Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
f5716949bb39993190ee532f4aa51a06132b7da31ecd3a2f5caa226c36b0dd8d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f5716949bb39993190ee532f4aa51a06132b7da31ecd3a2f5caa226c36b0dd8d.exe
Resource
win10v2004-20230915-en
Target
f5716949bb39993190ee532f4aa51a06132b7da31ecd3a2f5caa226c36b0dd8d
Size
7.8MB
MD5
0e4e5ebcc540c3f4a4dea614bef7115a
SHA1
a99f4b4886d8af0d860702fe8909539a57cc10fe
SHA256
f5716949bb39993190ee532f4aa51a06132b7da31ecd3a2f5caa226c36b0dd8d
SHA512
2a083e581213645bee5b128af640f1bedb9d58d910623e43420fbd0219114315bbed482ccf96ec2e8cd041cc7ed39630e85f945cc1629e8e05a8d34a42265198
SSDEEP
196608:TTbJAcmCaMT3yVAKAhTmeIhOkb0ypR7BrM:TxAcwMsAvkvBrM
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetWindowTheme
GetTickCount64
GetSystemDefaultLangID
FindResourceExW
LockResource
CompareFileTime
WritePrivateProfileSectionW
CreateThread
TerminateThread
SetThreadUILanguage
GetThreadUILanguage
GetCommandLineA
CreateDirectoryA
CreateFileA
DeleteFileA
FindFirstFileA
FindNextFileA
GetFileAttributesA
GetFileAttributesW
SetEndOfFile
SetFileAttributesA
SetFileAttributesW
SetFilePointerEx
GetTempPathA
GetTempFileNameA
OpenEventA
OpenEventW
GetVersionExA
GetVersionExW
GetModuleHandleA
LoadLibraryA
GetPrivateProfileIntA
WritePrivateProfileStringA
CopyFileA
MoveFileExA
EnumSystemGeoID
QueryDosDeviceW
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
InitializeCriticalSection
GetLocalTime
VirtualQuery
FlushViewOfFile
OpenFile
GetOEMCP
SetCurrentDirectoryW
GetCurrentDirectoryW
GlobalSize
SetFileTime
WaitForSingleObjectEx
lstrcpynW
GetLocaleInfoEx
FreeResource
ExpandEnvironmentStringsW
K32GetMappedFileNameW
SetUnhandledExceptionFilter
SetErrorMode
GetSystemInfo
IsBadStringPtrA
GetExitCodeThread
OpenFileMappingW
WaitForSingleObject
ReleaseMutex
FormatMessageA
QueueUserWorkItem
GetFileInformationByHandle
GetStringTypeW
InitOnceBeginInitialize
InitOnceComplete
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
WriteFile
FormatMessageW
Sleep
MoveFileExW
CopyFileW
TryEnterCriticalSection
EncodePointer
WritePrivateProfileStringW
ResetEvent
LockFileEx
UnlockFile
HeapCompact
GetDiskFreeSpaceA
HeapValidate
UnlockFileEx
GetFullPathNameA
LockFile
SwitchToThread
GetDiskFreeSpaceW
GetFullPathNameW
HeapCreate
AreFileApisANSI
CreateMutexA
GetWindowsDirectoryW
GetExitCodeProcess
OpenMutexA
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
LCIDToLocaleName
GetSystemTime
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetStdHandle
ExitProcess
GetTimeZoneInformation
GetModuleHandleExW
ExitThread
RtlUnwind
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
ReleaseSemaphore
DuplicateHandle
VirtualProtect
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
LocaleNameToLCID
lstrcmpW
GlobalFree
GlobalAlloc
OpenFileMappingA
CreateFileMappingA
GetCPInfo
InitializeCriticalSectionAndSpinCount
TlsAlloc
GetSystemDirectoryW
GlobalMemoryStatusEx
GetLogicalDriveStringsW
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SignalObjectAndWait
CreateEventA
OpenMutexW
SystemTimeToFileTime
FileTimeToSystemTime
TlsGetValue
SetLastError
GetTempPathW
SetFilePointer
RemoveDirectoryW
ReadFile
GetTempFileNameW
GetShortPathNameW
GetLongPathNameW
GetFileSizeEx
GetFileSize
GetFileAttributesExW
GetDriveTypeW
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
CreateDirectoryW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetUserGeoID
GetGeoInfoW
LocalFree
LoadLibraryW
GetModuleFileNameA
IsWow64Process
IsProcessInJob
ReadProcessMemory
GetProcessId
CreateProcessW
GetCurrentThread
GetCurrentProcess
IsDebuggerPresent
SetEnvironmentVariableW
GetEnvironmentVariableW
RtlCaptureContext
WideCharToMultiByte
lstrlenW
OpenProcess
TerminateProcess
GetPrivateProfileStringW
GetPrivateProfileStringA
GetPrivateProfileIntW
lstrlenA
GetTickCount
WaitForMultipleObjects
CreateEventW
CreateMutexW
SetEvent
CloseHandle
MultiByteToWideChar
IsBadReadPtr
lstrcmpiW
FindResourceW
SizeofResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
GetCurrentThreadId
GetCurrentProcessId
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
TlsSetValue
TlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
GetFileType
GetSystemTimeAsFileTime
FlushInstructionCache
CreateTimerQueue
EnumSystemLocalesW
FileTimeToLocalFileTime
GetStartupInfoW
UnhandledExceptionFilter
LoadLibraryExA
VirtualFree
VirtualAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
GetCommandLineW
OutputDebugStringA
IsProcessorFeaturePresent
GetMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
CharNextW
PostQuitMessage
GetShellWindow
GetWindowThreadProcessId
GetWindowTextW
GetDesktopWindow
SendMessageW
PostMessageW
DefWindowProcW
RegisterClassExW
CreateWindowExW
DestroyWindow
SetTimer
GetWindowLongW
SetWindowLongW
LoadCursorW
PostThreadMessageW
LoadStringW
SendMessageTimeoutA
GetPropA
IsWindow
ShowWindow
InflateRect
FillRect
InvalidateRect
EndPaint
BeginPaint
IsIconic
GetWindow
EnumWindows
MoveWindow
IsWindowVisible
CreateDialogIndirectParamW
GetDlgItem
GetSystemMetrics
SetWindowTextW
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
SetFocus
WaitForInputIdle
MessageBoxW
RegisterWindowMessageW
RegisterClassW
GetPropW
FindWindowExW
SendMessageA
SetWindowPos
FindWindowExA
wsprintfW
PeekMessageW
EndDialog
wvsprintfW
FindWindowW
CallWindowProcW
SendMessageTimeoutW
LoadImageW
GetClientRect
DrawTextW
DialogBoxParamW
ChangeWindowMessageFilterEx
SetCursor
MessageBoxExW
SetWindowTextA
SetPropW
SetPropA
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
KillTimer
DefDlgProcW
CreateDialogParamW
BringWindowToTop
AttachThreadInput
MonitorFromPoint
GetCursorPos
ReleaseDC
GetDC
LoadIconW
EnumThreadWindows
GetParent
GetClassInfoExW
SetBkMode
GetStockObject
SetTextColor
SelectObject
GetTextExtentPoint32W
DeleteObject
GetDeviceCaps
CreateFontIndirectW
CreateSolidBrush
SHFileOperationW
SHGetPathFromIDListA
SHGetPathFromIDListW
ShellExecuteExW
CommandLineToArgvW
SHGetSpecialFolderLocation
ShellExecuteExA
ShellExecuteW
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
CoCreateGuid
CreateBindCtx
CoInitializeEx
VarUI4FromStr
SysAllocString
SysFreeString
StartServiceW
RegGetValueW
QueryServiceStatus
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
ConvertSidToStringSidW
RegDeleteTreeA
RegSetValueExA
RegSetValueW
RegSetValueA
RegQueryValueExA
RegQueryValueW
RegQueryValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegOpenKeyW
RegOpenKeyA
RegFlushKey
RegEnumValueW
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyA
CryptDecrypt
CryptEncrypt
CryptImportKey
CryptExportKey
CryptGetUserKey
CryptDestroyKey
CryptDeriveKey
CryptGenKey
LookupAccountSidW
RegDeleteTreeW
RegCreateKeyW
GetUserNameW
GetNamedSecurityInfoW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
RevertToSelf
MapGenericMask
ImpersonateSelf
GetFileSecurityW
AccessCheck
SetNamedSecurityInfoW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueExW
CreateProcessWithTokenW
SetTokenInformation
SetFileSecurityW
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
GetSecurityDescriptorSacl
GetLengthSid
FreeSid
EqualSid
DuplicateTokenEx
AllocateAndInitializeSid
OpenThreadToken
OpenProcessToken
CreateProcessAsUserW
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
CloseServiceHandle
OpenSCManagerW
OpenServiceW
StrStrIW
PathBuildRootW
PathFileExistsW
PathGetDriveNumberW
PathFileExistsA
SHDeleteKeyA
SHDeleteKeyW
StrChrIW
StrStrW
PathAppendW
PathFindFileNameW
InitCommonControlsEx
CoInternetParseUrl
RegisterBindStatusCallback
UrlMkSetSessionOption
CreateURLMoniker
ObtainUserAgentString
AuthzInitializeResourceManager
AuthzFreeResourceManager
AuthzInitializeContextFromToken
AuthzFreeContext
AuthzAccessCheck
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueA
WinVerifyTrust
CertGetCertificateChain
CertFreeCertificateContext
CertComparePublicKeyInfo
CertGetNameStringW
CryptVerifyMessageSignature
CryptUnprotectData
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CryptProtectData
HttpQueryInfoA
HttpQueryInfoW
InternetErrorDlg
InternetOpenA
HttpSendRequestW
InternetQueryOptionA
InternetReadFileExW
InternetReadFileExA
InternetReadFile
InternetConnectW
HttpSendRequestA
HttpOpenRequestW
HttpOpenRequestA
InternetSetOptionW
InternetSetOptionA
HttpAddRequestHeadersW
InternetQueryOptionW
InternetConnectA
InternetCloseHandle
InternetCrackUrlA
InternetCrackUrlW
InternetOpenW
ImageGetCertificateData
ImageGetCertificateHeader
ImageEnumerateCertificates
ApplyDeltaW
GetPrinterDriverDirectoryW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ