Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
e408d43af5a6c9b0684e1fdc8d14e48b6fd23d15fd2219e04f0f402bcbecf53f.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
e408d43af5a6c9b0684e1fdc8d14e48b6fd23d15fd2219e04f0f402bcbecf53f.exe
Resource
win10v2004-20230703-en
Target
e408d43af5a6c9b0684e1fdc8d14e48b6fd23d15fd2219e04f0f402bcbecf53f
Size
2.2MB
MD5
ad60f8ed3a500330c83bfa0c3ffec4be
SHA1
db4243d2c38cca2cef4320e95876532f31180b25
SHA256
e408d43af5a6c9b0684e1fdc8d14e48b6fd23d15fd2219e04f0f402bcbecf53f
SHA512
d5fa296c79dcbb73e085a5eff911781df7f291980b56464540ec44e217863898b43ba1716f4cb1d76af2bd463b15b288d4c36a6c32785f4397f8ce887c02b2fe
SSDEEP
49152:uZMGhKH2NGAet75tbCSYIwlSJD2/yeXdPq3o+L:UhKAeZKSJy/VtPq4+L
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateIoCompletionPort
CreateThread
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleExA
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatusEx
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
OpenProcess
PostQueuedCompletionStatus
ProcessIdToSessionId
QueryFullProcessImageNameA
QueryPerformanceCounter
RaiseException
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetLastError
SetProcessPriorityBoost
SetThreadContext
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SuspendThread
SwitchToThread
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WriteConsoleW
WriteFile
__C_specific_handler
__DestructExceptionObject
__dllonexit
__doserrno
__getmainargs
__initenv
__iob_func
__lconv_init
__pioinfo
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_beginthread
_cexit
_errno
_filelengthi64
_fileno
_fmode
_gmtime64
_initterm
_localtime64
_lock
_lseeki64
_mktime64
_onexit
_pclose
_popen
_time64
_unlock
_write
abort
calloc
clearerr
clock
cosh
exit
fclose
feof
ferror
fflush
fgetpos
fgets
fopen
fprintf
fputc
fputs
fread
free
fscanf
fsetpos
fwrite
getc
getenv
malloc
memchr
memcmp
memcpy
memmove
memset
putchar
remove
rename
setlocale
setvbuf
signal
sinh
sprintf
strchr
strcmp
strcpy
strerror
strftime
strlen
strncmp
strncpy
strpbrk
strrchr
strstr
strtoul
system
tanh
tmpfile
tmpnam
ungetc
vfprintf
_cgo_fb02ad6b0a90_Cfunc__Cmalloc
_cgo_fb02ad6b0a90_Cfunc_free
_cgo_fb02ad6b0a90_Cfunc_luaL_loadbuffer
_cgo_fb02ad6b0a90_Cfunc_luaL_newstate
_cgo_fb02ad6b0a90_Cfunc_luaL_openlibs
_cgo_fb02ad6b0a90_Cfunc_lua_close
_cgo_fb02ad6b0a90_Cfunc_lua_pcall
_cgo_fb02ad6b0a90_Cfunc_lua_tolstring
_cgo_get_context_function
_cgo_init
_cgo_is_runtime_initialized
_cgo_maybe_run_preinit
_cgo_notify_runtime_init_done
_cgo_panic
_cgo_preinit_init
_cgo_release_context
_cgo_sys_thread_start
_cgo_thread_start
_cgo_topofstack
_cgo_wait_runtime_init_done
_cgo_yield
crosscall2
crosscall_amd64
crypto/rc4.(*Cipher).XORKeyStream
crypto/rc4.(*KeySizeError).Error
crypto/rc4..inittask
crypto/rc4..stmp_0
crypto/rc4.KeySizeError.Error
crypto/rc4.NewCipher
errors.(*errorString).Error
errors..inittask
errors.New
errors.errorType
errors.init
fmt.(*buffer).writeRune
fmt.(*fmt).fmtBoolean
fmt.(*fmt).fmtBs
fmt.(*fmt).fmtC
fmt.(*fmt).fmtFloat
fmt.(*fmt).fmtInteger
fmt.(*fmt).fmtQ
fmt.(*fmt).fmtQc
fmt.(*fmt).fmtS
fmt.(*fmt).fmtSbx
fmt.(*fmt).fmtUnicode
fmt.(*fmt).pad
fmt.(*fmt).padString
fmt.(*fmt).truncate
fmt.(*fmt).truncateString
fmt.(*fmt).writePadding
fmt.(*pp).Flag
fmt.(*pp).Precision
fmt.(*pp).Width
fmt.(*pp).Write
fmt.(*pp).argNumber
fmt.(*pp).badArgNum
fmt.(*pp).badVerb
fmt.(*pp).badVerb.stkobj
fmt.(*pp).catchPanic
fmt.(*pp).catchPanic.stkobj
fmt.(*pp).doPrintf
fmt.(*pp).doPrintf.stkobj
fmt.(*pp).fmt0x64
fmt.(*pp).fmtBool
fmt.(*pp).fmtBytes
fmt.(*pp).fmtBytes.stkobj
fmt.(*pp).fmtComplex
fmt.(*pp).fmtFloat
fmt.(*pp).fmtInteger
fmt.(*pp).fmtPointer
fmt.(*pp).fmtString
fmt.(*pp).free
fmt.(*pp).handleMethods
fmt.(*pp).missingArg
fmt.(*pp).printArg
fmt.(*pp).printArg.stkobj
fmt.(*pp).printValue
fmt.(*pp).unknownType
fmt.(*wrapError).Error
fmt..inittask
fmt..stmp_0
fmt.Errorf
fmt.boolError
fmt.complexError
fmt.getField
fmt.glob..func1
fmt.init
fmt.intFromArg
fmt.intFromArg.stkobj
fmt.newPrinter
fmt.parseArgNumber
fmt.parsenum
fmt.ppFree
go.buildid
go.itab.*errors.errorString,error
go.itab.*fmt.pp,fmt.State
go.itab.*fmt.wrapError,error
go.itab.*internal/fmtsort.SortedMap,sort.Interface
go.itab.*internal/poll.DeadlineExceededError,error
go.itab.*internal/reflectlite.rtype,internal/reflectlite.Type
go.itab.*os.PathError,error
go.itab.*reflect.rtype,reflect.Type
go.itab.*syscall.DLLError,error
go.itab.crypto/rc4.KeySizeError,error
go.itab.runtime.errorString,error
go.itab.syscall.Errno,error
internal/bytealg..inittask
internal/bytealg.IndexByteString
internal/bytealg.MaxLen
internal/bytealg.init.0
internal/cpu..stmp_0
internal/cpu.ARM
internal/cpu.ARM64
internal/cpu.CacheLineSize
internal/cpu.Initialize
internal/cpu.X86
internal/cpu.cpuid
internal/cpu.doinit
internal/cpu.indexByte
internal/cpu.options
internal/cpu.processOptions
internal/cpu.xgetbv
internal/fmtsort.(*SortedMap).Len
internal/fmtsort.(*SortedMap).Less
internal/fmtsort.(*SortedMap).Swap
internal/fmtsort..inittask
internal/fmtsort.Sort
internal/fmtsort.compare
internal/fmtsort.compare.stkobj
internal/fmtsort.nilCompare
internal/oserror..inittask
internal/oserror.ErrClosed
internal/oserror.ErrExist
internal/oserror.ErrInvalid
internal/oserror.ErrNotExist
internal/oserror.ErrPermission
internal/oserror.init
internal/poll.(*DeadlineExceededError).Error
internal/poll.(*FD).Close
internal/poll.(*FD).Init
internal/poll.(*FD).Write
internal/poll.(*FD).Write.func1
internal/poll.(*FD).decref
internal/poll.(*FD).destroy
internal/poll.(*FD).writeConsole
internal/poll.(*FD).writeUnlock
internal/poll.(*fdMutex).decref
internal/poll.(*fdMutex).increfAndClose
internal/poll.(*fdMutex).rwlock
internal/poll.(*fdMutex).rwunlock
internal/poll.(*pollDesc).init
internal/poll.(*pollDesc).prepare
internal/poll.(*pollDesc).wait
internal/poll..inittask
internal/poll..stmp_1
internal/poll..stmp_11
internal/poll..stmp_17
internal/poll..stmp_18
internal/poll..stmp_2
internal/poll..stmp_3
internal/poll..stmp_4
internal/poll..stmp_5
internal/poll..stmp_6
internal/poll..stmp_7
internal/poll.CloseFunc
internal/poll.ErrDeadlineExceeded
internal/poll.ErrFileClosing
internal/poll.ErrNetClosing
internal/poll.ErrNoDeadline
internal/poll.ErrNotPollable
internal/poll.checkSetFileCompletionNotificationModes
internal/poll.errERROR_IO_PENDING
internal/poll.execIO
internal/poll.init
internal/poll.init.0
internal/poll.init.0.stkobj
internal/poll.initErr
internal/poll.logInitFD
internal/poll.runtime_Semacquire
internal/poll.runtime_Semrelease
internal/poll.runtime_pollClose
internal/poll.runtime_pollOpen
internal/poll.runtime_pollReset
internal/poll.runtime_pollServerInit
internal/poll.runtime_pollUnblock
internal/poll.runtime_pollUnblock.stkobj
internal/poll.runtime_pollWait
internal/poll.runtime_pollWaitCanceled
internal/poll.serverInit
internal/poll.useSetFileCompletionNotificationModes
internal/reflectlite.(*rtype).AssignableTo
internal/reflectlite.(*rtype).Comparable
internal/reflectlite.(*rtype).Elem
internal/reflectlite.(*rtype).Implements
internal/reflectlite.(*rtype).In
internal/reflectlite.(*rtype).Kind
internal/reflectlite.(*rtype).Len
internal/reflectlite.(*rtype).Name
internal/reflectlite.(*rtype).NumField
internal/reflectlite.(*rtype).NumIn
internal/reflectlite.(*rtype).NumMethod
internal/reflectlite.(*rtype).NumOut
internal/reflectlite.(*rtype).Out
internal/reflectlite.(*rtype).PkgPath
internal/reflectlite.(*rtype).PkgPath.stkobj
internal/reflectlite.(*rtype).Size
internal/reflectlite.(*rtype).String
internal/reflectlite.(*rtype).String.stkobj
internal/reflectlite.(*rtype).common
internal/reflectlite.(*rtype).exportedMethods
internal/reflectlite.(*rtype).uncommon
internal/reflectlite..inittask
internal/reflectlite..stmp_1
internal/reflectlite..stmp_10
internal/reflectlite..stmp_11
internal/reflectlite..stmp_15
internal/reflectlite..stmp_16
internal/reflectlite..stmp_17
internal/reflectlite..stmp_2
internal/reflectlite..stmp_4
internal/reflectlite..stmp_5
internal/reflectlite..stmp_6
internal/reflectlite..stmp_7
internal/reflectlite..stmp_8
internal/reflectlite..stmp_9
internal/reflectlite.TypeOf
internal/reflectlite.TypeOf.stkobj
internal/reflectlite.directlyAssignable
internal/reflectlite.haveIdenticalType
internal/reflectlite.haveIdenticalUnderlyingType
internal/reflectlite.haveIdenticalUnderlyingType.stkobj
internal/reflectlite.implements
internal/reflectlite.implements.stkobj
internal/reflectlite.name.pkgPath
internal/reflectlite.name.pkgPath.stkobj
internal/reflectlite.name.tag
internal/reflectlite.name.tag.stkobj
internal/reflectlite.name.tagLen
internal/reflectlite.resolveNameOff
internal/reflectlite.resolveTypeOff
internal/syscall/execenv..inittask
internal/syscall/windows..inittask
internal/syscall/windows..stmp_23
internal/syscall/windows..stmp_4
internal/syscall/windows.GetModuleFileName
internal/syscall/windows.GetModuleFileName.stkobj
internal/syscall/windows.UTF16PtrToString
internal/syscall/windows.UTF16PtrToString.stkobj
internal/syscall/windows.errERROR_IO_PENDING
internal/syscall/windows.init
internal/syscall/windows.modadvapi32
internal/syscall/windows.modiphlpapi
internal/syscall/windows.modkernel32
internal/syscall/windows.modnetapi32
internal/syscall/windows.modpsapi
internal/syscall/windows.moduserenv
internal/syscall/windows.modws2_32
internal/syscall/windows.procAdjustTokenPrivileges
internal/syscall/windows.procCreateEnvironmentBlock
internal/syscall/windows.procDestroyEnvironmentBlock
internal/syscall/windows.procDuplicateTokenEx
internal/syscall/windows.procGetACP
internal/syscall/windows.procGetAdaptersAddresses
internal/syscall/windows.procGetComputerNameExW
internal/syscall/windows.procGetConsoleCP
internal/syscall/windows.procGetCurrentThread
internal/syscall/windows.procGetFileInformationByHandleEx
internal/syscall/windows.procGetFinalPathNameByHandleW
internal/syscall/windows.procGetModuleFileNameW
internal/syscall/windows.procGetProcessMemoryInfo
internal/syscall/windows.procGetProfilesDirectoryW
internal/syscall/windows.procImpersonateSelf
internal/syscall/windows.procLockFileEx
internal/syscall/windows.procLookupPrivilegeValueW
internal/syscall/windows.procMoveFileExW
internal/syscall/windows.procMultiByteToWideChar
internal/syscall/windows.procNetShareAdd
internal/syscall/windows.procNetShareDel
internal/syscall/windows.procNetUserGetLocalGroups
internal/syscall/windows.procOpenThreadToken
internal/syscall/windows.procRevertToSelf
internal/syscall/windows.procSetTokenInformation
internal/syscall/windows.procUnlockFileEx
internal/syscall/windows.procWSASocketW
internal/syscall/windows/registry..inittask
internal/syscall/windows/registry.ErrUnexpectedType
internal/syscall/windows/registry.init
internal/syscall/windows/registry.modadvapi32
internal/syscall/windows/registry.modkernel32
internal/syscall/windows/registry.procExpandEnvironmentStringsW
internal/syscall/windows/registry.procRegCreateKeyExW
internal/syscall/windows/registry.procRegDeleteKeyW
internal/syscall/windows/registry.procRegDeleteValueW
internal/syscall/windows/registry.procRegEnumValueW
internal/syscall/windows/registry.procRegLoadMUIStringW
internal/syscall/windows/registry.procRegSetValueExW
internal/syscall/windows/sysdll..inittask
internal/syscall/windows/sysdll.Add
internal/syscall/windows/sysdll.IsSystemDLL
internal/syscall/windows/sysdll.init
io..inittask
io.EOF
io.ErrClosedPipe
io.ErrNoProgress
io.ErrShortBuffer
io.ErrShortWrite
io.ErrUnexpectedEOF
io.errOffset
io.errWhence
io.init
lj_BC_ADDNV
lj_BC_ADDVN
lj_BC_ADDVV
lj_BC_CALL
lj_BC_CALLM
lj_BC_CALLMT
lj_BC_CALLT
lj_BC_CAT
lj_BC_DIVNV
lj_BC_DIVVN
lj_BC_DIVVV
lj_BC_FNEW
lj_BC_FORI
lj_BC_FORL
lj_BC_FUNCC
lj_BC_FUNCCW
lj_BC_FUNCF
lj_BC_FUNCV
lj_BC_GGET
lj_BC_GSET
lj_BC_IFORL
lj_BC_IFUNCF
lj_BC_IFUNCV
lj_BC_IITERL
lj_BC_ILOOP
lj_BC_ISEQN
lj_BC_ISEQP
lj_BC_ISEQS
lj_BC_ISEQV
lj_BC_ISF
lj_BC_ISFC
lj_BC_ISGE
lj_BC_ISGT
lj_BC_ISLE
lj_BC_ISLT
lj_BC_ISNEN
lj_BC_ISNEP
lj_BC_ISNES
lj_BC_ISNEV
lj_BC_ISNEXT
lj_BC_IST
lj_BC_ISTC
lj_BC_ITERC
lj_BC_ITERL
lj_BC_ITERN
lj_BC_JFORI
lj_BC_JFORL
lj_BC_JFUNCF
lj_BC_JFUNCV
lj_BC_JITERL
lj_BC_JLOOP
lj_BC_JMP
lj_BC_KCDATA
lj_BC_KNIL
lj_BC_KNUM
lj_BC_KPRI
lj_BC_KSHORT
lj_BC_KSTR
lj_BC_LEN
lj_BC_LOOP
lj_BC_MODNV
lj_BC_MODVN
lj_BC_MODVV
lj_BC_MOV
lj_BC_MULNV
lj_BC_MULVN
lj_BC_MULVV
lj_BC_NOT
lj_BC_POW
lj_BC_RET
lj_BC_RET0
lj_BC_RET1
lj_BC_RETM
lj_BC_SUBNV
lj_BC_SUBVN
lj_BC_SUBVV
lj_BC_TDUP
lj_BC_TGETB
lj_BC_TGETS
lj_BC_TGETV
lj_BC_TNEW
lj_BC_TSETB
lj_BC_TSETM
lj_BC_TSETS
lj_BC_TSETV
lj_BC_UCLO
lj_BC_UGET
lj_BC_UNM
lj_BC_USETN
lj_BC_USETP
lj_BC_USETS
lj_BC_USETV
lj_BC_VARG
lj_alloc_create
lj_alloc_destroy
lj_alloc_f
lj_asm_patchexit
lj_asm_trace
lj_assert_bad_for_arg_type
lj_bc_mode
lj_bc_ofs
lj_bcread
lj_bcwrite
lj_carith_divi64
lj_carith_divu64
lj_carith_modi64
lj_carith_modu64
lj_carith_op
lj_carith_powi64
lj_carith_powu64
lj_ccall_ctid_vararg
lj_ccall_func
lj_ccallback_enter
lj_ccallback_leave
lj_ccallback_mcode_free
lj_ccallback_new
lj_ccallback_ptr2slot
lj_cconv_bf_tv
lj_cconv_compatptr
lj_cconv_ct_ct
lj_cconv_ct_init
lj_cconv_ct_tv
lj_cconv_multi_init
lj_cconv_tv_bf
lj_cconv_tv_ct
lj_cdata_free
lj_cdata_get
lj_cdata_index
lj_cdata_newref
lj_cdata_newv
lj_cdata_set
lj_cdata_setfin
lj_char_bits
lj_clib_default
lj_clib_index
lj_clib_load
lj_clib_unload
lj_cont_cat
lj_cont_condf
lj_cont_condt
lj_cont_dispatch
lj_cont_ffi_callback
lj_cont_hook
lj_cont_nop
lj_cont_ra
lj_cparse
lj_crecord_tonumber
lj_ctype_addname
lj_ctype_freestate
lj_ctype_getfieldq
lj_ctype_getname
lj_ctype_info
lj_ctype_init
lj_ctype_intern
lj_ctype_meta
lj_ctype_new
lj_ctype_rawref
lj_ctype_repr
lj_ctype_repr_complex
lj_ctype_repr_int64
lj_ctype_size
lj_ctype_vlsize
lj_debug_addloc
lj_debug_frame
lj_debug_funcname
lj_debug_getinfo
lj_debug_line
lj_debug_pushloc
lj_debug_shortname
lj_debug_slotname
lj_debug_uvname
lj_debug_uvnamev
lj_dispatch_call
lj_dispatch_init
lj_dispatch_init_hotcount
lj_dispatch_ins
lj_dispatch_update
lj_err_allmsg
lj_err_arg
lj_err_argt
lj_err_argtype
lj_err_argv
lj_err_caller
lj_err_callermsg
lj_err_callerv
lj_err_comp
lj_err_lex
lj_err_mem
lj_err_msg
lj_err_optype
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ