Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
3cb11a619330360b62cd9b9cb9fa13b7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3cb11a619330360b62cd9b9cb9fa13b7.exe
Resource
win10v2004-20231215-en
Target
3cb11a619330360b62cd9b9cb9fa13b7
Size
1.4MB
MD5
3cb11a619330360b62cd9b9cb9fa13b7
SHA1
5485e054b6b2870351bb5c8441ab856d11d9afe1
SHA256
152219325acc1df9af11cfdbaf4fa07d1449b46eea5d0834df62abe9b2edff8f
SHA512
a2197aa0a3e2ef4422411ffd2c95ae46b95bfb468c8bb91ea2a78f70c7be595b823ce359f1e52df75d5e42a2abe39130c9945f99cf316bf7b208148bf8cc9423
SSDEEP
24576:VBwANxffwofIrgyMJ7lFv4yEMjkvfDwrqjxSqi8Bkx2sWGjp6YXGchG+5n5ygf+N:UArfIyJpFvzEGyDwr+SjFxPW0845n5oN
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetWindowLongW
OleInitialize
SysStringLen
H���))��V&��KN>����e<�d�KA+Udz���#l8x+��f��Y%IM}���e�6��N����~��u,ʟhx��LGl���o˺���������Kp����_������R������Ā"A�D_�� �S����rn`ˀ���=��o���S���T9�X�yFEYB�`V�o0�]T��^x�� ,D������!5�~�Lڌ���k�;9;�vU�� {��XW��Q��op�4u:��z"T3�9e�mFu��i��Bq:ɳ�N�fB~6�Z�Ζ�� 2XHZ{94G!���wo���E��,��(zw�_V������7 �H����l+��"���^�����S�p���%���d�=tT��O��̼;��O�0�����={��q����Z^��*$�p��>���Z�V�&�-������?U����J��-��K�dX��ɨ����C��P�b.�cxH͕�zBŗ$E���C/I��nפ��R=H��,[*������aJb�r���e�|�ƕ�LJJ���k� =\[��j �A�R*�e@��b�M>rb�5��y�|�g�X�V_8�Ԥ��ժ�- ��xS ��et ���k���7&�pG��s�%���YT��c���H���e�J���( Bʴ���i+�)���Qrj1>b�f5�;s�!�;�%x�o8����0�/xj�^�`�����qb�J=�nov%) ��e^��0#/ D���iea��OP y�Y��ә�8*���y������7��Z�� Au�]4�5���&�������c��1Q���b��1Q���9���ړ�m�-<���*?�%�eNj����F������Z%���E$(P�V�=Ϗy�/�O� t���ZU��Q�e2� {�P�X��eh���ܵ�,��o���E�[P'�7\z�.X�OߑG��F��=5e'� �yh�Zw��� 3�1�q���M@���A�����JvW�Ͻ��H2�(�"�n���o/l�{����"���<��ԸT��E�R�������:59��q��B����VC[�.���e��@��۪�+�4�Dh9�}U^-;�:�ԟ��@�V�&Y|ȩK�sWOjZ�֪ιf� �o�Y4RN�:��$^��=|��|&�)�� a;%f� 5b�맬v��j���|����P���>j���I#x9?����G�����R�0���/�-���t˅Μ#��hG�\�Ta���(v &X2+ؾ�e픕��h�:2 m��q��������:���# Mp#��"v����;�T�O�ٶ`�B����U� �˨]�[lbig °�����\��`֩�b2������ ^:��!��bn�lb�%���� �� Sӻ�u���l��k�"�?�~3�JA�D��#���%x{�4��7P�YM-RO���L�ΙÜ`�+?�����]'���_&�7�έ��q� VV3�w�z��bnA�}$���9�psMK4�q;����M�f�E߷�SP��q;7=��3��3����WO��d!͕��l��s6�����˴.��.��̏q�Y_���z�**���1�d��|fN�]��!��7U|?�� �@7,��`=���/��*N�t��Gg�W=���SڲA�/�o�?�����ʮb]��7=8筥��h �#�@��ߍ��Y7Al�u9<[E���:��H��P��Q���f�+z:�"��yw�IG6�k S����qi��g3���7�[q�x;R �`3�#ghdq!���z>�|�'�^�>���'�iJ�����l_.J`���M[�r��̓��B�&~��U�U�Y������N�<�ً��/-��9��]b��do�- �����<h+�Y����B%�jמ�X�����[�|�^�P�a�_z���\e���ِ�!#�Y�?�>a�Y�#�� Ѐ��B���a��_M&����b���p2�/Ju��>�t�zw�V-�w�(�I�V�M+������Ku'��[�}�T�=��b��7����D�r]b!��A�w4ݭ� ���D�qюY#��T�#1��������,~-��b���=��F[�c��-sz�у_���y�`3̱5����������f#�D����-"�^=�r贶�Id�J�6vK���EHfc/0�i6������<X�6R!������-�1+�X�`����i��"����'��ԏ��.��� �^�}Q8����㦮z���d]3�F`>�@�U��G&9�Ue��!�RZ���Jh��#����&C�:��X�ߓ1���A�IN�k*c��������/lYg�,L�Y���3A��7;��q�nCKд��S+�1c�{��b�8��Tʧڢ+�j��[�"��dy:�C��c�1��V1���)��[ț+2Y����������;%j�7�7{n �&�^o�{�0�(-��@ψ�|98�0�S=5���W�I��~zT�$&T�'���[J�[���Y�C��)�in��n� � �H�/WM�e�tڈ���UNN�<�����Z���"t�p�<H�Z��j0���=��$2�[��N���� �`s�Og��Z�2�dAz�w.�Mx�:豧����{aL�W+P��[�08(%n_T�����_��<�ӞL�2�4p�����\ˁ�)��:HH���^;��'et�4����Y6�zXpf����=� �]�����r�w 3���k����JV������@`�nin� a�ӕY�<B`ڟ[O�1�T�`�fP>�߁�{���U�E�ܑB5+����H�����M���i�7�W����(����I�8�N^:��~ �"X�* >��ÍI����I>�����Zq��_i몑���sPq�ʢn���0���W�!D%jޜ�5� |�b��K�^�ZF���]�~"!�͇R�w�*_;l�u��9��� @ @��6�ܝ+ TV��)�(x�c��HΌւ�ѶK�s���W�,�%ڤjy���.@��2f� 27@����Ad��"z]���r�����.a��(\�6
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ