Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
11e24fd1ac50e370ed2457559dd5786e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11e24fd1ac50e370ed2457559dd5786e.exe
Resource
win10v2004-20231222-en
Target
11e24fd1ac50e370ed2457559dd5786e
Size
532KB
MD5
11e24fd1ac50e370ed2457559dd5786e
SHA1
e9be27028f59ebdc72f5a86fcf4db3920da970e7
SHA256
1451ccbe0a182f54f785fc9c4e14d1ba291a01ace4948978fa2aac19b587ca38
SHA512
2194c1b5e4ef6c4b3816688d40dda00cb3629c00902bafc8508753533e32d8dcef1a722958c73f3c0b12ccc35dba354568f490481679a085d6656860f2ae143a
SSDEEP
12288:2tNbtaK1I93XXqi5QPJJe4I2f32M4nKRPA3b7:Ma9H6i5tn9oAH
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ResumeThread
SuspendThread
GetTickCount
VirtualAlloc
VirtualAllocEx
GetLocalTime
LoadLibraryExW
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetLastError
ReadFile
CloseHandle
GetFileSize
CreateMutexA
WaitForSingleObject
VirtualProtect
GetLocaleInfoA
GetThreadPriority
VirtualFree
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RaiseException
GetSystemInfo
DestroyWindow
SelectObject
SHCreateShellItem
SCardEstablishContext
select
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ