Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
StartAllBackLoaderX64.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
StartAllBackLoaderX64.dll
Resource
win10v2004-20220901-en
Behavioral task
behavioral3
Sample
StartAllBackX64.dll
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
StartAllBackX64.dll
Resource
win10v2004-20220812-en
Target
0692b85201b1948afa78573f1f3634c86bfb383229daa06f07bccaf837d6d396
Size
287KB
MD5
92e3b810a6a62c67e14aea22adb26836
SHA1
1adfc306660f2853ca4e4052b65d6b29938a3d0d
SHA256
0692b85201b1948afa78573f1f3634c86bfb383229daa06f07bccaf837d6d396
SHA512
d10550a4ae806c8b5e60d7396dd2ce83f882ff4ab56b0689f0bf526ee44493b1230894826e3f7e4026ba37423bc6c6e90398c2eb5459c5066aa3900928d6105c
SSDEEP
6144:QtrxnSDT8Ib7htRiDRz+BNvryBILEduzwYG1wU3tVH7CjWT:krxGn3htRiDt+B1OGEI81b3CST
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=Stanislav Zinukhov,O=Stanislav Zinukhov,L=Moscow,C=RU
CN=Certum Code Signing CA SHA2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PathCchRemoveFileSpec
PathCchAppend
GetProcAddress
FreeLibrary
GetModuleHandleW
GetModuleFileNameW
GetVersion
DisableThreadLibraryCalls
LoadLibraryW
GetShellWindow
IsWindow
DllCanUnloadNow
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
StrStrIA
ord487
StrStrNIW
ord158
ord215
HashData
StrCSpnA
StrCmpNIW
StrCpyNW
StrNCatW
PathParseIconLocationW
PathAddBackslashW
StrStrIW
UrlIsW
PathCreateFromUrlW
PathFindExtensionW
StrCmpNW
SHOpenRegStream2W
ord12
PathRemoveBlanksW
ord219
ord174
ord176
ord172
SHGetValueW
StrCmpW
SHCreateStreamOnFileW
PathFindFileNameW
PathRemoveBackslashW
PathFileExistsW
StrToIntW
ord16
StrStrW
PathRemoveFileSpecW
PathAppendW
SHRegGetValueW
SHSetValueW
PathIsRelativeW
PathIsDirectoryW
PathIsUNCW
PathRemoveExtensionW
ord256
PathIsFileSpecW
PathStripToRootW
PathIsRootW
ord168
StrCmpIW
PathIsNetworkPathW
ord388
SHStrDupW
DwmFlush
DwmSetIconicThumbnail
DwmIsCompositionEnabled
DwmInvalidateIconicBitmaps
DwmGetWindowAttribute
DwmUpdateThumbnailProperties
DwmSetWindowAttribute
DwmExtendFrameIntoClientArea
DwmEnableBlurBehindWindow
SetWindowThemeAttribute
OpenThemeData
GetThemeBitmap
CloseThemeData
SetWindowTheme
GetThemeBackgroundContentRect
BeginBufferedPaint
EndBufferedPaint
DrawThemeBackground
GetThemeInt
GetThemeEnumValue
GetThemeColor
ord47
GetThemeFont
OpenThemeDataForDpi
DrawThemeText
DrawThemeParentBackground
EndBufferedAnimation
DrawThemeTextEx
GetCurrentThemeName
BufferedPaintSetAlpha
GetThemePartSize
GetBufferedPaintTargetDC
GetThemeMargins
GetThemeBool
GetThemeRect
GetThemeTextExtent
IsThemeBackgroundPartiallyTransparent
GetThemeBackgroundRegion
GetThemePropertyOrigin
IsThemePartDefined
GetWindowTheme
GetThemeMetric
GetThemeBackgroundExtent
GetDpiForMonitor
RoInitialize
RoUninitialize
RoActivateInstance
RoGetActivationFactory
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDeleteString
WindowsDuplicateString
RoOriginateError
RtlAdjustPrivilege
NtQueryInformationToken
RtlInitUnicodeString
RtlCaptureContext
wcscat_s
wcsncmp
malloc
free
_wcsicmp
vswprintf_s
isspace
_wcsnicmp
isprint
_vsnwprintf
wcsstr
wcstok_s
abort
__C_specific_handler
wcsncpy_s
??_U@YAPEAX_K@Z
_wtoi
??3@YAXPEAX@Z
atoi
_unlock
__dllonexit
_lock
_onexit
__CxxFrameHandler3
??1type_info@@UEAA@XZ
_XcptFilter
_initterm
_amsg_exit
wcschr
wcscpy_s
memcmp
memcpy
memmove
memset
strcmp
vsprintf_s
tolower
??2@YAPEAX_K@Z
wcscmp
DeleteFileW
MoveFileExW
LocalAlloc
LocalFree
InitOnceExecuteOnce
CompareFileTime
GetVersionExW
GetTempPathW
SetFileAttributesW
GetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
lstrcmpiA
ProcessIdToSessionId
PackageFamilyNameFromFullName
GetModuleFileNameW
CreateProcessW
OpenMutexW
Sleep
CreateTimerQueueTimer
DeleteTimerQueueTimer
FindCloseChangeNotification
FindFirstChangeNotificationW
FindNextChangeNotification
UnregisterWaitEx
RegisterWaitForSingleObject
MoveFileW
TlsSetValue
SetThreadpoolThreadMinimum
SetThreadpoolThreadMaximum
FindFirstFileW
FindNextFileW
FindClose
LoadLibraryW
lstrcpynW
lstrcatW
UnmapViewOfFile
MapViewOfFile
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
ResolveDelayLoadedAPI
GetProcessId
IsBadReadPtr
OpenProcess
TerminateProcess
ExitThread
GlobalLock
GlobalUnlock
IsBadCodePtr
GetApplicationUserModelId
DisableThreadLibraryCalls
GlobalAddAtomW
GetUserDefaultUILanguage
GetComputerNameExW
CreateThreadpool
OpenEventW
WaitForSingleObjectEx
SleepEx
DebugBreak
lstrcpynA
RtlVirtualUnwind
RtlLookupFunctionEntry
QueryPerformanceCounter
DelayLoadFailureHook
GetWindowsDirectoryW
OutputDebugStringA
GetSystemWindowsDirectoryW
GetVolumeNameForVolumeMountPointW
lstrlenW
CreateFileW
DeviceIoControl
CloseHandle
lstrcpyA
lstrlenA
lstrcatA
GetSystemTimeAsFileTime
FileTimeToSystemTime
lstrcpyW
lstrcmpiW
RaiseException
GetUserPreferredUILanguages
MulDiv
VirtualProtect
GetFileAttributesExW
GetProcAddress
GetModuleHandleW
GetCurrentThreadId
lstrcmpW
FindResourceW
LoadResource
SizeofResource
CompareStringOrdinal
WaitForSingleObject
CreateThread
SetThreadPriority
GetTickCount
LoadLibraryExW
FindAtomW
GetCurrentProcessId
CreateThreadpoolWork
InitializeCriticalSection
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetThreadPriority
GetCurrentThread
SubmitThreadpoolWork
ExpandEnvironmentStringsW
CreateFileA
GetSystemFirmwareTable
GlobalAlloc
GlobalFree
GetModuleHandleExW
FreeLibrary
QueueUserWorkItem
QueueUserAPC
SetEvent
CreateEventW
ParseApplicationUserModelId
GetPackagesByPackageFamily
TlsGetValue
FindPackagesByPackageFamily
TlsAlloc
GetSysColorBrush
DialogBoxIndirectParamW
SystemParametersInfoForDpi
GetComboBoxInfo
GetDlgItem
BeginPaint
GetWindowInfo
OffsetRect
EndPaint
CallNextHookEx
SetWindowsHookExW
DialogBoxParamW
UnhookWindowsHookEx
SystemParametersInfoW
LoadImageW
FillRect
SetClassLongPtrW
SetWinEventHook
GetGUIThreadInfo
IsChild
MonitorFromWindow
CreateWindowExW
GetWindowDC
UpdateLayeredWindow
GetWindowRgn
DestroyWindow
LoadCursorW
GetMonitorInfoW
SetRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
IsWindowVisible
GetWindow
LockSetForegroundWindow
GetFocus
IsWindow
SetFocus
SetLayeredWindowAttributes
PeekMessageW
NotifyWinEvent
ShowWindow
DispatchMessageW
GetMessagePos
WindowFromPoint
ScreenToClient
IsZoomed
TrackMouseEvent
GetCapture
GetNextDlgGroupItem
CreatePopupMenu
InsertMenuW
LoadMenuW
GetMenuStringW
GetSubMenu
DestroyMenu
CheckMenuItem
GetSystemMetrics
PrintWindow
ReleaseCapture
InvalidateRect
PtInRect
DragDetect
SetCapture
SetMenuItemBitmaps
DrawTextW
MessageBoxW
IsCharAlphaNumericA
SendMessageTimeoutW
RegisterClassExW
DestroyIcon
PostQuitMessage
GetCursorPos
MonitorFromPoint
SetWindowTextW
MsgWaitForMultipleObjectsEx
SetCursor
SetMenuDefaultItem
GetDlgItemTextW
SetDlgItemTextW
IntersectRect
SendDlgItemMessageW
DrawFocusRect
EndDialog
GetActiveWindow
GetClassLongPtrW
GetMenuItemCount
WindowFromDC
GetMessageExtraInfo
GetMenuBarInfo
GetMenuInfo
SetMenuInfo
SetMessageExtraInfo
SetMenuItemInfoW
DeleteMenu
ModifyMenuW
GetMenuItemID
TranslateMessage
GetMenuDefaultItem
GetAsyncKeyState
GetDC
FindWindowW
GetWindowThreadProcessId
GetShellWindow
ExitWindowsEx
GetMenuState
GetDoubleClickTime
EnableWindow
CallWindowProcW
CharLowerW
SetSysColors
SystemParametersInfoA
GetDesktopWindow
AnimateWindow
LoadImageA
UnhookWinEvent
IsRectEmpty
InternalGetWindowText
GetWindowPlacement
IsIconic
MonitorFromRect
CopyRect
ShowWindowAsync
SwitchToThisWindow
EnumDisplayMonitors
DrawEdge
DrawTextExW
GetLayeredWindowAttributes
GetUpdateRect
SetWindowLongW
CalculatePopupWindowPosition
DrawIconEx
UnionRect
UnregisterClassW
SetForegroundWindow
GetWindowRgnBox
GetForegroundWindow
SetRectEmpty
EnumWindows
CheckDlgButton
IsDlgButtonChecked
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetCursorInfo
GetIconInfo
CopyImage
LoadIconW
PostThreadMessageW
RegisterHotKey
AllowSetForegroundWindow
GetDpiForSystem
SetActiveWindow
RegisterClipboardFormatW
GetCurrentInputMessageSource
GetCIMSSM
ChildWindowFromPointEx
AppendMenuW
InsertMenuItemW
IsMenu
GetMessageW
EqualRect
DefWindowProcW
RemovePropW
SetWindowPos
InflateRect
GetClassNameW
GetSystemMetricsForDpi
EnumThreadWindows
ReleaseDC
GetDCEx
SendMessageW
RedrawWindow
EnumChildWindows
SetWindowRgn
GetMenuItemInfoW
TrackPopupMenuEx
TrackPopupMenu
SetWindowLongPtrW
GetWindowLongW
CreateDialogParamW
PostMessageW
GetWindowLongPtrW
RegisterWindowMessageW
GetClassWord
SetPropW
KillTimer
SetTimer
GetDpiForWindow
GetClientRect
GetPropW
GetAncestor
MapWindowPoints
GetWindowRect
GetParent
GetWindowTextW
FindWindowExW
LoadStringW
GetSysColor
CreateIconIndirect
GetKeyState
wsprintfW
wsprintfA
RegisterClassW
ClientToScreen
SetTextColor
GetStockObject
GetClipBox
CreateSolidBrush
BitBlt
SetLayout
CreateRectRgn
SetBitmapBits
DeleteObject
CreateBitmap
DeleteDC
GdiAlphaBlend
GetObjectW
SetBkColor
CreateCompatibleDC
CreateDIBSection
GetBkMode
GetBoundsRect
OffsetRgn
SetGraphicsMode
SetWorldTransform
SetViewportOrgEx
GetTextExtentPoint32W
GetDeviceCaps
SelectClipRgn
OffsetClipRgn
AddFontResourceExW
ExtTextOutW
CreateRectRgnIndirect
CombineRgn
GetRgnBox
GdiFlush
SaveDC
ExcludeClipRect
RestoreDC
CreateFontIndirectW
GetTextExtentPointW
GetCurrentObject
GetTextColor
CreateFontW
GetCharWidth32W
GetGlyphIndicesW
GetLayout
GetObjectType
StretchDIBits
GetTextExtentExPointW
TextOutW
SetWindowOrgEx
SetBoundsRect
GetBitmapBits
GetDCBrushColor
StretchBlt
GetBkColor
SelectObject
SetBkMode
RegSetValueW
GetUserNameW
RegQueryValueW
RegEnumKeyExW
RegDeleteTreeW
RegDeleteKeyValueW
RegQueryValueExW
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegOpenKeyW
RegNotifyChangeKeyValue
RegEnumKeyW
RegOpenKeyExW
GetSidSubAuthority
RegGetValueW
RegSetKeyValueW
RegCreateKeyW
RegQueryInfoKeyW
RegCreateKeyExA
RegQueryValueExA
RegDeleteValueA
RegSetValueExA
RegCloseKey
RegQueryValueA
RegOpenKeyExA
ord155
ord152
ord16
ord18
ord25
ord190
ord256
SHCreateDataObject
SHCreateDefaultContextMenu
AssocCreateForClasses
SHCreateShellItemArrayFromIDLists
SHCreateItemFromParsingName
ord6
SHCreateShellItemArrayFromDataObject
SHAssocEnumHandlers
SHGetKnownFolderPath
ord100
SHBindToObject
ShellExecuteExW
ord846
ord27
ord21
ord68
SHGetKnownFolderIDList
ord22
ord132
ord134
SHGetFileInfoW
SHGetIDListFromObject
SHCreateItemInKnownFolder
SHGetPropertyStoreForWindow
SHCreateItemFromIDList
SHCreateDefaultExtractIcon
SHGetFolderPathW
SHChangeNotify
SHGetNameFromIDList
ord162
Shell_GetCachedImageIndexW
SHOpenFolderAndSelectItems
SHGetSpecialFolderPathW
ord193
SHBindToParent
ord23
ord727
ord17
SHGetFolderLocation
SHGetDesktopFolder
ord98
SHParseDisplayName
ord88
ord644
ord645
ord4
ord2
ShellExecuteW
SHGetStockIconInfo
ord62
SHFileOperationW
ord85
SHCreateItemWithParent
CoInitialize
CoUninitialize
CoWaitForMultipleHandles
CoCreateFreeThreadedMarshaler
RegisterDragDrop
CoTaskMemFree
StringFromGUID2
CoInitializeEx
ReleaseStgMedium
CoAllowSetForegroundWindow
RevokeDragDrop
CoCreateInstance
PropVariantClear
CoGetInterfaceAndReleaseStream
CoTaskMemAlloc
CoMarshalInterThreadInterfaceInStream
DllCanUnloadNow
DllGetClassObject
GlassControls
LoadSVG
LoadSVGOrb
PickGlyphDlg
Startup
UninstallW
Uninstall_AllUsersW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ