Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
aca00660f39aba05c934a302d3135aea.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aca00660f39aba05c934a302d3135aea.exe
Resource
win10v2004-20240226-en
Target
aca00660f39aba05c934a302d3135aea
Size
1.4MB
MD5
aca00660f39aba05c934a302d3135aea
SHA1
89a9e191fa7e56bfd8db152db3b5c158dfba8e23
SHA256
2063a9edef96977589e598be7c26b8e7078346ff9f1652007e73000c30beb529
SHA512
e1fa1424a792466a0d5e3cb4be1dc8fe4e1e6bd26115c392be9a9cc9a589f30f94b0b797bbfbf89c61f71a63661c07ca6e43a587f6289ffd34504497ddac4489
SSDEEP
24576:hvzp3hIBzmR8SSXOyRED2HdTlDXAB8DbZhudw5KgvDVKsoMS4uXXG1CTtxVL:tpRImiSSX/0ktUibZAw5TgsoWwyCzZ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxW
OleUninitialize
SysStringLen
t�����AS6�y�|�3&�tY9e�z�o�<:�Sݦ�e������ۃ)�H���m`�'Ʉ�5 ����B�\yB�2c�(�L�� +���r������W�EXw��d�Q���9ص��g��9B�A��g�4����FB�"gW���{T%�|)ש���:����O�"N4JOu��6�i8&��ʝb~��䚣�Yfm���@�$|,�0�2��b�Ô��t ��HX�L��w!@����������g�<L��t����,zK�(�"��u[ŝ�{x:2V�N -A�HL��Nl1�~p��ڵ��̇cT(1�fs�L�a<��-�(�=��$�l;���a֫Ţ�l����=���sa�W����>r�o��H��B�"�mQn"� �3�ό����w^є��i���9�#M�kч���X�/���5��-�-/���`-�� ��pR��.�2�c����l����*���@^���=�X�&k�8 W`J֚�{�6/;���q���*�q]6,\��@��iݯ������4 �$���pO'��B��"�$ ��F���s�Wg�=�q�K�l����z�˓>�G0�3�ke ���b9>�x��{�̈���L�P|��; &v��k������u֔z���>��(���+=Lۖ�?�5+k���xD�q���@ԣ^uCP�z�'��n�{vOQ�Gf�4��*a �ե�j1��b���b�����1�ʕwn�2�=�������z?y�_z6�M<��Z�ϙ�Y�O*�t���(?~�ꀙ��Yg�=a=k)2�P���ֈ�s>j�x" ��v"s@jBf]�̺��ɜ�"����Տ���xE��;��"_o�p��,0��H����v�̲O�5��]�-y��h��!�ރ��f:-/��Ц@��k���Ȁk(�f�#��,g�3�Ы�������8�>AeE$S�7�p�ܓjV�3aJL�`(3��./X�g��.���?w�j��'���ZQ�n�L��f����S����ww�eh'�+�����d:��jue�Ү ���.r�F}�&��<�����VEb��J���T��_��Pa����X�����o�ķVTkl��ɥ���>��J�7n�z��8��?q�8 Q����iM��FV�E��h(�X�Cq-vi�# F�R��v哚��Ǒ(~+�T��Rn�7��ZY ��?)�����'mB�O7�������=��-!�UJ���?+W�gD,Lp�#Q�����i�3.� ���RAﱬ�f!�w������|Lχ�_���G:��D���B�_��h��*B��`��i����y�72�S(�j��F���!� OJ��WY�!����5�(KB�&G���d*�h莦e{1���Z9FqU��m#�j;�g��p���*4�'+���I��rc���P�89�g�7Հ�DU��3�p���bI轍x�8g�M��:wĝ��<�9��@�|H{;qd����,l����R �o� М�}a$�$�j��? �"_0��dvȲ/����YZ�j��/d+8�c�x"�<#��3������L �=����8���RŅ��8�H�1A=h.2��]�Dn&Iޮ<����N�Ǘ���L6�[��? ���������A���4l��E(��.0'�7W(������ �%4�m�:�|��v���Dw]�QW&t�8 Zm��[��0m�떋��X,�(�--���<�_a0_h�ttЬ �+����"z�^��s�uK�Qn �����{kirZ��Ɛ�����ч�g�v��%J��&i�cy�N�`�jְ`) ���}�k�8W?����>���i�9�)�@��_��?��� 7��ZÈ4��-L9�`1��_�q�+h{a�b�fӸn�B�n�x���Uh�Q�쿏��1��������n��*%O*��_q��6�����R!��TP�x����������~�tZ#�(�\��?�b�8�&v�~8�����ͮ�{x6�Nc������� �eTEj��\��!{��X4d���9��MhFC�Ɋ�i����?W�?�;T��`h;�vE?�*]�t��i�,2��m�g�CGE�>��S ��f:�T|��]�>��$�L�� ��< �-���t+�G��/��9;�̞YQg�^������*�?����Q:H5�7P�����<*������_��9����>sI�T�ϋ�����Ҋ�[���t�ͧRMC����p�]=�K5@Y�{��$+���6��#A�~x�o@�9�h�����X�penIl��@I���mVzs��� �mĄW��u�`�.�}(�h>����2��9�l%�D��Z$3>�[_�� ��ʆ��cz_�jM���-��2|��A���&ҥP�ʑWc���JQ���*�/���D_^�8�&�]HϚ^-x\DW,J;���}�M|;fR��4�E��g�=�xD���G�G(D�^� {1-����8.\h��hG��χ��L�����'y�jn��L���� ��˓&���+ʅ����jQ)ͻ�s���/�U�c�d�����|�68���}+C�; ���5��.��Vp�gӉjf>Ux [J��~P��]�YesˈđT�w��a���Gx�-��O�~I�u���{�|z^�&��#�����x�%�9���)�cMؗ���ө����8�5C�#���נ��;�ޣ�s=��Ҙb�q�Zj��r��B�NK&[?�`��5����,`������J[;�?�� ���M9�n7p �x��̕%VLi�o�������X�#/Lشy�j�b�@�r��Ө�M���'^N[�u�a ����7�,��A�,Y w���C��y=}��GuT횇 ӭ�\|��_E��gj���\+9f/t��,�^1R���=��CH�]��g�v����;C���Y\.�{$S"��!>[E^���7 <<�_w��V�W�����Ύ ��^��p��v]?��P�/=��K�ˆv1��]� �#�Ƨ��wÈ�#�)�Yòc@�� Ӭ����~��~$�0]Z�4S$*��; l9���ܥ�>[�3I4Ƅw�1�����5#,��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ