Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
cd6450d98364a684f6285ef54ebb0044.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd6450d98364a684f6285ef54ebb0044.exe
Resource
win10v2004-20231215-en
Target
cd6450d98364a684f6285ef54ebb0044
Size
1.5MB
MD5
cd6450d98364a684f6285ef54ebb0044
SHA1
60ba038029f7ba808273ba0ecb5623c71d380537
SHA256
129296ecf8beaf1ba88eeae3d1fb2549f7f0c0e13d5b470430b1a0852027b42f
SHA512
496463107d4b6b1d58ac66f8bfefd262b9b60d126ceccbe7911464faa4686a6ab8b3e1c87b6d0fc8073d8a27bf6adbe6b074673594ad3735e519de4adbe16aba
SSDEEP
24576:bMadBX6DwQOkTr/DPONh2BXs0QHDoIyAOB0RqPkwdoF4HUTg91MbpiUnXDDxPpCz:bhzX6n1jONh2B8fHkIPOGq8+oqUTg90Q
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
TerminateProcess
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetClientRect
CoCreateInstance
VariantClear
T=wC�)�Dh����-�j�ީ}�������a��]�9�{� bY��j?��$B��m����,�)>{E�0��yj�q|kVM?�}.�'�R�~���e;�4`�Y�0�>T�F;'�Ӑ��et�]�RA&1qZ�����'G�"��z�[<vI�ň"Mr���xߍ��TxTv蓭-��V���H��&-Z�N��>N �}��C>�'N�������;�<x�'75� j�Ll����� ��ٲ:)�-���:Շ!���-1?��n�#R��ʤ/-sykH�Oq�Vƈ��j91�]�^f������/��D�:��T����UpY�(je3�l����(�&/ �GU�q�F�5�m���`��@ÿ��+��J�����(|2*9\�ppwo�8N�G��kR:���8w�e"`M���"t� �hH\��\u)z��ߦ���8�n�[�m�3�����@�^�ٸG)f#��<��nLK̆9�{�#vM���'}�H��g]\R[���3�ф��Y|�m�¥@�*O���}���[�Ԁ��1Ϩۚ�����ӕ=gq��#�Úڻ������R��iW�&A��D�r��ރlM���\�i:n���[Dwr3-�#S�XH'{Z* /s0(��ҎctG�� <�i�%�1*�6ECNA�T��8�5��d����p�7�G�ۂ)��������~�����7PZ8/��?�٘�s�������K�'�7#��hNI&$]X�1�n2U�]\��>� k���� ��.��V���?��x4/\�QQ��@��Ў����|��Z-��%hJ�Q��z4�2�/v\H����)^��u�����ۦc���o������2�.�M���B̕^���NRF�F��lSa&�E���)ˮ����ó�3�y� �H����F4�Ŋ��m��)�aF���6��͓2 ܊�u��)F�:a&_�"�p�h���[��`��9T*��h�f-�@�v��^�� s)��yX�/��v�`��n�9r�+/%��d��6=2t�g�_H�ٯ:S,T���ǘ���� ����R*��3]ծ ��5�5�'xM9�%7 ���h+�r�ќ��\��T�L��@� ��C֤�Y�vvc�{���`�r�q5j�N�'�g2�F1ר����T�3�s=�]G�g��)bU�S��c�h�7���(�zW����wJ,���`<H�����o������:ی�|���t�c��A �R��$/�.[�->N���O3F��!��B����������^Z��i��1Wq���n�އ���Wc�r��h�E�W��ȇ��J?r��-!;�+t�V�<�Á65���x�[�/��Ţd�@K͛በ���[|�w����e&P���t�ɒ2�z�[�k�@VV�F���a�5C 6�F�;0��wW^>E`�1a�����~�v�@^��Z��Pmá��Ju�ӝ��;w�pW0�4:}L���Pe�~��kƔ��0�ɿ�!%��3���;��5�g�$ve1���]��s��Y�[�gV�^�Bea4�i���Xύ���p�B�V����L�� ?���vl�CC�ʤ끹�A�\a$j��w7�A*����/�������ק �V�f8�� ˤ�����5��Wn̅�W��g�)Ö�W�Maّ��%���6�Yj���F�_��qMA�L��/��E���b1"�7����K��^���>^OY�" �Kzk��`��N�I�f�S`��>�3+�����= ���f�Bݾ '�Tl�^�5�������)�ty �d�%� ��jw��j��]��!g��3��o�Qvi�8��ؗP�����(_�}�kfșty�0�����#���١��� ���)Bm�H�l9 ȷ�8�7集>�d��8�qzq������B1�3�pF2�"�H��A����]`�ѩD�����![t}+�[u�1z��b��ҍ�n�xY��0��x���P�s!5cm#<5��1�����qzh�ݗ��{�s�s\�#h���]�آ�۞�3�7X�яE��q.�� �S���We":�T�n�fe%_)��(��� ���8��]�c�Uo����߅&�s��J�a���Q-a���L�d��p��b,�m*�x� K��4ԿH��X�hpT$`�Gf�4�mҫ =ml�L:^:��Ũ� �[���z����mp��8���{���zߤ�R���d��V� )�V*� ¯O�`7��Nqz��|S�=���P�Ei�=B��E��_W��]s�?�ڹ���A�� �2�T̘����D:�B�V5�;��p����Rv����� ��$�(����V�4i��*"���_���s)ē;�[�'m���v�9��{�V�.�3%%��f��Z�����;W&,gmv~�'�6� g)����mM�a��\j04���H��̜ț�w,��Ęf�����j��4���rE�!������SNO}��m��^'�TOQ쮘�@����<��GLt@�ɰ�PԲ�di���i��R2M�����P�A�L`�t��Qi_�X��f�)�28Q����p����"�n�hї�����x�ٹt�rQw���w�EaF�}/ �%κ.��3W���t�r���Q��,��KaC!&��Oh;�S8Y��&�Y -}:"ٕ�w.���a{tKL�)�>��xl;���Wۿ�.Vؿ��WK3������|D�{����)��ȶ�Y~õ���փ8�� >Y������ +�L''73J����-9��v�i���F*���N���2����p�H�4W�EK��z��9�9Չ�F�npj)����G��.�D-RI4�*��VO�`j�n��LQh�KJ��m>��5XԱ�n}N1��tCgs��N��!d�-R���j�%&��J1Ɗ4l,u3�S����Q\�J�E"����v��v�'Ξ�93:��}�������f%0>Ͽ�ȏN~i��N8�}���Vx�+�g���>NdT�`�n��pSC���f=�У^��kVDԞe��R�\^4W�&�YL��a��T�Z����N�0�i�]w
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ