Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
b6526400ec2da218907edb99517f7f66.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b6526400ec2da218907edb99517f7f66.exe
Resource
win10v2004-20240226-en
Target
b6526400ec2da218907edb99517f7f66
Size
1.4MB
MD5
b6526400ec2da218907edb99517f7f66
SHA1
651ab639e0ecb0f82abefa7ed507e675855d9a05
SHA256
052e431371300e5099d2ba06706b0a59b71ca0c1e47479e0a6a5c67e6d61e92e
SHA512
d55bad2cde5aedd7e09c470d494aa1bbe9884ec47c6ee2f6ef23ef9a34f51d4debbce5c0c2935e8f2b5ffd1f143abb55f879c07462426c0a86edd738bc9dfd76
SSDEEP
24576:D2DLoxTcm+eBK1X/h1WElDDsAEeAXPUq3VrQA+MihsINTLXXvUAGBzeVd:cLoxr9BYZ8EQVXPUq3kbLXXoBzev
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CompareStringW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
LoadIconW
OleInitialize
SysStringLen
�b�V<j�� 9�Ւ��3�&E��Q�|%�8ɼ[��b�A�k���|4�����NR�U��َ��>N�K�W�U �2 ���Ͻ4"�m���!Ȟ��D�#C���G.���B��4��K8� ,�`����hĮd�x�C�Dr��;Ͽ��]���`4�L�����)���M�-��/64n2�li��@��)�MB���ݡ����7a�a�� c��Z����B�WY�ڽ�M?� �L֥�J˪�:�,Jo�M���f��(�5z3�Qu5����a>a�l��=�rx���PxQ rcb�g�k����i�ҟ"��ݑ\��GDb4��$oǓ�K�1�gd$._���4|���u��.�Mn���Y� ��'IUq1=��L�d�'0���������nj�B�;ɾ��B�[�|�+�����3}�-�{��Q��e���^����ߩ���)�c^=i�G� T'l�{��,K�T��KK����ɥ(*c�^pz�cs�<� �I���W�C���t��cf�j��>�W xo����W�S����d��_Q�������sH#������``&\c.���qd��e�l�v|,����}:o�w�������w+P���R�+��� O/�3%��'�K9I�n��b�>��� �`f���_�މ�)�H5xL6'~��ػ��<ƾ!gq���7����6����c���'��t�6Y}�})H���m�A��AE�#�9[(~q��8wR�� 1|�̲(��^�~k���T*^��u������9�.�>.�M3���KΙT�����O�ٮͨb�k�s��h8�� U�1�����63�X�O�W�`�h�U(�-�H��7��,�����S�%��q�RO�(��X$���{s�۠��Lp�m=�C�x5?������n�Y!ǁL.cu����n �w��z��Z{6�2*��Y�R}��������w�� .�s����+Jb��Q��D/FO�v��/W���T|��b��-�@+:)�ѹ���D�4�H(m��w���P�����7�����"�nt9S��L���*�VOl����K3�t%]*����l <���ZaT�\��O��AVv�ǑVWG��\Z7�7��(�5T^��k���;P"��D:b�0�}�~��h�`�3�TGF�9�?��1 %�JH�U��a�à �[>��#�X;QLC����g0��!�i�����������[��X��4Y؊�Ϊ���Q�9:�Ӷ�&`�kI���˟;�|Y3�ݲ�e�����G�x:����S�0�5�6v�l��.�)k���uf/�e��a���R���(�����i��oxけ��к���������ܻ��y��G��� �6�&;�>����yυ�>�^{@��ڰ��~=���X��L>Pj��7�Il�-� �wP ��J��l���{,���C���K���MP?�]�e���߉$ykw��]-�U�P8QE��C�͎f�dMK��q��E�CE�Ѧ�}3$�e���ӟ*J��/�#��2ԥs�����D[��R䉦}ӀQl�B1��%n�q���(/��"��&�h�̘p?���O��(�㋯i��j������`����N��j���[:�t���d{�pB��wo��>��G�K��0]�,���e�'�)s��� �����������Վv�F�yӃI3]�=�n7D��$$ݳ0CbѨ������d�:S#L��X�3����9�#�@Xl����PeԛJ���<�� +����� ��Yx/�G"�r�++��" 0�\S�!W�`���.���֭/9��`�3�d&��ҡ1������'�����1��w��G���5�����(Ɵ>H]���)�M߆��U$�y��{�f��p-B���@8C)��#.�wRO��"$�� �2V�.Lo��w��i�ЅŢ�0�1�X�d��������&���yv������Q;<g��<�~��C��*2�cAڑ�X�\w�^i>�͏��z4�i�� ��AP�����Q7�&���)<���H���`�'�_^q��jn3i.��ϸ��1a>�-t�}�M,<J`�d�H�a/nC�uq��E��5Oq8�S[�O�s���x�}@�oZ��:@��>2@�a��g�I>T�(e�� �N���w�Cv�$Kl�ꚓ���G��bP�Q��{�i��}����.�r�s#���!������Մ2�ܯS{P�Xt/~�I�#y@����D:��rH��y ����'�;�扙�?���#6�:Vƃ�9�"���,}n��8�� :� %I�PC�汜~%��ut�50���jvwF�P��I�Ұ�g9Y�<) ��o:���逵��V�r��f�l�E�V[�m-h4��[��tڑn"�UG���;c_�_O1al�����:k�D��-�y����Z�X�O�3�Nu�UD?>�:;u�Љ��������K�}�g�rk~�KQ�l�� QOU���w�;�jS\+��r� ���\���H� ��$E�B���E����z��k�^�_�ځ��R8a��r.�/�VL������0���ڧ��i �0�߿�SĮ7.�K�z�M�� ���[�Y�K��@��������&�����-7�l����G�v`�CU���^ɡD5SޗOo��y�����6��MF�f2��E*_/Ԟ���?��o��C�X��_ C�� J��Y��˞����7e\9b��K�[p��bR g��J�DUhXS/���K���g�OI����P�A�g_DL[�HGox��o�5�� e1����E?��}�%F�;G��u�HƁ��@����Hq�+��4�v��P �"��5ej�t�G��v#aţ�X���Ҧ��b��b/�7ֆ=��Q�H@�z g��� ȡ�q�D]$�|\�F˫$��z������b�SZ��~���7T�FE�×D�{?�ee��NLx��=���CՕ�'�TH+�ˎi�hg���Oqo\R�i���4+'�6�vT�" ^�]L /�3D��Ӗt}�Q'��]���P�����b��Z�X�b�sC��B� �X�)�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ