Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10v2004-20231215-en
Target
Setup.exe
Size
938KB
MD5
b15bac961f62448c872e1dc6d3931016
SHA1
1dcb61babb08fe5db711e379cb67335357a5db82
SHA256
bf1a0c67b433f52ebd304553f022baa34bfbca258c932d2b4b8b956b1467bfa5
SHA512
932119f7dc6710239481c80ad8baaed5c14a2085fcc514b6522671b1a4ebbaf488e43453f11d5aaf6dcef7a245db8de44d93ff255f7cf8385b7d00f31f2cc370
SSDEEP
24576:KjNRyoUXVwSCwfHACpA9EZkHx1KJ9ZiYwadzv:AzyLXVwPwfHACpAfRAhiYwadzv
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetSetOptionW
InternetQueryOptionW
InternetReadFile
InternetConnectW
InternetCloseHandle
InternetErrorDlg
InternetOpenW
InternetCrackUrlW
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
wclGetApp20191211
wclEndDialog
wclSubclassMgr
at_mem_cpy
wclGetHWND
wclDoDialogBox
wclUnsubclassMgr
GlobalAlloc
GlobalUnlock
GlobalLock
MulDiv
lstrcmpW
GetTickCount
FormatMessageW
SetEvent
ResetEvent
CreateEventW
SetProcessWorkingSetSize
DecodePointer
ReleaseMutex
CreateMutexW
lstrcmpiW
SetThreadUILanguage
Sleep
InitializeCriticalSectionEx
GetTickCount64
CreateDirectoryW
DeleteFileW
WaitForSingleObject
lstrcpyW
lstrcatW
LoadLibraryA
lstrcpyA
lstrcatA
FindClose
FindFirstFileW
GetWindowsDirectoryW
InitializeCriticalSection
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
GetLongPathNameW
GetWindowsDirectoryA
GetPrivateProfileIntW
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
GetLocalTime
FileTimeToSystemTime
SystemTimeToFileTime
GetDateFormatW
GetTimeFormatW
GetLocaleInfoW
GetUserDefaultLCID
IsDBCSLeadByteEx
CreateThread
ResumeThread
GetShortPathNameW
DeleteCriticalSection
GetExitCodeProcess
CreateProcessW
GlobalFree
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
Module32FirstW
K32EnumProcesses
K32GetModuleFileNameExW
GetStartupInfoW
GetSystemDirectoryW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetProcessHeap
HeapFree
HeapAlloc
EncodePointer
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentVariableW
OpenProcess
OutputDebugStringA
OutputDebugStringW
VirtualQuery
FreeLibrary
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
IsBadReadPtr
GetCurrentProcessId
GetLastError
LocalFree
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
GetSystemTime
LoadLibraryW
CloseHandle
GetCurrentProcess
GetVersionExW
ProcessIdToSessionId
GetCurrentThreadId
SetLastError
RaiseException
lstrlenW
FindResourceW
SizeofResource
LockResource
LoadResource
WriteFile
ReadFile
GetFileSize
CreateFileW
lstrcpynW
TerminateProcess
LocalAlloc
ShowWindow
MessageBoxW
RegisterWindowMessageW
SendMessageW
DefWindowProcW
CallWindowProcW
UnregisterClassW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
IsWindow
IsChild
DestroyWindow
MoveWindow
FindWindowExW
RegisterClassW
CharUpperW
SystemParametersInfoW
GetMessageW
LoadImageW
DestroyIcon
PtInRect
DrawFocusRect
SetCursor
UpdateWindow
DrawTextW
GetSystemMetrics
IsWindowEnabled
EnableWindow
KillTimer
SetTimer
MsgWaitForMultipleObjects
GetCapture
IsDlgButtonChecked
CheckDlgButton
GetDlgItemTextW
SetWindowPos
EndDialog
IsWindowVisible
DispatchMessageW
TranslateMessage
GetMonitorInfoW
MonitorFromWindow
IsDialogMessageW
LoadIconW
GetLastActivePopup
FindWindowW
MapWindowPoints
GetWindowRect
SetForegroundWindow
CreateDialogParamW
SetDlgItemTextW
PostQuitMessage
PostMessageW
PeekMessageW
LoadStringW
LoadCursorW
GetWindow
GetClassNameW
GetParent
GetDesktopWindow
SetWindowLongW
GetWindowLongW
FillRect
GetSysColor
ScreenToClient
ClientToScreen
GetClientRect
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
RedrawWindow
InvalidateRgn
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
DestroyAcceleratorTable
CreateAcceleratorTableW
ReleaseCapture
SetCapture
GetFocus
SetFocus
CharNextW
GetDlgItem
DeleteDC
DeleteObject
GetDeviceCaps
GetStockObject
CreateSolidBrush
GetObjectW
CreateFontIndirectW
GetCurrentObject
SetBkMode
SetTextColor
CreateCompatibleDC
SelectObject
BitBlt
CreateCompatibleBitmap
RegDeleteValueW
CryptAcquireContextW
CryptReleaseContext
CryptGetHashParam
CreateProcessWithTokenW
LookupAccountSidW
DuplicateTokenEx
CreateProcessAsUserW
CryptDecrypt
CryptEncrypt
CryptImportKey
CryptExportKey
CryptGetUserKey
CryptDestroyKey
CryptGenKey
SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetEntriesInAclW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
CryptCreateHash
RegCreateKeyExW
RegCloseKey
GetUserNameW
LookupPrivilegeValueW
MapGenericMask
GetTokenInformation
GetSecurityDescriptorDacl
FreeSid
EqualSid
DuplicateToken
AllocateAndInitializeSid
AdjustTokenPrivileges
AccessCheck
OpenProcessToken
CryptDestroyHash
CryptHashData
RegDeleteKeyW
SHGetMalloc
ShellExecuteW
SHGetPathFromIDListW
SHGetPathFromIDListA
ShellExecuteExW
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
CoTaskMemAlloc
OleInitialize
OleUninitialize
CLSIDFromProgID
OleLockRunning
CoInitialize
CoGetClassObject
CreateStreamOnHGlobal
CoTaskMemFree
OleRun
CoCreateInstance
CoUninitialize
CoTaskMemRealloc
CLSIDFromString
StringFromGUID2
CoCreateGuid
VariantChangeType
VarBstrCmp
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
DispCallFunc
VarUI4FromStr
SystemTimeToVariantTime
CreateErrorInfo
SafeArrayDestroy
SafeArrayLock
SafeArrayUnlock
SafeArrayCreateVector
VariantClear
VariantInit
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysAllocStringLen
SysFreeString
SysAllocString
VariantCopy
GetErrorInfo
SetErrorInfo
VariantTimeToSystemTime
PathFindFileNameW
PathFileExistsW
wnsprintfW
StrCpyW
PathRemoveFileSpecW
PathAppendW
StrCmpW
StrChrW
StrRChrW
StrCmpIW
StrStrW
StrStrIA
StrChrA
StrTrimA
PathRemoveBackslashW
PathIsDirectoryW
PathAddBackslashW
PathCombineW
ImageList_LoadImageW
_TrackMouseEvent
ImageList_Draw
InitCommonControlsEx
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAG_J@Z
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPAG_J@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE_JPBG_J@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??Bios_base@std@@QBE_NXZ
??7ios_base@std@@QBE_NXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xbad_function_call@std@@YAXXZ
_Thrd_start
_Thrd_detach
_Mtx_init
_Mtx_destroy
_Cnd_init
_Cnd_destroy
_Cnd_wait
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?setf@ios_base@std@@QAEHHH@Z
?setf@ios_base@std@@QAEHH@Z
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?_W_Getmonths@_Locinfo@std@@QBEPBGXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
_Mbrtowc
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_W_Getdays@_Locinfo@std@@QBEPBGXZ
CryptProtectData
CryptUnprotectData
UuidCreateSequential
EnumProcesses
WTSQuerySessionInformationW
WTSEnumerateSessionsW
WTSFreeMemory
WTSQueryUserToken
strstr
strchr
__std_exception_destroy
__std_exception_copy
memchr
wcsstr
__std_type_info_name
_purecall
__std_terminate
memcpy
memmove
memset
__CxxFrameHandler3
_except_handler4_common
__std_type_info_destroy_list
_CxxThrowException
memcmp
_crt_atexit
_exit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_c_exit
_set_app_type
_register_thread_local_exe_atexit_callback
_configure_wide_argv
_invalid_parameter_noinfo_noreturn
_crt_at_quick_exit
_controlfp_s
_initialize_wide_environment
_get_wide_winmain_command_line
exit
_initterm
_initterm_e
_invalid_parameter_noinfo
_cexit
_errno
_beginthreadex
_seh_filter_dll
terminate
_seh_filter_exe
_callnewh
calloc
_set_new_mode
malloc
realloc
free
_recalloc
wcslen
strpbrk
strcat
towupper
strlen
_strnicmp
_wcsicmp
toupper
tolower
towlower
wcsnlen
wcsncpy_s
wcstok_s
_wcsnicmp
_wcsupr
_wcslwr
_wcsrev
iswspace
strnlen
iswdigit
fseek
ftell
__stdio_common_vsscanf
__stdio_common_vsprintf_s
fopen_s
_wfopen
__stdio_common_vswscanf
ungetc
setvbuf
fwrite
__acrt_iob_func
__stdio_common_vfprintf
_fseeki64
fsetpos
fread
fputc
fgetpos
fgetc
fflush
fclose
_get_stream_buffer_pointers
__stdio_common_vswprintf_s
__stdio_common_vswprintf
_set_fmode
__p__commode
__stdio_common_vsprintf
_i64tow
atoi
_atoi64
atol
_wtoi64
_wtol
_wtoi
wcstoul
_itow
_localtime64
_time64
_mktime64
wcsftime
__daylight
_wsplitpath_s
_wsplitpath
_unlock_file
_lock_file
rand
abs
labs
_dtest
_except1
__setusermatherr
modf
_configthreadlocale
localeconv
CryptoData
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ