Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.5cafa749ef29582b1fe18a16b84dc1e0.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.5cafa749ef29582b1fe18a16b84dc1e0.exe
Resource
win10v2004-20231023-en
Target
NEAS.5cafa749ef29582b1fe18a16b84dc1e0.exe
Size
3.8MB
MD5
5cafa749ef29582b1fe18a16b84dc1e0
SHA1
3ed07816195759ad534edf896dd2ea48c5b72928
SHA256
b0c61356107213af814eec9ea8168a18293b5f0d2e8a1e8225bd7803f63e9ddc
SHA512
a86b7ff69a3cb1f0b4e93326f112ecd1f490f22220a6fe11178366b1be12856ff4d5c26cb6aa09ea839b25fde544d30e4dc31b6c717522d3af3e9805ff837a3f
SSDEEP
98304:M7pkMfk+XOagVHsWSWWEfBxoWrhyQpt71Cmi6CvR9/T:b+XOauHsTMnhyo5Cpp9L
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
CoInitializeEx
ord17
UuidCreate
UuidToStringW
RpcStringFreeW
SHGetPathFromIDListW
CommandLineToArgvW
ShellExecuteExW
SHBrowseForFolderW
PathRemoveExtensionW
GetWindowLongW
SetWindowLongW
PostQuitMessage
EndDialog
SetWindowTextW
DialogBoxParamW
SendMessageW
GetWindow
GetWindowThreadProcessId
GetTopWindow
MessageBoxW
GetDlgItem
LoadStringW
PostMessageW
RegCloseKey
CryptGenRandom
CryptReleaseContext
DecryptFileW
RegOpenKeyExW
RegQueryValueExW
CryptAcquireContextW
FileTimeToDosDateTime
FileTimeToLocalFileTime
MoveFileExW
GlobalFree
GlobalAlloc
SetCurrentDirectoryW
GetCurrentDirectoryW
RemoveDirectoryW
GetFileAttributesW
DeleteFileW
FileTimeToSystemTime
GetSystemInfo
CreateEventA
GetModuleHandleW
GetEnvironmentVariableW
GetTickCount
SetEnvironmentVariableW
GetLastError
ExpandEnvironmentStringsW
Sleep
GetProcessId
WaitForSingleObject
GetExitCodeProcess
CloseHandle
SetFileAttributesW
InitializeCriticalSection
CreateEventW
CreateThread
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetCommandLineW
lstrlenW
CompareStringW
LocalFree
CreateDirectoryW
GetTempPathW
LoadLibraryW
GetProcAddress
GetSystemDirectoryW
SetDefaultDllDirectories
FreeLibrary
WaitForMultipleObjects
ExitThread
SetLastError
SystemTimeToTzSpecificLocalTime
GetSystemTime
GetTimeZoneInformation
FormatMessageW
lstrlenA
GetComputerNameW
GetLocalTime
GetVersionExW
CreateFileA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetFilePointer
InitializeCriticalSectionAndSpinCount
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
FreeLibraryAndExitThread
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetFileType
LCMapStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
GetProcessHeap
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapSize
HeapReAlloc
ReadFile
DecodePointer
CreateFileW
WriteConsoleW
DuplicateHandle
FindFirstFileW
SetEndOfFile
ord23
ord22
ord20
VariantClear
SysAllocString
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
BCryptCreateHash
BCryptHashData
BCryptFinishHash
BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
?dwPlaceholder@@3PAEA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ