Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
CiscoWebExStart.exe
Resource
win7-20220812-es
Behavioral task
behavioral2
Sample
CiscoWebExStart.exe
Resource
win10v2004-20221111-es
Target
CiscoWebExStart.exe
Size
5.8MB
MD5
5965fa079f81a14eac278fe98072814d
SHA1
dd4057ad0090bd7197b02ae766b3cacf35a71995
SHA256
37ef86cbaea7b69b5619359eb7ea9ccaca280fb38622bf6a29dbabb23a2722b6
SHA512
20fb611a49a68d9b830eea28b20f2f5332b65c3831e2136669508a6522a549bb8ee0a868a243cedd37ef456f6c25eaf2ea5f07e74f73f1af7ea8ac440a99e9a9
SSDEEP
98304:wVv+B8iT7h8k/teRaSovMyP01GJveLbpn1bCecR6fTD613ckd0ufe4wPINEpdfXT:1KiuWJSwiGJvmVS5UPMOND
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=Cisco WebEx LLC,O=Cisco WebEx LLC,L=San Jose,ST=California,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Cisco WebEx LLC,O=Cisco WebEx LLC,L=San Jose,ST=California,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WinVerifyTrust
CertFreeCertificateContext
CertGetNameStringW
CryptVerifyMessageSignature
CertGetCertificateChain
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CryptProtectData
CryptUnprotectData
CertComparePublicKeyInfo
ImageGetCertificateHeader
ImageEnumerateCertificates
ImageGetCertificateData
GetSystemDirectoryW
lstrcmpW
lstrcmpiA
GlobalFree
InitializeCriticalSection
GetTickCount
ReleaseMutex
CreateFileMappingW
OpenFileMappingW
OpenMutexW
WritePrivateProfileStringW
WritePrivateProfileSectionW
ResetEvent
CreateEventW
LCIDToLocaleName
OpenFileMappingA
CreateMutexA
CompareFileTime
CreateEventA
TerminateThread
SetThreadUILanguage
GetThreadUILanguage
GetLocaleInfoW
GetLogicalDriveStringsW
GlobalMemoryStatusEx
GlobalAlloc
WaitForMultipleObjects
GetCommandLineA
CreateDirectoryA
CreateFileA
DeleteFileA
FindFirstFileA
FindNextFileA
GetFileAttributesA
GetFileAttributesW
SetEndOfFile
SetFileAttributesA
SetFileAttributesW
SetFilePointerEx
GetTempPathA
GetTempFileNameA
OpenEventA
GetVersionExA
GetModuleFileNameA
GetModuleHandleA
LoadLibraryA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
CopyFileA
MoveFileExA
EnumSystemGeoID
QueryDosDeviceW
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
GetLocalTime
VirtualQuery
FlushViewOfFile
lstrcmpiW
OpenFile
GetOEMCP
AreFileApisANSI
TryEnterCriticalSection
HeapCreate
GetFullPathNameW
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
GetFullPathNameA
UnlockFileEx
HeapValidate
GetDiskFreeSpaceA
WaitForSingleObjectEx
GetSystemTime
HeapCompact
FormatMessageW
LockFileEx
FlushFileBuffers
ExpandEnvironmentStringsW
K32GetMappedFileNameW
SetUnhandledExceptionFilter
SetErrorMode
IsBadStringPtrA
GetLocaleInfoEx
LoadLibraryExW
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SignalObjectAndWait
CreateTimerQueue
GetStartupInfoW
UnhandledExceptionFilter
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
LCMapStringW
CompareStringW
TlsFree
TlsSetValue
TlsGetValue
GetDriveTypeW
InitializeCriticalSectionAndSpinCount
GetCPInfo
EncodePointer
SetFileTime
GetFileInformationByHandle
DuplicateHandle
FindFirstFileExW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetExitCodeThread
SwitchToThread
InitOnceComplete
InitOnceBeginInitialize
GetStringTypeW
ReleaseSemaphore
InterlockedFlushSList
FindNextFileW
FindFirstFileW
QueryDepthSList
UnregisterWaitEx
RtlUnwind
ExitThread
GetModuleHandleExW
GetTimeZoneInformation
ExitProcess
GetFileType
SetStdHandle
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
GetFileSizeEx
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
FileTimeToLocalFileTime
MoveFileExW
CopyFileW
GetTempPathW
RemoveDirectoryW
GetTempFileNameW
GetLongPathNameW
UnlockFile
EnumSystemLocalesW
IsValidCodePage
GetACP
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
FreeResource
GetWindowsDirectoryW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrlenW
lstrlenA
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetUserGeoID
GetGeoInfoW
GetModuleHandleW
IsWow64Process
IsProcessInJob
ReadProcessMemory
OpenProcess
GetProcessId
CreateProcessW
GetCurrentThread
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
SetEnvironmentVariableW
GetEnvironmentVariableW
GetSystemDefaultLangID
lstrcpynW
LoadLibraryW
GetProcAddress
FreeLibrary
GetVersionExW
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
MultiByteToWideChar
FormatMessageA
GetModuleFileNameW
Sleep
CreateThread
WaitForSingleObject
WriteFile
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
FindResourceExW
GetStdHandle
OpenEventW
SetEvent
SetFilePointer
ReadFile
GetFileSize
CreateFileW
GetCommandLineW
IsBadReadPtr
LocalFree
GetCurrentThreadId
CreateMutexW
LeaveCriticalSection
EnterCriticalSection
SetLastError
CloseHandle
GetTickCount64
GetCurrentProcessId
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
VirtualProtect
GetFileAttributesExW
FindClose
DeleteFileW
CreateDirectoryW
SystemTimeToFileTime
FileTimeToSystemTime
TlsAlloc
GetSystemTimeAsFileTime
GetSystemInfo
DrawTextW
ChangeWindowMessageFilterEx
LoadIconW
SetCursor
MessageBoxExW
SetWindowTextA
SetPropW
SetPropA
SetForegroundWindow
SetActiveWindow
UpdateWindow
KillTimer
SetFocus
DefDlgProcW
CreateDialogParamW
BringWindowToTop
AttachThreadInput
wvsprintfW
FindWindowW
SendMessageTimeoutW
wsprintfW
FindWindowExA
GetClientRect
SendMessageA
RegisterClassW
RegisterWindowMessageW
WaitForInputIdle
MonitorFromWindow
GetWindowRect
SetWindowTextW
GetSystemMetrics
GetDlgItem
IsWindowVisible
MoveWindow
ShowWindow
MessageBoxW
GetPropA
SendMessageTimeoutA
LoadStringW
PostThreadMessageW
GetWindowTextW
CallWindowProcW
GetForegroundWindow
GetWindowLongW
SetTimer
DefWindowProcW
SendMessageW
PeekMessageW
GetWindowThreadProcessId
GetShellWindow
GetMonitorInfoW
MonitorFromPoint
GetCursorPos
ReleaseDC
GetDC
FindWindowExW
GetPropW
PostMessageW
LoadCursorW
GetDesktopWindow
SetWindowLongW
DestroyWindow
IsWindow
CreateWindowExW
GetClassInfoExW
RegisterClassExW
PostQuitMessage
DispatchMessageW
TranslateMessage
GetMessageW
UnregisterClassW
LoadImageW
DialogBoxParamW
SetWindowPos
CreateDialogIndirectParamW
SelectObject
GetTextExtentPoint32W
GetStockObject
DeleteObject
GetDeviceCaps
CreateFontIndirectW
SetTextColor
SHGetPathFromIDListA
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteExA
CommandLineToArgvW
ShellExecuteW
ShellExecuteExW
SHFileOperationW
CoUninitialize
CoInitialize
CoCreateInstance
CoCreateGuid
CoTaskMemFree
GetNamedSecurityInfoW
StartServiceW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
ConvertSidToStringSidW
RegDeleteTreeA
RegSetValueExA
RegSetValueW
RegSetValueA
RegQueryValueExA
RegQueryValueW
RegQueryValueA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyW
RegOpenKeyA
RegFlushKey
RegEnumValueW
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW
RegCreateKeyExA
RegCreateKeyA
RegDeleteTreeW
RegSetValueExW
RegDeleteValueW
RegCreateKeyW
CryptDecrypt
CryptEncrypt
CryptImportKey
CryptExportKey
CryptGetUserKey
CryptDestroyKey
CryptDeriveKey
CryptGenKey
LookupAccountSidW
GetUserNameW
RegEnumKeyExW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RevertToSelf
MapGenericMask
ImpersonateSelf
GetFileSecurityW
AccessCheck
SetNamedSecurityInfoW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
CreateProcessWithTokenW
SetTokenInformation
SetFileSecurityW
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
GetSecurityDescriptorSacl
GetLengthSid
FreeSid
EqualSid
DuplicateTokenEx
AllocateAndInitializeSid
OpenThreadToken
OpenProcessToken
CreateProcessAsUserW
ConvertStringSecurityDescriptorToSecurityDescriptorW
QueryServiceStatus
OpenServiceW
OpenSCManagerW
CloseServiceHandle
PathBuildRootW
PathCanonicalizeA
StrChrIW
PathFindFileNameW
PathAppendW
SHDeleteKeyW
SHDeleteKeyA
PathFileExistsA
PathGetDriveNumberW
PathFileExistsW
InitCommonControlsEx
CoInternetParseUrl
ObtainUserAgentString
AuthzFreeResourceManager
AuthzInitializeResourceManager
AuthzAccessCheck
AuthzInitializeContextFromToken
AuthzFreeContext
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
InternetErrorDlg
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetSetOptionW
InternetSetOptionA
InternetQueryOptionW
InternetQueryOptionA
InternetReadFile
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetCrackUrlA
HttpQueryInfoW
HttpAddRequestHeadersW
InternetCrackUrlW
InternetOpenW
InternetConnectW
InternetReadFileExA
InternetReadFileExW
HttpOpenRequestW
HttpSendRequestW
SetWindowTheme
GetPrinterDriverDirectoryW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ