Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
7bee077f482a0141bb5f25c11432293f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7bee077f482a0141bb5f25c11432293f.exe
Resource
win10v2004-20231222-en
Target
7bee077f482a0141bb5f25c11432293f
Size
1.4MB
MD5
7bee077f482a0141bb5f25c11432293f
SHA1
9bc1e197cd0df2ef8f86430137ab1d3ca015b05f
SHA256
1128e407f3f04d0cbfe35973192bf5291ba7c31113004b58523ad4abd694b3b1
SHA512
fa2aa67d5b222a2febd7517f6bb54b285c4263f91331a99d8d6a9dca651948a7492cc507948b3a008c4b1e09341b8e105271f5cbfc59a4cec4ee12bacecac41a
SSDEEP
24576:zOVysb3YhbsJf3wGaM0IyH1mwV0Dg4kAMIUuGZ4Rz4silWqcubwL2G5zYuY1IqV7:zOVabFc3yHLNzCGt1Wdub6Mh
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
QueryPerformanceCounter
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
TranslateMessage
OleInitialize
SysStringLen
Fyy&���#��q�Xb뛮�"N/�H����B�z h��$�D�Be�D�f"�7�\H����fu�]�U�U�r8�=p�Ô� ���D4me-��8��"���J�Ú�G��r�%0QOpu�ǥ����Sz`A��:�-��t����g��ϐ栞�̜��a�'Y@��4�y�I{Q�MK_�/���[�s�v�5�y���R/V����@N��@X�%��Zs�؞"s�TA�6��8T���Ɔ�� +����������cR>{擹�DD��c~���D�5i䇠�ֹ�h-r-��\����X�`,�� ���6o�F�I�ޔ=��$�-��z-,�bA�e��2�y��;�ֵ_����IWm����w*ʹL � �=!��ް���Z/� ��$*��U}��t��k���|���O�����k�'>ۘ��d֔��t������ ��j�̓�2� ����/)S�0�����.�� -���V��B?8��V�wE~�[l��Kv�� ǯ�H�_���V��u(V�/��=M��N�8uK6�/��5B�G����<��}��n��A%���jA:Ԙ�2L��3�!v|��c �,���.jSe�3rFo�=&�/�.�F�9�-i���hƪ�Ο>�M5\�=�����~��*�0�I�~�^�^$�Tb$����lٷ�m4`��b�U��lk�4� �a�{�~=N�7�[{}X�n�]�%�l�W ���wB拕 Se�Y������ձUR��{��kH�Rw[��� i����/�گUۜJ �윂<u���Ͳ���3OR�A�;�<^��p��:��<��y�;��<���@3�!#DVK�w%E��r� #P �����0�rMl�)�(g�V�V�jP �wv��ڌ#�#)_�o0����g�Hv��p/k�D��.�����4ޗ �I31�#���W~�TN�ϰ�|���~u\��te&ȉ��>J~��e'S'�R=s$�Ь,e��H4��4���x�P���鮿��������b�9�{�5�-��k���-��������ʳ��!�����QeΈ`���q�b�e������I��i7|<>2�D���^���p ���/k�����ŋ�Y���YY��RU,[�K4�H@�����x� ��e/u��I�JW��4�=f�(j���q#`�d�[�#�L�ᵫ"�_a����(G]�.8B� d`F��Z@��a�t�h��E�!#!.�r��;�:b�R�+B�MЧ��@�����c:��5>7(��f�7�_��ŀ��yb���xw��;�DQ፻1x�;���%j?��Mg9Z2>b /u�9��3����J��h�N�� ���2`�Sj��8�b�еB��_� U�}���{*Ҵ�K�:W .Đ�HE5JZ��d}�-hG��Wꙑ%�������z���\����J���*z�@bٝ���I���lsu��ʊ�)���}��R��kή�q?���j��&)� VB$�?�����q��탻�F��S�"ޑݘ�=tzu� N��/X1=���JL� ���B��9�K6�����a��a���3?ݶ6�¼�5[���H\��X��o����y�g,-C=�4��G���(�YV���(D���g���o�T�����n��yB��^٭���P�ʺp�G�(�ļ]�|B�6@x��.C�6�fu��w�'��m��^fZe���ĺx���<C{�M>"�ޙ���G�4�P�%ܽ}rjղj�W�߉��p���#__ s���q��@�9 ߮�5�!�����D���(�{��9,��OnR�R9Ҩ��/�*�/v��GK"C�f�����˓p���v�a(�L�"��mv��W��-�����z���BY��O\��Z�P����הƿ�J�N΅��sQCk�Ӂ����r��s�� �O!��3������<�K+d|^�֦�*�[]<h\��+�@ ۾�(�M�bJ�Ϊ�0>uC����dK��)�*�|*���!�Pb�Ҁ�0�聜n;F:�$��߅��<����{#�P�p��=CF�Pla.��#G�A~,�A��̴�s�-ܖg��=*���ub,��w��IZ%w�Z�PW���ۣb_$rഛ��9������KRg�)�������_���1d�=5����.kֹ�h �/#���?)�C�t�K�.G�(���͂ː���lB����2f����+�9��m�6�Y#����}�d�50���/�t�5��Q���P�*B�Ŏp{�5Ntz9K�%q�m=i�9�� ]��$C?�K#S[�NUY4<el����[�ҢI5c�?P�E�l���:��-vA���+��3����PI�$`�en��&�<�C�Gf�!]u����������Յ6+(K#�۰��3~ N��l���0�6j=���~���O"T�~-#}7�?�j���ԪZ����=ݚ�������n�M�w����o����}wR����ER��[�ړ�����Θ��4��s�Ձ�+G8 WsG��q�h����9$�����N+��Qǹ���xRNc�kf`���Z�ҫ��4�ZwdD���O���d��O���8�npwp}v��hd��-������l�5O4��y%|����\gV�a��@�sݞ�PP���(����sQ&S42�Er�K�QGХY~C+\��$>����*(�#-���� ���z�k"��'���eIU���3OXggoo�7%u:x,��=^��EG'� }cr��:�LL���7� ���<FR.�{`�+����W`� 컶Ք��:�-� %�㊉���*�����<:�ZR�Y����$�Q���?߮U��t�Z���j��@i\rX���{�?��/<4U ��J.��UR^��*�gL����W�X��{8Ɲ����2�\����k<b��ro�N_2&?�g8��o�ӜfZ彊���ho~���kb��_[�*5(SNx�y�qf�lRB�G�����_���E���^֮F@/�l)������D��wm��� �H����Ȣ��X�����ِ�;6)���˶�0�~�c��D
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ