Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
301a1efb0fcbd0265f7ecce1d36ce4eb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
301a1efb0fcbd0265f7ecce1d36ce4eb.exe
Resource
win10v2004-20231215-en
Target
301a1efb0fcbd0265f7ecce1d36ce4eb
Size
524KB
MD5
301a1efb0fcbd0265f7ecce1d36ce4eb
SHA1
386b986d535c9c4f68fe1f2d26bd84df6fd43044
SHA256
4153628d4a481d8512d52d3593eddef37e2795dbeb3dd6c12fbdd3e971327ebf
SHA512
1f5aa495206921ea48898e35fdd9f0548173f86a188e1a14a8ae8c9a2dfcd946b190db25274dc5ceb51a80644f0a483e8048fdff9f42f8e0d341ea04d8e14b4c
SSDEEP
6144:+BkVjsHHlMyvVZwRfvYHyhMfB8UIUHQJkQlh24keE68mtT6xv3lhN0:+BkVy26VMfvrMBk3e2keE68mtT4vG
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
VirtualFree
GetModuleHandleA
ResumeThread
SuspendThread
VirtualAlloc
VirtualAllocEx
Sleep
GetLocalTime
LoadLibraryExW
GetProcAddress
LoadLibraryW
GetLastError
WriteFile
CloseHandle
GetFileSize
CreateMutexA
WaitForMultipleObjects
VirtualProtect
GetLocaleInfoA
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
RaiseException
HeapReAlloc
HeapAlloc
GetCPInfo
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetSystemInfo
LoadBitmapA
DestroyWindow
SHCreateShellItem
SCardEstablishContext
auxSetVolume
DrawDibClose
send
?gx@@3PAEA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ