Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
3b361c8b854226b02cf3bbc071941ce5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3b361c8b854226b02cf3bbc071941ce5.exe
Resource
win10v2004-20231222-en
Target
3b361c8b854226b02cf3bbc071941ce5
Size
528KB
MD5
3b361c8b854226b02cf3bbc071941ce5
SHA1
41dd1594624d43d1c0d9b112f664aa453c641720
SHA256
142ed8f0c8bd9ef225f52c6302ecc08c4b8ce444204374a6539156225e0717a8
SHA512
ea4a5c59b75dd4efef54237a76f590c468efbd0170eb4e96c42589c81635e20d5d0727941cb6f54c516da3408f81066a8a5c9bd6f1f435f4a3c850a739cb1251
SSDEEP
6144:lCXyuLWz8kzdKnfKPSfBihZvT/BdtaSXH8uJCfahPFcrB4E3XY:lCCuLFkEnfKqfBizvT/3YuhSB4E3
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
VirtualFree
GetModuleHandleA
ResumeThread
SuspendThread
VirtualAlloc
VirtualAllocEx
Sleep
GetLocalTime
GetProcAddress
LoadLibraryExW
GetLastError
CreateSemaphoreA
WriteFile
SetEvent
CloseHandle
GetFileSize
CreateMutexA
WaitForMultipleObjects
VirtualProtect
GetLocaleInfoA
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
RaiseException
HeapReAlloc
HeapAlloc
GetCPInfo
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetSystemInfo
LoadBitmapA
DestroyWindow
SHCreateShellItem
SCardEstablishContext
auxSetVolume
DrawDibClose
send
?gx@@3PAEA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ