Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
wgc.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
wgc.exe
Resource
win10v2004-20231130-en
Target
wgc.exe
Size
2.1MB
MD5
013725a4449430271c44a3d84405d713
SHA1
9719bd23ccdc09aa326e37ecdfa6feadc6d85bf9
SHA256
71bee1b095f32083c6e133ed95561fc19738c3b8f2b16cd77026f814c74f50f4
SHA512
d4f8802a07cd5ac6328a8db24dc5983a1beea3e3281f0b0eadde45bb730df1db83ddfe719c643b75055f20930994c024e2ce134d3a16f1377df25c776c284717
SSDEEP
49152:LyfDbnBjpDoam8uYL6K8DXHGC0LbpS9TLpy6cd5vh8zGOcf:LYPDgeOTLorf
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetLastError
lstrlenW
GetModuleHandleExW
lstrlenA
GetModuleHandleExA
GetLastError
GetProcAddress
GetModuleHandleW
FormatMessageW
WideCharToMultiByte
LocalFree
CreateNamedPipeW
LoadLibraryW
IsProcessInJob
GetCurrentProcess
SetDllDirectoryW
IsDebuggerPresent
CreateMutexA
ReleaseMutex
TerminateProcess
SetErrorMode
GetCommandLineW
CreateSemaphoreA
CreateEventA
DuplicateHandle
ReleaseSemaphore
CloseHandle
HeapAlloc
GetProcessHeap
HeapFree
SetEvent
WaitForSingleObjectEx
VirtualProtect
EnterCriticalSection
VirtualAlloc
SetThreadPriority
LeaveCriticalSection
InitializeCriticalSection
GetCurrentThreadId
SuspendThread
ResumeThread
Sleep
GetCurrentThread
GetThreadPriority
GetSystemInfo
GetThreadContext
GetCurrentProcessId
FlushInstructionCache
VirtualQuery
OpenThread
InterlockedPopEntrySList
VirtualFree
GetVersionExW
GetThreadTimes
UnregisterWait
SetThreadAffinityMask
GetProcessAffinityMask
RaiseException
FreeLibrary
LoadLibraryExA
GetFileAttributesW
K32GetModuleFileNameExW
OpenProcess
CreateEventW
ResetEvent
DeleteCriticalSection
FindFirstFileW
FindNextFileW
FindClose
MultiByteToWideChar
GetModuleFileNameW
GetSystemTimeAsFileTime
GetProcessTimes
InitializeCriticalSectionEx
DecodePointer
CreateProcessW
GetCurrentDirectoryW
HeapDestroy
HeapReAlloc
HeapSize
GetTempPathW
UnregisterWaitEx
RegisterWaitForSingleObject
GetExitCodeProcess
GetLocaleInfoW
CreateFileW
DeviceIoControl
LocalLock
LocalAlloc
MulDiv
LocalUnlock
InitializeSListHead
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
TryEnterCriticalSection
CreateDirectoryW
FindFirstFileExW
GetFileAttributesExW
GetFileInformationByHandle
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
QueryPerformanceFrequency
GetStringTypeW
GetExitCodeThread
GetNativeSystemInfo
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetTickCount
GetCPInfo
CompareStringW
LCMapStringW
SetCurrentDirectoryW
DeleteFileW
GetFullPathNameW
RemoveDirectoryW
MoveFileExW
WaitForMultipleObjectsEx
OpenEventA
SetWaitableTimer
GetLogicalProcessorInformation
GetModuleHandleA
CreateWaitableTimerA
OutputDebugStringW
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW
RtlUnwind
ExitProcess
GetStdHandle
GetFileType
GetModuleFileNameA
WriteConsoleW
SetConsoleCtrlHandler
WriteFile
GetACP
GetDriveTypeW
SetEnvironmentVariableA
SetEnvironmentVariableW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
GetTimeZoneInformation
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
ReadConsoleW
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
QueryDepthSList
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ