Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
08b0c7518528ebd3adf4175149e8ca6a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
08b0c7518528ebd3adf4175149e8ca6a.exe
Resource
win10v2004-20231222-en
Target
08b0c7518528ebd3adf4175149e8ca6a
Size
1.9MB
MD5
08b0c7518528ebd3adf4175149e8ca6a
SHA1
5306315805ca6ada34038d77d7d11edb405f5d67
SHA256
14d4488a60d84fb4dee0eeabbad515e942ec56b46b401d5dd0b59d09fda442d1
SHA512
68e1a7224e4c8b12426994711965e170f55b484ed2fe0a9286fb8606d6f4eb1793892d6188fdc245125ea0695a50f17c2bf266f4276f7e77e52161fdf97c0ad2
SSDEEP
24576:fuc604vSbuxyX67A1uFfTt2Ajf7KQDpuTHHtUwR7q5JQJComF+uv:B4vSK+OA1u5t2Ajf6THHP8JQJCUu
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
UuidToStringW
UuidCreate
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
?nf_udpPostSend@nfapi@@YA?AW4_NF_STATUS@@_KPBEPBDHPAU_NF_UDP_OPTIONS@1@@Z
?nf_tcpPostSend@nfapi@@YA?AW4_NF_STATUS@@_KPBDH@Z
?nf_free@nfapi@@YAXXZ
?nf_tcpSetConnectionState@nfapi@@YA?AW4_NF_STATUS@@_KH@Z
?nf_setOptions@nfapi@@YAXKK@Z
?nf_init@nfapi@@YA?AW4_NF_STATUS@@PBDPAVNF_EventHandler@1@@Z
?nf_udpSetConnectionState@nfapi@@YA?AW4_NF_STATUS@@_KH@Z
?nf_adjustProcessPriviledges@nfapi@@YAXXZ
?nf_udpPostReceive@nfapi@@YA?AW4_NF_STATUS@@_KPBEPBDHPAU_NF_UDP_OPTIONS@1@@Z
?nf_getProcessNameW@nfapi@@YAHKPA_WK@Z
?nf_addRule@nfapi@@YA?AW4_NF_STATUS@@PAU_NF_RULE@1@H@Z
?nf_tcpPostReceive@nfapi@@YA?AW4_NF_STATUS@@_KPBDH@Z
?PFObject_create@ProtocolFilters@@YAPAVPFObject@1@HH@Z
?pf_init@ProtocolFilters@@YAHPAVPFEvents@1@PB_W@Z
?pf_getNFEventHandler@ProtocolFilters@@YAPAVNF_EventHandler@nfapi@@XZ
?pf_addFilter@ProtocolFilters@@YAH_KW4_PF_FilterType@1@KW4_PF_OpTarget@1@1@Z
?pf_setRootSSLCertSubject@ProtocolFilters@@YAXPBD@Z
?pf_postObject@ProtocolFilters@@YAH_KPAVPFObject@1@@Z
?pf_free@ProtocolFilters@@YAXXZ
SetFileAttributesA
SetFileAttributesW
SetFilePointer
GetTempPathA
MoveFileA
MoveFileW
CompareFileTime
GetSystemTime
GetLocalTime
FileTimeToSystemTime
SystemTimeToFileTime
GetCurrentThreadId
GetTickCount
FormatMessageA
GetComputerNameW
GetACP
GetOEMCP
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetFileSize
ReadFile
SetEndOfFile
WriteFile
GetVersionExA
CreateFileW
GetProcAddress
LoadLibraryA
FreeLibrary
GetSystemTimeAsFileTime
DuplicateHandle
GetCurrentProcess
GetCurrentThread
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
InterlockedExchange
GetStringTypeW
IsProcessorFeaturePresent
HeapFree
HeapAlloc
CreateTimerQueueTimer
HeapReAlloc
GetCommandLineW
RtlUnwind
GetTimeZoneInformation
GetProcessHeap
RaiseException
ExitThread
LoadLibraryExW
TlsGetValue
GetCPInfo
CreateTimerQueue
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
TerminateProcess
TlsAlloc
TlsSetValue
TlsFree
GetStartupInfoW
CreateSemaphoreW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetStdHandle
DeleteTimerQueueTimer
GetProcessAffinityMask
SetThreadAffinityMask
ReleaseSemaphore
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
SwitchToThread
UnregisterWaitEx
ChangeTimerQueueTimer
GetNumaHighestNodeNumber
RegisterWaitForSingleObject
GetFileType
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
ReadConsoleW
SetStdHandle
OutputDebugStringW
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
SetThreadPriority
GetVersionExW
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryW
UnregisterWait
WriteConsoleW
SetEnvironmentVariableA
GetThreadPriority
SignalObjectAndWait
GetFullPathNameW
GetFullPathNameA
GetFileAttributesW
GetFileAttributesA
DeleteFileA
CreateFileA
CreateDirectoryW
CreateDirectoryA
GetCurrentDirectoryW
GetCurrentDirectoryA
MultiByteToWideChar
GetModuleFileNameW
WideCharToMultiByte
GetModuleHandleW
CreateThread
DeleteFileW
CloseHandle
CreateEventW
GetLastError
GetTempPathW
Sleep
InitializeCriticalSectionAndSpinCount
SetEvent
WaitForSingleObject
IsDebuggerPresent
CryptEnumProvidersA
SetServiceStatus
RegisterServiceCtrlHandlerW
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
GetUserNameA
RegCreateKeyExA
RegOpenKeyExA
CryptAcquireContextA
RegQueryValueExA
RegSetValueExA
CryptReleaseContext
CryptGenRandom
CryptDestroyKey
CryptExportKey
CryptCreateHash
CryptDestroyHash
CryptGetUserKey
CryptAcquireContextW
CryptSetHashParam
CryptSignHashA
CryptGetProvParam
StartServiceCtrlDispatcherW
ShellExecuteW
PathFileExistsW
setsockopt
shutdown
socket
gethostbyname
WSAStartup
WSAGetLastError
ioctlsocket
connect
send
bind
__WSAFDIsSet
inet_ntoa
getsockname
getsockopt
htons
inet_addr
select
recv
closesocket
ntohs
CertDuplicateCertificateContext
CertCreateCertificateContext
CertFreeCertificateContext
CertSetCertificateContextProperty
CertGetCertificateContextProperty
CertNameToStrW
CertOpenStore
CertCloseStore
CertGetSubjectCertificateFromStore
CertEnumCertificatesInStore
CryptEncodeObject
CryptMsgOpenToDecode
CryptMsgClose
CryptMsgUpdate
CryptMsgGetParam
CryptMsgControl
CryptEncryptMessage
CryptDecryptMessage
CryptDecodeObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ