Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
3b2648c8b0e4650ea93b75afe1687890N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3b2648c8b0e4650ea93b75afe1687890N.exe
Resource
win10v2004-20240802-en
Target
3b2648c8b0e4650ea93b75afe1687890N.exe
Size
234KB
MD5
3b2648c8b0e4650ea93b75afe1687890
SHA1
8269e6daf82f247c6a2c56f0ea2a328eabd22d8d
SHA256
558cb146ee43c7739e22d258bef4300494d8a0dca928b48540f9fbe16e86a57a
SHA512
67457ab02016969b4808823df59e13e7789a61be64f0391414bc3f8044580f9af92d40e138fb854661929ec16ab6cbe3007f18e9f04a1a7439fd97a9a755f8dd
SSDEEP
6144:aPCzJjeXqFWlPD+wo9jJtFPTLLu0ZllQVf:8DlNy9nPTLxlQVf
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetVersionExA
GetVersion
GetStartupInfoA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxA
RegCloseKey
SysFreeString
Hn��J�iq_�Qo������|�,����:�)����� 9NЇ�#[L�����D���� 4e�)�������;���xO<�HWp�ƴ�q�<J9?JL��}K�JA�X/p�He��V�y�o�=5����l�t,_#��FC����:�zfʣ�h�R�(4�.�}���DLf��?���W��cP�����e=�VRn�v c� �܋�W#}��rs��~[*�>: �`�+�~m��XB������0��o 4�!y��_�%���� &?|������E�o��������V' ��}Nvyd�������㛼O�U\�T�,����ۜ�����x�yh:��=������5����[����/��|��%�K:�Ŋ��6U+���e"]dk+�f�&c��/oAӍ��K~C��Vڣ=��T�^"X��@����b2��}��8s|�˥D�� B�ҵC��C6j����� L�����&�T���!1�/6+C�Ȟ���-�XU���&��������ގ�Z�K�K;�aT�'<㥘-��|�M ���j�j��p�5��|J��� p;Φc����/��P�7��m�����Pȏ3^��@0b��9��ա�&0��L�J��A�M���(C�B�d�������T��#���,�,r<?�:��9v��,�Ba����L���h����S�Or�~����r�!3��1�A���"��O��.����w�VXG8����5ôR��-�.�i���f�K�n�/ "���G�(�w���R8��Bd$iZw�Bۅ����&��e'���S�܂G�1���ƵW�RW�jFw҉��\�v-|_��7-�<� �V@��-#��`}E�����qؓ`#)�#st���ҁ[� ���l���=.�2�TUF��d#y����݇��y M��z"d<�@ �MJ�� Y��&s�ᖵ�'����K��'z*s����*$���ޛ1���� ��Qȃ�|+�{ߓҾ1u����5OQܴ�IR��變j�6�s �|hR� �W��`YV��n)rpf*Y�e^��ܳ�R��|���g�r�f��G�������zzD���RKɒL�"�"ݭ�>(4�v�=5n2/��.��R�7���C��E����K[�Ur�_������'pD1�ֈ�Hn�i��¡�s ˊ���F6��5ݑ��LZ�ҟWvNЛ �~ƞ���|�YNU�McbGt����������/Gd>�',wB��1�'����wP�5t%D�3��q�e�W��V��dy�H��ߋa�ߛ4�����4%� �`fǤ�x2��ݘ��ul��~a����L�G��cJJ����p�բ��A^�� Է�)��o�X�<<�j�ȉp��/����F�! wpz 0oI탆�����k��H�#��W �zVȢ�%�0"��_x��� �dCM�3�$�a�p3)��!C��|����X�S9�ym i |qf�n�����B��an���#?z2���&���@�:�Tٔ�j2��!����*�6�Z���Q������\�qUk0�ޱO$��T��s��ll�z>>�-?(� ���_���H����> �5�vi���o˄e�-��6r���O@n��� ep̚��&;jR��7Rf|df��������ז`�V�@�k;FG���(�`I�w�K��< ����+�F������͜:�����1�5n��Qs�@���oDԛ\�Ax�ῒ��MS�� sDaY"�Ó봚�]�S�����*��G�H�m�,�������cأ�J��U�X�h�tz���I#5qnCn� ��ʇ������ڋw�Z�B�k�����������W����ۃ��\$ޱ��2�7����|� �^��]�|s��"��E���G�t��2A$�o���4Q��� ��"���gH�v�H~eLl�ƅ�D�u%�r�"�:�����@�������d���6�~F���^��D��Y6��s�]��[��'j�j���0���������=�8��:\ᯥ~H7Z���s-_���+�I�}h���B���<¬�{0Ճ�����; ��fǪ�e��O�����°�!���'�]�F�K�Fm�/s;ƺȭ}n�'�q��92�k�XB�\��c����;�I�L����J�^� �qI��s���Ϫ�CN�9f����]���[���T��[��E�"�Hp |��BO�l��hb�}�x����h�=��M��_�#���x[�l%����Vwah���H��\�XA���gP|v]H�5�;l��tB#��J'���.��C~�/� �� �OM�1�*���Oτ�8T�:������#��!�A����B����� �m��:X]�j���gdO�ր��ήwz��(�(|���t(w�����4���m�#[]�:�a�]� 8_]�/<��0O�/0k���h螤̯'��]��bk����`��'��W|H��SME�����j���b��+���M�d�y`�-ۆ����|h�糅x. ��3S��_�;��* G\9�Eo˒iVi��k� ~�o����?2�XyR�-;�eki��f=�UpI�]x3y� ��"�X�S���ز�@O�o��oџ�f�;��X6���x�'a��n5 �����:�r G��lmOdYqI�V�ѵDC�-�JH8�"�9)��P�Oz��'��:��bL6�Y���Y����5X��.0��d �Φ\ߤ��B��~,(&ۇ����|��7��K�ul!�U`�h~;T#ɋ쀽dᣜ��|��Rۈ)�ɡr��k���������}�ؾJc�_o��� }({K�u[�'����Y��)]P�� �����N�}R��E�3�f�o �������1�bW��ϊq+W���`���e���X���R�C��?b2t���1y�.[n�݁����s �K��[F��Ij����������ݞ��3�u�����rm ۄ2�!v<l\�`EL]$��#U�q6M�N��ߗ��z�ٔ�$*϶o�L[�*+�&�)с�{KKڋP���a�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ