Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
8dcaf197f86d6dfe40db80cb7745adac90429f7d16d3f6355f077ac0fc5b7efd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8dcaf197f86d6dfe40db80cb7745adac90429f7d16d3f6355f077ac0fc5b7efd.exe
Resource
win10v2004-20220812-en
Target
8dcaf197f86d6dfe40db80cb7745adac90429f7d16d3f6355f077ac0fc5b7efd
Size
561KB
MD5
5d666ea0df6da6124d9f83d037f32f3d
SHA1
395c6d5834ea8c689af514b11befea16ffb72880
SHA256
8dcaf197f86d6dfe40db80cb7745adac90429f7d16d3f6355f077ac0fc5b7efd
SHA512
04871b5b7267e24fd479eb6df0c140398d6f9b26a96249f9370ee2fa97e0b204321242a2cc6dbca843bf7e3a7f1e0126379e0a9d64943fbcd1de88c1094c29e8
SSDEEP
12288:K3W3bWcios6C8uPOtm5pZGCWGw0KWXChXJLbht/PGdD:33Hl3uPOtm5PT7KWyhXd1t/PAD
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LockResource
GetCurrentDirectoryA
GetFullPathNameA
FindFirstFileA
GetDriveTypeA
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
ExitThread
ExpandEnvironmentStringsW
WaitForMultipleObjects
PeekNamedPipe
GetSystemDirectoryA
SleepEx
GetThreadLocale
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
ReleaseMutex
LoadLibraryA
InterlockedExchange
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
FlushFileBuffers
SetStdHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTimeZoneInformation
LCMapStringW
CreateMutexW
CreateProcessW
GetCurrentThreadId
GlobalLock
GetLocaleInfoW
WideCharToMultiByte
GetCurrentProcess
FormatMessageW
MoveFileExW
CopyFileW
GlobalAlloc
GetCommandLineW
CreateFileW
GetFileSize
GetTickCount
GlobalUnlock
LCMapStringA
SetFilePointer
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapCreate
HeapDestroy
VirtualAlloc
VirtualFree
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapSize
FindNextFileW
ReadFile
WaitForSingleObject
FindClose
Process32FirstW
QueryPerformanceFrequency
WritePrivateProfileStringW
GetVersionExW
QueryPerformanceCounter
GetEnvironmentVariableW
CreateToolhelp32Snapshot
Process32NextW
GetProcAddress
GetCurrentProcessId
GetTempPathW
Sleep
DeleteFileW
GetExitCodeThread
TerminateThread
GetPrivateProfileIntW
GetModuleFileNameW
GetPrivateProfileStringW
DeleteCriticalSection
lstrcmpiW
LeaveCriticalSection
GetLastError
EnterCriticalSection
LoadResource
SizeofResource
InterlockedIncrement
GetModuleHandleW
FreeLibrary
LoadLibraryExW
InitializeCriticalSection
LoadLibraryW
FindResourceW
InterlockedDecrement
lstrlenW
RaiseException
FindFirstFileW
MultiByteToWideChar
CloseHandle
CreateThread
CreateDirectoryW
GetCommandLineA
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetConsoleMode
GetConsoleCP
WriteFile
RtlUnwind
GetStartupInfoW
GetVersionExA
MoveFileW
GetSystemTimeAsFileTime
HeapReAlloc
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetProcessHeap
HeapFree
GetDesktopWindow
GetMonitorInfoW
EnumDisplayMonitors
SystemParametersInfoW
FindWindowW
LoadCursorW
CreateWindowExW
SetWindowPos
MoveWindow
GetWindowLongW
SetWindowLongW
RegisterClassExW
GetWindowRect
UnregisterClassA
DefWindowProcW
PostQuitMessage
DestroyWindow
ShowWindow
CharNextW
PostMessageW
DeleteObject
SelectObject
DeleteDC
CreateDIBSection
CreateCompatibleDC
RegCloseKey
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyW
RegOpenKeyW
RegCreateKeyExW
SHGetSpecialFolderPathW
ShellExecuteW
CreateStreamOnHGlobal
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CoInitialize
OleInitialize
OleUninitialize
CoTaskMemAlloc
CoUninitialize
CLSIDFromString
VarUI4FromStr
?OnChar@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSysCommand@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnCreate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKillFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSetFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
??0CDuiString@DuiLib@@QAE@XZ
?OnLButtonUp@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
??1CDuiString@DuiLib@@QAE@XZ
?OnMouseMove@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
??BCDuiString@DuiLib@@QBEPB_WXZ
?HandleMessage@WindowImplBase@DuiLib@@UAEJIIJ@Z
?OnSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?GetStyle@WindowImplBase@DuiLib@@UAEJXZ
?SetValue@CProgressUI@DuiLib@@QAEXH@Z
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
?messageMap@CNotifyPump@DuiLib@@1UDUI_MSGMAP@2@B
?OnFinalMessage@WindowImplBase@DuiLib@@UAEXPAUHWND__@@@Z
?GetHWND@CWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
??0WindowImplBase@DuiLib@@QAE@XZ
?Notify@WindowImplBase@DuiLib@@UAEXAAUtagTNotifyUI@2@@Z
?SendMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z
??1WindowImplBase@DuiLib@@UAE@XZ
?ResponseDefaultKeyEvent@WindowImplBase@DuiLib@@MAEJI@Z
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
?GetClassStyle@WindowImplBase@DuiLib@@UBEIXZ
?GetZIPFileName@WindowImplBase@DuiLib@@UBE?AVCDuiString@2@XZ
?OnMouseHover@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseWheel@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcHitTest@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcPaint@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnDestroy@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnClose@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?MessageHandler@WindowImplBase@DuiLib@@UAEJIIJAA_N@Z
?CreateControl@WindowImplBase@DuiLib@@UAEPAVCControlUI@2@PB_W@Z
?Term@CPaintManagerUI@DuiLib@@SAXXZ
?MessageLoop@CPaintManagerUI@DuiLib@@SAXXZ
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
??8CDuiString@DuiLib@@QBE_NPB_W@Z
??0CDuiString@DuiLib@@QAE@PB_WH@Z
GdipGetImageWidth
GdipDrawImageRectRectI
GdipGetImageHeight
GdipAlloc
GdipFree
GdipCreateFromHDC
GdipCloneImage
GdipCreateBitmapFromStream
GdipDeleteGraphics
GdipCreateBitmapFromStreamICM
GdipDisposeImage
PathFileExistsW
send
recv
socket
closesocket
WSAGetLastError
WSACleanup
ntohs
connect
setsockopt
WSASetLastError
inet_addr
gethostbyname
inet_ntoa
getpeername
getsockopt
htons
bind
WSAStartup
getsockname
gethostname
ioctlsocket
select
__WSAFDIsSet
listen
accept
recvfrom
sendto
getservbyport
gethostbyaddr
getservbyname
htonl
ord167
ord147
ord79
ord142
ord127
ord133
ord301
ord208
ord216
ord14
ord118
ord27
ord41
ord145
ord26
ord46
curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_maprintf
curl_mfprintf
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ