Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
Setup_Win_21-01-2023_17-35-38.exe
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
Setup_Win_21-01-2023_17-35-38.exe
Resource
win7-20221111-en
Target
Setup_Win_21-01-2023_17-35-40.zip
Size
928KB
MD5
388838c3eb36d2fa0bdcd9e1e9919676
SHA1
2aa5fdeb9749ae7bd7e2ea31be71097d4980b4db
SHA256
f178abf5131c3eaf68a1584c2759d8b29418a8aa5b9f95bfd1def0be2c23c97e
SHA512
47f4439f189b00c7a163dd12ef1d776b53ef69c0ce35944b5ad4976a27a587620a8751f055f0d641359696aea13281be94ccc18ee33e7d61b89329f83c14744c
SSDEEP
6144:hjIoF1DbuRZbZYa+SxVK0WWfMKlz/4i7k0To4cPwV:lF1WRlOSxczWEKuP0
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
SERIALNUMBER=389470690,CN=M-Trans Maciej Caban,O=M-Trans Maciej Caban,POSTALCODE=96-100,STREET=Sucharskiego 2 lok. 31,L=Skierniewice,C=PL,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#1302504c
CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
SERIALNUMBER=389470690,CN=M-Trans Maciej Caban,O=M-Trans Maciej Caban,POSTALCODE=96-100,STREET=Sucharskiego 2 lok. 31,L=Skierniewice,C=PL,2.5.4.15=#130f427573696e65737320456e74697479,1.3.6.1.4.1.311.60.2.1.3=#1302504c
CN=Certum Extended Validation Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
ChooseFontA
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
BitBlt
CloseEnhMetaFile
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCA
CreateEnhMetaFileA
CreateFontIndirectA
CreatePen
CreateSolidBrush
DPtoLP
DeleteDC
DeleteEnhMetaFile
DeleteObject
EndDoc
EndPage
GetDeviceCaps
GetEnhMetaFileA
GetEnhMetaFileHeader
GetMapMode
GetObjectA
GetObjectType
GetStockObject
GetTextExtentPoint32A
LineTo
MoveToEx
PlayEnhMetaFile
RestoreDC
SaveDC
SelectObject
SetBkColor
SetMapMode
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
StartDocA
StartPage
AddAtomA
CloseHandle
CreateEventA
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
FindAtomA
GetAtomNameA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetHandleInformation
GetLastError
GetModuleHandleW
GetProcAddress
GetProcessAffinityMask
GetStartupInfoA
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReleaseMutex
ReleaseSemaphore
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
__C_specific_handler
___lc_codepage_func
__dllonexit
__doserrno
__getmainargs
__initenv
__iob_func
__lconv_init
__mb_cur_max
__pioinfo
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthreadex
_cexit
_endthreadex
_errno
_fdopen
_filelengthi64
_fileno
_fileno
_fmode
_fstat64
_ftime
_initterm
_lock
_lseeki64
_onexit
_read
_setjmp
_strnicmp
_unlock
_write
_write
abort
calloc
exit
fclose
fflush
fgetpos
fopen
fprintf
fputc
fputs
fread
free
fsetpos
fwrite
getc
getenv
getwc
isspace
iswctype
localeconv
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
printf
putc
putwc
rand
realloc
setlocale
setvbuf
signal
sprintf
strcmp
strcoll
strerror
strftime
strlen
strncmp
strxfrm
towlower
towupper
ungetc
ungetwc
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
BeginPaint
CreateWindowExA
DefWindowProcA
DestroyWindow
DialogBoxParamA
DispatchMessageA
DrawTextA
EnableWindow
EndDialog
EndPaint
FillRect
GetClientRect
GetMessageA
InvalidateRect
LoadAcceleratorsA
LoadCursorA
LoadIconA
LoadStringA
MessageBoxA
MessageBoxW
PostQuitMessage
RegisterClassExA
SendMessageA
ShowWindow
TranslateAcceleratorA
TranslateMessage
UpdateWindow
ClosePrinter
DocumentPropertiesA
OpenPrinterA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE