Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
0c9517537946584f436e123d6c7f32e18d3b489df53385dc52bb3d2ac339c582.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
0c9517537946584f436e123d6c7f32e18d3b489df53385dc52bb3d2ac339c582.exe
Resource
win10v2004-20220414-en
Target
0c9517537946584f436e123d6c7f32e18d3b489df53385dc52bb3d2ac339c582
Size
3.4MB
MD5
3b3a826007da0239ad57573aa4e18ff0
SHA1
7a05eb1dcfa6d0dcce8e3cc9f8b1c5692d7c3cca
SHA256
0c9517537946584f436e123d6c7f32e18d3b489df53385dc52bb3d2ac339c582
SHA512
708f25c50bf9a79506426bc51c137b0569168e9c56b7df6fdeb4725051dd109c17e715abb258813427ff9e6cdfb9ac236bf95b8c9fdab471f896f899d1e97fdc
SSDEEP
98304:tHrTtAS9YI8Vbu7LFKI7Nr0lt1CFFrOrt1CFFrOFmYVfvAwOAlv:5tAWE9CfWCfAmYVfv4Alv
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetPrivateProfileIntW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetExitCodeThread
CreateEventW
ResetEvent
SetEvent
TerminateThread
Sleep
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
GetTickCount
GetLastError
OutputDebugStringA
OutputDebugStringW
CreateMutexW
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
SystemTimeToFileTime
GetCurrentDirectoryW
GetVersionExW
GetNativeSystemInfo
GetFileAttributesExW
GetFileAttributesW
GetDiskFreeSpaceExW
GetDriveTypeW
GetLogicalDriveStringsW
DeleteFileW
RemoveDirectoryW
FindNextFileW
FindClose
FindFirstFileW
CreateDirectoryW
GetFileSize
GetTempPathW
lstrcpynW
GlobalFree
WriteConsoleW
SetEndOfFile
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
FindFirstFileExW
FlushFileBuffers
ReadConsoleW
GetModuleFileNameW
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetFullPathNameW
GetTimeZoneInformation
SetConsoleMode
ReadConsoleInputA
GlobalUnlock
GetConsoleMode
SetConsoleCtrlHandler
SetFilePointerEx
GetACP
ExitProcess
MoveFileExW
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
GlobalLock
GlobalAlloc
FreeResource
SetLastError
WritePrivateProfileStringW
GetPrivateProfileStringW
MultiByteToWideChar
SetFileAttributesW
GetSystemDirectoryW
TerminateProcess
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
WaitForSingleObject
GetModuleHandleW
WideCharToMultiByte
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
FreeLibraryAndExitThread
ExitThread
CreateThread
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
LoadLibraryExW
RtlUnwind
GetSystemTime
GlobalMemoryStatus
LoadLibraryA
GetModuleHandleA
FlushConsoleInputBuffer
FormatMessageA
PeekNamedPipe
GetStdHandle
GetFileType
WaitForMultipleObjects
ExpandEnvironmentStringsA
VerifyVersionInfoW
QueryPerformanceFrequency
LoadLibraryW
FreeLibrary
VerSetConditionMask
SleepEx
InitializeSListHead
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
IsDebuggerPresent
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
GetProcAddress
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
GetStringTypeW
GetUserDefaultUILanguage
lstrlenW
HeapDestroy
WriteFile
SetFilePointer
ReadFile
CloseHandle
CreateFileW
GetConsoleCP
IsIconic
BringWindowToTop
SetActiveWindow
LoadStringW
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
SetProcessDPIAware
DestroyWindow
GetClassInfoExW
SetPropW
RegisterWindowMessageW
FindWindowExW
SystemParametersInfoW
PostQuitMessage
MessageBoxW
EndPaint
BeginPaint
SetCursor
UpdateWindow
TrackMouseEvent
KillTimer
SetTimer
GetParent
DrawTextW
PostMessageW
ShowWindow
SendMessageW
GetProcessWindowStation
CreateWindowExW
RegisterClassExW
LoadCursorW
GetPropW
GetUserObjectInformationW
MessageBoxA
PtInRect
ScreenToClient
GetCursorPos
GetWindowLongW
SetWindowLongW
SetWindowPos
GetClientRect
GetDC
GetWindowRect
UpdateLayeredWindow
ReleaseDC
GetIconInfo
DestroyIcon
IsWindow
InvalidateRect
DefWindowProcW
LoadIconW
GetDIBits
SetBkMode
SetTextColor
CreateSolidBrush
CreateFontW
GetDeviceCaps
CreateDCW
GetObjectW
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
CreateCompatibleDC
RegCreateKeyExW
CryptEnumProvidersA
CryptSignHashA
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
RegDeleteKeyExW
RegCreateKeyW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
SystemFunction036
CryptGetUserKey
DeregisterEventSource
RegisterEventSourceA
ReportEventA
CryptAcquireContextA
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
SHGetFolderPathW
SHGetSpecialFolderPathW
ShellExecuteA
Shell_NotifyIconW
SHFileOperationW
ShellExecuteExW
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoCreateInstance
PathFileExistsW
wnsprintfW
PathUnquoteSpacesW
PathIsDirectoryW
GdiplusShutdown
GdiplusStartup
GdipCreateHICONFromBitmap
GdipCreateFromHDC
GdipDeleteGraphics
GdipReleaseDC
GdipDrawImageRectI
GdipGetImageWidth
GdipGetImageHeight
GdipFree
GdipAlloc
GdipDisposeImage
GdipCloneImage
GdipDrawImageRectRect
GdipDrawImagePointRectI
GdipLoadImageFromFile
GdipLoadImageFromStream
GdipCreateBitmapFromFile
timeSetEvent
GetModuleFileNameExW
EnumProcessModules
GetAdaptersInfo
bind
send
recv
WSASetLastError
select
__WSAFDIsSet
socket
WSAGetLastError
closesocket
getservbyname
gethostbyname
htonl
gethostname
ioctlsocket
sendto
recvfrom
listen
accept
freeaddrinfo
getaddrinfo
WSACleanup
WSAStartup
WSAIoctl
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
shutdown
ord219
ord145
ord216
ord46
ord14
ord208
ord41
ord118
ord26
ord27
ord127
ord167
ord142
ord301
ord147
ord133
ord79
CertGetCertificateContextProperty
CertFreeCertificateContext
CertDuplicateCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertOpenStore
CertCloseStore
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ