Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
9e19679d7345078d7488a48bda8b2623f97529ce8e4b06dd7f9e77dd864922dd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9e19679d7345078d7488a48bda8b2623f97529ce8e4b06dd7f9e77dd864922dd.exe
Resource
win10v2004-20220812-en
Target
9e19679d7345078d7488a48bda8b2623f97529ce8e4b06dd7f9e77dd864922dd
Size
503KB
MD5
2692d6f4d5ded84c372537bb68aeb995
SHA1
99c5e562cdb700ee5452adf7a5194ddeef65dfc6
SHA256
9e19679d7345078d7488a48bda8b2623f97529ce8e4b06dd7f9e77dd864922dd
SHA512
fc16cc2f1dba2080af85a0e2cb1e49b5c8b1ff3de4dbd50adc873104fb7cb9bd7c1220559fc74c84656e70dd8a7afe728a572753fc64d8da3274d58f41e07e60
SSDEEP
12288:ZmueGhXdalmqGlNlSN39coGCh3VoHDilpi:ZlemdFw9sqcDiC
ExtKeyUsageCodeSigning
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ExitProcess
VirtualAlloc
GetShortPathNameW
GetShortPathNameA
GetVersionExW
SetFileAttributesW
SetFileAttributesA
GetFileAttributesW
GetFileAttributesA
GetCurrentDirectoryW
GetCurrentDirectoryA
GetStartupInfoA
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FindClose
SetCurrentDirectoryA
SetCurrentDirectoryW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
lstrlenW
GetLastError
GetProcAddress
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
MessageBeep
InvalidateRect
KillTimer
PostQuitMessage
DefWindowProcA
RegisterClassExW
RealizePalette
SelectPalette
CreateCompatibleDC
GetObjectA
GetStockObject
CreateDIBitmap
GetPaletteEntries
DeleteDC
SetPaletteEntries
ResizePalette
GetSystemPaletteEntries
SetSystemPaletteUse
GetDeviceCaps
CreateCompatibleBitmap
BitBlt
CreatePalette
CreateSolidBrush
SelectObject
DeleteObject
SetBkMode
SetTextColor
GetLayout
StretchDIBits
SetLayout
_XcptFilter
_cexit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_exit
__p__fmode
__set_app_type
_except_handler3
_controlfp
atoi
_c_exit
wcscpy
wcslen
isdigit
isalnum
isspace
_purecall
calloc
rand
floor
_CIacos
strstr
exit
_ftol
fopen
fclose
_strnicmp
realloc
free
malloc
sprintf
_itoa
sscanf
_ltoa
__p__commode
memmove
atol
RegOpenKeyW
GetTrusteeNameA
LsaEnumeratePrivilegesOfAccount
BuildTrusteeWithObjectsAndSidA
ImpersonateAnonymousToken
GetEffectiveRightsFromAclA
CreateServiceA
SystemFunction013
GetSecurityDescriptorControl
UninstallApplication
AccessCheckAndAuditAlarmW
AdjustTokenGroups
SetEntriesInAuditListW
LsaOpenSecret
LsaEnumeratePrivileges
RegLoadKeyA
ObjectOpenAuditAlarmA
GetSidSubAuthorityCount
CryptGetDefaultProviderA
LookupPrivilegeNameW
AreAllAccessesGranted
LsaDeleteTrustedDomain
SystemFunction022
SystemFunction031
SetPrivateObjectSecurityEx
LsaICLookupSids
ClearEventLogA
RegReplaceKeyW
SetEntriesInAccessListW
QueryUsersOnEncryptedFile
ElfReadEventLogA
RegRestoreKeyW
QueryServiceObjectSecurity
QueryAllTracesW
CryptEnumProviderTypesW
AddAuditAccessObjectAce
LsaSetTrustedDomainInfoByName
ImpersonateSelf
SystemFunction015
LsaSetSecret
GetNumberOfEventLogRecords
SetSecurityInfoExW
RegSetValueW
OpenServiceW
BuildExplicitAccessWithNameA
SetSecurityInfoExA
ElfCloseEventLog
InitializeAcl
EqualPrefixSid
GetSecurityInfo
SetEntriesInAclA
IsValidSid
RegConnectRegistryA
RegQueryValueW
OpenSCManagerA
CryptGetHashParam
DeleteService
LsaQueryTrustedDomainInfo
SetSecurityDescriptorRMControl
SetAclInformation
LsaCreateTrustedDomainEx
SetFileSecurityW
LsaOpenTrustedDomain
ChangeServiceConfigA
QueryRecoveryAgentsOnEncryptedFile
GetSecurityDescriptorRMControl
AdjustTokenPrivileges
ElfChangeNotify
LsaGetSystemAccessAccount
SystemFunction004
CryptHashData
LogonUserW
QueryServiceConfigW
RegisterServiceCtrlHandlerExW
DuplicateTokenEx
SystemFunction009
CreateServiceW
LsaRetrievePrivateData
LsaLookupNames
OpenTraceA
PrivilegeCheck
DeregisterEventSource
RegDeleteValueW
ControlTraceA
ElfNumberOfRecords
SystemFunction001
AddAccessAllowedAce
SystemFunction033
StartServiceW
GetFileSecurityA
RegReplaceKeyA
SetTraceCallback
ElfRegisterEventSourceW
ElfOldestRecord
RegOpenKeyA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegQueryValueA
ShellAboutA
InitCommonControlsEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ