Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
802cde54c6598bcd6651bb62c55e34680f3c0e226f502ed91ffe7f5ba4d9c47a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
802cde54c6598bcd6651bb62c55e34680f3c0e226f502ed91ffe7f5ba4d9c47a.exe
Resource
win10v2004-20220812-en
Target
802cde54c6598bcd6651bb62c55e34680f3c0e226f502ed91ffe7f5ba4d9c47a
Size
1.2MB
MD5
a0a477d77551a7ebbeebd9cec23c9e00
SHA1
83ac0c0374fcbb0659ab30ac2d0f799a5c00ea04
SHA256
802cde54c6598bcd6651bb62c55e34680f3c0e226f502ed91ffe7f5ba4d9c47a
SHA512
9138fc70a4a4a1e270e779fe5932689864a5e6f7565d4df8c8dddf9f13e6c502f44839de54028bf41ef50136ad1df32936f39d88a65127c8793fcaf9b8977cab
SSDEEP
24576:VLurTuMeIHEbE52Oh6x7yvOfDayXdp+9jIQ30+ZIg:MrTuFIHEbE5c+vOfD8IQ39ZIg
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
StrCmpNA
InterlockedCompareExchange
InterlockedExchange
CreateNamedPipeA
ConnectNamedPipe
DisconnectNamedPipe
GetOverlappedResult
WaitNamedPipeA
FindFirstChangeNotificationW
ResetEvent
FindNextChangeNotification
lstrlenA
GetSystemDirectoryA
lstrcatA
WaitForMultipleObjects
FindCloseChangeNotification
SetEvent
CreateEventA
ExpandEnvironmentStringsA
RaiseException
GetTimeZoneInformation
PeekNamedPipe
GetWindowsDirectoryA
SetCurrentDirectoryA
CopyFileA
GetFileAttributesA
GetTempFileNameA
FindFirstFileA
CreateFileA
GetTempPathA
FormatMessageA
TerminateProcess
GetModuleFileNameA
IsValidCodePage
GetCPInfo
GetCurrentProcessId
GetStartupInfoA
GetEnvironmentVariableA
GetACP
GetCurrentProcess
LoadLibraryA
GetCurrentThreadId
GetVersionExA
FindNextFileW
RemoveDirectoryW
CreateDirectoryW
MultiByteToWideChar
WideCharToMultiByte
MoveFileW
FlushFileBuffers
SetFilePointer
SetEndOfFile
GetFileInformationByHandle
GetDriveTypeW
FindFirstFileW
GetFullPathNameW
FindClose
DeleteFileW
SwitchToThread
CreateThread
CreateSemaphoreA
TlsAlloc
InitializeCriticalSection
ReleaseSemaphore
WaitForSingleObject
LocalFree
LeaveCriticalSection
TlsSetValue
LocalAlloc
TlsGetValue
EnterCriticalSection
TlsFree
DeleteCriticalSection
GetLocalTime
GetSystemTimeAsFileTime
GetUserDefaultLCID
lstrlenW
SetUnhandledExceptionFilter
GetModuleHandleA
GetModuleHandleW
GetFileAttributesW
IsDebuggerPresent
QueryPerformanceCounter
GetModuleFileNameW
OutputDebugStringA
LoadLibraryW
SetLastError
GetSystemDirectoryW
GetProcAddress
FreeLibrary
OpenMutexW
GetTickCount
CreateFileW
SetNamedPipeHandleState
WriteFile
CloseHandle
Sleep
ReadFile
GetLastError
GetVolumeInformationW
GetCurrentThread
GetVersion
UnhandledExceptionFilter
NetShareGetInfo
IsNetworkAlive
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?length@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?find_first_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDU_Size_type_nosscl@01@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?width@ios_base@std@@QAEHH@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?eof@?$char_traits@D@std@@SAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBEHXZ
?length@?$char_traits@D@std@@SAIPBD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
atoi
_stricmp
isalnum
_vsprintf_p
strtol
qsort
_errno
strtod
isspace
getenv
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
toupper
isalpha
tolower
memmove
memchr
sscanf
_crt_debugger_hook
malloc
_strdup
calloc
_mktime64
swscanf_s
_vsnwprintf_s
_wcslwr_s
memcmp
wcslen
free
printf
iswdigit
wcscpy_s
wcstok_s
iswalpha
wcsrchr
wcsnlen
_wcsnicmp
_wcsicmp
wcscat_s
memmove_s
??0exception@std@@QAE@ABQBD@Z
??2@YAPAXI@Z
_set_invalid_parameter_handler
vwprintf_s
_purecall
strchr
strncpy
strcmp
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBDH@Z
__RTDynamicCast
??1exception@std@@UAE@XZ
??3@YAXPAX@Z
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
__CxxFrameHandler3
strlen
memcpy
??_V@YAXPAX@Z
memset
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_except_handler4_common
_decode_pointer
_lock
_encode_pointer
__dllonexit
_unlock
_strlwr
pow
wcscpy
bsearch
_time64
fclose
_localtime64
_gmtime64
rename
_getcwd
_fdopen
_open_osfhandle
?_open@@YAHPBDHH@Z
remove
_telli64
_lseeki64
_write
_read
_close
exit
fputs
fputc
fflush
strftime
sprintf
__iob_func
realloc
abort
_onexit
WSAStartup
WSACreateEvent
WSAEventSelect
WSACleanup
WSAGetLastError
WSASocketA
WSAIoctl
HttpQueryInfoA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
HttpAddRequestHeadersA
HttpSendRequestA
InternetSetOptionA
HttpSendRequestExA
HttpEndRequestA
InternetReadFile
InternetOpenA
InternetWriteFile
InternetCloseHandle
WNetGetResourceInformationW
WNetAddConnection2W
WNetCancelConnection2W
CryptUnprotectData
CryptProtectData
PostMessageW
FindWindowW
DdeQueryStringA
DdeFreeStringHandle
DdeUninitialize
DdeFreeDataHandle
DdeGetData
DdeCreateDataHandle
DdeGetLastError
DdeInitializeA
DdeDisconnect
DestroyWindow
DdeCreateStringHandleA
DdeNameService
DdeConnect
DdePostAdvise
PostQuitMessage
TrackPopupMenu
LoadImageW
SetForegroundWindow
SetPropW
InsertMenuItemW
TranslateMessage
DefWindowProcA
GetCursorPos
LoadStringW
CreatePopupMenu
PostMessageA
CreateWindowExW
DispatchMessageA
InsertMenuW
RegisterClassW
GetSystemMetrics
CallWindowProcA
DestroyMenu
GetPropW
DdeClientTransaction
GetMessageA
OpenThreadToken
RegOpenKeyW
RegCloseKey
OpenProcessToken
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
ConvertStringSecurityDescriptorToSecurityDescriptorA
RegQueryValueExW
ConvertSidToStringSidA
GetTokenInformation
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteA
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteExA
SHFileOperationA
Shell_NotifyIconW
CoCreateInstance
CoTaskMemFree
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SafeArrayCreateVector
SysAllocString
SysFreeString
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE