Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
a8c24a3e54a4b323973f61630c92ecaad067598ef2547350c9d108bc175774b9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a8c24a3e54a4b323973f61630c92ecaad067598ef2547350c9d108bc175774b9.exe
Resource
win10v2004-20231215-en
Target
a8c24a3e54a4b323973f61630c92ecaad067598ef2547350c9d108bc175774b9.exe
Size
7.7MB
MD5
87429e9223d45e0359cd1c41c0301836
SHA1
120891212a78114fe114217012c2a000727e034b
SHA256
a8c24a3e54a4b323973f61630c92ecaad067598ef2547350c9d108bc175774b9
SHA512
0cb414f704f12d4bb416404a245271e1ffcf9466d0c38b3a0d04262d7c20c7626b8ed2a8587ca2afb8b6f823038dbe039d02060a0cf0c2434d0be86776b08987
SSDEEP
98304:3vCofKumukMN83Og7Ob2gxYKkLqmVqexgNC6uIcW+r+vgRZQTdSLUTJywvM+6:3vCoxkMNAu2gxYpVqNCS3+r+Jrvp6
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
WriteFile
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
WTSSendMessageW
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
�d��G?o�ZL�[6����u�)r�\��`OƆ57ʰ�ּG�K��q�,�.�fd˾={��L"��L��7e�e.����?���ZIM�eA��N�C���O*)���i�y� �gY h����&�ג �K�6.��y�A���6���ϒ�g9M*�^g�}�/A�������B���,le�d��a/���C2с�@E�a��;4��/j�>���o�*}UMl'�np �l�֮;q��M|˞i�� 5[��mZsw;&MS���E�<Rq~$_����z������X��&�6W_�PA�۸U��b���bx_x0FqеV�\V�����l���8n��@�C]�n��+��}۽'��z�� �]&a?#���[��б@t���C����$E'jڻ�%���#������57o��R���._:|0���2�Tw����.x�4��f`�x#�P����,���x�l��D�g��ؔ�E��r0�ʜ�X��r88T�� �eq)+��t�'Rċ��Lr��R����l����tekX��n�z��Q�T��8KÇ+،e�;�9�J�� �;O~�DrE�h��O�b[��ֹ��߸m��!���a��Ƈ�@���F&o�y+�����OӀ���?'2���rǞ�X��{(�bxC��$�� M��Ke�/��YǶ�ua�\�)�g�t���ϯm��{��Mس6�� c���ӿ����G����|Jz��,%��\��`�5�Th.�7����!�[��'J�4tF��B>�+zqz���\�V��*o�e���dJE)���Rj�!Ϧ��I�C�hJ� ���Ҽm��Q+�1mrrF���Q��֠c���VnV��̢>�m��5˫��λ�k�ň���ÿz�ƒ�ۡ���n����j�2�乺��gM�Q@%�U�nc�.\v�V����`E� lQ��蓊��Y7I�(��v��=�lk5�:��#k������\���p+�I�ةmە�?ݨo"�6�V��77L��_��d�Q�:��Z���k|{7-���ݒA]�r.�(��ŭ�e��vV��[yIÝ܃Czm����2s��9��0�����}&M'����|�Z �xU��q��L���T8G(����0Ձ_�o��}�)�" �_��B8��1Nh���\�#�¶-aH�[���������O�ۭ����:+�BN��tv:D�G4An:�e�1�C��?�;����m�� �ē��+���V�ɘ�H��*�W����J��2C�k���DAϫ��*%61e��"���km�Q�p@_� �Hjavޮe��̫������#�<�Lb�@j��v�|���n�Q����c�B�S&5|�t7�R�k��0�e���;N�q'�G� �[ɍ%4�-�[��2.i�aӝU���Sq]8��'E�k�����C\���K�� �@X�ͽ��^$�Nޥ¼�cܻ�o"��/f�)5w�Dv�wF�Z'䢟�¼�����Y��VҐgk[�{��X��e�T��t)i��#�}za=��A���{T���˚Pfe�����)���ţ?��]�yiG�� ^����m�q�'[��r �r����Y�~�[7s�u��0-y�c��F�� ���咱sI"#�N����ކ�j����meì�3F�"x��5��M���M��5Վ�xC=Y����I���� j��ص���8q�������msG����28�z G�1��:��Q���,ߘU��MdK=4��Ϭ������m��$pc��Vm.2�N-C���`2��va.��\���'��Y� �X�4w%%��Ш���!w��e)?u˿�����^MX��ߔ�0����������>,�*)��[˰�J���W>�se��zFkR���7��Q� ����*������7tw�+����C�1_��/X�}�R���?T���e�[B��c���xb;���z�� (k�$��v�U9��ܞ��Z�Ba�y6:s���6X�^Ӳu��������nC*}�4!�C>����%`�E2{�*��B(�<�P�qj�̵d茮�K�X\�w�tJ��B�v,��"��r�I��t�o����*闟;ݗ8F2��u傄d\�K���.=X�To,�e�g��Z6�6~��P��`ϗ����P&����� ����{��K ���^d�;KVʞ��������0i�������te3s�d�mՎLD�j��������v��_1)d_8��D�d��t,jZ.��C����l-�����ס�&o��D}j�4����1���+=�l��33�/�E�"����a�^0\@���!����cU2�z~�{�ѣ�X��4���*�7j��In��8�� ҇�qa�����i�O���KȠKs�Pn�N���P� �Ζ^DOUiA����F����s�ce�;f�~~.���Z}y�T��غ�"��/6E3�V}0'S3�߳Wz���C�������³�~?ڑ7�8`N�k��#!%�}�cH����g]�w�����n����+��hLi+�0�H�-8����@r���~X����O��~ H='�I*mB88�d'�jy%}���L�:���|��M�RԝN�2�7`"J ]0 ���S.cxH�@��sXw��u{���N�\T�t��EU%w��[����Ch��\��H�n\�j��>�F�/k)�ف��I6!%��+�,���S C9�g̘I���P8q�!�����cs���&�h>ot�< �'����B��"K!���jD�� �X��p�����au54�5�֫�^;Ԍf�0�5�-=D2+�:f�2����?C��s�WqK��N�?����2�����`��� b9��8�g���%x=��r�VOC,·�kF`���Erqu���}+��b������L@}��pʮ�R���,]�}k���2����#y`�3}q?N��}4���1��k%��B�s� ��~y���SѲI�'����'h�"f�Ρold ���x�F�t���bg@��Y�me�&I��:����D�!k�XA�d�Qt��s�h\
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ