Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
3b61956d2cb1abc2062ff1969d098a7d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3b61956d2cb1abc2062ff1969d098a7d.exe
Resource
win10v2004-20231215-en
Target
3b61956d2cb1abc2062ff1969d098a7d
Size
151KB
MD5
3b61956d2cb1abc2062ff1969d098a7d
SHA1
762889a651a0b40907c5862a3a4fce3c508879ef
SHA256
10c1df6ae4e35de13c94422802f2d45a71184aaa1b3a36a581c93bb3c6c783da
SHA512
b48f9034a4d19f4824a900ccd96e94a805f9ed73f90dabbafa8d66e718706076ddaf29aa6a1c7bd60924d3d08cc2b5d8891416dc87844c03bdf673a90c5ba70f
SSDEEP
3072:JOUu3KvbVtxtBGnmdt+WXsoYDAUWIP/C9oVi5d3FIYcfzOefV6fA:JncKrEg+WXsobQ/FktKY8ies
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CryptAcquireContextA
CryptReleaseContext
Sleep
InterlockedCompareExchange
RtlUnwind
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
MapViewOfFile
InterlockedExchange
GetFileSize
WriteFile
WideCharToMultiByte
GetSystemTime
SystemTimeToFileTime
CompareFileTime
MultiByteToWideChar
HeapSetInformation
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateFileW
UnmapViewOfFile
CloseHandle
GetLastError
SetLastError
GetModuleHandleA
CreateFileMappingA
malloc
_controlfp
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
scanf
memcpy
_wasctime
memset
_wtol
printf
wprintf
towupper
realloc
free
strtok
_vsnwprintf
_wcsicmp
vwprintf
LoadStringA
LoadStringW
CryptInitOIDFunctionSet
CertFreeCertificateContext
CertSetCertificateContextProperty
CertEnumCertificatesInStore
CryptEncodeObject
CertFreeCRLContext
CertGetCRLContextProperty
CertGetCRLFromStore
CertFreeCTLContext
CertAddCRLContextToStore
CertAddCTLContextToStore
CertEnumCTLsInStore
CertAddCertificateContextToStore
CertDeleteCRLFromStore
CertDuplicateCRLContext
CertDeleteCTLFromStore
CertDuplicateCTLContext
CertDeleteCertificateFromStore
CertDuplicateCertificateContext
CertFindCertificateInStore
CryptStringToBinaryA
CryptStringToBinaryW
CertCloseStore
CertAddEncodedCRLToStore
CertOpenStore
CertAddEncodedCertificateToStore
CertAddEncodedCTLToStore
CertRDNValueToStrW
CryptDecodeObject
CryptFindOIDInfo
CryptFreeOIDFunctionAddress
CryptGetOIDFunctionAddress
CryptMsgClose
CryptMsgUpdate
CryptMsgOpenToDecode
CertFindCTLInStore
CertGetCTLContextProperty
CryptMsgGetParam
CryptMsgGetAndVerifySigner
CryptHashPublicKeyInfo
CertGetPublicKeyLength
CertSaveStore
CertRDNValueToStrA
CertEnumCertificateContextProperties
CertGetCertificateContextProperty
CryptSIPRetrieveSubjectGuid
CryptSIPLoad
CryptInstallOIDFunctionAddress
CryptUIDlgCertMgr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE