Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
325b8262de5f33bc18633fcccafe2ef0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
325b8262de5f33bc18633fcccafe2ef0N.exe
Resource
win10v2004-20240802-en
Target
325b8262de5f33bc18633fcccafe2ef0N.exe
Size
238KB
MD5
325b8262de5f33bc18633fcccafe2ef0
SHA1
882dc650d02cb3ebe278822f7c37b06aadcef132
SHA256
17986d9076a6a32cf0c2c670a2cf5074ba25ac20d351506123916e6591aceb75
SHA512
d3b8113b4f730e9f06fb5d246bd183a44295eb5be56624a69f56e72171077ea66720b7d47abb29db0b61838b43f5d171f9fe86a9828e20398dc1874a8c89ee66
SSDEEP
6144:tDIu0AwGth8oLJwX0OtENBT63fAQoYCxRE:tDpSGtTFwkOt0VQoYCs
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetVersionExA
GetVersion
GetModuleHandleA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxA
RegCloseKey
SysFreeString
s���8 b#s�BXɄu@�D�j��)��ʁp��5Z�H���Ł9d�n����p���9Ԇ�Ͽ�����A�*6���ŊJ�k��e�+o��)�r*��Tp����u��:�5�:%�Z�d����+F�#͟}ן<j�{Ѷ>�P+Y:F�P�!#�"%��PS۩:�<�˺N\U��S0��ߖ���ց����T�X%p�ɥ���2P瘻���"�����Q�;)[��[/�ӥF�`�$E��'��J#�oi��Lz`K1IF���Tm�Vy!珻�l�o\�Yܸ���� UƇA��w͜��1��@Lᖖ7��?�y%��g#�+�&g-�N+����b�� �a1��b������1�_o}�z�����#W�p����Q����a�=�i�/G�xӍ�*qDO*������wĂ�Y�] ���=s�w�����ՄSJ(��[����8���D���k3T��f�'��k8�G�%_���.�\���AO)� �<�k�\�#Va��f�f���������L0���� �w|���������^��*�p��,���+��s�S��?��pȕ��ӈ��AIG����9J^a�=�^֠�ki@�����w��l�Pāե���S}��fK���\��Y:]� � �(�nFkT��ZF�g��*F�b�<�H�C�u����n��i��uI���o{R��o�|�k|sja�z�N��3�"X"ji����CK��|�7���dʵ? Ɇa�;�� �i�f�Tm$)x���D�3B��Ȫو1#r?�J��c�� ���ű���aL,��'ǯ �<�B���\���+�$H�Ș7�v�. 7��<�,�]�-���9��bCLDIB1��8�� 1�� ���;ȂlX4��=�[ǰ�TtѬ2�7N`�[A�L�]����@��������� ��@��ݒ�M����w�;9��p�n@0�9i�3E�D Me��H������h�A�>s�U�z{��� /h/sҞ&HW�j}�V�Mb�gYǠo�4w[��h�V�)P3o�drk�Ϳ���N��ˆJ�sLIj������_9��Y~�TҼc���$�Z~����X$^=�f̛�ی�-m��͂�C9C�!5Xl�[�[����s��[.;��]Ji�_���yy�'�N��^Ð]۩ @����=�%B��Wi²%{�1J"P��d=������ �+��|�r�M�P,k�S��GO��-����"K��$04�i���'�A�wjyˇ�����B����+�����i��8@w�RD�+��'��>�Q�{F.�?����D �:�)�t*a��&U��B��MJ\�jBb*��F0��bUB�YͶ��㒿��CM Ox>�+�S�F#��e:w�&��x.�ҹ��"|L����gn�-�8�2��,�$F���՛**��(�]D/�.Ƨ��c�~����x|�L��%�}M�(ڞ�t�A/߈̓�\,��2+�����7]���qO���RO?��uF�jA�P�xK"fQ�E���lCAe����-�*����1֫����A��qT��+�_=I�e��>������ޏ$���h��5�k�2F>Glڥk4�^�a��&9��d pX2Χ37Օ!Z�9ξ����?-�{�B?�G�~��SR��߿Y~��y�igIo���*V��/@x0ʾȲT���A쳨]U�LG K^��(~�����S�<G���uLt(�m(O:���_�^�x�Z��0O��O����R�H����(5�/ ~z��d�o��L�A��r�0#>�sZ_�)Ai=�#�^:i������1q�1�h�5����l *�sR�fR�������l�|��|~��u�8K1T���O�5S]�V������#BE]P;���U%���{��Ȏ�����./��(���E���d��:P���M�]�2�����l7��=��v������ߠ����'˗���N��I���^g�F���:sv+Y���۹�_�;�'`�:s�6��,_��͍�� �P�&��p�9��w���<X��؛��69+����G����TR���iO� ��w;�c���4�G���j�X��@��;fd�L��$��3~��a�� �7�⨰+�wq�L2�)��ѵ�� ���1"T�ug�����ZW"�,�����4ƹ�rm ����W����4�x����d�� �����������&�B��4QMC�x�#o�p}.T+�6>[`���Ê"�9������]=�E�6�����t��QZ�P1��� ��'%�Ш�{����dq�;�鰮����k��"s@Ni��,�=:{ת���VSTz{f�����d�wɒV��������y,�����1��$�h�����)fjT�� �y�E��L�*��94ڀ�0�Q����5��sSy���ec@�Q��a∊/�-�;�~ƚ�Co��� ��&�i�������%1�>,C�q�f!�32h�tm�zHRzM�6K��Ao0���88x�D�?ɉ!���']h� � �j�Ǫ��ñ���W��%rH���ST���1�*?���+�@wv� "O�x��)�'{[��c���9ϒd3�| ��d^�daŻM� 3���%���&@�@��x�v��� ��$����Ϥ�_��j*jt֯8|D��s�r�n�oF�2�R�XҮ �\��m�P�f�Z���B^��>�V��^8������{R߾:�X���z,�¶�����3�z�����(���Hዻ#Gͪ��c��"qO:���j����s� L5�,s�8e|�1S˷����w�3����2�Y�e>6h�L�b�?L�tT'�H kY�1�����,� ��q�j�10�Q��������N C�Ck��h�|���������qi���u�3�')�?���i���^)�t��{�M�����Ʉ��523�4�K�v �;{�r�c���8e{�c9���:]6�$��0�M��1��p�[-��X���.~�-���yp$�9R�] �`�&�N��Qj����� ������]��`�V�A��1'�nK���o��g��W��C�_k�Q�1��8 W
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ