Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
48fee3f7fb4dcdcfccfc6e74942371df.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
48fee3f7fb4dcdcfccfc6e74942371df.exe
Resource
win10v2004-20231215-en
Target
48fee3f7fb4dcdcfccfc6e74942371df
Size
1.5MB
MD5
48fee3f7fb4dcdcfccfc6e74942371df
SHA1
fa9731b2bb0547aa6705728000f4e31ee086d16a
SHA256
14b738b60cf2d527f225b2292f8e53e40fe9a4ae38e89e5672b33f9b5e203d0f
SHA512
7c2bb431695ad4ca397b391c57c68f1c48e9160f6a06fe9594f9eab2b0f609103e5e875f00c52e8bb6b924f3df9175593a808663e82172f85b07c43a79241bf1
SSDEEP
24576:mPR3jPXipvXLWA22ZsP30jW1A8WQt/Jm8T9V0Y4OuPxTdMt3MST855Xn5bbLXGja:mP5zypvXLXZU30q1A8WQt/A8T9VhuPsw
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SystemTimeToFileTime
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UpdateWindow
OleUninitialize
SysStringLen
���#�v�XQ��,�JL�6+,'r��2c� Ή�Q�|�yi����2���=Z��V�lR>v���i���D���V�vٓ�"��l�DYӑ���Ajۺv�����=������FW�:_��'<�8(�B��5�\Z��B���� *e�R&r��-��?(�rRD���曶�m�ّQ���!��u�!������Z�ߒЙb���,�"�`!�Vl�Y`��������q���Lv !����#+��ڇ��WƎ�i?fĊZ�����psb��ޗ;�0w.��D��'V��\���2!K�_������)gW��n�HJJC}E��^tK�X��\����F!-7O���_ <aΦ%w�_��F\LA,�'�|���4��Tڱ���Y��3;P�6�S��-��u_ ���g�U�+{yD��˟���x��u]��!�ٰ����~�z��ĥ�,j��*��ڃ�}tAT#�m�v�c���CP.L(�~�k�OA���뒅�%�j\�F�?{���)d�牷��=L����)ﻆ�\��6���xG�c���]N5����6��PR��MC��ӧ���;�gW� �"���tk��A��T�[QKl���mթaz�y5ِ!iZ�x�ժhj'{AK�w��KS0���縦M�ޙ-��'��~�U���^��d���F�A]xؕ�`k#b�dбKQ��Α��'�������4&���rh#JпJa�贺M��Z*�����M3ݑc��:�p�){@h�x�%���Rڇ{~�^�*�����H���b�/&um�3����6 � �;�Q�Jo.�a���1spt�$�IDl��w������د��oύʞe�- F���8A[2"]w����5/Ԯ�!���$�����lն��b߀@�� ȋTkU���������F�^z��G-��M����Q;mj�&I�R����NU4��N����eb�,��4x�TӼH��8�� � ��֜��3u���,z@�7[K]Ռ~}~5I��1�o4K�a��£�g6�pi�pPݑ��S+��v|b�#.����j��1�S�MF-*��G3�Z�+����(���w�AN:�.<��24s �ݞ��_"�oJI��4�X��oS��`Ȃ�����*��vGS���OĹ��rPCp����ف�c a6��kŨU���c~��n�z��&d�mi���l����IS�WM���w�.��n�X��0�LZ����r��yk>N㇖�xʰS٠�\��a\<�MU���\����ӥ�b1_�!r_��:}�D�v� ��/�F�{(�n��6Ƽ�+��eu�ws�rf������}9��ք�vy�ٿ&�RY����Kv� �˪���/s�ݽI1� �LG%�= E�-��;���t��E-����X53��v�뒯���G 0&ӷsu}�man��شC) �� @����?ʧ:ė����z�S>���Y�'[�Y�������c�~���� hZE���{0��f��wc}N9@�JL�(�nDd�"�����{���h:^�@�����̶������o� �6}Ǵ��s��B6<���j1����=pM����F�� �bl]�ҍK�5���f�Ȧ�uz�MF~+u۸C,Ϡ��������u� 8o͏LGS��j��/�$&�$=�lܕH���;C2��|���zpr:+�������>�hrhT�g��fSZ;����rS"j�����T���Z:���L�!]6^L��l�{�b�Uյ��� ^ [��o���m�|� �Ƥ��s�z����ۥ}d-xwQa�Bͻ�E?74G�k��lty��'o�`�ue�n�N}RǮ*��2M,��]��ʯvV��,�W�g=R� 7��5,W��1{?_���A�gW}7?�eh��sny�E���)E���{i6}��Co��W��qbS�$�I�L�`S\���TZ��I�v��W��Y�X������ |p�먲��K����M�;:�?��%h�z)wſQ�tg2������e��m��:)�f�T �yZ�_��mZ��L��(���ƿ���s;e��m��g�E�Bo�u�iT�:�B��H��8�cP3�� ڿ�s6㨊=��%�Ű�"��� �Q��I՞?���Զ�r���u�ⲵK��*�6�iu\��(�>H��b�l�$�/ $�]����s�v_��IF2ɰ7ag,�)_/�d�������^E3��i���;�։\}����Ĝ;�,K���7��a��$v0�+m������B�|�H�o&�5WU#�/�'������9�JG@�څ��v�$�'_25\��kH"��q����cPu�?��Ă�������(@u�sZ���[z�`�m�?z�����L̉��ǵ&�;�q�oV�tsv�P���E��K>NAm�oQh����rn;|�V"�,/�?2��+��j��'���Z�|)��_!�� +쵑�s�����u�1�.7�<��<Pޜ��R�%gT��@��uy�Ϫ������v%�I �Q�,m4�l�jh�D�eh^�Rz_y|p�#?���a!�l�gBq�~�.��U��5̶A��k"}q� <��6�'-F���~��,F\����~�H]���>1�Jh���?����5"TG�����n3$'T�f�6����S��cd�6��}���K��@� v����6u\��w��W�s2`�+��d����ox��??���j,G��wi]\���Dҽ[�����e����S�#i�J�;=إٸ%{]+&�cD���^��F����A�~LY���y�q^jz)�H �L�`�X��t[���9X{��»���\�Z��+3�������#i����э����f������=��E��裈Ҥ:�3����w�;vTT��_�hѴG�t�k%�M����W�*�AX � (p*�]>"��Z��,�+�<�v���CYV�s%��k2����m���Ns�.����3� �?�q��f��ɰ��j��v�Zwu���4_��۶zP�%zh:�:)�xN_���~���8�����z�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ