Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
9f6e52ac58fa530f766f4a86d9feafdf887965336e9e5cd1732c38f922052647.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9f6e52ac58fa530f766f4a86d9feafdf887965336e9e5cd1732c38f922052647.exe
Resource
win10v2004-20220812-en
Target
9f6e52ac58fa530f766f4a86d9feafdf887965336e9e5cd1732c38f922052647
Size
328KB
MD5
203b3954599fb33eacd0169df73677b0
SHA1
de307327bad7696cd2f35d2ffd6f1d9cbce3bed4
SHA256
9f6e52ac58fa530f766f4a86d9feafdf887965336e9e5cd1732c38f922052647
SHA512
87d80b7e68de82132a36d296d7139bd5d470a2a31d870d6a5e137fab6a0135eb7e78f7f4ccc9183d2b89bd00b950de64a9e7e6e202c8f9434d584bbc8ce41a76
SSDEEP
6144:baUGeFeivDz9h/xjlaLpQSSixXM3svuBpOCAcm+t:DG2vj/xjLiC8GZ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?SafeLoadLibrary@Library@Base@@YAPAUHINSTANCE__@@PB_WH@Z
?OutputDebugInfoEx@Log@Base@@YAXHPBD0IHPB_WZZ
?OutputDebugInfoEx@Log@Base@@YAXHPBD0IH0ZZ
?GetInstallVer@Misc@Utils@@YAHPADK@Z
?GetCrashCatcher@CrashCatcher@Utils@@YAPAVICrashCatcher@12@XZ
?SetSupplyID@Misc@Utils@@YAHH@Z
?GetSoftID@Misc@Utils@@YAIXZ
?GetSupplyID@Misc@Utils@@YAHAAH@Z
GetReportMgr
ReleaseReportMgr
Sleep
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
WideCharToMultiByte
GetFileAttributesW
FindResourceExW
CreateEventA
GetLocaleInfoA
GetACP
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetVersionExA
GlobalHandle
IsBadWritePtr
LockResource
InterlockedExchange
FormatMessageA
LocalFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSize
HeapReAlloc
HeapDestroy
GetThreadLocale
GlobalUnlock
FreeLibrary
InterlockedIncrement
InterlockedDecrement
CreateMutexW
LeaveCriticalSection
GetLastError
CloseHandle
GetCurrentThreadId
RaiseException
FindResourceW
SetLastError
LoadResource
MulDiv
GetModuleFileNameW
EnterCriticalSection
GetCurrentProcess
GetModuleHandleW
InitializeCriticalSection
FlushInstructionCache
lstrcmpW
SizeofResource
LoadLibraryExW
WaitForSingleObject
DeleteCriticalSection
lstrlenW
GlobalAlloc
GlobalLock
MultiByteToWideChar
lstrcmpiW
SetEvent
GetProcAddress
CreateEventW
GlobalFree
FreeResource
CreateAcceleratorTableW
GetDesktopWindow
SetWindowLongW
PeekMessageW
GetFocus
CreateWindowExW
MoveWindow
TranslateMessage
DispatchMessageW
RedrawWindow
GetWindowLongW
SetWindowTextW
UnregisterClassA
GetWindow
InvalidateRgn
GetWindowTextW
SetWindowPos
ReleaseCapture
DestroyAcceleratorTable
ClientToScreen
GetDlgItem
GetSysColor
ScreenToClient
SendMessageW
CallWindowProcW
DefWindowProcW
DestroyWindow
IsWindowEnabled
KillTimer
PtInRect
GetSystemMetrics
GetDlgCtrlID
LoadImageW
GetWindowRect
SetTimer
SetWindowRgn
SetWindowContextHelpId
SystemParametersInfoW
MapWindowPoints
GetCapture
EnableWindow
UpdateWindow
AdjustWindowRectEx
IsDialogMessageW
OffsetRect
GetMonitorInfoW
GetMenu
MonitorFromWindow
DrawFocusRect
ShowWindow
InflateRect
PostMessageW
DrawEdge
CreateDialogIndirectParamW
MapDialogRect
ReleaseDC
SetFocus
LoadCursorW
BeginPaint
SetCapture
GetParent
FillRect
RegisterWindowMessageW
CharNextW
GetClassInfoExW
EndPaint
IsWindow
GetClassNameW
GetWindowTextLengthW
RegisterClassExW
GetMessageW
GetClientRect
GetDC
InvalidateRect
IsChild
CreateRoundRectRgn
SetViewportOrgEx
TextOutW
GetTextExtentPoint32W
SetBkMode
SetTextColor
CreateFontW
RoundRect
Rectangle
SetDIBColorTable
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
DeleteDC
DeleteObject
CreateSolidBrush
GetDeviceCaps
SelectObject
GetStockObject
GetObjectW
StretchBlt
GetDIBColorTable
CreatePen
CreateDIBSection
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegQueryValueExW
ShellExecuteW
CoGetClassObject
CoUninitialize
CoTaskMemFree
CreateStreamOnHGlobal
CoInitialize
CoTaskMemAlloc
OleUninitialize
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
OleInitialize
CoTaskMemRealloc
OleLockRunning
StringFromGUID2
OleCreateFontIndirect
DispCallFunc
SysAllocString
SysFreeString
SysStringLen
LoadTypeLi
VarUI4FromStr
LoadRegTypeLi
SysAllocStringLen
VariantInit
SysStringByteLen
VariantClear
InitCommonControlsEx
ImageList_Add
ImageList_Draw
ImageList_GetIconSize
_TrackMouseEvent
ImageList_Create
ImageList_Destroy
TransparentBlt
AlphaBlend
GdipAlloc
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipGetImageWidth
GdipFree
GdiplusStartup
GdipGetImagePalette
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDisposeImage
GdipGetImagePaletteSize
GdipCloneImage
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipCreateBitmapFromScan0
GdiplusShutdown
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V32@@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIPB_W@Z
?rbegin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$reverse_iterator@V?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@XZ
?at@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEAB_WI@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?push_back@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEX_W@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIABV12@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
strerror
_itoa
_controlfp_s
_invoke_watson
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
??3@YAXPAX@Z
??_V@YAXPAX@Z
fclose
wcsncpy_s
_recalloc
??2@YAPAXI@Z
malloc
memcpy_s
memmove_s
_time64
swprintf_s
sprintf
fopen
free
fwrite
_vswprintf
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
memset
_CxxThrowException
__iob_func
fprintf
fflush
_snprintf
memcpy
__CxxFrameHandler3
vswprintf_s
_vscwprintf
_waccess
rand
srand
_wtoi
_wcsnicmp
_wcsicmp
?what@exception@std@@UBEPBDXZ
_purecall
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
_resetstkoflw
wcsstr
wcscpy_s
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE