Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
7f00554ddcffbcd764b0d294d42c77ad.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7f00554ddcffbcd764b0d294d42c77ad.exe
Resource
win10v2004-20231222-en
Target
7f00554ddcffbcd764b0d294d42c77ad
Size
1.4MB
MD5
7f00554ddcffbcd764b0d294d42c77ad
SHA1
d7e3fd17574c03e4f66e13be5020e32988c3034f
SHA256
2025c0382b1a09d2ee0a2a3757d40654f5e7773a0e937caa756d442ace73ef19
SHA512
24e6cf01062ad249ae4065b39cf92efad1424418e07b0c79fe7d0e3d436103b47fe3764430761ed10a8a756df1148dab407b4ebe36f1dfe6c6519246a268e45a
SSDEEP
24576:J4+rnhe2NvkFtcLdagXFn2q92pmkVQSt9ZY/7AF1UaEc23ZivfXumELs6UTDuO5z:xrnjCcRJnhMTdtDyKQcuwfXB+szuuz
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CloseHandle
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxW
CoInitialize
VariantClear
/�J�(�����Y���d���5G�]h�{���� ,�ƍC�Ձ��6"�h����n����-%����pˠ<�G:�蘒��<q�c�D�90���D�T$�T�f�~�P ��Oe& �1����9ǖ�ܓ:wp�.����۔7���F|n�R������'�G'��<c9�^2�Rw��f�W��Ý.\1�H�7zf�6)��$Y,J�,&_������h��ۘܶ�3��DNz�Sg'�GY&��y�y� �Ml*yp�m�xEVBY�i�DDq�뒍�� G(%�>�A �>���U�t���G�M$X�� �-�U/ ��x�V]Ϙ���ve��c��G:��w49���R��=v�V�g�~=�(|���9ӉT�8Q�-0���^b�չ�=w�>���� ԞR��"P ���wV�uoMK?fz �B��M��������+��j�H���H}�yҩrGB||�?�x���?Z���J`6y\�ʷ�@ �@��ox8B\��U���κO97��2i`A ���8U/��U~�gf�<���)��ޡm`3B!0T���U�Ց��X���(�n#����Ra��-��gl{�d��KX ��V���qwA�JS��X/d?�u#����?�4�,s��Vc�=�s�c+fMy��$���|�n�Eo��.�i���2�6�q�?�������LG������� ѿK%t�o�������7"�������}ay�%��Hh-(X��O�צ�N%��%���h�c��R���.�>,XU�uK�"�A)��9Q0:����Ѳ� ՙp�0���6:U(�1��Ed%6eo���2�" ���WGdg�n��۩��M��{�b�%�#̲�-+e[Ό);)����olO��0��Z�k��\A����1�g�pʏ��+��-��<��(:�g���Á�����A۟QQi�H��FU�3�A���oa�<5��ry�3Ǿ�^A+���T��ʼn<���������Nv���H��=��6o�R3]�l����{� g����;�ۤ-gQ�P��"X}6*�A%�8z1A��rz��?�w�+Hj����}�����R`nP������� �狲�][6G�ON�ﯰs-�����+��IA+� ~�~D �'^K�,qo�ra���ev�e���É`Q����6���|��V=��ڡ/���;���0п �,W磥w84^3�j����KC�X��1���&�M��iJ�Mߎ�UYM�;��uʵg� dձ������V��5��H�W-���P/8���ec�'�#Y���ِ�71@$sz$�&7�E��B����B��_-�y�cq�G`��ʇ�dhDKLh�l����&��<��j6��\K�Yk�j�R�{먒�I:bXU����㶵���\/Å�����"�9�8�@�ɼ֮�Μ������q��r+x�^�-bY�3�0�t&o��U(1�Ejl]�5:X�)�Gˤ��g���f���*Knݢ�i��d��7��b���F�qFuv �E�RnA�{��������]�l�oh�$�����A��[N�TL[�X6�N�Y�ݛ�r��])���Z4�-�P [Z1N��M���&��W]������3Ky䨐��،m)�V��|̂�`%vց�?�N�yA�#?19�J�4<��Bc���'ͅ�)z�h"��b�m�lG����>� �LN �����TϗZp��ߖ������(�K���T�E����b�*M��ע�4����.'�" �A�l[>���}E�+#� e��-���@�R�闢ͣ�o����n�O�Ƚk�75�'��7�\�G�k̄��PF���'�)vW+�=���PfR#�f��˵m�7%�MI���vU�Q��/1�Dd��/�ۈ�A��@|����E��B ٮ���������b����*;#�YL�E5��\�4B�����#��R\QI%}"�OT�v�l(?�M�{ppS9�=K����ւ*zL��Zh�O�H��C�o��9�����4���ً���U�8�4Q������K�1���_�P�x̬h��� e)b�+ �zL=]%v���.qZZ{��ܪ�+SH]ɵۂ�������ta=c�i~S��KA��S%���$vi�?������5&���Ƴ�UO�Ŀ�Nin3{�jc�QD�P�v���XlP��jG�O٦q��3`�w�>��BCҏ�%BT"IDe��`:6�qu2�R��pU� ���!�M����M6Kp�.)����Uϯ��+N�םe:U�6|_*�Q�H[�@_��)���|߳�%���'�R� �F�iM����U�C<�xJMf$Yfwk��1�92|kq�%GA��j�����w��{`y`��c��mFj ��`@�/�<���Cŗ���wG�w4*o���M'���9t]v�4+�D ����J|2a���dN�{*���M~���n4����C c���W��ٖt+�݉��;�}'����*�a�<������V�x��/�u����|�3r����I���L0ꙒSɇ�NŃzВL��d-�s�4�=rk� R\��A�1*qs.�$��[�e���w�W� ��n�:�e�N�Hsp �|&���<�o+L%?m���M�w���B�*�&�a���,�V�îy&��VB�Y���ߌ6I�,&nw(=`�:��'��x+L��[Yd�ԛ�X��(����B(cw�Q�e�Dž;�\�&��<,7���ȧ=�M՞y}}�C��o�$6 o�pwF�4C����=���ܧJv���͘�寿���TYh��7��@ɞb���*q�#����c~}� ����g�j�5�/S��~�|�kSӇ黖�����v�Cgh��6��������,S�w��¶��/�)�N�q�,7�%��6�_�jM}h��������d�D�H��b3�gŪE��&����"�^C��o�^�������{�3�ٮqud���=$�ߊ��oN ����X�K��Q/~�ۛE�$��(M_"�����o��Hj+���b�����-Ji�8n� SѪ�u�r�������J߿�Sy��:��r-�����u=%s�_�6��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ