Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
6919d035a85ebbbc6eb3ddd4273400f7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
6919d035a85ebbbc6eb3ddd4273400f7.exe
Resource
win10v2004-20231215-en
Target
6919d035a85ebbbc6eb3ddd4273400f7
Size
815KB
MD5
6919d035a85ebbbc6eb3ddd4273400f7
SHA1
7bdcf16059f2a84359157f8ad3c7ba5c49877068
SHA256
167e52974b6688ce2c92ddf12abcc0815eb010363206517f6c0c8c89e681ea9b
SHA512
296f6d0c62c6a32486742eb284d12a9e6dd60b3ee5b9f8c31a03879da4cd58f3564c71139721e9c5093e7c6fd3f697769799948c8405254ec3e3e62faeb50728
SSDEEP
12288:3Mwy6Vadc8/dYyWU8STNqGC51H5z9jrcUQr8tK+PkYIdpQMJs:3PrVCH/z8GXuRjYeKykYIcH
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetLastError
DelayLoadFailureHook
OpenMutexW
PulseEvent
GlobalHandle
VerifyVersionInfoW
GetEnvironmentStrings
WriteProfileSectionW
FindAtomW
lstrcmp
TerminateThread
AttachConsole
SetStdHandle
FindFirstChangeNotificationW
SetLastConsoleEventActive
ChangeTimerQueueTimer
GetCommConfig
GetDriveTypeA
CommConfigDialogA
SetEndOfFile
SetCommState
EndUpdateResourceW
WriteTapemark
DeleteTimerQueueEx
FindResourceA
GetEnvironmentVariableA
GetCPInfo
BuildCommDCBA
LocalSize
DeleteAtom
IsProcessorFeaturePresent
VerifyConsoleIoHandle
GetUserDefaultLangID
FormatMessageA
TransmitCommChar
WriteConsoleOutputW
InitializeCriticalSection
LCMapStringA
GlobalLock
OpenMutexA
SetProcessPriorityBoost
InterlockedExchange
WaitForSingleObjectEx
GetShortPathNameA
GlobalUnlock
GetExpandedNameW
GetProfileSectionW
QueryMemoryResourceNotification
FreeUserPhysicalPages
QueryActCtxW
GetTimeFormatA
FindNextVolumeW
FindNextFileW
WaitNamedPipeA
GetCurrentActCtx
GetEnvironmentVariableW
RestoreLastError
QueryDosDeviceW
GlobalGetAtomNameW
GetProcessVersion
QueryInformationJobObject
IsBadCodePtr
FoldStringW
CreateJobObjectW
DisableThreadLibraryCalls
CreateSocketHandle
WritePrivateProfileStructA
GetFileAttributesW
CreateFileW
GetConsoleAliasesA
GetTapeStatus
IsProcessInJob
CopyFileExA
lstrcmpi
SetCriticalSectionSpinCount
DeleteVolumeMountPointW
SetTapeParameters
GetCommState
GetLocalTime
FreeLibrary
MoveFileExW
QueryPerformanceCounter
CloseProfileUserMapping
GetTimeZoneInformation
FindResourceW
OutputDebugStringA
GetDiskFreeSpaceExW
GetProcessTimes
GetHandleInformation
SetTimerQueueTimer
GetDateFormatA
AddConsoleAliasA
SetVolumeLabelW
CompareStringA
FindFirstChangeNotificationA
GetVolumePathNamesForVolumeNameW
GetEnvironmentStringsW
HeapLock
BackupRead
MapViewOfFileEx
EnumResourceTypesW
RtlCaptureContext
EnumCalendarInfoW
GetNumberFormatW
SetVolumeMountPointA
IsBadHugeWritePtr
GlobalUnfix
GetCurrentDirectoryW
GetCurrentDirectoryA
OpenSemaphoreA
GetVolumePathNameA
WritePrivateProfileStringW
GetProfileStringW
GetExitCodeProcess
WinExec
FindActCtxSectionGuid
LZCopy
VirtualFreeEx
CreateConsoleScreenBuffer
FindVolumeClose
CreateMailslotW
QueryDosDeviceA
WaitNamedPipeW
VerLanguageNameA
ExitThread
FindNextVolumeMountPointA
GetCalendarInfoA
GetDevicePowerState
UnmapViewOfFile
SetDefaultCommConfigW
GetHandleContext
BackupWrite
WriteProfileSectionA
OpenWaitableTimerW
lstrcpyn
SetLocaleInfoW
ActivateActCtx
DefineDosDeviceA
GetCurrentThread
CreateDirectoryExA
CompareStringW
GlobalAddAtomW
CancelDeviceWakeupRequest
GetFileInformationByHandle
LZStart
GetLocaleInfoW
EnumResourceTypesA
lstrcpy
RemoveVectoredExceptionHandler
GetConsoleKeyboardLayoutNameW
RtlUnwind
UnlockFile
GetConsoleAliasesW
GetShortPathNameW
EnumDateFormatsExA
HeapQueryInformation
GetBinaryTypeW
BeginUpdateResourceA
UnlockFileEx
CreateEventA
AddVectoredExceptionHandler
GetTapeParameters
GlobalGetAtomNameA
ReadConsoleInputW
GetModuleHandleExA
WriteFileGather
GetConsoleTitleW
GetLogicalDriveStringsA
ReadConsoleOutputCharacterA
GetFileSizeEx
FindFirstFileA
ReadConsoleOutputAttribute
GetSystemTime
GlobalWire
GetStartupInfoW
FindVolumeMountPointClose
SearchPathA
MulDiv
VerLanguageNameW
OpenFile
GetProcessAffinityMask
AddConsoleAliasW
SetLocalTime
GetUserGeoID
GetTimeFormatW
MapViewOfFile
CallNamedPipeW
GetCurrencyFormatW
DeleteVolumeMountPointA
GetConsoleCursorMode
SetComPlusPackageInstallStatus
SetFileShortNameW
GetDriveTypeW
GetFileAttributesA
CancelWaitableTimer
ReplaceFile
WaitForMultipleObjectsEx
GetVersion
RtlMoveMemory
EnumDateFormatsA
GetConsoleTitleA
PrivCopyFileExW
SetThreadContext
TlsSetValue
WriteConsoleOutputAttribute
CreatePipe
RtlFillMemory
GetCurrentConsoleFont
GetCommModemStatus
Heap32Next
SetProcessAffinityMask
GetCommProperties
OutputDebugStringW
SetFileApisToOEM
FindNextVolumeA
SetThreadLocale
LZOpenFileW
GetModuleFileNameA
SetComputerNameW
GetSystemDefaultLangID
FindFirstFileW
IsWow64Process
SetFilePointer
GetLongPathNameW
GetGeoInfoW
CloseHandle
GetConsoleHardwareState
ResetEvent
ReadConsoleInputExA
LZCloseFile
DosPathToSessionPathA
GetPriorityClass
FindFirstVolumeMountPointA
GetCalendarInfoW
ReadConsoleOutputW
GetProcessShutdownParameters
GetConsoleWindow
HeapCreate
GetProcessHeaps
EnumCalendarInfoA
HeapWalk
GetConsoleSelectionInfo
LocalHandle
VirtualQueryEx
EraseTape
GlobalMemoryStatus
SetSystemPowerState
MoveFileWithProgressW
GetTempPathA
DosPathToSessionPathW
UpdateResourceA
GetTapePosition
LockFileEx
CreateJobObjectA
LockFile
GetProcessPriorityBoost
CreateFileA
WritePrivateProfileSectionA
EnumDateFormatsExW
GlobalReAlloc
FindNextChangeNotification
UnhandledExceptionFilter
GetDiskFreeSpaceA
ShowConsoleCursor
CreateJobSet
GetNamedPipeHandleStateW
SetProcessWorkingSetSize
ClearCommBreak
WritePrivateProfileStringA
GetCurrentProcess
LocalReAlloc
CopyLZFile
lstrcat
FindActCtxSectionStringW
SetWaitableTimer
IsValidCodePage
FoldStringA
GetConsoleInputExeNameA
SetInformationJobObject
GetProcessHeap
SetEnvironmentVariableA
PeekConsoleInputA
GetPrivateProfileStringA
SetHandleInformation
lstrcmpA
HeapAlloc
IsBadWritePtr
RemoveDirectoryA
GetACP
lstrcmpW
GetVersionExA
GetConsoleMode
DnsHostnameToComputerNameW
DisconnectNamedPipe
GetLocaleInfoA
GetVolumeInformationW
TzSpecificLocalTimeToSystemTime
GetUserDefaultLCID
GetExpandedNameA
HeapSetInformation
CreateActCtxW
FillConsoleOutputCharacterA
WriteConsoleOutputCharacterA
SetUserGeoID
RtlZeroMemory
DosDateTimeToFileTime
WriteConsoleOutputCharacterW
GetGeoInfoA
HeapDestroy
CreateTapePartition
CreateWaitableTimerA
GetDefaultCommConfigA
RemoveDirectoryW
Heap32ListFirst
ProcessIdToSessionId
CreateNamedPipeW
AddAtomW
SetPriorityClass
EnumLanguageGroupLocalesW
GetThreadContext
MoveFileExA
WideCharToMultiByte
FreeResource
CreateSemaphoreW
GetConsoleProcessList
GetCPInfoExW
GetTempPathW
GetOverlappedResult
GlobalCompact
WriteConsoleInputW
SetThreadAffinityMask
lstrcmpiW
LeaveCriticalSection
GetSystemInfo
GetSystemPowerStatus
GetThreadLocale
WriteConsoleInputA
ExpandEnvironmentStringsW
ReadConsoleW
GetConsoleCursorInfo
SetFileShortNameA
BuildCommDCBAndTimeoutsW
WriteConsoleW
LoadResource
ReadConsoleInputA
GetSystemDefaultUILanguage
SetProcessShutdownParameters
LocalUnlock
InterlockedExchangeAdd
GlobalFree
LocalFree
LoadLibraryExA
GetModuleHandleW
LocalAlloc
GlobalAlloc
VirtualUnlock
GetTickCount
GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
IsHungAppWindow
AnyPopup
KillTimer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ