Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
e82344420a08fc15f6d03011ce310eb50c4792d885fd05ddc5db54fbdda6a327.exe
Resource
win7-20230705-en
Behavioral task
behavioral2
Sample
e82344420a08fc15f6d03011ce310eb50c4792d885fd05ddc5db54fbdda6a327.exe
Resource
win10v2004-20230703-en
Target
e82344420a08fc15f6d03011ce310eb50c4792d885fd05ddc5db54fbdda6a327
Size
155KB
MD5
b150af92e0e9e01dde62f14af134214d
SHA1
5337cf60d11e0ce8743541fd8b0b659d40e2b7cd
SHA256
e82344420a08fc15f6d03011ce310eb50c4792d885fd05ddc5db54fbdda6a327
SHA512
fb6c22a669721068fde5b666a824738692163fa9674cee20d583cfdff06ba336e78545a1d555b5bea258c40e09beaebc0ffa627b068983684f4373693fc9a5d5
SSDEEP
3072:av/7gT7QOI/wevUyPCsej9gB933vXetaP0Kwwwwwkkk8ko7GP27LE:SsT7QOa/hRKKnF8GP6E
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sleep
lstrcmpiW
GetCurrentThreadId
GetCommandLineW
lstrlenW
GetShortPathNameW
GetModuleHandleW
GetModuleFileNameW
MultiByteToWideChar
lstrlenA
SizeofResource
LoadResource
FindResourceW
GetLastError
LoadLibraryExW
lstrcpynW
HeapDestroy
lstrcpyW
lstrcatW
InterlockedIncrement
VirtualFreeEx
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
OpenProcess
CreateFileW
DeleteFileW
GetTempPathW
OpenThread
GetModuleFileNameA
VirtualQueryEx
WideCharToMultiByte
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
FlushInstructionCache
GetCurrentProcess
DebugBreak
OutputDebugStringW
WriteFile
CopyFileW
CreateEventW
GetVersionExW
ReadFile
GetFileSize
SetFilePointer
SystemTimeToFileTime
FileTimeToSystemTime
GetFileInformationByHandle
GetLocalTime
GetTickCount
SetStdHandle
LoadLibraryA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCommandLineA
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapSize
TerminateProcess
IsBadWritePtr
VirtualAlloc
VirtualFree
FlushFileBuffers
HeapCreate
GetVersionExA
CreateThread
WaitForSingleObject
CloseHandle
InterlockedDecrement
SetEvent
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LoadLibraryW
GetProcAddress
FreeLibrary
LeaveCriticalSection
CreateDirectoryW
LocalFree
GetEnvironmentVariableA
ExitProcess
GetVersion
GetStartupInfoW
GetModuleHandleA
RaiseException
GetFileAttributesA
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
DispatchMessageW
GetMessageW
DialogBoxParamW
GetActiveWindow
DestroyWindow
EndDialog
SetWindowLongW
wvsprintfW
LoadStringW
CharNextW
LoadImageW
GetSystemMetrics
ShowWindow
GetDlgItem
SetWindowPos
MapWindowPoints
GetClientRect
SystemParametersInfoW
GetWindowRect
GetWindow
GetParent
GetWindowLongW
CharLowerBuffW
GetDesktopWindow
PostThreadMessageW
SendMessageW
RegOpenKeyW
RegQueryValueExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCreateKeyW
SHGetFolderPathW
CoCreateInstance
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CoUninitialize
CoTaskMemAlloc
SysFreeString
SysAllocString
LoadTypeLi
RegisterTypeLi
VarUI4FromStr
GetModuleFileNameExW
SymGetModuleInfo
SymLoadModule
StackWalk
SymFunctionTableAccess
SymInitialize
SymGetOptions
SymSetOptions
HttpOpenRequestA
HttpEndRequestA
InternetWriteFile
HttpSendRequestExA
HttpAddRequestHeadersA
InternetConnectA
InternetSetOptionA
InternetOpenA
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetCloseHandle
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE