Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
CmdLineExtInstallerExe.exe
Resource
win10v2004-20240802-es
Target
CmdLineExtInstallerExe.exe
Size
367KB
MD5
a2ab29a59482e140674319d3f984435a
SHA1
f104e27b24b8294f65e195824d2f69a54caa229d
SHA256
543e6e705dd49f0347cc622e3741a7d45ee336a1c78e0cd0b5fb4024ab1db901
SHA512
4bda7c75d5fddb92630c9b5ba45781fe9c381fe7977c7cb49fc9500a3c56da361979e110ae400bdab1cc027b771b255dcc062a226b010fd5db8b46aa72461ed2
SSDEEP
6144:rR0J/OJPtdzdkAl6WYay9cfm7vi67o+fniN/l/t:1aGJPtJdkwwpce7v31+L
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ShellExecuteExA
GetStartupInfoA
GetCommandLineA
GetVersionExA
RtlUnwind
RaiseException
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LCMapStringA
MultiByteToWideChar
LCMapStringW
SetUnhandledExceptionFilter
GetModuleHandleA
EnterCriticalSection
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection
InterlockedExchange
VirtualQuery
SetFilePointer
GetLocaleInfoA
VirtualProtect
GetSystemInfo
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
FlushFileBuffers
WaitForSingleObject
GetExitCodeProcess
CloseHandle
LoadLibraryA
GetProcAddress
FreeLibrary
LeaveCriticalSection
CreateFileA
GetSystemDirectoryA
GetTempPathA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
RegCreateKeyExA
RegSetValueA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueA
RegCloseKey
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ