Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
3dda183b54176b1756f00b41e9156e335931b6461faa0d4ded4ed8bffbdb8a4c.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3dda183b54176b1756f00b41e9156e335931b6461faa0d4ded4ed8bffbdb8a4c.exe
Resource
win10v2004-20220414-en
Target
3dda183b54176b1756f00b41e9156e335931b6461faa0d4ded4ed8bffbdb8a4c
Size
611KB
MD5
2cd760dd64d19940b0fa3278f69ad72a
SHA1
b83b69b88eb9753331975eedfe9cdd06b2a04a24
SHA256
3dda183b54176b1756f00b41e9156e335931b6461faa0d4ded4ed8bffbdb8a4c
SHA512
fc003ee7f8f2269c52f501dca2152103b44b8fd7ee47c2a4ecf82cecc6b0b7dc44b57929dd215cd0ea3ff2527e80b13014887ff3e5b5d96581c3023f1707ed1e
SSDEEP
12288:sGzTx7+b7nhWOE1HpIDXEbHblYfCb9pqILZlfHduALzMjopJg7TZ3tljM6xtxO:9fx7oJEFq4bhYm99DpJg7TVYYts
metasploit
encoder/shikata_ga_nai
metasploit
windows/shell_reverse_tcp
88.149.121.29:443
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
SetEvent
Sleep
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
MoveFileA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
GetModuleFileNameA
DeviceIoControl
FindNextFileA
FindFirstFileA
CopyFileA
SetFileAttributesA
SystemTimeToFileTime
GetSystemTime
GetDiskFreeSpaceA
QueryDosDeviceA
GetCurrentDirectoryA
SetEndOfFile
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetExitCodeProcess
CreateProcessA
ExpandEnvironmentStringsA
GetFileSize
CreateThread
CreateEventA
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetSystemDirectoryA
CloseHandle
LoadLibraryA
GetProcAddress
FreeLibrary
SetErrorMode
GetTickCount
CreateDirectoryA
GetLastError
RemoveDirectoryA
MoveFileExA
SetFilePointer
ReadFile
FindClose
GetVersionExA
sprintf
strchr
_strnicmp
_stricmp
strrchr
_strlwr
strncpy
strstr
_vsnprintf
_snprintf
OpenProcessToken
GetLengthSid
InitiateSystemShutdownA
AllocateAndInitializeSid
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
InitializeSecurityDescriptor
GetTokenInformation
ShowWindow
SendDlgItemMessageA
SendMessageA
DialogBoxParamA
MessageBoxA
LoadStringA
EndDialog
SetParent
NtShutdownSystem
NtAdjustPrivilegesToken
NtClose
NtOpenProcessToken
ord17
SHBrowseForFolderA
SHGetPathFromIDListA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ