Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
Set-up.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Set-up.exe
Resource
win10v2004-20221111-en
Target
Set-up.exe
Size
3.7MB
MD5
6fbff2088cfea23dd7d60afa301debfb
SHA1
e90f64c1c80db4ffff40db27ee12e7e4a406cfbc
SHA256
4eb2362bfbcfceda24906c85d98d28644d6924bd1901f11d127e029281204090
SHA512
884bad538b39678bc32f44d8791548fea891818f6f1c0783ffe21ca9ab2c96906edc4204fa17d30aab9a7daca0ff61c85ac7cc63e2bab4bb3e3d63a32ca62780
SSDEEP
98304:649bk8IrHVxW31GU3FsdQs0iDHJ3Ut3Ta8K:19bkDHVxW31GU3FsdQs0iDHJ3U
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
CM_Get_DevNode_Status
SetupDiGetDeviceInstanceIdW
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryAuthSchemes
WinHttpGetProxyForUrl
WinHttpSendRequest
WinHttpSetCredentials
WinHttpCloseHandle
WinHttpSetStatusCallback
WinHttpQueryOption
WinHttpConnect
WinHttpQueryDataAvailable
WinHttpCrackUrl
WinHttpSetOption
WinHttpOpenRequest
WinHttpQueryHeaders
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpReadData
WinHttpSetTimeouts
WinHttpReceiveResponse
InternetCanonicalizeUrlW
WTSEnumerateSessionsW
WTSFreeMemory
LocalAlloc
CreateFileW
GetFileAttributesW
FormatMessageW
GetDiskFreeSpaceExW
LocalFree
MoveFileExW
GetFileSize
lstrcpyW
lstrcmpiW
lstrcmpW
GetDriveTypeW
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
DeleteCriticalSection
InterlockedDecrement
GetCurrentProcessId
GetVersionExW
SizeofResource
HeapFree
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
HeapSize
LockResource
GlobalAlloc
HeapReAlloc
LoadResource
FindResourceW
HeapAlloc
HeapDestroy
GlobalLock
GetProcessHeap
GlobalUnlock
MulDiv
SetDllDirectoryW
CreateMutexW
ReleaseMutex
WriteFile
SetFilePointer
InitializeCriticalSection
GetFileAttributesExW
CreateSymbolicLinkW
GetFileSizeEx
GetLocalTime
GetTimeFormatW
GetDateFormatW
OpenMutexW
GetUserDefaultUILanguage
CreateEventW
SetEvent
ResetEvent
SystemTimeToFileTime
GetSystemTime
FlushFileBuffers
AreFileApisANSI
HeapCreate
GetFullPathNameW
InterlockedCompareExchange
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
GetFullPathNameA
SetEndOfFile
UnlockFileEx
UnmapViewOfFile
HeapValidate
GetTempPathA
GetDiskFreeSpaceA
ReadFile
OutputDebugStringW
CreateFileA
LoadLibraryA
GetVersionExA
DeleteFileA
GetSystemInfo
HeapCompact
UnlockFile
CreateFileMappingA
LockFileEx
GetSystemTimeAsFileTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
CreateDirectoryW
ReleaseSemaphore
OpenSemaphoreW
CreateSemaphoreW
QueryPerformanceFrequency
WaitForMultipleObjects
GlobalFree
SetLastError
VerifyVersionInfoW
GetUserDefaultLangID
CreateThread
SetNamedPipeHandleState
CreateNamedPipeW
ConnectNamedPipe
ProcessIdToSessionId
FindResourceExW
GetUserDefaultLCID
LCMapStringW
GetTimeZoneInformation
FindFirstFileExW
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
SetStdHandle
EnumSystemLocalesW
IsValidLocale
GetACP
GetStdHandle
GetModuleHandleExW
ExitProcess
GetFileType
LoadLibraryExW
RtlUnwind
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
GetCPInfo
GetLocaleInfoW
CompareStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
GetStringTypeW
WideCharToMultiByte
CopyFileW
FreeLibrary
CreateProcessW
GetProcAddress
LoadLibraryW
CloseHandle
Process32FirstW
DeleteFileW
Process32NextW
GetLastError
Sleep
MultiByteToWideChar
CreateToolhelp32Snapshot
SetFileAttributesW
OpenProcess
WaitForSingleObject
FindClose
GetTempPathW
GetModuleFileNameW
RemoveDirectoryW
TerminateProcess
GetCurrentProcess
FindNextFileW
FindFirstFileW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
VerSetConditionMask
GetFileAttributesA
GetSystemMenu
GetSystemMetrics
LoadIconW
EnableMenuItem
SystemParametersInfoW
LoadImageW
PostThreadMessageW
wsprintfW
GetWindowRect
GetWindowLongW
GetWindowThreadProcessId
GetWindowTextLengthW
AllowSetForegroundWindow
LoadCursorW
GetClassNameW
SetCapture
SetWindowLongW
GetClientRect
GetDlgItem
PostQuitMessage
GetDesktopWindow
GetClassInfoExW
GetParent
RegisterWindowMessageW
ReleaseCapture
SetForegroundWindow
InvalidateRect
IsIconic
ReleaseDC
BeginPaint
EndPaint
GetWindowTextW
UnregisterClassW
GetClassLongW
AppendMenuW
GetAsyncKeyState
SetClassLongW
TranslateMessage
TranslateAcceleratorW
BringWindowToTop
GetMessageW
DefWindowProcW
CallWindowProcW
CharNextW
SetFocus
CreateAcceleratorTableW
MoveWindow
GetForegroundWindow
PostMessageW
GetWindow
GetSysColor
AttachThreadInput
IsChild
DestroyAcceleratorTable
ClientToScreen
RedrawWindow
DispatchMessageW
InvalidateRgn
IsWindow
ShowWindow
GetActiveWindow
RegisterClassExW
SetWindowTextW
SendMessageW
ScreenToClient
CreateWindowExW
FillRect
SetWindowPos
GetFocus
DestroyWindow
GetDC
MessageBoxW
GetStockObject
DeleteDC
SelectObject
CreateCompatibleBitmap
GetObjectW
CreateSolidBrush
GetDeviceCaps
DeleteObject
CreateCompatibleDC
BitBlt
RegFlushKey
RegCreateKeyExW
FreeSid
RegSetValueExW
LookupAccountSidW
GetUserNameW
SystemFunction036
RegCloseKey
RegOpenKeyExW
InitializeSecurityDescriptor
RegQueryValueExW
SetSecurityDescriptorDacl
SetEntriesInAclW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
AllocateAndInitializeSid
ImpersonateLoggedOnUser
ConvertStringSidToSidW
RevertToSelf
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
CreateWellKnownSid
SHGetFolderLocation
SHGetKnownFolderPath
ShellExecuteW
CommandLineToArgvW
ord680
SHCreateDirectoryExW
SHGetSpecialFolderPathW
SHGetFolderPathW
SHGetPathFromIDListW
ShellExecuteExW
SHGetMalloc
SHBrowseForFolderW
SHGetSpecialFolderLocation
OleUninitialize
CoGetClassObject
CoTaskMemFree
OleLockRunning
CoTaskMemAlloc
CoReleaseServerProcess
CLSIDFromString
CoInitialize
CLSIDFromProgID
CreateStreamOnHGlobal
OleInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
CoAddRefServerProcess
CoInitializeSecurity
CoInitializeEx
StringFromGUID2
OleRun
CoSetProxyBlanket
SysStringLen
VariantClear
SysAllocStringLen
SysAllocString
OleCreateFontIndirect
SysFreeString
LoadTypeLi
VariantInit
LoadRegTypeLi
SysAllocStringByteLen
VariantChangeType
VariantCopy
SysStringByteLen
DispCallFunc
GetErrorInfo
PathAppendW
PathIsFileSpecW
PathAddExtensionW
PathRemoveExtensionW
PathIsNetworkPathW
PathRenameExtensionW
PathIsRootW
PathAddBackslashW
PathFindFileNameW
PathStripToRootW
PathIsDirectoryW
UrlIsW
PathFileExistsW
PathRemoveFileSpecW
CertGetIssuerCertificateFromStore
CertGetNameStringW
WTHelperGetProvCertFromChain
WinVerifyTrust
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
InitCommonControlsEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ