Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
EXCEL.exe
Resource
win10-20230220-en
Target
EXCEL.EXE
Size
50.9MB
MD5
028f9c8d166b324c688221b25465a34d
SHA1
85872c9fcd6349aa78ba25c27f1bc4e649996d8f
SHA256
b9e2372695255c2c7e541ca061faa7159a0b63ec250939a509f0f5bb59a041f8
SHA512
2e49a3bb8061166059747ec477b83a854cba35cab7041ee3c1792a70cf0fd3cab1d7b613b64cabd09463e748e82b6bdc374aa7703331d9007e0681366cde4958
SSDEEP
393216:2FCT1TCouTpBc1fR1JB0Bd+3yYFwDO0Xhps8Ecz1KvFNCdEkt5S1TeOzfw1ZOycq:D0cfDGyRX+1oCP
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
BeginUpgradeASPPModel
DllGetLCID
GetDMCLRRuntime
GetDMCLRRuntimeInAppDomain
LinkASPPModelTable
MdCallBack
MdCallBack12
UpgradeASPPModel
_LPenHelper
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ