Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
0b921ca636bb974b4b43bcb943c4151d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0b921ca636bb974b4b43bcb943c4151d.exe
Resource
win10v2004-20231222-en
Target
0b921ca636bb974b4b43bcb943c4151d
Size
1.5MB
MD5
0b921ca636bb974b4b43bcb943c4151d
SHA1
8d329e44496beb6f8c7269af66dadef85ed2e17d
SHA256
2254c03edcfc07d8a0090c5dfaf82d64ea631e88c92693c6ce345bc14b1de60b
SHA512
32128f3d9adc85870cbd756791338a5c57f1845340da854314cacbd7c7bfe7de68070d22913a04a70510cb54a3411f4d03562779192eca9fba74adffe55616f4
SSDEEP
24576:2rnOpQrM95BFGl5FAjYnaDNz/Tph/gzi4MzQyBzboUX768nJAz+XVZ:26ImVyax/TqsPsodAz+XD
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetCPInfo
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxW
CoInitialize
SysStringLen
4d�-�.�>��im�/��T$UTEVdXu����S�A��;e_�[��F럄�sXc��d����'�H!�$�ZT"c[���=��Ziu��Q�}�Dq��F��"��/9U�������'���5�Z��䤋 -j(<�:qە}�E�ZJ�-/T^�B��}��5jq\3X㏋�w���V�/����{~귕 ��lyt�yu4#m����t&���f& ��܀��B?<���P�0=_����h��r�E�nR.o�ӥ�wMܱ��U�Ke��J�h#Sp�fV>��w�N�e` �D������6<�Z�Ǽ4��ŐH��^��H{�O>4W����{���Z`Wu�����p��x�T����<��=&y`#ѣ ��2�)M|�Ձ̔M������\ #n�?��G,����"om�Y+@�Mt������EVR��Zc��B��uZa��TB�^�iw1W��Ǣ��R_�i��^�]�ȼ�$G�]S��j�w Sv���=���O�ʤ�j۴?Ҏ� �O|��g$1���F3�6�9�T%]_Ѳ v�X��]2�HD��$�K�iJT�[�{��<[��k�� D���4�e��e�$@3$B�m�n^L�yR�� �52��ؾC�w���V9l�i�Ⅻz9�O_c����������U)+�Z<Y8�К&��5=��Rn��4�z�w�$ Ru-;�4�\uuZM�����J�۔�~��L�T����˄��B1U�lq�ז�D��8���^[�-���A_.���@�f��`+;fYAa����Bj8�Kgu���*Y��hg�P��,�F��_�4ۂRڑ��l���&�7M���LM���q-c�2�}�5�@A*�e��� m42��V5�| n�q@�>�ݧ���UU�e� �g�@/mɌ�j7sta�{���(н�8�&)s/?���ࣃ Z��#_õ\XePp*rA�A���g��7b�{YY^����L߉ ����L�����aH|���%^��u'���<�.�<�~��ƴtq_*�=�✛��z���Ɨ"D�/��i�[^�6���噮O �� d��O����� ����<��$�)���LGr+U�܆���Ql�&�b"AbәXH�{�XX'�����_Z��Sۊ��S�ْNX��6�W�'��u�X���� {���HV����K���5h~H���Vk�F��#���M|e�̧s%'�=���1E�sӃ��>']14*rm$#;0�qv�zѓ��Of�J�����Oh�!���Y��J�"� �ZCOs��p�����ʚ��\R��+��~���Ѧ�Ը`於 �e�H��'��_��ܸ��-���3 �[� �q�����6��Ӏ���3 !�M۟WQAD:�BxEx�*�p�����h*�/U"_x���5#1���CůÏ�$��G4:�[���M��S���I�UßiZ�s�q��=����V�4l���A�g1ejv)D(7�T���>��-�P(��W�D������ F�YX�ͫ��R��A/�K^ ����Щ�⨆�6��/�`41$u y���H�ϝ�Th�������Ɔ�Z�D䲍?�!`써��=|�m>�Ĺ9���,8� h/j'��ms�(P��fd�����cs�E]Mޏ ���p�V/��.��\��s�ۍQ�܆�I���U�cH�-���It��J��y*E�F�5T��l��vg��J孟����KϺ��R��e�ᎋ�@Ϝ�qP��ߦq���ڬ�"'͡��lk��LeXc?�5u����;ń����u��K��������F�A�+�tޖ[���)��+�{ �ԛ6��B�vS5|�v<�6k!��-e��RFi���T"�DW�� �Sz�p��VN��MjC�����R�V\�|�� B����i�Of�ttC�z�hv�v�3i�]�]�K8؛�'�.c�4��&O0Zc��wWui��t�UД(4-�����M���X(���|����Ւwi�ءsx��?�A�cs}̵�Vv��a�`��{V�� 2���caŻ�1T��Tt�r$�6����3wO���f"H�4���v�#/���.\�͔Q��Hu�8ʴ�Yܿ�Bl����Dq#ZY��/�� J黀����؋��� ]�[o�פ�rC$R#7�q��w�e�.���Q�Pn�Di�r�Z��^�C6e�_~����Yٕ�U��-�̬o+�nP;^�*�w��j����B�mK2�Ac;>}�o��}����f�{�N�@�9�eH,i3��Q������œ����S�-<�/}��{�{�"8���Ҁ�<@���K�=��T���j��jޱ��r�G�_7��Lk �*k�~ˌK�Rb�1��-�дYNF�TE�Q��[|�/�z��Q��O�k٫�Գ�ۇiP�0�@� `ҋ�*˸^!RhQ������~�!�tQ�v�>�F��!:�����ɨ踺�A%�t�F�;!��^A{��/G/U�����gbצ��j��颺��bu�]1�jc�.�=��)���^����~��1��˕�?�;鼼Ƿ�f�ch���(gYk-{��_���^�鈗-�V^ڨr.U�z�e7���h��Ͼa�ϣ�OJǰ �7/UQ+.��*�~��`����4����ih�;y��ZQ͠]�{;Z�,nد�G�c�����S�3��C^�9P��>j�x������5R��S�>D|n,.T�,�]�(Z���I�DrQ���Cл�U�'�9�T nZt��g���I���}�閰�:�j��2�:^�Y�E��&� �R��tߴ�JL/�D���0f��QLX�� i��'ۏ���R�o3���+����>IЪ�"��%���t�yj�e���l��Q�3ˁ�c l���B�E�)�&PF�_��2;��Uga�6$�!�k)�A��uȁwA���әT�, cF[����F��)�*pYق%��36���R[1bmt) D�!��Dp��!fWA�nQY�OQ�IC���>)�~������U7I��V`֦�.�qp����%tAkPBg����Gv������������; � -�p)$���n�8�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ