Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
ef7df470ae3d84b4a3e4145f6035eb53443caa7ac125c434b6a3c895f464aebd.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
ef7df470ae3d84b4a3e4145f6035eb53443caa7ac125c434b6a3c895f464aebd.exe
Resource
win10v2004-20240802-en
Target
84a56742e44bbf41777f601698035eed.bin
Size
3.3MB
MD5
38a02cbe782ecd2a6472b36dad329676
SHA1
ff20949d838ee5e0a2e204cf6479fd1a21a44b86
SHA256
e3c19ff816c78b2652b8ffac8643ad9aa731fcf14c3852ebda0e67f7c9c9be52
SHA512
9a0b6d966563c073c905183172071de14bdcd3c7f251165710ed3c242558e3faa43143330aff91f652a81aab097f47b1af56bce981b45f903ade607ed046c781
SSDEEP
49152:TcOEltX8fcgPLuqtghI3RuqYVwW4iEkXPkOsl2tN+Cyyql3Tco2Ex2yiOVBJ+:Q/fXsPPP3RuBwtEPRsczahcoayLVBJ+
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
��."�j��8����,���y����L3�#P������<ɏ"�F=�B�e�6���t,�������x[o!A`�<�Ž�2\����k��'O?�g;+�t����ɂ��.賃�=8�<ĩ��Z��� �7���;%�����$���Y3㏋E�iÐ�����J��CZ��^x������Q!*0z�F�*��P�w�ҳ��I�.|�a`���L���#Zg�4�j-f����{4ķy����s!��ϵ�-g��4=�jL���|��FR��,;k-�Q�<�,��@MVa����D�K!Y�?������}`�-��W�D��ŠPy�|�r�A*Z��N�=̩��0 �I_eEyNW�l��%������f�c���� )�����ו5�;�m�w�6h0��!�(}U��֭�v�ʋ ��[A,�|C��rV?0���$u�Wz�!��s�8������:�!G�� U��K*��l]�1��r���w�$'������mx��;��'���F���f0��c����p���S��]R6r���1 �̶xmdM7�þPL�|V�Er%��1�65���{�o��L.�z*�����oq��ȅ�g�Oq� a��;Ԝ���e��h�74�2�E�,��_Q���P����H!� R��r3F���9K� ���P3��[��mY��C���g6� �]!�|�Wέ8N�g��a7o� ���eW[�I���?�`ٱ0Z�oE3�nqVF�),Q�a�IJYхBe�lڒ:���-Ό�8�����l����%�^��7.��F� _j�%�"��&� R^B�B��8$��k�F�8f��$5l��K��d$��9a��F��0��p<7���rCu�� ��u�{X�6��4Μ�ԟ�Bڝ=��b"��r�#��BUób����uqW���Y���"�\�� }:�25��%�DŽ4 �;�*u��54܌�� Y�w�h��R����W�E��!�.�pFՔ=E%<�M�G����>�o��Df�|�g��`�&��<� U!�FJC���S8���ʉ5i�b��ꢛ��#Z�B��VH�'������b֜6��(�\q�(��Xs[�����[�gLH.�����3nB "%�o��#��y���_�e��E��V/>��R�-YU���Bj�"�H& ��})���/n!N��.|B��2�:{�9TP��m��<������*g�!b����> �)����_�9�����Vv 4M�<�My���+m/d)��,�7mDDkO0E��?�ݫ�}ύ��� ܸ'�|Wަ��O�f3fqc n:��cF��ы��㛁ek� ��b��K�ڪ���#Z�ts��7ಓ"���f��>��1��3�C�'wC���_9��W:�2�rfN�A��Ĝ�S��@f#!VY?rXuU�^�\�%�� P� ��� K��u8���O���!�(�pM��\�!kfm)���ڵ'C-���9�ύ�b��Ӿ -?Ӿ��,�`� ��,s�]�us;�z�̅�GO�xO[o��_&�H�,�^<��������_9����nG� � ���;�Y���c]��=1Y�w�eaa��7Ag/OoKT�[��&��~�K0�&�'6�R����T��������j$��;�33=�)��D�t%t���q#�s`9���nŨ�f��JU[��� ��q;\��۪w^q�Q3FG%�`w���+�3��h,�An� �� .��%n�F���f��Blo�d��n(촙��w�s�QRh X �B�`����aBq��h����?��K-��]��ft��f�;@';��6ܻw�оOu�}�e-�� ɱ��3���h�;�o/�5���Iv��I��[9����X�'z��7�"�h[� ���������%���1��KX���p̥%�"� P� $�9�r*d�����~Q�J�u�N��p�u+���@�%'�"�M��@��SM ��l`�n���/����㴖-졫]��X��G���'{7�2h�ޤ{���Y�^?�p )ė�?�]�U��j�CJ�h&�+��ɍ�^6�^����ن_ȏ��NgC�0���V�)k�-x҃n��$|�@xaͨ��b6l>�i�NT��1�mL�W/{�sS�e��1�JzȢ���H�A �8�5<��O�G�-��`!ܰ?�{���Ч�W�c�t;��((�y��H��_�Wu/�}��Eukm�����u��z9vs���qk?�"����ꉢ�ơ^�R��u �������Q�ܬyipɒ����ia�>3ձ��4l��8�x���y�����B6X�=�Kt����B�m�"�E��h�G_:46<�yeB���F�%���߰����Iֱ����P2��qW�"��������۰�߰��' �.�<}8��� ��͜�9Q��0��f�Ld�#�H_�g�[�� $P�\�I>Q�h��$0#3��$kib�ca`��Ӷ�9�ߘ���z0w�)�N���r�B�e����'-j��n&lS����0*�����@���1M���P@�هPS�-����WX\��k��$øb����y�W%f �=��M 9���C\-�<�"� �$Y;�][ӂcs(�;4���K�/n���3�Ma�����8�o��7�Z�j��`>�S�j���!4��0r"}���f<i'&/T��{sm�r���i{��/A�&il!Dw�i����=���S?�� v��C����g���W��sQ̽�^�^�6��ZHٌFM��f� �fe�Zm¼B�+%��D�c#���ۜx��0۱��9p+r�Y�N}:���{�%�UZWG���\=0:�Ų��h!A�e���9�0�'O���"m{46ՙan�>~���pQ7(�xQm�W���C ���y��p ��F���l�G�(1I&�h���|���%P�}0�,S��ϥ�J*2J�S�0�|n��'��D��{��:�������f�f=�%}v1KX?����� 1x�[0T�[�.qM�Bs���`��VZJ���"&�#�&;(v�a�-&+��&��Y�x��E�,�n��&�&+�\4����r+���:����m�Z�fI��+�މ ���8<UZ�����2G��A��Z~�"��bG4<��O�$j�����ͦx$�LhZ�9=F�`[�1G6���0j��h�i8b1���X�pč�N�Oyؾ(m�u�_�;ܟ��NLp�i(>Dp��V$Й n]�L��P���]#'�^ۿ��λ,�ن��e�P��4R��=��f[���?n��D/Z��c4O�0<��A�L �B� ����X+�?�8�V�ğAa�.�<i�8���q��ש̨w�� �P���yxn�s'��}#��u��Q��]#\}<��z�DA��Nx��;�����_f۲,�6�ݔ~K�{]�]f��U�K�z�3��L�;W�<�')�5��(�@�^���9[�t�L�=��r��#��d�j�B)xFl���O#�o8�^�D�H��������_�g$8�#�ULn�D�D��3��Ds겜{���X���T������v<���w�γ@�F���w�p]k�蹉$+�so�|�p�4�3"����,��晧W��>����"8�G��+8D���q��G�1�{ը�5�1�@d�A:b�s�W7��;��҂�}rgBW�oaҎ���eY4�H��ى�E�I�\�#9�����j�� �
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE