Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
fb3d5b29c5172e7af551eb818b78a921.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
fb3d5b29c5172e7af551eb818b78a921.exe
Resource
win10v2004-20231215-en
Target
fb3d5b29c5172e7af551eb818b78a921
Size
1.5MB
MD5
fb3d5b29c5172e7af551eb818b78a921
SHA1
ad2da58d6c05fdfe58d7e7ced7d5d4c4b08218c6
SHA256
20350e0fbca825774fa3fcdc71732b37e274cf23a5c7cd0c38f16827388852ea
SHA512
a575c41ceca957f3a6e2040fa789066715506ab29f17b8bb44215abf3b453286a59becafebf52e5b5d0c2243c2839b0408c3f1c14fa73202da1cbfa8c7208d08
SSDEEP
24576:iYjeSBfcrz9jJlr9MqlSIRfluFDK5bDJ//QpBUgJ2t0w2bL6LzKafpCxErTzs40/:7eSBErhjjrOIZUE/4pI2bX6pHbhW
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetThreadLocale
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetTimer
CLSIDFromProgID
SysStringLen
�\�2�Q�'s(��V��%�1Y��-T5zm�p����\2m(��ѹ����Ԇ��P[�I5ND7���k�:�~�p��#����~�M1xrh���{���n��zq��������S��}բ�v���?T.W)e�SwA쀬��Ɠ�9�3��~�'��' ���]��r�8Y����q��L|0�˟�� ��f��sb�� �B�uod��jZ����uD�g����P|1�������s+����5��#�7D�F���� ��L�-�&�9lq��hh,��.:�������9�!���-*lY��Z ��Y�%�V�r�'�Z���}�O�(�iVD��� �����#Č�p��E��X��tt�����b�ñ�� �x!�Ciy�J��gz�ڹ��9����6��g�l07d( �Q=��%���5�Xu��J�. ���'��e�֑U�bn��θHP�(��Y��ZS�'R�a�l3,���5(�Y��n�y�u���0���!ftj�:N�E�`@i#��/�#l��J�ޚ�������%eG���2&�Z���(�)q���Mj^��U3��D���DHìle�H<{{��U���N3@%�=73m��)X�lk�Τ-?}��JF6<�f�����.o�w�Q5C�0F?E��"�5��R�Ԁc��v�u��5��98�"�G�¢� �7j���(���䲔'z����ψ��[Q����HU�S��N�')���QTY �{�9��3s�z<e�����<;��Ԙ�_\����`T7���8>[ q^�w��\�z-}��S��� ����<��R�bdK���Kc�� G�%l6TDS��Z�ZIx5S���#�9�к�K�^{����m�6Uo�(����K�����6FM�L�m�?T�N�1������'ҏ#L]�I_��E�ki�% � X@�w�8Tn������>�t�c� `���W���Mb{F^���HscV�g���h��'�*%��O�\��H��Ѿ��z���[�E瀴9�B6��ҥ��ْ @�_K�����N�~U![Q��_yyՊ�h�&�>Zz�=;(e�T���x�����v���<݈l � �R�� �Χ��'��V+؊�m��6�_O�V$��,@�X�X�PD���2��A�j_� �;�4��TI�t���G�uzɰ�i���ˇ�\{B. *g�,��Q|����WG}E��V0Pƥ����QTUrd%�,�mC������1��r���I���N\ݫK�4��ϘlA��6���˅�'�I��z1+B�:� ʡ\&��e��YBmd*�� � w�\b�& ���|6�i��C$��,�-���cMrf܄�ܪ�7�ss��4X����&�mx��Z��l�����Q�=H�Z>[� ɵF�ԉ��4��2b��gf+���\�b��l����ע�ѽ�4���pk����0p��A�=߀S�$��1H�q���A���BJw�'SN�UN�%�eca�QF�݉��lࣈM�L�4�jf]��ԊYN�]O�r��#�X���F�ɓ�`^\K��ꍽ[y���{$Rx�u�������4T5����O�wІp�V��������Y0�m�� �o��^�b�-|qt�&�������Y��d/אԜ{ؘm"�5�l��F(���\E(��٘��B��[�������̕<�n+� >���ڄ�F��.��ߙ� (w�x����,~(��K[����GLj��NB�ȝ��`����:�O��o���S�E�f��{��7�Fѿ��ϿVc�5���'f�W����O�X�s��O����̼�U+�I��EaCnUg �I!����e�I�]��)R[6M��� 龧�|�6�a�.�R�$$�E�����[ķ1�����2�6!+�\*ڱ��Lwܵ�%�ܸ��[���u���)�Dr�a�)Z�۰��kU�Oz�3/d�����&_�l����r�ݦe�����^����rvɨH����ݴ<���@��$��]~R�iB��^��A��b`�i{�� a�X��-�´N�s��dfꑬ��������CV����>d�ME������1`�N�+�}��N�V9�G�� � V�Җ�u���3=¹�Q/�,����$���Ύ���"X�f!�av��kj��^�떉[r!k�.9x�`WJw�V�># �IC�c�8a���1��q}���h���?�r�!__ ��Jߘ���|������G�Pъ;I���;�c?m!wr�L�Cgi�~Y��Y�1��������cҟ�����]t/-����C��A��t���g��_���q6ET/Z�V�2o01X<��͵�88)���?�K��w�ęW$XvM���N)�[W��Ze��Ū������+ݝ������sթ��9[��z !����Ȥl��ŝ}�HA�C6�(�����K�e��" �� ��U����T�p|� 8x�2��#R%��2�Ʃ��n�*e��(���oQ�߸�J��� ��xe��l�@�N,��%#���O��A]+>t�5&[;����${,x�{�2åϻxб�X���Pe�k�.]IX�'-�P�E��{��:u��NpH�x���߯���j�,��#І�9W�}L���.�%�cC�Zj��1�h�s�#C�0)h�8��>�'^���m��pJ�'���b8}E��EH��Y��n�;����W2�`B����zR_�� �$5 ��|觻<]�ǂ�:��_�=����w��JE���V�TG�����^��hp`ZE��V�r ���[��ć����������x��K���hL�:��T td�w���4opMd~w�Ф�Eo'a�ˎd]�0���>`�7Q6 @�h�@��n�����<��ʽ���vs1[)w��y�iy��x�������g��F��hL����^5!NL����T��"9M7�����{a]_��||�^�w�\���@��}����p�x3�+cV��n���~f�I���YG�Z7�N����bÂ5�6l����̕r��H��!���ſ@��B_��k J6�([r�p��Pw��Z��m�j��_��hс�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ