=l$�տ��X3 �m�����nӾqB��?we`��L�E������<���G�Χf���%����Fs1ag4�gso8c1��^����`�K�>���f��a~7�*�-*��]�`��2Y�:��iF�7�~�]{`�Y���=��洦�F�C����wY>(�S��|LW�,)1HŠ0ͷ�y�[�@�N^�����y�x�XF�z����|F��L���,�N�+ �e�SO��ی�����p�Cq` ��-G�� �xпd���N��Na�2��uU1����.x����,Κg�f��P��3k���]l}�4�I#�G�O��� ��F�N�6E�B��u:nY_d �C�lQ����Ң��r����5��S��Ӣgi�b-�(�W�\�ݓLVD ��#�t�����㬃J:��X`�.�F��/����T�6�&=���,lPg?�@��AW��T�%pAL���dWL�<����T9Y�u���n1�/z͏��v�W�7I�l��r�j���N���%����y5��Ĕb'JA�La�+Z��8E/y��4�4�}X�&DQJD�ظT\�����!Pn<:�� "�M�`�D�)al#�}�Z�a&�K0]�� ��4�+=��ĿO�@4��@8�5��A����c� �"��(��������̰���%�j%l�a��T�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ