Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
3d6304bb73b8dfe2b49584cfdb512621.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3d6304bb73b8dfe2b49584cfdb512621.exe
Resource
win10v2004-20231215-en
Target
3d6304bb73b8dfe2b49584cfdb512621
Size
1.3MB
MD5
3d6304bb73b8dfe2b49584cfdb512621
SHA1
7c49c185e9cad97b46bf9ddb0c2062e10e563473
SHA256
20c23f8a3b6b2a4f4e9cdb451398bbc5f653efc8690895d84fde398f15d05688
SHA512
45d4639fcdf384720dae18cbb344d62857e4c80c85cfe2a0e6367906e4257cfdb267686f12ba84223d58c9122172a1e5e0a8841b4b0f8022224e18e5138fda80
SSDEEP
24576:j9WC988bu6Co+UGz82LESXZK8mLE4sEX/B/1XqSM0sb4Vy9YKV5:jB88TCovGz82jXY8mdV1XHayy9Yg5
resource | yara_rule |
---|---|
sample | nsis_installer_2 |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateFileA
WriteFile
CloseHandle
DeleteFileA
CreateThread
ExitProcess
Sleep
CreateDirectoryA
MoveFileA
WaitForSingleObject
GetModuleFileNameA
GetFileSize
ReadFile
CreateToolhelp32Snapshot
Process32First
Process32Next
SetFilePointer
SystemTimeToFileTime
GetCurrentDirectoryA
LocalFileTimeToFileTime
GetFileAttributesA
SetFileTime
TerminateThread
CreateFileW
WriteConsoleW
SetStdHandle
LockResource
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
HeapReAlloc
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetFileType
GetCurrentThreadId
GetOEMCP
GetACP
IsValidCodePage
GetProcessHeap
GetModuleFileNameW
GetStdHandle
HeapSize
AreFileApisANSI
LoadResource
SizeofResource
GetLastError
FindResourceA
SetEndOfFile
ReadConsoleW
EnterCriticalSection
GetModuleHandleExW
EnumSystemLocalesW
GetUserDefaultLCID
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
HeapFree
HeapAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
RaiseException
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
IsValidLocale
RegisterClassA
GetClassInfoA
InvalidateRect
wsprintfA
GetWindow
SetForegroundWindow
GetWindowThreadProcessId
GetTopWindow
DefWindowProcA
EndPaint
BeginPaint
MoveWindow
SetWindowLongA
PostQuitMessage
UpdateWindow
ShowWindow
CreateWindowExA
GetSystemMetrics
RegisterClassExA
LoadCursorA
LoadIconA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
GetWindowLongA
SetDIBitsToDevice
SHGetFolderPathA
ShellExecuteExA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ