Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
75f0da5d20808037e11e583ccfe0ec12d848e562e768e339e3da321019180806.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
75f0da5d20808037e11e583ccfe0ec12d848e562e768e339e3da321019180806.exe
Resource
win10v2004-20241007-en
Target
75f0da5d20808037e11e583ccfe0ec12d848e562e768e339e3da321019180806.exe
Size
6.9MB
MD5
b8192d9e9ce7362a3aba5a02fd309a32
SHA1
93a36ca96babd90db517f329a6a37fc3931667f3
SHA256
75f0da5d20808037e11e583ccfe0ec12d848e562e768e339e3da321019180806
SHA512
521cae440f454dfa1b9504c90755ff73499c986954046bc74b937fb09496116428feada8beb7d8de1714d4ade227c04e51e18757509117c48eec11380c66c8bb
SSDEEP
196608:CiSFfmdI7uriJk0NbLEaPHQpmJJ/kkVXTZVJNKqV+:ZWfJ0zcL5Pwp4xTD3JfA
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Process32First
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
DispatchMessageA
CharUpperBuffW
GetUserNameA
??Bid@locale@std@@QAEIXZ
D3D11CreateDeviceAndSwapChain
DwmExtendFrameIntoClientArea
ImmReleaseContext
D3DCompile
ord2
_CxxThrowException
_callnewh
_seh_filter_exe
fflush
strncpy
qsort
atof
setlocale
_CIfmod
_lock_file
�� v=�λX"�9�9��5���l+�ެTf�]2��ةVn��3//?��m0�'�!���F������d���M�@���"Fq��FE�����:v�"���:�����a��sv�>"Y<�d�Ău+��O5�T~�:9Cijk_�WD��\�kKٖ����~|!��z�o���S;ܸ8C�5�^;u��#�����[��V�8���4�^��&2�����Q�����2ŞF����(�n��6� �)��3�bx��`wfmN��]�6N68N���2Ư�C �M�!+���lI��&���0�!�����c��jc����"@�Mh�ߞ�!��т�9%�Es�$ �����;�j�T����[d��A�ᢤž�!�K8�>`��{��yS���;TE���V���(�!Ņ2�A��_z�^nDZ��y��4u#XL�0��Χ��w՜����-3�x2�$9�ֲ���ܩ�-�Q���:j�3V�;NZ�Ow|�2�y�(b��֕��@�$��|sޟ����&�L��*�AkGx�k3����G-�F����gL*��F/���%si/�.��~X��@�Z�$/� nd�4{��ӧ��Q�,�g���I��<�f�X��H`M}{�֕g|��Fo9�[�����y��8ڝ;�\��8���,�GG�EH�L!���]��Ӗ������^�Zv�?�:���,�L��<.��/e)�M��p�����Q�V��.�����e�_8�����P!����}��S+�J�(�#���*�pϠ���)ea��:e�\g.C>-�k�~���.�������\|��{�P�V�(<0GB�lL�θ�,>��+�'�>�� �}}\�Q��@��p&gv�����"���7�)n�GəK�Ū魷۟�Ffp�O�}q\��<@fqA�� ��i���7cm]Uú��*��`�I�_���2����ݟ����v5� W�Rr��~e����x����ަ} |�F�]7J`bC�����t|��~�1�H�:�C �3�.����3`���2��0m��Vr�~��π&1z��.U���.�҄��d��l&:�gp'�)L������/U��=�۱����ƭ�Na���-0z�Ӧ�< �@V����MP���M�s���l�� 8\�́l��1�Z�7I�3�5�R/���b��v)�(�JC�ǍرxY���zq���ڊ��*�cE���gqj+���1��vېx @�D��|#�Q±+x��*�4�B %����5��h��@',]{h��/��̝q��\.��5��D[��x/iTm��OhK�{ [��h��S�q�'�o����?IM�G�7E���ȣ��x"ߕ�4HV�1"R��� \ �B��ԶyJՊ;�qp�H���;�MR���"�o �iO�-�}8�`�6�Du��Ԟ9L]�� �m�K�V�B\⢥]�� Z��^��ߤS^���+��Q�h����*51��@�ا�yǓ�R�TiL�㵌�10R�AⷷqMFp��*r,����!E�,�. �?$��A�f�}6 t>�c|ϟ(�2W��Wͮ�F��#]a����f� �D�9�ʀ���l��h�¬!�;K����(J��f��i��ף8��� ۠��J J��V��e;���e˓�c�H�� [�}����V@L����#㛒��p�{�f=4Rܘ�O��q"\���Jݐ<Yz�YH-_ ��^a��_��ʤ���$�:�����ߨz��'���(����N|u���.����;�9J��豌�����]��V����5(6N+o$�#��}zKzWӇ��1{���%q�_�2`�r�HG��ЋG9���C)�P��3��ּ�t[F����R��)��g3��ς�������9Czguc��YT�(旗"U������_�v�O$�(A���d��B��'#��^~�>����3��8P�(�[a=�P��\�L�<6eJn' ���9�4�WOw4=�W��� �����`�KOϐ��.�U��}��?SU�kĊ���Q����/��sI2�^y�K��x���ͪ�7��V��\�%V���>�Y���G��wܺWCx����G���p"��!�~- RUix:���yw�8jNd����2��/fI۾� 8c��E��`�O�}`E��<}yhMH��ۀw�������O:$����Z� ���q�ʩ�:���Q����?� ��X{�J���L��~H�������GCC90TD��;(g0���Hlk��| ���8��B�7D1��F$7m�|Κk������Fyu�g -�xl�ޔl�{d� ���,��j9��x�I�QR/[�L-���HY�$���K��H ����$%�!�p���$U8E��{����}����6� c٬��]��V�Sh���8�1)g�>a�Ť���m��V�|� um��6z.��k����2ʄ8���V$�}�9_�97؋Az�@YW9��X#���#B®�j�@���� ��|�5zT�K[��Se�}{�t�Ot�"'rs��kW2b��t~1WUǴ����U���lj���!X��� J"j��4P(���ˇ�ԧGS ��h�ܪ��k�*t^V���q3�g^�'�M�.��ق3�#�Xb�"����4NqD`a!�*ԗ�.�syH����D�pS�#Q�Ef3[!�t8M�y��LU]�P��x,���Ay�#�]8'�!T�����o���cf�$|��&��<E� �#�A����>��q�El�/B��2ka��/~�+��{�^(�2�\�5ʼn���?�[`� }��1m�k�_�:���H�T��:<_##�Pp�"�y�Α�|�&�[%-q�L'r_U��uz5,�1���Ͼ��EN�2X�%��}iv��j�G�^ ���Pl���'a���]�j<r��n���¥!رy�K�B��r�hb��T�ŋU]FHz��h>s�^����n@T<9�K��m�b@[#�QRT�/r��JnIN��Mמ�U�kh���P�*��%F��t�V��0\��or��k`?��"��^Q�b���Sb�e$jO����
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ