Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
6ca50a2876303f9b2ac114c44b295b3d108a8a86ea95b4c59834f36fde8f5262.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6ca50a2876303f9b2ac114c44b295b3d108a8a86ea95b4c59834f36fde8f5262.exe
Resource
win10v2004-20221111-en
Target
6ca50a2876303f9b2ac114c44b295b3d108a8a86ea95b4c59834f36fde8f5262
Size
1.3MB
MD5
0a0b0e4e7cf98082273ecc0c89dfcd82
SHA1
badfc59da533c6f4f39d37278b280c33c3d38798
SHA256
6ca50a2876303f9b2ac114c44b295b3d108a8a86ea95b4c59834f36fde8f5262
SHA512
845d103f36bb73ece5514baccdd3b970204c02305bcd4a65c1f0938c414608878af53ce46885b507c2a658f5b123adf84c04f3d225c6d1edad9dab56c68473af
SSDEEP
24576:wprt9au8OGecdnpCmHPaKkdxyHPHVs/twDy0YxbHcvvO48p:wwdnBTkdx6HVs/+8xei
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WideCharToMultiByte
InterlockedDecrement
LockResource
FreeLibrary
GetProcAddress
VirtualAlloc
VirtualAllocEx
VirtualFreeEx
TerminateProcess
ReadProcessMemory
WriteProcessMemory
GetThreadContext
ResumeThread
LoadResource
SizeofResource
LoadLibraryW
GetModuleFileNameW
GetModuleHandleW
CreateProcessA
FindResourceW
FindResourceExW
MultiByteToWideChar
FreeConsole
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
GetModuleFileNameA
GetLastError
LocalFree
CreateFileW
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
GetCommandLineW
EncodePointer
DecodePointer
RtlUnwind
SetLastError
InterlockedIncrement
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsProcessorFeaturePresent
Sleep
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
OutputDebugStringW
LCMapStringW
CloseHandle
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoInitializeEx
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantClear
PathFindFileNameW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ