Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
dc51850eeedad6516bf556035870d760f1eb0d7c29e6cdd0c178c51f0810def1.exe
Resource
win7-20220812-en
Target
dc51850eeedad6516bf556035870d760f1eb0d7c29e6cdd0c178c51f0810def1
Size
192KB
MD5
1705f3ccd9c9a569f00a6e63b588d3f0
SHA1
f30ffb875f8b3f86e41b6324f079b1b5f9250015
SHA256
dc51850eeedad6516bf556035870d760f1eb0d7c29e6cdd0c178c51f0810def1
SHA512
128ae96c0565fa7b486acb680be748ea77df1adfbb6291f274625bb6fd567dcdce0478c0f6d5382ea6c441c22006bdc76654aad9c19f1da07a5cdecf38acc295
SSDEEP
3072:xiULt2ABkPm97ff1+jnXs+zPMnGQlHUdWyNmsQhjWcmMU:ht2EkPm97f9+jnVzghsGNhjwB
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ord860
ord2822
ord927
ord2606
ord925
ord535
ord940
ord942
ord858
ord2910
ord5568
ord861
ord538
ord540
ord2810
ord800
ord823
ord825
wcslen
wcsncpy
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
memset
free
malloc
_wcsicmp
wcstoul
wcscpy
wcscmp
memcmp
_wtol
_wcsnicmp
wcsspn
wcscspn
_ftol
_wtoi
__CxxFrameHandler
strstr
sprintf
strlen
strcmp
memcpy
_initterm
_controlfp
__getmainargs
isspace
isalnum
_wcsdup
rand
iswdigit
strcpy
_acmdln
exit
_XcptFilter
strcat
strrchr
strncpy
__dllonexit
_onexit
_exit
CreateThread
CloseHandle
MultiByteToWideChar
GetLastError
CreateFileW
WriteFile
GetTempFileNameW
GetTempPathW
WaitForSingleObject
CreateProcessW
OpenEventW
GetEnvironmentVariableW
CreateFileMappingW
CreateEventW
SetEvent
MapViewOfFile
UnmapViewOfFile
lstrlenA
lstrlenW
GetStartupInfoA
GetModuleHandleA
GetModuleHandleW
GetModuleFileNameA
CreateFileA
DeviceIoControl
GetFileSize
DebugBreak
InterlockedDecrement
GetModuleFileNameW
OutputDebugStringW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CopyFileW
GetCurrentProcess
FlushInstructionCache
EnterCriticalSection
LeaveCriticalSection
DeleteFileW
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
WideCharToMultiByte
GetVersionExW
GetTickCount
GetCurrentThreadId
LoadLibraryW
GetProcAddress
FreeLibrary
SetLastError
CreateMutexW
OpenFileMappingW
ResetEvent
FindWindowW
CharNextW
RegisterClassExW
LoadCursorW
UpdateWindow
ShowWindow
CreateWindowExW
DispatchMessageW
TranslateMessage
GetMessageW
PostThreadMessageW
wvsprintfW
IsWindow
GetClassInfoExW
wsprintfW
CallWindowProcW
GetWindowLongW
SetWindowLongW
PostMessageW
SetTimer
SendMessageW
KillTimer
DestroyWindow
PostQuitMessage
DefWindowProcW
RegOpenKeyExW
RegEnumValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
ShellExecuteExW
SHGetFolderPathW
CoTaskMemFree
CoInitialize
CreateBindCtx
CoUninitialize
CoTaskMemAlloc
SysFreeString
SysAllocString
RevokeBindStatusCallback
RegisterBindStatusCallback
CreateURLMoniker
URLDownloadToFileW
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?empty@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE_NXZ
?length@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1_Winit@std@@QAE@XZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
WTHelperGetProvCertFromChain
WinVerifyTrust
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
CertGetNameStringW
HttpOpenRequestW
InternetOpenUrlW
InternetCrackUrlW
InternetOpenW
InternetConnectW
HttpSendRequestW
HttpQueryInfoW
InternetReadFile
InternetCloseHandle
StrStrIW
PathFileExistsW
StrCmpW
PathFindFileNameW
PathAppendW
PathRemoveFileSpecW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE