Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
36a91c2436063a936deafe03ce15685a4a952bc03d125fd4b79315a829d96c95.exe
Resource
win7-en-20211208
Target
36a91c2436063a936deafe03ce15685a4a952bc03d125fd4b79315a829d96c95
Size
7.6MB
MD5
9e9b8e1845d216ee1504fa90ff6d5371
SHA1
911c96b3976e0846ff1f46ecd0f8c855405d81da
SHA256
36a91c2436063a936deafe03ce15685a4a952bc03d125fd4b79315a829d96c95
SHA512
c93e7be4bcc63a5106b4fc1d951c4c63854c5a2ea7a2fa278f580d375c764569ca3d23033b6ba027aea16f14faeb78923d643a99b9599440226a4483755e1448
SSDEEP
49152:r0d00eWUmHV5yvq1SHmIqLfcnvhFM+MBV64aKKSSe/5zGhu118VRKJd6XUZQo:r0ijcDnHknvjJM364aXs5yhs1WR0
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
CN=Mozilla Corporation,OU=Firefox Engineering Operations,O=Mozilla Corporation,L=Mountain View,ST=California,C=US,1.2.840.113549.1.9.1=#0c2072656c656173652b636572746966696361746573406d6f7a696c6c612e636f6d
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
AdjustTokenPrivileges
RegQueryValueExW
RegDeleteValueW
CreateProcessAsUserW
RegSaveKeyW
GetTokenInformation
DuplicateTokenEx
AllocateAndInitializeSid
RegRestoreKeyW
RegOpenKeyExW
LookupPrivilegeValueW
FreeSid
EqualSid
OpenProcessToken
RegCloseKey
FileTimeToSystemTime
SystemTimeToFileTime
GetModuleFileNameW
GetModuleHandleA
GetCurrentProcess
lstrcatW
GetCommandLineW
GlobalAlloc
LocalFree
GetPrivateProfileStringW
GetLastError
WritePrivateProfileSectionW
InterlockedDecrement
GetCurrentProcessId
GetStartupInfoA
GetLocalTime
lstrlenA
FormatMessageW
LocalAlloc
GetTickCount
VirtualProtect
GetWindowsDirectoryW
DeleteFileW
TerminateProcess
SetLastError
InterlockedIncrement
GetCurrentThreadId
lstrcpyW
WriteFile
GetPrivateProfileSectionW
GetProcAddress
FreeLibrary
GetSystemDefaultLCID
GetModuleHandleW
GetSystemDirectoryW
QueryPerformanceCounter
GetExitCodeProcess
UnhandledExceptionFilter
SetCurrentDirectoryW
WideCharToMultiByte
CloseHandle
SetUnhandledExceptionFilter
LoadLibraryW
lstrcmpiW
CreateFileW
Sleep
__set_app_type
_initterm
towlower
_exit
exit
_cexit
_controlfp
free
_XcptFilter
__getmainargs
__setusermatherr
wcslen
wcstoul
wcschr
malloc
_acmdln
_c_exit
NtDuplicateToken
NtClose
CoCreateInstance
CoInitialize
CoUninitialize
IsUninstallImageValid
RpcBindingFree
NdrClientCall2
RpcBindingFromStringBindingW
RpcBindingSetAuthInfoExW
SetupCloseInfFile
SetupInstallFromInfSectionW
SetupOpenInfFileW
PathCanonicalizeW
StrStrIW
MsgWaitForMultipleObjects
DestroyIcon
DispatchMessageW
LoadIconW
wsprintfW
InternetSetOptionW
InternetCloseHandle
InternetOpenW
WinStationFreeMemory
WinStationOpenServerW
WinStationCloseServer
WinStationQueryInformationW
WinStationEnumerateW
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ