Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
035f8e445b0d723d1e2487e5cdd751b2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
035f8e445b0d723d1e2487e5cdd751b2.exe
Resource
win10v2004-20231215-en
Target
035f8e445b0d723d1e2487e5cdd751b2
Size
1.5MB
MD5
035f8e445b0d723d1e2487e5cdd751b2
SHA1
a0e191ad725b5979bed4c683ff857fc0f331cc85
SHA256
1034e267583b2183acd5d84b9acbebcc0270c54be8821e224ec1ab1288fc1aac
SHA512
6bb4c4feb0cef59772faee5236203d1d63eb67864c9cff6b29c1d4b0376a7cfeb77c270ec29c9dea320d59d2dfca274eaf4ef2813adfe525c13a42048f739271
SSDEEP
24576:MTWCPgOs9F8/QVqg2LMUC52LoWda5xPYBJKVGxhS+3Mq6jWgSbXG/5yPwEDVC:MSCPvkmoozDN4xPYJK4x00D6jWDnw
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateFileA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
DestroyWindow
CoInitialize
VariantClear
+G��z�2`C����vP� #�\tV�r�z���@���g�q��)�y�E SP?�F�9�A��dj@�A]�����M����p�Oಕ���"��m���ԇ��Gtدy�UC&�}5��$�")��C@g�w���D�f*Y��<� �I�\��텗df��h{��G'6���[ s5�e� W|������v=J�F�L �Hb��*�1�����R~�E���jRu�|���0M��p4&P� �p�g�3E��`���'���w�_��xQ�CR��=n�b�R1��e�T�&��_J)ycG���T����X�I��r���������H��vCI��C��V���v�I��)��шs��G��/N�N�/2��׀ [!�%J�J�fYo���Lqս/E ��x`#m(G�bZ�w�G����ү"�z/��@ҵ_�>ДbL����J�)-���Nٮߔ�����Bk�5�䁝�T�C�&}v�?�U�4�sR< C<��<�?@O��?�x4��Nm�=��j"����kpȘ~��}�o'�o��{�xRj��rPq�K$�n��މ���y��֜�Z���Nr�yun�$�$h4;{�G��1�����oc���a~���!1\��"��<^ 8D��掑nvJC�:e*�sӜ�;�?���� o�}��Ѹ��W@m�Ɔ���|�|5�"׃�*a��8,�*�) �k̜V�V�.�.%�-�ËM�쯂M�:��&�i���M8�H-.��0b��^�:5����Z�m?r(�$� 7p�m�9Rz�u��`�l%���ϑ�jrUL� c¦�!���V/�b $���5x�Q�=u��[�\�O �M���������^��PZ��.|Q{�/~�L�[ ���p;�!�P�X�s:��[��%F >�X��Ճ��!�k��o� �#�-��z�����z��_�= �7�Q@Gs�<3d�r�-/�t�Y�T������5WԴ�B��2* ���x�!�E���_$�PlӛQ+ha=�J�d^{�0�5�70>��;���Y�/�ԕ�)��U��q�����%��scX���������#����į����~:�6~E�����d1OW� �j|���à��9�%tָ5�W�+����v��ͲeI���n�*Sѕp�C?�����W6�ot(*K�=����]�ψ��07š�_���``�}��Z�F����Q�qM!�|[T��W1������L�c���NVq����KG����$�tgB ����26ec܈�RM'��ʒ�ԥ9@c�p zy<���>����WY�𭦫)�V+������)��#�����:�yw�M3�S�)xE�� ��m�̣�jf�o'( �v-��UW���W�,��[}��N�u�5u�����k�ٶV�)�5?�O��)�w8-����uw��/��oL"^Y�4Wsl@���A`_������/'kIK����8�lv�B)P�,�ݐ5[gů�g�T)�5���&C�Y ) ������J�OȔ{/A�2]����\�P.1��a�����/H�?�����4���\�0-a_��bU�Q�n�7 F���Խ!�|Ȁ�n����j�.�^C��ɽ� ��Y�� ����`ҡ�4=��'�I��]IC��NH�->��Dŀg���rzVD�]�N�7�Y�촲k��Z�O�1�pq �� ?�'�̴yK1�m>Ģ�smI��+F-,Jd�ݛ����b��r`L���y*!��O��'�y�������J��f�q��\�CnO�����N�5�#�]�)5�m$�P˘�ms�}��V���h]M_�t6��bt��ߓ��?m�Hԇ��n���;BF6�H:��ʭ�A��k��hU3z���m�~��˙H�z��c�y�G�Ɨ_�0����r�nD�fwE$�9��o���E1������o9Gi�2��$,wx���$�*/�bʬ����b�w&�H}9 #�`�K���t4?� ���#p {+����6��KP�eN���� ��<�Q��� Ў���^]�2�Rni�6��dY[��6��1����Y�D._j�8���Xgu�%O�������!Yb���QTd �R�F "F@6��/$�<��qK�j�51�q�|wZ�HFR���D���n ���N��=�(��0�^pC����j�JF-�/q�F.�뵪e-�Z/m[x��y��I#L�X�-�˨.X�8x������^ɩ����Ti�@2���y�(� �h �T�a+�PqQs��< ���y}��T�&-P˟8�za0F3��'M��;�2Z(�rxo������N�r(���q1=y�E��p�h/I�iq��\����`�LH�қA!��Ӧ�W��5ȏi��ء�HGo���=��Q��;a��vI�Q�Z�<O֖�/^���ݒ��\�?�f�^���������<��T�����[��W�@Jc�e/ mg]������ղI���o�)楻S��D�Կ~��:Njy��o��0]�_¨a^�5������!�����K=�D+P�E<6�%�\ �����#bh�gX�H��oVt�vQˈ?0���� �wJ0d�ճ�Z�@o��"ĝzMȕ�ʊ�©G=[d@$M&�eJb��]nR��@�+����;P]R���A�xA��龛"z�xoCk���^����%0%��b��0�\1W �CaI7���R�#����J́���]*�m��%8a�J��g`� ��h7��V��Hl:�H�w���|Qd.���/.�v��vL��-�Z��m�����6TX�,S3��S۵!w�VŸ�a3���8��1�r���}���\%�7&���6�9G�u%��=�����e��PL}�,�,V��+Aw���K�6��+jF�[蚗�U�{蔛���iJ'2���;�2$o�����(�M=5��~M�UE�r-�F<���]2 ��I �|��.�Ӈ$Uz�}��K1.��4��,Qs5K�����EĞ�C�̺tn�cc�DTY���̳|b�M��©��龌���_��|m��_�P��.hM3�sm5F��iP�hmEU"��}k J�L�iMb��`�ݡ�!��a�n��L
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ