Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
SpyHunter by windowsactivation.net.rar
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SpyHunter by windowsactivation.net.rar
Resource
win10v2004-20220812-en
Target
SpyHunter by windowsactivation.net.rar
Size
3.0MB
MD5
767feaffce5aa556d4dfe68be2e7bb45
SHA1
43d74e509e15b2961a15d924abf2294b918537a8
SHA256
d1fb85e63f1d1b46efaf9790fec6157ae1fc169d8b4a05290ebdff0205dcac1e
SHA512
fc3ae140c6829d828ab9faed903533c9f857307a5f279ba95b764f4a19f4bb59da1110561e6ac278567b34291a1280141fc12d92fd06886283c0c374777c1a2d
SSDEEP
49152:OY8JwzJ9M6oZ+gv6FjRAeYt7pkaTWRZ4B/e6dJhAiNyH7vlrXCNGozvN5d:OY8GzJ9/k+giFXWpkv0J/kUyHZbwvN
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GdipCreatePath
GdipCreateRegion
GdipSetClipRegion
GdipSetInfinite
GdipCreateFromHDC
GdipGetClip
GdipDeleteRegion
GdipDeleteGraphics
GdipGetImageHeight
GdipSetSmoothingMode
GdiplusStartup
GdiplusShutdown
GdipImageRotateFlip
GdipCreateBitmapFromResource
GdipCreateBitmapFromStream
GdipGetImagePixelFormat
GdipCreateHBITMAPFromBitmap
GdipSetImageAttributesColorMatrix
GdipSetCompositingQuality
GdipSetImageAttributesColorKeys
GdipAddPathArcI
GdipCloneImage
GdipDeleteBrush
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipDisposeImageAttributes
GdipDisposeImage
GdipSetInterpolationMode
GdipResetPath
GdipSetPenDashStyle
GdipClosePathFigure
GdipCreateTextureIAI
GdipCreateImageAttributes
GdipFree
GdipDrawPath
GdipSetImageAttributesWrapMode
GdipGetImageGraphicsContext
GdipFillRectangleI
GdipSetCompositingMode
GdipDeletePen
GdipDrawImagePointRectI
GdipCreateBitmapFromScan0
GdipCreatePen1
GdipDrawImageRectRectI
GdipDeletePath
GdipCombineRegionPath
GdipGetImageWidth
ScriptString_pcOutChars
ScriptStringFree
ScriptStringGetLogicalWidths
ScriptString_pLogAttr
ScriptStringAnalyse
ScriptString_pSize
ScriptStringCPtoX
ScriptStringXtoCP
ScriptStringOut
ScriptStringGetOrder
CryptMsgGetParam
CryptQueryObject
CryptMsgClose
CryptDecodeObject
CryptHashCertificate
CertGetNameStringW
CertGetCertificateContextProperty
CertFreeCertificateContext
CertDuplicateCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CertOpenSystemStoreW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
closesocket
ioctlsocket
sendto
recvfrom
listen
accept
freeaddrinfo
getaddrinfo
gethostname
getnameinfo
WSASetLastError
WSAIoctl
getsockname
socket
ntohs
connect
getsockopt
htons
setsockopt
send
recv
WSAGetLastError
WSACleanup
WSAStartup
bind
select
getpeername
__WSAFDIsSet
shutdown
GetProcessMemoryInfo
GetProcessImageFileNameW
GetModuleFileNameExW
EnumProcessModules
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
CreateFileW
Sleep
HeapFree
QueryPerformanceFrequency
GetProcessHeap
lstrcmpiW
QueryPerformanceCounter
FindResourceW
GetUserDefaultLCID
LoadLibraryW
HeapAlloc
GetProcAddress
CreateMutexW
WaitForSingleObject
ReleaseMutex
GetCurrentProcessId
GetTickCount
GetLocalTime
GetFileAttributesW
ReadFile
GetFileSizeEx
WriteFile
RemoveDirectoryW
SetFileAttributesW
GetSystemTimeAsFileTime
GetExitCodeProcess
EnumResourceNamesW
SizeofResource
InterlockedDecrement
GetModuleFileNameW
MultiByteToWideChar
LoadResource
GetModuleHandleW
InterlockedIncrement
SetDllDirectoryW
LoadLibraryExW
GetVersionExW
FileTimeToSystemTime
SystemTimeToFileTime
TerminateProcess
OpenProcess
OpenMutexW
SetLastError
VerSetConditionMask
VerifyVersionInfoW
SleepEx
InitializeCriticalSection
FormatMessageA
ExpandEnvironmentStringsA
GetStdHandle
WaitForMultipleObjects
PeekNamedPipe
GetFileType
GetEnvironmentVariableW
WideCharToMultiByte
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
FormatMessageW
SwitchToFiber
DeleteFiber
CreateFiber
LoadLibraryA
ConvertFiberToThread
ConvertThreadToFiber
FindClose
FindFirstFileW
FindNextFileW
GetSystemTime
CreateDirectoryW
GetLongPathNameW
ExpandEnvironmentStringsW
DeviceIoControl
LocalFree
CopyFileW
MulDiv
GetVolumeInformationW
SetHandleInformation
CreatePipe
LocalAlloc
GetModuleHandleA
GetLogicalDriveStringsW
ProcessIdToSessionId
GetCurrentThread
lstrcatW
HeapReAlloc
GetSystemInfo
GetComputerNameW
CreateProcessW
lstrcpyW
GetDriveTypeW
QueryDosDeviceW
FindFirstVolumeW
lstrlenW
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
FindVolumeClose
GetVolumePathNamesForVolumeNameW
FindNextVolumeW
SetFilePointer
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
SetFilePointerEx
MoveFileW
GetTimeFormatW
GetDateFormatW
LockResource
GetLogicalDrives
GetVolumeNameForVolumeMountPointW
DefineDosDeviceW
SetVolumeMountPointW
DeleteVolumeMountPointW
CreateNamedPipeW
WaitForSingleObjectEx
lstrcmpA
FileTimeToLocalFileTime
lstrcpynW
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
GlobalMemoryStatusEx
IsBadReadPtr
VirtualQuery
SetUnhandledExceptionFilter
FreeResource
UnmapViewOfFile
GetFileSize
CreateFileMappingW
MapViewOfFile
GetCurrentProcess
CreateEventA
DeleteCriticalSection
DecodePointer
RaiseException
CloseHandle
SetEvent
InitializeCriticalSectionAndSpinCount
GetLastError
DeleteFileW
MoveFileExW
FreeLibrary
GetStringTypeW
EncodePointer
CreateEventW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
ResetEvent
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
OutputDebugStringW
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
VirtualAlloc
VirtualFree
LoadLibraryExA
ReleaseSemaphore
WaitForMultipleObjectsEx
OpenEventA
SetWaitableTimer
ResumeThread
CreateWaitableTimerA
GetStringTypeExW
LCMapStringA
GetStringTypeExA
RtlUnwind
GetModuleFileNameA
WriteConsoleW
SystemTimeToTzSpecificLocalTime
CreateThread
ExitThread
FreeLibraryAndExitThread
SetConsoleCtrlHandler
ExitProcess
GetCommandLineA
GetCommandLineW
GetACP
GetConsoleCP
HeapSize
GetCurrentDirectoryW
GetFullPathNameW
IsValidLocale
EnumSystemLocalesW
SetStdHandle
FlushFileBuffers
GetFileAttributesExW
GetTimeZoneInformation
SetEnvironmentVariableA
SetEnvironmentVariableW
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEndOfFile
GetTempPathW
DuplicateHandle
GetSystemDirectoryW
CreateProcessA
ShowCaret
IsClipboardFormatAvailable
SetClipboardData
InsertMenuW
DestroyCaret
GetClipboardData
CreateCaret
EmptyClipboard
CloseClipboard
ClientToScreen
OpenClipboard
SetCaretPos
TrackPopupMenu
HideCaret
SetActiveWindow
GetKeyState
GetActiveWindow
IsDialogMessageW
DestroyMenu
BringWindowToTop
TranslateAcceleratorW
LoadIconW
TrackPopupMenuEx
RemoveMenu
AppendMenuW
PostQuitMessage
DialogBoxParamW
GetMessageW
LoadMenuW
MessageBoxW
GetSystemMetrics
LoadAcceleratorsW
LoadStringW
GetClassInfoW
DispatchMessageW
PeekMessageW
RegisterClassW
CharNextW
TranslateMessage
UpdateWindow
SetForegroundWindow
LoadImageW
GetWindow
MonitorFromWindow
EndDialog
GetWindowInfo
MapWindowPoints
EnumWindows
GetWindowDC
SetWindowTextW
UpdateLayeredWindow
InvalidateRect
GetDC
ReleaseDC
GetFocus
RegisterClassExW
GetCapture
TrackMouseEvent
IsWindowEnabled
SetFocus
SetCapture
SetRect
GetClassInfoExW
ReleaseCapture
GetCursorPos
InflateRect
IsZoomed
DrawTextW
IsIconic
CreateWindowExW
GetWindowLongW
DefWindowProcW
AdjustWindowRectEx
CallWindowProcW
PostMessageW
GetWindowRect
DestroyWindow
IsWindowVisible
SetWindowPos
EnumChildWindows
SendMessageW
UnregisterClassW
ShowWindow
IsWindow
OffsetRect
RedrawWindow
LoadCursorW
SetCursor
SetWindowLongW
GetClientRect
GetDlgItem
GetParent
PtInRect
BeginPaint
EndPaint
ScreenToClient
IsCharAlphaNumericA
SetTimer
KillTimer
EnableWindow
SetWindowRgn
wsprintfW
GetUserObjectInformationW
GetProcessWindowStation
FindWindowExW
GetWindowTextLengthW
GetMenuItemInfoW
AllowSetForegroundWindow
MonitorFromPoint
GetMenuItemCount
ExitWindowsEx
MoveWindow
GetMessageExtraInfo
LoadStringA
LockSetForegroundWindow
MessageBeep
GetMonitorInfoW
CreatePopupMenu
TextOutW
GetTextMetricsW
StartPage
EndPage
GetBkColor
SetBrushOrgEx
CreateFontW
GetDIBits
CreateRectRgn
LineTo
ExtCreatePen
GetObjectW
MoveToEx
SetStretchBltMode
CombineRgn
ExtTextOutW
GetDeviceCaps
GetTextColor
SetTextAlign
CreatePen
Rectangle
SelectClipRgn
IntersectClipRect
SetBkColor
CreateSolidBrush
SetTextColor
SetBkMode
BitBlt
CreateCompatibleBitmap
SaveDC
SelectObject
CreateCompatibleDC
DeleteDC
SetViewportOrgEx
ExcludeClipRect
RestoreDC
DeleteObject
GetTextExtentPoint32W
ExtSelectClipRgn
InitializeSecurityDescriptor
AddAccessAllowedAce
RegQueryValueExW
GetExplicitEntriesFromAclW
SetEntriesInAclW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
OpenProcessToken
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
LookupAccountNameW
QueryServiceStatusEx
RegEnumValueW
OpenThreadToken
GetUserNameW
OpenServiceW
ConvertSidToStringSidW
DuplicateToken
FreeSid
IsValidSecurityDescriptor
ControlService
AllocateAndInitializeSid
OpenSCManagerW
GetTokenInformation
GetLengthSid
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegCloseKey
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptGenRandom
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashW
CryptEnumProvidersW
InitializeAcl
CloseServiceHandle
AccessCheck
AdjustTokenPrivileges
LookupPrivilegeValueW
RegSaveKeyExW
RegSetKeySecurity
SHParseDisplayName
SHOpenFolderAndSelectItems
ShellExecuteW
CreateStreamOnHGlobal
CoInitializeEx
CoTaskMemRealloc
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
VariantInit
SysAllocString
VariantClear
VarUI4FromStr
SysFreeString
StrCmpIW
StrCmpNIW
ord1
ord410
ord412
ord413
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ