Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
3f0a51c99a2ce3ec7af4a5c538452485.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3f0a51c99a2ce3ec7af4a5c538452485.exe
Resource
win10v2004-20231215-en
Target
3f0a51c99a2ce3ec7af4a5c538452485
Size
1.5MB
MD5
3f0a51c99a2ce3ec7af4a5c538452485
SHA1
a9560ac9497a2649087509f2b22564201fbaf364
SHA256
24c5415a4a4972be1f02c903ef52b6c0e00d36224e0ff72f50faf1e6d421b60d
SHA512
1949e459453545ec3d20fdb9e14cfdf2753f2a409708d4858bddade83cb348bd1e36ef23d87fcba9b99f08837ef4f517584308b53955d31e2b42c3c0ec21b229
SSDEEP
24576:D88oQYzENboJ8C8A2VrNr9oGvaCvHUU72RIudRsu9FOPq+yr8C8bJzrenfVb:D88acoaM2HmGvaUd72ILbbJzrSfp
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EnumResourceLanguagesA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetWindowLongW
CoCreateInstance
SysStringLen
w�OJ�����[�T.PǺ+qn�L8���Ǻ'���Q����246H���^o�HK)��9Z��ٰN�IO8/�Jt� %S�P �!�����v{(C�(�* m���o�`�X����%PaBx_��E�~�����?�whN�8A�+S ��t�Xߙ_�Gz��N(BH{�M�Ɋ�5ā, �g�M�!T�J�A7Q���&������~���<��:OM�8�� <��$��s] �bZP��\,`���Iȏ�,p2�Vb�Cse��A��MK���<a�<����'l��r3v�~7�/��S<n���9�ւ}:�%)����Y{J�-�qu��pE����)u8��KR8ݩ������V�I� 7x@����:T�h_�>UYb����@�$���Bˍ;⏛'_��&�S�q�~N�*����I��CB/�|.�"7�|NH��ڹ���%�$e��2s��~���z�n�A������=���B���D� �V���*<?h�ɿ��n�(�(#UoB�A�XF�<͗AؓJL�xim�2;Q�B�gy�Є{-*^T�B2�_'���F��Ʋ��y�z�z��6��� ����o�o�������.+�f4W<�J��V:�hwzzZ�}<Z�T��5���h�VHC�J�?���`�P>̣ѽ�d�ֺ��;���E���&�+���/a��ѓR��v���[9�e�0i��W�X�y�c�>Ea��J`�C+ ��2'�%$��բ�n��~)Z�UX����I��y[7�4`s:.����qZ��h��+�R�BH�1j��兒�5}��6,���D��g���2����xD�\S��Q)l�/eW����Y���+�1g{�Q+'���j= �f���� ��%���^{�>x#����H����jg;�5�m��Ý�ێ�q��l�&\}z�Sa��7�]��,�W 7<���M�*M_�n'���E��U�y��'Y��k�,e�����i��1�G�|�Z����$T2cv��o+Я�+�Ֆ~ 5��t���"�8�o�DC�����L� ���!�N}�H����[Z��Lo x�N6��b��u>3�ԕ)@w wUGf9g"�Yb�<��/v0�� �.�GcC���?%��Q&�Q >U����74�x���X�vL��l> �*���u�X�T�X1/��|C%�dP����g��9�O�Ia[}=� �H��R�2�ؓ��yU}G�Ji&����r�L�D���4��6T_F�ѽӂ�n�9 ��.�� (R�g�.~�K��������1��Z���\kN��/�!~{��ڥ�]�0�����:��G5W��U�g�ߞ0Jo��|-:�:`�O�Sm�tl���E��X�V�lsb�����ew���mk�k�2rys���1I��Ȋ��Wi�5�������V��J��]�t��j^<O�jҽ%���ꠁ �ٶe�Y��S�/�d �q�T܈��X���a{ţ���&���&�&����m�����B<^���E" �f]Td��!k�n7PR���'W#��۔�K�P$;4�����m�&uݥvk@aOR��E�͵�)���(��j���i��� Bso*�Qy����Uq��h��Ʀ�^^�q��sg3���ZN�X�]��ڍ�~0Rm�G�"�[�!]&>�*9 m�I!MLl L�e6yV�P^��A/.�J����PDo���ُ��h�#�?�-�o �f[�@�q7g#�����z�������_!�F�4������8�-�c�Sd�W���_i,����$����gЙ�u9�W��? ?z�l�6��Xc]7oL�1M��NK`u@�[6�Z ��w �K{=��Oj�� ~��S|�p�Zɡt>�:&^�B7�\K-4ŰDԜ�cK����><��C�{�3�Q�nD�����S�ӌ���DV��=,�`������z=�.���j���)UMh#�6:�����|� E8�}�~�����Z�������o�k�4��s����@_��MQ�I�]�v&��4��3��������8�o���l�'[~�:��10-8�u-1?>��G:�?�ΑW"�h�7��G�ou����l�3�"�fMDmVZF����� yRRD`*)uT[ð����ֆBy!F����csF,b�J�&��B[���r����J՟���'�|6�,+�o!>>�#i���0�c� ;��d���r]��i'ya-Z������/Imf���}/^��uk�� ��BtN�IH�w���|��i��ݸ��ǹ��nD��S�1���7M��is�~�/�mi�k�����]����w�Vd�Z���+^tRXi��|�M� ���r���G��ޘG����,�Cv�֧�/+:}�x'O4Ķ�I�c�xue704� R�, �w�2S�UxZ�Z �x�$�)3�p���)+�>:�/��}{�k旒��7������:��uU^%��5��yjE��ö:+��vt��6`�h�(�a��ʋΟ�ϸ'+P��f�Ѫ�kŖe�ML1z��WJ�Bc�k��M� %#P�/�~C}�q���^T���ܾ�E=8F�4Y��XT��B�� ��@.�>�>�ؠ<��3��m�-��<9���k��??vJ/��i����_Sbw��X��Iߖ��Cf�0��:�)K��;�ǭ��X���D�zF�I1���J^���g��ĤG���Ev:x�Jqh�q�B�zX�O����Y����SC��;�/���Z�ș��R��K�غ?�]���;/s�/S�(����S�̩�{/���`�<�H�dx4)I� ߭K�0�cs��� y9�Ϧ.(\�ɕN��m,��z>>C��D��tM�� �t3��}��'�80�8eV�e��Z�V�|j�,h)帡&��<���R7T�`����F��~�tX�|x)�!<��@��^��+�W��+lN��7%�`["��(���-Fϛge#*)듃�����ťI k-U�Ŋ,)S� ����1�d�`z����1�MPO�Iq��s;^K*,�.�5�b�����-��X��b1��g��=#U
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ