Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
59fbae33c7a9e25e0cd5ca5a32774587.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
59fbae33c7a9e25e0cd5ca5a32774587.exe
Resource
win10v2004-20231222-en
Target
59fbae33c7a9e25e0cd5ca5a32774587
Size
1.4MB
MD5
59fbae33c7a9e25e0cd5ca5a32774587
SHA1
c9eb0a4639fe974435dffa7465c0f484f4f8b54c
SHA256
1538c166146efdba9292ec6cacaec7cfb2c8b6130916e40330ce818d5c64c901
SHA512
ec7eb47ebc7ccabf308a17355c2aaa97549d549e8ad7849958920af7d588fb9c0b7e276e2429c31bf187383dc809b20eaf8c11bfaa32bfd37f0651b8190ab22c
SSDEEP
24576:DJVYZkpd/y3gE69llPl9iLLC1/fspCMKLek1ZkzV0CstCD0k2cMKwKH2qKDeaXHd:PYqd/y3gE6/lKLLC1/0pChFuzWo2DEHE
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetHandleCount
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CreateWindowExW
CoUninitialize
SysStringLen
���rG�1k��!78�����cZ��9ҁ�I�r��߀ r�b���Ar�ڑH* U��=J��J�s��f. Ǥ�;x�@�</W�GQ�ctq�bv�[ScI���B��F<��\V�����-v�-������E�̑E`�½WΝ�n��_p�Q�Oͦ���×@Ю��v��>\�(�ga �(���G�x��(���{�^!/�.C 8�V-]��\���e��R(gA��o�C�_`�+���C�����z9� .x,�ػL��)�B/���T����g������.X�.�d��$���fP��H�r��\����m?}ce|�}K�3X�vF�VGٲ0%���o�AZ�96A�l�ϸ&N@/���툆�&iv)���P��8vv�W����{������΅$K���K#'�0f�UX�,��� ��V%�kص�&^���JD�(�������'����&?X !��,��K�-q�����G�����h="���������r�g���*q�QN�~{��.ؙ=��(��Y��5�)�C�ǿ�n�gDz\� �X���Y1m���$��E�J���*I����I{[����ہ�w2#�:ȷ��jNۅj����@�,N�^u��� sw�@$8������2o� ���cȶ�&E?�{7�.���&���T�k����l����D ��wBo�J�ܻq �@>����ok��LS�O�$d���]e�;��t�0X�jY8.�@�+vJ�6��X���'�H��dG}>�h,�TX�(�r���3��~� ���m�*;�=ڞ7<�3`8��'czQˬA��t��a�>$Q8l�?�K�ӛv��(��f����O���d$v����������| �%n�g�e ǒ;�����K� 5PJt��8�����0�"����X�ߡnխX�"�z�m�P���>��G�ӤŬ��o�l�2͚������R)�����AR����Y��ڂA��J?� �1�B'dQ��s�?�mMG�H�>��QM���p˞���S�8����,���=uG���\g�~+��[��l�G��(�H����E�!S��jȉ������N�;U�2�'H� ��<�\�+ MnEX��8�qu�����%�cXED�6��,���t��j�����r�}Z�����Xo4W�Zp�Ʌ(���[�cf��c����CI������@I�m;��b>wE�!.��J] 0j^{�%��;� !�2��,3I��#ʶNQ�I'�Lj��6�-�{J}��WA_���ؤ1���+w�Dv$��7�@{�H*c��{��C���qN�Ճ�G1RQ-Oo7U+%Qz�U*f�7��V/1D��!��Ո�ri�#P"Xq~��2k�U��Qh�}��q�Ӈ��%Tu )�?�՛,�c-�����l�����0���-R�\'���)�#�|v��ګ��DP<�q^;� �Ag���G�a��?��hLL�.R����vXB��n�Moi?wW_J�8���*��#m�)��������X� 8�M:el&5R4C}�r�@)���Y���(�Xy��F�h�C@���*�Sn�0�?�E� �:,w���L�B%�lM9Z���Ɉ���rF��$G���:�-��ڳ��&L�o�&�u0�/�����W��_粆�8JO#�yɬ,��+���E&����薱1v��=���:�w0�F$PVo&�銧RH.,ɒ��D���O�0�鈯՟��a�X��>o��E߾���y���L?��w�|�� �x���'JM� ���i�\j�k-Ng�Q�#b��N��H���q��R�K՛`���B^c��� ��b��c k��&�i�\U��<RP.&� 3��eB,���� I�����X$�ɩQ�����%N��K5FT[�E����ux�������`Ǒ� �tm(e��s�[�`���;g �����j8We���ȵ��9����ք #��}�F�^�!Y-�(E\Q��dL�Y��������v�8#��������G�D���2a�>���֍��ȋ��[v���0 X}�����k��p��8��߳�]���9��\�a�`�������O���N���̤����2���c��?51��Ϧ�Ҷ��ލ����č��6�|� �ΨSɸL7��6$xIɜz�0�m�i)�(oND�#�^ڶB����A�~9Y�¯6a,� �$z�O��"��S}G�@�����ϊαo�'�-w&�3Q�l~լlĽp�#�x����[62G����#�g��Ŗ^�A�9ު����B5:E#��(�q�b#�����:����<Lf�뚦<�h�0�ҺCA�<�Cv��yX ��cw�1y@ZƞV�zn|A0��VY��������Y���m�ݳ'?���2t���=)��wn�P�'u��tb�.����>_&qk�ʫ�(�U��rȫ��gW�Ϯ|�I���_']��tA(����QM�[�S�ۈ�8�;X��)$���2�-IP�����vn�Ν�]�_=a~)��c=�y�H�>S��P���Mo��[F=b5YI��|��MS)��=H�`ϼtc�^�ix'�˔��>s�S�Aq�4�t�����/�qQ�;��xV)�L�A�E@&M ���:�ѺÀc���uUG(/�:�V�e�bx>%��}�R���rƻ����O��jȼ~�F�0^�h���Kl�cd����49T���8�`*.�-ߦx,��k4�� &�upу;�9���a����Qt��3��2{E;nT��#�.�,�v� ���a�~��ڇ9���'w�1�m.�2`���ά�o�k��zhl���}�uF��i[x�*Z����<�1��@�� ��<U��� l,�gG,��a!%,��WbQ��AU#�`<�>q6�!��t?�mC(�O��\bhך��a�`W���B�Tڏ 0�l�<��^C�e�ĕo\vr|��#�%yZ6�����³��1 ��"�ur������Q�l�����xE&�B��Z=za�a\����ӏ��'��0%���K���:����i�I�,5!�h�>�fV����p�UG"�O=,"|?>��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ