Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
06caed5cef6fbe779bef2a71c17f339577eb69ada0e69c91e4a94ba9d5b37b63.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
06caed5cef6fbe779bef2a71c17f339577eb69ada0e69c91e4a94ba9d5b37b63.exe
Resource
win10v2004-20220812-en
Target
06caed5cef6fbe779bef2a71c17f339577eb69ada0e69c91e4a94ba9d5b37b63
Size
211KB
MD5
84b24aa27c8655187272e1dd26b14860
SHA1
ed18d4b9420cf85367801cd765f7feee936b8c11
SHA256
06caed5cef6fbe779bef2a71c17f339577eb69ada0e69c91e4a94ba9d5b37b63
SHA512
eff1ea7bf17886b0d837307c36ec9cb9d97af13940518404945d67dd9b1cf4a80e6d45f192241d1cb0e5ef2095a70835238e72a21fee92542153f92d9891d447
SSDEEP
6144:USrxuAJDpfuOf9I1WEXP9wdzoOOf1nZRQ:USrfJJuOf9IwE/i5oHnZRQ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
htonl
ntohs
ntohl
htons
GetFileAttributesExW
FindClose
FindNextFileW
FindFirstFileExW
GetEnvironmentVariableW
CreateDirectoryW
ExpandEnvironmentStringsW
DeleteFileW
WriteFile
OpenEventW
MultiByteToWideChar
LoadLibraryA
GetExitCodeProcess
DeleteCriticalSection
GetModuleHandleExW
ProcessIdToSessionId
WTSGetActiveConsoleSessionId
SetLastError
InterlockedDecrement
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
VirtualAlloc
ResumeThread
VirtualQuery
GlobalMemoryStatusEx
GetThreadContext
SetThreadContext
MapViewOfFile
SetFilePointer
UnmapViewOfFile
lstrlenW
InterlockedIncrement
GetSystemDefaultLangID
InterlockedExchange
lstrcmpiW
SwitchToThread
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
CreateFileW
HeapReAlloc
HeapSize
UnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
LeaveCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GetVersionExW
TlsAlloc
TlsSetValue
TlsGetValue
GetModuleHandleA
VirtualProtect
InterlockedCompareExchange
GetStartupInfoW
GetSystemDirectoryW
LoadLibraryW
FreeLibrary
GetCurrentThread
GetLastError
LocalAlloc
LocalFree
GetSystemInfo
WideCharToMultiByte
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
CreateFileA
GetFileSize
ReadFile
GetCommandLineW
GetModuleFileNameW
HeapAlloc
GetModuleHandleW
SetErrorMode
GetProcAddress
InitializeCriticalSection
lstrcpynW
VirtualAllocEx
SetUnhandledExceptionFilter
WriteProcessMemory
EnterCriticalSection
GetCurrentThreadId
CreateEventW
SearchPathW
GetCurrentProcessId
OpenProcess
CreateProcessW
CloseHandle
WaitForSingleObject
GetCurrentProcess
TerminateProcess
GetProcessHeap
HeapFree
OpenFileMappingW
SetEvent
GetLocalTime
HeapDestroy
Sleep
FlushInstructionCache
IsWindow
SendMessageTimeoutW
FindWindowA
FindWindowW
GetWindowThreadProcessId
UnregisterClassA
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyW
RegOpenKeyA
RegNotifyChangeKeyValue
RegEnumValueW
RegFlushKey
RegDeleteKeyW
LookupAccountSidW
RegQueryInfoKeyW
RegEnumKeyExW
RegSetKeySecurity
RegGetKeySecurity
RegOpenKeyExA
RegCreateKeyExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
ConvertStringSidToSidW
IsValidSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
RegQueryInfoKeyA
RegEnumValueA
RegDeleteValueW
RegSetValueExW
OpenThreadToken
OpenProcessToken
GetTokenInformation
ConvertSidToStringSidW
RegQueryValueExW
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
RegCloseKey
CoInitialize
CoInitializeEx
CoCreateInstance
CoUninitialize
SHCreateDirectoryExW
CommandLineToArgvW
SHGetFolderPathW
SysFreeString
SysAllocStringLen
VariantClear
SHDeleteKeyW
StrStrIW
PathRemoveFileSpecW
PathAppendA
PathAppendW
StrStrIA
PathMatchSpecW
PathFileExistsW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
ImmDisableIME
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEAB_WI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@II@Z
strrchr
fwrite
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
strncpy_s
fflush
fclose
strchr
wcsncat_s
_memicmp
??3@YAXPAX@Z
_snwprintf_s
memset
wcschr
free
malloc
_wtol
wcscpy_s
memcpy
wcslen
_strnicmp
strlen
__CxxFrameHandler3
??_V@YAXPAX@Z
atoi
_stricmp
strtok_s
strcpy_s
_CxxThrowException
memcpy_s
memmove_s
rand_s
_mbsstr
_vscprintf
vsprintf_s
wcsncpy_s
??2@YAPAXI@Z
wcsnlen
_invalid_parameter_noinfo
tolower
calloc
wcscmp
_wcsnicmp
vswprintf_s
_snprintf_s
_wcsicmp
wcscat_s
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
strnlen
swprintf_s
_wtoi
toupper
_purecall
_wsplitpath_s
swscanf_s
wcsrchr
_wtoi64
_vsnprintf_s
_vsnwprintf_s
_except_handler4_common
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
InternetCloseHandle
HttpQueryInfoW
HttpSendRequestA
HttpOpenRequestA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetOpenA
InternetConnectA
InternetReadFile
EnumProcesses
EnumProcessModules
GetModuleBaseNameW
GetModuleFileNameExW
GetProcessMemoryInfo
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE