Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
a3babceed625938f1a8046899a17ae59f56eae3033bc37a0eaf398472dcf186d.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
a3babceed625938f1a8046899a17ae59f56eae3033bc37a0eaf398472dcf186d.exe
Resource
win10v2004-20231023-en
Target
a3babceed625938f1a8046899a17ae59f56eae3033bc37a0eaf398472dcf186d
Size
842KB
MD5
214fae5a642240511b66047cc90a63a5
SHA1
0c6f337c8419c09c1fb564a054777d94bcb5411c
SHA256
a3babceed625938f1a8046899a17ae59f56eae3033bc37a0eaf398472dcf186d
SHA512
c628d9a9e19ed1a19d84389cce3e08c70a3699457971c9c9d881ab99eeb228ec74a2eef9db5c7f66ee7242f397496757a1d9267fef7c21af29125a1c19f4efe3
SSDEEP
6144:BEWhZP2Ubecc830D+SOgxLQXI966PehLgOo7YOPi7tq+yOYP96pRBwq3gzUWsm9o:pZei9SOgxn9PBrtwFyyjf3gg9m9o
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetLastError
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
GetModuleHandleA
GetProcAddress
GetCurrentThread
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetStdHandle
GetConsoleMode
WaitForSingleObject
WriteConsoleW
SetLastError
GetCurrentDirectoryW
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
GetCurrentProcess
ReleaseMutex
GetEnvironmentVariableW
GetCommandLineW
GetModuleHandleW
FormatMessageW
GetModuleFileNameW
CreateFileW
GetFullPathNameW
AcquireSRWLockExclusive
GetEnvironmentStringsW
FreeEnvironmentStringsW
CompareStringOrdinal
GetSystemDirectoryW
GetWindowsDirectoryW
CreateProcessW
GetFileAttributesW
DuplicateHandle
CreateThread
GetCurrentProcessId
CreateNamedPipeW
ReadFileEx
SleepEx
WriteFileEx
RtlCaptureContext
AcquireSRWLockShared
ReleaseSRWLockShared
RtlLookupFunctionEntry
CloseHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
RtlVirtualUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
SystemFunction036
BCryptGenRandom
NtAllocateVirtualMemory
NtTestAlert
NtQueueApcThread
NtWriteVirtualMemory
memcmp
memmove
_CxxThrowException
__C_specific_handler
__current_exception
__current_exception_context
memset
memcpy
__CxxFrameHandler3
_seh_filter_exe
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initterm
_get_initial_narrow_environment
_exit
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_initialize_narrow_environment
exit
_set_app_type
_configure_narrow_argv
_initterm_e
__setusermatherr
__p__commode
_set_fmode
_configthreadlocale
free
_set_new_mode
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ