Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
keepingitreal.dll
Resource
win7-20220414-en
Target
keepingitreal.dat
Size
335KB
MD5
0826eb256c88326e3cf600c4b4599692
SHA1
ff219c09dfda55705dd10edc3532ff5937639a98
SHA256
31cbe636cc468d93f6cf7e2f53cea08786045003197db953dfc760b8e981ff36
SHA512
0afae206cba945a41679f39295ec522678a993bed0b973acc60e8977a17abf7b8914b6a4e765fa4fa359394337a8fdcd3cf2289e5747f5f5ff064c93bd496edb
SSDEEP
6144:WwsfRZPlPfUKafY3qO1nEdYNSvP8eUC3oMQvbrhJGEirDbZo9/SIaETWi10D8hDB:WwA/EKafY7OJUIoXvbrWEir3Aa2WWc0T
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=SPIRIT CONSULTING s. r. o.,O=SPIRIT CONSULTING s. r. o.,ST=Trnavský kraj,C=SK
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetCurrentDirectoryA
CreateFileA
FindClose
FindFirstFileA
FindNextFileA
GetFileSize
SetEndOfFile
WriteFile
CloseHandle
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
HeapWalk
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
OpenThread
VirtualAlloc
MapViewOfFile
UnmapViewOfFile
GetProcAddress
CreateFileMappingA
LoadLibraryA
CreateActCtxA
ActivateActCtx
DllInstall
DllRegisterServer
HiefplnBaydof
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ