Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Overview
overview
10Static
static
3AvastProxy...xy.exe
windows7-x64
10AvastProxy...xy.exe
windows10-2004-x64
10AvastProxyQUY/wsc.dll
windows7-x64
1AvastProxyQUY/wsc.dll
windows10-2004-x64
1How Cathol...e.docx
windows7-x64
4How Cathol...e.docx
windows10-2004-x64
1How Cathol...ve.exe
windows7-x64
4How Cathol...ve.exe
windows10-2004-x64
7wwlib.dll
windows7-x64
8wwlib.dll
windows10-2004-x64
8Static task
static1
Behavioral task
behavioral1
Sample
AvastProxyQUY/AvastProxy.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
AvastProxyQUY/AvastProxy.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
AvastProxyQUY/wsc.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
AvastProxyQUY/wsc.dll
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
How Catholics Adapt to Changes in China A Missiological Perspective.docx
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
How Catholics Adapt to Changes in China A Missiological Perspective.docx
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
How Catholics Adapt to Changes in China A Missiological Perspective.exe
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
How Catholics Adapt to Changes in China A Missiological Perspective.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
wwlib.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
wwlib.dll
Resource
win10v2004-20240508-en
Target
8637fcef69115517c88cd620adff819b_JaffaCakes118
Size
620KB
MD5
8637fcef69115517c88cd620adff819b
SHA1
4c8a8a4ec8f5402bd29f09556d9d9ca29880c818
SHA256
dc20e0bcdd7fc623dc93dbafa35c8a8cf1821018155def3aa2612ab2d9bd4788
SHA512
cd0163c2d1db6ade757544319cc58ec1b6e3850e6b2a4179094f31d3f0f20d11c05da57735e14fc0fb0fe1a4a4fc6d9a13cbd1654fc12d25210a6ff29eaeee56
SSDEEP
12288:0zONZbleC306xAGKyb6ENnT6FbxyYGyzUeh3p6p+ou8:0Uzk+RrNaboYoeZUcou8
Checks for missing Authenticode signature.
resource |
---|
unpack001/AvastProxyQUY/wsc.dll |
unpack001/wwlib.dll |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\work\e0dd96435fde7cb0\BUILDS\Release\x86\wsc_proxy.pdb
GetCommandLineW
GetLastError
LoadLibraryW
GetProcAddress
ExitProcess
GetModuleHandleW
FreeLibrary
SetDllDirectoryW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
lstrcatA
GetProcAddress
GetModuleHandleA
CloseHandle
ReadFile
CreateFileA
ExitProcess
FreeLibrary
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
SetFilePointer
RtlUnwind
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
WriteFile
GetModuleFileNameA
LoadLibraryA
InitializeCriticalSection
Sleep
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
HeapSize
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
_run@4
fledsrrfwnitoygqhtsddsorurvpmvcxbywnwilqhqctfms
mdrnxphdcawfbuquqmlqlcgaw
rrtfkvdjevtddelkjdtixvyhyaswmptjp
tjwvhtnta
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
t:\word\x86\ship\0\winword.pdb
FreeLibrary
GetProcAddress
LoadLibraryW
LoadLibraryExW
GetSystemDirectoryW
GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetModuleHandleW
GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
VirtualProtect
IsDebuggerPresent
_crt_debugger_hook
__set_app_type
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_unlock
DllGetLCID
wdCommandDispatch
wdGetApplicationObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
LocalFree
GetModuleHandleA
ExitProcess
GetProcAddress
FMain
bvcdmxxvxhdklh
ixxaefcoaiyqleihhooaurqooytrqhjmgyru
lvxjdqeyqgqfkexlcb
wdCommandDispatch
wdGetApplicationObject
wmrruryhewqqgtmp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ