Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
certgen.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
certgen.exe
Resource
win10v2004-20240419-en
Target
certgen.exe
Size
158KB
MD5
b048a9f5252ddc1679c1ea736f780682
SHA1
e047e60720836aea454b740731ac358e6d11822f
SHA256
11ff9f52e86f1043ac3f9d38ee6acb5b7172d3f2579d4d55479aef01589907aa
SHA512
c76866f285055bba7aa1f151c6a3695c38499beb7dedd5be88a72781025d7c2376c8ee0c8a10aceaeea0b40c7c9770f640c82c3c510582bca2d2b57f9f30ff5f
SSDEEP
3072:mCHufdfpB9inbocRv834U3A2Wquq0mR89gPihJgeBRqntgqJ6:mCOFfkbocil7eBRKtgS6
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
c:\gitlab-runner\builds\38aa7087\0\wvs\scanner-ng\release-build\bin\certgen.pdb
CertAddEncodedCertificateToSystemStoreA
LeaveCriticalSection
DeleteCriticalSection
SetEvent
WaitForSingleObject
WaitForMultipleObjects
QueueUserAPC
TerminateThread
TlsAlloc
TlsFree
GetSystemInfo
LocalFree
FormatMessageA
GetLastError
WideCharToMultiByte
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
CloseHandle
EnterCriticalSection
FormatMessageW
RtlCaptureContext
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
AreFileApisANSI
InitializeSListHead
??1UnicodeString@icu_67@@UEAA@XZ
ucnv_detectUnicodeSignature_67
?getTerminatedBuffer@UnicodeString@icu_67@@QEAAPEB_SXZ
?length@UnicodeString@icu_67@@QEBAHXZ
?caseCompare@UnicodeString@icu_67@@QEBACAEBV12@I@Z
ucnv_close_67
ucnv_open_67
?compare@UnicodeString@icu_67@@QEBACAEBV12@@Z
u_errorName_67
ucnv_convertEx_67
?fromUTF8@UnicodeString@icu_67@@SA?AV12@VStringPiece@2@@Z
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
WSAStartup
WSACleanup
X509_set_subject_name
X509_get_subject_name
X509_getm_notBefore
X509_getm_notAfter
X509_get_serialNumber
X509_set_version
X509_NAME_add_entry_by_txt
X509_free
X509_new
X509_NAME_new
X509_EXTENSION_free
X509_gmtime_adj
BN_set_word
X509_add_ext
PEM_read_bio_X509
PEM_write_bio_X509
BN_new
BIO_s_mem
BIO_ctrl
BIO_free
BIO_new
BIO_new_file
PEM_read_bio_PrivateKey
PEM_write_bio_PrivateKey
X509V3_EXT_conf_nid
X509_set_issuer_name
i2d_X509_bio
X509_sign
RSA_free
RSA_generate_key_ex
RSA_new
BN_free
EVP_PKEY_free
EVP_PKEY_new
EVP_PKEY_set1_RSA
EVP_sha256
X509_set_pubkey
ASN1_INTEGER_set
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Mbrtowc
?_Xbad_alloc@std@@YAXXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
??Bid@locale@std@@QEAA_KXZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?_Xout_of_range@std@@YAXPEBD@Z
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memcmp
memcpy
memmove
__std_terminate
memset
memchr
__C_specific_handler
__current_exception
__current_exception_context
__std_type_info_destroy_list
_purecall
__CxxFrameHandler4
_initterm
_get_initial_narrow_environment
_c_exit
_initterm_e
_set_app_type
_seh_filter_exe
_cexit
exit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_register_thread_local_exe_atexit_callback
_exit
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
terminate
__p___argc
_crt_at_quick_exit
__p___argv
strerror
_errno
_execute_onexit_table
srand
rand
_set_fmode
__stdio_common_vsprintf
__stdio_common_vfprintf
__acrt_iob_func
__p__commode
_time64
strncpy
_set_new_mode
malloc
_callnewh
free
calloc
strtoul
strtol
__setusermatherr
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ