Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
56479089056e1233243393a3b17341cb5ef340eeebc45b11d5567fa4d5472b1c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
56479089056e1233243393a3b17341cb5ef340eeebc45b11d5567fa4d5472b1c.exe
Resource
win10v2004-20231215-en
Target
56479089056e1233243393a3b17341cb5ef340eeebc45b11d5567fa4d5472b1c
Size
3.3MB
MD5
d67dbc9e922d1bb74bc4c0269f19ac69
SHA1
514ffedc88b4771d8f2d519148146a2b8aaa85f3
SHA256
56479089056e1233243393a3b17341cb5ef340eeebc45b11d5567fa4d5472b1c
SHA512
69e14993f5e5ec059a296d38d6549f52df4e32cf9b7c888998517704b772eaba0363e95c25603e69dba16e4618308c725c922c9025f5a850c8ad73794f8eac1c
SSDEEP
49152:QVMr4oywOG97NkLWq7ggggM53k4iyckMZUbjYsV/yb0YVrzKP/hE4UbdDshyUeTE:xT7NuRmk4qkfV/Y0MghE4wqh
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
lstrcmpiW
lstrcpynW
InterlockedIncrement
InterlockedDecrement
lstrcpyW
GetCommandLineW
ReleaseMutex
CreateMutexW
WaitForMultipleObjects
SetUnhandledExceptionFilter
SetErrorMode
VirtualQuery
MoveFileW
InitializeCriticalSection
GlobalFree
LocalAlloc
TerminateProcess
GetVersionExW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
FindClose
GetDriveTypeW
GetSystemDirectoryW
FindFirstFileW
FindNextFileW
FileTimeToSystemTime
CreateFileA
SetFileAttributesW
GetFileAttributesExW
MoveFileExW
GetSystemTime
DeviceIoControl
GetSystemDirectoryA
ResetEvent
VirtualAlloc
LocalFree
VirtualProtect
LoadLibraryA
IsBadReadPtr
SetCurrentDirectoryA
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
LoadLibraryExW
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RtlUnwind
GetTimeZoneInformation
ExitThread
GetModuleHandleExW
GetModuleHandleA
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetStdHandle
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
ReadConsoleW
SetConsoleCtrlHandler
SetStdHandle
SetEndOfFile
WriteConsoleW
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetFileAttributesW
CreateDirectoryW
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFilePointer
GetEnvironmentVariableW
ReadConsoleA
WaitForSingleObject
SetConsoleMode
WriteFile
VerifyVersionInfoW
SwitchToFiber
DeleteFiber
CreateFiber
GlobalMemoryStatus
ConvertFiberToThread
ConvertThreadToFiber
MulDiv
OpenProcess
VerSetConditionMask
ExitProcess
GetACP
CreateFileW
GetCurrentDirectoryW
lstrlenW
ReadFile
GetFileSize
GlobalUnlock
GlobalLock
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
EncodePointer
GetModuleHandleW
GetTickCount
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
QueryPerformanceFrequency
QueryPerformanceCounter
GetNativeSystemInfo
GetExitCodeThread
GetCurrentThread
SwitchToThread
GetCurrentProcess
WaitForSingleObjectEx
DuplicateHandle
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
FormatMessageW
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringW
IsDebuggerPresent
GetLocalTime
GetFileType
GetFullPathNameW
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetEnvironmentVariableA
CompareFileTime
SleepEx
GlobalAlloc
DeleteCriticalSection
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
FindResourceExW
GetModuleFileNameW
FreeResource
LockResource
SizeofResource
LoadResource
FindResourceW
GetModuleFileNameA
DeleteFileW
GetLongPathNameW
GetTempPathW
FreeLibrary
GetProcAddress
LoadLibraryW
CopyFileW
Sleep
SetEvent
GetLastError
OpenEventW
CloseHandle
CreateEventW
GetCurrentThreadId
GetCurrentProcessId
VirtualFree
GetWindowRgn
MoveWindow
UpdateLayeredWindow
MonitorFromPoint
MessageBoxW
SetWindowRgn
InflateRect
SetCursor
PtInRect
IsRectEmpty
OffsetRect
UnionRect
IntersectRect
GetSysColor
MapWindowPoints
ScreenToClient
GetCursorPos
InvalidateRect
GetUpdateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetKeyState
GetFocus
GetActiveWindow
CharNextW
IsZoomed
IsIconic
GetGUIThreadInfo
DestroyWindow
GetMonitorInfoW
DrawTextW
LoadImageW
LoadCursorW
GetWindow
GetParent
SetWindowLongW
GetWindowLongW
GetWindowRect
GetClientRect
FillRect
SetRect
CreatePopupMenu
DestroyMenu
EnableMenuItem
AppendMenuW
TrackPopupMenu
CreateCaret
GetCaretBlinkTime
HideCaret
ShowCaret
GetPropW
SetPropW
GetUserObjectInformationW
GetProcessWindowStation
GetSystemMetrics
EnableWindow
SetFocus
SetWindowPos
ShowWindow
SetForegroundWindow
GetKeyboardLayout
GetKeyNameTextW
SetCaretPos
GetCaretPos
ClientToScreen
UpdateWindow
PrivateExtractIconsW
DestroyIcon
DrawIconEx
EqualRect
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
IsWindowEnabled
IsWindow
CreateWindowExW
GetClassInfoExW
RegisterClassW
CallWindowProcW
PostMessageW
SendMessageW
DispatchMessageW
TranslateMessage
GetMessageW
wsprintfW
wsprintfA
MapVirtualKeyExW
PeekMessageW
DrawTextA
CharPrevW
CreateAcceleratorTableW
MonitorFromWindow
InvalidateRgn
IsWindowVisible
PostQuitMessage
DefWindowProcW
GetCursor
RegisterClassExW
CryptExportKey
ReportEventW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
DeregisterEventSource
RegisterEventSourceW
RegCreateKeyExW
ImpersonateLoggedOnUser
RevertToSelf
SetEntriesInAclW
GetUserNameW
FreeSid
AllocateAndInitializeSid
RegQueryValueExW
RegCloseKey
DuplicateTokenEx
LookupAccountSidW
SetSecurityDescriptorDacl
CryptDecrypt
RegSetValueExW
RegOpenKeyExW
CryptCreateHash
CryptDestroyHash
CryptSignHashW
OpenProcessToken
InitializeSecurityDescriptor
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
CryptEnumProvidersW
CryptGenRandom
CryptAcquireContextW
CoCreateInstance
DoDragDrop
OleDuplicateData
ReleaseStgMedium
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
OleLockRunning
CoUninitialize
CoInitialize
VariantClear
VariantInit
SysAllocString
SysFreeString
PathIsDirectoryW
PathStripToRootW
PathIsSameRootW
SHDeleteKeyW
PathCombineW
PathFindFileNameW
PathRemoveFileSpecW
PathFileExistsW
ord17
_TrackMouseEvent
InitCommonControlsEx
MiniDumpWriteDump
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
ObtainUserAgentString
MoveToEx
GdiFlush
CreatePatternBrush
GetTextExtentPointA
GetBitmapBits
SetBitmapBits
BitBlt
GetObjectA
SetTextColor
SetStretchBltMode
StretchBlt
SetBkMode
SetBkColor
ExtSelectClipRgn
SelectClipRgn
LineTo
CreateCompatibleDC
CreateDIBitmap
GetTextExtentPoint32W
GetClipBox
GetCharABCWidthsW
CreateSolidBrush
CreateRectRgnIndirect
CreatePenIndirect
CombineRgn
CreateDIBSection
PtInRegion
CreateRectRgn
CreateRoundRectRgn
SetWindowOrgEx
GetObjectW
GetTextMetricsW
PlayEnhMetaFile
GetEnhMetaFileHeader
CreateEnhMetaFileW
CloseEnhMetaFile
SelectObject
SaveDC
RestoreDC
Rectangle
RemoveFontMemResourceEx
AddFontMemResourceEx
GetStockObject
GetDeviceCaps
DeleteObject
DeleteDC
CreatePen
TextOutW
CreateFontIndirectW
CreateCompatibleBitmap
SHGetFileInfoW
ShellExecuteExW
CommandLineToArgvW
SHGetSpecialFolderPathW
SHGetFolderPathW
DragQueryFileW
GdipAddPathLine
ord1
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipCreatePen1
GdipDeletePen
GdipSetPenMode
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipCloneImage
GdipDisposeImage
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetSmoothingMode
GdipSetTextRenderingHint
GdipDeletePath
GdipCreatePath
GdipDrawRectangleI
GdipDrawPath
GdipFillRectangleI
GdipCreateFontFromDC
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipDrawImageRectI
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipGetImageWidth
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipCreateFontFromLogfontA
GdipSetInterpolationMode
GdipFree
GdipDeleteFont
GdipDrawString
GdipMeasureString
GdipStringFormatGetGenericTypographic
GdipDeleteStringFormat
GdipCloneStringFormat
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipFillPath
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
gethostname
WSAStartup
getnameinfo
WSAIoctl
gethostbyname
sendto
recvfrom
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
freeaddrinfo
getaddrinfo
select
__WSAFDIsSet
ioctlsocket
listen
htonl
accept
WSACleanup
shutdown
WSASetLastError
socket
closesocket
recv
send
WSAGetLastError
bind
connect
getpeername
getsockname
getsockopt
htons
ntohs
setsockopt
CertDuplicateCertificateContext
CertGetCertificateContextProperty
CertFindCertificateInStore
CertCloseStore
CertOpenStore
CertOpenSystemStoreW
CertGetIntendedKeyUsage
CertGetEnhancedKeyUsage
CertFreeCertificateContext
CertEnumCertificatesInStore
ord79
ord219
ord46
ord301
ord147
ord133
ord145
ord142
ord167
ord127
ord27
ord26
ord117
ord41
ord208
ord216
ord14
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ