Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
d46d413060889a1b69d62a645ad4dc7b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d46d413060889a1b69d62a645ad4dc7b.exe
Resource
win10v2004-20240226-en
Target
d46d413060889a1b69d62a645ad4dc7b
Size
1.5MB
MD5
d46d413060889a1b69d62a645ad4dc7b
SHA1
d10c8fcd0c5bcaa2dd3a60164ac8a619f359e71d
SHA256
21a9084496c86182f85c129a7e71c445f82ef6e0e2d2251a9961e6f49cefb4a3
SHA512
5bab6f83e53aadd67963bd32fa82fa68c5a1eab7c8ec2608f2668c87f507075136575c5568c2987f47325f08bc2119fb0abe3e433580dc5e3812c2704964ac78
SSDEEP
24576:6L1Urym2x2LHHV8pknhvN7xgQmUda1WspaVCzLhn5WLg1vAEXWPmTAS6Xk70/aKK:6pMKRkxNeQmUE8VCGLgBAEXWPM8smA
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SuspendThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UpdateWindow
CoCreateInstance
VariantClear
���X�u���]A�j؈����ĦĞ�)5Zad� QEؑ����q� ����HI�%FŸ��`������Z�Ÿ�4��k�g)�*��<���i��� B��Lkr=0ڞ�ƈu'�Ma*U�^���{||��]��e��4���!|.�r�1q̼e�mh9�n.�����k�������.+��2l�� ��#��li��@��J�[� tm0����w}y�)Z����z��[-���a�߫�߹-��Fz1ڳL&��� �BI���W�B������y40v�[w^�}@�c�y���? qT�������ԏ���Q]5C��I�)@^�����{���%�.�ب:Z���� ����;��i~�ͷ��7��v�/ɛ���7j6�R4Gd�Q�D�ܔT��p��Avl������n�ׂf�^1���rM֫&aK��x�Qų��7���l������������I._�9����:���+B%�.|�X��Av��/���MQ���8O�<�ўb���i��Ji僧�+b��B���|-���f�}Q�]�5V��/� B#D��T�P �a8%[�����H9$EqiH_��r&��K�.(qF��Xe�,���2E��g%�!�"�;`�s�J��Y���|�&�����T���Bn^�Y�}+њ�T���F���t�R��:{����D1hW�����=6���l�ubנ�r�}��v;���� f��G�c��_$!qz�OcC�&&����mJv��u��]���9k8�ɉ�7�3��^vcQ�w�p�Jdʫ`6�+����H��>\?�3����BL�j�՚���k��e�!�}���b B��x/P��C�`��.� �0uE��LUS�Z���xNΩtCδ����5G!G?�è��|'���r�tHj�v��LE�ߩ�Y͞B�u*�}��zb����2A �N�����J�sި���&C%9��d���?�Õ�]!����Jo�6�O� ���m��\������;�ω��l���������9�Dx�����v�ntt?�e���7j�<7��5��)��s�4��B���\{���{ۿ�aYkg�r�N��o^� QLD]Ri��ir�?�>�5�ֶ�B�(U�O�[��+�n�E{=�a��MA���ͻ믁S ��F������~����q�-U�W�R� �EίaDo���q�2�c"-'�04�+H�����0�،/�j�f���e3ҟ 4���+�Cz��O��X?�� �����7�\H�qyư�v�d{���ݟ^� gK��S��\�J�l�����ֵ0�#��g�Ӹ d,���~���Mm�M�7��s b�S��/<����5�N�W!�QV�*�)&;���i�� �w��l��1�����HC��t� �W���=Q�|R�7z�:�����rMg�K �.7bM����fKx�@;#��v�;�z�$��K���r!Z��rG���8,��Y"��-j�Ӷ\t?c�8�|�Qm�z�S�Y�����(�A��[E!7�'�� |��3k�ső�-�X\*w�a�ѳE�m�L�����d��hD����X�ig�k���9i�C��eM��yxo<�b$ݢ��8�uaE�/GS�=) r�b*nO�֛ <� xa��tQ䦞;[d��x@{�j��)7;9 �x�*M���x�^�7F��Z��e��ǥ��yl=M����. <Cf>��<���*�p)�O.���4��}4�ׯ�,O�qh"�|$��e����b��x|P��g��'����Lc��YI�ʔ�f죛�qŏtN����ܚ)J��fW����빑�xا��8=ӯCU�aPRkpN'&�8���ŭ����{���S��7���,~՜�r�G�������ġ}�f��\C;zEdn|��呂��{'=�/�}�=C�4[����1����n���b q��0��c��4c���_%0����;O�¥�~I�/v��ǟ}=J���܊ϔ)�L������Πk�KT�.��&��>��jd|v����g�gN�t���T Y1�i��ž홰0��&x��G�^㶞�m762'A�����R%�y�c��s����,I�L�8�L��d��H�_n���eI�������.6�<���Q�k�Α�jv�o�E�N|0�����3x2"���!�&?�-����ݴv#�L5T��V0+xY�q J �b��Z���NP�ᢤ�֮ܪ�Q��~6eS��'�����/V/����a�t;�,�s������OA��b�F�{�i_C�2GT��ӕ��Ue�3��"�������c�d����L�H�M�0M�v:,?�S��1T�8 �O(��۹XD�<`��W���]-��K������`�8�gtۼ��`xe��.]߀�]�2ҮC1C�ֶ�8��Z|x_ ��J���i2ȼ&�C���5��#v<�b9#Z����NY��|\�BY戆��,^M9��FU�q���)���I�B.gx������Q�d�J��x�����䳐���;@a8���(&�E��*��4�;o�������l��~��ު�=�f��xUH{c��h�G�N��Ǹ ���7r-��mo'����/K������9�>�,Ia�����N�A9�����:n@Z!��hV��H���;Åz�d�� qf��P�:+]�n��"�D@�VƐJ/Ռ�E�#�|�����ng�2���]���ī�V<�����~��yd5v���B:c�Y˷7��:���m�2���~h�� C��j��d�k��0�OH��C�L�?P�o���uzCB�-�]�#�N%_(B[}h�n��O5��>FR؞ #���"fGh�/�p�E��MG��F�5r��u�-$�<�&.�б��l6j.)��4�M�r����0�GI��P�eGD&�ȁ�~��D�a>�Wk0,J�L����w0;h�t��p�0DΜ3���u��=� �Gk!�^C��m:.������Iؙ�Uh���k����KA�B��L�E�+)�n�Ga8)9�lS� ld��]�ym�X���RdD�p�!��!��q��K O�/
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ