Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
bf2c37272afd6d11749e15c2c7862198.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bf2c37272afd6d11749e15c2c7862198.exe
Resource
win10v2004-20240226-en
Target
bf2c37272afd6d11749e15c2c7862198
Size
1.4MB
MD5
bf2c37272afd6d11749e15c2c7862198
SHA1
e91b44772cb0f1992a611abb736c52d0b4a89855
SHA256
13d605f36e7167f1eba15b0802e3b39a3d2642cda3700ae3649e4011c115c353
SHA512
4cbd12305cf5a91616b9637d1ebca31840ee7e472cc1b2c5e55a9d99c29a3936df47680b638a8c0242e70fd577b4ce23b43265ac54e9b4b54ef7ae1d33478228
SSDEEP
24576:a8j2SodrozqsN3CyceErj3qJk71xy7IW2SJij8U8FQw9usDvjD/F9Tz9jk59RVj:h3EizNS7//q6/ud2SYoPQMuu9TzJkp
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CharUpperBuffW
CoUninitialize
SysStringLen
^Ì�.�fȝ�&仵�y���b���Y\L�ieAlh���4P=(�� Q���9OM����{��jE���A���N(���r��� ֒��j�yZ�,�Q�[�,�e}�4A�f��r֢�B�~��:F��9�>ЖW��7�����㖰θl�Z�����X|���mƀ���d���(��٫u}.�(� �~|��!��d�V���CH&j�#s�+����!�|d�E�-\���o��RA�G�K�{���qm��~0������mC��E�T8�Ѕ�e�������Z>O�΅m���'���g����X���*5YPU��JO� P.� ��Vf�쩕,��T/�L��:.�K���zn �(g5o�R����.E�\u����=hIT5��x� ,ѝ`���@�d"R�_��,�e�/B|�3CM�Ұ> ��:�����k�4�OWrV����U�^{�p��y6�I��[2� ��������@Ilm��Ó[\����D{_"n�L��sӪ����Yg�'�ƀgO��xV3��SV���/�w�ތ2J���"њp���I��xv����3�"T�J���X�mNu�/ �� �]r����b!�ef��?2~���8��dr�?�n@���U2g�=��5�M@:���� �N{�/ġU���:��&�ZE�+�)���KbL����O��fc�p���p���E�����Q�u��Y���E;h�X uz���|���a �H���K�@ʕ@��L>����\x�g�j�:ʠ�pR��Eqٷ�<���<��_�<F4F�[�u��@����?���v B3(�?�A�~���ؿ��W҂����������=(��c����X"���?X{�IO?��Ȏ<p6`%(��|%��t��@p�q���ߑ����5ʬhm��n��om���y�z%�2��3���N�8��7|^1�|E��n� �\}�í����s:�>.��O^��-���<��6�{����l^�'��������LRw���)/�=��~��<����G��Doe �ݑ^��4�YP���k��(ڻ�JY���-�2s��{4�Q�Zn_R�}y�R�0��k<ר���-���x�:O��2��� O^*��"y��p�N�Ȉ��Z8�1����Z�/�]�ƚ��"�h�mr��ce�g� ���U���|6�'}y���c12�l��b̪U�-i!) ����=�� ��w~G�ġ�b�1���_�&$S.�$f�*����Q��Ҡ�N�� 쎕���Z ��[��l��_��"I���&�SL�i�,gcc�]����"Y�� ����h�Z�b;8lDKzy�|?��u��W�l`��b���<�)M�.��`�U���՜c�B%`r��X��M�NJ��^��Pݹ�b�C`����)( ��#ޮkz +ލ�潸�E��E:Tp����Ϝ^��=vN �h������tM�f|�����c6����^Ȉ��*�Rg�2zE�5��S��+�ۢfI^���UA��� ��qv�-n��>�Vk6��9Uw��d����ۙc)��RǏΤmdnO�c�Q�V��H9����i&{����aC{�� '�R�-��1VD���SK�^��xc3�l���j�"���cQy��T��������0frR��/J�U���{_]�ͽB�{SMq��u�2rk�ϩ�q��tRw�&�a<���dE�G1�.rZ��Y���1r�����t+��^9թP�����V� ɹ�txkK�F������jakyACd�����T8p�cE�C�9v�j���Ŵ�)h�F$h�f>����W��?����P�%�Ӕ&c�5��!?[rQ��+���GH�wlv^�h���`I�c�C�*�.l���Fo��~b�kW���nήV������9%��ԗ�|>:x=��t���z��hh@��]�5��H^��y��Y8�첶q���'��>�P+���(�@]C�Ϛ��� �v��Hَ�i�!�L��VT��Fϰ���b�t��J�9��HQL�����*Yw%� !rW-LF������R��<Nѽ�^�o�B<�o��{��(�G�Al ���`�̌Lȧs�,CA���w"��`�}��p=P�|酹�#�`�����n����s/�!.����$��}��&���4?�d ܽ���yTذ�������j<���~�,�uv�m:`2%*�ިxÁ������uG��]%��8���W������IWC�خe$���60&����4��Q>�v�(�AՑ�<>q:<��)�d�}X��!hd�mG;�FK��,�"K���|3�iRL���Љ�P>�9n&9�h皦h�Nw�X�/�PI���)1�ޓ��߇p��ˣ#��I=�\ ��Zp+�ejyf��l~����Bb�c}ΎJ� ��8�L^&D�[�t��R辥�i�!Q8O���VQn�9��z���]���k�������vp���PY��.I��qst����11��胎�f\40bPf@���4��g��#^���%���n8�#�<e|��wt�n�6fo��2d�����6��_�����*�<w�U*��&@1�㐻t�~����]p}�(��E��Z+�tܟN��K�w���O��O0�����'��,�EY��*��f��E�/����DE@��+�+yr������_���u�d�Y"xU^0�M '��\Fhp$j/χXy) ��m����?�p�+�+a�h�E�;7|oc���WC�!f���Y1��� �����֍�r��/���k� �^�����(�:�[����a97�Ӈ��#b4G�_��E�XI� ���d�2ēl�18s���K:F�������_�N �u9�G���PQ�';dw`㑫+̭J�1��ݺ�|f���fd�����mƫ4R!N������x%1�8ѧ�V.3��E��Z�`��8�Q���|�5��`���!~�R���c�������� �)Ib%�gni�1}�;����u.��~Wэ������e�w�t���e� J���o�A.!/����=����G�u��E8`p�:j�žY��M����>n�;������ �
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ