Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
173043464cae92a794de10289ca7e7d5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
173043464cae92a794de10289ca7e7d5.exe
Resource
win10v2004-20231222-en
Target
173043464cae92a794de10289ca7e7d5
Size
1.5MB
MD5
173043464cae92a794de10289ca7e7d5
SHA1
db83739a56750e4b8bec6cca8a96fcaec581d287
SHA256
10f90b35091e63b0237a7d70dde0114903776a50e587237c6ae11c72e942fd9b
SHA512
bb98c01bb8f79a338f69617199ed973783b9ec1f4b05d6b0c0231524b9dad23fc6970cf7308c3fdf9a69287ce03712e91d981200b1301a370d42f90aedf54f4a
SSDEEP
24576:xBrJnTcrdhr14uxFjCWzV7uuEdc588p3UGiimQT/t/iVySiGkNZmqF3HI10vFfSf:3JTcrdhZ3fbzV7pEd543Unixl/iDkrP0
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SystemTimeToFileTime
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
KillTimer
OleInitialize
VariantClear
oj��e@Ն�l=�P�Ӟ�'��8zmojS�H��9�kumu�.�ƣn���U�_�v�t5{[\�BNbm�������q5����/�?&�"��ܳyS���Db �vBU�#���-kM(���t�gp�^F`�Y�1��qLi<���0lzOqAMjk�M����@M*Ʌ~-�r0&�i� CV��hA�Z�qX�5��TS�ws�����Ҁ��4\�yF��5pF��E\�-����+�σ�%��]��V�)�����"XP�ސ�]��[r�{V�6�B��6�b\J�1%�� f��Fl���92�m��X����M�����7ȁk-ݲ5�ѧ�8�9��Mg��a�)��=���/�� ��8�z�Dm�!�n��<$�6-_�Y���Qޗ̏Κj��I��.�k#�SS2�#(���I�$�v �vN����$���L�D�)�^[�iI���t��Ո�����F�<�#ޟQM1Q �jkVGB7۰c4���Y�_�b ��*�J�9S�IDY[fQ�X<�Hy/�H���:sq&��1�uAsQ^�es�Uk�ۥ.�si/� bY�4ʌ=$�s ��λr �k'9��m��%�`P���h�'�n�O��u��3Zyƃ$v�(����͛�md\��3�9NU�����L>���dw�/���^y��������`9��?��dI�|�K���l�52v��d�{.����u����LM�e��mp�t�L�:��Jʍ)~�[����.��y�'�us�Ҡ��K���_&�X���t�ۤgv3o�`їz)� ���r�Ԧ���%W�oD���`_-�+���RJ+�An����@� ��sdf�j2�¤:N[�k$��l>�]�rޯ�_[O�>����5��4�<�^���^��;��U;��گ^�� ̼)��nf���4Y�E��L��tKV�|��!ϱ�x|Ë�$t����< f��6`xM��_�1OqP������rl�����a} ���B-��"Ƃ�ԛi}�ZDwI�n�OU��� ���+,v��Q����R��2��߸��""�i�E�����?�Ջ��b?�tN`�� ��324r��B�����<as��V�j�!#�8A��H�����9���)1/L� n4%�a��Ƣ¶T�GOo���u&,�ӌR�2۸�pEA�'v���y�AÑ&e���[�-s6)����|9� �݄���J�d����Qv��p���G����Ҩ?�zm�g��}\z�U�A@퀣������oxx�a-y)�͘���3�k+�|A����}�h��j����y���O`6r��A��#tԹ���fyRO�ۯ�z��7<��������t���@���h3z> �(�� *n �ԯfc{�X7�����)�E�:{�:[������� ��N�����<D.vt=3FÆݣ�����\���h��s\��r���������(����%ԧ��sM��@$�U1�e�.aG�������Ŀ-�xR|O��h(9��n��B-K����3p� !�����X������S �oM�}�VQ�^[�DRz�"tY�#���$��}L��y����X�X#�t6S�৹g4�>�'���B���bon{����]Q<'�2���2F٣̝wqt��RL����G�㜽���Ӕ��*E�@��i����J��aL;����W�T�bF�V��Nc��m9���J$K�+7�Oj�J����I��]����� ��}�6�sxT�-��6���_���~��r�� ;ȿ���LNR���Cc��a��y\�q^2έ����Q�Fb�D\%���U%�묛�s�������z�P���xey���Ѹ�����i����M����� (cq�2�������ZR��n�j�����K�����Uٚ�@g�AP�k�l�Y�22q�u�L"�����ѝ�=6��n&|��f`�>mk�@MCR�7�!�����A@�_8<�RwM�T�ws���t���j��:�(i�P���|~�Ƒ��S1۳�!�C��7�PuZ�CҠ��cwS�[Wx��T��[�;��.���Їp �P��=�4JТ�7-����3�b�@��FYYW�% �ڷ��?��w �6�i��mĹ���=Kkv[�֊�MN�����D��#�T���ϣ�jp>$I�.6cְs�%n�)�� S��8��%��/X��ڈ��]��n�fh��\��e��ܨ���ݖꓚo�ç���s ���rR����(����4X/����j���b�w{����NUFҮ� ������/���4?�E|�Sd�4������0�������0� �l]���?���@}�$%�����������:�<��oX�W�]82V��:��>�Q_��<����E$�����-���Dcu�w��L�%.��$�5��%5���;m�@�OP�}ͼIp�sFJ���EN�N_Ó��6mbX<Uy���h6�C�'�y�-NO+;x��q ڬ=3���{��U/��6� J�B(��:~�p��bH����wh;�� �:���ԏ�r�h��<C��w�E�O7~�7�T*�d��oɄ�G���<�t�_qԱ̅c�/�p���h���VvΕ�ރsw�c��X1g���%�$yX����ݣ�D�$�t��Y�o�����.b�ɚ�a�d�m�p �܊��C���w:iӇֆ;YU�-�h͟Kꑾ'b��t���_��l�zZ`��c����rm� ���JIL���f�Zu�����>�X[-n����O3��A?�`du�\�p������|�sCx����[��d��!S���ޝ��ϴ����3O� ��H�c�1&�H���~��:�)��O%�+r���Y�=��>�e��*xv����;���<h��z����Ƃ�{tX,M{��o���������yĕ����}�d ��f�V>��Ѿ���]��0Eҁ�`]=���^J�����ڞ����O�E��&�#��-���F+'����M��.�"]5}z� 齸0��o�-Rp�Trf����@�(nN�Ҋ��O5�պ�ϲ�;���V����u���[���}G���r
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ