Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
a7dbbad8a1cd038e5ab5b3c6b1b312774d808e4b0a2254e8039036972ac8881a.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a7dbbad8a1cd038e5ab5b3c6b1b312774d808e4b0a2254e8039036972ac8881a.exe
Resource
win10v2004-20240802-en
Target
30307b319b2451b6bf61d3e6b232f1da.bin
Size
1.4MB
MD5
f8de680312957b59f6f450db9011d2a0
SHA1
aa4b995b65d5fd295fc7f198bb346150a240201b
SHA256
1b4f745338bae5a4824df6513251f644d1c290afefeb8f3b0cef0fb95f1d2112
SHA512
97560729aca07280d5ee6fc72319aaeeeec7109566925640c2e891fa7044abef86895c1f1f5d9e660200c84875f6ec3fd8f0f5b5d84fa965e54c28737909b483
SSDEEP
24576:St35xmyyTPb/OcVAM2PnlRTN0xK1VfTt8xNdo6C+wqL5PNL11XfEbVuqkaZN:St35xmyyf/4r/DTN081VfTMo6PtPNUVL
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
__vbaFileOpen
TransparentBlt
BeginPath
SetupDiEnumDeviceInfo
CM_Get_Parent
MessageBoxA
GetVersionExA
GetVersion
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetLengthSid
SysAllocStringLen
o��-���e����|��O,����r:������}��������� 9�)�%�Ʀ>�ʒ��b�@�@y�oiM���I b{5x^P�zq�1��t�i<�p��p�<�HQD�D���黈z����y2E��R��#6���5[�y�p�܂�4���6p�>��}��R.-��k "��,���&5Z�:&����T�<e�v��sD̖0Q�Q�O�_JU�����ۨWҍ�G��q����)� �n��������Aλxxi�K�^{�q�`j�fkS�y����+$��Ig/�����Ǿtxx�)��N�����-2�5ܖI�lMB�E��`Ph����=j�>y���eNZ�R�)�� G��i�l��l�X�^����;���f�j'0��l0�����V>�����ɡ�>$�5n��x �db���8ot� �E���!���A��\��C�������(�2�[�8O�jSR6�OF�U�5x������C]�l7+���������Ѱ�k�F.8w����PO����ˇ�<q�� l���ʮ��ޢ������Qw#+�����Ų\��|���~ixX��4Ij/��XY.`�4�7���3��������!��K�թ{���Ec5kN�y�Şb =v���v��g��dy�R�w��1��<E^hc����啲���<��Xb�Qs��m{RI��^�d��)�j>�������`��Ռ���+R�)� ,6M�DE1��z�d�X�&\]6��T~_rb���?S�L�0N�E�E�����r�K�<��٣�������m�"�%{Dx�撙w�o����$�sa{X�po���!i�~��Df�O-=�Zp�)Fz�� `�ɑ~�֟�������M!����I��������Hq,L�w �11�̎�vؓ���e��j�џC�":��bF4(]��;�eF��$_'TG`% c>��o �o8R��Laˆ���ҝ!�'�w2>�_P���g������Q!�p 3�Y%??@N@�5_�aٝ��Te<�6�F�c��I&/�W����P2�zw���k8X��o �B�]���Rg�.�h�ąC���bih�;U���/� &t�М�F�C��3�����ޯT�����8�C4��`i�cjU��������O�&��(L�� �O���s����A_��-�}P��m��H���e�7V��-r�9r!ɀ*|��Ϲ��ED�F����}����"������S)����0<M��#J:Ќ��J'�I�]����n�9��t�m����l�#w�X���$��[̳���0�._lC�J�����7�#SdE��B�JL|�e�3�#� ʞ+[Z�\f��\���s� ̛�����QDd�iʓ�W�9�T[� $ �YE`��� ���E� �0�.k&'o�y�����Հ�ϳ��J���;v'a��6M��5]�߷g"5�Y���R�ZJ��~%�ه �ޯ�-E����e(��(���i�������wQ����1�VŲhy��m��ӽʳ���̗Iv�}���V�m%g Kg�U}:���嚃��D��l�~~i1e�-�ϟ����u{1D{4��I�f���A��o�1���e$������\�X�������lo>Au�I� �p����ՊP{H����z*��D,]D�o.��ɒC��7���^�������JRFBu����ד�U�V]O�u�m��O]T�ߘ��5�+n᧓栞��F��M8m짲&��HD��g|�g��F!����X8@�����Drg�m�Q�7K0$��2���MV�O� @A�K�*A��Rj�� ��g����ߊQo[��*�������wU�l�;��)��q*�/Ey�R�(S��G�]��nZ�l=u�c��DS��(M��h���Y��E�H\��j�fi8�&� �).��E�ǡ���}�Zi��c�ֿ�u��! ������4�y�a�~�a�;����Pb�����W���9�#��fy= WI�^��~0����SVu���Hm���-�\�la�7@���bq��J>I<��2h�_��S��4�������~�ғ���/�J6}pl ����?�:�������[�K1�p4JL�.1r`�W�g���S+�{I<�ʮ���Ma+�E��,+ǫ�US��}:�id��q���"<?�V�����;s$vM ��zR�b6�bѼ��x_o.3`YJ��um�8|��t1C�w��F�U9:��B�x��TY/wpݴ��k)c�\�"�wt|yVCI����!n52L�<� +�,�U������������4��gP�=����H�W��5�I�5%Ԭs�h!�%����~;����b�xɎ�,1��ۊ��E�Q�T=B��|WD<x\H����eh�qˈ+�˪�AC��e�u�ɰf3�?6�Y>rێ���1��2)��-c�fA���}!��C)�c^�d0��?�J"E���(����N�`B���9��o����흖���g��.���� ��'��%��x�z�5����0�����?���f+��6�}�cV�B�d>��o�˳"?&�u�>e9���E `\�b��7|(J;��*�(q��B�Q�����:���NG���y�bg7�K�i����wD�1R��H]g.};��ch�j�9D� ;B��.�.]�c��ș�hY"����2�� ��ϊ�X�4�x�q6�D �f�bo[1�t��5�VI�%��M����9�sN�R)�Զ{�s��y�G8���tR@8��5���:��y�0eC�k�xz�@5�Bfw��o�d;��� 5�Q���b�[j���r1���{oܲ�b\'C#�����K�d�t a�������Δ��}<\ ���R��l08�T7����!��t�¿�"@��t35�V�?P�� �!O ���7�7�v�5�����},El�������@���1���ʹӐ-����c9�����1�Ќ�x�c�_�텾��;�Ǘ�h|�\���te�w��� �G�eW �%�ƛ��õ����̰V���1&Ӹ����� �X����"W��S�1J� ��O1��n|���x��Gp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ