Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
efa7994aba4951da9b2274f88eba89f4ba07dffb3e40f79a1720d3166215ab98.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
efa7994aba4951da9b2274f88eba89f4ba07dffb3e40f79a1720d3166215ab98.exe
Resource
win10v2004-20240226-en
Target
efa7994aba4951da9b2274f88eba89f4ba07dffb3e40f79a1720d3166215ab98
Size
5.7MB
MD5
6a5733cadc6e1abab98e575c5d8b6d03
SHA1
243fecb166b6047253a1c2316d6f353f0f294236
SHA256
efa7994aba4951da9b2274f88eba89f4ba07dffb3e40f79a1720d3166215ab98
SHA512
c473fa679c546293a4941d4e0a17699fe15d2cd6349d13846ee16427f34eac6ee647bd14eb442e9c5ffc8d471e9aa1977fb1d1ae64df0992b5786a65f3717eeb
SSDEEP
98304:+DW43IQ6It+w8lbtE65SRX5eT007kxO6m:yW43IQ9t+wqbSb9076O6m
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
D:\Jenkins\workspace\A_MBAM3_UPDATEREXE\bin\x64\Release\mbupdatr.pdb
CertVerifyCertificateChainPolicy
CertGetCertificateChain
CertGetIssuerCertificateFromStore
CertCreateCertificateContext
CertFreeCertificateChain
CertDuplicateCertificateContext
CertAddCertificateContextToStore
CryptDecodeObject
CryptDecodeObjectEx
CryptMsgGetParam
CertGetNameStringW
CertFindCertificateInStore
CryptQueryObject
CryptMsgClose
CertFreeCertificateContext
CertCompareCertificateName
CertAddEncodedCertificateToStore
CertOpenStore
CryptStringToBinaryA
CertCloseStore
CertGetCertificateContextProperty
CertEnumCertificatesInStore
CertOpenSystemStoreW
GetAdaptersInfo
SetWaitableTimer
GetLongPathNameW
SetThreadPriority
GetFileSizeEx
SetFileInformationByHandle
GetLocalTime
GetSystemTime
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
FileTimeToSystemTime
GlobalAlloc
GlobalFree
FindNextFileW
FindClose
lstrcmpA
SetFileTime
GetFileSize
FindFirstFileW
SetLastError
GetFileAttributesW
GetModuleHandleA
GetStdHandle
GetFileAttributesExW
SetFileAttributesW
ExpandEnvironmentStringsW
GetDriveTypeW
GetSystemWindowsDirectoryW
OutputDebugStringW
QueryPerformanceFrequency
QueryPerformanceCounter
GetCurrentDirectoryW
GetVersionExA
InitializeCriticalSectionAndSpinCount
ResetEvent
ReleaseMutex
CreateMutexW
GetSystemTimeAsFileTime
GetStartupInfoW
GetExitCodeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
SetEnvironmentVariableW
SystemTimeToFileTime
SwitchToFiber
DeleteFiber
CreateFiber
GetFileType
ConvertFiberToThread
ConvertThreadToFiber
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetFullPathNameW
SetStdHandle
CopyFileW
FlushFileBuffers
GetFileInformationByHandle
DuplicateHandle
VirtualQueryEx
GetCurrentThread
QueryDosDeviceW
GetLogicalDriveStringsW
Module32FirstW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
CreateWaitableTimerW
GetSystemInfo
VerifyVersionInfoW
VerSetConditionMask
GetVersionExW
LockResource
LoadResource
SizeofResource
FindResourceW
MultiByteToWideChar
WideCharToMultiByte
ProcessIdToSessionId
GetCurrentProcess
MoveFileW
CreateThread
GetProcessId
GetProcessHeap
FormatMessageW
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetCurrentThreadId
LocalAlloc
GetTickCount
CallNamedPipeW
DebugBreak
CreateRemoteThread
OpenEventW
GetNamedPipeServerProcessId
WriteFile
WaitForMultipleObjects
CreateEventW
FreeLibrary
LoadLibraryW
GetSystemDirectoryW
GetProcAddress
SetEvent
GetExitCodeProcess
ResumeThread
CreateProcessW
OpenFileMappingW
GetProcessTimes
UnmapViewOfFile
MoveFileExW
TerminateProcess
OpenProcess
SetEndOfFile
SetFilePointer
MapViewOfFile
CreateFileMappingW
CreateDirectoryW
RemoveDirectoryW
CreateNamedPipeW
GetCurrentProcessId
GetTickCount64
GetWindowsDirectoryW
GetEnvironmentVariableW
GetTempPathW
PeekNamedPipe
ReadFile
GetModuleFileNameW
WaitForSingleObject
DeleteFileW
CreateFileW
DecodePointer
GetModuleHandleW
InitializeCriticalSectionEx
RaiseException
LocalFree
LeaveCriticalSection
EnterCriticalSection
DeleteProcThreadAttributeList
UpdateProcThreadAttribute
InitializeProcThreadAttributeList
GetLastError
CloseHandle
EnumSystemLocalesW
GetUserDefaultLCID
RtlUnwind
IsValidLocale
GetTimeFormatW
GetDateFormatW
SetFilePointerEx
GetConsoleCP
GetCommandLineW
GetCommandLineA
SetConsoleCtrlHandler
FreeLibraryAndExitThread
ExitThread
GetModuleHandleExW
ExitProcess
RtlPcToFileHeader
InterlockedPushEntrySList
RtlUnwindEx
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
EncodePointer
GetStringTypeW
DeviceIoControl
SwitchToThread
Sleep
DeleteCriticalSection
CloseWindowStation
MessageBoxW
CloseDesktop
SetProcessWindowStation
OpenWindowStationW
OpenInputDesktop
CharUpperW
GetUserObjectInformationW
GetProcessWindowStation
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
OpenSCManagerW
OpenServiceW
ControlService
ChangeServiceConfig2A
RegCreateKeyW
CloseServiceHandle
DeleteService
QueryServiceStatusEx
StartServiceW
QueryServiceStatus
CreateServiceW
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW
SetServiceStatus
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyW
RegSetValueExW
ChangeServiceConfigA
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
DuplicateTokenEx
CreateProcessAsUserW
CryptEnumProvidersW
CryptSignHashW
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptGenRandom
CryptAcquireContextA
RegSaveKeyW
RegRestoreKeyW
RegQueryInfoKeyW
RegLoadAppKeyW
RegEnumValueW
RegEnumKeyW
TreeSetNamedSecurityInfoW
SetSecurityInfo
GetSecurityInfo
SetNamedSecurityInfoW
DeleteAce
GetExplicitEntriesFromAclW
CreateWellKnownSid
LookupAccountNameW
InitializeSid
AllocateLocallyUniqueId
GetSidSubAuthority
GetSidSubAuthorityCount
RegSetKeyValueW
RegGetValueW
RegDeleteValueW
RegUnLoadKeyW
RegLoadKeyW
IsTextUnicode
SetEntriesInAclW
SetServiceObjectSecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AreAllAccessesGranted
MapGenericMask
GetNamedSecurityInfoW
ConvertStringSidToSidW
ConvertSidToStringSidW
QueryServiceConfigW
QueryServiceConfig2W
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptReleaseContext
CryptCreateHash
CryptAcquireContextW
RevertToSelf
ImpersonateLoggedOnUser
IsWellKnownSid
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
GetTokenInformation
OpenThreadToken
RegOpenKeyExW
SHGetKnownFolderPath
SHGetFolderPathW
CoInitializeEx
CoUninitialize
CoGetClassObject
PropVariantClear
CoCreateInstance
CoInitializeSecurity
CoSetProxyBlanket
CoTaskMemFree
SystemTimeToVariantTime
SysAllocString
VariantTimeToSystemTime
VariantInit
VariantClear
SysStringLen
SysAllocStringLen
SysFreeString
WNetGetConnectionW
StrDupW
UuidCreate
UuidToStringW
RpcStringFreeW
WTSQuerySessionInformationW
WTSQueryUserToken
WTSFreeMemory
WTSEnumerateSessionsW
CreateEnvironmentBlock
DestroyEnvironmentBlock
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpOpenRequest
WinHttpConnect
WinHttpSetTimeouts
WinHttpCloseHandle
WinHttpOpen
NetWkstaGetInfo
NetApiBufferFree
GetProcessImageFileNameW
SfcIsFileProtected
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
SetupOpenInfFileW
SetupFindFirstLineW
SetupGetStringFieldW
SetupGetIntField
SetupGetMultiSzFieldW
SetupFindNextLine
SetupCloseInfFile
SetupGetLineTextW
AuthzInitializeContextFromSid
AuthzAccessCheck
AuthzFreeResourceManager
AuthzFreeContext
AuthzInitializeResourceManager
CryptCATAdminEnumCatalogFromHash
CryptCATAdminCalcHashFromFileHandle
WinVerifyTrust
CryptCATAdminRemoveCatalog
CryptCATAdminAddCatalog
CryptCATAdminAcquireContext
CryptCATAdminReleaseCatalogContext
CryptCATAdminReleaseContext
CryptCATCatalogInfoFromContext
BCryptImportKeyPair
BCryptOpenAlgorithmProvider
BCryptGenRandom
BCryptCreateHash
BCryptHashData
BCryptDestroyKey
BCryptCloseAlgorithmProvider
BCryptVerifySignature
BCryptFinishHash
BCryptDestroyHash
BCryptGetProperty
sendto
setsockopt
shutdown
socket
WSARecv
WSARecvFrom
WSASend
WSASendTo
WSAPoll
inet_addr
ntohl
getaddrinfo
send
WSASetLastError
recvfrom
recv
listen
getsockopt
ntohs
htons
WSACleanup
WSAStartup
WSAGetLastError
getsockname
getpeername
ioctlsocket
connect
closesocket
freeaddrinfo
bind
accept
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ