Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
766c822f40f0d3c0b03f6b3c3443392aa98057d2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
766c822f40f0d3c0b03f6b3c3443392aa98057d2.exe
Resource
win10v2004-20220812-en
Target
766c822f40f0d3c0b03f6b3c3443392aa98057d2
Size
13.3MB
MD5
f0426b82915e09cef391963de9760512
SHA1
766c822f40f0d3c0b03f6b3c3443392aa98057d2
SHA256
9a973feeac194b30f728c99db8a3b0455ba5fa6943d6bd931ed4d4a480c0e72c
SHA512
1971dfbc07222806fc7efdb4842a3c495d2422892e00295aaf49f73b0294c7be2db9b996685468f709d926e4d7cf91dc3e8d07750f2cc2d17c80b63e4d78dfbd
SSDEEP
98304:j94jMT5dqxQ7GO5DZSv0KsFKN2GQRPQXP3KJ2grs8GPxTr1WhesDHKYEJwcdoA:h4jUMv0KsQPrdPxT4Un/
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
CN=PUYBARET EMMANUEL,OU=IT,O=PUYBARET EMMANUEL,POSTALCODE=75015,STREET=35 rue de Chambery,L=Paris,ST=Ile de France,C=FR
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=PUYBARET EMMANUEL,OU=IT,O=PUYBARET EMMANUEL,POSTALCODE=75015,STREET=35 rue de Chambery,L=Paris,ST=Ile de France,C=FR
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
__WSAFDIsSet
WSASetLastError
socket
ntohs
htons
WSACreateEvent
select
send
getsockname
getpeername
WSACleanup
WSAStartup
freeaddrinfo
getaddrinfo
getsockopt
connect
shutdown
WSAIoctl
recv
WSASend
WSAGetOverlappedResult
WSARecv
WSASocketW
closesocket
accept
bind
WSAGetLastError
ioctlsocket
setsockopt
htonl
listen
WSACloseEvent
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertFindExtension
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertFindCertificateInStore
CertDuplicateCertificateChain
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertGetCertificateChain
CertDuplicateStore
CertAddCertificateContextToStore
CertCloseStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetEnhancedKeyUsage
CertEnumCertificatesInStore
CertOpenStore
RtlNtStatusToDosError
NtQueryInformationProcess
RtlVirtualUnwind
NtQuerySystemInformation
RtlUnwindEx
RtlPcToFileHeader
NtCancelIoFileEx
NtCreateFile
NtDeviceIoControlFile
RtlCaptureContext
RtlLookupFunctionEntry
RtlGetVersion
VerSetConditionMask
RtlGetNtVersionNumbers
DecryptMessage
QueryContextAttributesW
FreeContextBuffer
FreeCredentialsHandle
AcceptSecurityContext
ApplyControlToken
DeleteSecurityContext
AcquireCredentialsHandleA
EncryptMessage
InitializeSecurityContextW
TzSpecificLocalTimeToSystemTime
GetProcessIoCounters
GetSystemTimes
VirtualQueryEx
ReadProcessMemory
GetProcessTimes
ExitProcess
SetConsoleTextAttribute
CreateEventW
GetOverlappedResult
WaitForMultipleObjects
CreateThread
GetFileAttributesW
CreateProcessW
GetWindowsDirectoryW
LoadLibraryExW
GetHandleInformation
InitializeSRWLock
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitOnceExecuteOnce
InitializeCriticalSectionEx
GetSystemDirectoryA
GetTickCount
MultiByteToWideChar
MoveFileExA
GetEnvironmentVariableA
VerifyVersionInfoW
CreateFileA
GetCurrentThreadId
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CancelIo
GetFileSizeEx
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
RaiseException
IsDebuggerPresent
InitializeSListHead
GetSystemDirectoryW
CompareStringOrdinal
FreeEnvironmentStringsW
GetEnvironmentStringsW
FindFirstFileW
GetFinalPathNameByHandleW
GetFullPathNameW
GetFileInformationByHandle
GetCommandLineW
GetModuleFileNameW
GetTempPathW
GetProcessHeap
HeapAlloc
HeapFree
CloseHandle
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetSystemInfo
GetStdHandle
HeapReAlloc
FindNextFileW
GetLastError
DeleteFileW
FindClose
GetCurrentProcess
GetComputerNameExW
GetTickCount64
GlobalMemoryStatusEx
GetDiskFreeSpaceExW
Sleep
CreateDirectoryW
QueryPerformanceCounter
QueryPerformanceFrequency
CreateFileW
GetConsoleMode
SetConsoleMode
SleepConditionVariableSRW
GetConsoleScreenBufferInfo
AddVectoredExceptionHandler
SetThreadStackGuarantee
ReleaseMutex
GetCurrentThread
WaitForSingleObjectEx
LoadLibraryA
GetProcAddress
CreateMutexA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GetTimeZoneInformation
GetSystemTimeAsFileTime
WakeAllConditionVariable
GetModuleHandleW
GetCurrentProcessId
LocalAlloc
CreateNamedPipeW
LocalFree
WaitForSingleObject
GetExitCodeProcess
SwitchToThread
ReadFile
WriteConsoleW
ReadConsoleW
CancelIoEx
OpenProcess
lstrlenW
WakeConditionVariable
UnmapViewOfFile
GetFileInformationByHandleEx
TryAcquireSRWLockExclusive
CreateFileMappingW
MapViewOfFile
DuplicateHandle
VirtualProtect
GetQueuedCompletionStatusEx
CreateIoCompletionPort
SetFileCompletionNotificationModes
PostQueuedCompletionStatus
SetHandleInformation
FreeLibrary
GetModuleHandleA
SleepEx
ReadFileEx
ReleaseSRWLockShared
AcquireSRWLockShared
TerminateProcess
CreateJobObjectW
SetInformationJobObject
AssignProcessToJobObject
DeviceIoControl
SetLastError
WriteFileEx
GetNativeSystemInfo
SetFilePointerEx
GetCurrentDirectoryW
GetEnvironmentVariableW
FormatMessageW
SafeArrayDestroy
SysFreeString
SysAllocString
VariantClear
SafeArrayUnaccessData
SafeArrayAccessData
GetErrorInfo
SysStringLen
SafeArrayGetUBound
SafeArrayGetLBound
SysAllocStringLen
CoInitializeEx
CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoSetProxyBlanket
CoTaskMemFree
PdhCollectQueryData
PdhGetFormattedCounterValue
PdhCloseQuery
PdhOpenQueryA
PdhRemoveCounter
PdhAddEnglishCounterW
BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteW
SHGetKnownFolderPath
CryptAcquireContextA
CryptGetHashParam
GetUserNameW
GetTokenInformation
OpenProcessToken
CryptCreateHash
CryptHashData
IsWellKnownSid
DuplicateTokenEx
CheckTokenMembership
CreateWellKnownSid
CryptDestroyHash
LookupAccountSidW
SystemFunction036
AccessCheck
MapGenericMask
RegOpenKeyExW
RegQueryValueExW
DuplicateToken
RegCloseKey
GetFileSecurityW
EqualSid
CryptReleaseContext
OpenThreadToken
GetNamedSecurityInfoW
MessageBoxW
GetSystemMetrics
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
PathIsNetworkPathW
GetIfEntry2
CallNtPowerInformation
GetModuleFileNameExW
GetPerformanceInfo
strspn
strpbrk
strcmp
strlen
wcsncmp
_strdup
strncmp
strncpy
strcspn
strcpy_s
wcslen
__setusermatherr
round
roundf
fmod
_fdopen
log
_set_app_type
_configure_narrow_argv
_initialize_narrow_environment
_beginthreadex
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
__p___argc
__p___argv
_cexit
__sys_nerr
__sys_errlist
_register_thread_local_exe_atexit_callback
abort
_errno
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_seh_filter_exe
_c_exit
_wassert
realloc
malloc
calloc
_set_new_mode
_aligned_free
_aligned_malloc
free
strtoul
strtol
wcstombs
strtoll
atoi
_read
_write
_set_fmode
__p__commode
_close
_lseeki64
fgets
__acrt_iob_func
fread
fseek
fwrite
_open
fopen
fclose
fputs
__stdio_common_vsscanf
fflush
__stdio_common_vsprintf
feof
ftell
fputc
qsort
_gmtime64
strftime
_time64
_stat64
_fstat64
_unlink
_access
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ