Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
eb16b6665115b8823a47c6cf2e61405459c7460f80011aa0fe24fef59dd29a66.exe
Resource
win7-20230712-en
Target
eb16b6665115b8823a47c6cf2e61405459c7460f80011aa0fe24fef59dd29a66
Size
469KB
MD5
53253db5ff9d00f85d2dfd6f3a25fb62
SHA1
71a72beaae92a83a5912a4cb2af301259e15473b
SHA256
eb16b6665115b8823a47c6cf2e61405459c7460f80011aa0fe24fef59dd29a66
SHA512
f84be54a85f6224bb2d89cda98ca67ef59622d24a40162b36518ac71352184616c531551c7b4a73479eafbbdeeae7bce590647e3c381badbad3a008ba6a5214a
SSDEEP
6144:qdjkmnzdHALJUif3wgYzhNBXGoAKvxOnbOhUQOahb6Wfdu5g8kRC:qPzdIeiPwX1NBXGAabO5NgWfST
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GdipCreateSolidFill
GdipDisposeImage
GdipAlloc
GdipDrawImageI
GdipDrawLineI
GdipDeletePen
GdipCreatePen1
GdipDrawString
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipFillRectangleI
GdipFree
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushFromRectI
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipGetVisibleClipBoundsI
GdipDeleteGraphics
GdipCreateFromHDC
GdipCloneImage
GetModuleFileNameA
GetFileType
GetConsoleCP
ReadConsoleW
GetConsoleMode
HeapSize
GetProcessHeap
LoadLibraryExW
WriteFile
GetStdHandle
GetCurrentThreadId
GetOEMCP
GetACP
GetCommandLineW
GetVersionExA
GetLastError
GetCurrentProcessId
CloseHandle
VirtualAlloc
CreateMutexA
WaitForSingleObject
ReleaseMutex
SetThreadExecutionState
DeviceIoControl
FormatMessageW
Sleep
CreateFileW
GetFileInformationByHandle
FlushFileBuffers
GetSystemTime
SystemTimeToFileTime
QueryPerformanceCounter
FindNextFileW
FindClose
GetSystemTimeAsFileTime
GetFileAttributesExW
GetCurrentProcess
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
GetDiskFreeSpaceExW
GetDriveTypeW
GetVolumeInformationW
FindFirstVolumeMountPointW
FindNextVolumeMountPointW
FindVolumeMountPointClose
GetLogicalDriveStringsW
GetModuleFileNameW
GetShortPathNameW
GetLongPathNameW
DosDateTimeToFileTime
LocalFileTimeToFileTime
ReadFile
GetLocaleInfoW
LCMapStringW
CompareStringW
IsValidLocale
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
InitializeCriticalSectionAndSpinCount
SetLastError
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetFilePointerEx
OutputDebugStringW
SetStdHandle
WriteConsoleW
SetEndOfFile
FindFirstFileW
SetEnvironmentVariableA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsValidCodePage
EnumSystemLocalesW
GetUserDefaultLCID
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
GetTimeZoneInformation
HeapAlloc
HeapReAlloc
DeleteFileW
GetCommandLineA
RaiseException
RtlUnwind
GetCPInfo
DefWindowProcA
EndPaint
BeginPaint
InvalidateRect
PostQuitMessage
RegQueryValueExW
RegCreateKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
CommandLineToArgvW
CoTaskMemFree
CoTaskMemAlloc
?AddArrayString@JKDefragLib@@QAEPAPA_WPAPA_WPA_W@Z
?CallShowStatus@JKDefragLib@@QAEXPAUDefragDataStruct@@HH@Z
?ColorizeItem@JKDefragLib@@QAEXPAUDefragDataStruct@@PAUItemStruct@@_K2H@Z
?DeleteItemTree@JKDefragLib@@QAEXPAUItemStruct@@@Z
?FragmentCount@JKDefragLib@@QAEHPAUItemStruct@@@Z
?GetItemLcn@JKDefragLib@@QAE_KPAUItemStruct@@@Z
?GetLongPath@JKDefragLib@@QAEPA_WPAUDefragDataStruct@@PAUItemStruct@@@Z
?GetShortPath@JKDefragLib@@QAEPA_WPAUDefragDataStruct@@PAUItemStruct@@@Z
?IsFragmented@JKDefragLib@@QAEHPAUItemStruct@@_K1@Z
?MatchMask@JKDefragLib@@QAEHPA_W0@Z
?RunJkDefrag@JKDefragLib@@QAEXPA_WHHNPAPA_W1PAH1@Z
?ShowHex@JKDefragLib@@QAEXPAUDefragDataStruct@@PAE_K@Z
?SlowDown@JKDefragLib@@QAEXPAUDefragDataStruct@@@Z
?StopJkDefrag@JKDefragLib@@QAEXPAHH@Z
?SystemErrorStr@JKDefragLib@@QAEXKPA_WI@Z
?TreeBiggest@JKDefragLib@@QAEPAUItemStruct@@PAU2@@Z
?TreeDetach@JKDefragLib@@QAEXPAUDefragDataStruct@@PAUItemStruct@@@Z
?TreeFirst@JKDefragLib@@QAEPAUItemStruct@@PAU2@H@Z
?TreeInsert@JKDefragLib@@QAEXPAUDefragDataStruct@@PAUItemStruct@@@Z
?TreeNext@JKDefragLib@@QAEPAUItemStruct@@PAU2@@Z
?TreeNextPrev@JKDefragLib@@QAEPAUItemStruct@@PAU2@H@Z
?TreePrev@JKDefragLib@@QAEPAUItemStruct@@PAU2@@Z
?TreeSmallest@JKDefragLib@@QAEPAUItemStruct@@PAU2@@Z
?stristr@JKDefragLib@@QAEPADPAD0@Z
?stristrW@JKDefragLib@@QAEPA_WPA_W0@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ