Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
e025e412465708214d27bb7d85e8f999.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e025e412465708214d27bb7d85e8f999.exe
Resource
win10v2004-20240226-en
Target
e025e412465708214d27bb7d85e8f999
Size
2.0MB
MD5
e025e412465708214d27bb7d85e8f999
SHA1
042ef13e23da38f9cba3cada884a3931b707d894
SHA256
55a9bb60701e2dad35386085c9cc762f3056831ee72464f94bd375e775efaaa2
SHA512
27c4b2fd913303d6222395511ee44ae67b63f72b58a325a7eb28e0ecaa22f6b31466fa473a29ae0969eff579ee8b2a35ac1255dc9d936b76184f8de58edaf37d
SSDEEP
49152:Q7Ct5+bV9ZwR3Q9GsQYnOTLugnOUkkds1yyFvriGqVEB1:Q7Ct5e9ZKtOUkF1fBHqVI1
resource | yara_rule |
---|---|
sample | nsis_installer_2 |
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromStream
GdipCreateFromHDC
GdipDeleteGraphics
GdipDisposeImage
GdipDrawImageI
GdipFree
GdiplusShutdown
GdiplusStartup
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontA
CreateFontIndirectA
CreateSolidBrush
DeleteDC
DeleteObject
GetStockObject
SelectObject
SetBkColor
SetBkMode
SetTextColor
TextOutA
CloseHandle
CreateSemaphoreA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FindResourceA
GetCommandLineA
GetCurrentThreadId
GetFileAttributesA
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTempPathA
GetVersionExA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
LoadResource
LockResource
MultiByteToWideChar
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
SizeofResource
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WideCharToMultiByte
_close
_fdopen
_fstat
_lseek
_open
_read
_write
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_global_unwind2
_iob
_onexit
_setmode
abort
atexit
atoi
calloc
fclose
fflush
fopen
fputc
fputs
free
fwrite
getenv
iswctype
localeconv
malloc
memchr
memmove
printf
realloc
setlocale
setvbuf
signal
sprintf
strchr
strcmp
strcoll
strcpy
strerror
strftime
strlen
strncpy
strrchr
strtok
strxfrm
tolower
towlower
towupper
wcscoll
wcsftime
wcslen
wcsxfrm
CreateStreamOnHGlobal
SHBrowseForFolderA
SHGetFolderPathA
SHGetPathFromIDListA
ShellExecuteA
BeginPaint
ClientToScreen
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
EnableWindow
EndPaint
GetCapture
GetDC
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
MessageBoxA
MessageBoxExA
PostQuitMessage
RedrawWindow
RegisterClassExA
ReleaseCapture
ReleaseDC
SendMessageA
SetCapture
SetCursor
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
TranslateMessage
HttpOpenRequestA
HttpQueryInfoA
HttpSendRequestA
InternetAttemptConnect
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetOpenUrlA
InternetReadFile
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE