Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
4ff24467bfb4e60a305335d2c963b8a5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4ff24467bfb4e60a305335d2c963b8a5.exe
Resource
win10v2004-20231215-en
Target
4ff24467bfb4e60a305335d2c963b8a5
Size
1.5MB
MD5
4ff24467bfb4e60a305335d2c963b8a5
SHA1
45ff9bab21a2a1ab9a27fa3ea148c2e269998f01
SHA256
16fe5e0ae3493b0e5b6f03c32d63f388a8bb457b7b6a7c2c350b43cad3043c58
SHA512
c63053c6abb4c2a08536dff389cdc457d2ca00abb7e5c6be1e2a11c86dee154591a922a5213fb493d09fb686f35c7481281894a50f54dee5cfc45b445b390d86
SSDEEP
24576:e8lYcYGvnbx6i0Ip/JHp2VSslzFa3BU8D6erGOIMlYGaTX3336EFBPGmdtHIjkvn:vBvtP0IplAFq6eiOzJELPGmbaGN9EOD
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetStdHandle
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxW
CLSIDFromProgID
VariantClear
8Q�mgz�v�Ǒ�$�]�#��#���������=ڍ݉Q&J��� *��W�i:c�����榠t4�3h���D�-K�[M�b�i�3a}��<|s�R���ͣ�r��gz�_y��K�}�e��Q�v�!f��3aX�H18�dx�K* +M�����Q<�UƲ%n���M���X�eN+���(����@~�{�'a�p���k��*���Z��1%�"*s o��"�����bﺑg�������M0�wv���>�A��S1ka�0�å�oxCFG��~(����4���Q��N������ O�g�EQq[2��6�^4pɵK���X>��5��}dJx��V�űf%����d���v�nw�O�s�u���n��Xz<�ō���{!�F�Z֯4�A��㟮���2��Qs��3�_�� @gx2:�0���U[��33 �^����R���2��br�aY>I�X���^� _�ܮ�L�r�ᛁ�z�2��U����@�l�$���%�Ӏ7�8"5�1�9Ee�`���}��Ld�*Z(_m�W r��e��F���%;�X%t���^,������~�Q�*�Lz�=��W��m����"5='8$eM��NzU���~U>�M{�z���iH���erd����.5u����rP�v�L����"yū���J�N�g$?��� ��Z�mγ�����;��iw ����ۃ��Î��!Q�50<�U��i@��f$�e����;�F9!W�VJ�=�{�K��?ƿ�g����~>s!����]x�-ɠ&��F�wt1�^�����L�� ]�=m�r=I1�OLz�I�U�� ��� �f�5�V�Mp]�ᰴMo�y�Pt!�j��7W} +��wv�5E�$���_��1����������h0�"����:O�jН�<�wר���� �wʉz�Q����M Ϯ;_���<����r����Lz����;P�-����z�3��M�_��8 k�h��r��.C�qs��@ �G8oyv�rk���_��:�g��uv*���l�%}¾�ز_H�:�b�'�3lt��KO2`j�E���0"ʨ�F�anD�O��h*'��ybb�1!�F�2�w5��8MƛV�d����+�;F���0B~i�Ud��R�M4�%@��i�����6>��=����P�#ݤ]�=�;�E>�_��� ��D2�<���Ej�?����wޯ�iǦ����F�|y\�C��(��m���ϊ� JJ�L�M)���s��\˔T�h�z�?�XpY���9a\{0LO"O�e���*o�Pf;��n�Q����c@��妩��+;���~&�ar���?��^�I���?V d�6{�U���<"Y������IoE� �i�2a5o`�]A�r��>��?�x��`Ljx���Z�� ���P&nJ��Xs�#��� �l2\osy�А<勽���m��{3�/;�M5)X"ع��t����V-���j<���[P��+��Pt2*(\ �I�C�6��=����V�5��Ջ?ʜ2��G&N���q^?�Y��j�3�'z2�<�ޮZ�_�J? e<�f�K���u��0`�]��LAZEJcr��9�1<����D����i�g�TVa�����¥��T�!�HvŰ_� �Mít��Oyʂ����d���X��x���G��� �R|�ڟ �\Pg���H��V�wR1�@n�݇ �H��#Ѩ�]��E�-)����to$d��(nګP�eD��d�ʜo�6�������&���#���hF����c� ]��^g�"ۡ���WR��Mw���B�DN�c���� X��G���҃��1�m��Dj�DŽ�rL6�������2oOyL"FA�&|L\d�K�� 1��K��z����z�� �����nC��a���ڌ�a*,�z���u�#�B�����d�����}v"��+IބDk�>�+���\�f�[+��O%�k`���L�X�H��y�B�mӯ�U�}*��I@�����;����5��N������~��1�$�rl��N?�s T��@�>��l��a��v��,��HF�_I;O�&�@�:ՙ������orwQ8e$�:C�o����*����7!�8�el�,�B���ޛ7 *�$�a�Ɍ�-��Q�0�f4xK��Q��=1�~}u"�t��P��k� �~F�;C���Wg�)�����j5;�k��(�A\��e^�%��o�qF��Ԏ�Ξ�d��Q@Ճ=���T��e]גCkx�����nPV�p%D�ܵ+�cOK>x����CG�;�z��Ok��n�NJs��*�� ��f<V��A�{�a�u�q�[�/����jC������-K�� �=�.���`����K����/x��{k_G#i)��݈���/J�����%�>j`wr��a�O�����0���>��\�~��s�X��"�tA��\t��i��N��p����Wճ�%K+<�`���pθ\L�|+�����E#.z��=R��#|�� 9?�9�ө/��p��b��%����[P`�%\u������ 8Vo�,�+( P��W���=V�1�b1g]��"t�A�� U_4{�r�ih#J ԟ�\�N��Vm1H�c`v���&%���b*/�������7"�q�7S�c����j��&���ņA�`�`��^���ʺ�U�����J}:��݄�t/��#���j-WG��3���<�1�k<��O���)]����x�D;�z� �+vⲦ����?.y-'�0�]%I?��ȣ)t�5�z8�"�st}}��n�U��^�(��|ݙ��q/e���Y�%��f�M4ɉ,�*}AKy2���!+bm����thh�1��M`�s��+>Ş�R_�ֵ26(Fb���2��E�s�����ξ��ܧ�"Fʏ�e2���Y�jL���Pn_͙�6d�>~���] �R�X����- /e�ٿR���Sz6���'��"���J�aP^T=b���z�����> ���fkw5\{����l��=Ǝ{��й��c�KԀKu����dž�OV�B�~4�I�_�PA97��OB{�:��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ