Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
f9b757a3f9770b1dd9f568cac0856df33230fecb4313791a423e868e0fedc795.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9b757a3f9770b1dd9f568cac0856df33230fecb4313791a423e868e0fedc795.exe
Resource
win10v2004-20220901-en
Target
f9b757a3f9770b1dd9f568cac0856df33230fecb4313791a423e868e0fedc795
Size
1.3MB
MD5
3080e002d141786c84f1ffc5bed80360
SHA1
8c9e267b1e3ef45d57bc82c09ffc07bc74eab7a1
SHA256
f9b757a3f9770b1dd9f568cac0856df33230fecb4313791a423e868e0fedc795
SHA512
ae12674a636407b48b7d86e54ca51176b2c9c9304b270da8304de736cbe9c7e6d288c6850cd95212627ef98b15714e1067f96412a70d0418c360c7611e330637
SSDEEP
24576:GUxcmAX22YyNcfttDXV9g4okhZH4nbvkd7:xxcmAZpas4xhZoAd7
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetSystemInfo
FindNextFileW
VirtualAllocEx
ReadProcessMemory
VirtualFreeEx
GetPrivateProfileStringW
CreateFileW
GetFileSize
ReadFile
WriteFile
FreeLibrary
CreateProcessW
OutputDebugStringA
GetCurrentProcess
WriteProcessMemory
CreateRemoteThread
lstrcmpiW
WritePrivateProfileStringW
GetSystemDirectoryW
GetVersionExW
HeapCompact
GetCurrentProcessId
CreateFileMappingA
GetTempPathA
OutputDebugStringW
LocalFree
CreateFileMappingW
SetFilePointer
GetTickCount
AreFileApisANSI
UnlockFileEx
DeleteFileA
MapViewOfFile
GetProcessHeap
GetDiskFreeSpaceA
UnmapViewOfFile
GetSystemTimeAsFileTime
FlushFileBuffers
SetEndOfFile
FormatMessageA
GetTempPathW
WideCharToMultiByte
HeapSize
GetFileAttributesExW
GetFullPathNameW
QueryPerformanceCounter
GlobalMemoryStatusEx
HeapFree
LockFileEx
FormatMessageW
GetDiskFreeSpaceW
GetVersionExA
HeapReAlloc
HeapDestroy
CreateFileA
InterlockedCompareExchange
GetFileAttributesA
HeapCreate
UnlockFile
LoadLibraryA
HeapValidate
CreateMutexW
LockFile
LocalAlloc
OpenFileMappingW
WaitNamedPipeW
CopyFileW
OpenMutexW
GetSystemWindowsDirectoryW
SetCurrentDirectoryW
GlobalAddAtomW
GlobalGetAtomNameW
GlobalDeleteAtom
lstrlenW
GetFileAttributesW
CreateEventW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetModuleHandleW
RaiseException
WaitForSingleObject
GetPrivateProfileIntW
OpenProcess
GetSystemTime
GetFullPathNameA
SystemTimeToFileTime
CreateToolhelp32Snapshot
Process32NextW
ProcessIdToSessionId
Process32FirstW
GetLastError
MultiByteToWideChar
lstrlenA
CloseHandle
Sleep
GetProcAddress
LoadLibraryW
FindResourceExW
DeleteFileW
LoadResource
CreateDirectoryW
LockResource
GetCurrentThreadId
SizeofResource
GetLocalTime
FindResourceW
FindClose
GetModuleFileNameW
SetEvent
OpenEventW
FindFirstFileW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
HeapAlloc
InitializeCriticalSection
UnregisterClassA
wsprintfW
FindWindowW
FindWindowExW
GetWindowThreadProcessId
SendMessageW
GetShellWindow
RegisterWindowMessageW
GetDeviceCaps
CreateICW
DeleteDC
GetTokenInformation
LookupPrivilegeValueW
UnlockServiceDatabase
QueryServiceLockStatusW
LockServiceDatabase
QueryServiceStatusEx
StartServiceW
QueryServiceStatus
CreateProcessAsUserW
CloseServiceHandle
ChangeServiceConfigW
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
RegOpenKeyW
RegCreateKeyExW
GetUserNameW
RegEnumKeyExW
DuplicateTokenEx
OpenProcessToken
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
AdjustTokenPrivileges
SHCreateDirectoryExW
ShellExecuteW
ShellExecuteExW
SHGetFolderPathW
SHFileOperationW
SHGetSpecialFolderPathW
CoCreateGuid
SysFreeString
PathRemoveArgsW
AssocCreate
PathAddBackslashW
PathRemoveFileSpecW
PathAppendW
PathRemoveBackslashW
PathFileExistsW
StrToIntA
PathIsDirectoryW
PathUnquoteSpacesW
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBDI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?deallocate@?$allocator@_W@std@@QAEXPA_WI@Z
?allocate@?$allocator@_W@std@@QAEPA_WI@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?str@?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
fseek
sprintf_s
sscanf
_CxxThrowException
__CxxFrameHandler3
_controlfp_s
_invoke_watson
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_mbsicmp
wcscspn
wcsspn
_ismbcspace
_mbsinc
_mbscspn
_mbsspn
_waccess_s
_mktime64
wcsncmp
??3@YAXPAX@Z
wcsstr
_purecall
memmove_s
wcscpy_s
_wcslwr_s
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
_wfopen
??2@YAPAXI@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
fwprintf
wcscmp
memcpy_s
wcslen
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
fflush
fclose
_beginthreadex
free
_recalloc
calloc
atoi
wcspbrk
wcschr
_wcsicmp
_vscwprintf
vswprintf_s
wcsncpy_s
wcsrchr
memset
iswspace
_wcsnicmp
??_V@YAXPAX@Z
strcmp
vsprintf_s
_vscprintf
strlen
_wtoi
_wtoi64
_time64
_waccess
_wcsupr_s
memcpy
_vswprintf
wcscat
wcstoul
memmove
strncmp
memcmp
realloc
malloc
_localtime64_s
_msize
tolower
isalnum
_vsnprintf_s
fprintf
fopen_s
_wfopen_s
strpbrk
ftell
fread
fputc
ferror
_stricmp
isalpha
strchr
isspace
_snwprintf
_vsnwprintf_s
WTSFreeMemory
WTSEnumerateSessionsW
CreateEnvironmentBlock
DestroyEnvironmentBlock
UnloadUserProfile
LoadUserProfileW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
GetProcessImageFileNameW
RpcStringFreeW
UuidToStringW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ