Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
6548dcd0b78c7df197a24d18f44e2b7a7f044113dc42e4425bada40b3a21c61f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6548dcd0b78c7df197a24d18f44e2b7a7f044113dc42e4425bada40b3a21c61f.exe
Resource
win10v2004-20221111-en
Target
6548dcd0b78c7df197a24d18f44e2b7a7f044113dc42e4425bada40b3a21c61f
Size
1.3MB
MD5
c5531365e459d6f250f7f1b1d42f140c
SHA1
d0f3eb3e62191506a2448e1300bfdad1a0006359
SHA256
6548dcd0b78c7df197a24d18f44e2b7a7f044113dc42e4425bada40b3a21c61f
SHA512
9ff44d15eddeaca267f1e3d7b4422b5e9c85f97f9a815a6b760bf7b586d25882d80ba22e9e10ade7a8c4e9fc0f2c2868c35fc8dcd9b452be6df93859192e71e5
SSDEEP
24576:TGjJZtAXaMb5YpCCNAfGU64giomYhXlZwVBhVS+JbIHICWKotTn+:TGNZpbmfLRgioDXz+BhA3SvVn
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VirtualAlloc
VirtualAllocEx
VirtualFreeEx
TerminateProcess
GetLastError
ReadProcessMemory
WriteProcessMemory
GetThreadContext
ResumeThread
InitializeCriticalSectionAndSpinCount
LoadResource
SizeofResource
LoadLibraryW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
CreateProcessA
FindResourceW
FindResourceExW
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineW
EncodePointer
DecodePointer
HeapFree
HeapAlloc
RaiseException
RtlUnwind
SetLastError
InterlockedIncrement
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetProcessHeap
GetFileType
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsProcessorFeaturePresent
HeapSize
Sleep
HeapReAlloc
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
OutputDebugStringW
LCMapStringW
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
HeapDestroy
FreeLibrary
LockResource
GetEnvironmentStringsW
InterlockedDecrement
LocalFree
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
CoInitializeSecurity
CoSetProxyBlanket
CoInitializeEx
CoCreateInstance
SysFreeString
SysStringByteLen
SysAllocStringByteLen
VariantClear
PathFindFileNameW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ