Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ef4c5cbb0d5a8884c0894cb641608a8b092fd1dcfb0d72cadd886c6a96b3e062.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef4c5cbb0d5a8884c0894cb641608a8b092fd1dcfb0d72cadd886c6a96b3e062.exe
Resource
win10v2004-20220901-en
Target
ef4c5cbb0d5a8884c0894cb641608a8b092fd1dcfb0d72cadd886c6a96b3e062
Size
826KB
MD5
6853605e93385b5894234d7672e8ab80
SHA1
40692b02e9f59d345198da803ea67dd6430da971
SHA256
ef4c5cbb0d5a8884c0894cb641608a8b092fd1dcfb0d72cadd886c6a96b3e062
SHA512
7696814318683508fc7fa44bb0f40243ca8938f0558870482e542b4346aa7d9e8a82b214ce756e8f71a8ae3b19ff49905bd74a6d803ecec97184316126c84a42
SSDEEP
12288:/CljtsEBRtjLY95eENXTTgkFjxWZ4c9gJdCfHOB9pQqJK:/oseO5e2kWx29gJn8D
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
ChangeMenuA
EnumDesktopsA
PostThreadMessageW
AnyPopup
GetWindowTextW
ShowOwnedPopups
ReadConsoleInputExA
FindNextVolumeMountPointW
CreateProcessA
TryEnterCriticalSection
SetThreadPriorityBoost
EndUpdateResourceW
CreateSemaphoreW
SetVolumeLabelA
CancelWaitableTimer
ScrollConsoleScreenBufferW
ClearCommBreak
GetConsoleKeyboardLayoutNameA
GetFileSizeEx
GetBinaryTypeA
QueryActCtxW
GetSystemDefaultUILanguage
GetDiskFreeSpaceA
LocalSize
FindFirstFileExA
GetLogicalDriveStringsW
GetPrivateProfileIntW
FindNextVolumeMountPointA
EnumSystemLanguageGroupsA
MoveFileW
LocalFileTimeToFileTime
GetCurrentThreadId
VerifyConsoleIoHandle
GlobalDeleteAtom
GetConsoleWindow
SetFileApisToANSI
CallNamedPipeW
SetFileValidData
SetComputerNameExW
CreateDirectoryExW
HeapAlloc
ProcessIdToSessionId
RequestDeviceWakeup
lstrlenA
SetCalendarInfoA
RaiseException
ReadConsoleOutputW
GetConsoleInputExeNameA
RtlZeroMemory
EnumSystemCodePagesA
GetCurrencyFormatA
Heap32Next
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
WriteFileEx
SleepEx
LeaveCriticalSection
GetLocalTime
GetProfileIntW
WriteProfileSectionW
GetFileInformationByHandle
AssignProcessToJobObject
SetMailslotInfo
WriteConsoleOutputAttribute
IsBadHugeWritePtr
GetModuleFileNameA
FindCloseChangeNotification
DeleteVolumeMountPointW
CommConfigDialogA
GetConsoleProcessList
SizeofResource
GetConsoleCursorMode
InvalidateConsoleDIBits
SetUserGeoID
WaitForSingleObjectEx
DeleteVolumeMountPointA
DeactivateActCtx
SetProcessPriorityBoost
GetConsoleDisplayMode
WriteTapemark
GetCommProperties
WritePrivateProfileStructW
GlobalMemoryStatus
EnumResourceNamesA
ExitProcess
CreateActCtxA
CreateMailslotW
GetPrivateProfileIntA
MapViewOfFileEx
InterlockedCompareExchange
CreateSocketHandle
OpenJobObjectW
GetProfileStringA
GetHandleInformation
GetOEMCP
DeleteTimerQueue
EnumLanguageGroupLocalesW
CreateFileA
CopyFileExA
EnumDateFormatsExA
GetProfileSectionW
WritePrivateProfileStringA
GetStartupInfoW
GetPriorityClass
GetConsoleCursorInfo
LocalHandle
GetConsoleHardwareState
IsBadStringPtrW
GetThreadPriority
LZInit
GetLogicalDrives
ActivateActCtx
GetPrivateProfileSectionNamesW
BuildCommDCBA
GetProcessTimes
CloseProfileUserMapping
OpenMutexA
GetCalendarInfoA
SetProcessWorkingSetSize
RemoveDirectoryA
FindResourceW
lstrcpyA
AddRefActCtx
GetProcessWorkingSetSize
GetTempPathW
Beep
ClearCommBreak
CommConfigDialogW
GetVolumePathNameW
BackupWrite
LZOpenFileW
GetNamedPipeHandleStateA
LocalCompact
RemoveDirectoryW
GetNumberFormatW
SetComputerNameW
GlobalSize
SetPriorityClass
CreatePipe
HeapSize
GetCPInfo
PulseEvent
RaiseException
InitializeCriticalSection
SetStdHandle
LocalLock
WriteProfileStringA
GetSystemTimeAsFileTime
FormatMessageW
GetConsoleInputExeNameA
MultiByteToWideChar
GetLogicalDrives
CreateEventA
GlobalAddAtomA
GetProcessIoCounters
GetStringTypeA
SetVolumeLabelW
SetCalendarInfoW
EnumSystemLanguageGroupsW
GetProcessHeap
HeapAlloc
FindCloseChangeNotification
FindVolumeClose
GetConsoleProcessList
CreateDirectoryExA
SetProcessAffinityMask
FileTimeToDosDateTime
OpenFile
EnumLanguageGroupLocalesW
GetPrivateProfileSectionW
GetStartupInfoW
IsBadHugeWritePtr
GetSystemTimeAdjustment
DeleteFileW
GetVolumePathNamesForVolumeNameA
GetGeoInfoA
SearchPathA
HeapUnlock
EnumResourceNamesW
CreateConsoleScreenBuffer
GetModuleHandleExW
GetUserGeoID
GetComputerNameA
WriteConsoleOutputA
GetOverlappedResult
FreeEnvironmentStringsW
DefineDosDeviceA
GetSystemTime
DosPathToSessionPathA
GetProcessVersion
GlobalMemoryStatusEx
OpenJobObjectA
GetDiskFreeSpaceExA
OpenJobObjectW
CreateSemaphoreW
LocalFree
GetNumberOfConsoleFonts
FindFirstVolumeA
HeapReAlloc
GetConsoleHardwareState
EnumResourceTypesA
GlobalMemoryStatus
TerminateJobObject
RtlMoveMemory
ExpandEnvironmentStringsA
EnumSystemLanguageGroupsA
WaitNamedPipeA
SearchPathW
FillConsoleOutputCharacterA
GetEnvironmentStringsA
CancelIo
IsProcessInJob
CancelTimerQueueTimer
SetFileValidData
CreateDirectoryExW
GetPrivateProfileStringA
FoldStringA
SetUserGeoID
SetThreadLocale
DeleteTimerQueueEx
FindAtomA
DnsHostnameToComputerNameW
GetSystemInfo
lstrcpyn
GetCalendarInfoW
GetEnvironmentStringsW
GetNumberOfConsoleMouseButtons
WriteConsoleOutputW
CreateHardLinkW
GlobalUnWire
GetDiskFreeSpaceW
ReadConsoleInputExW
ReadFileScatter
WriteFile
EndUpdateResourceA
EnumSystemLocalesA
AllocConsole
SetProcessWorkingSetSize
IsBadWritePtr
GlobalUnlock
LocalUnlock
SetCommState
EnumCalendarInfoExW
GetLocaleInfoW
GetLogicalDriveStringsA
LocalFileTimeToFileTime
GetTapePosition
OpenMutexA
LCMapStringA
InterlockedIncrement
EnumDateFormatsA
LoadModule
GetFullPathNameW
GetConsoleCursorMode
CallNamedPipeW
GetACP
SetProcessShutdownParameters
GetCurrentProcess
RemoveVectoredExceptionHandler
GetVolumeInformationA
lstrcpynA
CreateSocketHandle
SetFilePointer
FindFirstVolumeMountPointA
IsWow64Process
SwitchToThread
SetCommMask
TzSpecificLocalTimeToSystemTime
QueueUserWorkItem
GetCommMask
ReadConsoleInputExA
ReadConsoleOutputW
SetInformationJobObject
BackupSeek
CreateTimerQueueTimer
EnumDateFormatsA
TlsFree
ReplaceFileW
GetExitCodeThread
AllocConsole
GetThreadPriority
GetNumberOfConsoleFonts
FlushConsoleInputBuffer
SearchPathA
CreateConsoleScreenBuffer
WriteProfileSectionA
GetThreadPriorityBoost
IsDBCSLeadByteEx
IsValidCodePage
LCMapStringA
WriteConsoleOutputA
VerifyConsoleIoHandle
GetLongPathNameA
SetThreadPriorityBoost
ReadConsoleInputExW
GetProcessHeaps
SetErrorMode
GetVolumePathNamesForVolumeNameA
LZStart
GlobalAddAtomW
ReadConsoleW
SetMailslotInfo
RtlCaptureContext
CreateDirectoryExW
FindNextVolumeA
WriteTapemark
GetLogicalDriveStringsA
SetSystemTimeAdjustment
GetBinaryTypeW
SetFileApisToOEM
LZCopy
CreateJobSet
InterlockedDecrement
GenerateConsoleCtrlEvent
GetLogicalDrives
GetConsoleKeyboardLayoutNameA
GetModuleHandleExW
ConnectNamedPipe
GetThreadContext
SetThreadPriority
AddAtomW
SetTimerQueueTimer
EnumSystemLocalesA
DebugBreak
WriteFile
OpenWaitableTimerA
WaitForDebugEvent
GetStdHandle
SetFileShortNameA
GetLastError
ShowConsoleCursor
OpenFileMappingA
CancelDeviceWakeupRequest
CancelTimerQueueTimer
SetThreadUILanguage
SetPriorityClass
GetComputerNameA
GetModuleFileNameW
SetComputerNameA
CreateFileMappingW
lstrcpyW
RegisterWaitForInputIdle
GetFullPathNameA
GetConsoleTitleA
RtlMoveMemory
GetProfileStringW
ClearCommError
GetTapePosition
WriteConsoleOutputAttribute
GetProfileIntW
AddConsoleAliasA
DeleteFileW
BuildCommDCBAndTimeoutsA
GetCurrencyFormatA
SetEnvironmentVariableA
LCMapStringW
CreateTimerQueue
VerifyVersionInfoW
CreateEventA
GetConsoleOutputCP
WriteConsoleOutputCharacterW
SetVolumeMountPointA
GetVersionExW
IsBadHugeWritePtr
ReplaceFileA
WritePrivateProfileStructW
CopyFileExW
WriteFileEx
GetCurrencyFormatW
OpenFile
lstrcmpi
CopyFileA
EnumSystemLanguageGroupsA
SetUserGeoID
ReleaseMutex
SetLastConsoleEventActive
GlobalWire
QueryPerformanceFrequency
GetDriveTypeA
GetCPInfoExW
UpdateResourceA
CreateActCtxA
GetDiskFreeSpaceW
BuildCommDCBAndTimeoutsW
GetProcessAffinityMask
SetNamedPipeHandleState
FindResourceA
GetCurrentActCtx
GetPrivateProfileStructW
GetSystemTimeAsFileTime
ReadConsoleOutputCharacterA
LocalSize
GlobalSize
FindActCtxSectionGuid
SetFileAttributesW
WaitNamedPipeA
SetCurrentDirectoryW
ReadFileScatter
TlsSetValue
FormatMessageW
GetExpandedNameA
GetConsoleCursorMode
GetProcessShutdownParameters
FoldStringW
ExpandEnvironmentStringsA
ChangeTimerQueueTimer
Heap32Next
EnumDateFormatsExA
ResetEvent
lstrcat
LoadLibraryExA
LocalAlloc
GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
ChooseFontW
dwLBSubclass
CommDlgExtendedError
VarUI8FromI2
VARIANT_UserUnmarshal
LoadRegTypeLib
VarBstrFromI1
VarBstrCmp
VarDecMul
VarR4FromI1
VarBstrFromUI8
VarDecInt
DispCallFunc
VariantClear
VarUI1FromDisp
VarI1FromUI1
VarBoolFromDec
VarUI2FromR8
VarDateFromDisp
VarDateFromI8
VarDecFix
VarUI1FromStr
GetOutlineTextMetricsA
PlayMetaFileRecord
GdiAddFontResourceW
GetMetaFileBitsEx
UninitializeFlatSB
ImageList_Read
ImageList_Add
CreateToolbarEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ