Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
feb27dc57dd27948f3dc8e944c819ff2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
feb27dc57dd27948f3dc8e944c819ff2.exe
Resource
win10v2004-20231215-en
Target
feb27dc57dd27948f3dc8e944c819ff2
Size
1.4MB
MD5
feb27dc57dd27948f3dc8e944c819ff2
SHA1
1d2da564ff6674b822b4b88d8415ffc19112b144
SHA256
2364b65c0a91f4087615bac93c12c680768942c22c93e3b993f2e6bc0140ef92
SHA512
1c87330fde4e7c19cad3c856a52745808be37f82d431f13364be781947c6722991ff8366c5affe600457c367ef8c911ad7713e760fdf5677d09707cb73ba481c
SSDEEP
24576:XT1uge24VI3EuAY/D0w+p2c78l851y+KkTIygdFig/N/6FM5/m0te8MHV+:D1hEVOEuv/QDfm8HtrTIygdFibFM5O0t
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
LoadCursorW
OleInitialize
VariantClear
�e��rw8�L��}����(�D���p��� @#��j���rW����K��CF3Z� !����b�9����x��iN�,���d�n㎖i1-��)N��I�T���!�4i?�î�|�|��K��Љ1G���@��s�"�saƵ[�����8�� `%�K�|���ѽk�j���1�ۊX�o��iE��j�{�њo ,�����>��Ӯ��+���gb�S��yW�ge���˥)��ǭ���#������p JP%>RuӰm�|�<��)�e��;Y���I�ֻ������e�ÊƖQMB��E��E������8$�^Y��1���y����\�;�c��q�,p�Y�����9[S���B�ilS!A��| �^�D���w���U@H�]�L���� Q�"x��j)/���P�? ���m̠n6*�~د��8�Ē�U��2F�݁a�a~�6��C�u&f�.��G�@�]�X-O��dÔ�r�5���,Qk�����2�U�m��*�Q��Аŗ���������v����`ӿ@?G�ۅ�ү"V�8nw&`R�y|��d����Le�^H nY�:�}˶�BmqJ� ������C��QO]�y*�/ed�O0�Y�i6������#'7:�4A���6�Q��d�L�5M�����dA�+}$y�V^Y| xc�jQh�9U� 4�}�';_i"�����Or�īG����&t��_{p[u{�>X~�7��%T�?�Q��(y4�� ��Զ�ŖW�MmN���"��� �|�m" �鍮m (���ݑ� �L�j����f��;���{� �n�(w���I�o1I*�9�:9�����)�4��Ad��0INx ��ߥ_�U����d�;�������y�HJ$��0�!�(v���с@��}�oא����v A��,�^��pW �{[����5��"2F ��}���D��_M��Zo��F�M��P^��<}����gJ� �ik���P|��۶�hyo&=1j֒�\���ʃ0櫋���*��t�b�h���&"����,!ژ�I���`�[ŵ�r�(;�~� �G,�#���VeᲜ��^f;c���=���/ |�ܮj̚i|$PV�&����{��b��e�}�Cm�B��8�i�\�t �VH���@�hU%@F&�O�����x�w�5e�;o��������8������d콰`�"��e�Z�=��GNk<x*��F����C`���w�9�M�|L��M7h) ������^���'��p����E�:A�ךH-CFo���K ��t3��� �tO��[Fx7љ�I6XC���8��7�%�٪�x�d.�C�!W�\��@T�@�S�⚑���1!�����Z ����`b���<�J=�$H =*�g,~��6c���T��� %z�z&@���mߓv�h����\O�2\�c�ą��Ihv���~��\X$���L��k/�y���=�wQT�p�h��*_XNkP�RVR���v�X����Ԏ�{��6 ��+N�TP7��*^�p�aa�}ΐ_F���ԲӔ�$�송v/S�@;��a�}� /@lZ����"��pǞ�&�g�o@O�����N-4�px�����<�6��@Eb�(�&:3`���1�����I�J�K"b���tWL�Y�=i�3p�h���� ۛ=�����BiTZy���@rs�}��^.Х\4}^c۪��6Mgѫ�o��u{F���|\��i���~(���t��n�'>�V����Ԟ0J����R����^��+GrY�tq6L���1�������\W�"Xn�e�����F� � w� ~C/J���g��S�P^��uY����D�L�4� p|��g�,н��ǧT��+���z���������C(���O��ǶĖ���I�=���K!{���`t���lε����T!��oi��:�2cIbE>�s��xEآe����$1��I&���^��^E��bo�B���B_!�fH&%�ύ'�� �e��w�������M��2� ���X�O�fN���+���Z'$h�s����5)t4�[Hl����rL|F�m�a����`�Y�}K�ϝ����mw�3~���gݶg�"s�(�]���;W�_%��^tl�m9�v���8�\:Y�˯q���vUyX�b��{�x�e�',3��}��+�p�o�%�����i�t��4?~E��yXry6#��q2���{7R<��\:�e�u`��h�4�4�~>Ҵ2��C�dD�x}� t���{N-� ��F��o�&P������S�{��?��/��t!/ӽ���Q6�_�t�Չ���b��p9d(IŁ�TbW�^���2f/m�O��͟�ɒu�mX�Xڌ��D�\��u"T�=l��>���j��h��w=ay�O�Y�+��az!y��F�xS����:0�p�2�$���W�:�"��U���U ���l�� ��2���qz8?�`Z����,h�ߦ�DG�6����m�����h+;�*�i���^n|=]R%�zY1�JD�b>N�7�&�!��gV:.S�߇�E^�k�8�ﬨh�Q �2�!�*�^ )m���Xt),K��O<�2���u��o�H���>QA>�t����c8��SNy_�#_@�h�h�F5�m� �a�w"c?�,�v�I� g�a<��N��u����;4.)~S7�Ԣu>@��,"r�N`2� �]��wDK����N���f��Ud i�n�Eh����{C��6�ص��2�3�䞊� T�Xhn��M��^z���H�m~WD�hb����ؓ�E����xs!���q���������%L���џ|6�{��;/���B��?�[�> W�ˉ��b1Q�-3����Ƴ T�>3J0/�# ���l-Y�G|Lf�FPE��w�����P����7`��,U3u��v}�t���~[(G��H.OMy����h$�&�t#w�ak� %<�[HD��a����� R~NO*w���Xڧ���<�%��� E���������|�6a��~�-O���Ҟ{���1W �1k� n}8W�.�x��RuI/���"�c
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ