Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
CMLite.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CMLite.exe
Resource
win10v2004-20240419-en
Target
CMLite.exe
Size
2.3MB
MD5
616a65eb66de1b0218401d55bc36e8b8
SHA1
3c61c3844590cdffe11218fb8f5bb13a5555d52e
SHA256
35bbb997958723a543c906b2c014da4e73d28b935260a58a46c5c09d2920bb89
SHA512
c77ace0d3a8a9dfb5d18e5099b2afef1ad5bc0add6a947fcf1efc8c32be2f8ccab7405bccc8f7514b4f2a884a4c01969e097bf87e724b60effca333628e03004
SSDEEP
49152:C3Iq8lWFDP5E73BgWmU2p77Qqs10y3SryMqf:CMeDPYCWmn5QfbSryMqf
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
��.칿Ɋ�w~�Ԕˁ�������;e��Z��x+--��?ȷ�+#X���Y�-������0���k_��ٟ�����;|���i�ZR� � Ϸ�OE���k�P����w�N�\ɷt��-I�>���w��C)Ɯ�Ha{�AU�P����]x~��7��k��y��j�c=���c �������k��`Ms^�p�ߙ�7`T|}tp�ލ^ ������f������Hl���+F�~e���Jk~��p�^*+ L����Vig܊�x? ��T �W��Z����;.g���� ��,���Yr�{���)��V�(�t^Y*�'�������4\�y�e�D("y�J� � ��j��>PW��������r�3V���:e�q����N�Xd�����Rg�ʀ��pF{���:�sr�=��}�L:�zR& �)�l�k��vD1N��+j:2�ƿ�}�t���9��o͙�>:���hR�L��ؘO���&�R?J���( ��w bO$��`��K�$�0�0��7{����ֆ/�6�c���{ti�L'3�Z5N.`s -$&������$]�����Cb_�b+�a�K�� %%��!��Tb�a�K�GK���l�:�!~\�FFv/�ʍsL�?���@Q�6D�yz{4�QA�_=t�� �k�ϩ��&��,�nDyQ��E�<���:�G$�nPEb�ø�*Ŵ&j¤3h����t��/t֔�h�sF*���bD�<���5�|b�j�:R% L���p�O�͌Fa�6_.��ӌnqP�7p�ȵL�[]"�ĨX����j�K����o/x|�C�@E�"�dS&���9A�!:[ ����)�*E�]{��=��f�<WeO,�z�h�m�z�Um�0��ld�n�j��j��0� ��T�������S���3A��/�f����%���Z��h�����i`������y��#�Q�|��<5�����2jzp1��_��A�0�T��W���Ƨ�3w���#y��HĚ��p�f<jw�x;f�G}��^���ĥn�SL�H[��b�>��OH취%��D]������#���z��C4"�����BAz�1�^���ю�e`﹄��v�`_N`���YJ2{���$l5}�)�5��^�i���@C1 ��t�œ͙��u�L8m�<~˼��Z�j�<����[�M[��`��8�[P��{�+%�vm��2�)�����վHo�����2��>�y(�qB7�D�y�~�)��~I�!�)��Q�+���f� ����I�T�_�Xu�#�8�ƜKi�h�����m�����%�}^��F,NeH��y� 8D�b��BvW IU�;Gvh�]ٽ�]��.s�&Hc�q8��0�d�4��_���P{hWz5��cav����dyO�������e��0�f}�f�� �����b��fR�� -�Z;�ǫ�9�|^���������ny�i������}�Y$�9� #&�ec@�&BG��S7zU�m��u�W��G��}�v7����� T�r�i�mr��V��$_F�"p��+V��jn|�xH���K;���ز�UKW&N���X�=:�G�<�' 5�Nu[���!��!����Z���!Go�z��4=T��4��4#��#���H3���Lƒj��Y:R���P��^x�">D���.��;� �9��P�1p�V҇����9ʬꤱԢC���A6��q�au��wo�Á�� ys��H ��[��[��5m���^��V' �^���/�w�d�Um�$U_���Y��5��_&y�� ��XψW^�pߖ�ɫ�V��Hi�O����fD� ���U5)x������]�����k�4*K0�NujEt]{�V�?���c#jHb�,�X��Ax��m��l�9L��%/W�����*��(�8������RF�o@H�?v�p�+ye���6#<Z�[�zPl1���E�$,�Z�� '�쟍��h��F�Ko��H��Ϝ��zb��^q��nTR�EǢ7�kh��b�>�$�Vz�mfa��T�l�-�#���0_�`��aq,�ɎT@� j�3����uϮ���+�n�$K�J���O���&yWV[�l^�g�~���bck[�9Fz�nJZ:}0}^���iCݭ�t"��Y��|T۳��GL���#����y!���{���W?Vָ�L�=���f�%>�h:����'h}!�x3��Z)S5�J�~�y�g�ת�R�&�7�2�����>�r�U��U� Փ#�W*��o2��}��;�'7gT,�HuYh��3mCy����5\*헠U���Mڕ�u�� �{l%)zfY��+�T'���������i��i�_ʮMq�њ�5 ѨYR�Q1���w!��7�$Mۈ�2���������:��%p+}]}a�jN���^��K][F�d�U��i��ǣsn|�tx���z�#e���~uM�T<J��;{h�}wͫylm*琵-,X�W���1cϢ6��2�"iie�]���j�lQ�X�%b !����ejg�$�_{�2�-a����Q u�Ҙ�[�xD%N�{��4���~Q�iQ�����{��D��w�{�(s��������VV�&��s�|�?��CB�M7)U $�D��KMsf�O"Dn#\�]�|9�%�ٮ���}���?$���줐 ��Ţ�`�e�&<+-Ic���.�V�7@0I9�}F�c��e����\��w?7�W#jM@o6�f6���:���0~�s����P��|d��k� � �# �(�H�)��:Ո�B�i�?0��c[�-vn�|�]��wL\M<���,�<I2x���*f0g}`��ٔ�d=�'�ʦE�H4����/abN�4�Z�Ѵ�~b�}ЌH]���[Q^;� �H�v�a۞( Ǐ8��b�N쟴��VV�ҷ�1K���ž�� �+}��`����뷀��Z�h�Ϯ��?�;��?���69j�D�T��4ʼn��Tj�����PvR=p�bq� !�(:w|�:��f��G6�V�y�g�7�6��]�,5B"���?���^P����)�T��]��Es���#0b#��Y��=踕���/��'���R��e�����֟���X��O ���f�[Q�5�]��M���)i���Cu
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE