Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
Notion_release_x86_64.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Notion_release_x86_64.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Notion_release_x86_64.exe
Resource
win11-20240426-en
Target
Notion_release_x86_64.exe
Size
17.2MB
MD5
96beed43d005e1eb5110c2143fc7bb71
SHA1
38fadf64fe8a3016e8f5675344fc8298c297c94a
SHA256
b07634440fda0cc1b4cb4a3b6d7c56cb8125df750b4aced5bac1afdf28cf2591
SHA512
2c7af001fd875aaebfd7ad4fd032ea876e7d69bca39c513e73a3c9899c8a65dce4dd6b522e50ed9610675eabe21324003a4dca428b06895af2c8c22f1038f4ad
SSDEEP
196608:rkpXNzfl0sKYu/PaQtsI9iL4FMIZETSkjPePdrQJM93BMJg6x9iGvPoMut/X6e0x:efLQtsTQETSkvJQCJGG4MUXx8AKORY
resource | yara_rule |
---|---|
sample | pyinstaller |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
InvalidateRect
ord380
FlsGetValue
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetTokenInformation
SelectObject
�e0���=�[O��OC3�Kp��A��5GHX8�#9 s��x,�����F^0����Ϫ3�2�kdd8�7��h1wW�L�r�Ե��t}��t(�I�^���J�yӢ2 [8>����� uzy{�����n�$�Jv�\�(���Cg)M\��p�n�[��y�D�fȟP�X���T+~`��/Y�Fre&�<�_�D���C��v�f���M�%j���0�Z��X��u1����t�f*8%x_��*}lx�_�K�l��;���ڂ�bG.��[?2���+�\��2�X����}F��U�L]Ib��2��\�~Mt�!�i/�JM�&��<�a�uV�;/������a�T�%��'������k��;Tɚ�5bG�C<��;�e�cſ�6c-�֥savJ�O� ����m���ь��nW%"����)�[�/R�8b(=Ze܋/�@���y�U����,t|H:� A���M �>_�e�a�=� ��;b���Qײ�fq-g�p�l-�b��*�����ǿK��J�{�?+`"u�"VԌ�P��i��}�����B�tk���x��[S�+V3�c�(E-�ǝ���م�wR�����Һǀ����g8��W���.L[�h��կ�|,���a�Z���h=�!y�vt��ۇ�NS�$��4N� ���oy vĠz(�aQ��x��Dy�\���ɠ�-�)���/�R��>���N�������ŝ�lyҰJ�F�$��6d[<� ���Rp��zV�V�kb��k�H��1%��� @,���؇R�F��/S\D���@�/�o,zƠ��Y������h��)>/@�`��r2d{��Q˖]���҉�k|�xT�S�}�+�Ak.�+.t �S���yAΉEe�#����O�{��q�d�ދ���a�l���D�ĺgT�I�w�Vt ݧ#��dFk$�'D��ˢ��o��L�Q��x�JDrm���$���c�<�6 �]"+�cB��ޞL�j����>��`���\�rJ�&��x"��7x�c�6��v���<|?����[mE�hR��7iH��G�4���sAo�`u�Ic���2����:���n�o��''4��Wp���]3/�Q2�V�(��,sl��RP�=�G1�����x�ٛX��{��DɈ���"bc�bwΎ�کh�|��m��)�i|(卾y'���e>������B�ՁP�I��O����n�����pݬf>uA�G H*�%}��N/�!� @��Q���˭���#0�[� �b3tm�C�K����� }�����0#J%�� W���s��Q<�����M���t�^�G�w*tfar�Ú���Cڗ�����^���� �u�Ǐ��"|���L�R^�$SY�����1���Jp�'l�3�ȢЩĭ1�O�]������Ü���h���.,5�+x.��`sd�%�R��E!Z�{�~U}�-Y��/�&�P�bV`���N�x�aR��t�{��.D��\��|L] �&݇��Bbh�����1��:�,��S]����9��kq�@O{b ���)���o> �j=}�Ϊ���Λ��<�(KLp�gl;'ܾ�tn���ɣVg�I�7��m�jF�=i�lN#X����`�9l7y��}�3DU� E���_�є���0L�`<�$�G�҂�(�y#8E�7#��%������N]4��|�ۙ� }o6��O�9# ��l�_\��n��h��Ma�w��>j3'�He2c6��n��%mL�m�p�(��̜Zj������z+s�!אN���c��n�U�ҧV���1������S�^��h��̉��9��B�? �>P�t"q?��]-��&K�)������+�Zo6U�Oz��F8!�d��n!�n��}���gI{��J�����˳ X�G�Z-?��MV�Tcc�\�K�5B���%41�aנ�$e!�Q��Զä- �8���V�����}<y�� ���ӵ�f�d�;��H̹Jr����@g��!s8������.�� j�"o�]U����|N'� ��T�hBk���"��?�%�g#�n�pЍ3.�\�U, C�W|Y��v���F�i�x:���I����V�_��O�:����xx��z��Ъ��WGn�0o` ��q�W��,\LKc{������݅�8�/f����W�}SK*sB��-d�o�hP{�7`% ���umXЅS��%*g���<���*��ӄa�xT�ϰ(b������ⅳ ](��ݺ���q9m��M�ˈ���M���q����֘�9.W�)��612%���`#�#h�J��le���5� ��d�ze���2���m< �I��0���8t� ��"����0K-�ꥑ�����GYͱ9�d��6�A��x�[�J����y���Aza����R Y�At���� ��N�i�n���x��B�aơ��������Yg��]�����ԗ5g��5ٲ\9���*��X^�ӯM3�F��)�5d�{Ւ�n����f�O��ݸ-B�M�a�sS���� ��{��]�%��y��ۘ���|~�M�p���d��E���'ؒ�w��*�7��E�'�MK|_�@�*k��e�d%��F>oj�ټ���/u���=��Ƥ1��=h���Q,���Q�O��>�U�Q���;"�3Q������.�r�M��?{���A��F��K��o�nb��p��{rG��#�廔�����'D2�i�����������3wSr��I������ c!�Qa���rs�^��H�6��TNN��� O�N(��6�/��31A�`AG�B��p����˿�����ڜ���*P����D��N�I������'{����zR����|ڜ!^۵n�q���G�If�Td6j�֒nz�|����5���uʖ�hp�&�@��d��<�o3��T��CS��6p�MNW��r��9����|}�(��S����aC���;���o+WHIl|b��1��U������� ����&4�3��!��rE��kqg�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ