Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
3ae2d35c9a4bb24671855457f3b99ba5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3ae2d35c9a4bb24671855457f3b99ba5.exe
Resource
win10v2004-20231215-en
Target
3ae2d35c9a4bb24671855457f3b99ba5
Size
1.5MB
MD5
3ae2d35c9a4bb24671855457f3b99ba5
SHA1
b082aecb38770f30a779f881c7acfcc2a5ee7eb7
SHA256
21d92a0d56f6741b5fd13b5e104b12c998e61af357e8da39552c0df10cbd5f06
SHA512
61d4e8d69e9334297dc4807c9ac17eb43fdfee1502d889b88f2fe3c4034e32f80a419659b044b983c209bdee589357508ba61f0b1037e473de111ec0723740db
SSDEEP
24576:opABm1zlpd4NEat10MilfQCNzvdc5QnN5jsOaBW2hFB1HZSQ++nu0V69OAsVJ:yAB2BR6/iZ++nHgOQW2b0QDZVLAsD
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetEnvironmentStringsW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UpdateWindow
CLSIDFromProgID
SysStringLen
�V�gO^}xfz�ۖ�G~f��U�% ��w�mZ�C���qL��h.�`�yV��+���mjbٯ�.J�����Xe/C�G~�*��\>,f;�K��LG�2�c:�ܜ1�%��^����B��m���&`ȭ�'`��fFl�J�������L/��,��I���� ����u�a�Vq��)��<>G��A��A*s��2�٧� n�#t��J����]���}��i����*3��_<?�q���̀����8ʳx]/����6�D� ��!�q��=���<R28���A�g����,�;�ʾn�lU�����jT˱ꟶTc� ��&m�nv�t�S���p2KFE^�7Ri��c��c�����"��Hz ���B|�p:��{����\�3��&�����N�N�J���T�[a�mJ7JCJ1"�Y?1*��;6�6-̞��?"̏k���o�L\M{��20������;E�+�Q�XS@�^�������T��w�m�\�%������ld`�$�����4�#����@�(A�����ː�n������t������b�2��K.�h�넂� Lk�H�BL+��t���Ō��1��H~Y���:��vi8������ �@�R�۾EǍN%ƣ�G)$�O ��n����:���88SbD�a��7�#��W�;l�\��O��w/�ہ������CCnȑl����"�LS1a���/R�����HڂP8� ��ZFБ� ��[�#����Ȍk`҂C[�k����:� 8b_ ofHH���a"�_��B�qƧ'�(���~&���W��9������m�<�`^g�+,hb��F��M��9,�� �߯#��yc���:t6�w�-A��ː@���m��:r��!�F|���X+Bp"�4�k�8�l<gi ��:����&m�qob9ޞ���ڋC��X#,��4G8��8O�1W i�mV��S�L/W(c˾r��b�6-������`�/$������{���HX���̼�T���f9^eѧ� �>�w�%���g��������M~AmL�� ��]b���sj��.r��z��$��x��4y-E�]�l�3�`cSTꅆO�+&��ᶻx�T�l0�(w!.���OR_��km�2��2:�x�ؔo�{�x��HB�\S;�Vʡ&2���є�@�k>(�YM9�sj߀E ����*eXcJ�Lz��1Ct�i����B(S�"��埨�Gu��3̠6[���_uM�l��V�I)h"�y�rG`[U��J��4$�BM�j ��OJ�,��J�������1o�n���+Ro�=k�M�\��yB�\��;u�TNJ�].s��A�K�gT�>8z�p�}�Х�}�$�v���8V��{�BuO�,�џ����x��-奉At�mx���"@�G��L�l��\�,�{�W�����b�_ԑ�y�H����cv��|��lo�CR���:����F':<��*�a�` ϓ���|W�qv����B�� k�]D��H��$ŷ�;.?���� ��."`uo���������Ɔ�@����y���s �6u�$�G�(8>���ς��P�0z%�m�!Ֆ��gA%�y�D�� I��oK��TNF�όo����������#����<���ԭuԚȳw_s�dn����ܼ�+�z��AO}��yB����fx����������#�dچOo��=�6_ �m.&N�`L��HB�2�\ �Y_P�����SD�.�p3��b3���gbAO��;��5�_cY�e���X� �Z(1#�Jm�u�*�+��X��^� �M�ٶ���W��)�kw?o�.a�y<��: s�`T�Ѥ����y�H�k��a�~���Z7@K/=��|}y���zA�����9]�**��kް?�T]��=��Z�f̅`�I�TDdG#��ٸ�}�q�*����s��s^��͞�<<[�7 �h(mw�{�j7�2��>�_���l�&�iMlr����L3*�ȝ�Ԟ1�MXA���ߊ ��M���� H�u�o��5F>wxU)����<�ɹ+�Ue��$Ka+� �@��f����qu�ȝ�a��� �4�����+q�.����fɘ���w2ӂ<n�=�'to�ʌ��k�8��'���ί-�&!�G^�wѺ�P�;3m��nM�Yg��я����2� R4�NQI�x�537�R?i}ã���@��;�e��w��{��������ۿ�-����м[>�8��*�O�G����v#S��J������)�j�UGF����\�Ҍ��CRE6�L����O����R�s)�����]у�9���c�D���bhgc[�e�X������q�G���Qg���%9K��b���F2�{Q�V��%���N���1:�Z�������>�Y�(���g>�����u8t0��!Ux�� '�!�V���1x�s/�+��J����[m}����G�_�%�^�;�my�>���Si< �����e��~X�^���J����=ɐ|������^9|���┘r>J�A%���W��3����(M�P����v!��kxVn� �\����)Z�K܀�M3/6��@�w��2;��m?�8e�Wu�9�� ����ꦚ�K�Wl������r��k# ��e��I�s��D]��s���/��#R�A;�E����N�%�?X���#�"���gY��#O�u��98(5(���f"���7��ɼ��ƫ�t4�)'���kB��6���vD���im��d͟����'k�E��,��g���)�+��.� ����t ?gOt��xMKA�̺g�Oۉ)��O� ��I؞���:�x����L��c��"zsK�jo�(_p���'���<��u rB�iY�R����A�q�*�,R���^Xx����fx��w@U�ߓ;������;�.[� ���L�+��( ��H� �f�I`C�������^-O�"0�LZ ~���GQݽ��h0���� ")x0�s�}G����#�3ҥ��̫{P��.��)�^� 0ݺ�kX�C)]W�+8�|U�v���2 θ|~uO���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ