Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
a9b7e37838e103faab6fe218212daca6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a9b7e37838e103faab6fe218212daca6.exe
Resource
win10v2004-20240226-en
Target
a9b7e37838e103faab6fe218212daca6
Size
1.5MB
MD5
a9b7e37838e103faab6fe218212daca6
SHA1
e6abcc92d7b50a312fc33495d2091cfbd3b1d549
SHA256
2285f0c1350a7eaa1433d5a73f8ab8633c369d965304a9e6e79bdad6fe72503b
SHA512
1619856bcb572900cd7c5b245a697528469eeaa4b678c0f6ab2486f0d252302eb7f3576e69249c0959ac6caea766900f9b4e2ce78755fc02d8f0e2e480b57779
SSDEEP
24576:yGVY/MsqdL1g79XAjy6RNr9ykLq+zEV6Rl2uFR+/pNvB3TPsLqHAdh4L2cgjekKq:yDM31g79XAW6RNYbyo/pFpBeh4Cv6pq
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EnumResourceLanguagesW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UpdateWindow
OleUninitialize
VariantClear
�&xuj�M�$gUJ�h���`b�龜�zMz:3�)O�oZQ��z����2?�Մ��4�1zO����-���I�n�KN�ϴF2��-�2j�� طg�q~r��c���v�[��rA_�7�����9E�Z�h�;�N>���F �6����P7"��fU���]mP�J� �a�!��M�S�"��YM�Yr�H^Ҕ��ol<����]=d�ꥊ��&��mG���zX�V�+G��d�,`��J�u�%�1}Y��������W�ٴ2��������[�>���ԒP�>�~��ZB��6���k��\�Ts��{���?�SU�^R{cք��O��K�k!�{�lԀB�5}�{� ߣm��v�g8��h���Yl{�;��i�;dVt��M�����Kc���j�ic�����B�QC�sx�u��"�M���)��h'���}�n�c7Zh��"M�Y�f6�J����vL�v)��o/�LH�!��[ <�-;����Rb;6��mSn ��l%Q?�@�Z���_F���w��ݒS�m�AtN$���kJD:^��M�7����|����f`/��^���1�^�����:�"�ѥa,����p�p���#%DH�!��J(%mƞD���i��+�]l�FPu�5R`��1N[����G�����>Lg���L�#�SM�#��4�x+�PT|ɾ�� ��(�3���������O�\�}���c�=�h���/��Bҕ���`������<.�W!1�7���Bf\S����Ŗ�$�ڒ����IJ���9ݕh3�x���_����4UB;�aae%J�.ξ���^U}�|���N�%/+��І� ȯ/Ln�5�a�^��p���9j� b�<���]ʃ������-K�ܿr�˳T=��;F�.n#�k�v6Z����*���-��"���2LR&��mv� �1�𲁥�0b���a�"���5�X�89�KJ �0�?��o#qN&�̯mwAD?.��BFe�9��O��IeF��W$�9��:�=�"��]e�{�(�虧��~��rG��t�K|� �������L�Ȍ��g'ߥ�;�B�t��߱0v��-`�!u�6=4��^$��Ŝ���Y��s+�F*��l����een�Ѣ0����Q'n� ������_v��ݖ#�~��L��˛O6B���~-�����=/�������jC��K�W�~5�����yx7�d[e�?l��G��4�Khԑ$�m č�g�!J��Y.+��|E��?���6Ik�?H�CS/��,n��U�3<�����m%��xH�[��W����K�lQg/������n�`�j}��>��p����O��N�6����h{�8.�s����O�mT!+W�I5�iH��9�g�# ������D��dž��D3,�Jy�IÜ�v��W�T��^��¤��`7R�-��h�\ �$�j��=�R<=%�:���`�a=8�A��,^�hX�Bfa�h'�x:�;Xz���>��¾y=e� ���h�6���J���;����vpGp��ڲ���m5�㺛C�6c�p�w�6:A���E���ˀ��D��Z���,_�%t���;�4!���-���L:n��*A�m��qf�{�ժ�f&s�����L���A�Y,�$x��֦ܟ�i������a�1s��|ۅ�U�jR���t ��6��7���`� $�Z�b�Bue���Ä��u���b�j���@/�?�Ϗ�������⚤W{W�RM29��&�YN��5G�x<|/[������5�v04�����8<$i�J��>p7{���E��aș_6`a�%"_����8{�b��2眊%�¦����مV����&�^qu %O�����.�Y��K��,n���h�U�[x���nt%���M�)�or���kv�㾪�-s� i.�I�l�����iϖ"3%6S�M��c�ǒ�x�5m���fCh�����ȥMf��V>c�����P.����DgThxV�Q2��-�U/��H�E�������W���E����J�YCh�Tߍ~�WΤ�2m-�u:�c�\�AJ��,Pbq�3�?U�4 X�%�A�=I� ��A �s���?�3#�X�}d�ޮD7�.|hD�֝2���_����TEfi��� g��M�뜐hU�.� � ���6��|�q����7���}��Q�-'{p`��L����q� ��Qm9 ,*0�CN9�аR;���+�e���!��|�D��9w���}�fby���k/����E�O��`;,,TY�2��9��<pMA���y����P�G�܀V8T���5��}>�W�t >��.b[3������hj����sk�����7��!�\<T�{m���1j�:g���;�C��4�� �S����"NQPa�bs�CK���̹��/�2κ�_��:E�K]�=���L{�������=�g� �P�4ܬz��*&�1��?�JiE�dQ�D i��0{z#W ��������1'!�A��W1���� |/�*��_��9c-ߢ�Ǵ&}�ϟ�����vR=���*�^��Z!�6v�����=^�$��J;Yց�mCS9¬�[spY*$j2*kV�F����/��&~X��������!��F�<���Y��B2���pq8zB����� ��6) #o��n��(V"sQ'V`�{��/m��NX�vs����ӓ��c��a��B-ۮ�Ro�Ǧ���O��_��d�k����(ZTs�o!HkL˃�~�Z��Y�3e��0n 0V�%���O��@If��vR4tb:� ��[����5�/j}M�f��9����|[�G��3�d �:�vߕ�L�U�ޡ��M��KK���֤2��Sϕ�j� ��uz�[NTM8�Eh�3n�f?���&�d� %���e�V�� #�J�s�<��� WmD.���_�/�N%�B�V|`4r��p���{��ԡ�xo��U<�N���E �~� �.�^�@K!{��'"��f �c�eZ{o<����YC�x)�H�b�bnɪ�QhN��Y�p����]S�����]�9 tӳ���o��%j��x�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ