Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
Set-up.exe
Resource
win7-20220812-es
Behavioral task
behavioral2
Sample
Set-up.exe
Resource
win10v2004-20221111-es
Target
Set-up.exe
Size
3.6MB
MD5
a889d7907fcd2895f008fb02cf07554e
SHA1
02501b25458563c3060fa0c70bf4b80cd8cc6a24
SHA256
2b8af02ea0bf7c43044ad4fdfcf9745e1ddb2c0ad0123ce196c987c0679c21c7
SHA512
b132ffe38b490ac7615afe42ef563092bf49a60794ea0c3c51a0c56c876b9890e166e079160c437be0b1a13820bf65eee6b0e4d069efcd558e6d0c0a1e75e25f
SSDEEP
49152:ILkEwEukVOFbZIP2WUqBTW9uhU67Sy5Bp8TVkTOS:IghEueibiPpU
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
CM_Get_DevNode_Status
SetupDiGetDeviceInstanceIdW
InitCommonControlsEx
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryAuthSchemes
WinHttpGetProxyForUrl
WinHttpSendRequest
WinHttpReadData
WinHttpSetTimeouts
WinHttpSetStatusCallback
WinHttpQueryOption
WinHttpConnect
WinHttpQueryDataAvailable
WinHttpCrackUrl
WinHttpQueryHeaders
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpSetCredentials
WinHttpReceiveResponse
InternetCanonicalizeUrlW
ReadFile
SetLastError
LocalAlloc
CreateFileW
GetFileAttributesW
FormatMessageW
GetDiskFreeSpaceExW
LocalFree
MoveFileExW
GetFileSize
lstrcpyW
lstrcmpW
GetDriveTypeW
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
DeleteCriticalSection
SizeofResource
HeapFree
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
HeapSize
LockResource
GlobalAlloc
HeapReAlloc
FindResourceExW
LoadResource
FindResourceW
HeapAlloc
HeapDestroy
GlobalLock
GetProcessHeap
GlobalUnlock
MulDiv
InterlockedDecrement
InterlockedIncrement
GetCurrentProcessId
GetVersionExW
GetCommandLineW
SetEvent
SetDllDirectoryW
CreateMutexW
ReleaseMutex
WriteFile
SetFilePointer
InitializeCriticalSection
GetFileSizeEx
GetLocalTime
GetTimeFormatW
GetDateFormatW
OpenMutexW
GetUserDefaultUILanguage
CreateEventW
ResetEvent
SystemTimeToFileTime
GetSystemTime
FlushFileBuffers
AreFileApisANSI
HeapCreate
GetFullPathNameW
InterlockedCompareExchange
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
GetFullPathNameA
SetEndOfFile
UnlockFileEx
UnmapViewOfFile
HeapValidate
GetTempPathA
GetDiskFreeSpaceA
WideCharToMultiByte
GetFileAttributesExW
OutputDebugStringW
CreateFileA
LoadLibraryA
GetVersionExA
DeleteFileA
GetSystemInfo
HeapCompact
UnlockFile
CreateFileMappingA
LockFileEx
GetSystemTimeAsFileTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
CreateDirectoryW
ReleaseSemaphore
OpenSemaphoreW
CreateSemaphoreW
QueryPerformanceFrequency
GlobalFree
VerSetConditionMask
VerifyVersionInfoW
GetUserDefaultLangID
CreateThread
SetNamedPipeHandleState
CreateNamedPipeW
ConnectNamedPipe
GetUserDefaultLCID
LCMapStringW
GetTimeZoneInformation
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
SetStdHandle
EnumSystemLocalesW
IsValidLocale
GetACP
GetStdHandle
GetModuleHandleExW
ExitProcess
GetFileType
LoadLibraryExW
RtlUnwind
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
GetCPInfo
GetLocaleInfoW
CompareStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
GetStringTypeW
CopyFileW
FreeLibrary
CreateProcessW
GetProcAddress
LoadLibraryW
CloseHandle
DeleteFileW
GetLastError
Sleep
MultiByteToWideChar
SetFileAttributesW
WaitForSingleObject
FindClose
GetTempPathW
GetModuleFileNameW
RemoveDirectoryW
TerminateProcess
GetCurrentProcess
FindNextFileW
FindFirstFileW
WriteConsoleW
WaitForMultipleObjects
GetFileAttributesA
wsprintfW
EnableMenuItem
GetWindowThreadProcessId
GetMessageW
GetSystemMetrics
GetActiveWindow
DispatchMessageW
AttachThreadInput
GetForegroundWindow
BringWindowToTop
TranslateAcceleratorW
MoveWindow
GetSysColor
IsChild
AllowSetForegroundWindow
CreateAcceleratorTableW
SetFocus
CharNextW
LoadCursorW
GetClassNameW
SetCapture
SetWindowLongW
GetClientRect
GetDlgItem
AppendMenuW
GetClassLongW
GetDesktopWindow
GetClassInfoExW
GetParent
RegisterWindowMessageW
ReleaseCapture
InvalidateRect
ReleaseDC
BeginPaint
EndPaint
GetWindowTextW
UnregisterClassW
DestroyAcceleratorTable
ClientToScreen
TranslateMessage
LoadIconW
PostThreadMessageW
RedrawWindow
GetAsyncKeyState
InvalidateRgn
IsWindow
SetClassLongW
ShowWindow
RegisterClassExW
SetWindowTextW
SendMessageW
ScreenToClient
CreateWindowExW
FillRect
SetWindowPos
GetDC
DestroyWindow
GetFocus
GetWindow
PostMessageW
CallWindowProcW
GetSystemMenu
DefWindowProcW
GetWindowTextLengthW
SystemParametersInfoW
LoadImageW
IsIconic
GetWindowRect
MessageBoxW
GetWindowLongW
PostQuitMessage
GetDeviceCaps
GetStockObject
GetObjectW
DeleteObject
CreateCompatibleDC
SelectObject
CreateSolidBrush
BitBlt
DeleteDC
CreateCompatibleBitmap
GetUserNameW
RegQueryValueExW
SetSecurityDescriptorDacl
AllocateAndInitializeSid
FreeSid
SetEntriesInAclW
InitializeSecurityDescriptor
SystemFunction036
RegCloseKey
RegFlushKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
ShellExecuteW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
SHGetFolderPathW
SHGetPathFromIDListW
SHGetFolderLocation
ShellExecuteExW
SHGetMalloc
SHBrowseForFolderW
SHGetSpecialFolderLocation
ord680
CommandLineToArgvW
CoAddRefServerProcess
OleLockRunning
CLSIDFromString
OleInitialize
CoInitialize
CLSIDFromProgID
CoReleaseServerProcess
CoTaskMemAlloc
OleUninitialize
CoGetClassObject
CoTaskMemFree
StringFromGUID2
CoCreateGuid
CoCreateInstance
CoUninitialize
CoSetProxyBlanket
CoInitializeSecurity
CoRevokeClassObject
OleRun
CreateStreamOnHGlobal
CoInitializeEx
VariantClear
SysAllocStringLen
SysStringLen
DispCallFunc
VariantCopy
SysAllocString
SysAllocStringByteLen
SysStringByteLen
OleCreateFontIndirect
SysFreeString
LoadTypeLi
VariantInit
LoadRegTypeLi
VariantChangeType
GetErrorInfo
PathAppendW
PathIsFileSpecW
PathAddExtensionW
PathRemoveExtensionW
PathIsNetworkPathW
PathRenameExtensionW
PathIsRootW
PathAddBackslashW
PathFindFileNameW
PathStripToRootW
PathIsDirectoryW
PathFileExistsW
PathRemoveFileSpecW
UrlIsW
CertGetIssuerCertificateFromStore
CertGetNameStringW
WTHelperGetProvSignerFromChain
WinVerifyTrust
WTHelperProvDataFromStateData
WTHelperGetProvCertFromChain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ