Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
FortiClientVPN.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
FortiClientVPN.exe
Resource
win10v2004-20230220-en
Target
FortiClientVPN.exe
Size
124.1MB
MD5
3891cb5519dd8cd77b0b4d8424d19391
SHA1
58918fb0f4d7a76cead7be4f8d00df6b85c0d6d0
SHA256
8a5cae78efcda5a015951f787395b7628426fd09d4c7d60dc94515b92770771d
SHA512
feacafcc0c4d4314a3191b34296ffabff5acb8b53f03dac1ad101cd51629e34c269210daaf83ca309fa3490d148bc08ee50cde88a1ac09052c62f6bbe540d009
SSDEEP
3145728:Ult27u1M5EwjHBF+kU9wvOLbkriubgs7+:Ult2JSUskc+ebm/bgs7+
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateDirectoryW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
SetFileAttributesW
GetTempPathW
GetLastError
CreateFileA
SetFilePointer
WriteFile
DebugBreak
OutputDebugStringA
OutputDebugStringW
CloseHandle
GetCurrentProcessId
GetModuleFileNameA
lstrlenA
ExpandEnvironmentStringsW
CreateFileW
GetFileInformationByHandle
GetFileSizeEx
GetFileTime
GetFullPathNameW
ReadFile
SetFileTime
GetTempPathA
GlobalAlloc
GlobalFree
CopyFileW
MoveFileExW
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FreeLibrary
LoadLibraryExW
LoadResource
LockResource
SizeofResource
FindResourceExA
EnumResourceLanguagesW
CreateDirectoryA
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
GetFileAttributesA
LocalFileTimeToFileTime
SetFileAttributesA
GetVersionExW
GetProcAddress
LoadLibraryA
FileTimeToDosDateTime
DosDateTimeToFileTime
GetCommandLineW
SetEvent
CreateEventW
GetModuleFileNameW
GetEnvironmentVariableW
GetDriveTypeW
GetFileSize
DecodePointer
RaiseException
InitializeCriticalSectionEx
DeleteCriticalSection
ResetEvent
WaitForSingleObject
Sleep
WaitForMultipleObjects
GetCurrentProcess
ExitProcess
TerminateProcess
GetExitCodeProcess
CreateThread
CreateProcessW
ProcessIdToSessionId
GetWindowsDirectoryW
FindResourceW
LocalFree
FormatMessageW
FindResourceA
GlobalFindAtomW
MoveFileW
WTSGetActiveConsoleSessionId
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
GetUserDefaultUILanguage
GetSystemTime
lstrcmpW
lstrlenW
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SetWaitableTimer
CreateWaitableTimerW
TerminateThread
GetStdHandle
GetFileType
GetModuleHandleW
FreeEnvironmentStringsW
GetSystemInfo
VirtualProtect
VirtualQuery
LoadLibraryExA
GetVolumeInformationW
QueryPerformanceCounter
SetEndOfFile
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
SetLastError
GetCurrentThreadId
GetSystemTimeAsFileTime
GlobalMemoryStatus
GetTickCount
SystemTimeToFileTime
GetModuleHandleExW
SwitchToFiber
DeleteFiber
CreateFiber
ConvertFiberToThread
ConvertThreadToFiber
LoadLibraryW
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
SearchPathW
OpenProcess
GetCurrentDirectoryW
TlsSetValue
DeviceIoControl
GetFullPathNameA
GetSystemDirectoryW
GetLogicalDriveStringsW
GetFileAttributesExW
TlsAlloc
SetCurrentDirectoryW
TlsGetValue
LocalAlloc
VerSetConditionMask
VerifyVersionInfoW
SetThreadLocale
GetACP
OpenEventW
GetLongPathNameW
K32EnumProcesses
GetComputerNameW
SetNamedPipeHandleState
CreateMutexW
ReleaseMutex
GetOverlappedResult
WaitNamedPipeW
GetCurrentThread
QueryDosDeviceW
GetLogicalDrives
FindFirstVolumeMountPointW
FindFirstVolumeW
FindVolumeMountPointClose
K32GetModuleFileNameExW
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
CreateToolhelp32Snapshot
Process32NextW
FindNextVolumeMountPointW
Process32FirstW
HeapDestroy
ReadProcessMemory
FindVolumeClose
FindNextVolumeW
OpenThread
OpenMutexW
GetSystemDirectoryA
GetLocalTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
GetStringTypeW
FindFirstFileExW
GetDiskFreeSpaceExW
AreFileApisANSI
CreateDirectoryExW
CreateHardLinkW
EncodePointer
SwitchToThread
TlsFree
GetCPInfo
LCMapStringW
GetLocaleInfoW
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
SetFilePointerEx
GetConsoleCP
SetConsoleCtrlHandler
PeekNamedPipe
FileTimeToSystemTime
WriteConsoleW
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
FlushFileBuffers
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
SetEnvironmentVariableW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ