Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
5f2315d0a525956390e791663349fd69.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5f2315d0a525956390e791663349fd69.exe
Resource
win10v2004-20231215-en
Target
5f2315d0a525956390e791663349fd69
Size
1.5MB
MD5
5f2315d0a525956390e791663349fd69
SHA1
d772411f4ba0b813bf0df54837e073d723139ab6
SHA256
05a5211ee0a1a3d091a1e2e02c5ba451463add44c37f1f7bc22284a0cc155afe
SHA512
ade5b2a04ef7c41bf39b6b884a663f3b6a1f622165e0215f863ec29ed0e2f46d703d86c46cc1fb8c43a7acf347afb9d2591a1504d4b2da737b67d429f9ed6475
SSDEEP
24576:3PokZ9VR0dBmTC8uHc/GynbzWDL/9ZryfH/baSxmq+hS/Jd37RoszC5uKu8yHuQA:f50Lm9gtsbzWdkfHjxmhSy+Qu8Cuq1C
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
QueryPerformanceCounter
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CreateWindowExW
CoInitialize
SysStringLen
��_�l�`E�f��������lhRt.|�x�4�~[�2Q-f��E�ƾY�*Ձ.���$�F����]0�I��u�ܣ(��{�WC�w�ѻiQC� =h�Eg�υ;,]3 �����Bq��p��v��!Y8�n�ϣ�B�!�w� �!?��W{k�!>�]:c@$ ߴ������"@+�8�����h�^�O�o�^b���Б�2�md�Nëqkz ����FB���6m�}��+�Qͨ�vl<sX�}:�t���0��2�=q��ޡ`��&W��x��.�~���3��^�S-b�>B�B!`"J�h��]`���ዡË������)�h�%��;�����g�����*j��c��%*��@p�X�(T��)*��^���U�eq,k�6�ȕyKfٌ�|�4gP�2D���;̙��l����Y�T�\��?�l�����f4֭}�4t�<�I~4YiC�� Ӹ(J����Z��s�t�9}��Θ `cԽ��K5���x�h�v�՝����4��@�(UW��F������='���q5��2h6z����Vk�ŷ�bƨ�c���^_��h��_��/B�h��*�Ԏ��B]�?'�=��s;���[�s���GM�+�Gz��l�:�b�T�,۩�����.ն/���9�o��\��'E;��'�������[���pH?��z���h���Ͻ������m\a�C�2�b0�8� �M 9߰+o�Cڦ�p�NX��Nf6o�G������r*J��`L����!߹>��{��q%��jH=�[��o����mqjS6 �4�ɿ�:GAj1�}��>;�L����$��(W�� �v��Bgc(��ޡ���~�(w�)�!�Fj�"����@Y��{�-��]'� ���5���vF��1Z�#q��y1?/l�h���(�}�N^Ԇ�7\���w���f�~Ux���|��l�LCF�t�ZPwƝ��)<̲��Ћr�~s�m��*b�n5O�~P�,5o0(�����S���%J�忾7�nxG��M����>j��X�����g2��1��js��D�*�&R�*R���Sٹy�u|\6TH�>o.:�~���d��̐��w��"9����Y��^q�����SWr�0d��K��Y��,:����M��{c�J5��ߙ�c��!x�σ��y��g�3q盆�"��3���☔��x�ߎ��ԧ�5}/L܀H���ފ��V"Tjև���x� �x 9�Q�!����G�l�&��������X"���3�?s�i�muT_�%��yO���|��vlN�Ϩ�a���� �.�����W1���]}{E��X-��r��R,������˵����T�`[���ԥ�'(5y.�0��f_�T��(T{��Sl�=��6��〣��L�X)Tf4w���&�/%qK�� ��ڀW����K4.� ��Kax=��9�(�x��85�%u��\F�n4@6�q����=�z��B�;c����$ �?ɰ���[�;�86[J�l�*�����ʉ ��r!O^��Hע����Ꚛ|�ja�K�$������:���$)���vť�q,�V�������蜪�Jb3F��Or��8���j]!��D�AB���'��m��| ��g�p��$�-j�%4 ����|��"�jr5�b� w�/ަ�#��j3��job�n���Ʉ7�����2X�������*x+$��1rEbT���"+��.����%�C�]S5:��״�Ϯ��@F��>jۜDt�k�[L �Ʊ�i!�y�4�jṮ�q[�U�Dӣ�������������T����]�i�����GX�hV�K妻:v�~���+�ZD�B�;o ����)���ͫ,�k�{�V�*������$�=�݁��&v�m�<6H�O]QP).�0(�f�2H�X�+�u3�f.Ouɬ��o�%;E�/ ��t�����M�/n8g�!��eR���V�����!Z\������07��揦�J�o�y���qEn5�$��Z��M:�b���t[��������.�p�O8B���:���5Ō�#��j7�֧[S3�싀v�м��Z_`6N0���5EU���K��?��\1���}`>�oG�QZ�+�]�'�;SB�M)�1"|P��av�=�`�<,��2�e� ��������ACN~�aBH��Ԫl�?��|�l�y�<�/���I�ir,��{zF���{ÓQ�l���ٵ~W��P�=�Y�=t�����w��e+(�"���@�r:4�&Qv���R�JL�5��nv�qHi'�Xg��g�)B�k��z0����YJ�s��/���?�L���g��6/�F���cue��z��c�����Ԣ��2}��}]l3M�S�����*��{�u�U�F$�Җ2)�z �Rxp��GBfO�!U.a$<p�8��$3�t�GOV;z�q�F�s� ��&N^S,��k������67{T�Q�lf����]�r=C�s�������O�߾�ݭ��S-�T�%i�/b6�aFMa vͻ�c�ޕ�#��z�xM�%�D�[*6�H}�7R�����~�ى��O*z����JK�+[뺮�02�ݺu��,��A����qŤ=z��t=��Ϣa�1"P�P��B�C�(r�X�����Si�o�1�)��n߲SNfC==_>��Ϲ�������j?���s��G��c}^�iJ���3�*F �����ݚ�9`w}�s�5^t���pP� ���� ��%��aBm�� �P� [E��`=/E ��T,�c���1��iT�8�~�SU1>�T�¹ *RlX���Ɔ�Y�@>}�ԉ�� � �˂��K�b<L����P���i�҅o����J۩���d!�v��S�q�R�qD���D�P��#�l��A��]��<����x�q�x(��& �Pr���Y>���T�����ޫ�Hu�s'ʎ�*rmp6(��M��/K._9��Q�9���Lw���%��U����@a'�2������Y,4F�� ������1��PWnXF���A(����nDE�3��������X�?���������K*���D�)bC�=�p��ۻ�5�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ