Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
a870cd9064b141b2097ce7127a2970b62c26ed65b1b162357a6b9874240c331c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a870cd9064b141b2097ce7127a2970b62c26ed65b1b162357a6b9874240c331c.exe
Resource
win10v2004-20220901-en
Target
a870cd9064b141b2097ce7127a2970b62c26ed65b1b162357a6b9874240c331c
Size
1.3MB
MD5
f0600a4f8be9117b1e069540bbeb00c9
SHA1
8e517e9d2d5d66b42e3783db03b5ee596a1ac0b0
SHA256
a870cd9064b141b2097ce7127a2970b62c26ed65b1b162357a6b9874240c331c
SHA512
79946d4214a668322869177c95001af39bc9eed8d2219658859584e5969655be4013391962c893c66689e34a0ec9ca0c2e54e81fb6952b978f54e449f44a0a54
SSDEEP
24576:TGjJZtAXaMb5YpCCNAfGU64giomYhXlZwVBhVS+JbIHICWKotTn+70:TGNZpbmfLRgioDXz+BhA3SvVnM0
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VirtualAlloc
VirtualAllocEx
VirtualFreeEx
TerminateProcess
GetLastError
ReadProcessMemory
WriteProcessMemory
GetThreadContext
ResumeThread
InitializeCriticalSectionAndSpinCount
LoadResource
SizeofResource
LoadLibraryW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
CreateProcessA
FindResourceW
FindResourceExW
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineW
EncodePointer
DecodePointer
HeapFree
HeapAlloc
RaiseException
RtlUnwind
SetLastError
InterlockedIncrement
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetProcessHeap
GetFileType
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsProcessorFeaturePresent
HeapSize
Sleep
HeapReAlloc
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
OutputDebugStringW
LCMapStringW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
HeapDestroy
FreeLibrary
LockResource
GetEnvironmentStringsW
InterlockedDecrement
LocalFree
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
CoInitializeSecurity
CoSetProxyBlanket
CoInitializeEx
CoCreateInstance
SysFreeString
SysStringByteLen
SysAllocStringByteLen
VariantClear
PathFindFileNameW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ