Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
665b1e8924e8117ddaa0d7628ac3ad70de8c4c4456ccf14bd9871c246f0de69e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
665b1e8924e8117ddaa0d7628ac3ad70de8c4c4456ccf14bd9871c246f0de69e.exe
Resource
win10v2004-20231215-en
Target
665b1e8924e8117ddaa0d7628ac3ad70de8c4c4456ccf14bd9871c246f0de69e.exe.zip
Size
11.2MB
MD5
320f0e54b5f31fffb3352aac90c28426
SHA1
3363498423e9ad0079b81d4af989d6fe6ea0c50f
SHA256
edef6784b742ec5527b547e084713a478db2e68fb014fbafde8bd9c70140afe5
SHA512
51c7a826233bec0eb64cebfd49a8ebff077332a429009816c8f15676d8ef1e9c205f83e7c78b2bc80e888a85457fbe3df2c2b2d425da97f13c90e295b6423b93
SSDEEP
196608:8BNURZH4ovho0oiShbhPPv3Z5NxHn7eCUwJgekbQkL8hb05t8T1lu8:8BNUHbvhqiSZhPX3Z5PH73Jg3Cm5KT1n
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
FindNextChangeNotification
SetHandleInformation
CreateProcessA
EnumSystemLocalesA
GetLocaleInfoA
SetEnvironmentVariableA
IsValidCodePage
GetOEMCP
GetACP
HeapSetInformation
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FlsAlloc
FlsFree
FlsSetValue
FlsGetValue
LCMapStringW
FindFirstChangeNotificationW
CreatePipe
CreateDirectoryA
RemoveDirectoryA
GetDateFormatA
GetTimeFormatA
GetCurrentThreadId
ExitProcess
CloseHandle
CreateEventW
SetConsoleMode
ReadConsoleInputA
SetConsoleCtrlHandler
WriteConsoleW
FindFirstFileExA
GetDriveTypeA
FileTimeToLocalFileTime
GetCPInfo
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
SetStdHandle
ExitThread
GetCommandLineA
RtlPcToFileHeader
RaiseException
RtlUnwindEx
RtlLookupFunctionEntry
DecodePointer
FindCloseChangeNotification
EncodePointer
GetStringTypeW
GlobalFree
LoadLibraryExW
FlushConsoleInputBuffer
GlobalMemoryStatus
GetVersion
VirtualQueryEx
ExpandEnvironmentStringsA
PeekNamedPipe
CreateMutexA
VerifyVersionInfoA
SleepEx
GetVolumeNameForVolumeMountPointW
lstrcmpiW
lstrlenW
IsBadWritePtr
GetVolumePathNameW
WaitForMultipleObjectsEx
GetCompressedFileSizeW
IsBadReadPtr
GetFileSizeEx
DeleteFileA
AreFileApisANSI
GetTempPathA
DeleteCriticalSection
GetDiskFreeSpaceA
CreateFileMappingA
LoadLibraryA
EnterCriticalSection
LockFileEx
HeapSize
HeapValidate
HeapCreate
GetFileAttributesA
LeaveCriticalSection
HeapDestroy
InitializeCriticalSection
CompareStringW
GetUserDefaultLCID
GetCurrentProcessId
GetCommandLineW
VerifyVersionInfoW
GetVersionExW
LocalFree
FormatMessageW
GetLastError
GetStartupInfoW
GetConsoleWindow
OutputDebugStringA
OutputDebugStringW
GetLocalTime
GetSystemTime
WaitForSingleObject
SetEvent
TlsFree
TlsSetValue
GetSystemInfo
SwitchToThread
Sleep
SetThreadPriority
GetCurrentThread
TlsAlloc
TerminateThread
TlsGetValue
WaitForMultipleObjects
ResumeThread
GetThreadPriority
CreateThread
DuplicateHandle
GetCurrentProcess
GetProcAddress
WaitForSingleObjectEx
QueryPerformanceFrequency
GetModuleHandleW
GetTickCount
QueryPerformanceCounter
GetModuleFileNameW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFileInformationByHandle
SetErrorMode
FindClose
FindFirstFileW
CreateFileW
CreateDirectoryW
RemoveDirectoryW
GetFileAttributesW
CopyFileW
MoveFileW
DeleteFileW
LoadLibraryW
DeviceIoControl
GetFullPathNameW
GetLongPathNameW
GetTempPathW
GetCurrentDirectoryW
GetLogicalDrives
GetFileAttributesExW
GetCurrencyFormatW
GetDateFormatW
GetTimeFormatW
GetLocaleInfoW
GetUserDefaultUILanguage
CreateMutexW
ReleaseMutex
VirtualFree
VirtualAlloc
MultiByteToWideChar
WideCharToMultiByte
GetSystemDirectoryW
FlushFileBuffers
GetFileType
SetFilePointerEx
ReadFile
WriteFile
MoveFileExW
SetEndOfFile
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
ReleaseSemaphore
CreateSemaphoreW
FreeLibrary
GetGeoInfoW
GetUserGeoID
GetTimeZoneInformation
FindNextFileW
FindFirstFileExW
lstrlenA
GetModuleHandleA
GetVolumeInformationW
GetDriveTypeW
ReadProcessMemory
OpenProcess
lstrcmpW
IsValidLocale
IsValidLanguageGroup
ExpandEnvironmentStringsW
CreateProcessW
GetUserDefaultLangID
CheckRemoteDebuggerPresent
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
CreateJobObjectW
GetProcessTimes
Thread32First
AssignProcessToJobObject
GetExitCodeProcess
TerminateProcess
Thread32Next
SetLastError
Process32FirstW
OpenThread
Process32NextW
CreateToolhelp32Snapshot
TerminateJobObject
WriteProcessMemory
GetFileSize
SetFilePointer
GetDiskFreeSpaceW
SetFileAttributesW
GetTempFileNameW
GetStdHandle
GetShortPathNameW
SystemTimeToFileTime
CompareFileTime
TzSpecificLocalTimeToSystemTime
GetThreadLocale
GetComputerNameW
CreateRemoteThread
QueryDosDeviceW
GetDiskFreeSpaceExW
lstrcmpA
LocalAlloc
lstrcpyW
FormatMessageA
GetModuleFileNameA
GetVersionExA
SuspendThread
FindResourceW
LoadResource
SizeofResource
LockResource
GetFullPathNameA
HeapReAlloc
CreateFileA
HeapCompact
TryEnterCriticalSection
HeapAlloc
HeapFree
UnlockFile
FlushViewOfFile
LockFile
UnlockFileEx
GetProcessHeap
GetSystemTimeAsFileTime
ResetEvent
glDepthFunc
glDisable
glDeleteTextures
glCullFace
glCopyTexSubImage2D
glCopyTexImage2D
glColorMask
glClearStencil
glClearColor
glClear
glBlendFunc
glBindTexture
glDepthMask
glDrawArrays
glDrawElements
glEnable
glFinish
glFlush
glFrontFace
glGenTextures
glGetBooleanv
wglShareLists
wglCreateContext
wglGetCurrentContext
glClearDepth
glDepthRange
glViewport
glTexSubImage2D
glTexParameteriv
glTexParameteri
glTexParameterfv
glTexParameterf
glTexImage2D
wglDeleteContext
glStencilOp
glStencilMask
glStencilFunc
glScissor
glReadPixels
glPolygonOffset
glPixelStorei
glLineWidth
glIsTexture
glIsEnabled
glHint
glGetTexParameteriv
wglMakeCurrent
wglGetProcAddress
glGetError
glGetFloatv
glGetIntegerv
glGetTexParameterfv
glGetString
wglGetCurrentDC
NtQuerySystemInformation
RtlCaptureContext
NtDeleteKey
NtSetValueKey
NtDeleteValueKey
NtOpenKey
NtQueryKey
VerSetConditionMask
NtLoadDriver
RtlInitUnicodeString
NtUnloadDriver
RtlVirtualUnwind
ReportEventW
DeregisterEventSource
LookupPrivilegeValueA
CryptGenRandom
ConvertSidToStringSidW
GetInheritanceSourceW
RegSetKeySecurity
IsValidSid
GetNamedSecurityInfoW
RegGetKeySecurity
SetNamedSecurityInfoW
ConvertStringSidToSidW
QueryServiceConfigW
ControlService
EnumServicesStatusW
QueryServiceStatus
StartServiceW
ChangeServiceConfig2W
QueryServiceConfig2W
OpenServiceW
EnumDependentServicesW
OpenSCManagerW
DeleteService
CloseServiceHandle
CreateServiceW
FreeInheritedFromArray
GetExplicitEntriesFromAclW
GetUserNameW
RegUnLoadKeyW
RegLoadKeyW
AdjustTokenPrivileges
CheckTokenMembership
IsValidSecurityDescriptor
SetEntriesInAclW
SetSecurityDescriptorOwner
AllocateAndInitializeSid
InitializeAcl
LookupPrivilegeValueW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumValueW
FreeSid
CopySid
GetLengthSid
GetTokenInformation
OpenProcessToken
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegFlushKey
RegisterEventSourceW
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
htonl
inet_addr
getpeername
getsockopt
htons
bind
ntohs
getsockname
setsockopt
send
WSAAsyncSelect
WSACleanup
WSAStartup
WSASetLastError
__WSAFDIsSet
recv
closesocket
socket
connect
gethostbyname
WSAGetLastError
select
sendto
recvfrom
accept
listen
inet_ntoa
gethostname
shutdown
ntohl
InternetGetConnectedState
InternetCrackUrlW
GetModuleFileNameExW
GetModuleInformation
GetMappedFileNameW
GetProcessImageFileNameW
GetModuleBaseNameW
GetProfilesDirectoryW
CryptMsgGetParam
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetNameStringW
CryptQueryObject
CertNameToStrW
CryptDecodeObject
CryptMsgClose
CryptCATCatalogInfoFromContext
CryptCATAdminReleaseCatalogContext
CryptCATAdminEnumCatalogFromHash
WinVerifyTrust
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminReleaseContext
CryptCATAdminAcquireContext
WinHttpReceiveResponse
WinHttpSetOption
WinHttpSendRequest
WinHttpReadData
WinHttpOpenRequest
WinHttpOpen
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpCloseHandle
WinHttpConnect
GetAdaptersAddresses
PathCanonicalizeW
PathAddBackslashW
PathGetDriveNumberW
PathRemoveBlanksW
PathFileExistsW
PathIsRootW
PathSearchAndQualifyW
PathAppendW
PathCommonPrefixW
PathUnquoteSpacesW
PathQuoteSpacesW
PathRemoveArgsW
PathMakePrettyW
StrCmpIW
StrDupW
StrCmpNIW
PathFindFileNameW
PathIsRelativeW
PathGetArgsW
PathFindExtensionW
PathIsDirectoryW
PathUnExpandEnvStringsW
PathIsPrefixW
PathRemoveExtensionW
PathIsNetworkPathW
AssocQueryStringW
ClientToScreen
RegisterClassExW
LoadImageW
GetClassInfoW
GetSysColorBrush
GetCapture
GetWindowRect
GetDesktopWindow
GetAncestor
IsWindowVisible
IsChild
GetForegroundWindow
GetWindowPlacement
EndPaint
BeginPaint
InvalidateRect
GetUpdateRect
ReleaseCapture
SetCursor
FlashWindowEx
SetWindowLongW
GetWindowLongW
SetWindowPos
ShowWindow
AdjustWindowRectEx
MoveWindow
SetWindowTextW
SetFocus
SetForegroundWindow
SetCapture
SetParent
IsIconic
ToUnicode
GetKeyState
TrackPopupMenuEx
SetMenuItemInfoW
IsZoomed
MapVirtualKeyW
GetKeyboardState
GetMenu
ToAscii
LoadIconW
DestroyCaret
SetCaretPos
HideCaret
CreateCaret
ChangeClipboardChain
GetCursorPos
DestroyCursor
GetAsyncKeyState
RegisterClipboardFormatW
NotifyWinEvent
GetMonitorInfoW
EnumDisplayMonitors
TrackMouseEvent
GetMessageExtraInfo
GetClipboardFormatNameW
GetCursorInfo
SetCursorPos
CreateIconIndirect
CreateCursor
GetWindowTextW
RealGetWindowClassW
EnumWindows
ExitWindowsEx
GetUserObjectInformationW
GetProcessWindowStation
FindWindowA
SendMessageA
GetFocus
ChildWindowFromPointEx
GetParent
GetKeyboardLayoutList
GetClientRect
ScreenToClient
GetCaretBlinkTime
GetDoubleClickTime
MessageBeep
SetWindowRgn
GetSysColor
RegisterWindowMessageW
GetIconInfo
DrawIconEx
SetTimer
KillTimer
PeekMessageW
CallNextHookEx
PostMessageW
GetQueueStatus
DefWindowProcW
GetWindowLongPtrW
SetWindowLongPtrW
CreateWindowExW
RegisterClassW
UnregisterClassW
DestroyWindow
UnhookWindowsHookEx
SetWindowsHookExW
MsgWaitForMultipleObjectsEx
DispatchMessageW
TranslateMessage
CharNextExA
MessageBoxW
SystemParametersInfoW
GetSystemMenu
SetClipboardViewer
EnableMenuItem
GetDC
ReleaseDC
GetSystemMetrics
DestroyIcon
SendMessageW
GetWindowThreadProcessId
SHGetSpecialFolderPathW
SHGetFileInfoW
ShellExecuteW
SHGetPathFromIDListW
SHGetMalloc
SHBrowseForFolderW
ShellExecuteExW
CommandLineToArgvW
SHGetFolderPathW
Shell_NotifyIconW
CoGetMalloc
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
OleSetClipboard
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleUninitialize
OleInitialize
CoTaskMemFree
CoCreateInstance
ReleaseStgMedium
CoUninitialize
CoCreateGuid
CoInitialize
WSAIoctl
WSAAddressToStringW
SetTextColor
GetTextFaceW
GetDIBits
GetDeviceCaps
SwapBuffers
BitBlt
DescribePixelFormat
ChoosePixelFormat
SetPixelFormat
SelectClipRgn
CreateDCW
SetBkMode
GetRegionData
DeleteDC
SelectObject
CreateCompatibleDC
CreateBitmap
CreateDIBSection
GdiFlush
CreateRectRgn
CombineRgn
DeleteObject
SetTextAlign
ExtTextOutW
GetCharABCWidthsW
GetCharABCWidthsI
AddFontResourceExW
GetCharABCWidthsFloatW
AddFontMemResourceEx
SetGraphicsMode
SetWorldTransform
GetTextExtentPoint32W
GetGlyphOutlineW
CreateCompatibleBitmap
GetOutlineTextMetricsW
EnumFontFamiliesExW
RemoveFontMemResourceEx
RemoveFontResourceExW
GetObjectW
GetTextMetricsW
CreateFontIndirectW
GetFontData
GetStockObject
OffsetRgn
VariantClear
SystemTimeToVariantTime
VariantChangeType
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
SysAllocString
ImmNotifyIME
ImmGetContext
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmGetDefaultIMEWnd
ImmReleaseContext
PlaySoundW
ud_decode
ud_disassemble
ud_get_user_opaque_data
ud_init
ud_input_end
ud_input_skip
ud_insn_asm
ud_insn_hex
ud_insn_len
ud_insn_mnemonic
ud_insn_off
ud_insn_opr
ud_insn_ptr
ud_lookup_mnemonic
ud_opr_is_gpr
ud_opr_is_sreg
ud_set_asm_buffer
ud_set_input_buffer
ud_set_input_file
ud_set_input_hook
ud_set_mode
ud_set_pc
ud_set_sym_resolver
ud_set_syntax
ud_set_user_opaque_data
ud_set_vendor
ud_translate_intel
yr_compiler_add_file
yr_compiler_add_string
yr_compiler_create
yr_compiler_define_boolean_variable
yr_compiler_define_float_variable
yr_compiler_define_integer_variable
yr_compiler_define_string_variable
yr_compiler_destroy
yr_compiler_get_current_file_name
yr_compiler_get_error_message
yr_compiler_get_rules
yr_compiler_set_callback
yr_filemap_map
yr_filemap_map_ex
yr_filemap_map_fd
yr_filemap_unmap
yr_finalize
yr_finalize_thread
yr_get_tidx
yr_initialize
yr_rules_define_boolean_variable
yr_rules_define_float_variable
yr_rules_define_integer_variable
yr_rules_define_string_variable
yr_rules_destroy
yr_rules_load
yr_rules_load_stream
yr_rules_save
yr_rules_save_stream
yr_rules_scan_fd
yr_rules_scan_file
yr_rules_scan_mem
yr_rules_scan_mem_blocks
yr_rules_scan_proc
yr_set_tidx
z_adler32
z_adler32_combine
z_adler32_combine64
z_compress
z_compress2
z_compressBound
z_crc32
z_crc32_combine
z_crc32_combine64
z_deflate
z_deflateBound
z_deflateCopy
z_deflateEnd
z_deflateInit2_
z_deflateInit_
z_deflateParams
z_deflatePrime
z_deflateReset
z_deflateSetDictionary
z_deflateSetHeader
z_deflateTune
z_get_crc_table
z_inflate
z_inflateCopy
z_inflateEnd
z_inflateGetHeader
z_inflateInit2_
z_inflateInit_
z_inflateMark
z_inflatePrime
z_inflateReset
z_inflateReset2
z_inflateSetDictionary
z_inflateSync
z_inflateSyncPoint
z_inflateUndermine
z_uncompress
z_zError
z_zlibCompileFlags
z_zlibVersion
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ