Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
6ceb08f468e49519f33eddbb38d27d0667757a5ac3db193a073eef7eccaf124a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6ceb08f468e49519f33eddbb38d27d0667757a5ac3db193a073eef7eccaf124a.exe
Resource
win10v2004-20240508-en
Target
6ceb08f468e49519f33eddbb38d27d0667757a5ac3db193a073eef7eccaf124a
Size
2.3MB
MD5
638359da4da37381f43128fc8eb6a546
SHA1
92fda308a7c80df157284bc5d6c5474593419285
SHA256
6ceb08f468e49519f33eddbb38d27d0667757a5ac3db193a073eef7eccaf124a
SHA512
b93adaf03054a45e1a00eab977fcd8fb3e0ffc72858cbfac5c31fea2186e962792c96a252728b5d6f0a7191e12ec7493f6647d79e41ae079c19d1f74e4a2a018
SSDEEP
49152:S+dCc5rV1M9P8/ra72Nh43cv5LeTt9JX8s/L8jJvLsnYZd6kd9AFqAqr+:S+dCc5k9PArS2/xLeTZdT8jJLsYrbAmK
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
C:\build.tc\agent\work\14d10ba45c29ec39\-\rescue\Applet\native\bin\x86\LMIRescue.pdb
GetModuleHandleA
Sleep
GetLastError
LoadLibraryA
DeleteFileW
GetLocalTime
SetCurrentDirectoryW
GetProcAddress
GetModuleHandleW
FreeLibrary
SizeofResource
SetLastError
WriteFile
GetModuleFileNameW
SetFilePointer
FindClose
GetFileAttributesW
FreeResource
FormatMessageW
LockResource
CloseHandle
LoadResource
FindResourceW
CreateProcessW
CopyFileW
LoadLibraryW
GetCurrentDirectoryW
lstrlenW
DecodePointer
RemoveDirectoryW
GetCurrentProcess
FindNextFileW
FindFirstFileW
CreateFileW
CreateDirectoryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
MultiByteToWideChar
GetStdHandle
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
GetFileType
LCMapStringW
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW
RaiseException
MessageBoxW
RegQueryInfoKeyW
RegOpenKeyExA
RegEnumValueW
RegQueryValueExW
RegCloseKey
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ