Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
Set-up.exe
Resource
win10v2004-20231020-en
Target
Set-up.exe
Size
5.1MB
MD5
443bd40ccefbaea42587835de596d618
SHA1
698b67945e0cee11889262a22568df8d76fd8eb0
SHA256
8304f1ba2da3db1a0074c0ff70f3957f598254c8e0bb62bb3aa69f7f57cd796f
SHA512
89134f8a9cf9ddecb4be6aa6991388fd67cf0fe3ccf7ef5b739f0944dadf489b52df0fc6c50e35f5b2eb6e3f48e0d71aab65ab73034e99d15414af48cb867813
SSDEEP
49152:ZTmtK622aUX64F0GzbAM8elO+79SFTg0wT8+/LeBxhL67Sy5BpNTVD0WATG5OYSI:hmYgaUX62HD/70Fw
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
CM_Get_DevNode_Status
SetupDiGetDeviceInstanceIdW
SHGetPathFromIDListW
SHGetMalloc
ord680
SHBrowseForFolderW
SHGetSpecialFolderLocation
ShellExecuteExW
ord51
ShellExecuteW
SHGetKnownFolderPath
SHCreateDirectoryExW
CommandLineToArgvW
SHGetFolderPathW
SHGetFolderLocation
SHGetSpecialFolderPathW
PathStripToRootW
PathFindFileNameW
PathIsDirectoryW
PathIsUNCW
PathStripPathW
PathRemoveBackslashW
PathRenameExtensionW
PathFileExistsW
PathRemoveFileSpecW
PathAppendW
PathFileExistsA
PathIsFileSpecW
PathRemoveExtensionW
PathIsNetworkPathW
PathAddExtensionW
PathIsRelativeW
UrlIsW
LoadLibraryW
GetProcAddress
GetModuleHandleW
FreeLibrary
FindFirstFileW
FindNextFileW
TerminateProcess
RemoveDirectoryW
GetModuleFileNameW
GetTempPathW
FindClose
WaitForSingleObject
OpenProcess
SetFileAttributesW
CreateToolhelp32Snapshot
Sleep
GetLastError
Process32NextW
DeleteFileW
Process32FirstW
CreateProcessW
CopyFileW
GetExitCodeProcess
ReadFile
SetLastError
lstrlenW
LocalAlloc
GetFileAttributesW
FormatMessageW
GetDiskFreeSpaceExW
GetCurrentDirectoryW
SetCurrentDirectoryW
LocalFree
MoveFileExW
GetFileSize
lstrcpyW
lstrcmpiW
lstrcmpW
GetDriveTypeW
InitializeCriticalSectionEx
DecodePointer
DeleteCriticalSection
HeapSize
HeapReAlloc
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
GetSystemDirectoryW
SetDllDirectoryW
GetStdHandle
AttachConsole
FreeConsole
GetConsoleWindow
CreateMutexW
ReleaseMutex
InitializeCriticalSectionAndSpinCount
AreFileApisANSI
HeapCreate
GetFullPathNameW
WriteFile
InterlockedCompareExchange
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
InitializeCriticalSection
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
UnmapViewOfFile
HeapValidate
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
CreateFileA
LoadLibraryA
GetVersionExA
DeleteFileA
GetSystemInfo
HeapCompact
UnlockFile
CreateFileMappingA
GetCurrentProcessId
SystemTimeToFileTime
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
CreateSymbolicLinkW
GetUserDefaultUILanguage
CreateEventW
SetEvent
ResetEvent
TryEnterCriticalSection
CreateDirectoryW
GetFileSizeEx
GetLocalTime
GetTimeFormatW
GetDateFormatW
RaiseException
ReleaseSemaphore
OpenSemaphoreW
CreateSemaphoreW
InterlockedDecrement
QueryPerformanceFrequency
CreateThread
SetFilePointerEx
TerminateThread
ResumeThread
GlobalFree
SizeofResource
LockResource
LoadResource
FindResourceW
VerSetConditionMask
VerifyVersionInfoW
GetUserDefaultLCID
LCMapStringW
WaitForMultipleObjects
DuplicateHandle
ProcessIdToSessionId
FindResourceExW
GetThreadTimes
QueryFullProcessImageNameW
GetUserDefaultLangID
SetNamedPipeHandleState
CreateNamedPipeW
ConnectNamedPipe
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileTime
GetTimeZoneInformation
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
LoadLibraryExW
GetModuleHandleA
FreeLibraryAndExitThread
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLocaleInfoW
CompareStringW
GetCPInfo
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentThread
WaitForSingleObjectEx
GetStringTypeW
EncodePointer
LoadLibraryExA
VirtualQuery
VirtualProtect
GetNativeSystemInfo
CloseHandle
GetVersionExW
CreateFileW
SetStdHandle
GetModuleHandleExW
ExitProcess
GetACP
IsValidLocale
EnumSystemLocalesW
GetConsoleMode
ReadConsoleW
GetConsoleCP
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
DeviceIoControl
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
GetProcessHeap
HeapAlloc
HeapFree
GetFileType
RtlUnwind
WriteConsoleW
OpenMutexW
LockFileEx
GetWindowTextLengthW
GetWindowThreadProcessId
GetWindowLongW
wsprintfW
GetMessageW
DefWindowProcW
CallWindowProcW
PostThreadMessageW
LoadImageW
SystemParametersInfoW
EnableMenuItem
LoadIconW
GetSystemMetrics
GetSystemMenu
PostMessageW
GetWindow
GetFocus
EnumWindows
GetShellWindow
AllowSetForegroundWindow
GetClassLongW
AppendMenuW
DestroyWindow
FillRect
CreateWindowExW
ScreenToClient
SetWindowTextW
RegisterClassExW
GetActiveWindow
ShowWindow
IsWindow
InvalidateRgn
DispatchMessageW
RedrawWindow
ClientToScreen
DestroyAcceleratorTable
IsChild
AttachThreadInput
GetSysColor
GetForegroundWindow
MoveWindow
SetFocus
CharNextW
BringWindowToTop
TranslateAcceleratorW
TranslateMessage
LoadCursorW
GetClassNameW
SetCapture
SetWindowLongW
GetClientRect
GetDlgItem
PostQuitMessage
GetClassInfoExW
GetParent
RegisterWindowMessageW
ReleaseCapture
SetForegroundWindow
InvalidateRect
IsIconic
BeginPaint
EndPaint
GetWindowTextW
GetWindowRect
GetDC
SetWindowPos
MessageBoxW
SendMessageW
GetDesktopWindow
ReleaseDC
UnregisterClassW
GetAsyncKeyState
SetClassLongW
CreateAcceleratorTableW
CreateCompatibleDC
GetStockObject
DeleteDC
SelectObject
DeleteObject
CreateSolidBrush
GetDeviceCaps
CreateCompatibleBitmap
BitBlt
GetObjectW
EqualSid
RegOpenKeyExW
LookupAccountSidW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptReleaseContext
SetSecurityDescriptorDacl
SystemFunction036
RegQueryValueExW
GetUserNameW
DuplicateTokenEx
ConvertSidToStringSidW
ImpersonateLoggedOnUser
ConvertStringSidToSidW
RevertToSelf
RegCreateKeyExW
RegCloseKey
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
CreateWellKnownSid
GetTokenInformation
GetNamedSecurityInfoW
SetNamedSecurityInfoW
SetEntriesInAclW
RegFlushKey
RegSetValueExW
InitializeSecurityDescriptor
FreeSid
AllocateAndInitializeSid
CoAddRefServerProcess
CoReleaseServerProcess
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize
CoInitialize
OleLockRunning
CLSIDFromString
OleInitialize
CreateStreamOnHGlobal
CLSIDFromProgID
CoTaskMemAlloc
OleUninitialize
CoGetClassObject
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoCreateGuid
OleRun
VariantClear
SysAllocStringLen
SysStringLen
SysAllocString
OleCreateFontIndirect
LoadTypeLi
VariantInit
LoadRegTypeLi
SysAllocStringByteLen
VariantChangeType
VariantCopy
SysStringByteLen
DispCallFunc
SysFreeString
GetErrorInfo
BCryptFinishHash
BCryptCreateHash
BCryptHashData
BCryptDestroyHash
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
BCryptGetProperty
GetUserNameExW
CertGetIssuerCertificateFromStore
CertGetNameStringW
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
WTHelperGetProvCertFromChain
WinVerifyTrust
InitCommonControlsEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ