Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
be143c69e4a305b4a7b247fbaaa21e7f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
be143c69e4a305b4a7b247fbaaa21e7f.exe
Resource
win10v2004-20240226-en
Target
be143c69e4a305b4a7b247fbaaa21e7f
Size
1.5MB
MD5
be143c69e4a305b4a7b247fbaaa21e7f
SHA1
fbe9434bbb480f73718d982a46c5eb4a66eb8f7e
SHA256
1325de7e2f85581b25d0be2213ea597778875905768b391a0df5eef38e8f062c
SHA512
fd1503e1b65148db3c2893597375ee81d50aff5e1994267aef5ab692da696a5653b53cab70145ad8cfe15c91952a411827b2a45a40cba145ffd9328160ee6fcc
SSDEEP
24576:CnXeLp714auzVRTrJHFSnLVSET/IP/Y/yeberAlvxmBw5jW5R7cPq7yKH1nymRGO:CXeLT4/vnHSnJXu/YKsxmBw5j1Pqm2nL
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
QueryPerformanceCounter
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
TranslateMessage
CLSIDFromProgID
VariantClear
�~Ā�����j��WX��EՊaE��x��Х��ؾC�����FIQS����Ñ�>�XS�2�G��S��YcT�f�a����# 5L ^��eV�Q4��0��ziR���L&/�'Ἂ�Z�u���)v�:A��RO6U�E�+�S��va<@�o��7oI��Ov��0z�N7��+?�4T ��$�[/����Z��3pV���N��z ��1M)����Q��0�)���[a�/�ޗ�/�"#{�*Gp��kG%��7:s��m��@��)�o�薥�谼���B�E:��^ ܛK[����+gF�{"ڦλs�ٓ��m�f������(��;8w�A3�Q�B���̤���J���c�j�z����"N���%���,��))ҰQ�_����J�,v��uq��{QF��I��'���̻fSa����_��T%Ƃ)P�0�{/�L���vA��͑�TO3�D�lf8�l��e�� ��X=%���Ku��\��z����Cs��[; �,���FMD�{�_H��c�)~��.�����dn��#��Z��a&�y[� �~���� � �Ljћ�:�i����}v�^���E�_Z9V��n=!?��� %����k��"}���Te��ky�&�{�B0 ��W�H�K��^����y}���PK�AA�Gx E�(�}�=��B'`?D^6e�Hy+���ׯg���s9�F�k�G{����tw�ę����A1��F�WL�ׄ���l��y�EM�|pk�� Y��q�R���������V�`ְ���=9��g��!���J}螊�ַq�rU��TU|��Q�i,*���� ���%V��<ZxI�������E0&��ܙ�<k�~�6/����L>���t�]�+�n-Ȕ=]X�G��0\?7�Fp�|!7� ��I�qa�iJ�����'<N�����G�5�z ~��+�VL��n��������~��l���2ō����V1�X�,�M��X}��� 9��\\[>��0��H�Rv^&߂���o�@_vJ7�}���Z��5� �V��Y���Ǜn�˛`L��G��~i����֭�rX:`v�L�I�IL���k�Ě&N1L^XV���Gj �n�|=�F�#���Av��S|�� {�7z��$�Ak^0�|�T���L��s,K��V�-��)OCA'8� �EJD\�+�rиrt��M/����p�,��v���y��t��]��1�;�%]Gz�B߇��M�ۿ9�*�OM��t��HK�̟�:�X� j��X��'����ܖ�7d����H�.��c0��.f\pmm��bWU�5����8�����E K(��:�b��p}�͜��>P�^w�*����U��nq�5V� |�������H4S�x�eK�ΈZ�Po�jȟ�{h���ͯ��X�8�����ꓦ����:��*N�±(��O�#��]�]7�q�'j�@>���N��cqT��͌*>��b}�a��C���Ǽ�;|mz�ǜ�y��ݖ<��wQ�,+^�O���l)o$m�unO��8�H�%%�� �Z,X�sL_�0���b�>�ſ�jD*0F�ͺA �TR�~�a^I�oں���-�Sՙ*�w�_h5����";?�+wXg������:����)u�+��]c2�G�%��B&��^�5�m�a�άnY����t�wfW��cÐAߩ�� �Ԭ�jp�>�ϊ��Ro�E����)�L�!�ߑ����Ҍ0�QP Wv�������M�d�*#�쵕_�ޡ��Ao�+��b~5c��Y�-���PiK��V"[)da �H�q�o���/@7�ǕJ�o����2�p�J��� v�nc��~�E���=ш��cB�O�Cf�2���'��D4�P.�^�N����>�3 3�4Pj�v�Ǒl�Ӓ�-D�:xd+{0�`R��d�?[.�:��|,�`Y�pR��v?�NB��մO��re��9F�h% :xu��������9�^��a�7ы���B��G�~�JZ�4��zAo�.���ЏF�;'�Y������R���<�欗U���\~�e����ٶ��~q�!M� [�����pI(�6�c` �XWjJ�����5i~. �j�F3@��E�һ>�;�S�Z> b�jU��� `��u��H.��x�Y��k �� &�a�ol �$h��_�MV�(Z����.�E\p�#����D3�>�&eisu:M^ʍ��$4Bc�%pS��P�mh�;�XV:��5�+b��Kt���f���<[I�<��8$�����c,�N������-��]Q�)%���wB���}�|Z��酵t��~7{gg�|$�Gѡ��9�t�qbr��I��aO+1���������>�W�="���iՏ��!5��46#�eD�r�vÔZ�k�h����P�J\�P&ʘ5kA���(��t��$�l1���D|g7��ݫF��mL:O2PljKd #�v)�L[�������|��R��Q�`X/t�/��� �Ԛu��mxX���T~^�2�h~�J:9����ґ��4:��ԉU�ؖ@��ݵ��$'1Xd7M��g����B�b���$� jv"bK�`�H�<����<���rկ����#7R�d�@r��Ʃ�5�b�2sf� =�Z����L�$]��*Q�)S�-����o}|4ն>�.9k���p8k�b}x�yw�/�Cj`"� sO�B/lJ�`�H*�:���/��X�6�����f�'��HHُ⳯���R�2��\>0!�:���������d%�����g�L>V7��|�M���ӏ�K�$��Z�V��PS�� (lOD{�A����Պ�'y����Wbh����m�0�N�����VS�����h���V����3��5��&��B1�qKB�E���l���nEV � Q}if��6�����&<Y"? j�����bmL������\ʫN��G�ڎ�+x�d�' ø�Tܛ��<\A6ٜ�m�4�yk_1�<�����i �sGf�*��*��5�#��}Qe7��(d.���Ha�{�n7v�q��%�k�����F����*��$�qֱͫ��q(��r�� :��š�7%�s��* ;b ��/{�:�M
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ