Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
5c87e1de644cba28c76d16a16fd10b8d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5c87e1de644cba28c76d16a16fd10b8d.exe
Resource
win10v2004-20231215-en
Target
5c87e1de644cba28c76d16a16fd10b8d
Size
1.4MB
MD5
5c87e1de644cba28c76d16a16fd10b8d
SHA1
e98667d6c9880dcedff8a6aa12a89bbe3d73f2d3
SHA256
1004d82a9627fda1a5c324750ef66221873595788ef871c496f358bb6f2c03c8
SHA512
920259df120db9708acfb701c680509d54ca7b1eaba94921a16be2e7f88aee520d3f77cf640032567eca0f0475629859994b14e1a4b6410a1abb8827074796e3
SSDEEP
24576:RX03CzQe2keFLex3CFlbyXOLnu1UaL2ry/+V+jIFk22dxiTn9pDPQUVL:RX03CdYFLex3rOLn05LGyWKI+2mQjPxp
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetDateFormatW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetDesktopWindow
CoCreateInstance
VariantClear
���n:<О��Н�O�> d��� �d!A�^c�A\�v���;<�e�a��/ ��=����D�p��cD�&���"��Q5��R�z�ݫ �HC �Bb8�=s� ��$����ւ���n�J�r��C��fʣ�u�i����#��k�;��w^�Bu���\���U,�xG&8���-���s&��%��u����zB�D��d]G?��DQ��=K�F&��;+��~yn�2;�5DyT%LSF{��AQGw`2+K��Q� &�h�b�,�k.�h36I���x�z�����ȣ*�t�{׀u+xh;"��ܰ�;�#�S�٭�$t;[�,`�s�N��jL�m���Us���0c,/"R/;)ϹR��m!�K;t/��;�r�� Ler��{��3�x=n��g�?k���t����w51C��^7�xqf�'-/�.�[3�梨�p��Up���������4f�@������F��s�=v�E1�ޖ��� >U�Y�]�!]� =��(�9�Q� )"�5���&�Ғ@g� =��/C���Wy�x�K��� ���?��5c���}���O ��d<�tO������'FD�G���m�+���Y���@�=s�J�\y�r���B"?C�1}�U)T7ۊ��è�oQ���[�iZt�$b%�����0z���ߢ^dB4��*��0.wa-K���\Xo� 礌�n��u�U����-`>��Up_����DX�E�d���T�����V�����0H��9�$�+U@��*U��h��}��fK��!��a�����s���-`���y�bc6�~���w��|H*����n9M!���{�I�]D�{�u�����Ꜧ��ԟF`W"���WR���b9(��`���<������U����k$�}�y�?4d �yߪS��?U�1�S��:��Z��ZB�|@y�������ន�*���O�� )K����7��y�.�=֟��l��Y���&-�6p��c�������������T*f���D!�� �ή�g[�J� B����3P��K�8�i�g�µ�ub��_�U�K4]��<o��p����a0a��o]Cd�ĉb=�,�g�+&�s�e q�����-�cw�I#K,�Lk�q��@�l9!aC�7�'R�����Kتi��0P@>f�5�ǃ!��~�[�Y,_���;�0���_�����@!y��Wǎ9�*J�+�d��%88D�!5��֗W�U���W�0���*OB0ׁ!����W*����m�Ԭ�p@��<���#���#�������/0����9{�^���I�q�c�d���c����m�S�F���\�f\8�7��&�pa ��(7qk��I���1����c��[��pޗ�c h�yqm�-l|�w�bGy������'�ڡ&b�u�x�o�'A��2�;o�F�?�D2M�h5`"�6"Y),L���W Y_��ΉUټ���ǫ��I���_�Q˼� L�aآX�m�����-�+ �L?:#�dW@�����ߤ�ɲ����&�tV������a<@nK ������X^�ݳ�0|���^¦���iyIF���%����Tn�u�FT��t�9KȔ9U�)�4FU�A�I{��%���]��(�LA��d�8DU�[��cj1g%f��ȫ?���p�`�A���R�ď���3��7�m�Ot*!�ły� �7�R�[�9�Y�`�sѪ�e�Z82��� �W�&��k��߯iΨ[Ɠ����4��5���?U1���^�B��w�˦��?���Es�!s��ξ�7>bYs4�@_P�[����<]c�M�V��`���LZ��e�ͪ��ԋԄ)q2U�������|�e�e� ZGB���<���=���R_��������v��jF��� *a`�h�C5��w�n�gE9�|�����ԉ�u�*��.��n|g�q)��L"�U�U餾���y��C��σ�m�y6�W ��tF����:\�x������L"�� �>$@P�߯l�l�EwL�I�f_^������{B՚�G$ՓIY�9����Ğ�(6���m�B:K͍G�b��-��Z�[�P�u�W7�l��_����D���r4mz�</�`3�ީ��<��f�����[Q�#�e�q��7�Ӵn����2Tp��h#)�-4ش��:�:}�T�0c�����YeDF�g�-�s$���e�%��(P������Q[��)Zr��22�����(�� ���[���ee�m6RbD����OC��RQ,s�U�+�� %�%Q��o��2�/��(2�s9�Hod�/��\M�=����Ү�dȈ9?����wEf��L�z����� �jo��u�.�!�6�><%%�u��K�nEl�b�A�F���B�b��!ܡ�'��ˮa���t�CL8;�EC t\->9�-�p��+���mĭ��CW��X��E5m!&��r�� H��{���&͝¦���:����6��fWG��S��q���_�1�8��&��l��2v�S���9�D���mL������'�P,��vuJIc�]�"����$��֭{4|�7^�3�7� �A�]r�k�I��ӧE^��鳞~2N��z����0l��Q�H���|P���֣�Yh���NQ:�t̴ʪjPA��C�F"ن���s\��TϔrB��7or;��yOu��+��Jc�TLB��*�|� ��8B�9�_���&���� d����X�9�*�����D��T�h�9����pn#���OH�~f������N�%��k�f����ܻ:���0 �*l$�ddl8`��)j����(S�/L�A-�� �?i��y�F&y>���_���Dh_{�9w���"����� ����팊�;M����R-�-�Z�<u!���y���q N�Ցg�0���@���?ı�Ƣ���k$�OX^��K�� 7�k�ҽ��8/f��j�����O}����������|�\�(u�x&�q؍Z�#�2_}�����ł}|��4���k�z� LP/PEᚆ�7Uev�Q���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ