Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
e817f6e6a0a2d5ca16118e319bd0eb56dfc4f73bdf5df60565637d8066abd017.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e817f6e6a0a2d5ca16118e319bd0eb56dfc4f73bdf5df60565637d8066abd017.exe
Resource
win10v2004-20220812-en
Target
e817f6e6a0a2d5ca16118e319bd0eb56dfc4f73bdf5df60565637d8066abd017
Size
495KB
MD5
06b05b2560c8225e160de88ab3dc6bce
SHA1
c35282741fcccd44e08c860512b3153b1f3d2621
SHA256
e817f6e6a0a2d5ca16118e319bd0eb56dfc4f73bdf5df60565637d8066abd017
SHA512
b8655602aa7b01829cc2bcafe1a1276430d9e4d200216014681c422370d4b793afed099a5f8960c0af2ebf568b535c4d1ee908c9e07f17759981c8ae948b9d87
SSDEEP
12288:IA16xJvqcQ3Y8TnqeogDWf0FmfgTbpvR:IA6xJyHY8WeooW8A4TbpvR
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetModuleFileNameW
GetPrivateProfileIntW
ExpandEnvironmentStringsW
GetFileAttributesW
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
SetFilePointer
DeleteCriticalSection
WaitForSingleObject
SetEvent
ResetEvent
CreateFileA
GetFileSize
InitializeCriticalSection
CreateEventW
WritePrivateProfileStringW
IsBadReadPtr
WritePrivateProfileStringA
InitializeCriticalSectionAndSpinCount
GetProcAddress
LoadLibraryW
FreeLibrary
GetLocalTime
CreatePipe
CreateProcessA
GetTempPathA
Process32FirstW
LoadResource
LockResource
SetConsoleCtrlHandler
WriteFile
GetCurrentThreadId
GetVersion
GetFileType
GetTickCount
QueryPerformanceCounter
GetCurrentProcessId
GlobalMemoryStatus
FindResourceW
SetErrorMode
CreateToolhelp32Snapshot
CloseHandle
Process32NextW
FindResourceExW
SizeofResource
GetLastError
SetHandleInformation
GetModuleFileNameA
ReadFile
GetStdHandle
Sleep
SetLastError
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
RaiseException
FlushConsoleInputBuffer
GetVersionExA
LoadLibraryA
GetDesktopWindow
wsprintfW
UnregisterClassA
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegEnumKeyExW
SHGetFolderPathA
CoCreateGuid
AdbOpenDefaultBulkWriteEndpoint
AdbWriteEndpointSync
AdbGetEndpointInformation
AdbCreateInterfaceByName
AdbEnumInterfaces
AdbOpenDefaultBulkReadEndpoint
AdbReadEndpointSync
AdbGetInterfaceName
AdbGetUsbInterfaceDescriptor
AdbGetUsbDeviceDescriptor
AdbGetSerialNumber
AdbCloseHandle
AdbNextInterface
shutdown
send
WSACleanup
recv
bind
WSAEventSelect
socket
htons
closesocket
htonl
WSAEnumNetworkEvents
WSAGetLastError
WSAStartup
gethostbyname
setsockopt
accept
connect
listen
WSACreateEvent
PathRemoveFileSpecA
PathRemoveFileSpecW
PathFileExistsW
StrStrIA
PathIsDirectoryW
PathFileExistsA
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
_read
_access
_umask
_strdup
_unlink
_getcwd
_chmod
??3@YAXPAX@Z
wcsrchr
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??2@YAPAXI@Z
??0exception@std@@QAE@XZ
printf
??0exception@std@@QAE@ABQBD@Z
memcpy_s
fopen
??0exception@std@@QAE@ABV01@@Z
__iob_func
malloc
_errno
strerror
strtol
free
fprintf
getenv
strncmp
setvbuf
vfprintf
calloc
strpbrk
fflush
atoi
memmove_s
_snprintf
_wcsicmp
sscanf
exit
strncpy
strchr
_invalid_parameter_noinfo
_mkdir
fclose
_stat64i32
sprintf
strtoul
isalpha
isdigit
fwrite
strrchr
_beginthread
strncat
perror
_findfirst64i32
_mktime64
_findnext64i32
_findclose
_chdir
wcscat_s
wcsstr
wcsncmp
iswdigit
wcsncpy
??_V@YAXPAX@Z
_wcsnicmp
_wcslwr
_wcslwr_s
wcstol
realloc
fgets
strncpy_s
strncat_s
_vscwprintf
vswprintf_s
_wassert
memmove
memcpy
memset
ferror
fread
_setmode
_fileno
ftell
feof
fseek
memchr
_vsnprintf
abort
qsort
isspace
strcmp
_time64
isxdigit
fputs
signal
_getch
tolower
isupper
strstr
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CxxFrameHandler3
_invoke_watson
_controlfp_s
_stricmp
_getpid
_CxxThrowException
GetAdaptersInfo
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE