Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
c1c1278e20d3873a088dbe56dc1f59f3.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
c1c1278e20d3873a088dbe56dc1f59f3.exe
Resource
win10v2004-20220414-en
Target
c1c1278e20d3873a088dbe56dc1f59f3
Size
299KB
MD5
c1c1278e20d3873a088dbe56dc1f59f3
SHA1
b23531bf87624a717183756de5954cb059fd3df1
SHA256
c6ebefab2e87ee95b7bd9946bd7bf35ef367e0a8e6dcbc3722b7f7984a5ec272
SHA512
6756218a1618c14e040060075fcf52b15349b83fb7acddf2b304fd1fc2c023e957265d206e45cb46ce1082002fa9fef6ed5ba2460bfa50278e7598fe19f071c0
SSDEEP
6144:dLKOIFZmKUGk9cecAOOhNripBqaGLSud9JSGO/N7/G:dLIFwKUhNrGGuuLAG2Ni
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
CN=Gary Kramlich,O=Gary Kramlich,POSTALCODE=53210,STREET=2653 N 54TH ST,L=MILWAUKEE,ST=Wisconsin,C=US
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=Gary Kramlich,O=Gary Kramlich,POSTALCODE=53210,STREET=2653 N 54TH ST,L=MILWAUKEE,ST=Wisconsin,C=US
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=Gary Kramlich,O=Gary Kramlich,POSTALCODE=53210,STREET=2653 N 54TH ST,L=MILWAUKEE,ST=Wisconsin,C=US
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=Gary Kramlich,O=Gary Kramlich,POSTALCODE=53210,STREET=2653 N 54TH ST,L=MILWAUKEE,ST=Wisconsin,C=US
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
GetModuleFileNameW
GetModuleHandleW
GetModuleHandleExW
GetModuleHandleA
FreeLibrary
LoadLibraryExW
ExitProcess
TerminateProcess
GetStartupInfoW
TlsFree
TlsSetValue
GetCurrentThreadId
TlsGetValue
GetCurrentProcessId
TlsAlloc
GetCurrentProcess
LCMapStringEx
GetACP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
GetCPInfo
LCMapStringW
IsValidCodePage
GetOEMCP
EnterCriticalSection
InitializeCriticalSectionEx
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
DeleteCriticalSection
DecodePointer
EncodePointer
GetStringTypeW
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
GetForegroundWindow
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetLastError
IsProcessorFeaturePresent
RtlUnwind
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetStdHandle
FreeEnvironmentStringsW
SetStdHandle
SetEnvironmentVariableW
WriteFile
FindFirstFileExW
SetFilePointerEx
GetFileSizeEx
CreateFileW
FindNextFileW
FindClose
FlushFileBuffers
ReadFile
GetFileType
HeapAlloc
HeapSize
HeapFree
HeapReAlloc
GetProcessHeap
CloseHandle
WriteConsoleW
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ