Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
eb207112f14ba9ba8bd62500f5a10f07a15af70d6c4fbc1d6ee0b9e14b685c24.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
eb207112f14ba9ba8bd62500f5a10f07a15af70d6c4fbc1d6ee0b9e14b685c24.exe
Resource
win10v2004-20220414-en
Target
eb207112f14ba9ba8bd62500f5a10f07a15af70d6c4fbc1d6ee0b9e14b685c24
Size
1024KB
MD5
77754f3a52aa773c9d3a7800e6ef5175
SHA1
35b044fd8435b6a886f5ad69938b4d5f60c92069
SHA256
eb207112f14ba9ba8bd62500f5a10f07a15af70d6c4fbc1d6ee0b9e14b685c24
SHA512
14a3d73698ea2872508e9ed2fcc62aea016a56da096bd5b24cfed3e85ccf771c794a69bdabf48c26d6f1eddb34be04883ad7099a14b60ec36cb879968717d128
SSDEEP
24576:UJ55joIy1MaEWaDloxJTXnzAf7J1q7CpdjMp:+joNlaDiDzAjlg
Processes:
resource | yara_rule |
---|---|
sample | nsis_installer_2 |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=F.lux Software LLC,O=F.lux Software LLC,POSTALCODE=90049,STREET=929 S. Gretna Green Way,L=Los Angeles,ST=California,C=US
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=F.lux Software LLC,O=F.lux Software LLC,POSTALCODE=90049,STREET=929 S. Gretna Green Way,L=Los Angeles,ST=California,C=US
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetFileSize
GetTickCount
GetModuleFileNameA
GetCommandLineA
SetEnvironmentVariableA
GetTempPathA
SetErrorMode
GetCurrentProcess
ExitProcess
GetVersion
GetWindowsDirectoryA
lstrlenA
CopyFileA
GetDiskFreeSpaceA
CreateThread
GlobalUnlock
GlobalAlloc
lstrcpynA
CreateDirectoryA
CreateFileA
ReadFile
RemoveDirectoryA
WriteFile
GetTempFileNameA
GetLastError
MoveFileA
GetExitCodeProcess
CreateProcessA
GetSystemDirectoryA
GetProcAddress
lstrcpyA
lstrcatA
MoveFileExA
LoadLibraryExA
GetModuleHandleA
FreeLibrary
Sleep
CloseHandle
SetFileTime
SetFilePointer
SetFileAttributesA
GetFullPathNameA
GetFileAttributesA
FindNextFileA
FindFirstFileA
FindClose
DeleteFileA
CompareFileTime
SearchPathA
SetCurrentDirectoryA
MultiByteToWideChar
ExpandEnvironmentStringsA
WritePrivateProfileStringA
GetPrivateProfileStringA
lstrcmpiA
lstrcmpA
MulDiv
GetShortPathNameA
WaitForSingleObject
GlobalFree
GlobalLock
EndDialog
CheckDlgButton
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
IsWindowEnabled
GetSystemMetrics
GetSystemMenu
CreatePopupMenu
EnableMenuItem
AppendMenuA
TrackPopupMenu
GetWindowRect
SetCursor
ScreenToClient
GetSysColor
GetWindowLongA
DialogBoxParamA
LoadCursorA
SystemParametersInfoA
DispatchMessageA
PeekMessageA
SetDlgItemTextA
GetDlgItemTextA
CharPrevA
MessageBoxIndirectA
CharNextA
ExitWindowsEx
SetWindowTextA
SetTimer
CreateDialogParamA
DestroyWindow
LoadImageA
FindWindowExA
SetWindowLongA
ReleaseDC
IsWindowVisible
SetWindowPos
CreateWindowExA
GetClassInfoA
RegisterClassA
CallWindowProcA
SetClassLongA
GetDC
SetForegroundWindow
EnableWindow
GetDlgItem
ShowWindow
IsWindow
PostQuitMessage
SendMessageTimeoutA
SendMessageA
wsprintfA
FillRect
GetClientRect
EndPaint
BeginPaint
DrawTextA
DefWindowProcA
GetMessagePos
InvalidateRect
CreateBrushIndirect
DeleteObject
SelectObject
SetBkMode
SetTextColor
GetDeviceCaps
SetBkColor
CreateFontIndirectA
ShellExecuteExA
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetFileInfoA
SHFileOperationA
SHGetSpecialFolderLocation
AdjustTokenPrivileges
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumValueA
RegQueryValueExA
RegSetValueExA
OpenProcessToken
RegOpenKeyExA
LookupPrivilegeValueA
SetFileSecurityA
RegCreateKeyExA
ImageList_AddMasked
ord17
ImageList_Create
ImageList_Destroy
OleInitialize
OleUninitialize
CoTaskMemFree
CoCreateInstance
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ