Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
706bfb94710495a6a6a04c3957bc566bb6088d4c42e83f28c6f7d64fe66a71c4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
706bfb94710495a6a6a04c3957bc566bb6088d4c42e83f28c6f7d64fe66a71c4.exe
Resource
win10v2004-20220812-en
Target
706bfb94710495a6a6a04c3957bc566bb6088d4c42e83f28c6f7d64fe66a71c4
Size
158KB
MD5
71e0992f01db630ec2cf1f80ba6a4a70
SHA1
6b07fd602de69f3fc58cd66a0e7978e2e7b0e650
SHA256
706bfb94710495a6a6a04c3957bc566bb6088d4c42e83f28c6f7d64fe66a71c4
SHA512
b8aff8aef3d9de8ec93f643307b14583d23c7c05fc469b0420da8df8f019075792c64377da68092e969711252da84f1a34d886579900d17adb6a786a05016422
SSDEEP
1536:dseoynFrIp1Q4tRouSVxFR5CvT0xRv3OIDiJD3xlfyswzXaEDRzLhisKldB:PIRHoueR5KIx9+IeJDBlf4awLGl
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PathAddBackslashA
PathRemoveExtensionA
PathFindExtensionA
PathAppendA
PathFileExistsA
PathFindExtensionW
PathIsDirectoryA
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueW
ExecutionLiveUpdateFile
ExitProcess
CloseHandle
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
CreateFileA
CreateDirectoryA
GetModuleFileNameA
GetLocalTime
GetProcAddress
LoadLibraryA
GetModuleFileNameW
SetUnhandledExceptionFilter
LoadLibraryW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
GetTickCount
FreeLibrary
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
GetLastError
WideCharToMultiByte
lstrlenW
GetCurrentDirectoryA
GetStartupInfoA
SetCurrentDirectoryA
lstrcmpiA
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
lstrlenA
lstrcpynA
lstrcpyA
lstrcatA
DeleteFileA
GetTempPathA
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
CreateEventA
CreateMutexA
GetCommandLineA
Process32Next
Module32Next
Module32First
Process32First
CreateToolhelp32Snapshot
LocalFree
LocalAlloc
SetFileAttributesA
GetFileAttributesA
QueryPerformanceCounter
GetSystemTimeAsFileTime
OutputDebugStringA
DispatchMessageA
CharNextA
GetMessageA
SetTimer
KillTimer
CreateDialogParamA
DestroyWindow
SendMessageTimeoutA
IsWindow
PostMessageA
MessageBoxW
OpenProcessToken
RegDeleteValueA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
CoRevokeClassObject
CoTaskMemRealloc
CoRegisterClassObject
CoTaskMemAlloc
CoCreateInstance
StringFromGUID2
CoUninitialize
CoInitialize
CoTaskMemFree
VariantInit
VarBstrCmp
VarBstrCat
SafeArrayDestroy
SysStringByteLen
SysAllocStringByteLen
SafeArrayGetUBound
SysStringLen
VariantClear
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayAccessData
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?_Nomemory@std@@YAXXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
_wcsnicmp
_except_handler3
free
??3@YAXPAX@Z
strlen
_CxxThrowException
malloc
_snprintf
memcmp
_resetstkoflw
_purecall
wcsncpy
realloc
fclose
fprintf
fopen
_putenv
_mbsicmp
??1exception@@UAE@XZ
??0exception@@QAE@XZ
??0exception@@QAE@ABV0@@Z
wcslen
wcscpy
isalnum
memmove
_atoi64
_ftime64
vfprintf
wcscmp
_callnewh
__security_error_handler
__dllonexit
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_wcsicmp
strcat
sprintf
??_V@YAXPAX@Z
memcpy
swprintf
__CxxFrameHandler
memset
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE