Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
c9dfe4cbe93c4c7b6487a4e4241d8907.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c9dfe4cbe93c4c7b6487a4e4241d8907.exe
Resource
win10v2004-20240226-en
Target
c9dfe4cbe93c4c7b6487a4e4241d8907
Size
1.4MB
MD5
c9dfe4cbe93c4c7b6487a4e4241d8907
SHA1
0ad553a68d988b65436616ea88e3f6051585a2b0
SHA256
22704cc0b80a58a25aa1cd48c099e986766a029bb6c31597f2e80a427c99e17c
SHA512
f3cf6b4b44e5055a728ed1d4b4acb4ae7ce09b325a1524dee6da678569af27dcc6304af38f804da23c95c34f45942385bbec141ec499147ccd949976f9a59f25
SSDEEP
24576:7X+SbFafpvCNdvi3aeq6e83lvfo/KPzywgps0aNtK3iDxduWT5SVl:rYrHWSzr30KU3iDOWT5Sr
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
QueryPerformanceCounter
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
DefWindowProcW
CoCreateInstance
VariantClear
M���5 *8�1��#lM� ��8�'Q����Y���|&��-�����q�]�࿔~�ee4aͯԐpz3�wF߱�X�ER��|[�d:@��q�M��K���X��ؖQ��sM�'T�(aQ��=���W �w�����[`��3C�Y�6[�;��G��0�����k��F����ܳG�br+Lr:��DB����aN���2@�Hx0r�iNP�����X�eKG��Q0Z�Ï$��W��_k���oh�2(ҿ���q����$F����g]ϩR���I����<�rU���t>����:���(:�.��w r�� ���2]��4Y �}�/R�)� Q���#��D圙�¡'�Ik�G/�$�A���⸐!"��W�� ���zUןG|E����O�Tn����K���L`�!�)��f����nI��L�>�y�S@����Zbb�w���9Z)X���kFZ��V︖4af��q���S�dV$d$����y=�}X/ ��I�{�I;:[��1$����_��1׳ʵ�d���4wqE���D�*���!�f�)>K������`�����G�ݳ�"�r^�-�EFp�w�8��=ؑ�cZ�^L�=���m+�Q .O�`勾 ����N�m�����nNA�d4��!�x��(��ui���Lk4�)��B*�§������6ݝ��Y6���nԱ�8�_��{��g��B�W�9{�:ͮ��<w/α&�F�^Y�m���%,O���c|cE<ر�qDQoZ4&����=g�e0L F��S��1L�t�� ������dD ��j.짗F��t7H�Lб�r�� 6�"��6�����zֺ&kG����r��EV�D+�&Db�g����Dz�gf������UM�Du��s�J�4vǚ� E��x�2ҥ����,*J8�8��BR��Q�����s���wPw�s��KP��J�ϓ0â_2���f1�`s\Xm�Y���!����"��Z������o%���K�&_�-���{�v�� ��MM��T!�1�"���i�&3u9���θ\��OXݱ��P��(����Ǫ�W����, Zt���ڽ������� z��,Z&�{֘'��kGE ���J�0������M ���H1�Mw�� X�����3�������vI��b��^��2���9�$�� ���cY�,��k�f[�53�^+{��2���#c#��V�^���)�r�&�Ļ���3y]�U�p�- ,�L��ټϚ�&?�;���tb��`|��/c2l��*�un4�x���TՀDZ��QsZ��Ïf��c� ��q"Rq]�E7�Q�>��_6�h�yj�y]�&��j�(a缛8a���3�vIk�50���}h� ��bhA,f���1�*o�K�4$V��9!��y3���p��14���9��5SiTa�����ߤm�$%�����۟]M[>�����mB�[4x6�R�e4��h%��d(��_>���ω%��ֵI��q���D�>h7/�̮�S�Jbq�M�DmH� >:��S���q�*;yF�-rWK���U�T!���oT������쨊C�Ճ�v<u�EJ���ޏ��(�s+��B��k�@�����9�������S�~��<M����r�8��@˝�);����J+po�WkoA�ׅ�vޟ֗]4�i�|�<+m8am�Ğ(d'���~�8si�ra���cC �E�$������E�,�8�E�Ӱa�c͘��}��Ǖ����0�����q��߲��" 1"�nk��(l�G�?����/�W�+j7�!R�_�U��0-W5폑�k 8I�N���p$]���R ��2H�5h$�b5t������D{"��j����\�=��I���iͬ}1�5�1J&���V": ���W�������kwٍ�џ��n40��*��*������I�^bSf�Dl��y������~�,�9,19s�?�����秝;p۾�=gVC������0���4}]��#���W�N�ӝiBN�K�}z,�j�_>�Vۼ���L�q<��K�ZLYy�f���yv�U���W�����r�Fr�q@Di����qΥ�Y�2<�e�g��F�Z����H%��L��"���,EH�|V��G��\^��D�GD0��H͙�KJ3��צ��T�l��E`����gb,����m�ò�5�sI8lQI��D��P�Z.�݈}��Oe|��Sj0�{��A��3@�R���t` ;������Z]5l��`��e�!��l�*��)"W8���L�x���l,о,r>Pط�� $������I ���ݢ ł)8�/21墄�`K9ͩ���w/|&�%Rxc����^����W���kP�I�y*4��c �:������D�������]# �O[��7�ַ2��Y�={�i1ߛ�m��������X�C��j�-�\�֍��1���7��3����'�/�1�2R}QrJ��c>1ږ-���w�L���ŋ��9MN��͈t��=��T���>�]X� ;݂�Q�1xT�_������~{��������#��q��6���2���*y����b�E"ã�����&ʄUeg�K�n������;2o��<��!y��p�:ӹ�g\�M��-�a�^�ү���I_"��z��E�T�0�C�*)sE�9��}��S��Ř�:5MK)ԗ�$�t��>��G���p�J�%9J��̥�>�"�< TS�o�8N6�)¤�c��W���J~�S#gM�_p��Xּ�sz�m���+)���1������s3a��d���2��g:6Ta���;q���w�����:HA�u֬�����7�'����g�H �#�wg��V�Al]�\�g��3^��#�����$@��eF;l�K)`%����#�|���77����c����tQ�@����t��&��M��W(�⬮`(��3�?��_ӊ>�+4="�H4@���-�D);l��p>m��:����'����|�掉���wUs����-�9��x�.Cϣw��RC=�^H&m���U��fX2�N��=� ����z8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ