Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
3b56ce2012e726294681c08097ff41b0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3b56ce2012e726294681c08097ff41b0N.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
_i_*i)(r1____0x80___.r2)i .s/FilesDir.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
_i_*i)(r1____0x80___.r2)i .s/FilesDir.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
_i_*i)(r1____0x80___.r2)i .s/file.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
_i_*i)(r1____0x80___.r2)i .s/file.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
file.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
file.dll
Resource
win10v2004-20240802-en
Target
3b56ce2012e726294681c08097ff41b0N
Size
636KB
MD5
3b56ce2012e726294681c08097ff41b0
SHA1
ea9e78cec0ecc7d73c3a7effcf0e1b411d268862
SHA256
b7823f8837406b176431c17793b036284f4c29d964c06fb3fd02ecb58f47c8c3
SHA512
fb888fa214e0732395a44256bef51683645c5e85d39215cede06232b098ad002f67fee75c9214f8d1e6461c8a497b002ac3e3f68dd494442112ced4d239982c7
SSDEEP
12288:5LUGVQBVT3D0Fw/tN8dkmLtpHHHrh7sXD24JsSpaD3vvxmbjqcbkGOQZNNmf:GGKDz0FmcLbH1vIsD3vE5bkGRZnmf
Checks for missing Authenticode signature.
resource |
---|
unpack001/,i,*i)(r1,,,,0x80,,,.r2)i .s/FilesDir |
unpack001/,i,*i)(r1,,,,0x80,,,.r2)i .s/file |
unpack001/file |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryExW
GlobalAlloc
GlobalFree
MulDiv
lstrcmpW
lstrcmpiW
lstrlenA
GetPrivateProfileStringW
WritePrivateProfileStringW
MoveFileW
MultiByteToWideChar
WideCharToMultiByte
GetFileSize
GetTickCount
GetModuleFileNameW
GetCommandLineW
GetTempPathW
SetErrorMode
GetCurrentProcess
ExitProcess
GetWindowsDirectoryW
CopyFileW
GetDiskFreeSpaceW
GetModuleHandleW
GlobalLock
GlobalUnlock
lstrcpynA
lstrcpynW
lstrlenW
CreateFileW
GetTempFileNameW
RemoveDirectoryW
CreateProcessW
OpenProcess
GetVersion
GetSystemDirectoryW
GetVersionExW
GetProcAddress
lstrcmpiA
lstrcpyA
lstrcpyW
lstrcatW
LoadLibraryA
LoadLibraryW
lstrcmpA
FreeLibrary
GetExitCodeProcess
Sleep
WaitForSingleObject
GetLastError
CloseHandle
WriteFile
SetFileTime
SetFilePointer
SetFileAttributesW
ReadFile
GetShortPathNameW
GetFullPathNameW
GetFileAttributesW
FindNextFileW
ExpandEnvironmentStringsW
FindFirstFileW
FindClose
DeleteFileW
CreateDirectoryW
CompareFileTime
SearchPathW
SetCurrentDirectoryW
CreateThread
SetWindowPos
IsWindowVisible
DialogBoxParamW
EndDialog
CheckDlgButton
IsDlgButtonChecked
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
GetAsyncKeyState
IsWindowEnabled
GetSystemMetrics
GetSystemMenu
CreatePopupMenu
EnableMenuItem
AppendMenuW
TrackPopupMenu
GetWindowRect
SetCursor
ScreenToClient
GetSysColor
GetWindowLongW
CreateWindowExW
LoadBitmapW
LoadCursorW
SystemParametersInfoW
wvsprintfW
wsprintfA
DispatchMessageW
PeekMessageW
SetDlgItemTextW
GetDlgItemTextW
CharUpperW
CharNextA
CharPrevW
MessageBoxIndirectW
SetWindowTextW
SetTimer
CreateDialogParamW
DestroyWindow
LoadImageW
FindWindowExW
SetWindowLongW
InvalidateRect
SetForegroundWindow
GetClassInfoW
RegisterClassW
CallWindowProcW
GetMessagePos
CharNextW
SetClassLongW
ExitWindowsEx
EnableWindow
GetDlgItem
ShowWindow
IsWindow
PostQuitMessage
SendMessageTimeoutW
SendMessageW
wsprintfW
FillRect
GetClientRect
EndPaint
BeginPaint
DrawTextW
DefWindowProcW
GetDC
SetBkColor
GetDeviceCaps
SetTextColor
SetBkMode
SelectObject
DeleteObject
CreateFontIndirectW
CreateBrushIndirect
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
SHFileOperationW
ShellExecuteW
SHGetSpecialFolderLocation
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyW
ImageList_Destroy
ImageList_Create
ord17
ImageList_AddMasked
CoTaskMemFree
OleUninitialize
OleInitialize
CoCreateInstance
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
GlobalSize
GlobalFree
GetLastError
lstrcpynW
lstrcpyW
VirtualAlloc
VirtualProtect
FreeLibrary
GetModuleHandleW
GetProcAddress
lstrcmpiW
lstrcatW
lstrlenW
LoadLibraryW
MultiByteToWideChar
WideCharToMultiByte
wsprintfW
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
GlobalSize
GlobalFree
GetLastError
lstrcpynW
lstrcpyW
VirtualAlloc
VirtualProtect
FreeLibrary
GetModuleHandleW
GetProcAddress
lstrcmpiW
lstrcatW
lstrlenW
LoadLibraryW
MultiByteToWideChar
WideCharToMultiByte
wsprintfW
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
GlobalSize
GlobalFree
GetLastError
lstrcpynW
lstrcpyW
VirtualAlloc
VirtualProtect
FreeLibrary
GetModuleHandleW
GetProcAddress
lstrcmpiW
lstrcatW
lstrlenW
LoadLibraryW
MultiByteToWideChar
WideCharToMultiByte
wsprintfW
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ