Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
416d2c5e0f1306321ff4aa05aebd175e55aea6579f8062777a5feb2bb5ea6c95.exe
Resource
win7-20231020-en
Target
416d2c5e0f1306321ff4aa05aebd175e55aea6579f8062777a5feb2bb5ea6c95
Size
1.0MB
MD5
db0c5cbd776f17c7c06df6cabd908282
SHA1
44da893813ce219c616aefb6cf29e71e27e6f419
SHA256
416d2c5e0f1306321ff4aa05aebd175e55aea6579f8062777a5feb2bb5ea6c95
SHA512
2cfa156bb4820db963c6219483948a72c51c4849215198df8d1fb474d6e4943340bef46fc3ebcd4befbd7596913742c2f197f640b4508c9f1982cf69cbaf2079
SSDEEP
3072:FS4IE2ArRC2PRQ6CgxoCxmUd12i/8Y8rfulU8bax1i2NXu02LbjfrzyJKqAcwBu8:FcEGCxz3dUi278b4NX07fsALu8
ExtKeyUsageCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetFilePointer
SetErrorMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
GetTimeZoneInformation
GetCPInfo
SetFilePointerEx
OutputDebugStringW
WriteConsoleW
SetEnvironmentVariableA
VirtualFree
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetOEMCP
GetACP
PeekNamedPipe
IsValidCodePage
GetStartupInfoW
GetStdHandle
VirtualQuery
VirtualAlloc
GetModuleHandleExW
ExitProcess
HeapQueryInformation
ExitThread
CreateThread
IsProcessorFeaturePresent
RtlUnwind
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
VirtualProtect
SearchPathW
GetProfileIntW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
lstrcpyW
GlobalFindAtomW
GlobalDeleteAtom
GlobalFlags
GetUserDefaultUILanguage
EncodePointer
GlobalAddAtomW
ResumeThread
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameW
FlushFileBuffers
GetFileAttributesExW
GlobalGetAtomNameW
GetCurrentProcessId
LocalReAlloc
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetModuleHandleA
OutputDebugStringA
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcmpA
FormatMessageW
GlobalSize
FindResourceExW
SetThreadPriority
CompareStringW
WideCharToMultiByte
GetVersionExA
GetVolumeInformationW
FindFirstFileW
GetFileAttributesW
CreateDirectoryW
GetCurrentDirectoryW
GetWindowsDirectoryW
GetTempPathW
GetSystemDirectoryW
GetDriveTypeW
GetPrivateProfileStringW
GetPrivateProfileIntW
LoadLibraryW
lstrlenW
lstrcpynW
GetFileTime
FindClose
GetFileSize
GetFileInformationByHandle
GetCurrentThread
GetProcessHeap
HeapSize
HeapReAlloc
HeapDestroy
GetTickCount
Sleep
WaitForSingleObject
LocalFree
LocalAlloc
SetCurrentDirectoryW
LoadLibraryExW
lstrcmpiW
FreeLibrary
DecodePointer
MultiByteToWideChar
GetVersionExW
CopyFileW
DeleteFileW
FindResourceW
CreateProcessW
GetModuleHandleW
GetModuleFileNameW
lstrcmpW
GetSystemInfo
MulDiv
SizeofResource
LoadResource
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetLastError
GetCurrentThreadId
RaiseException
FlushInstructionCache
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
GetProcAddress
LockResource
FreeResource
InterlockedDecrement
InterlockedIncrement
CreateFileW
CloseHandle
ReadFile
WriteFile
ReadConsoleW
GetFileSizeEx
LoadLibraryExA
VirtualAllocEx
LoadIconA
IsGUIThread
LoadCursorFromFileA
GetWindowTextLengthW
GetStockObject
GetUserNameA
RegOpenKeyA
RegQueryValueExA
ImageList_Destroy
ImageList_Create
ord17
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ