Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
805b42745bdcc55433993168be1a17eeae0bd7f2596672f98bce2240a15079b1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
805b42745bdcc55433993168be1a17eeae0bd7f2596672f98bce2240a15079b1.exe
Resource
win10v2004-20221111-en
Target
805b42745bdcc55433993168be1a17eeae0bd7f2596672f98bce2240a15079b1
Size
217KB
MD5
51c9d286e6b2a84241bac787ce049817
SHA1
89a794e3d27f2c4d04f57d419b39322236b80d6e
SHA256
805b42745bdcc55433993168be1a17eeae0bd7f2596672f98bce2240a15079b1
SHA512
48a87f5ecb0e3aa1f0de757285d671b3fb34e2aaa9d5353e236afd9954774eb7d2ea8601c79e1dd4962bf4198cf80ba4f5dc0c31ac04b9e359e9db73b5877b0e
SSDEEP
6144:EJDB4YUbot+ND4FrsOo35UijARZpVV1hw2qBF7Ej8NjfBGmOUftagTT5:EJVvUq+NSj4DARZpVV1hw2qBF7EjItau
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PSTGetInterfaceHandle
PSTGetProductStringDescriptor
PSTReleaseInterfaceHandle
PSTGetInterfaceMapping
PSTFindInterfaceHandle
PSTUninitialize
PSTGetUSBDeviceDescriptor
PSTGetBLANDeviceIPAddress
PSTInitializeAndRegisterEx
PSTSendCommand
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetModuleFileNameA
OpenProcess
Sleep
WTSGetActiveConsoleSessionId
LoadLibraryA
Process32Next
ProcessIdToSessionId
Process32First
CreateToolhelp32Snapshot
CreateProcessA
DeleteFileA
GetLocalTime
ResetEvent
GlobalFree
GetCommandLineW
GetModuleHandleA
InterlockedDecrement
InterlockedIncrement
OutputDebugStringA
ReleaseMutex
GetTickCount
GetPrivateProfileStringA
WritePrivateProfileStringA
GetLocaleInfoA
GetUserDefaultLangID
GetTimeZoneInformation
GetSystemTime
CloseHandle
GetProcAddress
GetStartupInfoA
InterlockedCompareExchange
GetProcessHeap
HeapFree
GetModuleFileNameW
lstrlenA
GetCurrentThreadId
WaitForSingleObject
GetLastError
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
FreeLibrary
CreateEventA
GetVersionExA
GetSystemTimeAsFileTime
GetACP
GetThreadLocale
CreateMutexA
RegisterWindowMessageA
GetMessageA
TranslateMessage
DispatchMessageA
PostThreadMessageA
DestroyWindow
PostQuitMessage
DefWindowProcA
RegisterClassExA
LoadCursorA
PeekMessageA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
CreateEnvironmentBlock
DestroyEnvironmentBlock
WTSQueryUserToken
GetUserNameExA
EnumProcesses
EnumProcessModules
GetModuleBaseNameA
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpGetIEProxyConfigForCurrentUser
WinHttpOpenRequest
WinHttpConnect
WinHttpOpen
WinHttpSetOption
WinHttpCloseHandle
WinHttpSendRequest
WinHttpCrackUrl
WinHttpDetectAutoProxyConfigUrl
WinHttpGetProxyForUrl
ord762
ord6297
ord262
ord5331
ord1159
ord301
ord1580
ord764
ord1187
ord1185
ord1191
ord266
ord304
ord578
ord781
ord3997
ord5529
ord784
ord310
ord2272
ord4081
ord1486
ord5403
ord2468
ord265
ord297
ord911
ord1489
ord299
ord6703
ord6118
ord2346
ord907
ord1482
ord2322
ord2475
ord5563
ord305
ord5710
ord2451
ord308
ord3952
ord4109
ord2131
ord1248
ord783
ord300
ord4085
ord2306
ord1181
ord2259
ord3514
ord3255
ord5320
ord6286
ord1211
_time64
_snprintf_s
sprintf_s
strcpy
atoi
fclose
fread
rewind
ftell
fseek
fopen_s
fwrite
strftime
exit
abs
__RTDynamicCast
memmove
_except_handler4_common
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
printf
_localtime64_s
_wcsicmp
strncpy_s
strncpy
memcpy
_beginthreadex
strlen
strcmp
_invalid_parameter_noinfo
_purecall
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_mbscmp
_CxxThrowException
memset
wcsrchr
wcslen
_recalloc
calloc
__CxxFrameHandler3
wcscpy_s
free
malloc
memmove_s
CreateSolidBrush
ChangeServiceConfig2A
RegSetValueExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerExA
StartServiceA
CloseServiceHandle
OpenServiceA
OpenSCManagerA
RevertToSelf
CreateProcessAsUserA
ImpersonateLoggedOnUser
DuplicateTokenEx
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
SetServiceStatus
CreateServiceA
DeleteService
QueryServiceStatus
ControlService
DeregisterEventSource
ReportEventA
RegisterEventSourceA
SHGetSpecialFolderPathA
ShellExecuteA
CommandLineToArgvW
PathFileExistsA
CoCreateInstance
CoUninitialize
CoSetProxyBlanket
CoInitializeSecurity
CoInitialize
StringFromGUID2
VariantClear
GetErrorInfo
VariantInit
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysFreeString
?allocate@?$allocator@D@std@@QAEPADI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?_Lock@_Mutex@std@@QAEXXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@JH@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Copy_s@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPADIII@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?length@?$char_traits@D@std@@SAIPBD@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@_Mutex@std@@QAEXXZ
select
socket
listen
send
recv
WSAWaitForMultipleEvents
__WSAFDIsSet
WSAStartup
WSACreateEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACloseEvent
accept
closesocket
bind
WSAGetLastError
inet_addr
htons
WSACleanup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ