Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
5c2f05ef29ea1422bfaca3eaa4fa7368.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5c2f05ef29ea1422bfaca3eaa4fa7368.exe
Resource
win10v2004-20231215-en
Target
5c2f05ef29ea1422bfaca3eaa4fa7368
Size
1.5MB
MD5
5c2f05ef29ea1422bfaca3eaa4fa7368
SHA1
d366742bd4788b1b6ede03737fa6463152dac191
SHA256
16f819672e443623e883a5d1e9d8f97794159616e10a483f58d65f334545ab72
SHA512
966eae760794b51fb8c7330efc4314f3d6e42a8aee7c066aa12a2837fbd2b4bc50af0f54cf49049c6db579c58dabb0502a2324a6af8b22c6b5ae6ad786116bb2
SSDEEP
24576:VmO/bmDX/Q/tKUS+d7R9rq4GvFvGKyyl5CxpHf/PwfwcArALkudhsDATTXc+1tTn:VNiDX/WFDd7R9r4vFeKFWlnwIKXBBOsj
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetHandleCount
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetWindowTextW
OleInitialize
SysStringLen
��Y�_)��t�>�0��(.�s�m�W���W^����W����v�j���,�\"_��ܳ����~E��N� �k��רU����6_�.S����x�ԮC�\�^6��W5:�3����� =��0�?p����?����!�]�AAM(̗Z���5f O�Z�L��wK4�v�ΤteZ���y@8��ع���ia�8/�U���%��"��i47vCJ�hu�~�EA�<ג�+�{?���l������MEg�/��g2C��v��i^�^ѿ��́U�壞��kx�6�W1�!�^goS�:p�^��f��1��˰?�un/Rp����g24ىV��@��qǣ p ���wm�_k�2b��;�!�� &p�����6��ӎ9�!��b�٢�Q)��2<�Fv�� ���^�|�3���M"�e3��3A�5�=�k���Ipl�z�Hfh�gH�������}���t��vׁ�8��б%C��E�gh��E�d~�I||R�=0q�3Ĭ,ic�|'iQ'�<ZG���yJ�L���s�����~�j�/�������p,t�Y�M�y=��5��*���6*���X�Aϩ_��~'���}�DB��#��r< �N��Z2Q>ЯGIZ���<s�MXs���#�ދ�u�q���_T]:K�}��"hq����2<�;%�7 ���=�qJ��^�{���0�[�-4��#��Bۈ��s��Ρ j�q,u�4[��/����� ,�T�(����@�z-�ȅ�%������V�bɚ�uIs�����������ۭ\3l��m�Nc���?Mx[x�BA��yy|Ʃ���\������=ۑY�\�TBҐ��9�6A�x%�{80aOK�|;�$fEl8a$*z$<7�K��d�-��o� u��槲�kl�d�<�qW� �n{����S�W�H"��[�[��\ՙ��P/����ɏ$%z ST���p�=�wub]*�b�e��Fy`�C���|��f1� L�]��t1&6{��Q�/��=�xۋ�1�}�4j�A���\�����O���es��,���s�����P�!����{�g��8�LH�ZƑ��H���������Z�y�d��"�7�!+�C��m3��&p��k�4�����������Y�H0Wٮ��_.�\�l,��hw�����C��!ֱY�sQ��겏�. �c�Ew!-�{�=7���Lf�8I˕��n�)�����ن�ɕ6E�������$�>=���mP���~8�ͬ����� �{� P֓ �VV���X� ��U�ho�P�R�ϔ%OZ�U���K{p��˱��;j�(���q�#�[g�!O�����f1R)��<��Д<�w��6:�Ŋ��6Rb�WF�]i���.�([T}`8���D�/�����8�X����D�xh؇�ϕ�2%*_i���7�h�\ ����k���f�Y{���labn^7M�t2�g���,��G�g�-�pvT_R߄�tV����J�b��2Ӽ���o=�Lj�j%�E�mȭ�o����Ҟ��~@y�Ŗ�s�Lx����W2{�p�3�m�ǣ����S>��1���q�ݟK2�V���u�QJXﵞ�G�wp�� ���<u�a��P[�d�-q/j��QHP��bHpz��|�G���~7_�tE�ۏ����l�9��o�§�Е�<I��z��6^*XX���z��)�$��֒�f���C�?`a�Aף8���w���V�g� h!0c�BY-t)-���ou�o�J���U�c4[��L'���i:�]a>#��d�YC ��2<+o�g.�FQ�L�m_ 9j�,��g��{�������� �����.�Ew gTw�"��%��:�t:!��d� �Ȝ�����\�ˁ�G�b�]�3���{�N�x:��p����8>V�^��l`�ĸ?�,Dя�e=�L~��R�A�����NRӌ%�$��|Q6�֧"�F���������Iw���D���Ni$�%M�k_v/կ�tA�3&=C,LȌo�[H���5ѩv5/1+Ɣ���װ���U-��jq-���bUU�)����ս�#�<��ᆥ�t���_���X�Wc�7j�7�6� �%2�,@{C�{S��E�� �*����ɕ�4� ��n�Gx��}���؇���J�6�����'Ԋ37�d vIr���<�����q��%�U�v����^xBG��7~�����c���Ք�Li��(�`�l3�-�1�9���5�=5V�&���ZvE��*�����z���8 ����>�f��I����@��r���̢u�'S��Z}#aP����gQ����c��D�"P�jz5�`�+VъLY��r;G�-!���m��U��O��摷<Bg�=�f�7��xL_���w�?H6��P��1�J��^ ���F7�Q�}ŋm;��o���t'��g�W*�ù%=���)�!������j?�:39�v���/Α1g8{��$_��l�W�Z]}���q�xͿ�nB՝]Q��}V���y�\�]�Ї!�ǘ���2�.�Ibw�ɻ1W'"ڋm^>}lu ��`$N�)^����}�&O"S��mit�����wĬ��0�C5bLn1��E���g�M�{� *`�.����ZXav��W}�Gɮ ?����M[n{���M�j��L���ھ����ԑ���)���)�d��ך���%�4����V|� 0�I�����b�{��C�FIE�����脝?�hꅳ�E$��4�oq��j����#�v�Ѩ�q)�V�u��D$�'�g��i�QX�l�ʁt�V���7���)�&٪�%�|�x;F˘�BZ�D�Wz6�_�'��-'�5����<*UV�̯�s��!Ӏ��E�~;�!�q"v_w�����f+*�����!by�a ?��:�/��r�y���@>�ɒS/���q�M��5#�Gw����3d9�3kj�R��"�!t\^l\���F0��P��l �O�+�-�Ϥ_�PB(h�?w3�-�h�@ysF�<�n�V�k����g�PW�=b�-j��N�- V��I�k�3w#�:['�����8�Dsl:f]�y
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ