Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
d61f6523b7ee1bf7ee3939e8de702acb0e68b7c1ac12335f74d9b47923def0bb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d61f6523b7ee1bf7ee3939e8de702acb0e68b7c1ac12335f74d9b47923def0bb.exe
Resource
win10v2004-20220812-en
Target
d61f6523b7ee1bf7ee3939e8de702acb0e68b7c1ac12335f74d9b47923def0bb
Size
329KB
MD5
70b3a86f7325048b46dda270a9f58150
SHA1
f22e8048ffc1be885ee6ee41dd30dba9d2d06b91
SHA256
d61f6523b7ee1bf7ee3939e8de702acb0e68b7c1ac12335f74d9b47923def0bb
SHA512
644d81b50bf78a24b47379509f101e4fc7608d8bdb7787ccc340a80bf1c55db5e2056c553d398832704e1b296ff910455d70e996970a740d4beea01272517817
SSDEEP
6144:AF4mRc9FYnfehbF10Kczbo3X2s+aQOgzKJIYOHvAf3YsB:ABO9FY6ojboGxlIAsB
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetSystemInfo
GetEnvironmentStrings
MultiByteToWideChar
HeapDestroy
LoadLibraryW
InterlockedDecrement
ReadFile
TlsFree
CloseHandle
GetACP
DisableThreadLibraryCalls
lstrcmpiW
GetTickCount
GetModuleHandleA
GetCommandLineA
GetFileType
DeleteFileW
LocalAlloc
SetFilePointer
UnmapViewOfFile
GlobalFree
GetStringTypeW
FreeLibrary
CompareStringW
WideCharToMultiByte
FreeEnvironmentStringsA
GetAtomNameW
IsValidCodePage
ConvertThreadToFiber
GetNumberOfConsoleMouseButtons
HeapFree
ExitProcess
GetCurrentProcess
Sleep
ReleaseDC
BeginPaint
DestroyWindow
IntersectRect
KillTimer
SendMessageW
GetKeyState
LoadIconW
ShowWindow
SetTimer
PeekMessageW
PostMessageW
OffsetRect
GetWindowTextW
GetTextMetricsA
CreateFontA
BitBlt
LineTo
GetPaletteEntries
StartPage
SetViewportOrgEx
TextOutW
EndPage
RegCreateKeyW
FlushTraceW
CryptGenRandom
RegDeleteValueA
SetThreadToken
RegQueryValueExW
CryptDeriveKey
LookupPrivilegeValueW
CoImpersonateClient
CoInitialize
OleUninitialize
CoTaskMemAlloc
HWND_UserSize
CoUninitialize
IUnknown_QueryInterface_Proxy
NdrDllCanUnloadNow
RpcRevertToSelf
UuidFromStringW
CStdStubBuffer_Invoke
RpcStringBindingComposeW
NdrClientCall2
NdrDllRegisterProxy
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ