Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
b5f27dabb76df329fd98114f883506cf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b5f27dabb76df329fd98114f883506cf.exe
Resource
win10v2004-20240226-en
Target
b5f27dabb76df329fd98114f883506cf
Size
1.5MB
MD5
b5f27dabb76df329fd98114f883506cf
SHA1
666470d332138944d459e8d45584f7d46567d70c
SHA256
100c6439f23794d298b1e9df46782d07805c7c201ff95c2fcc08a3d2b58a103b
SHA512
c132c78da5970dc3b847c7345a78eb67bf43737398552099c1a4c71f67e7bc810b8d5940f215f6b0412a1fca38d2247452ec455f6d63c40c48803baa3c40e1d9
SSDEEP
24576:ktI4wXNMybBHgK42IUUdLQUHFUWbIdr4MdrOpVprHMnq8xXv6kfzy22LVL:kWTXR1H7IfLb+D54GrOzprsqWXv6kiF
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WriteConsoleW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxW
OleInitialize
VariantClear
�h\jYR3c��Ž�ķ���a�����2��G����p���f�0�怤��t (�A��u�۔�>��+9}�����n'Q�z��@\��ӌ��3��EpY]�c�G�S9"A���%z!��U����z�t,?�K��kSs���6<T���Q�� �=xf<J��nH`�m���rn����1*N�7Y�e~������a�_1����!�+oR��2�R Z��4���N,��J��n!�Dî$tҋ*i;��,.<*m�7��]|�r�X�Q�v���´+�6 /°ˆw�&0�`#��a�����@�%�>4O;_�a����CDD�K9�+='@0�8|@�hbm,*�ԕ�:e��q� ��#&<��/g!���C9b��^��&�m\P�Aa�r^��nVѪ+e�5=x��Z���=���d��wϋ�VD�WS a�w��ׅ��M��Z5(u>5~�B$j��~gDN����ϥ]#ե��$F���)��x(���)]��2��$kT��[���ǪC�j�����8�D����mܣ���>�~��m)9ẏ�dl��g���&c^K�O�V�����.�O����?��w�ۤ�i��hL����T>�����Ȝ�g�z�5j���~>:ћA9��gVe���)�U2=4�n���"��=ղz�S�i�xwW˧V�� 2���jM]�9�]�d�ê���z"��tF��Us�����]y��߬ '��yf�u%L�N�;{�N��iDyx��s�]�$um�i/$�T]Y�K`����j�(�i��:FU�-�R?[��SP����C�V%:8�h<��(E�J�ڠ�t�"�qK���Q�^������8 ���_�]�L,f� �0�j����憫�S��P����a��0��0�X�Z'����)�c��v����۵i�W���5�(C��j(�ꁀ���k-]��x�by���{�D�x�B2�@.,CᘒD��b��V�� �$�,������ź'���Z������K�\A������Rq��kc�M� r\�h��a�����D����s58��l��A[���� �{XJ�^�r_����y9Q�""Y�3�~pWpO<�!�gQfq�A����gW�,M�#��J�:f��W�UG�-QjW{q&Ҵ�yOB��L\�q���r�v����(�I`�:?%pf����{�&�H-l�Nl�c`�����ɋ_ɲ�A�S��}��&鱝�����%�dB��-��w�+�,�:$~C���X��X���A�<(L��|��H�*�_���Ӏ����w�t?�xX�vz���P�'�$��\�7[Sa����о���T�U��`%�)�X�l�өZ͈��Pke�Ta;S�E봴*��������{^��+C���Ϳ�x�%�/�:'�,�zk�^� ���7~X/�f'��] C���d٣&(���PC�ᇥ�F$5�Iz�%)��&�h��h�uz�m�X4�|"�jЁ�0��6��)W���]��㡋��7L�8_��x�x�0����<z�3n�'���Z�7"�,���>1JHfJ9}�%������=[T�aÇ�s���ܚD����tS��ESہa�f��T�Y�Y��d(�#v��]�GűH�E��/���O�ˬ�1�ZJ��g��j(r^�)�%!ռ0�RQ�\>qH���4�㫧U��ĵbS3#Lx��v�1O4�^����_�K��Ľ��G Mf��-c�#��%�$#@5��ZI"@l�hyj��3���?>'X�wC��/��su[J}�^g��7u���m@��!���VY5A]h�s����X��5kO��D�/�@��nn��X�i��s�t����s� \��D�s�ٸ�/�۟�&O���.R��ȣ?5\7U7䧻.$��[^�u�sE^��(�*}A�;� ��a?��u�}�Ŏt���5g3�I��P�\;'è�-q���+C.�f"Jb?Hm�R=~ �����A~~7���h��,�8͙n'!Uh�� �d�����t�KL�eQU�1V�ܱ<Qov �A��#蔆I��ɔ\wG��F��'���і��2�>�a����J�`d�70�K:�CBp��<f&i��#�N&��Y�ҕ`���^�\V=m�)�ې�´ǑO����7���Des������F��NiO�@Rp���Y�Z��d'��R)h��<J5���A�4��g�U�܈����oLwe1inl4���F˔��~��ψ�8 �m��f ��؇������yMd��� ۔ܪ=��gIKV��iz��\Ù�]5[z$I��O&K��o��������/-�yl&�-tR�Ֆb� ����p��m,�����(�,m�bC����AF�����˓t���E���Ź��)��Ɩ��������Nf^ζ�!�X��t��I �m�����UQ<f��c�h@ݔ���~s&R(x/�.U��(�#/ H=�ΊLӂdG��y�����x��W��~fR�����L����H.�xzc�����d6�܌�I�ҕ�_�eov�Ey����zzTz����Aޡ����; K�sXI����(́大}�?��Z]��{4N[G:�-ML��u�K�u�l6�6z�a����o�mW���<+�f�5"i8(�Hu�',�z@�I���Lj; �y�����%�|�K��&��1oH�m��b�^�����kpHc�%%�~%~��.r�}�~.�q�:b�c�`��V�������x�����|��*JVp ����{Τ�n��z_���x��y���3�m�g�c]������ݴxߞ64�nA�AU�d���w�W��.{8M�����y�� 1�ۢ�����_��<x���>=��̚Ψs��p�\�,b�4o����1dOԐ��`��.�[o۰�J����Ea#�e�r�c��3�d�JO�J;����ԉ�������˷G���VT�>��v'Z��'����J�8����c��j��;�� O�4!�{c�{p�7�~\W���}~�Q*H�oF�u��{^6��ma�g6�6���!�]1�[�;��sG����Ҡ{IC��/N>"����^A.~������ �3��蔬@���X�Y.9�ZTI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ