Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
4ea033db4010180bd84d4825dab5cc82.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4ea033db4010180bd84d4825dab5cc82.exe
Resource
win10v2004-20231215-en
Target
4ea033db4010180bd84d4825dab5cc82
Size
1.4MB
MD5
4ea033db4010180bd84d4825dab5cc82
SHA1
f2bffc1fd7cc4e90de7e7ba6680540c2af27469e
SHA256
24a0f3078bbb93a53eadc81cdb487d28ec7eaf1e438b05b7b4bec2bc1ce40957
SHA512
7bf9b1e5ff63ebcba1598b45d17037cde3b273f1fb87984f28c7c63722aad78be2b803c11a242425861355f47f792d521e71c14bc34a7424350d0f35a8876ba2
SSDEEP
24576:uyrXGHSjuuuMTw93mU5UP2V0NwCGczXezbbnMTwps2arAMxIe8Co57isJeJF6rY1:xrWHIZ08U5HONcBfbnqwps2pM4Cg7iss
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetSystemInfo
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxW
CoInitialize
SysStringLen
k ��Ѕ3�5����fX�����>q�Ɩ��K�(!�lDF��RZ:��3 ��@�ܼP#�:{�怱���pߣfᓞ��ו|�w@gq����mf���ʀ̷8��9o�1���'8g��%�{�N^�N �.n#��ff��8@���/8�̱:�u�]4���I��2�f���p<SO����d-ŵ�F9ֆ����5�� ���Z`$ǣƦ�g[�r̢���=�������t��y ��$��pcv��l�*~�W��w����'��밣���Fd��]U��<��RE����K��zaV����'/?���Dx��g�~f��$�}ߑL�ͫ�l�Ĉ��H綤$&ry0bz �2G��%��&zO�YRN��U��P��y��{����+�Ѽ�/��h(&_ֻ>4�lH��|mf\j_�3�'ǽ�A�ta� ;�{ 6�=���FH��p�÷p)t�Ƹ��h�Q�*�Bë���α���T��&����<�N�I�rfă�\���)9rorǽ�P}�ϙP���ユf^���"0��ܻ�D�$Wa�����w�7�St���^�kN^~���q��IS�4������ϩ� �'Q�<2҂��`�{X��a9�����{�D�N5�����9Ak�phD�~ �C�Ft�]�ߦ�1��)�d�1^�߾7� �ʱL�N���+�6%k=�˱Z/�\~�}n����o��gh�����ߓ��lM5�zF�G�2_W��g�=|)��u,������]\>�����Bz�|�+��꘢�h�-��������<�36���ˠ$j������ �D�D��X����G�D����vS�)m�1�^���f�' ���J,���+݁Y���`s7d���D�G9���`5tBLv�����~-�t:��}�����#����B��;N2�p,�$=�LR���fT3.I!-��i��PM��¯O �t�7�9�v_���s�T�s���}��E����[arXp��O�l��Ħ��1���A��}:����<VN����^O�c�%��7������4� ~R�Z����~{��@�w5�/7�DY��i�u�%��pأ�zw�k��z�����!C&cU?��U���@��l¤,#��4yf-% %�1�Es�M���*�\�Ie<G���� ��(������yT�;Rn��'u��<R/t�2����~ѹ��0*&�G�c���V�$_3��_���z���\Vpz_���x�f.�S2�jN�13�t�9���KN^���\��-�i� D5k�Vۧ��� ����8�C�"El�M+#8(�"�P_���~qj˵��-�r���n�ħ�Г�4*�d�3��Û+�������0�Jj:�� I�=��m��yI'�&o�1T���=r ��q��7d�����K&����V��(��Y�\tDꈾ�a�tk0�6��8#�__�rZQ��\��zU�8�s�a ���.7M�*�:�S��W��ϻ��XG^?�C[c�]r�Ѯ��������f�v�����ܛ���X-g���#uf>�� �G��[�!�����/�1b��*�ŧ�����߸��{e��=���hO�bKU1�c����Y����$}%!���v9�Mxt�DP�Ș�dH4���H�!z�?�)���(u3dجG�&���5��-��L��ܱ�B�ބE|}z���-�ع�ѭ�O@`�T1J�B���l�]ܟQ� s�$��\�a�� S�ⷥo������t�b�)`Ĝ�^�P�h��9ݗ��5I=���:�~@v���G�vEX*|������J��E��r/㨴Aj���CpSU��l�:��dh�|@��@��n���O� �t2Dl.0@�g˺ ��� /���}&�����T�,���?���hv��s�.��X1���Ma��8zi6�@�!��������`��לRd�₿d-?䘖D��r��e3��Wr:�f% ���!�F���<�[)>�mȹ�u���h0����ܒ���M%%q-��H�V�'����(�[��E �-̪��cI���[�X�5D���` Ŭ��U*�����$��֕^��nJ��^C�M�28S5jI�g����N�+k��5J�n�����gҧ��r,P���so�����!.ކ`ec��"���PǺμM!���<$�%�:o������`�[�$��E~��K�Y1"��Xm`���g{���rxE.�=_:�=M�����]s8N���!���b�I,�_h��5 ob鲒yGH6����>��P� �bq2%�Sv�]J���#6��R!��~/��C�i�|��G ��_��6�����]>�\�O��&���sr�Q}��n�ՔQ�V�7&e��HZm=t�������W)O��\�g���%���{@��\Xp�L�ط��`��~��)@` �G���:4�X*"��������js�mW�����1���Bˇ���I���+���?K{yU�y3���I��u*����70�܋Y8�6��`������Ŭ�v�ʐ�o��'�t}��c˭��ob�"w[�����]�NK�������>z���|� ��� k����=��2ƿEz����_v�Du�3�V�L��[O�qb&������x�x2:�&��ët�v���%9C>�O��,;��f ��UlloQ�q�b@e�A�wXx��y��Ze����E���^�E�}��L#[MH��.���5x��)��լ�,�@��\0(�Ix=S��y&��)�On���9�S8�lg��R&�n���}��O�6�q!��܉�3�@��=���A���I�`�����W]���nĔ���R3O���-b�h{��F�'<oT髺�j�H���6b��Y�|qg��áb��K<��`l��� !"6ili|�^n��y K��e��Q����H��=BcP/�����m��O�f�a��@f'dD4Oup���b�]��&����� ���B�ce�� Y�џ��Q����4���J��0/���&К㪠.�w� >1IǺ>�h3�y����p����ې#q:��/����x)�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ