Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
Support-LogMeInRescue.exe
Resource
win11-20240802-en
Target
Support-LogMeInRescue.exe
Size
3.3MB
MD5
d099136fd5a8cec0c96d82a94dbd83fc
SHA1
a885b2e090f6022d53f0afb974c9958b481a4eb2
SHA256
fd98b8ad2bc43e957cf2494af3664778842adb28fabdc2393663497a4e13834e
SHA512
085503c5ceba3a06e956c05cd42f3f085c01a6ede8daaf2f9b2c8c9e9173d29b04b97029c97aeebcf931f1c7ea5c9a9b0c922a88bff01826be1520aad110db8e
SSDEEP
49152:QBhPl81T1I/kUT676ClET/nzbnhLbBwfcb6hOAl3oTLSbAjK+4N6qoAfBWzcuMIZ:QBZlk1Kc+Cmnh+2EdoTNjZ48qoA4YIb9
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
C:\build.tc\agent\work\14d10ba45c29ec39\-\rescue\Applet\native\bin\x86\LMIRescue.pdb
GetModuleHandleA
Sleep
GetLastError
LoadLibraryA
DeleteFileW
GetLocalTime
SetCurrentDirectoryW
GetProcAddress
GetModuleHandleW
FreeLibrary
SizeofResource
SetLastError
WriteFile
GetModuleFileNameW
SetFilePointer
FindClose
GetFileAttributesW
FreeResource
FormatMessageW
LockResource
CloseHandle
LoadResource
FindResourceW
CreateProcessW
CopyFileW
LoadLibraryW
GetCurrentDirectoryW
lstrlenW
WriteConsoleW
SetFilePointerEx
HeapReAlloc
RemoveDirectoryW
GetCurrentProcess
FindNextFileW
FindFirstFileW
CreateFileW
CreateDirectoryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
MultiByteToWideChar
GetStdHandle
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
GetFileType
LCMapStringW
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetStringTypeW
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
DecodePointer
MessageBoxW
RegQueryInfoKeyW
RegOpenKeyExA
RegEnumValueW
RegQueryValueExW
RegCloseKey
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ