Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
11da0c15616facdde4db342311b5b1c8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11da0c15616facdde4db342311b5b1c8.exe
Resource
win10v2004-20231215-en
Target
11da0c15616facdde4db342311b5b1c8
Size
1.5MB
MD5
11da0c15616facdde4db342311b5b1c8
SHA1
1168d88a3c735b883796e9c457e82b34798043cc
SHA256
27465d9b23eb4334fe5182934e73314b675e0ab5a8e449d26b7e57727c80da2a
SHA512
c89ede99c0b185095726448b6695d9e5b0aaf4092b00b2eeae2b12da81ca7e03da9af6e6542e8dffc498722031982b4f3f4cf892c5a6c6a7c0a03ebe3593778f
SSDEEP
49152:gMiwQLc8JaNov1jXc9Et0RY1PgZby1eE+gOyM3K/ord:h18JaOv1jM96auIW1exZmoB
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetModuleHandleExW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CharUpperBuffW
CoCreateInstance
SysStringLen
9��Dw6(��|NO���ۉ:&@L��3��Ģ&����2.�h��ZN���Q JM� g1�rU��jr�H�Ո�T�ʴ�.E�}۳�⇫ԛ�Zwu;��c$���>8z��b�B����r\;Q��߀>�6�#�{*��|�ļ�#���ߧw&�H�2پ_Oe'�������@�osD/�C�eJ��Zs�Rv���0�� ���!-4�@{uJ��೩�$��ȼ�����GJ ��6��O�4� ��H��L-0�T������T�?��!��gڒBA�U�S�]N�_��oK~H�v�jB�x# �[ע-"EA}�w�w���V�=Lc�0�S��l�,�b�������,���n���o��vg����y7j��ax��n<� p��}$u�r�Φ������"�v�)�u�����q����� IM�! ui�m�������[���5�������ϟ��Z��D�uA�S�w���u�ݵX��[�r's4��c�_��nD']L�>U���#��M:�������kN!T`g9��Q�(������b�b �x��fm���`n�K�.\��K� ��@�����D&�)I��|�P�x {<����mD��.�n��3���D �)�c��D��u����څ�+�V��"S,�{����Zw#htA�I�g�џT걕e&���vp�$q�Q�%�,��o�v�zW�?l��Y.���O��@,����9~S��\`�3� -�qQKf��*mBq <1ynӼ0���n?|�4��yL �.�����*k���h��pp������&5����k�1��eQ�֗��Ux�8���妓�Udzkn�L`���樌�S��W�&0߹�-E&���8:��������MZ<Z���h���e4 e����;宴<̤�����s�1_�v����C��1S��D��a�|[�y�8ŀ"�DF�2]�(�Ӓ���r����F��[:9�Z���x#�"�k�%K�lǀ�r�y���lR��yf;>����VoE�:n5�B?s3qu� �r�e�� U1iat��Y�{�r�@����\��d�&Z��,��M���G��(�P/���RZ�q6#��w����2����� �����5��������Ag|����9BrrhQ_���7���Z�a�ә�j�I��N._����G��鯰I��~{�>�R��,S�2�cH�j?����<i��&m���i�i��V��B��Z��WnWB2��m�Э���3�T%��e�N����g�g D��;3�1L�u�v["<�+j��ό�9&����>��W��J�D������L"���"qw��"��ͳA�H(���16G��=�J��)��iў���7��Z�FyD�S����B�h0����h����mu0��g:dWdNf \�p����q��[u�CNC���zK�=�A�ֈ��9[�$هU:�n�\vAe#�6F���N8����CGf}��5y��x�'D�vm�'���!�k��˗=~���b\;C+55�����A�uR=G�٠j��2�� ��E�g��g�*b���j6�Hfqw?��������x ��K(q��` �J�t�f}�Ow�����5�H�US/�8h�����\h�r��#=���3����4����������L@��x>�s���9�9A5���Y��< Й/���%�*`�/; �v�6"3�{�s��ҧz�X�(1 ��܍���u{ ������k`��r��&�jL���a�����������([ �����D{ȦB����G�7� i� ��WF'5�z����O�E����Jf Vi0�I�d[���۶� ��M��Ĭ� �_^)d�Y�d�������+��"��=E��g��N������^�,�\ngW�����ok���Z�̃X��~K�|3��57ME䬦"���ߝ�"��vH�ڋo��0K��f�}�Zwj�j�|���yRJ� �+������``��m�;{�B/�2��~L��\�����k�_��k_��;|�4��y��M'�]�?�+����*O_���lҿ�=9�<#��#V?p�&ʋ�?,�HeN�<t:w��i�`n�LH��:Y�΅��HG����\��qoQ$c�Jur�wQ�V#����a��l�AU�������RZ��#��>�H���]��R��W�)��[��iW � �'.B���I-�˰�¸�p��^h�wNp��^1�C�_j�������}<� �R�����WQ�"l�^Z���B�/� @瘵�9��¾s��{�dY����}��Z�k�����8��� C�oP�d�<FJ��d]7+�V�iD�r�' ���Ez�(k"nG*��)e��J)��Cg�m�&֛t����=cj����^r�����<�3<Q���n������!rY"ݱ�t�g�n��R�2�e�G�+��ա,�`M�U���3j�Pw�y�3����zĖ��d�~�:��JЏ��G�lR+�^%�CH/쯏:'����F~��Q�C���������T��?�ML�Q������!f˄-+A�?ZMk���� ��?�4��'P<�{ߧ�ZK��z!��*Cs��+��)��*���R��#��0y0��T$t���N��9��]�f��K� �a��5jd��w�^�'_q?��VT`������آqpX��=�.ྔ�cT�˰�����/HB��MzO}!S%Җ�4_Àm��aǚ�1�"��%)nz|����+�y+��_�vW��-�I=nֵ�/�-���W��p-ޱ�=�-���Kb�ߍ0$2W���詃��^����\��0��T��q� �1���l+2J��^�Q�������0���B�����H�a�����_�y�l��C"��S�ݟѾ����ܙ���^�e[/ �8Ρ}�yY�S~��v �W �b+��Q3\��#{D�'>5&��p� _�9�[��C���%���� @���P���jC��ЌET#��Mb�� �ۍ��>����z�Ui��ilgP��A�M-�����@�:��t�B]�����vb��`%�t�$A�V
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ