Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
c4ea610ad2ef95b70e3807d427cb6678107d4aaf57002907915e5dc361e6c3ce.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c4ea610ad2ef95b70e3807d427cb6678107d4aaf57002907915e5dc361e6c3ce.exe
Resource
win10v2004-20220901-en
Target
c4ea610ad2ef95b70e3807d427cb6678107d4aaf57002907915e5dc361e6c3ce
Size
927KB
MD5
6cc5f639f5768f33878ca5bad649b205
SHA1
ea1592a4965c9fc65ff65c870a5e693796d66009
SHA256
c4ea610ad2ef95b70e3807d427cb6678107d4aaf57002907915e5dc361e6c3ce
SHA512
0771fef9675f309ad9484b59d049e81fff51d48e192c556b929d740556ae37283c5715dd913dc6b782ef9fa4e2cd71f3b6f64c1cd8954045c37759fd8b22eb17
SSDEEP
12288:RQU9XiuinpHcgvm09tbgYdg+dFfm8I2dGrQwTj/dRPZk3TtEm5fsLAlViatlUKVf:RQUdHEv+k1rdFev2EswT+j7EUlAwb
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SizeofResource
FindResourceA
LoadResource
GetStringTypeA
LCMapStringW
LockResource
CreateFileA
WriteFile
CloseHandle
lstrlenA
GetWindowsDirectoryA
GetModuleHandleA
WinExec
LCMapStringA
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
GetStringTypeW
wsprintfA
RegOpenKeyA
RegCreateKeyA
RegSetValueExA
RegCloseKey
CoUninitialize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ