Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
ebdec24370fa18d1f3a03b87474cfb12ef4ebe5d36fb8b09e147588e62c3a1b2.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ebdec24370fa18d1f3a03b87474cfb12ef4ebe5d36fb8b09e147588e62c3a1b2.exe
Resource
win10v2004-20240802-en
Target
35c9a52eb4a9c9d02cdcbaaae37c2ce8.zip
Size
4.6MB
MD5
bee50e97b1e469f71fe8ee517ed5d7c9
SHA1
4100d3c395192632cf324913235577234277e0f8
SHA256
2467bc6b53f4ad6587a5717e2f58c0e246f3236e308fe089425dced51e0d6f86
SHA512
ef23481e645b0cad41a440d9305410e017c4cc5091230c2833705a630625750461180d898f9e5a4a626ce57936922999c8b33771a3634dbc2f407aa7790a32ff
SSDEEP
98304:8UXRtE10Qir3a93PDVDvUiPNHmBRjcytvnXxqfv:Jte0Qir36tvxNmoyJXS
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
sv/1�?(�=yq[���9���P4��z���̒������^�A�R�$�� �eV"�m2 S��[zO���*0q��?�]w�/��s����|b��4-���<��<�&�D$��RfQt�6.R �ao���e�m�z$����L�YK�s_�{wȠ"sܼ����S��Q��<s���u�x����]��T4���)�3χ����Fފ�Zͣ��1�y ��G�#��x�����<��j^R�X��Ȯ[�L�����X�t����R��7���Hׁ�M��e1v�E���8��Ød�� ��[�i�5I��T�~��)�d���5�����Ԅ�����![��r��4�|uX{�ɽ<pʇ���Y)_��|A*dV�<&�6UJ��O�c�* ̓��R����o2��NߗT��('Z��6��X�8��R����|S���%�YRU��j�a�8��p�u��,���z�f���c�ü�H�� �f�+�zY_F\���!��3���@�E}�?����vV�jNV�(8����M�v���,�%�o���'���t���N�����`�@TE1�m�!��LZ�e����~@�����!^��#�k�` B���Mz\<,]>��|��Y�0�"o&��V�yLW{�@,�]�pjp���j�(A��`̷�����]Sm�]��d~�!x��1����,�0l7<s���/��/�N�OZ��;$��"�螇x� c��1��m�����rUΟ�䎏�M��[� ���Q˔>�Yf�>l�?�Ig��V�z�.���c�}N�]f���~I�C���'hRFy~S�e�q���t>�݂��3��r�~�Ң�z�y7_�VT r����^�4iD��lI��@���q��EsV5�*�'%N�U�?e�xܗ!A/���Q�m�P�;�$���%xr�@V`g��6-�O�yߔ�މ�"�a�Us���'I�������8�N˵ �����c3F���ƛ{��=o_x��3A����=:���v3�&a�ϡTO�ˢT o�0�2t+p �1��2};��T���w��x���,ͺ���U䂂2bs�3��@�m��g�����2ȗl~j ����v�<��n�_�S^p:W�M(ś��h���� ��o�~�/?P�}�r�z�]R��g�bc2S�I��쇨����1��ia|-�qhB����oܽR�U<ژh%\�CS�#eՌ�ʼn����^c������ S�7��]�2��9C^�@���tq$�,�4dh̚~����M�"^���=��W 9_}l�e��0�-��R� m�f쯡�{���;�ʎω�205�z�]��r������ T�W�`�X�x�͞���q�R�a�e�2.t� :PR#�� 6 �G�{�ߔm���鍮�4y@C#業��mr�+�)j ��}G����Ͽ+��h>!����u��&Ӂ;LT��k�Z�.�i.UJ�Ü��2áX���S`"y�4�� Z/BimY9OG���a�+`� @� ���F\�8UaV��Z�b>z�秅�m\�lE;�� ��,�3Mf}A,�-S�M}�� ��?����eG��q��]������C<����ƥ�QЄ=�Pv�+�C�ڟq� �$� ��7oa��_:潾;̰��l�V��U�CV�l}Rv�8V��ij} ���C*����?����IG�@� V���X�O;�Z��O�f��ʘ��:��4�:gr/�T[`���燤v烿��Ѓ��5���X5OK�0�*yB2~�!����Y�R��������yn�F���Շ*2�$['�UI�m�@����^Ł��]��j��hj5�#��̑�3�S��~ eB��0��ܳ����ߋ6�f�N���dier�5���=���+Z>�.գI�����R�:�4�d̏Dr�%��F���g�i�3�4�H�J4 F��(���'-�]�k�����*S3S��Ob���ڳ��aFDz�j�}���*n�l�1cǼ�hX��������D�.@�c�cR�P(-g�M(��l�}H���������``J�ŏ��qx�y�/�h�[}��N�T��Xl�U.��߶�����/B��堮]̻�n�^o��)�DLb������8(b�a�`�� ou�}��QS�xzRB�Y��y������˽@���$(�M���E�/����ka�"�;��A��q�<��������I�MJ]�M��R�P��J��o��d���w-�O�d�{�@X����;}���L��PO�3�5�8��-�P��Ԕ�{`6������p�v�3(>,7R]�EV�S���R�yh:��f�"!M�;�.�p����$�J;A�1'��e�:a\`e7N�HX���B' Aw �Mt�w:������gϏgH-n�:��b�������)�=��Gq��O�j�A;�!��>jD(���tF<SP�$�A�f��:�h ��p �^^3{ܑ�x`)h�)�ťy/�3��'�L" ]��e�u�IX��b��:]*)�����n����ȴjF�T����s�擛if0e��D�ɦ���}�e�51I�ԶB��m;}�-�eQ�{��c��o���c�z�7�Mp�5�:f�jn�:xi�t�t�������;�N��߮F�U�u[)%�sa�������!�3�v]�U�ʊ.��anF����#�m9c]�ž�m�h�T� �� r�돽E���Q,aGW��N��-m�굄��o�����M�K�DcWĥ����ܻ�FP�h�*u-�Z^�q;h�*���H�+gB��O�yk����,c�ow3'�N��t�C'r6/HШ�˗sw�:�N����������[T�ڻԜ�^h`s�a��b�L�&�·���1q���N^� �������/�����!.,!�����}�B�T�(��0��IN{yuт4I��a�8%��D�|��R�.ײ�0�VL�1o#Z�פ�D����\]����0�Ŝ�J���CvI��˔/�.Bx��Km)������ ﮆJ�.�_`]mЫ�i�d(�>z7��B,B@���9S6������%6�ʸhJ��b�럑���%�C��*q%{��D����|
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ