Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
version.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
version.dll
Resource
win10v2004-20230220-en
Target
version.dll
Size
20KB
MD5
38fd04cb55962eafb4cbdf11d821a491
SHA1
1ff538851d0623241ef0a0a8f39169cb2d66e098
SHA256
e08b5afe8ac610630bfea3d2a5dc2ec2d369a286bbf1868fdc35669144e02e56
SHA512
7954157f8bec0333d911b737ffa5c6018ab9d76cd08531278930e2ab4c5a457a0737a60f56843855279107f7286af10a40e2a48371b78410ccc7b1965c47114e
SSDEEP
384:XT140DT3LVOT8btmDcLk6V0P2xvIZi4TVmROQZUHeMD0:D20DHVOTAmDcLk6V0P2xvIZi4TVmRO4
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetModuleHandleA
GetProcAddress
CreateToolhelp32Snapshot
Process32First
Process32Next
GetCurrentProcess
ResumeThread
GetComputerNameA
CreateThread
CloseHandle
Sleep
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
RtlCaptureContext
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
__std_type_info_destroy_list
__C_specific_handler
memset
memcpy
__acrt_iob_func
__stdio_common_vfprintf
_seh_filter_dll
_cexit
_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_initialize_onexit_table
_initterm_e
_initterm
exit
strcmp
GetFileVersionInfoA
GetFileVersionInfoByHandle
GetFileVersionInfoExA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ