Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
414802f48c4c49720f933896e4c6061e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
414802f48c4c49720f933896e4c6061e.exe
Resource
win10v2004-20230915-en
Target
414802f48c4c49720f933896e4c6061e.bin
Size
2.0MB
MD5
414802f48c4c49720f933896e4c6061e
SHA1
96e874cd24c68319541ba2ff41fc882f6db48930
SHA256
779af534972b377aef8834b9131bbb4fc589ed45f0ceb5a88a9f91e27c11118e
SHA512
10249e29c1825c7f044e49ed74be1572aed19fc214e20aef41396018ae2f66e6ca535f0ec8eb169223d567de2d3b2fa19da7ca4f88c797ba0a610e1d90423d68
SSDEEP
49152:69Tzh0z0UtlX2hfbg/B3Azd9CoFOLsLTLV0i/NSaRcx:6xzh01GVsK0oNx0i/N
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InitCommonControlsEx
_TrackMouseEvent
ord17
ord46
ord22
ord211
ord217
ord143
ord50
ord26
ord30
ord200
ord32
ord35
ord27
ord79
ord33
ord301
ord60
ord41
ord45
CertAddCertificateContextToStore
CryptQueryObject
CryptDecodeObjectEx
CertFindExtension
CertFreeCertificateChain
CertFreeCertificateChainEngine
CertGetCertificateChain
CertCreateCertificateChainEngine
CertEnumCertificatesInStore
CertOpenStore
CryptStringToBinaryA
CertFindCertificateInStore
PFXImportCertStore
CertCloseStore
CertFreeCertificateContext
CreateDirectoryW
GetFileAttributesW
LocalFileTimeToFileTime
SetFilePointer
SetFileTime
SystemTimeToFileTime
LocalFree
FormatMessageW
VerSetConditionMask
GlobalAlloc
GetLocalTime
lstrcmpiW
lstrcpynW
lstrcpyW
SetLastError
FreeLibrary
GetSystemDirectoryA
LoadLibraryA
GetModuleHandleA
QueryPerformanceFrequency
SleepEx
QueryPerformanceCounter
VerifyVersionInfoA
GetEnvironmentVariableA
PeekNamedPipe
WaitForMultipleObjects
GetFileType
GetStdHandle
MoveFileExA
GetFileSizeEx
CreateFileA
GetDriveTypeW
GetCurrentProcess
GetLogicalDriveStringsW
GetDiskFreeSpaceExW
GetEnvironmentVariableW
SetErrorMode
CreateProcessW
GetExitCodeProcess
TerminateProcess
lstrcmpW
SetEndOfFile
TerminateThread
GetFileAttributesExW
CreateThread
SetFilePointerEx
SetFileAttributesW
GetSystemDefaultLCID
GetUserDefaultLCID
SetEnvironmentVariableA
WriteConsoleW
InitializeSListHead
GetThreadTimes
CreateMutexW
SetStdHandle
ReadConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetModuleHandleExW
GetCurrentThread
GetOEMCP
IsValidCodePage
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStartupInfoW
UnhandledExceptionFilter
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
MoveFileExW
SystemTimeToTzSpecificLocalTime
FindClose
FindNextFileW
FindFirstFileExW
FileTimeToSystemTime
GetFileInformationByHandle
FileTimeToLocalFileTime
AreFileApisANSI
RtlUnwind
GetCommandLineA
GetCPInfo
LoadLibraryExW
ExitThread
IsProcessorFeaturePresent
OutputDebugStringW
IsDebuggerPresent
GetStringTypeW
EncodePointer
MulDiv
ReleaseMutex
WideCharToMultiByte
lstrlenW
GetFullPathNameW
GlobalUnlock
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetSystemTimeAsFileTime
CloseHandle
SetEvent
WaitForSingleObject
GetCurrentThreadId
FindResourceW
LoadResource
SizeofResource
LockResource
FindResourceExW
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GlobalLock
GetModuleHandleW
GetTickCount
ReadFile
GetFileSize
GetCurrentDirectoryW
ExitProcess
GetACP
MultiByteToWideChar
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
DeleteFileW
CreateSemaphoreW
SetUnhandledExceptionFilter
FreeResource
OpenProcess
GetCurrentProcessId
GetModuleFileNameW
VirtualQuery
WriteFile
CreateFileW
lstrcatW
GetTempPathW
DecodePointer
GetLastError
RaiseException
InitializeCriticalSectionAndSpinCount
Sleep
CreateEventW
GetNativeSystemInfo
GetVersionExW
LoadLibraryW
GetProcAddress
GetTimeZoneInformation
GetProcessHeap
GetWindowTextW
SetWindowTextW
EqualRect
AdjustWindowRectEx
GetPropW
SetPropW
GetMenu
UpdateWindow
EnableWindow
GetClassInfoExW
DestroyMenu
EnableMenuItem
CreateCaret
GetCaretBlinkTime
HideCaret
ShowCaret
SetCaretPos
GetCaretPos
IsWindowEnabled
wsprintfA
DrawTextA
GetKeyboardLayout
GetKeyNameTextW
MapVirtualKeyExW
SendMessageW
ScreenToClient
GetWindowRect
SetWindowPos
GetDC
ReleaseDC
GetSystemMetrics
wsprintfW
MessageBoxW
CreatePopupMenu
AppendMenuW
TrackPopupMenu
SetRect
DrawTextW
CharPrevW
GetWindowRgn
UpdateLayeredWindow
GetLastActivePopup
FindWindowW
GetShellWindow
GetWindowThreadProcessId
GetWindowTextLengthW
PtInRect
LoadIconW
IsWindow
GetClassNameW
PostQuitMessage
GetCursorPos
IsIconic
ShowWindow
BringWindowToTop
SetForegroundWindow
SetActiveWindow
SetCursor
InflateRect
UnionRect
OffsetRect
LoadCursorW
IsZoomed
SetWindowRgn
GetClientRect
GetWindowLongW
SetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetMessageW
TranslateMessage
DispatchMessageW
PostMessageW
CreateWindowExW
DestroyWindow
IsWindowVisible
CharNextW
SetFocus
GetActiveWindow
GetFocus
GetKeyState
SetCapture
ReleaseCapture
SetTimer
KillTimer
BeginPaint
EndPaint
GetUpdateRect
InvalidateRect
MapWindowPoints
GetSysColor
IntersectRect
IsRectEmpty
GetParent
GetWindow
LoadImageW
DefWindowProcW
FillRect
InvalidateRgn
CreateAcceleratorTableW
MoveWindow
CallWindowProcW
RegisterClassW
GetGUIThreadInfo
RegisterClassExW
ClientToScreen
SetBitmapBits
GetBitmapBits
GetTextExtentPointA
GdiFlush
TextOutW
MoveToEx
GetObjectA
SetStretchBltMode
StretchBlt
SetBkColor
ExtSelectClipRgn
SelectClipRgn
LineTo
GetClipBox
GetCharABCWidthsW
CreateRectRgnIndirect
CreatePenIndirect
CombineRgn
CreateDIBSection
PtInRegion
CreateRectRgn
SetTextColor
SetBkMode
CreateSolidBrush
CreatePatternBrush
SetWindowOrgEx
GetObjectW
GetTextMetricsW
PlayEnhMetaFile
GetEnhMetaFileHeader
CreateEnhMetaFileW
CloseEnhMetaFile
SelectObject
SaveDC
RestoreDC
Rectangle
RemoveFontMemResourceEx
AddFontMemResourceEx
GetStockObject
GetDeviceCaps
DeleteDC
CreatePen
CreateFontIndirectW
CreateDIBitmap
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteObject
CreateRoundRectRgn
GetTextExtentPoint32W
RegCreateKeyExW
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
RegEnumKeyExW
CheckTokenMembership
FreeSid
RevertToSelf
AllocateAndInitializeSid
RegDeleteValueW
ImpersonateLoggedOnUser
RegQueryInfoKeyW
OpenProcessToken
RegSetValueExW
RegOpenKeyExW
CryptImportKey
CryptEncrypt
CryptDestroyKey
CryptCreateHash
CryptHashData
CryptGetHashParam
RegCloseKey
RegQueryValueExW
CryptDestroyHash
CommandLineToArgvW
Shell_NotifyIconW
DragQueryFileW
SHGetFolderLocation
ShellExecuteExW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation
SHFileOperationW
SHGetFolderPathW
ord165
ShellExecuteW
CreateStreamOnHGlobal
ReleaseStgMedium
OleLockRunning
CLSIDFromProgID
CLSIDFromString
OleDuplicateData
DoDragDrop
CoCreateInstance
CoUninitialize
CoInitialize
SysAllocString
VariantClear
SysFreeString
VariantChangeType
VariantInit
VariantCopy
wnsprintfW
PathFileExistsW
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipDrawImageRectI
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipGetImageWidth
GdipSetStringFormatTrimming
GdipImageSelectActiveFrame
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipMeasureString
GdipDrawString
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipFillPath
GdipFillRectangleI
GdipDrawPath
GdipDrawRectangleI
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipSetPenMode
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipAddPathArc
GdipAddPathLine
GdipDeletePath
GdipCreatePath
GdipFree
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipSetStringFormatLineAlign
ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext
MiniDumpWriteDump
GetModuleFileNameExW
inet_addr
inet_ntoa
ntohl
ioctlsocket
__WSAFDIsSet
select
WSACreateEvent
WSAEventSelect
WSACloseEvent
WSAEnumNetworkEvents
recvfrom
sendto
htonl
listen
accept
getaddrinfo
freeaddrinfo
WSASetLastError
connect
socket
getpeername
getsockopt
htons
bind
ntohs
getsockname
setsockopt
WSAIoctl
recv
WSAGetLastError
send
closesocket
WSAStartup
gethostname
gethostbyname
WSACleanup
WinHttpQueryHeaders
WinHttpOpen
WinHttpCloseHandle
WinHttpCrackUrl
WinHttpAddRequestHeaders
WinHttpConnect
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpOpenRequest
WinHttpReceiveResponse
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ