Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
7214341a39101e4cedda58dbbade0ba7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7214341a39101e4cedda58dbbade0ba7.exe
Resource
win10v2004-20231215-en
Target
7214341a39101e4cedda58dbbade0ba7
Size
1.5MB
MD5
7214341a39101e4cedda58dbbade0ba7
SHA1
b9f8f80c26d541ac650ffffcb7a6997766d4ca30
SHA256
11189ab861b901af649e6e8a148667abd2f174c0cfbd1dc6a3c204e6849d743c
SHA512
a12a5e22c3b117183b718eeb89c7fc983d2905cbc0b4bf8a68f1f428c5bdb12deaa4584a33f27f7bee27048b81e22baf32ce0761899c910f1fcc0beaf41d80cf
SSDEEP
24576:OAzLvPhtry7NFVjSSUsyIM6xMjODNZzA/720fMMLFATjGsSuIqXVqr8Txq4tD3rh:RBty7NFEGfHU0bzA/72UMj/3SuIqXVqm
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
AreFileApisANSI
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
DispatchMessageW
CoUninitialize
SysStringLen
�0=rF��([-}���O|>�f��I��p6ߚo^*�LF�_��RP3��%�N`!(⇰y�ڮ9E�P��Zq�px_�F��#�V�cNֶ��!ŏ��+i|(ݯ/�T��n��Dd^Ҥ��m�7������[@v�3By�>�ZcW_�5��9Xo�3_��9�,(N��Ԕ҈��H40L��d-�&�\�O�!#R�z�>��#��<@��P�Č��3����c!@���G�l)��e_���n��i\�JU ��*%����@����IU&�O1ݍ[���Ӡ�s�Ieo�RR�D8�Z��<�L�f��#��~��\mۍ0$��QgٯD�D%���@��y#5� M��y�ټ�u�gr.���tx>I�Ag}( ;!�J+]��c�5�b~�:�O���@�-S�[�;2n&�r���F��R<j�N:��ʲ���Sf"��<!�F^Ŗ���3�xG)=W�N��4'20�s��� ��F��}Y��յ�V�� �[���k���m�mKI�IŦ��l^�˰.C�y�<��#����ZS�����.Z(V��ϒ����oiQ�o�� �t|��Ht�p������˹(�����B>�֑��︈�p��o�e(�;C��n�g�~�N|�2{��� E�#�����$>�0([��|��k���;�nsN�w�6�.�Y"��etcP�F�$ ��)\����DzeXQ��n������z��ݭ4�Y���Z�r����N�����,�Ņ�8Po%iB����Y��/z��s�^�}�K[E��۲�g?R(uy��萔�Z��qz���ha�ؔ���ȕ�?��۞ytS��'_���gN�\:�穔j.��?������s��,�IbD�[t�r2�G�w)�Y4M��\>�F�s�z���|6�w��~�����o� &@r�\Ha�� ���[W-��G�����d[ S�\Y;:�iO6�[��_~�r�8QQ��p [����j2���� ��5�0L~��0�K��D��:S�/&�ZЇy���qzr��ĝ��C�eO 6���-�`���ֶyc|r|n��!:�m�V~^� o�#�^���o�^�����ֈ�S���61�%�hI��ѹ�����)U��z�����Qof�G���ػ��y}�g�&NW��R̽ය�ª@.8�SEi��. F��#!����������I���@{a�%�� �J��pI�w�8��'��Ŵ~��)�_ �&��y�-��_���>-;X�=`8�3��쇐y����И�&_W�:�RE�3��w���o��z�[��X w�7S��@���H���g�y��%�&�ڼLD�yrʬ�зJ�1��a�K��3�q� HA"������S���4������7;P y��~<�Z��j�4��;��#gW�7L��2�ݴH�_b'5��!�9���pi�G&}v[�����V���]2yd����8�`x���>-�!B�8Kiý%�.��;����j��z��/E/|��y8-�7��䐞{����+j�T5)���K�����7$�#��j7"�c)(�Ng�GE��O��i�LD'�cH�M����g<��9v.06=��nu�Զ3�A�)���+*X0�$w�'\n�&��?)�m�Hv�܀��2�ƨ�P��n[]�g��_l�SK�ll�I�-��ީ@h̭X fJ&��.ҧĊ���;��?�������OEs�0ܹ],0t ��u>\рYM���)�a��<��v1���۔*�a>K5�hY��ꮣtYikT�\|9l�3 � ��L)�2ʹ!D����8g ��4m�j�2ٜZ�;N֊����K�|^߭�>�</v��}���p��|��4-g� Ui=@D&Wˌ�b�'�Q���F�N�����z{�ɐ�'�]GZ�2�� Vw�����,1�n)ٹ;��v@Q<O^�����j-�:��)1�pLWh�zm˜��@:v�\[/�l�%��v�����Ũ���9��$�p�(�R�A�k��;��S1s?�!��{������8���PV�닁����^ ���E����W��'��4�3���mp�q^�f.��E�����!�*�%��iX�x_���P�S�b��=_�)y[! Z9��zN�1�z?�Z������R8��ə��]�ebYp����,6(b`G��A��SRC��}��������(�3��I��f�-�D��?u�3�=]�iH4@#2ݫ�����>u-���䍃 �&�X��_*crQ��ġR9eN��a��:�N��Æ*�1ҵ'�%����_��e���),V�����u_��xD{��.��q:�h�~堸.;�0�~k ��;{����k*�_X<��a+6���(�S�����߳�P�.�ҿi��IZS4\��M&�E��3������q�:Y��[>�8i,�\�]kr���憿�9�FӘ�,�R��S!P����I@����M<�_p��G�P]8���=G�!/C�˗gS�k�z埽n4Ш.���&�4����?����f��:r�m��Ȳ�'e�Q�8��hbN���L�e���53�&�=�@�>��gfD�0�[���/e�h2�T���Z��:;��;��d�o��XcZ���}Ԝ�,���E�O����2솹��r��:F��3�����#���fݝݯ��v��(ΫIx%�����n��&�U��"*'w�X���w��o�nV�y7R�ft� ���:��T��7�'C�{���ɵ��ji��h������m��mIShWez�>O��X��ɓ����Kz�>}����W&ɯ/��Yg8y{����o���<�pc����Y����L����C�먣n@�-�����f��DN���������U���e6�Qx���*p���Ri�X��φ��#��Q�*2 ����DZi����Q_��w x^�)SA��Cη��?}hÄdR�|6[��^����z�ɪ�/X�RW<�Yꗬ����(���`�V&.�O�07�P�C�L����Q��6x1fX��ЁD�I��f�1i̬:�|)3����x��?��+X�'���e�"N�S�4<8����p, � -
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ