Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
F593AB3D9D28ED29C7E65AFE5D5C3D234E13A7D2552723565E80D954D5E15DA1.exe
Resource
win10v2004-20240226-en
Target
F593AB3D9D28ED29C7E65AFE5D5C3D234E13A7D2552723565E80D954D5E15DA1.zip
Size
16.6MB
MD5
49509bafe7a3e693ed37731109480ab1
SHA1
48f396d5ad4395f6f6288be1714cad10a00aa5d3
SHA256
c9b3414ddd02dbd1ba0efa264b21133b45eac505e9abd551cb235647c4bf519d
SHA512
d56b4e1687d7d32d431d074e9fb295846cd589a3136d3639973f1612aab69dafba79ced16317056010eb1bb4b0f62beaf5a33bd1441a3161ed4a6679da2904c0
SSDEEP
393216:fK+pS0A56g8w41GQ4TY5Qk5QtZjJdbXYmNDhMcyxDLuA4/:fKEA5vv41GDT5kIZjAqtMcyFun/
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
�����.�bi��b��� �����U���6�U�3V�I�X�����څË��FQ�J�:�|��l� ��bd:5�|i��t�@fy<Y�HU?�_���fF��(�t{�i'���z������W۪�Ӎ� ���7��\}VT�Dq����w��A�vF�� @AI�>x��3$D��-z$ٲgZ�#��^6��\�@ ؑ!�jȤ^IWW5 ��?� t��F�v�H��}X�|�!dm�������Ols^��CƇ̱�ٙ��٪dV�#E�U��E����#�Nv��ɀER#�cbޖ� 1#pB_W�$���x�k�x����X����l#���T��0I�)��K�fIl��}�L��F�?>� �@�X|��*��Y0���%-NsT���j�maSZv��+���?�5�w8c3�&����\�|ъ�tSf�Np���C��7Y������5J+07�����P��Bݚ�劏�v��[a�Iw�6h�c=�� ���9 �@��(v�R�ʼ�kN_P�o�p��X���)�N�(�D���]�ۻ��������e�������6���ı* 4t��I,S����JV�X�q��(�xqx�~�.���Z;�3O^�0`�̉�~�*95d0��Ue <T�S�ӔJ��"�L�LO��'�Y-D����X��+}��ol���m�V�����9�ژ�:��@%���=tk@&��.WxJ+H��e�����ʨ��yp�5��� =:t~TXP�}����l���N��?rн���}?�����t�4g�Ɩ�n��u����feX�3�,��`�Kq���@;V����e���y��S���f-*����`���� X���� �)?/|���Q�'y��xH�UH:8s��*�Գ���DAD؛����mZ Dl��^��iux���u�� �6�Q;�Tٔ���+��l�)�N@��e�\h�u4KP����݄�b��oG9�ۅ�W������z=�������wh˲�������2�Z�GF+����T�Q̼�JLY^���D?_�os�[�y�Rl�<�y`� ��\�����yqJ�0�T��e���v�nZ���U�/��_� ���Tv��i�&���[y���L�(�}��1�G��©���K�n��͞�״Ńy�_ݪ��D�_�iž`���^��G�G`RnX����1-n���-$,b��Dz}�K��������cP�U�\���U�\��]|WeN䳮���.I�#$�N���R�CR��P�+��}O��k��=M�+N6o�:k@���3��L�>����/?Z�|�r��{���S@�'b�10y��m�@��+��e�,d�/�}��N�>ZT?�P�;o����"un��HO�tˑjJ%dL��b��?0�es0�n�*��Z�O2��#]p�dn ��O y�je+V���E#Ckc ;z/���+J�S���D�����f�J3�6g N<��A �z,)�?؞�@�ɚ�3��7�:(,Fw^?_� �PeY��2�&'���N ����]�XX��N/G2ś��}*�xX#�:��t�,����v�����BD�Ђ����J��[�բ]�b�QX�q�j�u-MyJ#vQ���� �P)��X����m�VY��n1Ϗ�!�� &��-m��-�ͧڂUY]����O��t���_D�e�����b-j���T ��!O�^L�ʌ��]�5UO�6�;CJK�̦c߿]�1��#�~CM�!�ހ����Y����fg�:�S���rc�#vs��D����WnB|k5f�e����@��ضh��2|A��;<���v�ᒡ�<4��2#b:��t,�v��+�����~�T��o��1` �n����y �w�X�� Lrb�X��V��0��U��(w*��QJ1X���;��H�;����?���9��~�[Еi�!��p$[~�X�QqQ����R6i �P�r���9��6�ыW�4�<���=[�F�ds�1����2��U�>�ق�* [|��L�1�Bk[=�z)��,s���}�lWC&�ihFgD1�{��*�)����˄>��Iԕ���<�:�>��T���>|��A�#�k��d���dޘ�kݛ�$C��7��$1�C"����ieq{�����y�k����?�%���_��5�s�1jPn/AZ��:��j�d�g��Ó������ao|4)��xS����m�����9� �L[2?+�T�F����#�$�����e�A�\e �=�6���Fn �Eb��������/��� X'�D�$kd��P7�An�]��z��N��,��l+�OK��@�!��[fB�NY�����{M�e[D$4�\�2���[y��9)X�I���fR�����G���z2a�'�z2#j-C������T�*�x�R .�"�{��6B��edTr�C_����+}�������fk��e���:�t���+=)�C����R ���G D,�<��p��c\�N����h���^3�����]�08&��m��2�J�{��"~�^:*�9�kz6��tu};j늘:;7�"�<�C�� �l�A0����^���Թ�1y��p7���7;C�s�i��B$���k�����y��K�9K�VGF����נ�2�A�g���o�,%���{*���ذԇ��y��S'N�<t�)@Vr�XV���,��.���̷Ш�m<��m�ի@m)��$y��_��\����P�kl���E��/���. K��ӿa�gr�_^3�c������J�u����Â���ˈ�mg%��.�� �z�1w�bqPݿWw�q�g�~`�2P�+�6-����z�Ɵ���h<���.������:Ŵo+ ��y�}�7�.C�x|D@���V���M~ռL��*1k����ϊq:�/�w2����*I������*7;%�DG��-X��AW�J̓,���%�T�K9A��^j��x��d ��7�N)/��a���E"6����Rd^�E�����`�eC��a�7����Л[G���V~qʚ�fzo�e�@�u�@�u%��y�Ů���J���8��ab��c�xC0f)�5<��i5���D�����|����L��G�&��v�f�����m�xQ���;WP���۟�9��̤�n��H|z�73�;qr��?x��;@�����$xZ�ْ��}�|?57@Wb����K�J<��_���v�1�7� ��ގ�=Q��M�(��..�-ᦟф��%��L�����S�����<qВ_��f����՛��5�u
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE