Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
d57c958fafc872e16d4c328b1a287ba1.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d57c958fafc872e16d4c328b1a287ba1.exe
Resource
win10v2004-20240226-en
Target
d57c958fafc872e16d4c328b1a287ba1
Size
1.5MB
MD5
d57c958fafc872e16d4c328b1a287ba1
SHA1
a1c821881c170411f66d33dc08677953cd68473b
SHA256
1392247c76d540d644faa3258e8610e458c99767cc70f5e9d35b9b88dcf7a5cc
SHA512
b1eaf959493ec6aa8e950587d21a9e03d8a8b0a9825afa202adf188bdc62f62cc2d39237d1f1cee52c862c8466e46f2321d80fc43de9d44cc3d902f0d4073488
SSDEEP
49152:QZsd3KhjodH8+HAC12qbDOV2DZBvIzEL2PAr:QZsd3DEGBv6RPw
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WriteFile
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CharUpperBuffW
OleUninitialize
VariantClear
��M�3IJ�nѝ�CD���-��N(�h�@d�������k�'�_��x]��-=�y`��W�!�٢T��`J���[I�x�RE�M]:Z_�S9�����]oS|V�&G���W�aS"`�n�M�)�˷����(r���kSn�/��elvKK����5���-�Y�#v2���e8^��>}dٱj�S�?�f� M>�1O.��iY�bp@f�Eӭ�cza��K� ���%�a�T�Խ��_�:cqoﭱ�h���^ µ��)խ� )}�G���W�}쫑�Y8�$Μ�R���ԅ�G���ݒ����UgFW�>q@lLXA�bn�ZN�b������v}��+Fu�^���Y�x3�eR�K_�&��`d� ���s��+ҕI&p�!�������|�8fb�6�<��j錵���4&��:�|�#[��Ni9�r��U�e��0��S]��_.+& 1`�4��_ 0Q<U�[N:�g�߶������%�fّq�y�GO=h�XP���~W��%�Tx��+�:��3�a狰b�2`��]*�(uxX´gv݀��-�����.�> b��6��;�Gd�_��1�&��j�t�7�� ��4R�����v�`�����p�J뱟v�����/>�;�Z$m�n0a��S2չ�����X��&0�����-����7�j�E�V���^�ݪ��L����4S�&�@�v C�%�%���z�aL�?T)A��2H�|����v!�� �����.>��_��.�Q������"�+��f����0Az��^u$��n\�ޮ~���z��d|�a�JVQO(�}GۥZ�����{$���b�sOLG�0Ix���ۇ\��C����ȶ�y/����J"�m�ܝT}r��8)��@%`�A������u���9��4*Q�x�_�Jy.]]�0�]؛�Jh�邏��n�"E�y]H���aƓz��s���O�߃n����&�/?�Q���N�{�4�,��<�q[���;�7�n�6�m)�e2j�q�+�B���j7�Ռ��j��d��zxR�e��c5��+gtf8:�v�1 �7�jC|��6#�8CkMJ%?��\nހF��j{z�VUh,�Ӝ� ��o���T�@�� c2M`Bַ!�����;V.F�)�GBO����ꨁ{��fOQ�ṽ� �Z���O � J+��E�aL:��4NF�ʢtg��a��?�g��x�����NvQ��#���������9ݫ�o�@��(�i��^�jכ���_�`�T��5�+�9F�����:�@�5�+��A��;��% Ʃɓ��g�y�}�q�l h�+e�ؿ��1��e`.o����������)����%� 9���`^��Ŕ0�a6�j6��s��f�ס�YL��h�ކ��s������S�rnaW�:�G���~3���baɎ��w?m����oȉR*��HA�-*1�9��$�%�h>�(&^�Qt�@�4d�7�!ֆ'N4�K�'w�:f#��Ȋ�R�F�؈G����� ˔oS�v�=�P�}>ebNU�+`��{qs��{6�=�9 �J-%L��$��k>*��s5UT�F��4nj֨i�]�e�Ѿ���R�"8���m+���~����0�ۅ�3���;����pF�%=��7)OjQ�6�n�PѨ���_���G�3F�����2����v�)]4�aw Τ?�~�f�?Ts8�%ޑ`�~���ayv��ITD�2��q┕��)�`��Im�Е]��CZε%����oA���ѷ��ٮ/�E�L��M�U�^[�tc3�~��4�t��c�����kT}5�Ґ�����6:M���pO�[���F��4�Oߟᑾ������)�>ķ��}}�f�Ĝ���~���v�y��y%e��mNDN��u���[m}���S����0A����ރAе�/= ���|�G��#-����'��� O0���7�,%"}�w���+���N@}i��$u�;& Y -����=7���!y3ɴ2�B*b��S���e�s��Z@&���h�?hb�\�g�A��ENry���:�����In�2���1��'�r}����/��M��5���vh�Q��R��}끧^Q�y�u�hHh~���66�QN��Q�����;쓙�;D��ݘ��+=���Y�@,�!���"~2���VLS��u�F"�&�"���Bc�{4Ƒ�c�3���HA^K�����F��.��=6�4�Mf�QCP-;��Rq� �ӥ�j@/d��fl盾�e��� ���z)�����*`��/�Đ��J�7�!k��wN�I2�v���Nv�����L���� �5T~�=�z�����ī|����]�������J�Fihv�#ouY�E����ۃ]y�D^���%L�JtX��\8�F�l3LȈ~���[�}I�q�����i��٫������"�ƪ�L�;��:�1e���~�k}d���}�תґ`w[t٫�������G�Y� ����Ў��R?�j ρ[k�E�̰b�G��ۭ��Z�`8N>`-��WAc��"�A\E_�b��@�iC�u?�?͋���� V=�?aG[�8[�~hd��92@��دH82͘}���0�>�����#���֣��,�i���T�93���-.0_P��Qtr5,8�5Z-�-���v�pq�<�䤏�L��Vx�nDb�<������P�����$����Y��<ߤ�G>W�$JRQ�'>�T����؉�a]8?yġ!��G�=GEu�O0���e8rl�39�rZ���T�S�$�����I�d�<5���<̈́ 6@~��go��O��9�MM�gt��7��\��*'�d��7� �?ݭ������R��y����-C�m��eK��`�������%\(RK��a��E0�-�E���[��E_{.:�����bE�Jv�7���4��VF�I����QI�:��1��_}�껈�(���҉R��xI��|���v�M)��LB� �0&?N6��`C�Q���Α/�χh�����l��5f�����.��Q���F*`g���d��۸p�0�#��A��j�A�P�9eD�.,���r�]�.?ޤ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ