Extended Key Usages
ExtKeyUsageTimeStamping
Static task
static1
Behavioral task
behavioral1
Sample
signtool.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
signtool.exe
Resource
win10v2004-20230915-en
Target
signtool.exe
Size
323KB
MD5
04f3b995fc065622700c436fca61a06f
SHA1
2567d026b27c0e8d0b02165b07006c029f7f122b
SHA256
7065b5a7b6e66a2d66afe6c1cef38f1221b787b9470574262c9b89bb32154f11
SHA512
cabd2e5173562a3643b2d7c2206f5f90a462d040bf8030b5a73fc454adf9faec89ca4d2329877fbae214a66eb5728c2b1b7a89aafa72bd74a653c073a40894dc
SSDEEP
6144:1N9D0Tcvke3/s29kfxwfgWRKsoPo9hRlrtuq/lcyfxeUeGYP:1N9DAcv/3/H9CuRaPAJZlg
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
CryptDestroyKey
CryptReleaseContext
CryptGetUserKey
CryptEnumProvidersW
CryptAcquireContextW
CryptDestroyHash
CryptCreateHash
CryptSetHashParam
CryptSignHashA
GetLastError
GetProcessHeap
HeapFree
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileW
GetFullPathNameW
FindClose
GetDateFormatEx
GetTimeFormatEx
GetModuleHandleW
LocalAlloc
MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW
EncodePointer
DecodePointer
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
ExpandEnvironmentStringsW
GetFileType
WriteFile
EnumResourceNamesW
EnumResourceLanguagesW
LockResource
LoadResource
SizeofResource
FindResourceExW
HeapSetInformation
HeapAlloc
GetEnvironmentVariableW
MapViewOfFile
CreateFileMappingA
GetFileSize
GetSystemInfo
UnmapViewOfFile
LocalFree
FormatMessageW
CloseHandle
SetLastError
CreateFileW
GetCurrentProcess
GetProcAddress
GetModuleHandleA
FreeLibrary
FindFirstFileW
LoadLibraryA
LoadLibraryW
ord823
ord825
__crtLCMapStringA
isupper
setlocale
malloc
___lc_codepage_func
___lc_handle_func
__pctype_func
_errno
___mb_cur_max_func
fputc
__uncaught_exception
strerror
__mb_cur_max
memset
memcpy
__CxxFrameHandler3
memcpy_s
ungetwc
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
_XcptFilter
calloc
fflush
__iob_func
_CxxThrowException
_purecall
puts
_wsetlocale
_time64
realloc
??4exception@@QAEAAV0@ABV0@@Z
_exit
swscanf
_wtoi
towlower
_except_handler4_common
_controlfp
?terminate@@YAXXZ
__p__commode
_amsg_exit
__wgetmainargs
__set_app_type
_mktime64
_onexit
__dllonexit
_unlock
__crtLCMapStringW
??0exception@@QAE@XZ
___lc_collate_cp_func
__crtCompareStringW
memcmp
islower
fgetc
abort
fclose
fseek
fgetpos
wcsncmp
_lock
??1type_info@@UAE@XZ
_initterm
exit
_wfopen
_wcsnicmp
_wcsicmp
towupper
iswdigit
iswalpha
fgetwc
fwprintf
wcsstr
wprintf
free
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@ABV0@@Z
??_V@YAXPAX@Z
memmove_s
strcspn
memchr
localeconv
sprintf_s
putchar
_wctime64
mktime
fputwc
memmove
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
__p__fmode
_cexit
strchr
__setusermatherr
qsort_s
RtlAllocateHeap
RtlFreeHeap
CertDuplicateCertificateContext
CertFreeCertificateChain
CryptMsgGetParam
CryptDecodeObject
CryptFindOIDInfo
CertFindAttribute
CertGetEnhancedKeyUsage
CertCreateCertificateContext
CertCompareCertificate
CryptMsgControl
CryptMsgClose
CertDuplicateStore
CertCloseStore
CertDuplicateCertificateChain
CryptEncodeObjectEx
CertGetCertificateContextProperty
CryptQueryObject
CertAddCertificateContextToStore
CertOpenStore
CertEnumCertificatesInStore
CryptMemFree
CryptVerifyMessageSignature
CryptMsgOpenToDecode
CryptMsgUpdate
CryptExportPublicKeyInfoEx
CryptAcquireCertificatePrivateKey
CertGetNameStringW
CertFindExtension
CertGetValidUsages
CertGetCertificateChain
CryptHashCertificate2
CertSetCertificateContextProperty
CryptBinaryToStringA
CryptStringToBinaryA
CryptBinaryToStringW
CertAddStoreToCollection
CertControlStore
PFXImportCertStore
CertFindCertificateInStore
CryptMsgOpenToEncode
CertComparePublicKeyInfo
CryptSIPLoad
CryptDecodeObjectEx
CryptSIPRetrieveSubjectGuid
CertFreeCertificateContext
LoadStringW
CoTaskMemAlloc
CoTaskMemFree
SysFreeString
GetErrorInfo
WinVerifyTrust
WTHelperGetProvCertFromChain
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
PathCanonicalizeW
SHCreateStreamOnFileW
BCryptCreateHash
BCryptFinishHash
BCryptHashData
BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
BCryptGetProperty
NCryptSignHash
CreateXmlWriter
SignerTimeStamp
SignerFreeSignerContext
SignerSign
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ