Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
f6cd356dea2af99e9c7bd157417988d9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f6cd356dea2af99e9c7bd157417988d9.exe
Resource
win10v2004-20231215-en
Target
f6cd356dea2af99e9c7bd157417988d9
Size
1.5MB
MD5
f6cd356dea2af99e9c7bd157417988d9
SHA1
4357e4b5fc57c69e1f1a973dab6e128698a2bf0c
SHA256
23c69337b3ec9084d8928dbcfa18dd65808718f3f5ad312681156422934cd436
SHA512
e81621f0ab4b56f2f1231825d212016a5ab1fba8542f7e78f2cd5c80aa9db45b615190cd2f6bd92d1bfe2da75b461125746f67fa72a9ec773dabd698d02e0ed2
SSDEEP
24576:fUkD3Y3QEx5lCeYu6xg+5V4utnfYx3YmCXxduwBaNhNuI/yok7hz+HohucD00YF0:fUmI3QELl3YRxgI7wYZXxBWDu2Ehzic7
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetUserDefaultLCID
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PostMessageW
OleInitialize
SysStringLen
%|i,�����o��i�s c��4����"&�tg'"+��}�����F�FWxLq4���WMz�uT�;�<�Z13&|Qh��yg4Dt�c�B@ʁ=���AWA4[�oS�YK"ݟAc>.��|i�iO�X����� r�u�&uRW̔GH|�T�b��>��q����^ w��f��/�jqlC&*2�7�2J���� �ա�ŭ�I㼬��q�{���"v���,i����&�^#ַO����ɉY�j����.�^q �X�lF�)ҪҴu����W�W���\K`������gi]x��O�n˓�Q�A���ʘ��'�V���J'�¥�:�����I��},���E:ٞ�DF��RW�m=E�w[nj��I����Zy�etc�_��l���_��l)6a��W<y���F)vC6����d��l��W�ņ�=&G;0���[x��2k ���8�S�����7V�(�PR��&��8�������������w7ضݥ}#H^�Y8C]� 7�j[��Ҍ��a�#�;����u ���'#���f�aR>�Ұ�fSvygthYzf�Ý��,;x�a<�G�,�_�w �8~����c��p@�N�0l��B���#t�����f����@�S������{�H��iG�֊�M����WnA�lE)���Q�ZQ���D�ʴ�qS^������42�F[��B��_���2��8����އ� >ݶ�Df����!f�������QA��G�)�~ �E=e5�H;E6PK]����I2�Q{�W��L�յ���rjMVCu��� Y�moYџ�p�sՒ�S�:�j/K��){���z�nj�<m�����'1z�R�n�e��za����zN��{\qz����Q1 ��VXQ�x!�@D��<�����W������B�%fS�Q��˵���b����xg�jx"6�8�tsq���Ѓ><9�W��i��n�A/��j�c�9�e���\�j�l�+�*���o����-���rۥ�qd❺���^5�4A�t�� b�reu�D2�یF�����2�:a�����������7m��n.k�]U�����-�?���V��fsU�����ӯ@�����x�����q��P"&�O�Ol�-�����G�-~i�>08���~���f*��5���z��uϟZ��1��#�:���_X=���* 6ث�y�J����a�4���cbڸ,?B�۔8ׇ�.�.-K 8��1�jA�0���Wqq�i��A��� U�V+�\��d�����>��������P�A�bӗZ$� ���3s�!��Z���R�n��LW�r:N�2���/G���58��e�gҸݜ}�&�z�J�M� �@'�K�cCľ^p���&���j��R�.nVE:�+a��U���� ����Lm�m:���]�X�� CĆ�Z�.yI~0l<�iq�� �՚v���������TڌpƋ��<i�Z� F\�4�|���Ro�ڙjh��ٵe��*�(����Ńԍ�G��͋�`@��iZ9�%��05�Ӄ#ή���& #�o��=#l���\E �pZ���W�F㽅�q{*�+/O�>�ā��K��55q�V��k�Xś*o�ʃTTٴ��i�����l�� ��ʃKh5�b��hN?�'k���u���50s��r�ZQJ��Wq_k[���b"�`��1d������rT��"�9y�/{�0$�5@�[Ԏ�R�.Q`RL� OC��3^�.u����I�Z@�/��y+�K43v�ʝ䜪�s�+P�_�I .�����j��q<������!�qJ�T�l��~Z�h���u�2����Z!-�����LK �0�u�;oh��ṟ��z� aȠV�]6t�^���[�*o�[�>��V�u� PS�"���i��y%��7��a��ݐ�iV��^��I8A���$u�(z~TKo�i����Z6/'S%��S� AdA�o��{�P���������?�1D��߆<p�)�"z !M���ɒ�g��4М:-����c�&�|ֵGm�Z��PL�w��:~����G�HO%���6U���8��U�L�yX��d^�g�Ѻ&cX�s��N F`V�ȵ����9"�IN^@���AJ��jm�};H�HT`�� Qe ���PÀ��Δ�����P��|-���� 2����r!���D�n0���$`��}�&t�"���H.oȮV�/��-������w��^�~ކY��Ynv�����Y9�o�x�y�U�|�ݭ����bR}a1;;�)�5�����Wƞ ,˖�W8>���=���'U��n�(9Ӫ�Mz��ƍ} �� �?f�Su]6J�<4�>��_:�,T��{�0AѨu��� �2o1XD~�"��9v/V����?�V����BEG�j��O�/K.Y�ά��'kΔ�Q&%DL� ���X��v\G�iλ�eFdؕ�<o�ETr�p���I��9������V�A\D����>�_>JEWH��"�k�&�i�P�Sp�<M}�&�kn�ư# |�U,iV�D/�go~3WB�Ns�攚�7e}���^Djs3��(��K���F$K��ds�l<G<�c�0��8��eb_��u`�����>:������y\+0�d����XdoE/��M?����7߹`wP�S!3Og߂���d����ɈT�G��UG��d��.M�B�e �w�?��2Z���J�Q'�$�uI�w�}��d@��bd��Di\��D�ڬ��,S�1�8+����s�0�-N<KA���3����(�d��Q��_���5�!V'��(U����~��,z�������B��<���Gi�&�=�O+�K�A��R#&L��Fw��C���6 ��C(�r�^�]7s�b��z~�� nV�1G��r^3o� Р>iX�^��.���pi�Bh�}<fV)�A��% ��MO��-�ߙ�IJ���������A_@c��<��-c��>h�6S�a�O��-2"��yf��tw �3��ڌ�q���T5�ĝ�+v�D���/\Fa�Yպ��#�4c�4������X��:��6>��~��y��R
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ