Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
bot_start.exe
Resource
win7-20240221-en
Target
bot_start.exe
Size
2.5MB
MD5
62dec8c537e3aa76b294ab744b20d245
SHA1
1f4ec4852cd84d32a0d26ba0e163a373811eaebd
SHA256
cc97b59379bc6eafe5c5c9dc66f16d4795270e01dce613652359bc852ba0665a
SHA512
f47bbf3260f0124ec947b3a37ce316700481a8c4d5d984c9012df85673eb0d2c8777396e5a957cfc900ed509045e50d196558e931a84df146115e950abd8f6a7
SSDEEP
49152:SNkG6I1nPFf56dv26ot3VwBtF+kze3xqH1Hm4I6qxOli96Jyn5tzEde3Yx:S/fP9se6ot3VwBtF+kzeQHMdLcK6EtzY
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
NJ�C�p�]�GG�,~��f(�U?�p\+t��u�#' V8�U&�C%��=��Ă�I��fh�n�y��b�L*�$���mA�"Bo_����q4$�Bt��@͚��9h�mj��o��I�~8�sV��֗��������Jp��m�a�����!_��C��wPpx[�ՉhўcG����V0�M�וb��}�B4^����B�X���1NC�"sl���������dkZ>S�EW;��ӍJ��������"��*�|��;���A�*syI}�}qS�\|� JmDZPN]xΥ#w��w�:�T�ȣ�@�@�М�2S ��v������� B���JU"�57Z�����ZY��gՃ3'i��nWf�9�KC��l����?���4��>K���n_,~3gFG�l��@;�G���/�C��P�:<6|�O�+z��7zz����pߘ��Wh�����R5���Ĵi��a��]X����L}n��H�8�)��<�x6H��P�����mč�Wzu&����K�}��ѥ`0b� %�9K��p]RE�v5{��'G�Ɪ��җ�ZS�����X�"�IӤ|�q.?���W�� D��P��M�/��ε�T����ao�?.=�j�۴�p�~�Y��hZ����O��=+���\���A�� M~W[�sz6�6��G�|Ⱥv�oF�3~���H���^�]�/���� ��Q���4�<-�3�D>���F����9��J�AyuY?V>����[������8�]c^~q��]kh8>;>�������}*M�ޱhc���(2)Y3��2q^�u����M�����*D$gj9�T��X76c�Q=�e���%uo���h�����]C�)O�������K,����N�)��B�:�H��v87^� ���p��/��b��/pT D��tߢ��V���8s�qoI��7�?Ůփ��X�w�73�V8�1�ǥ�+ҁ��.N��i�%��Y�b��w�g�E���W�g��ʊ��=��7:V��Ҽ��Yk�7[�PI���vǻ$�;N�̭��엔\P���Gc�A��E���CIŗiE3���`��c�x��rXƅq@ՈFl�q��v�[`z�ʠu�+HxWJ�u�K㨝v���ϋ� ���/�����A��XN����1�$yJ� ��:8�A�+Z���ԫ�rbP�� [S�����"�#̀���ޗ��ml�s�+�6�]�j�ߚĖ�˴�ݑ[�˺�����QR�O+�X{tm��$�`��"�a���;X��ZM��?"��Po����%�J����%1��l�����f��z�|��8gVПJ��r�1#�jy�nV�C�*'���v �����ڟԔb9.!����pc/�{FՙV"m:�s��u����x�'�w�/P���L��thh�}��;`?o���x��ƽj�Ӎ�s�JK������W̟��.v�2F�*@���g�L��k��`.����J��*+�z�Y�����<�����X�ߐ��c{t� �ߤ�egL��b�C��9�."j�8Xδ$��0���{�O�����v纊�2�{��K3���Dz�Y�|%�j�2p��.%��k������+(�٣/�>shq$�ha+P!�5k� \����SX}>[��l�������јT$#BT0Q� 7�ݢƢ��ө�W�9Sl�������+��{u ����=��(e��c{�Z�0�1��oO�3�ܢB �S���uwdY�Nʔ���,���d��$P�)���֞�^s���nY���S98�Y���1�e�#'� �����ya�T�i�g�Z�f��7�.ǿt����?�i����>�� ��d��y��&�o'�x�a�L�yم�Ne��橯r7�,�rV��1���lp�Q��[H?�P�r���e4Mn*����B!�[� ș�N�:�f@�P��ޠ�N�7���W��^I��f<��P'N�_��~q�eA6=S)~�-�^�A]�r|lU�7/6P�V8ov��D�ӭUK�`��ៜ����X�l^��� cV�Tk��UClQcLj2��Q� �Z#vGȳ�X��12/0�^ܒi�"8i�\D�OR�k PZ�[��I+�}�<3w�V�dv�/V����9L�,6�j�+ՠ�{U����[e����V;�q�U�g����fk���D� ��$*��|�Q�����Z���i '=�(I�69��E�Z)�t7(�n�B �h�-���Pۚ��Z�g�)7�����[����Ja��pR�s���Nƫ��o�F4�v����=*H)�C�_C�O�O:�� m���Y&*1����2+J Q�B /�*T��zA�Z�ZHM¤6'ljM�9�\K�W?c�؎A""�V�����\;5����vՁ���$�@WB��i�f.�+\3W�2�6�I�8�ܙ��C�~��,]pi~o1�7�l8��/Y�b��NƤ�k�^��j.���q�J��6����O���L?��c��ݢ�k�xq:*j%�1Glg~�J�y7�S�V����]*"@��m�|ܳ��њ�0�|NC��j>�?������ݠ�jl���?z���Pc��ķ�:�ֿ�!�!>"_�=�@[�Vʋ����0~��V���jh؊�gt��j:�qT�Kr��˺/X���9�n��:h:�Q�\�����:�qU�C�Q1�ds|��w�j�/udۑ�i�b����g��oa'�1�H�&.���o��c������,b�3g�b�$����X���N�37�AY�+�i<�N$����ڏz+��F�}����b�٫���ԯI�Zy�.ݡ)rJ�+~Ak�pP��o�Z�� kH{~�&g�t� ����.G ��>9}]qˍ'H��d��ox����o� ��Ij�ݬ�� ���/��JQ� @i���@;������T�5��d b���ʥP�2.���S8Y &�31��@mF�tɖ�2�wyu�=Ň�M�����[��J�\w��q�j\��T.-h�n0ye@��X�E�����7A\��+,�;�&�(rb�j%�,3����)��u@�h���g�6 ̎b�5Մy���6��PP���������14�q@D���O�Q�� j��2�5[Vq������_DC1p}��16(N�&�K�Ei��2���ę���m�����_ WK�ZZ����em�;�70��j�gFuJ��60V8)>C9�d0�u��
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE