Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Overview
overview
9Static
static
3CMDV5-main/CMDV5.bat
windows7-x64
9CMDV5-main/CMDV5.bat
windows10-2004-x64
9CMDV5-main...sm.exe
windows7-x64
1CMDV5-main...sm.exe
windows10-2004-x64
1CMDV5-main...CL.exe
windows7-x64
1CMDV5-main...CL.exe
windows10-2004-x64
1CMDV5-main...no.bat
windows7-x64
1CMDV5-main...no.bat
windows10-2004-x64
1CMDV5-main...up.bat
windows7-x64
1CMDV5-main...up.bat
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
CMDV5-main/CMDV5.bat
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CMDV5-main/CMDV5.bat
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
CMDV5-main/junkins/nssm/nssm.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
CMDV5-main/junkins/nssm/nssm.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
CMDV5-main/junkins/startup/SetACL.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
CMDV5-main/junkins/startup/SetACL.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
CMDV5-main/junkins/startup/no.bat
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
CMDV5-main/junkins/startup/no.bat
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
CMDV5-main/junkins/startup/startup.bat
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
CMDV5-main/junkins/startup/startup.bat
Resource
win10v2004-20240508-en
Target
CMDV5-main.zip
Size
369KB
MD5
9854f2f57ad8e26634a7506df0597c3c
SHA1
9d0d4669cac17c74232801045ab28a137c2d9aca
SHA256
dbb0845f3d3267febac32bc697ebcdab9d09b6a03726c80f3d453c79864f004e
SHA512
1492c049f093e9cbefc3bfe41f12ccd08e6540b93c0889f03a7f9e189e6a1c85d9253a8268b24b4efbebf744f73084558d93a9f6a656aa8979e31720637a8474
SSDEEP
6144:KQEImMm/FOZgKoCpH8D9v/UkSUmEfuDwxYonXclA53Vhwu34aeSfPNQExsI+xdLn:1EImtd4gKLpUvLSUmEnXp53z33H6dfxZ
Checks for missing Authenticode signature.
resource |
---|
unpack001/CMDV5-main/junkins/nssm/nssm.exe |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PathUnquoteSpacesW
PathFindExtensionW
CreateThread
SetHandleInformation
CreatePipe
DuplicateHandle
GetCommandLineW
TlsAlloc
GetProcessTimes
OpenProcess
Thread32Next
Thread32First
CreateToolhelp32Snapshot
GenerateConsoleCtrlEvent
SetConsoleCtrlHandler
GetExitCodeProcess
Process32NextW
Process32FirstW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetWindowsDirectoryW
DeleteCriticalSection
UnregisterWait
WaitForSingleObject
LeaveCriticalSection
SetWaitableTimer
EnterCriticalSection
ResumeThread
SetProcessAffinityMask
RegisterWaitForSingleObject
GetSystemTimeAsFileTime
CreateWaitableTimerW
InitializeCriticalSection
ReadFile
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapSize
RtlUnwind
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
VirtualAlloc
HeapReAlloc
GetTickCount
QueryPerformanceCounter
VirtualFree
SetLastError
HeapCreate
SetStdHandle
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetFileInformationByHandle
Sleep
SystemTimeToFileTime
CloseHandle
CompareFileTime
FileTimeToSystemTime
MoveFileW
GetSystemTime
CreateFileW
SetFilePointer
SetEndOfFile
WriteFile
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentProcess
GetProcessAffinityMask
FindResourceExW
LoadResource
GetModuleHandleW
LocalFree
TlsGetValue
LocalAlloc
TlsSetValue
GetUserDefaultLangID
FormatMessageW
GetModuleFileNameW
CreateProcessW
TerminateProcess
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
AllocConsole
SetConsoleTitleW
GetStdHandle
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
GetConsoleWindow
GetCurrentProcessId
FreeConsole
GetProcessHeap
HeapAlloc
GetComputerNameW
HeapFree
GetLastError
GetCurrentThreadId
TlsFree
IsValidCodePage
MultiByteToWideChar
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetModuleFileNameA
EnumWindows
PostThreadMessageW
PostMessageW
LoadImageW
SetWindowLongW
GetMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
DestroyWindow
PostQuitMessage
ShowWindow
SetFocus
GetWindowLongW
CheckRadioButton
SetWindowPos
SetDlgItemInt
SetDlgItemTextW
SendMessageW
GetDlgItemTextW
GetDlgItem
EnableWindow
GetDlgItemInt
SendDlgItemMessageW
GetWindowRect
GetDesktopWindow
MoveWindow
CreateDialogIndirectParamW
MessageBoxW
MessageBoxIndirectW
GetSystemMenu
EnableMenuItem
GetWindowThreadProcessId
GetSystemMetrics
GetOpenFileNameW
CreateServiceW
StartServiceW
ControlService
SetServiceStatus
DeleteService
QueryServiceConfig2W
ChangeServiceConfig2W
ChangeServiceConfigW
QueryServiceConfigW
OpenServiceW
GetServiceKeyNameW
EnumServicesStatusW
OpenSCManagerW
QueryServiceStatus
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
StartServiceCtrlDispatcherW
AllocateAndInitializeSid
CheckTokenMembership
RegDeleteValueW
IsTextUnicode
RegisterEventSourceW
ReportEventW
DeregisterEventSource
GetServiceDisplayNameW
CloseServiceHandle
LsaEnumerateAccountRights
LsaAddAccountRights
FreeSid
LsaLookupSids
LsaClose
LsaLookupNames
LsaFreeMemory
IsValidSid
GetSidSubAuthorityCount
GetSidLengthRequired
GetSidIdentifierAuthority
InitializeSid
GetSidSubAuthority
LsaOpenPolicy
LsaNtStatusToWinError
RegisterServiceCtrlHandlerExW
ShellExecuteExW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\Daten\Helge\Programmierung\SetACL3\Source\SetACL.exe\Win32\Release\SetACL.pdb
GetUserNameExW
VerQueryValueW
ord13
FindClose
CreateFileW
InterlockedIncrement
WideCharToMultiByte
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
Sleep
GetCommandLineW
HeapSetInformation
RtlUnwind
RaiseException
GetCPInfo
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
FindFirstFileW
IsProcessorFeaturePresent
HeapCreate
GetStdHandle
GetLocaleInfoW
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
CompareStringW
SetEnvironmentVariableW
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
WriteConsoleW
SetEndOfFile
ReadFile
SetEvent
ResetEvent
ReleaseMutex
CreateEventW
CreateMutexW
FindNextFileW
MoveFileExW
WriteFile
SetFilePointerEx
GetFileSizeEx
GetCurrentThreadId
GetLocalTime
WaitForSingleObject
CreateThread
CompareFileTime
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FreeLibrary
LocalFree
FormatMessageW
LoadLibraryExW
InterlockedDecrement
LoadLibraryW
GetModuleFileNameW
GetVersionExW
GetComputerNameW
FreeResource
GetUserDefaultLangID
LockResource
LoadResource
FindResourceW
HeapFree
GetProcessHeap
HeapAlloc
CloseHandle
GetCurrentProcess
GetProcAddress
GetLastError
GetModuleHandleW
CreateDirectoryW
GetFileAttributesW
DeleteFileW
LoadStringW
LookupAccountNameW
ConvertSidToStringSidW
LookupAccountSidW
MapGenericMask
GetSecurityDescriptorLength
AddAccessAllowedAce
AddAce
InitializeAcl
IsValidAcl
DeleteAce
MakeSelfRelativeSD
SetSecurityDescriptorSacl
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetNamedSecurityInfoW
SetSecurityInfo
IsValidSecurityDescriptor
GetNamedSecurityInfoW
GetKernelObjectSecurity
ConvertStringSidToSidW
EqualSid
GetAce
GetAclInformation
ConvertSecurityDescriptorToStringSecurityDescriptorW
GetSecurityDescriptorControl
SetEntriesInAclW
RegCreateKeyExW
MakeAbsoluteSD
ConvertStringSecurityDescriptorToSecurityDescriptorW
ReportEventW
DeregisterEventSource
RegisterEventSourceW
RegCloseKey
RegOpenKeyExW
RegConnectRegistryW
RegEnumKeyExW
CopySid
GetLengthSid
IsValidSid
GetTokenInformation
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CoCreateInstance
CoInitialize
CoInitializeSecurity
CoUninitialize
CoSetProxyBlanket
CoQueryProxyBlanket
SysAllocStringLen
SafeArrayGetUBound
SafeArrayGetLBound
VariantClear
VariantInit
SysStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
SysAllocString
SysFreeString
SysAllocStringByteLen
DsGetDcNameW
NetShareSetInfo
NetApiBufferFree
NetDfsGetClientInfo
NetShareGetInfo
WNetCloseEnum
WNetEnumResourceW
WNetOpenEnumW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ