Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
7c9ea9780ce30771ba49626675397c850b44f3fd59c33c88bf28e080d755ef2c.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
7c9ea9780ce30771ba49626675397c850b44f3fd59c33c88bf28e080d755ef2c.exe
Resource
win10v2004-20220722-en
Target
7c9ea9780ce30771ba49626675397c850b44f3fd59c33c88bf28e080d755ef2c
Size
74KB
MD5
fde2c87ac8ece6e887d9904650380ba4
SHA1
e04337f146e5c3469a159e4d96aa58a75d76a54d
SHA256
7c9ea9780ce30771ba49626675397c850b44f3fd59c33c88bf28e080d755ef2c
SHA512
286baa1563819f5e8d1dce93020afe986129a00a4d3f7ff99346b58457a03e5703cdb1bb14183deadac8e5168b5abf8d45fc8fa0c458ed4a452bafe75a6955c2
SSDEEP
1536:qnlsrChsNZNE7SukSaErDY1Tpxgj1d42Z:Cm0YE7yG/YTxgvB
metasploit
windows/reverse_tcp
10.211.55.2:3333
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
FirstLoad
_tcmalloc
uv_loop_init
GetModuleFileNameW
MapViewOfFile
UnmapViewOfFile
GetProcAddress
GetModuleHandleW
GetCurrentProcess
LoadLibraryW
FreeLibrary
RaiseException
GetVersionExW
HeapCreate
GetLastError
CreateEventW
HeapDestroy
SetLastError
CreateFileMappingW
ReadFileEx
WaitForSingleObjectEx
VirtualUnlock
SetCurrentDirectoryA
LoadLibraryExA
SetProcessWorkingSetSize
DeviceIoControl
SetEvent
HeapAlloc
HeapFree
GetTickCount
LoadLibraryExW
OutputDebugStringW
GetSystemInfo
SetProcessAffinityMask
GetCommandLineW
DeleteCriticalSection
DecodePointer
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateFileW
CloseHandle
GetFileSize
CreateFileA
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualLock
IsDebuggerPresent
InitializeSListHead
PostThreadMessageW
GetTraceLoggerHandle
TraceEvent
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableFlags
GetTraceEnableLevel
CoAddRefServerProcess
CoReleaseServerProcess
CoCreateInstance
OleInitialize
PathCombineW
PathCombineA
?_Xlength_error@std@@YAXPBD@Z
_except_handler4_common
__std_exception_copy
memmove
_CxxThrowException
memcpy
memset
__std_exception_destroy
wcsncpy
wcscpy_s
wcscmp
wcslen
_invalid_parameter_noinfo_noreturn
_controlfp_s
terminate
_register_onexit_function
_crt_atexit
_cexit
_register_thread_local_exe_atexit_callback
_c_exit
_seh_filter_exe
_set_app_type
_exit
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_initialize_onexit_table
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf
_set_fmode
__stdio_common_vsprintf
__p__commode
_set_new_mode
free
_callnewh
malloc
__setusermatherr
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ