Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
73f430697f8bf9edd5a3c385e3e18f0653a8b558d4665e37ab1dcbf31565d8bc.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
73f430697f8bf9edd5a3c385e3e18f0653a8b558d4665e37ab1dcbf31565d8bc.exe
Resource
win10v2004-20240802-en
Target
fc910e595336682d3f528f922195f869.bin
Size
3.1MB
MD5
70894d1b3e76771cb8486604b925346a
SHA1
16f7e01c652cda9bd9c1f076ab17fd3ff0751305
SHA256
a54e31f0dbed32875c10820f49449c631e0c17c3863396385c5ba73f07291568
SHA512
77fc15d389ec98ac1ccb5f6f671a801200dd85938f3f7efc02a34f48072f21f133c64b26e281820779a60e2e97a65d88fd5fbd83d946c8c184f7bd0e900db93e
SSDEEP
49152:ItvPixfv5+bPUVI6Ig3IzCbCUh3uunpfnurht6gY+Zzp7LWMRUgsolQh6fTXu2R:ItvP2+bPlce6gY+lp7LWMUg1fTe6
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
�y���Ah5���]ƾ|�8��]����W˧gl���� �G����s8��]��qb��yb�@�](eƷ��_�-)���4.�lJ���ڔQ*�s ���B�;�{��(`��h�����v�zGQߴ���>i���e5K��Z`�����/�K�W���;�������(��jطwx���/'��-�[u���ٶ��{,�G�r����1��lɩp+���Y���<@�,۴��A����ǻ&�f��G�퇪�T�a1͟�G]���|\��q�ao> "� wqH!]B�04���x�I��U8|V������'��)�i�nMP,���&��ӫ��4�+��@A��#�0 �oI����C}$���.�7�5.��"���(=�9�xF�C��r-��k�R/�p !����\ݾ��a��M��tX�|@v�D066��=��9�d��k�pX�s�ub�_AF���-����Ku�ct����0h�'lb�I�0�%d <ƌ���k|�҇Z�G��dh&��o(�L���>��jG�^���6�ܛ�)�{��Ȋ,��� �4�ex���%+]ƻR�K��Ѩ!F7K�P���vIg���nF�$Y����q��)�r�%38̄�vW �d����9���%����� ���������5ճ��K~*�\�=���i�u���9��X��c�ǹ �Zq�H��}JR��-X��;+����/��>F�Ӿ��of�:5��[ګ��6?�X�@ą�x��*{��jG]��m���1g�O���>}��,�nj-Y���� ���@{�Q�n�A��1�Bk����OҐ�)��A*����9��]�=�o���\Y���-f�������l���@����(Ep�+���<�S����ا2��~��B�P���ͩ9<��C��^�����!4��(�/�s�?v�k�T!Wՠ�:��P&�2�����N���١B\� �B�c�x�QSx]�B�L^��\p�F�q8�7`�J�����sN�o�2�S�X��9��f 4� g[W�g�fC����Vr<(q�B�P�d�u�|��u����Z��,[�"9���Gc�m��tƄ�a����k)���e���ˤ��A _��&��_7b�� �6���ws�*��b0�(�.��Ƨ�y�:�h{�5���:W��{����d�W9$�i����5��_�J~������ގ+���gR6�Y�1����T&q� ��G@ӗXv�M��mm�cr � $�h��)@�ա'C�s�Ƨ��<�:�+J+\��Ľ)���x��K>�)�pa�3�V�K堿t�$�{�v��j�o�M�S%�Q��m~h�?x"��m�n���Bm�����T;�;�}<F'~3�`L�Z�&���X�vH~�r���c�#k�rp�Ϛ$�����wٰ���E@ B���:�8Np��n(xx����#�Q߈�58�IE�^�����zr����I�m�I� �hɭ����ϯ���*sݱ�����+ ��p\RM�UNjߞ�y��Z�2d��$����r>��o [Y��G��H�i' �Ų����s�|X�6�=�̝#o���nMT�Z_�� ���Wϸ��@� �>��w�2������R�ͱ�N���ً���Ɩ-].�[E��+�\u5��_�z�y��.�Pj�����¹����x�c��,�F;(��>���b�Ք g�rh%b��-�<;��T�����)����,$������%�9H����*�)p|� l�$�et��V���1\0�B@7�`���+��c���G@j��������&�h̜��j��HH�]h��4�ki�Rळ1tG�!�DrM1���G�)G�]� U�\dĹa�S��$ˠ �8��Y��Z��A�����I�<���RMr�%6�*����U����G����^w��L�0Y��]�m��GEg<��8���9E�tOdi]t������~�t��9�gp�6ш^���F您 ѥ�!�,�}�W�X �Լ'���<C˽�y�+Nq�I����G����df'���_KsgM6ǜiW�մ�"ߧ�J�2-x��a�+�טH^��^�3�j�Fd�y8�ݧ���X���ڋ 2�V�]��W�`㧛m�h*����'�+�װs��ii EIw0 ,[�K�1XN��a�;�NU�T��V>��n��������$q���B�p��'��g_)���=S*p0�����6ۑ'���N��|v8JC�)"*���:������a�8�Q�2�������S��w�6$N͆��k��ժ��@��G�:��ā��s]�p��L��L/�Z����mj^ϑ#����*���!@�)����/�����:����ދ��`�Wy��ٹ��;>P̦�� UGe�қ}�+4� X��=��X��jś���i%�K@|�K_�?�e��3U�k>�,�GouJ%[��A��� Vw�c*"aV�� 㘮�[_������mF�.2h֨�Lzڝ��NV�����;�6 ~ޭ���A��Փ�b�u��9�l�����i*�'v�+�ﰔ�7�0\�IeA� �������<C�X~�9�� �緵!<b����p����^�]�X�F =<��`J��������.�\igf�7JHSZ��2:��FߓՊ�m=9�U��\��U]��@%t2�3��y��]%z^�|[�㫟{���>P)�3;>$�qM�,�=��(����7�;�/��RǂG�5�K�J(x@����1�X��{+��U����B�� ���`���h��]�p��TJ��/��/���L����sa���N/ ��W� I�����ݠj��!��-�<��Q���O0&��MsBCm��k\p��GlS�a���l��p��I�Y��&-YaR��Po���o 4�Z�Q�|9�b0+�>�����T��{s7^L��f�<j�屲ώ�VTG9�5�Y�l������.8�gཧҢ|�t9��R�=����`�������4��1Iv�� ����;�aoi�x�$�O.-D���SteР�o��0�z>+"-O��8�(��`VG`� �Gf�<M�x&���)`��.�7N�yR��;�c�Y; z��aN�ߓld��/[����D���$Iڸ4�.��,��=42�_�T`e|����<,�]�^!��d�5�zVk&X�[�}��Sډ=Ň��ǯaU�r��Q��'�^�>^�Z���U���2{�v?g�pֻ"�>�����������<� t� ϱ�B�����ܲ����~���{,�6��-�ȮBW�<��v�͡��X��'Y�I�+%�rm�� s����$y��宑UN8@3C�Č�!�P�TU6z-����n��������(d��\�V��n�n�\����*\OȜ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE