Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
RO-exec v2.0/RO-exec_Launcher.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
RO-exec v2.0/RO-exec_Launcher.exe
Resource
win10v2004-20240226-en
Target
RO-exec v2.0.rar
Size
2.3MB
MD5
865f76750704d3dfdc0d528c00ed1b9a
SHA1
e398e6ef6c7813ba819e430996745808c8b15cb5
SHA256
54d81517d0d4c37402eb85fcb5b0579eb7fe20def3fbe6516d8fc9e01a1f0404
SHA512
cc0b040b16ffad9fc22ace689b017a2c3672619040350933ac8efcf8b0ab8a11874875f1091720e4301d831e2205b520bd1f10c21916edbb536d1e28e0a417e8
SSDEEP
49152:buS4yar/k99ASjpaNvHHLVHGhVxZv4ZsUxqHKYxI7bCkWXK9FaA:Har/kNjOfJ2gFxqqYxI7bCkWa9F9
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
��W��3���6�U]-�l���,e�gK�u�0t(�߂�N�cG�c0����V!�Ku�۠�:������8C��G��#��d�ӊ���lt��{�u�?���LL���4�+X�X�ex.�b�M�KͶ �r'�s���]��N�iX���y\��I�뢬��q+x|m;<�����UDE�w}$��[��B�d["��&���"�4X%�ږ�a��'HJ�zX +�h�/�6�h�������U����"ۛ)PA1�����������&/�5Ɨ���}N������}�� �f�΅���9�2d�����C�M9�w����H1���6+-VA�EjN�z���x)�&�r����5�ͮ\4�&cs�`�����1ߴ#ʦ����: ��d�3 ��������܀�-���T��+"�~{J�[A��("����T26�Aߜ$*��$�^�1�^Ӎ�Z���+���)s�d���:��UI��JY�S�S&`���0����2�U�ب��;���7���x�����(#\�%�OcǐS�/�� @ �1�$��N{��م���@�hC���l�b���)R���뮏��t����'�K9���t���������m�a��k�4�,{ oOx�� �H���O+�A�I�X�MJ�Q��f g�?��E��G���?A ��9��c:\�ndu����>02��gT���7���?��J�lbGb-<+�*���6B�;��OZ�F@�ib�K��>�����_=Q)N=��uԡ� ��?�;f�\ǭE;���-房��!��>�丯���������&:)�k �9C�L���N�;îy�$X!&��8A�l�l7�F���+�\�cjc�����S�?�K��k�=4�/^���l$h�����TN���j����:Dr 1s�W�x�� $�e�P7��L6�,��^JoP��_-l����ƒ�9S�Г)Q5$�m�����{)��>Fx-��N-S$E���������C��a�� ���1�����zSIS�`��S�I�4���&%��K� �!��S��_��^F��U��2�̮���w�:= oZX���]��wϊy��p��!)ږa�r�r�m��\� x�X7F�䲂����V��Ͻ1T�̵���7�|�Gޘ��ݟ�"@�Ke�¥��wT �����7�?�q��}V���a��,�"���]@ yUN,*���זv�uA�@�nW@O/l���C)�JC�v.\7�}�����U�X���5�6{ܭ��Rv�FR���a)�Sty��,s�,�mA���~gak�M#?��Xp��U��v�8'ΉȋJ��^fo�M�M�� ��I#�r���2�N��K����;;��Jm;-�����-;�+ݱ\��d�A3�n%�w� d4���3|��5l]�4��Y����i^d+=�ҹ�$��� Y��|���8=y Ǜ�E�ʪ������ �@ �Kr��1������4��R9��W@s�U�i�i���tP�Kٝ�>�ZGA�GL�ǻפ��&bo�#����!������b��� ma��yޚ��I�<"ae���,z� �RA<RMV>�X�遄.!��`���C�<�~g�l����V�U7h!�)�KT��8CQ� !tL��)q� �m OtЋ p��ܐ.Q���M]=�@>���z�@3�M�ܣ �SdU���H����'%.�Y �|#R���<ށ`.��a�o��^ K�㴤�-�t\N���-8_� ��q����M5�WvWѱ�@8�Hr]ߺS�����!����ƿ&��)�J:���_P����<�?5��P��z��<F���������0j�~�_|*7u�<��[�dW�t)��~�Tll�nڎ6�XQ��{�-|O{9��m3!CWVt���`+҉��X>��q������o��t���H� k�оt�{������tY��w7֤#�r���uG�y@�A�:�a9y3D<���19C���JJ���m����O\�db�\8��,�5]�?8��X��<W��x�F&4FnM�����V|���Zʜ�2�͏# �Y�n���O��Msf{J@���� �e���ݕ:�N<ei� !�c� ܱG_�Ӂmn;S\ ����@M��p) ����=�qu�O��ұ �8~�y�g #�:�-���Sq���$K^�0tװ�� `���C@�L`����)! ���#&��S�l~�`x#TZ� oؒ�0ȟ�\<������Q<�ӿH_�2)Y�*�{��"0��F#S�>Է��xmk�;��4� �V��3�(7]�I>@_�Xw͕z����['9|En$ܰZe��{Y����㯒�~i���.�_�9�v��E��/~)��\��7a��w����K) �=.�v��X��X��*�e5'[�[���_�4�cnvI����Q���4"����)�({�+�O6� sñFj�g ڶ�1p�3�;D����z��!��f�'�d �|�7�DE���;^�]E�C������t���|ݎoV�C�F�V����ZD1앮� c�W���ʧ�H��Vl�+����AU���`�ޤ6�^T�|h��0�*Ⱦ5�PF�>��_��ظ��ε6������mwv�*�Ļٖރ/,����S���M�E�bs9k�������㻵��Nұ�}�I"5u�<_������H���pd��!R�i�i�\t��@���~�\Q��Οv��V��~���6V�O����W�è��������'�� ������<�1�����w�U��S�! ���A���B}��X7�܉�b�Ț�jp�db"�j�C�<ߑ�����C��CeO���ۍC;���v��E�2�$��SA�4;D5(O��-�� ��_%�{% ~��6X�,cQ$�)��k� Xt��g�i�Ǫ�g����$i�����$��WQ���lzU�5R�oL�mT����$��+6��b�6ך<�Q�݄��V$���5��~M�M���d���09�L��K5[ĝ�QL�J�7E��t�I��`ξqn���w��D��թ�����#��}��R�¿YKc�8�'J��h k��C�M5e�����4LP��V�YB�RՒ�N߅e9 ,�g��A��*y��ޚ'-x衡z��0�+͠T�:�n.��'��o�<����V��i��8`�����C� ��t3Nv���*,�X�0����0t2�����a����I%�Q��X�� qӢ6�F}�3&JE��9�z�*�`��O*|�w����<�"%�fy�^�XJ� ��M� ��\<]w�ە�E*�R���b��9}����m�M�kJT�h
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE