Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2c2f08d863ae902a373e3c4ffeb4d22729eed89b322147cb97a86166d14efdc5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2c2f08d863ae902a373e3c4ffeb4d22729eed89b322147cb97a86166d14efdc5.exe
Resource
win10v2004-20221111-en
Target
2c2f08d863ae902a373e3c4ffeb4d22729eed89b322147cb97a86166d14efdc5
Size
864KB
MD5
1513f458b422b12df842d344cd871ca0
SHA1
ebb4196130d240ad08b71598c29d583caf4f7267
SHA256
2c2f08d863ae902a373e3c4ffeb4d22729eed89b322147cb97a86166d14efdc5
SHA512
b5d4e66355722501b69851d55e3921f367e1b586c3224649236b7ec0cb5098cd2b7e103aabff5c4a4aab15b869b708eff5f6b78409cdcc3b591413ff3d74d495
SSDEEP
12288:Lz/sZL4ej1dlyTn/wBqxbkpi+3igcTL/8t4pmH:LzUZLz1Kn/wBqtkpidOH
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
MoveWindow
SetPropW
MessageBoxExW
EnumDisplaySettingsExW
GetFocus
DefDlgProcW
RegisterClipboardFormatA
CharLowerBuffW
ShowWindow
DrawFrame
SetDlgItemTextW
CallMsgFilterW
GetSysColorBrush
AdjustWindowRect
ChangeMenuA
GetNextDlgTabItem
GetClientRect
GetKeyNameTextW
LoadCursorA
CopyAcceleratorTableW
IsHungAppWindow
IsRectEmpty
CallNextHookEx
GetWindowDC
CreateCaret
GetWindowContextHelpId
GetWindowLongA
GetKeyboardType
UnregisterDeviceNotification
DefWindowProcW
PostThreadMessageA
LoadAcceleratorsW
GetMenuItemID
IsHungAppWindow
LoadImageA
ShowStartGlass
FindWindowExA
UnlockWindowStation
DragObject
MessageBoxTimeoutW
GetTopWindow
CheckMenuRadioItem
CharToOemBuffA
SetInternalWindowPos
GetWindowLongW
FrameRect
EnableMenuItem
CreateDialogIndirectParamW
GetWindowModuleFileNameW
CopyAcceleratorTableA
CharNextW
LoadCursorFromFileW
GetRawInputDeviceInfoA
SetProgmanWindow
SendInput
DrawFrameControl
LoadMenuW
GetWindowTextLengthW
IsCharAlphaNumericA
CharUpperBuffA
CopyAcceleratorTableW
SetDlgItemTextA
SetCaretPos
DefFrameProcW
SetMessageExtraInfo
LoadKeyboardLayoutA
SetMenuDefaultItem
OemToCharBuffW
GetCapture
CharNextA
GetAsyncKeyState
CreateIcon
GetWindowRgn
TrackPopupMenu
ScrollWindowEx
FillRect
SetWindowPlacement
LoadStringA
GetMessageExtraInfo
CharUpperA
MapVirtualKeyW
ValidateRect
ReleaseDC
DrawTextExA
DrawCaptionTempA
EnableWindow
MessageBoxExA
SetLastErrorEx
SetSystemMenu
AdjustWindowRect
CallMsgFilterW
CloseWindowStation
PostMessageA
CascadeWindows
DefDlgProcA
GetMenuItemInfoA
GetMenuItemCount
ScreenToClient
GetKeyboardLayout
SystemParametersInfoW
GetThreadDesktop
MapWindowPoints
DrawMenuBarTemp
DlgDirListW
GetUserObjectSecurity
IsCharLowerW
SetWindowTextA
GetAltTabInfoW
AnyPopup
AlignRects
MonitorFromPoint
FindWindowExW
SetCaretBlinkTime
SendMessageCallbackW
LoadMenuA
GetMenuContextHelpId
SetClipboardData
BringWindowToTop
FlashWindow
SetSystemCursor
GetSysColorBrush
DrawMenuBar
CreateMDIWindowW
MessageBoxA
TabbedTextOutW
TranslateAcceleratorA
GetUpdateRect
SetDoubleClickTime
WindowFromPoint
IsDialogMessage
SetScrollPos
GetClipboardFormatNameW
GetWindowThreadProcessId
GetPropA
IsWindowEnabled
GetGuiResources
EqualRect
GetParent
GetCursor
GetKeyState
MessageBoxTimeoutA
SendDlgItemMessageW
CharToOemA
EnumPropsExW
DlgDirListA
MessageBoxExW
GetClassWord
ScrollWindow
IsDialogMessageA
PostThreadMessageW
TileWindows
GetMessagePos
GetWindowRgnBox
SetClassLongW
InflateRect
IsGUIThread
PrivateExtractIconsW
DialogBoxIndirectParamA
MenuWindowProcA
AnyPopup
KillTimer
IsHungAppWindow
BroadcastSystemMessageW
GetCursor
SetWindowsHookW
UnregisterClassA
MessageBoxIndirectW
AppendMenuW
GetWindowWord
GetTabbedTextExtentW
GetKeyboardState
CharLowerBuffW
ScrollChildren
ModifyMenuW
DrawCaptionTempA
GetGuiResources
EditWndProc
ValidateRgn
PrintWindow
OpenDesktopA
SetDoubleClickTime
IsRectEmpty
SetClipboardViewer
SendMessageCallbackA
CharUpperBuffA
HideCaret
ChangeMenuW
LoadMenuW
GetMenuState
PaintDesktop
GetKeyboardLayout
GetSysColor
CallWindowProcW
MonitorFromRect
MapVirtualKeyExA
IsZoomed
GetWindowLongW
CreatePopupMenu
RegisterClipboardFormatW
AdjustWindowRect
CharLowerBuffA
SetSystemCursor
CloseWindow
DestroyAcceleratorTable
ToUnicode
CloseClipboard
CopyImage
GetUserObjectInformationA
SetMenuItemInfoA
CreateAcceleratorTableA
UpdateLayeredWindow
TrackMouseEvent
TranslateMessage
OpenClipboard
GetSystemMetrics
GetSysColorBrush
DeleteMenu
SetCursorPos
GetClipboardOwner
GetMessageExtraInfo
SendMessageCallbackW
GetMouseMovePointsEx
ChangeMenuA
DlgDirSelectExW
CreateMDIWindowW
SendNotifyMessageA
GetKeyNameTextA
EnumDesktopWindows
SetActiveWindow
ShowWindowAsync
LockWorkStation
OemToCharBuffA
DragObject
SendDlgItemMessageA
RegisterClassW
SetProcessWindowStation
OemKeyScan
SetForegroundWindow
GetDlgItemTextA
DispatchMessageW
GetClipboardFormatNameA
IsCharLowerA
ModifyMenuA
TranslateAcceleratorA
LoadCursorW
SendDlgItemMessageW
MapVirtualKeyExW
GetMonitorInfoW
GetWindowLongA
GetMenuItemRect
SetRectEmpty
RealGetWindowClassW
IsCharUpperA
GetKeyNameTextW
IsCharAlphaNumericW
InvalidateRect
IsIconic
MoveWindow
LoadKeyboardLayoutEx
MapVirtualKeyA
SetDeskWallpaper
GetWindowInfo
CharToOemW
CreateCaret
GetUserObjectInformationW
GetAncestor
OemToCharBuffW
GetDlgItemInt
MonitorFromWindow
GetDC
ActivateKeyboardLayout
CharPrevW
GetProgmanWindow
GetMenuItemCount
EnumCalendarInfoExW
GetCalendarInfoA
lstrcmpA
EnumLanguageGroupLocalesW
CreateHardLinkW
GetCommMask
FindNextVolumeA
GetFileType
RequestDeviceWakeup
GlobalSize
EnumSystemCodePagesA
DeactivateActCtx
MapUserPhysicalPages
CreateTapePartition
MoveFileExA
GetPrivateProfileSectionNamesA
SetLastError
GlobalSize
GetCurrencyFormatA
IsDBCSLeadByte
EnumDateFormatsExA
GetHandleContext
InitAtomTable
WritePrivateProfileSectionA
GetCurrentDirectoryA
HeapCompact
GetCommandLineW
GetDateFormatA
CreateHardLinkA
GetTickCount
MapViewOfFileEx
CompareStringA
DeleteFileA
RtlCaptureStackBackTrace
TerminateJobObject
EnumResourceLanguagesW
GetVersion
WriteConsoleOutputCharacterA
GetThreadTimes
CreateWaitableTimerA
GetModuleFileNameA
BackupWrite
GetSystemDefaultLCID
GetProcessVersion
InterlockedIncrement
OpenWaitableTimerW
SetCalendarInfoA
LocalFree
GetNumberOfConsoleFonts
CreatePipe
RtlCaptureStackBackTrace
Heap32First
HeapUnlock
ReadConsoleOutputAttribute
SetMailslotInfo
CreateJobObjectW
AddAtomW
DosDateTimeToFileTime
GenerateConsoleCtrlEvent
GetOEMCP
FindFirstVolumeA
GetPrivateProfileIntW
GetComputerNameExW
FreeLibraryAndExitThread
LocalReAlloc
EnumSystemGeoID
GetCPInfoExW
HeapCreate
GetPrivateProfileSectionW
QueryMemoryResourceNotification
GetHandleInformation
GetProfileIntA
UnhandledExceptionFilter
GetCPInfo
EnumCalendarInfoW
GetCurrentProcessId
LZInit
LZOpenFileA
GetSystemPowerStatus
LockFileEx
DeleteVolumeMountPointA
FindFirstFileA
CancelIo
SetEnvironmentVariableA
GlobalCompact
GetSystemDirectoryW
OpenJobObjectA
WriteConsoleOutputCharacterW
GetPrivateProfileStringW
HeapSetInformation
EnumSystemLocalesW
GetCurrentProcess
PrivCopyFileExW
EndUpdateResourceW
RemoveDirectoryW
ReadFile
Heap32ListFirst
SizeofResource
InitializeCriticalSectionAndSpinCount
GetLogicalDriveStringsA
ReleaseSemaphore
GlobalSize
SearchPathA
GetLogicalDrives
SetComPlusPackageInstallStatus
lstrcpyA
EndUpdateResourceA
GetSystemInfo
ChangeTimerQueueTimer
CreateSemaphoreA
GetProcessAffinityMask
GetPrivateProfileStructW
ProcessIdToSessionId
FindActCtxSectionStringA
GetConsoleAliasesA
LZOpenFileW
FindNextVolumeMountPointA
GetMailslotInfo
CancelWaitableTimer
LocalFileTimeToFileTime
CreateDirectoryExA
QueryActCtxW
EnumSystemCodePagesW
GetEnvironmentStrings
GetConsoleMode
PrivMoveFileIdentityW
SetNamedPipeHandleState
IsValidLanguageGroup
ReleaseActCtx
EnterCriticalSection
FreeLibrary
GetTimeFormatW
WriteConsoleW
LZStart
FatalExit
CopyFileW
LCMapStringA
EnumResourceNamesW
GetNumberFormatW
EnumLanguageGroupLocalesA
EraseTape
GetComputerNameA
RtlCaptureContext
CreateProcessInternalA
GetModuleHandleA
CreateJobSet
EnumSystemCodePagesA
GetModuleFileNameW
SetHandleCount
GetCommConfig
GetProfileIntW
GetStdHandle
GetDefaultCommConfigW
GlobalUnWire
GetProcessShutdownParameters
GetComPlusPackageInstallStatus
MoveFileW
GetCompressedFileSizeA
FindCloseChangeNotification
GetCurrentConsoleFont
GetCommState
LZCreateFileW
DeleteFileA
ScrollConsoleScreenBufferW
GetTapeStatus
CancelTimerQueueTimer
GlobalGetAtomNameA
CreateTimerQueue
EnumUILanguagesA
SetThreadPriority
FindClose
GetCurrencyFormatA
DosPathToSessionPathA
EnumResourceLanguagesA
FreeEnvironmentStringsA
GetDiskFreeSpaceExA
GetCommandLineW
GetStringTypeW
ReadConsoleOutputW
GetVolumePathNamesForVolumeNameA
LoadResource
SleepEx
ReadFileEx
SetUnhandledExceptionFilter
CreateThread
HeapFree
BuildCommDCBA
WriteProfileStringW
GetCurrencyFormatW
GetCommModemStatus
FindFirstVolumeMountPointW
IsBadHugeReadPtr
CreateFileMappingA
lstrlen
AllocateUserPhysicalPages
EnumDateFormatsExW
SetErrorMode
GetProfileSectionA
Beep
EnumCalendarInfoExW
QueryDosDeviceW
GetVolumePathNamesForVolumeNameW
HeapWalk
SuspendThread
ConsoleMenuControl
InterlockedCompareExchange
PeekConsoleInputW
CreateMemoryResourceNotification
EnumSystemLanguageGroupsW
ExitThread
SignalObjectAndWait
Heap32ListNext
GetGeoInfoA
CreateEventA
SetCommTimeouts
GetPriorityClass
SetLocaleInfoW
IsBadWritePtr
GetSystemTime
EnumLanguageGroupLocalesW
GetLogicalDriveStringsW
ReadConsoleOutputA
FillConsoleOutputCharacterA
IsBadStringPtrW
SetSystemTimeAdjustment
SetCurrentDirectoryA
FatalAppExitA
WaitForSingleObjectEx
RtlMoveMemory
ConnectNamedPipe
DeleteTimerQueue
GetStartupInfoW
SetFileAttributesW
GetCommMask
GetStartupInfoA
DefineDosDeviceW
WriteConsoleOutputA
HeapSize
VirtualQueryEx
MoveFileExA
RegisterWaitForInputIdle
lstrcatA
FileTimeToSystemTime
DeleteAtom
GetCalendarInfoA
GetTempPathA
RaiseException
HeapAlloc
HeapLock
RtlUnwind
GetDevicePowerState
WriteConsoleOutputW
GetUserDefaultUILanguage
GetCurrentActCtx
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetTickCount
GetLastError
GetLogicalDrives
GetAtomNameA
LZRead
PrivCopyFileExW
SetCalendarInfoW
RtlMoveMemory
SetCommBreak
HeapReAlloc
OpenEventA
FindCloseChangeNotification
VerLanguageNameW
CreateFileMappingW
CreateTapePartition
WriteConsoleInputA
ReleaseMutex
GlobalAddAtomW
GlobalSize
SetFilePointerEx
GetConsoleKeyboardLayoutNameA
LockResource
GetNamedPipeHandleStateA
GetVolumeInformationW
GetCPInfoExW
HeapLock
CompareStringW
GetProfileSectionW
QueryActCtxW
GetSystemTimeAdjustment
PeekConsoleInputW
SetComputerNameA
SetFileShortNameW
GlobalUnWire
SetLocalTime
CreateTimerQueue
InitAtomTable
QueryDosDeviceA
GetLongPathNameA
lstrcpynW
GetDiskFreeSpaceExW
GetDefaultCommConfigA
SystemTimeToTzSpecificLocalTime
GetProcessShutdownParameters
CreateTimerQueueTimer
CreateDirectoryExW
GetNamedPipeHandleStateW
FileTimeToLocalFileTime
OpenWaitableTimerW
EnumTimeFormatsA
GetUserGeoID
ReplaceFileA
LocalFileTimeToFileTime
FillConsoleOutputCharacterA
FormatMessageA
ReadConsoleOutputAttribute
BuildCommDCBAndTimeoutsW
SetHandleCount
GetThreadContext
SwitchToThread
GetVolumePathNameA
GetSystemTime
FindFirstChangeNotificationA
SetCurrentDirectoryW
HeapQueryInformation
GetStartupInfoA
lstrcmpiW
DeleteCriticalSection
FindFirstVolumeW
DeleteVolumeMountPointA
GlobalHandle
CreatePipe
GetConsoleDisplayMode
WaitForDebugEvent
OpenSemaphoreW
SetFileValidData
FindNextVolumeMountPointW
GetCommProperties
EnumSystemLocalesW
VirtualQueryEx
OpenFile
GetLogicalDriveStringsA
VerifyConsoleIoHandle
SetErrorMode
MoveFileW
EnumSystemCodePagesW
MultiByteToWideChar
OutputDebugStringW
GetEnvironmentStrings
OpenFileMappingA
SetComputerNameExA
GetComPlusPackageInstallStatus
QueryPerformanceCounter
SetEvent
GetDriveTypeA
IsValidLanguageGroup
EnumCalendarInfoA
PulseEvent
DefineDosDeviceW
ClearCommBreak
CreateProcessInternalA
ClearCommError
EnumCalendarInfoExA
CreateDirectoryExA
DeleteAtom
GetCalendarInfoW
GetDiskFreeSpaceA
InterlockedCompareExchange
GetDiskFreeSpaceW
GetLongPathNameW
Heap32Next
GetPrivateProfileSectionNamesA
CreateMailslotW
SetDefaultCommConfigW
AddAtomA
SetComputerNameW
RequestDeviceWakeup
UnhandledExceptionFilter
WriteFileGather
GetFileSize
TryEnterCriticalSection
GetCurrentThread
FreeConsole
FindClose
Heap32ListFirst
AssignProcessToJobObject
SetSystemTime
TerminateProcess
ReleaseActCtx
ResetEvent
GetSystemTimeAsFileTime
InterlockedExchangeAdd
GlobalGetAtomNameA
BuildCommDCBW
GetVersionExW
TerminateThread
GetBinaryTypeA
GetLocaleInfoA
GetNativeSystemInfo
GetCommModemStatus
CloseProfileUserMapping
GetPrivateProfileIntW
ReadDirectoryChangesW
CreateFileMappingA
GetConsoleAliasesA
SetCommMask
ReadConsoleOutputA
GetEnvironmentVariableA
InterlockedIncrement
GetThreadPriorityBoost
GetConsoleCharType
GetProcessTimes
RegisterWaitForInputIdle
CommConfigDialogW
FlushInstructionCache
lstrcmpW
CreateEventA
CancelIo
GetModuleFileNameW
OpenJobObjectW
Sleep
DeleteTimerQueueTimer
GetHandleInformation
WritePrivateProfileSectionW
FindFirstFileExA
RemoveDirectoryW
GlobalReAlloc
WritePrivateProfileStringA
QueryPerformanceFrequency
LocalCompact
SetTapeParameters
SetCalendarInfoA
GetComputerNameExW
CreateWaitableTimerA
SetThreadUILanguage
GetTapeStatus
UnlockFile
LockFileEx
GetCPInfo
OpenWaitableTimerA
ExpandEnvironmentStringsA
IsBadWritePtr
AttachConsole
SetUnhandledExceptionFilter
TlsSetValue
WriteFileEx
SetWaitableTimer
ReplaceFile
FatalExit
WriteConsoleOutputCharacterA
ChangeTimerQueueTimer
lstrcmpA
GlobalUnlock
OpenSemaphoreA
ConnectNamedPipe
GetDriveTypeW
SetThreadAffinityMask
SetComPlusPackageInstallStatus
EnumTimeFormatsW
CreateSocketHandle
FindFirstFileExW
EnumSystemGeoID
IsValidCodePage
HeapSetInformation
SystemTimeToFileTime
RtlCaptureContext
FindFirstVolumeMountPointA
lstrlenW
WriteConsoleOutputA
CopyFileExA
ReadConsoleOutputCharacterW
EraseTape
WriteConsoleOutputAttribute
GetEnvironmentVariableW
GetSystemDefaultLCID
ReadConsoleInputW
FindNextFileA
ReadFileScatter
GetTimeFormatA
GetCurrencyFormatA
GetPrivateProfileStructW
HeapCompact
GetProfileIntW
GetBinaryTypeW
FindResourceExA
ReadFileEx
LoadLibraryExA
GetCommandLineW
LocalAlloc
GetTickCount
PropStgNameToFmtId
StgConvertPropertyToVariant
GetSaveFileNameW
ReplaceTextW
ChooseColorA
PageSetupDlgA
LoadAlterBitmap
CommDlgExtendedError
GetFileTitleW
ChooseColorW
dwOKSubclass
FindTextW
GetOpenFileNameA
GetOpenFileNameW
SafeArrayCreateEx
VarCyFromDec
VarDateFromBool
VarR8FromR4
OleCreateFontIndirect
VarI4FromStr
FindExecutableW
SHGetFolderPathAndSubDirW
SHEnableServiceObject
InternalExtractIconListW
ExtractIconExA
SHEmptyRecycleBinW
SHCreateProcessAsUserW
SHGetIconOverlayIndexA
StrRStrIA
StrStrIA
SHBrowseForFolderW
DragQueryPoint
ShellExecuteEx
StrStrIW
DllUnregisterServer
Options_RunDLL
SHLoadNonloadedIconOverlayIdentifiers
SHGetNewLinkInfo
SheChangeDirA
CloseServiceHandle
RegisterEventSourceW
InitializeAcl
WmiFileHandleToInstanceNameW
UpdateTraceW
SetSecurityDescriptorSacl
SaferRecordEventLogEntry
GetTrusteeNameA
RegOpenKeyA
RegQueryValueExW
WTSEnumerateProcessesW
WTSEnumerateServersW
WTSDisconnectSession
WTSVirtualChannelClose
WTSVirtualChannelPurgeInput
WTSVirtualChannelWrite
WTSTerminateProcess
WTSOpenServerA
WTSEnumerateServersA
WTSSetSessionInformationA
WTSVirtualChannelRead
WTSQuerySessionInformationA
WTSQueryUserConfigA
WTSShutdownSystem
WTSQueryUserConfigW
WTSSendMessageA
GdiInitSpool
Chord
EngGetCurrentCodePage
SetRectRgn
SetBitmapDimensionEx
GdiConsoleTextOut
GetEnhMetaFileBits
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ