Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
VBoxAutostartSvc.exe
Resource
win11-20231215-en
Target
VBoxAutostartSvc.exe
Size
94KB
MD5
c39d8c3bcaf58abc0ae82ac6dd749e6e
SHA1
53582bfe1847f38c1eb9a852be579da8ba7f3c83
SHA256
f51513ba593e5f3344438d2b8e3b3a2897528d0b9590e02ad57f29c33f13c42b
SHA512
eca0a6daafa71830a1726305a6c5bef0ecd8d11232edf800fe82adbf92534c259fd4b15c77fb69998fc517008b1f150f0d2e1306fc943709fb5b5881d7db5f27
SSDEEP
1536:4s57yUMAYeN1OLl81Y3bfcL7fYALKhoEHDXmMmJtm8Z+VCVtkxUazr1mXaGZgsMK:4K7yUBYeK+YNCVJAMKlG/n
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
D:\tinderboxa\win-7.0\out\win.amd64\release\obj\VBoxAutostartSvc\VBoxAutostartSvc.pdb
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__current_exception_context
__current_exception
__C_specific_handler
memcpy
memset
__CxxFrameHandler4
?_Xlength_error@std@@YAXPEBD@Z
GetUserNameExW
CoInitializeEx
CoCreateInstance
StringFromIID
CoTaskMemFree
CoUninitialize
CoInitializeSecurity
SafeArrayDestroy
SafeArrayAccessData
SysAllocString
SafeArrayUnaccessData
SysFreeString
SysAllocStringByteLen
SysAllocStringLen
GetErrorInfo
?c_str@RTCString@@QEBAPEBDXZ
?isEmpty@RTCString@@QEBA_NXZ
??8RTCString@@QEBA_NAEBV0@@Z
?find@RTCString@@QEBA_KPEBD_K@Z
?substr@RTCString@@QEBA?AV1@_K0@Z
g_pStdOut
?npos@RTCString@@2_KB
RTStrConsoleCPToUtf8Tag
RTStrmInputGetEchoChars
RTStrmInputSetEchoChars
RTStrmReadEx
RTStrmPutStr
g_pStdIn
RTLogFlush
RTLogSetBuffering
RTLogCreateEx
RTLogRelSetDefaultInstance
RTTimeNow
RTTimeSpecToString
RTProcSelf
RTSystemQueryFirmwareBoolean
RTSystemFirmwareTypeName
RTSystemQueryFirmwareType
RTSystemQueryDmiString
RTSystemQueryAvailableRam
RTStrToUtf16ExTag
RTSystemQueryOSInfo
RTBldCfgTargetDotArch
RTBldCfgRevision
RTStrCopy
RTPathUserHome
RTPathStartsWithRoot
RTPathAbs
RTDirCreateFullPath
RTEnvGetEx
RTPathAppPrivateArch
RTLdrGetSymbol
RTLdrLoad
RTThreadSelf
RTMsgWarning
??H@YA?BVRTCString@@AEBV0@PEBD@Z
?append@RTCString@@QEAAAEAV1@PEBD@Z
?append@RTCString@@QEAAAEAV1@AEBV1@@Z
??0RTCString@@QEAA@AEBV0@@Z
RTUuidFromUtf16
RTUuidIsNull
??ARTCString@@QEBAD_K@Z
RTSemEventMultiWait
RTSemEventMultiSignal
RTSemEventMultiDestroy
RTSemEventMultiCreate
RTPathAppend
RTPathFilename
RTProcGetExecutablePath
RTProcExecutablePath
RTMsgErrorExit
RTR3InitExe
RTGetOpt
RTGetOptInit
RTErrConvertFromWin32
RTEnvGet
RTDirExists
g_pStdErr
RTGetOptFormatError
RTLogLoggerEx
RTLogRelGetDefaultInstanceEx
RTStrmPrintfV
RTStrmPrintf
RTBldCfgRevisionStr
RTUuidClear
RTStrAPrintfVTag
RTStrFree
RTMsgError
RTPrintf
RTStrToUInt32Full
RTThreadSleep
RTStrCmp
RTStrDupTag
RTStrmGetLine
RTStrmClose
RTStrmOpen
RTMemFree
RTMemReallocTag
RTMemAllocZTag
?toLower@RTCString@@QEAAAEAV1@XZ
?printfV@RTCString@@QEAAAEAV1@PEBDPEAD@Z
?printf@RTCString@@QEAAAEAV1@PEBDZZ
??4RTCString@@QEAAAEAV0@AEBV0@@Z
??4RTCString@@QEAAAEAV0@PEBD@Z
??1RTCString@@UEAA@XZ
??0RTCString@@QEAA@PEBD@Z
??0RTCString@@QEAA@XZ
RTUtf16ToUtf8Tag
RTUtf16Free
RTThreadAdopt
RTSystemQueryTotalRam
RTStrCalcUtf16LenEx
RTStrNLen
__p___argv
__p___argc
_c_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_register_thread_local_exe_atexit_callback
_set_app_type
_seh_filter_exe
_exit
terminate
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_set_new_mode
malloc
free
_callnewh
__setusermatherr
__p__commode
_set_fmode
_configthreadlocale
_stricmp
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetModuleHandleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
IsProcessorFeaturePresent
GetComputerNameW
SetLastError
QueryPerformanceCounter
GetCurrentThread
DuplicateHandle
CloseHandle
GetProcAddress
GetModuleHandleExW
VirtualProtect
CreateMutexW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetLastError
LookupAccountNameW
RegisterEventSourceA
ReportEventA
CloseServiceHandle
CreateServiceW
DeleteService
OpenSCManagerW
OpenServiceW
RegisterServiceCtrlHandlerExW
SetServiceStatus
StartServiceCtrlDispatcherW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
LsaNtStatusToWinError
LsaClose
DeregisterEventSource
LsaOpenPolicy
LsaAddAccountRights
CStdStubBuffer_Invoke
DispatchMessageW
PeekMessageW
TranslateMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ