Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
52a908da1fa2fad4d1e1c9f97020e7e0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
52a908da1fa2fad4d1e1c9f97020e7e0.exe
Resource
win10v2004-20231215-en
Target
52a908da1fa2fad4d1e1c9f97020e7e0
Size
1.5MB
MD5
52a908da1fa2fad4d1e1c9f97020e7e0
SHA1
3d9ac42b4dd9833da4a9c72a70239b82b3513ccf
SHA256
05653798bde3c1ab5321c9d8c26de4be2ecd54ba1b7113522e718ab808601aee
SHA512
c33da83a21d153c052468ca3459ca4ffa9eb6075e06ffb6df798c1dbf39ef28e2856f9e11e24af68d2e7f5b90786f6dae73d3819baaa90e57a195f794cc96b77
SSDEEP
24576:+PC5pNIAyvuv74/NKgy7x/fruSzzSt+yx5zMemvrZEAXSqLLttWk5VQ:f174/ogylXruoo5z2aACq7WYG
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
RegisterClassExW
CoCreateInstance
VariantClear
]���;�*E�x����h�^(�����E?U���������a,9���W���9#����M[�퐻���!p�C f��b� _�mjA�W ����^�5�^v1u�=�������*8�! �"Qd�ܑt7AV.�7j̥R���G�s-�4=X��qQx�X�-��/o�!e�4�#*h߭��.j%�3oL���d�3T�+ s EP�gM��11iy��P^ LN�M���n9��O�3����^(=�:q����#mA%]���A }�#I�����!���y��T[Sv�umz �%$W�*�8d%i��?��"�E�����-�b{�=�����L���hq���z��#����������Փ��H�a2�� БI�L0Jk8�o1�߂�r4s���dg2RtE�㦱�.��#��&P��m���2`q%Ö=֞�G�q ���Vv�a�ž^~z�ѫ��@�$ V� ���٪��4�ڃ��vL7na�0��gD�ŕ�جJ��-^y���o����$�G�.�R���7�B�+v�]!b)ތRE��K��n��s��B�52i�� ~r�Ŷ6͇՜[��}��1⼘���r����j��6���쎻�ݨ�K� T�Lj�2 ����b��~�4�e�Ϝ+ސj�4Ů����K�S;и��b ��D�q�����h0O�uF5�˥�}{^��!�|4��|"���k�/��us���kz7�D��W�}�j�W�P�uq^3��topؑ�Ӫ��h��OWٔ�+����eY�/��DÅ=�s6��Z�v���!v:D���� S�%_���{|ik�=�ֺeųT�����o4��B2��4���u��'�-�>�?��C=�����p�ֺ�5P!�3Q�S�k8T""��$i�X'�5�H�fU�����͋h^����L���1��± ��;�p��������k9"�ey�X���Mj���&��a�g�r��~�-N-F�,A��ݬw����搱�[c�[i�Z�7��:iDc��`+���G^0,5� cm���ߣ�!����Ίf(\�-e���?ǧw�������\М~ş��8W�?�.5C0Ÿ�����Q���.q�Ҍ=;�`�ΰ̅]t��8"�Z��,�B���ȗEA0�86 �У[�����&�H�Tqں��^AɅ����u*M�X� vԗ4�9,�YK��"��� 2(Y�A����i�,�,oz� l?=>��:"u�6���>/�d��X��/��=�����T_���T�*�2�,�郺��9��UR��Ols �nQ$Z���&�'����G���DYU���E�dͰ�m+���Ȳ@T�l,�jp6`ȉXv%V��� qr������" �Oqf��Bf����T�yK�>�EA���d�)����^'���D���E��(��~i���g:{��a��B; �e��Ĩ�1΄�v�H!���,��B���o@�[����c���z7�+ە�������q��W!&��O)̢�������b�Rz=�:�1@�����d��<�w}RR���>�*�^�e|���'ia"*�����A�,�[c;w7�%����2�`!Ty,�q��C��;��g���Dľ�}�u=���h�^��(��6��7I���r�����h�=H�ѷp� �_���;4�*�On�/6]�v{*�0�Ђ�dTd��"�����S0�7m�Ϩ�~�z���;�Ջ�� �wq?�����ϛ�A�� y�T`�p�\� n��E0V��.�g�W!�V�dkZg沺l�8.�h��^ퟸ�2�eQ*;v���S�`�!�?��i�K�\�o��C=�����R��hB�<�Q1Cm K6��'�G, ^��:��w8!�l*�+��I����5V�<�6��uX�_H9�:�/�Ż�y�����uV�W]���D!r]���Uu�<��mJS&��l)D�͆ZrZ�K�eΛ-��^Aqj�'��w�)�+��j�#����b�E��;�T8�I�8bW�T��v�}x_I�4lfc9}2�������U-s4���e�I X�@���PY斗��ɠ:TRCli�// �Bb:�\~�@ ������?r����)+� DbPZN*��kI�4��h{tQ��na�����ァ����Z=��|�D�C�=�X�� �oc�%���4^/i=�2��p��������L�����j=��z��o�d~�,�F*�qyyB��f϶[\<������5JmEv}�|��EW�kD�.���� q��"�L�מ��Ŋ�0��C���e�H�]�����vVf��e��@��(2oc6���~�3�\-��N� �w9r�_�|)o5;��*��wϕb"�XM�0d[q���rf�4Y�l�'��Z��D������PO�?��ec������h���a�ɾ/ ��))a��4���O-�n�>�<1�tBՁY ��NO�)�Y�fM��oRr���/�~>K��j�2��`�y�fv�d�;*�Fkj�^_�& �FN���Z���+pu�U%>��]��%8��F���#V�ڛ|WVIÞ]}�r�B��F=<��͝�9��Q��Q��X�_�e��ROQS��ڐ�Wx�]~��ƥ�(Dt��f����T_%��ȼ^ s�H��(���2"%��W���+dQT�g����I���}�[q"�`�GS|]{�����We��*x��2a2q��T9� "��zӛƆ��_~ĺ�G�҅����7�ӝ�nh2O�*!_���)"|cG�&��Y���\�-I�n�`��0����I���˫�L�ɡ�^��Ud�K�dxyh�[���N�@Lf�6����-��px-��5ʐ�I#��Z� WC����"Z�3x n��� ���Z����lk�[���Q�P��\����rS��h^���xɤb�G�⪶��m�/BR�G��#��L�Ωc����!˹�����N�&�;��|fb�؉�T��\�ҙU)�B����2�R֟i/-�*v>>E���d�0=DdD#E�}f�-mjs��ۣĉ��V���x��Վ,��6U�41t"G%s�f��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ