Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
be2d5b9faa2c2d4ac62e64199218d079.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
be2d5b9faa2c2d4ac62e64199218d079.exe
Resource
win10v2004-20240226-en
Target
be2d5b9faa2c2d4ac62e64199218d079
Size
1.5MB
MD5
be2d5b9faa2c2d4ac62e64199218d079
SHA1
817750f6dba6a9e2b5e8b3fda4a3350a8c29e5b9
SHA256
0556fc42e0c503a855f69497309e59cdaa281ffc6226c060fb5b9ae675a3935e
SHA512
1e830871b6d3fc42b00679bb4fa8ccb8bf09b4d67a7bd9b2cebdc850283697b1c56dcf4c66d97be216a3f0f2d9fffbb23157337d90a07e0339244aaea5cba925
SSDEEP
24576:Ui10aGThdQ0YGAcuyZN+7I9XRKqfOQk6t2sQhQh1cgsQy4gvKXZ76CfR/aCVO:3PG9dQE1M7I9Xzff/OA1YQjgKR6KpI
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateSemaphoreW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CharUpperBuffW
CoUninitialize
VariantClear
p�voq/j� q+#3\n5y�����Ny� -��7c;ڹ���"���v�A�O�D%�X�Q�\�D�QL���ʴ�Z\��?S�vB��M�,t����=���Zd���Rpi��Z�?���Y�Ewkab�_z���3��|���t~��A��*e{���j_�E�n�j���5���p�P+V<"�Aa��<� ]�������֙[Ý>�Ou�7M�_犝p ��% <������P�ƍt>�`��b�ѿ���������{���|�P��u�#Ь��P�kBM_6B�{� �|��ü�|�y s�ꖠ��Y�!�m�Ӌ��i�� Q�K�w~�<�B�: �����B/T��s昤�~o��#0؟B�{�iRŭ�����'������oRIg�~����TB���X�!�6˗F ������$�v��AgF���~r�k�n���1+-�ζ�~R-E�ޱ¸`�����M�1���e%�n���d��� ��%q5�*l�!���A[_#`��Ef�d�yѽ�?hjir������Ld��t�Z ��9\[��i�[X��y�p����M�Q��N{������h��x�Qy�S��W�]?���e-@z�H���M�/A��uE_�P��먹�I�8^�m�5 E&���j��'j�Ὣ2�ZDe�a���@�'m�j\N�u�l�T�Z3�����<��} ����I���1��/h�G£\:OD���A>��z��+�G]�cdz����X-�o���ߨ��.y�7��c� �{�Cņ翰i�q�_�7�T�s�;���Hl.vg�����xl|L\o�9?�xf~!��Y����Ӂ���Y��AK^z�TȆUe4^JP嗅H>N�4(c�h��2�g�/t5q��;n�Y��֑Y�(��=����F����$=���Sx1;��w��t$T˗N�� R>M�B���a{�t���ja�H���(�š?d�8�T�V���`͍P���u���-p"g�6�� â��8nL�M����s�<$\�����ĩ�4)���B�Ϝ՛��-4.����E���i[��[v8"qd ��%)�o��˫M2�s�dKՠ�y!+t��@汮4�sч�9D����|'ޫ�����a�e�0��;��ԩa��i5���㖈a�*^��dzL�jh�}�l�P-F�Ah���X�4�[�4Z���gò �>��G�r �+J�ꈳ�w��5%';R�jQ��L�0G�*$�bln�m��� �K ,����ӏ+�&J&�D�<�1�ޥ]\� Y����E n�(Nx�Ԃ�0�H�&��A'Ͼ�_۩���Pa8�Q���/*�Q��fC؞Y�Q�dHaH��{ځ n���݉� 7W��>H�����"fۃ�vXgZ!�����;�����a�;m��)�]��*�.�'C�����>�43m��Kh�#: ��9 N���̋8w3�-�����ǧ�i0���?:o��$˲�����D���-U���?�G�O�Rjy�����Ix��#b���g��_�|�F��鑭��C�C��᭗�8�U_66�Y�tc�T*��NKϭ��B���\c�����j��Z5�o�Q$��ԕhHG�~r�l Xȟ=M��`�mĵ�c>���҅����n��U%ܾ)��7; u�[D7���I.���$1"�,۠�� �oĻϺmd-h��4.���Գ���"�f��G���\�O����kȥn1���K�C7�Q��K}1�nb�r�nl�N�V˔Vע\H����\֮�qM�����R�ή`�K���U��bYx��ꛖP?��Ð��>��~U��T��*�yLc#��;?�s��x]`��!<��K��p��wA�Ƕ~���'ƗT�"p��}�^������\!��Hү�h��a��?�RU�o ��2K��P���_@w���ݻ)��&D��i��c�sl��K��D�R��K�C��5��W�s4���V�-���5��jX!��C�� Lj�U~�#rb�&��v$6���1�a��.}�h��[��U��n<���ej1ZE0q8�a�H�t"�|�2fR�@!ȴ�by@ݔ�/�@���hW|����!oGv$<#��acy�8�=m��/��wg�5�����Y��o���Ytͪt���u��p1>�T�}��8��7�S! /��[sq���0���6F��!��ˡ~N#S����Z�#F�� +ִՌU��nD��!:���nAX���|��F�OT+&Ǟ�8�H���h �X�b X�2n�����n�>#����j�P jd%���H>S��p����s���ǂF[����f�͇�� 1�%�Zg�Sf?�ᘐ��EZ'nGo�o$��^n��e@���M��Km4ӈ&^�n�}�%pB9(�::3P��Ed�������� ���v�n��ʻh��iT��y���ic�b�Y��ؗ|xI�-��gR���gI�x�j�E'e��q~���@���:5��LA 0���!�U|� 8�T�Ip����*3����yG�l�b�ꫨ��I���ְ�1/-�\][jik9�x�OSlLF�����9�[�`[5&��w��eE[�R m-���I4A�-u���5�Pq�ml� z���nYݦ�T����������t���'��J�����c���X `����ٌ<yl:s[��4��quP��C��2�'���nRÇe���p Z�L�h�:�"�R*(8���$J�� ֗���!{|©��梖8��U>� ��We0x�P�ݪ��.��q���Y��EdB\��v�ō}<�H����q�ß��� �R��X��!TQX��t�27��P� ��u��O�n~�5��!.o���qT`�d�ֽ���Vz���/���R��{�f�Jң��S \2�~'�і��*���E���ɂB<t =��}k���+PTL{g��K�\�dD��VP�ַ��_�$ �aP��]^DE�oZ�,MҿlΗ�խ��2��b���ga��#�1������k�qj��n��"�(���0�4$ł�O_Oۄ�*D^q6&0n�k�~{1l:��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ