Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
677ea8aab77b35b59d1a53e652b3f031a359b97cf5100fe591b2ac9c69f6eaad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
677ea8aab77b35b59d1a53e652b3f031a359b97cf5100fe591b2ac9c69f6eaad.exe
Resource
win10v2004-20220812-en
Target
677ea8aab77b35b59d1a53e652b3f031a359b97cf5100fe591b2ac9c69f6eaad
Size
648KB
MD5
22a76eac3d041e81b87ed1f4d471ac00
SHA1
3b17cd300a0c33670c0555630004e415663d2e24
SHA256
677ea8aab77b35b59d1a53e652b3f031a359b97cf5100fe591b2ac9c69f6eaad
SHA512
efda84a27f23255e67e7ac5b4b0a33d6ea979583b6e40b457bd249c2b1f4d10ab778a9175782994f4fda8883f74a25b320879a805c3342196dc94911e87b4e76
SSDEEP
12288:Z5i4nePG0Sj3TWeEGNWiAxIeSG83in7X60a9hxvkIYh3:rXnBfjjJEGDhpC2RhxMIYh3
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WideCharToMultiByte
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetTickCount
GetSystemDirectoryW
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetLastError
HeapFree
GetCPInfo
GetSystemTimeAsFileTime
HeapAlloc
GetCommandLineA
RaiseException
RtlUnwind
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
GetProcessHeap
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
HeapSize
IsValidCodePage
GetACP
GetOEMCP
GetStdHandle
WriteFile
GetModuleFileNameW
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
LoadLibraryExW
OutputDebugStringW
SetStdHandle
WriteConsoleW
FlushFileBuffers
CreateFileW
CloseHandle
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ