Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
d903af8ce1af82dc8e44b67ae6e0af4c1bbce956f94e6c9fdf46839f2f187482.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d903af8ce1af82dc8e44b67ae6e0af4c1bbce956f94e6c9fdf46839f2f187482.exe
Resource
win10v2004-20240226-en
Target
d903af8ce1af82dc8e44b67ae6e0af4c1bbce956f94e6c9fdf46839f2f187482
Size
5.7MB
MD5
79a95fbd7807fe070656e9b814dc62b4
SHA1
701bc0395a6962d4b0fe9e5f44d080718cf50e05
SHA256
d903af8ce1af82dc8e44b67ae6e0af4c1bbce956f94e6c9fdf46839f2f187482
SHA512
7f57a760dff5ddf547afcf66c98713892046b37401ccb9e52a7b39cfa38f847af9ac5342d996602af6e1821a5e1196d509720060757754704cdcc41b745a9641
SSDEEP
49152:a492U/HR3utdPhoCAMFoz7S7V2a725KAs5cL510YNkvjwhOh5PQ5dALtwBYJqUQb:dxdz70p5YZloLtwbw1eqR5feT007kxC
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
D:\Jenkins\workspace\A_MBAM3_UPDATEREXE\bin\x64\Release\mbupdatr.pdb
CertVerifyCertificateChainPolicy
CertGetCertificateChain
CertGetIssuerCertificateFromStore
CertCreateCertificateContext
CertFreeCertificateChain
CertDuplicateCertificateContext
CertAddCertificateContextToStore
CryptDecodeObject
CryptDecodeObjectEx
CryptMsgGetParam
CertGetNameStringW
CertFindCertificateInStore
CryptQueryObject
CryptMsgClose
CertFreeCertificateContext
CertCompareCertificateName
CertAddEncodedCertificateToStore
CertOpenStore
CryptStringToBinaryA
CertCloseStore
CertGetCertificateContextProperty
CertEnumCertificatesInStore
CertOpenSystemStoreW
GetAdaptersInfo
GetLongPathNameW
SetThreadPriority
GetFileSizeEx
SetFileInformationByHandle
DuplicateHandle
GetLocalTime
GetSystemTime
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
FileTimeToSystemTime
GlobalAlloc
GlobalFree
FindNextFileW
FindClose
lstrcmpA
SetFileTime
GetFileSize
FindFirstFileW
SetLastError
GetFileAttributesW
GetModuleHandleA
GetStdHandle
GetFileAttributesExW
SetFileAttributesW
ExpandEnvironmentStringsW
GetDriveTypeW
GetSystemWindowsDirectoryW
OutputDebugStringW
QueryPerformanceFrequency
QueryPerformanceCounter
GetCurrentDirectoryW
GetVersionExA
InitializeCriticalSectionAndSpinCount
ResetEvent
ReleaseMutex
CreateMutexW
GetSystemTimeAsFileTime
GetStartupInfoW
GetExitCodeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
SetEnvironmentVariableW
SystemTimeToFileTime
SwitchToFiber
DeleteFiber
CreateFiber
GetFileType
ConvertFiberToThread
ConvertThreadToFiber
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetFullPathNameW
SetStdHandle
CopyFileW
FlushFileBuffers
GetFileInformationByHandle
VirtualQueryEx
GetCurrentThread
QueryDosDeviceW
GetLogicalDriveStringsW
Module32FirstW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
SetWaitableTimer
GetSystemInfo
VerifyVersionInfoW
VerSetConditionMask
GetVersionExW
LockResource
LoadResource
SizeofResource
FindResourceW
MultiByteToWideChar
WideCharToMultiByte
ProcessIdToSessionId
GetCurrentProcess
MoveFileW
CreateThread
GetProcessId
GetProcessHeap
FormatMessageW
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetCurrentThreadId
LocalAlloc
GetTickCount
CallNamedPipeW
DebugBreak
CreateRemoteThread
OpenEventW
GetNamedPipeServerProcessId
WriteFile
WaitForMultipleObjects
CreateEventW
FreeLibrary
LoadLibraryW
GetSystemDirectoryW
GetProcAddress
SetEvent
GetExitCodeProcess
ResumeThread
CreateProcessW
OpenFileMappingW
GetProcessTimes
UnmapViewOfFile
MoveFileExW
TerminateProcess
OpenProcess
SetEndOfFile
SetFilePointer
MapViewOfFile
CreateFileMappingW
CreateDirectoryW
RemoveDirectoryW
CreateNamedPipeW
GetCurrentProcessId
GetTickCount64
GetWindowsDirectoryW
GetEnvironmentVariableW
GetTempPathW
PeekNamedPipe
ReadFile
GetModuleFileNameW
WaitForSingleObject
DeleteFileW
CreateFileW
DecodePointer
GetModuleHandleW
InitializeCriticalSectionEx
RaiseException
LocalFree
LeaveCriticalSection
EnterCriticalSection
DeleteProcThreadAttributeList
UpdateProcThreadAttribute
InitializeProcThreadAttributeList
GetLastError
CloseHandle
EnumSystemLocalesW
GetUserDefaultLCID
RtlUnwind
IsValidLocale
GetTimeFormatW
GetDateFormatW
SetFilePointerEx
GetConsoleCP
GetCommandLineW
GetCommandLineA
SetConsoleCtrlHandler
FreeLibraryAndExitThread
ExitThread
GetModuleHandleExW
ExitProcess
RtlPcToFileHeader
InterlockedPushEntrySList
RtlUnwindEx
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
EncodePointer
GetStringTypeW
CreateWaitableTimerW
DeviceIoControl
SwitchToThread
Sleep
DeleteCriticalSection
CloseWindowStation
MessageBoxW
CloseDesktop
SetProcessWindowStation
OpenWindowStationW
OpenInputDesktop
CharUpperW
GetUserObjectInformationW
GetProcessWindowStation
CryptAcquireContextW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
OpenSCManagerW
OpenServiceW
ControlService
RegCreateKeyW
CloseServiceHandle
DeleteService
ChangeServiceConfig2A
QueryServiceStatusEx
StartServiceW
QueryServiceStatus
CreateServiceW
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW
SetServiceStatus
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyW
RegSetValueExW
ChangeServiceConfigA
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
DuplicateTokenEx
CreateProcessAsUserW
CryptEnumProvidersW
CryptSignHashW
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptGenRandom
CryptAcquireContextA
RegSaveKeyW
RegRestoreKeyW
RegQueryInfoKeyW
RegLoadAppKeyW
RegEnumValueW
RegEnumKeyW
TreeSetNamedSecurityInfoW
SetSecurityInfo
GetSecurityInfo
SetNamedSecurityInfoW
DeleteAce
GetExplicitEntriesFromAclW
CreateWellKnownSid
LookupAccountNameW
InitializeSid
AllocateLocallyUniqueId
GetSidSubAuthority
GetSidSubAuthorityCount
RegSetKeyValueW
RegGetValueW
RegDeleteValueW
RegUnLoadKeyW
RegLoadKeyW
IsTextUnicode
SetEntriesInAclW
SetServiceObjectSecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AreAllAccessesGranted
MapGenericMask
GetNamedSecurityInfoW
ConvertStringSidToSidW
ConvertSidToStringSidW
RevertToSelf
IsWellKnownSid
QueryServiceConfigW
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptReleaseContext
CryptCreateHash
ImpersonateLoggedOnUser
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
GetTokenInformation
OpenThreadToken
RegOpenKeyExW
SHGetKnownFolderPath
SHGetFolderPathW
CoInitializeEx
CoUninitialize
CoGetClassObject
PropVariantClear
CoCreateInstance
CoInitializeSecurity
CoSetProxyBlanket
CoTaskMemFree
SystemTimeToVariantTime
SysAllocString
VariantTimeToSystemTime
VariantInit
VariantClear
SysStringLen
SysAllocStringLen
SysFreeString
WNetGetConnectionW
StrDupW
UuidCreate
UuidToStringW
RpcStringFreeW
WTSQuerySessionInformationW
WTSQueryUserToken
WTSFreeMemory
WTSEnumerateSessionsW
CreateEnvironmentBlock
DestroyEnvironmentBlock
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpOpenRequest
WinHttpConnect
WinHttpSetTimeouts
WinHttpCloseHandle
WinHttpOpen
NetWkstaGetInfo
NetApiBufferFree
GetProcessImageFileNameW
SfcIsFileProtected
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
SetupOpenInfFileW
SetupFindFirstLineW
SetupGetStringFieldW
SetupGetIntField
SetupGetMultiSzFieldW
SetupFindNextLine
SetupCloseInfFile
SetupGetLineTextW
AuthzInitializeContextFromSid
AuthzAccessCheck
AuthzFreeResourceManager
AuthzFreeContext
AuthzInitializeResourceManager
CryptCATAdminEnumCatalogFromHash
CryptCATAdminCalcHashFromFileHandle
WinVerifyTrust
CryptCATAdminRemoveCatalog
CryptCATAdminAddCatalog
CryptCATAdminAcquireContext
CryptCATAdminReleaseCatalogContext
CryptCATAdminReleaseContext
CryptCATCatalogInfoFromContext
BCryptImportKeyPair
BCryptOpenAlgorithmProvider
BCryptGenRandom
BCryptCreateHash
BCryptHashData
BCryptDestroyKey
BCryptCloseAlgorithmProvider
BCryptVerifySignature
BCryptFinishHash
BCryptDestroyHash
BCryptGetProperty
sendto
setsockopt
shutdown
socket
WSARecv
WSARecvFrom
WSASend
WSASendTo
WSAPoll
inet_addr
ntohl
getaddrinfo
send
WSASetLastError
recvfrom
recv
listen
getsockopt
ntohs
htons
WSACleanup
WSAStartup
WSAGetLastError
getsockname
getpeername
ioctlsocket
connect
closesocket
freeaddrinfo
bind
accept
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ