Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ad27a4a0759fa8524c7b2ae0bc04d99f.exe
Resource
win7-20240221-en
Target
ad27a4a0759fa8524c7b2ae0bc04d99f
Size
5.6MB
MD5
ad27a4a0759fa8524c7b2ae0bc04d99f
SHA1
eb04a65d51eccc9f3e2a3b28d62f32aa4cb1c325
SHA256
c3d78c820dfbb815343f14176f17c972959b1ffde0284b5774e090b29e6efd0a
SHA512
cb4a0d44218dfbf81e841c7c962210f5f359c2f2e228f75bb4bd11402bd96962264015340fb2016345b84df9bd481120421ed38296236cb02c10762ca72b853f
SSDEEP
98304:4n7vosEUhxtKo7rfHPYtZQosjFlIlIA1RzDamAIxAZX01AOg1dlVn7JkjQFtfW8d:4n7osNtKej44LIRxqX06Oen7y0hdU
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetVersionExW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetDesktopWindow
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
BitBlt
GetTokenInformation
SHGetFolderPathA
CoInitialize
GetUserProfileDirectoryA
RollbackTransaction
BCryptDecrypt
CryptStringToBinaryA
StrCmpNW
WinHttpCloseHandle
GdiplusStartup
WTSSendMessageW
�j'JN��h4?,o?(==�Π��t��U�6�w҂�a)M�óQ;a������D�s��ݾ�! C��!�c2���a��{8�b��$���N�s��d(��qb���X�K;��,ێ@�u��)�mQ۲�6�!0���IH������Ā�/��ve<n���? ?�#�� �=/h��Ea�\�Dw��E�d�3�8J|�PB3��D"�X����Nˍ��լ'��;K=�\�iJ7�1L�5�8�L1��V�|��`T�Q��F�#����N����~ ����Y�� !1�ފً�8�~�ގ�����Z%y�k!���&�Y��`��_�t0����9�E#�Zg��3���]��Ǹ�F��#��h�Z��\k�:7A)k��C���]r�GĬ��M���D*�$�M�c\Fu�Sq? U\oʧ:%�U���b�������d;�Ь]�X�.�M�֤�� �����❩K����C����-FټO�Y?A�HI�mt4�D���qWE��,�R=�wz��O��p��?C�0^w������ByoI�j�o������.]��] �幞ן���X5�<�8�/�zZ�Z���/؝Xj����x��{����v˰jn2���?2�z��w��l�;��T28^G)W��W�� �&��K�`K�����\�����o�6���MAs=L�]� l��aK�h�8�0OL�-�M�i��O��y~��pq���ki^�k�˭>;�F��Z�-�L�NՕ���X# -^WB�U��ЗsiY �oۆ�2_��qq��s�0��9����-ߗ������n�/ R~n����� f4�S�)4��:��xqk��3�B��4Q����d����UlTOܴ�$��������i�Z�,�i��,9�C���p�$���9q���-;���ɮ]�Vd]E���xi D���M�KʻR\|+��9_���g�;̓�~�4<RI-t��z�ǑqzP�j������4�3O1C�ec�z6�-1��_3�J ]n�KIoni��4��O`�����-�}\ċ���Sz[�Ӻ�����������Ʉ ����<c@6W����R+ѯ>w9 ��w�w��"����y���I���p�S��r+�6ی&-Ծ_�/R���'b���(�����W��q/���dlz��hq���^5R�����9lt��L����/��q}K���J�wB���R���> Ĵ0�?;�NZ����E(s-)NK��w/4� �|�-5pD��^���<!"}�ܹ @�ڣ���V�Dx�LT�腅��%�'� �⠲ !Zp�$�Ӥ� �&�E�M VX�}�@���D�!9��p0�4K�IJ���|�F]'#��<�7H7����r;n��|hJ)�<4S`��b[:�c�V�;�#���m������䂃�s�:v�iAU���SD���؇��@x3�.���38o�n���Cm�c6i��Cݔ�TDj�!_)?����Q�c��zWI Ƀ��$p䘥,ݽ7d2��X<�P��b�5���E.F�Mq3Ԫ�����*CE'���GmМ��}����m� ��F�6Ű7և��WN����,bZ��c��sM��z�EΈB��9[�~�����v3u�ʖ��p�?�E�����z�,tn�I�~�pQOz�<L!E��CYYI:���O��0F���G�}�Hm�ɱ�l���D�l1C�)&���2Bj��́߂�@��ؘ42p�Z.`s��"˼�p%('���*��t-�$ ���P�.@gu�3�8��,+�:&Ho�H�wO�j��Nf����x����n�������=1�rwKܦ�H5=�_�K;����}ţ]�s�#�G�ZP�=��r�H}�@�� ā�zV�ZKj���wә$��H{?X4�B*K*~�yN�SݝNx��OS��n�D�+�|�"Q�C�:'������ʥ�J��J���,�̀�L������5��tM����i"�2�8�g�$)���A['ˁ���чdH$лH��N�3ߓ��4v��*���^��M%ef�v�T�dM-n�>P�F�H�϶%����Uvb�+����+K��1)@��"چ����,[u�8���;E����rV��!KA����0R���:�$M&n\F��s�k�wl��0����Mi}�ȣ7�}�ǘ���Q�4�Ц��N�/�,k5���I��R���\�rи]x�ζ��y�g�?���FՓT/�j7a$���z=�UX��v{]�Xz"�j�%Aϖa ��}��(0����,ah�8���[�i��~�����w0(�7�XIDc�JOІ5��h�^���*��I.�?=K�������ċ����5��J���X���Ko|���Z���,���蕶z"`����wOB�\����k��<���k��s�������r>�h_wJ��H�O�J� ]G�5��T�ՙUS�� �2��i�� $1�+��[]L��& �b0h�PК[�ep��C]�^�ymqP�>�.�m�A�flS��[���'b�|~�+�O��.2�B0^��~f`p�������X,x��m������B��DS1��u�v��`ҩ�6.%����-Ӗ���Vt��`b)k���I=�l�F���F���g=w�P��/��Rn�e�}�����N�� l�j�h:���� ��~�ΎLpE:/��X?�?jc���#�_���{A�&�9����B"���e0N���p&�k{�� ��d��Oב�H�Z��^]$����g7��9�j~������Y�Q�Tg?�A$7+V�����~Ϗ��=w^�]N(�4h����y�M��7GZ�� Ϥ�1��ޡ���$Y�fy���,sM���_��'�b����Mux@��Ja�Qc��������c��Khp��ѭU����?�S������3�"��/�RΏǃ��Lls?�\��qvތ"D+�D��L�Ohv$�ɑN.�!!0d����YT��e�,�6漆�hde�J�Q"Z/�����";^)q�=![��m�^��*�LC�6(C��8�&�بH�����Jk!�����s7e6F��m�ۉ���bU3��]d�e�m4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ