Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
172ce6abfe8dadf95f4859e0907a6f13.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
172ce6abfe8dadf95f4859e0907a6f13.exe
Resource
win10v2004-20231215-en
Target
172ce6abfe8dadf95f4859e0907a6f13
Size
612KB
MD5
172ce6abfe8dadf95f4859e0907a6f13
SHA1
54188d174cfbcd52f4baeab4ddff97821388c295
SHA256
22c248467974e331400f68db8a096197c2430f6f6c270c31c3e7bb6d9ef4e45a
SHA512
225bd13b005cbe21591533aba2fae838643c1e266b29f4dd69180f41cfce23cdb4047efc44f448662c679bc1c6e3d189088a2d3f3e2e51a9b8dd4d4ca3251726
SSDEEP
12288:q8TRPUVU9CbASjaL5AzWxV9qshGn7+AfddddfZ:fgU9CbAR522V9qsh4T
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
InterlockedExchange
GetLastError
TerminateProcess
VirtualUnlock
GetTickCount
GetCommandLineA
GetModuleHandleA
OpenEventA
VirtualFreeEx
FindClose
TerminateThread
VirtualFree
VirtualProtect
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
VirtualAlloc
GetFileSizeEx
LocalUnlock
GetStringTypeA
RaiseException
VirtualQuery
RtlUnwind
HeapReAlloc
HeapAlloc
GetCPInfo
GetOEMCP
GetACP
LoadLibraryA
HeapFree
HeapCreate
GetSystemInfo
GetStartupInfoA
GetVersionExA
GetProcAddress
ExitProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
TranslateMessage
FindWindowA
EnumWindows
LoadIconA
LoadBitmapA
EnableWindow
ShowWindow
SetWindowTextW
CreateWindowExA
GetDC
SetPixel
GetPixel
SHCreateShellItem
CoCreateGuid
CoUninitialize
SysAllocString
VariantInit
recv
setsockopt
closesocket
select
send
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ