Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
3cae6f585611f6683a050d2526931318.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
3cae6f585611f6683a050d2526931318.exe
Resource
win10v2004-20240426-en
Target
3cae6f585611f6683a050d2526931318.bin
Size
1.5MB
MD5
3cae6f585611f6683a050d2526931318
SHA1
0b428bc6ceb93856a8fb2780097932fc46070fee
SHA256
04f811e6c0c789ae99752303824ec65a73ab60cf6b0c3055e9a03f49d2ffd33f
SHA512
e499bd968218a9be256709e8d527de56df9ccd1f43859928d8b9ea9c45a0e7c05326add097cbe67453ac08ba0dd1301f5771eb512bdb2423427916525bfcbbd7
SSDEEP
24576:/a7HUMyQ2scEXhA4G1zaeoeqQN/VEfqZET8CSdq8DGZgiqXPZPaN158/vuw60J4H:4yrscV1zaeoCN/VECZNC+nXPZGgnuF0m
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CompareFileTime
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetWindowLongW
CoInitialize
VariantClear
�ΔT��1A�$�'VĈ��\0�FW�oIr]���Jq;���^=Q1�$(Gr���1�uUJ�!� 0�a��c=ݹ���|��L��s�����G����Ő2Q���6����0���N9�e�e�Ҋ}#{-�T:H�p�����rՋ+���5_:�����9e����=t��n�<��`���^#���!$�b�8��cV{������ >���:�>2� "�P�^]���5��*����:�bN� �֢Iͦ�Zf%���]L��Riq 3��WܩX?�-s��C��Es��������Mu;�Lȫ�a6+Jg*,.^(%�F�����������_PGi �2�tnV`�c �� ���{�2��A%gx�rlgP�'�P �C{X|�e)��0�c� ��l���A�h�>)�m;�/�c����`�Z��<���6i������\�hʑE�"�Q~��J"��n�'\�����GS6A5�� YΡ}��VIL�O�W���]�S�7�D�rE�<�款D�䚖Hc�ASL�`Ì>6zԵ���d>6�W:m���1�h����b㱁w����s�T��ܦ��c�]�%CP��M�[�q`l���p�CKpT� ����������J%���,p?���'�?ڠ��lƏI�H-���]���<68<���c6�v%�.�f��ם ��䴚���s��%v�x?��G�1���|�]R�<��j~i ��)@Z����M'�g6'H9ac�J{�D>�P�5vz�MPV�W���G� <|�7��"�Ʈ�!��ѸfaP[m� ���� ��M����O+�}>Tg�߁���sHz�Ec�&m$��e��p.�Yj�����#:�;{���������@�$�4�q8�M��� ��[�1����)���;�9���~8�q��D�P^ˮ��ߵ�E�]R���6����}jG)�N '��"[����m5��F)R�sY��b�����k֪�.DL�M�7�'{T�[+Tv��?'L�U�}/I6���8��!�B�_�{z��k��w�J㺋0���t�hD�S�w���}�����J��`�l�n���,ˀ̏�%�M.������ ���+�FQ���ly��=}fؙ�����q͊f�g��;�/�������Ɔ���3U$f3u��V��7]5�|tdҎMՄY��q��5�ۋʦH���~�9��e�93��z�*^�y�l��Fg�@�ũ���mh��/8�$�>kB��:o"�Zm~��X7�����×�w�=Y�ԟ}�{ɶC�`R������Oȥ_�*��,S�H�_|`FY�|3٘aǗ"x2���տ'�f���%FͿl.���^���(�p����\x߹���o�����[7�,�r)�69�g��!\yi)c�¼�j���9�\4C=t��9������́|҄������Y뗣�&B����a^��91�������fPg���n�X�ٜE0/q-�Q�����W�\Ez�����r4M�@;��������@�Lt��W9�1-H W��?����AƲ#:�p{)|L5���WYL�m �t���}�vGP(��w'��"���;6l�<N�\ �x|�� �6֛�~b;��{���W/�d<u�F�����&�B(�lB7�pk��糎��}q&�ʠ^U*��n���*s�� ��K��"��eud�VuNm��y<8 <P��ݛ����Id�ʜ�!R ��w`�>�g�CnA ɇ��}$�ֈ��]���3(&�7R��~��y$g�r��Ђ����S�F���6턌{��W,�4������e%�T���r�����\RS!�ğp��Y/k���]0P����g�����n�G�ӥ��f,kUs��oCh}���m�w7�=�7��oD��^l��"�H�8MRe/)���[i��e���05�� ���Vp+�_G6�UPnx�L��<C{�'�t�P�3�$LAuZ�r��_3��|kF��~qq�S<�� �>|�8@��I�`���B�����#V�]Y�Q>�r���D���Y�����">��I�p\�O'��}��c(�$��0��y���e�(�Ԇ&z#2i�Q9h�h�y(R�in�vՌhF�i ��h��u�T*�nn$�� ��ElBe������� r]��~6�3{��ܴ�9?*\�q`x2ϡ��e� �o)�c��P�P"bsMN��'��ʡ)�o�]�4�����;�@��Fq� o�d��aR�%�'�=��]��C��>���#Kf�)��F��2�@�!r{�/q)r0K'o0;�bG���>��$�H*������ޅ߈@����L�fF�<W�I�I���C_}1@,�:�k�j�xс)�5��@�*O3i��z n���ua��/��gL}X�(mO�F���S;�@�?�-!>6��<oI:n�6��x"��ǣ���P�T�����K�� ���ɡ�/D73K��A����w�qYz��B���S]3��`[��F�7Q+�Oqn1F�� )�eҟl�a[1�[Lq��K ��$�W��:�Ȃ<��ZNK1��v���m ��2���Z}֒�2זB�ܱQ }��(I'ܸ�]�U4�5���9�\�:�R���Ƌ˓_�\�`:���kg��7�̒�BlΤ�L��k����� D�7N��}�,Uc+{S�����'����4s���_˰���,=}��,�-�q7�?�p�/�o2�yB&6��Ld�D�Z3 ��$m��|"#���Pl�z���ퟷ8�u�wx�oz�����q��,�^��π>+,]�f-[�Y��х� ��ER��ȗy���ƨ�0 n *�TWV�>&�ۀ@f��X6�CU^|�7�[f����b4��#�쾠>I>n�&��ٚ{W�&�<e��r���wVc5��j[�s�JgdwF1��rx�H,T��n�;�D)8��<xPUL]�7��L,ۨ��� �t%b&,l\�|���4�Q�a��V����(LB�C�����P���x��j\��w�_���禟�=��k���ӣ(G�LJ@\"�J�6��O5����( �uD��le
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ