Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
intoIfThing.dll
Resource
win7-20220414-en
Target
intoIfThing.dat
Size
335KB
MD5
d2dc7c55a486029775ae6e18432a9967
SHA1
b565c8816ab191cc55b85b6b33ab547961e613b0
SHA256
f416f7e538a461d0d8382d6e2d3c37831c6430bd03a5970dae5638e37195e81d
SHA512
2ae0b57b4b01f40b8aa5c86acb122ace5ef5c1e26f6a03513bb1304878a6be48e2c5932c73ff053188d7a12b30d3805f75af3c26677673ec35a69f9fd8e842b3
SSDEEP
6144:bwsfRZPlPfUKafY3qO1nEdYNSvPceUC3oMQvbrhJGEirDbZo9/SIaETWi10D8hD0:bwA/EKafY7OpUIoXvbrWEir3Aa2WWc0O
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=SPIRIT CONSULTING s. r. o.,O=SPIRIT CONSULTING s. r. o.,ST=Trnavský kraj,C=SK
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetCurrentDirectoryA
CreateFileA
FindClose
FindFirstFileA
FindNextFileA
GetFileSize
SetEndOfFile
WriteFile
CloseHandle
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
HeapWalk
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
OpenThread
VirtualAlloc
MapViewOfFile
UnmapViewOfFile
GetProcAddress
CreateFileMappingA
LoadLibraryA
CreateActCtxA
ActivateActCtx
DllInstall
DllRegisterServer
HiefplnBaydof
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ