Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
c4b9c669a0e636d51d667d13392f12cdd638751a0d544ac70575ce29d70b5865.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c4b9c669a0e636d51d667d13392f12cdd638751a0d544ac70575ce29d70b5865.exe
Resource
win10v2004-20221111-en
Target
c4b9c669a0e636d51d667d13392f12cdd638751a0d544ac70575ce29d70b5865
Size
1.2MB
MD5
d6ec21da3dc5fad33b030238917b2a0f
SHA1
b258ffb86af298727834615e91418732e1b338b1
SHA256
c4b9c669a0e636d51d667d13392f12cdd638751a0d544ac70575ce29d70b5865
SHA512
160c5ed81c39f59db6f2524ca8c3eb44a9b8630d6f0635c3f3ab01fe99d7d9543ddb1d9e0496b328599236644e20120310ee5636401224e6d6d6319758d11f3f
SSDEEP
24576:pXIe1k135jsYx0ySMIAA/9I+8jhIFqpmMcZIKxKf6:pXfyFBIAupqpm1asb
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VirtualAlloc
VirtualAllocEx
VirtualFreeEx
TerminateProcess
GetLastError
ReadProcessMemory
WriteProcessMemory
GetThreadContext
ResumeThread
InitializeCriticalSectionAndSpinCount
LoadResource
SizeofResource
LoadLibraryW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
CreateProcessA
FindResourceW
FindResourceExW
MultiByteToWideChar
WideCharToMultiByte
FreeConsole
GetCommandLineW
EncodePointer
DecodePointer
HeapFree
HeapAlloc
RaiseException
RtlUnwind
SetLastError
InterlockedIncrement
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetProcessHeap
GetFileType
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetProcAddress
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsProcessorFeaturePresent
HeapSize
Sleep
HeapReAlloc
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
OutputDebugStringW
LCMapStringW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
HeapDestroy
FreeLibrary
LockResource
GetSystemTimeAsFileTime
InterlockedDecrement
LocalFree
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
CoInitializeSecurity
CoSetProxyBlanket
CoInitializeEx
CoCreateInstance
SysFreeString
SysStringByteLen
SysAllocStringByteLen
VariantClear
PathFindFileNameW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ