Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
af830999799b96a0e6d9d2034351aa4a3ef37eb19238d729e5b579baac1ff89d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
af830999799b96a0e6d9d2034351aa4a3ef37eb19238d729e5b579baac1ff89d.exe
Resource
win10v2004-20221111-en
Target
af830999799b96a0e6d9d2034351aa4a3ef37eb19238d729e5b579baac1ff89d
Size
389KB
MD5
b6f44530923ed01c9d8339cfafca2499
SHA1
b478caf17103ecee9bd78e604f76145b910549ef
SHA256
af830999799b96a0e6d9d2034351aa4a3ef37eb19238d729e5b579baac1ff89d
SHA512
185990df0173af4e68c7e0f10bb25b81cfa6ff7441254eb1a41b52a9c3a5dedb8681095c06f41442a7a9979ee14cf4526537592022d15460ece13ea60d5230ad
SSDEEP
3072:Pe41fGxM8/R2ljNjbbYewzYS/nnSXjyV8n167SaaHNhXV3+050jIkTHGGrb/SCdK:mAOOeeNbE0SSzO8163F05kxdb965w2Ug
ExtKeyUsageCodeSigning
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetWindowsDirectoryW
GetModuleHandleA
GetProcAddress
VirtualAllocEx
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
FormatMessageA
GetStartupInfoA
MultiByteToWideChar
GetCommandLineA
lstrlenW
GetCommandLineW
GetVersionExA
HeapAlloc
GetProcessHeap
HeapFree
GetModuleFileNameA
GetModuleFileNameW
WideCharToMultiByte
GetFullPathNameA
ExitProcess
GetLastError
GetStdHandle
GetFileType
CloseHandle
SetEvent
CreateThread
CreateEventA
GetACP
GetPrivateProfileIntA
GetPrivateProfileIntW
GetPrivateProfileStringW
GetPrivateProfileStringA
GetCPInfo
GetTickCount
LoadLibraryA
lstrcmpiA
lstrcmpA
UnmapViewOfFile
CreateFileW
CreateFileA
GetFullPathNameW
CreateFileMappingA
GetFileSize
HeapReAlloc
ReadFile
MapViewOfFile
RegisterClassA
LoadStringW
MessageBoxW
PostThreadMessageA
GetClassInfoA
CreateWindowExA
GetMessageA
GetWindowLongA
SetWindowLongA
PostQuitMessage
SetTimer
DefWindowProcA
GetParent
IsWindowVisible
KillTimer
EnumThreadWindows
SendMessageA
PostMessageA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
LoadStringA
GetActiveWindow
wsprintfA
memcpy
_ftol
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
IsTextUnicode
RegCreateKeyExA
RegSetValueExA
CoCreateInstance
CLSIDFromString
MkParseDisplayName
CoGetClassObject
CLSIDFromProgID
CreateBindCtx
CoUninitialize
CoInitialize
GetFileVersionInfoA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ