Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
twoOtherThen.dll
Resource
win7-20220414-en
Target
twoOtherThen.dat
Size
335KB
MD5
b34091299aae4ff301b3402179adc3cd
SHA1
4e7b94658ba637d4e05ee3fb60480aa4b934d7a0
SHA256
0d0f2885724cb94c9c1ca7c9bb436daca22f3934a4b10010dbaa3d3f51e7dc12
SHA512
bcdc6c19fb90d1b51eb8dfea3dea772051acf9e16eb3db9f742853f17b32b294217d9741555b5b1ed8e92dbf5531266fdbb5bcc72970aaa1b9bd6901d9720494
SSDEEP
6144:CwsfRZPlPfUKafY3qO1nEdYNSvPaeUC3oMQvbrhJGEirDbZo9/SIaETWi10D8hDX:CwA/EKafY7O7UIoXvbrWEir3Aa2WWc0p
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=SPIRIT CONSULTING s. r. o.,O=SPIRIT CONSULTING s. r. o.,ST=Trnavský kraj,C=SK
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetCurrentDirectoryA
CreateFileA
FindClose
FindFirstFileA
FindNextFileA
GetFileSize
SetEndOfFile
WriteFile
CloseHandle
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
HeapWalk
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
OpenThread
VirtualAlloc
MapViewOfFile
UnmapViewOfFile
GetProcAddress
CreateFileMappingA
LoadLibraryA
CreateActCtxA
ActivateActCtx
DllInstall
DllRegisterServer
HiefplnBaydof
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ