Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
3662b3326d40bfeac7f9f51aa657533876579bfccca521eb2faa213185866972.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3662b3326d40bfeac7f9f51aa657533876579bfccca521eb2faa213185866972.exe
Resource
win10v2004-20220901-en
Target
3662b3326d40bfeac7f9f51aa657533876579bfccca521eb2faa213185866972
Size
250KB
MD5
65489e19a14b2704fd0ae85e6f7069ea
SHA1
b04353891ad5440c54885126df95a5b5ab9aaadb
SHA256
3662b3326d40bfeac7f9f51aa657533876579bfccca521eb2faa213185866972
SHA512
bd95340f311c7c55619ef77fd6a40c2d52d565743fea452112d0ef7c72fae128fecad33b069121d6abe1ce5438d6e4e8b6e7cd829c48f5c1eaaf79e88e61097f
SSDEEP
6144:zZSGZGJzKJiNMRmkJEOvH23OiP0ug10hpc:zZD8Jui2qOyZMWQ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ReleaseMutex
WriteFile
ReadFile
GetFileSize
CreateFileW
FreeLibrary
GetProcAddress
LoadLibraryW
CreateDirectoryW
CreateMutexA
PulseEvent
SetThreadPriority
GetCurrentThread
OpenEventW
GetLastError
GetVersionExW
DisconnectNamedPipe
FlushFileBuffers
PeekNamedPipe
LocalFree
ConnectNamedPipe
CreateNamedPipeW
CallNamedPipeW
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
SetFileAttributesW
CompareFileTime
CopyFileW
GetWindowsDirectoryW
GetDriveTypeW
LocalAlloc
WaitNamedPipeW
GetTickCount
DeviceIoControl
GetEnvironmentVariableW
GetVolumeInformationW
GetDiskFreeSpaceW
GetModuleHandleW
GetDiskFreeSpaceExW
VirtualFree
SetFilePointer
VirtualAlloc
MoveFileW
GetTempFileNameW
RemoveDirectoryW
SetEndOfFile
InterlockedDecrement
InterlockedIncrement
RaiseException
ExitProcess
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
CreateThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
HeapReAlloc
TerminateProcess
HeapSize
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TlsAlloc
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
IsBadWritePtr
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetCPInfo
SetStdHandle
CreateFileA
LoadLibraryA
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
Sleep
MultiByteToWideChar
WideCharToMultiByte
WritePrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameA
CreateMutexW
GetModuleFileNameW
GetPrivateProfileStringW
FormatMessageW
SetEvent
GetVersion
GetCurrentProcess
CreateEventW
WaitForSingleObject
ResetEvent
RtlUnwind
CloseHandle
LoadLibraryExW
AllocateAndInitializeSid
GetTokenInformation
EqualSid
FreeSid
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey
GetLengthSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetSecurityDescriptorLength
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegOpenKeyExW
CopySid
ConvertSidToStringSidW
IsValidSid
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
StartServiceW
CloseServiceHandle
CreateServiceW
OpenSCManagerW
DeleteService
QueryServiceStatus
ControlService
OpenServiceW
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW
SetServiceStatus
GetKeyboardLayoutNameW
GetKeyboardLayout
wsprintfW
??0SBUSER_tok_config@@QAE@ABV0@@Z
??0SBUSER_tok_config@@QAE@XZ
??0SBUSER_tok_config_data@@QAE@XZ
??1SBUSER_tok_config_data@@QAE@XZ
??4SBUSER_tok_config@@QAEAAV0@ABV0@@Z
??4SBUSER_tok_config_data@@QAEAAV0@ABV0@@Z
??_7SBUSER_tok_config@@6B@
?alloc_buffer@SBUSER_tok_config_data@@SAPAXK@Z
?check_logon_allowed@SBUSER_tok_config@@UAEXXZ
?check_new_password_conformance@SBUSER_tok_config@@UAEXPBG0PAKK@Z
?check_password_expiry@SBUSER_tok_config@@UAEKPBGPAU_SYSTEMTIME@@@Z
?check_template_char@SBUSER_tok_config@@MAEHIG@Z
?close@SBUSER_tok_config_data@@QAEXXZ
?free_buffer@SBUSER_tok_config_data@@SAXPAX@Z
?get_buffer@SBUSER_tok_config_data@@QAEPAXPAK@Z
?get_config_data@SBUSER_tok_config_data@@QAEPAXK@Z
?get_config_data_size@SBUSER_tok_config_data@@QAEKK@Z
?get_config_item@SBUSER_tok_config@@UAEKK@Z
?get_config_item@SBUSER_tok_config@@UAEKKPAX@Z
?get_entry@SBUSER_tok_config_data@@IAEPAUSBUSER_TCD_HDR@@K@Z
?is_anagram@SBUSER_tok_config@@MAEHPBG0@Z
?is_item_secure@SBUSER_tok_config@@MAEHK@Z
?is_now@SBUSER_tok_config@@MAEHKK@Z
?is_palindrome@SBUSER_tok_config@@MAEHPBG@Z
?is_password_change_allowed@SBUSER_tok_config@@UAEHXZ
?is_sequence@SBUSER_tok_config@@MAEHPBG0@Z
?is_today@SBUSER_tok_config@@MAEHK@Z
?is_trivial@SBUSER_tok_config@@MAEHPBG@Z
?is_user_active@SBUSER_tok_config@@MAEHXZ
?is_user_disabled@SBUSER_tok_config@@MAEHXZ
?is_user_invalidated@SBUSER_tok_config@@MAEHXZ
?is_user_out_of_hours@SBUSER_tok_config@@MAEHXZ
?match_template@SBUSER_tok_config@@MAEHPBG@Z
?set_buffer@SBUSER_tok_config_data@@QAEHPAXK@Z
?set_config_data@SBUSER_tok_config_data@@QAEXKPAXK@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ