Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
virussign.com_aa3fd4b6ad55e408dbaa4007d622f400.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
virussign.com_aa3fd4b6ad55e408dbaa4007d622f400.exe
Resource
win10v2004-20240426-en
Target
virussign.com_aa3fd4b6ad55e408dbaa4007d622f400.vir
Size
402KB
MD5
aa3fd4b6ad55e408dbaa4007d622f400
SHA1
b0744e0a8854a7914b5e9f0be503530d961de457
SHA256
1e7d4c722fbac687ea7bb1fa1a7b0d1cdfdc888d8a6ff6efb685fce2242e2eb2
SHA512
83c12f847cfda98786f5d185fbe60347f428fe856ccba640c6bf9ebe1b71bba933a4cdd66b30a5b57d8fa65ff01cb259cd8e8ac636ca6d184d1aceb4cb1824cd
SSDEEP
6144:2XEb3hfo0Dk+asEb1stpItV/KZ1Qxe+HdC48BV+UdvrEFp7hK/vWL:2XafrNEhstpIt0gvC48BjvrEH7+WL
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetupDiGetClassDevsExW
SetupDiEnumDeviceInfo
SetupDiClassGuidsFromNameW
SetupOpenInfFileW
SetupCloseInfFile
SetupGetLineByIndexW
SetupGetLineCountW
SetupDiSetClassInstallParamsW
SetupDiSetDeviceRegistryPropertyW
SetupDiOpenClassRegKey
SetupDiCallClassInstaller
SetupDiGetINFClassW
SetupDiGetDeviceRegistryPropertyW
SetupDiClassGuidsFromNameExW
SetupGetStringFieldW
SetupDiCreateDeviceInfoList
SetupDiCreateDeviceInfoW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupGetLineTextW
UpdateDriverForPlugAndPlayDevicesW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
DecodePointer
LockResource
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
GetCurrentProcess
GetExitCodeProcess
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
ReleaseMutex
WaitForSingleObject
LoadResource
SizeofResource
GetFileSize
FindClose
CloseHandle
GetSystemInfo
lstrlenW
CreateMutexW
GetModuleFileNameW
CreateProcessW
FindResourceW
FindResourceExW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetSystemDirectoryW
CreateFileW
GetFileAttributesW
FindFirstFileW
FindNextFileW
CopyFileW
MultiByteToWideChar
WriteFile
SetFilePointer
ExpandEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
TerminateProcess
GetCurrentThreadId
LoadLibraryW
GetModuleHandleExW
CreateDirectoryW
MoveFileExW
IsWow64Process
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
GetFileType
GetStdHandle
LCMapStringW
CompareStringW
GetSystemTimeAsFileTime
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
SetLastError
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LoadLibraryExW
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
SetEndOfFile
ReadFile
ReadConsoleW
RtlUnwind
EncodePointer
IsDebuggerPresent
FreeLibrary
SetEnvironmentVariableA
IsValidCodePage
WideCharToMultiByte
ExitProcess
DeleteFileW
SetFileAttributesW
GetFileAttributesExW
IsProcessorFeaturePresent
GetCommandLineW
OutputDebugStringW
LoadStringW
MessageBoxW
ExitWindowsEx
PrivilegeCheck
RegOpenKeyExW
RegEnumKeyW
RegDeleteValueW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegQueryValueExW
RegSetValueExW
RegOpenKeyW
RegCreateKeyExW
RegCreateKeyW
RegCloseKey
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
SHGetSpecialFolderPathW
ShellExecuteExW
SHGetFolderPathW
SHDeleteKeyW
SHDeleteValueW
SHDeleteEmptyKeyW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ