Extended Key Usages
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
0629bc1f1d8ca87ac5b5fdd66cd8da4311c82a4a027854586fdc8e398168135a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0629bc1f1d8ca87ac5b5fdd66cd8da4311c82a4a027854586fdc8e398168135a.exe
Resource
win10v2004-20220901-en
Target
0629bc1f1d8ca87ac5b5fdd66cd8da4311c82a4a027854586fdc8e398168135a
Size
168KB
MD5
63c4a21fc50d91345b26b8c0ae33dd26
SHA1
9b749941172c4e1278fba156662c9040704dc8e2
SHA256
0629bc1f1d8ca87ac5b5fdd66cd8da4311c82a4a027854586fdc8e398168135a
SHA512
c5b67c1f19c1b449d98a06a5332191ca7dae26e66a2ccf10f79543ad77f707ef9dc5ece5a5339dac62144ecdcfcdea1a35a519aed18e4489571915ab987833dc
SSDEEP
3072:+wsBna++zm8i1ukp+LI75cFrWDD5FwxvYSaAJBg7txEpGfBTDFhxn7F:+Vlukp+LI75cFr45FwDaQytxEpGfNhhf
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SHGetSpecialFolderPathA
SHCreateDirectoryExA
GetFileAttributesExA
lstrcmpiA
OpenMutexA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
UnmapViewOfFile
SetEvent
CreateEventA
WaitForSingleObject
MoveFileExA
CreateToolhelp32Snapshot
Process32First
Process32Next
CreateProcessA
OutputDebugStringA
CreateMutexA
CloseHandle
lstrcpynA
lstrcatA
GetModuleFileNameA
ReadFile
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
WritePrivateProfileSectionA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetCurrentProcessId
Process32FirstW
Process32NextW
CreateFileA
GetPrivateProfileStringA
ProcessIdToSessionId
OpenProcess
lstrcmpA
GetModuleHandleA
LoadLibraryExA
ReadProcessMemory
LocalFree
lstrlenA
lstrcpynW
GetACP
LoadLibraryW
GetProcessHeap
HeapAlloc
HeapFree
GetCurrentProcess
GetVersionExA
GetVersion
CreateFileW
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryA
GetTempPathA
GetTempFileNameA
CreateDirectoryA
MultiByteToWideChar
GetLongPathNameA
DeleteFileA
GetWindowsDirectoryA
GetShortPathNameA
GetSystemDirectoryA
GetFileSize
WritePrivateProfileStructA
SetLastError
GetPrivateProfileStructA
GetStartupInfoA
CopyFileA
GetTickCount
Sleep
GetLastError
FreeLibrary
LoadLibraryA
GetProcAddress
lstrlenW
WideCharToMultiByte
GetEnvironmentVariableA
lstrcpyA
WriteFile
RegCreateKeyA
InitializeSecurityDescriptor
SetSecurityDescriptorOwner
RegSetKeySecurity
FreeSid
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyA
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
RegCreateKeyExA
RegDeleteValueA
SetNamedSecurityInfoA
SetEntriesInAclA
GetNamedSecurityInfoA
ConvertSidToStringSidA
GetTokenInformation
CreateProcessAsUserW
DuplicateTokenEx
LookupPrivilegeValueW
CloseServiceHandle
CreateServiceA
OpenSCManagerA
ChangeServiceConfig2A
OpenServiceA
DeleteService
QueryServiceStatus
StartServiceA
ControlService
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
SetTokenInformation
EqualSid
GetSidSubAuthority
GetSidSubAuthorityCount
SHSetValueA
PathFileExistsA
PathAppendA
PathFindFileNameA
SHDeleteKeyA
SHGetValueA
SHDeleteValueA
PathAddExtensionA
PathRemoveExtensionA
PathFindExtensionA
wnsprintfA
StrStrIA
PathRemoveFileSpecA
PathRemoveBackslashA
PathRemoveBlanksA
PathStripToRootA
PathIsDirectoryA
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
WSAStartup
WSACleanup
gethostbyname
gethostname
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
??1type_info@@UAE@XZ
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
strncat
_stricmp
_strnicmp
_tempnam
srand
rename
_ltoa
atol
_mbschr
sprintf
_local_unwind2
_except_handler3
strncpy
_mbstok
atoi
localtime
time
_snwprintf
printf
sscanf
_mbscmp
malloc
_ismbcupper
tolower
ftell
fread
strchr
strrchr
fwrite
wcslen
fopen
rewind
fgets
strstr
fputs
fclose
fseek
_mbsnbcpy
rand
free
_snprintf
_mbsicmp
__CxxFrameHandler
??2@YAPAXI@Z
_strlwr
_wcsicmp
_wcsnicmp
??0exception@@QAE@ABV0@@Z
strlen
_CxxThrowException
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
memcpy
memmove
__setusermatherr
IsWindow
SendMessageA
FindWindowExA
GetClassNameA
GetParent
FindWindowA
CoInitialize
CoTaskMemFree
StringFromCLSID
CoUninitialize
CoCreateGuid
SysAllocStringLen
SysStringLen
SysFreeString
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ