Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
c1ad4c18302f2d445d43fa85c9647eca.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c1ad4c18302f2d445d43fa85c9647eca.exe
Resource
win10v2004-20240226-en
Target
c1ad4c18302f2d445d43fa85c9647eca
Size
1.5MB
MD5
c1ad4c18302f2d445d43fa85c9647eca
SHA1
36dc3c073e4ef118b50b96b2c7a7a76d03637f6f
SHA256
20fc84ada1ccf2e3b72ffbe72b8c65132a031fdd052c2a4b244633ad4db65088
SHA512
2e129709c76b3f69d0feaa6447bde7994070ad9616c3266af9f2b89013ff82ab83885b1a9a45952de50ec9176a5fb01540734ab2544d761c43dc461f645c2459
SSDEEP
24576:7LU0VWL2azz6BVfaGFKDsIRm9wGmjk5tCHGMfEe89TBLwDc/FGIIIkLusvjn86zn:xVWL2I6BVfasAsIRm9rmjiLeAqDc/FVI
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetModuleHandleW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetDesktopWindow
OleUninitialize
SysStringLen
_lBVG D��_N�Dc�s�(k��7�=75t��y�^�|�A���Rp���>�W�P�W������֢[��hU���*���Dh�C��U�/��V2U��zC����>Fo�`}��c��G��3� ��i�<.-�k�fm�團�l;�=�1����A�a^��x�0�:q����J�Y��� ��B�+ Kˡ�D�3�ϕD�"�h�5�>ūu4ʄ�bq����q����<�R~�+�*X��?�a�澮˲ݛ��� �*��o��LH�?�p����E�'��(��R�N�K/�J������lD�%Ԩ���vK� ч���.̏��;�:��o�T�FL����N��w:��b%��l[��Z@r$k^��"8OEϏ*K�.I��Dʪ��^����+���;�h�9B�w�[�dV=WOې�K�o���r�(��Wu�b��Y���� ��JM�D�k�=\z?8b7��p����z������{����(�?���ΐ�ڨ3�M�ר{$b/U"}i�^H��<��+-���<~����XI��i&ǒ���RXr|����5�恌&�cV��%>��q���v�Xu�rr�&�:�a��h�R�"������� W��-2~9f� x����ȳ�;�]�ѥX�q�b<k��j�9F��y������~�g�������l~'gI$z"j�Q�r�.<@�%��3��qO/�F��֨�����9"�պ����E�>&�|)����Fj?vSN�r�]�lu�&ڊ5�V�V״�� ���n�����E|k ����A�1C�lx��!�9~q�&����íգ�vaK�CY�u\cՍ����c��=�����u��J/N��up+3�=�Qⲿe�q��v������>㮉��}��v�d�����(x�����& �&��Ez:18R�@钹�A�iV�' |.X5�a2��(�����$��F,r]Xс\��ݔ ;~�;���(rN��{��N�%�\3(���𗂔����'_�weAtI&&l�uPۊO�Zz��|�ã�8��� � ��K��ҘZ]B즲)�\����U��� �ۦB�20Ɂ{�`=>��Bc�� �S�e>�QԷ<�1zy�-]g7W�sm��L�� H���;��z����ޙk"n�d�����(- ���4o�<J�DC$# ����t��o���Ns�'����8'��!V���ٸ%ƕ��`� ���C���27&�@k9S4G��b� ���������RZ��R��Ԛ�~�I�)SJ���a9�.B)7��qad�x\ns�ۮ���6īII���RC7���~� 9_g����\8pb�!T��>�h;��g�f�Da#Z������a���� B"�0p(3\���g2�����9���Z��R�F���W��D��^��[v�h���Z����xy�����CX1*a�A���x�a�~ށr4�t��7����tV�����ǭU�C/Π<��ɸ�^�e�=���� �+�j��z���5� �C�y���Q$&ɶ�.v;_�92�uD�U�ޏ��%�� ԟ w �#D���[G�}S�b�^���,�] D�FC$��6���ec���H�9��Yg�^�$"��yY� s@�v�̘�X�i�L64��N#� f����ε�}͏D]��+cվ�E��C�;��~tK�����i���U�˺���L43�ޚљp�6D���8�� ���s�/4����M����S��mM|�D�Ts@���[���[E�ѺGe�/�e��*�4��N$�v9������4q�-O��G2x��Y�i�{Iۇ����*�m%形R�P��}TٖH��k�put�'HvhQ����wԠv.�����CO���i�ђ,�r��"s"=�0$_��#�7�n���V��A;h2h��\�V�����d�^N�y{z����ӊמ[�g�wA�y��:ƥ�����0�F�øE#�2[�� ?�"���.ݼ��Ԯe���M����E���[�!�\֝�����4��?�8.�UP�.t��WWq�[D��W��ؐ�\��,�E��t��55R���#] ����t�: uRw�ʧs�&o(�x�X8�5�<�ZfX_X�/W��ў��\�I!'r���ì�0����sh)�á�ȄL]�w� ~�7�vd��-�]F�Dam~��w)���!��w�ܿ���S�Kn�R/�G�,�P�fP�vʀ�Q�9�d{aBA���if��}Rbki}X{Jq$:�>��Ȗ�-� ��`_��2����ԁ���P"*��,a�H�xMo�$���Y�k^@EH4�d_���m�B�Y3Oi<D������vlAV��w���I�g{Oף�F=� �`�>�������b))!�����9�3��'!��v$��(���8�tD�n�OA�P2�Í���fd !َ��R9���h$�5-�w.�vҨk���'Ƒ�.����V�� 8�:��{�FN� ��51��������^�����\[�zᷮD�'?���^�+!f:`֚�5��@p@�)���D��!�"��P������0�w���-f+#iB�Fy?�!,.mt`[�6x��)����M�B4���'���y��WN��V�$&訒��@�3��z{���p�r��|�@VTԊ�y�f��9�x����ە&\U �����������C�Z��r~�9L!Ŏsv"U�Y鱮�m�l/�i��K8��MB��j*� ���A��̚�� <��ĕ��(��p��b?G��������� ��8�8��k�©��5��>l �j��N8� a�x�:��C�U�]'� ��S�D�`��K����ѐz�0|�� U �q��z-[��w+��sNU3p5A�U�F�̅��7�멼�q[�Bze�f������*�ډ�Y>K��[%;Y�+��妟@+�����N|�eL_O����Q�U�����j��|J~��~���>���U���R��A+�V�Mh�BJ�`H%;G���i�(H;��H�:ts���POuQ����E$�=[O�^�.(K�<�2��I3����v��W�S3 >Z}-Uɿ���Q�0������, D��Q��bT����r�x���Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ