Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
ab1ee7b2f3d6e455ec077f00074f535a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ab1ee7b2f3d6e455ec077f00074f535a.exe
Resource
win10v2004-20240226-en
Target
ab1ee7b2f3d6e455ec077f00074f535a
Size
1.4MB
MD5
ab1ee7b2f3d6e455ec077f00074f535a
SHA1
d9f7c5c8bac48b6cfe3b70d0441adebecdecc77a
SHA256
06506168c23bc27d867429d52491dabfbccdd3e53089429ef41f575ce071f82d
SHA512
00a4fcfe3662cdf2ef7f491482f5cba9476f591e6fb79f20c3bf7053959d3ca7fa40426fa5df031db497de3510921cdf00b6f3d7a7c769c5c441a5ad111fa683
SSDEEP
24576:IBYx2akQ8lVGnA8qf6IA5ZmUrtbXaFXzYoM+goXortMJukxu0gGf1sD7WuzD5HjV:HxGlVsABA55XaFDK8orzkxu0Vf1s/DdV
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LCMapStringW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetTimer
CoUninitialize
SysStringLen
sW@W���4� ��P��3Q�\%�sڎV90���rI���%B�^�A�y�1GF24K]�Ƀ^���"oL>pU�2�- ��#ۗebT��uCe��z(� d3x����nw��Ь��P�.w���� ��0���t��^�/�4T�����!W&�ʙgY�]��N[b�Q��mk%z���XhWT>ܜ�0�v0�o:��e�.���~)H�r^o���Dg��Y�)*���.��/l�La��;��z�-+��P��Pᕠil�,[8�^wF��:-kl��0� ���a��{�@�[�b����n�'u8,�F ��ı7F��5�?��Vj��qZl�^�^�K��-��6_B���+�^p�r8����cM�}o�2����2�~nO~�h ̮�t�'S���~]xC�Κ��C��9������\�� �Pn�[�F�K�k3�|A�k�Pf�w�!D�vf�`ε�^�a��0�2,�}Xٳ�/eMX��$'���-��f���G�G�R'��5=�w ��5��[�Yo������X��b��y�;����r��ҿ�O~�)ͺU� +�|XM������吿Z�+��<A��������q�M�b�����==����b����j�j��H�K@�skOL0���w�&�i��_ޅ�n�&��(Z��ߐ/L0�-����:ɗ�(~�����Ӛ 5f60�uO;�`�@(��G3&m�9����"K��펖Ad���t�JO��"��H{�dF����4�T"8V S�FF�Z�ՏO�iƁ��:���aR��[�WrB�({.]9��kI$�DB\�������R����yB�]��*�S��W���w�D�|NV��VTk��%��^.������St���ۣ����"{}ޟ��;�<���PH�S9uj���P�(yn'-Gv��S��"��n��)FԱ��x�~����2��X�kۆ'' �z,�&��z�?��Q*�F�����>�s�Ս��q�|r�op����Ҏjd ����]�!T�9���Ɂ]�[��|��4�\�k8�L� ��X^s������KE��j��ꊂk+* g/�je��**5#�0���n �b��9���~���f��a$=��Vܧ.�C68N��IL��ݍ1��U�3���3��_��V96� �ha���FQ���������7K�[�,Pg89��-c�cK�Vc�����F���������B0�StI���H�w��ƥY�d�L@����#��@�/�x7��}ZH1x�Ux��;&� x<���]�άA�� Z���Ȏ�5e�Y������hU�I�G��MrrZ�}�Y��K9|��� d:M���av_.�9:��X�0��'���V"�f�y���*Ѯ&��K�Y��!V6�q��L�5[ae��rf&4��(e-K�$�q��z}���Yg�{�W������łoyX'�l�w�[]�<�b�9`r� �D������ʗW�ą�z���+lh?�BW�Rfց:�똧s���rӔm��WK�GIA��[���W%�� Bo 0}��X#o�{βx��}?�HcC]R ��i�ً��6d����� �ԳݭG�V['��x�xм���1�]7��*D�#��Hk������ۙ3����"�T@�.NQ?*�^�J% P�vS��Fb�;I���ghV��»��F�K��W��K�ɬ#�i���BX�����{ ~�|�� ��.�=T���Q~���]ܳ�\��3�V��sbŠ\�`L6��.��犰�Ɂ 7~}�(� s���At��1Nę6��x�z^���e4 ?�����y�+U녋Z:�� Et� ���Δ�j@�2s�g�'hbQo�ԂQ�Ο����غ!߷�B�iC_�a��U�\��5�cY���>��W�Y�����-�3b�38E �d��ᝮB���Z�-����jќ6kæ^;C��]��^#/x�[R��*��쓻k����:�û]��4 '��o��Gi�Jg���-�C���ЃQ{Ջm�"��m�j��P���dT,��`s����C��c�5�]e7�<�+` �-YS�nH����#M�s�t�U_h y�N���[�83]P��i͈{���Qf�-�* �0���sW�[���t��] v�m� _�Q�����痧�愛E���ձPL���g���̅q[Ggʄi�VL|ba�ė�e�����L����'��d��Gs6�����&����z�-V�1�"�'��O�"oK{�G��囚��-�TI�jv�8Z�f�Ţ��ʀ�<ν��6^B�UN���J�Ux��#y���\N��6:!�9� މ��G��!Y{�����cI}�)�= #L!� ��Wm{w�O�$�(#W�n\[���p�X<��TZW�������`��\�k��SS���$�.�^�+�����n �~�z�ȒX��Y���ԜX�i(���"*�S�Sd�P�+��� ��O����M1ȜQĎ�� J{O�%�JF 5آxp�� ��kN�8ٻg�ݭ������A��/���m����m��V$�)�S$դ6)�����Ϲ\p��G��;�Ѷ� ;�~�?3��.A�ٱ�@�B���:Y��-��kԲ�3Ɔ�t���y4;�o��E �TV�Ն��wH�O�@��v��m��3��zy��5ƿ|K�/�������:0�}��Rz^0�s80 �gW���<�ͼoĵ����{C�YQ6N5'8��A�sy[$�ز�7�$�sP�R���3)�Ct�QJ-T9�"Ls����+R�����aSC�>�:Emzáޯs�M1�3N��o��K!}��y�V���&�d�D����V���6Ȧ!�����ʿ5x���"��6��r���僇��\30����<t��<f�h�eK��G��gh�����@��p����)���)�#�m5��g]9�,_V"�z��YwAzpW�:�XQ!C�����&2z��rX�x'��P���_�/&KI��Z>Җ�U�v��q���y��y�����(kg��1O���~�j��§����vu����]ꁂ������,� �n/!P�ҥ�U����5�=�@L�h��#
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ