Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ac0982d579f8a2998edddd177feffd451a4063e18a32a36582387cdcf2a1375f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ac0982d579f8a2998edddd177feffd451a4063e18a32a36582387cdcf2a1375f.dll
Resource
win10v2004-20221111-en
Target
ac0982d579f8a2998edddd177feffd451a4063e18a32a36582387cdcf2a1375f
Size
69KB
MD5
7c7aa46fb0c00c81949e2cc9a9cb0a56
SHA1
6da16a9c78fe4b733bb6f25caf886cc9025cd62b
SHA256
ac0982d579f8a2998edddd177feffd451a4063e18a32a36582387cdcf2a1375f
SHA512
8e8bc6c5c6ba48dccd84591e54cdee603e86a3867a9a78dae286737788e4c8513bfec1fa925a08dbe5a4d0aac98a203a126c12877b49417684326c358447a76e
SSDEEP
1536:b2OvpU04v3JCPCV3zgieTF7tAZcBcVOlaQBn2fpicxjW:quyUiex7tALOlaZfpigjW
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
ord8
ord7
ord6
ord698
ord450
ord392
ord454
ord666
ord1086
ord510
ord671
ord1529
ord1439
ord1555
ord353
ord659
ord352
ord944
ord939
ord639
ord824
ord396
ord1532
ord406
ord701
ord1523
Sleep
SetFileAttributesA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
FreeLibrary
GetFileAttributesA
GetProcAddress
LoadLibraryA
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@PEBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAD_K@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBAPEBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAAAEAV01@AEBV01@@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEBA_NXZ
__C_specific_handler
__CppXcptFilter
__crt_debugger_hook
__CxxFrameHandler3
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
__RTDynamicCast
?terminate@@YAXXZ
strcat_s
??_V@YAXPEAX@Z
_CxxThrowException
strcpy_s
free
??0exception@std@@QEAA@AEBQEBD@Z
??1exception@std@@UEAA@XZ
??3@YAXPEAX@Z
??0exception@std@@QEAA@XZ
??0exception@std@@QEAA@AEBV01@@Z
??2@YAPEAX_K@Z
_invalid_parameter_noinfo
malloc
?what@exception@std@@UEBAPEBDXZ
_encode_pointer
_malloc_crt
_initterm
_initterm_e
_encoded_null
_decode_pointer
_amsg_exit
??0CXmlDocument@@QEAA@XZ
??0CXmlNode@@QEAA@AEBV0@@Z
??0CXmlNode@@QEAA@AEBV0@QEAD@Z
??0CXmlNode@@QEAA@PEAX@Z
??0CXmlNode@@QEAA@XZ
??1CXmlDocument@@QEAA@XZ
??1CXmlNode@@QEAA@XZ
??4CXmlDocument@@QEAAAEAV0@AEBV0@@Z
??4CXmlNode@@QEAAAEAV0@AEBV0@@Z
??4_Init_locks@std@@QEAAAEAV01@AEBV01@@Z
??ACXmlNode@@QEAA?AV0@QEAD@Z
??ECXmlNode@@QEAAXXZ
?ClearChildrenNode@CXmlNode@@QEAAIXZ
?CompareNodeName@CXmlNode@@AEAAHQEAD@Z
?ContentIsByteData@CXmlNode@@AEAAIAEAH@Z
?CreateNode@CXmlNode@@QEAAIAEAV1@QEAD111@Z
?CreateNode@CXmlNode@@QEAAIAEAV1@QEADQEAXH@Z
?DeleteChildrenElement@CXmlNode@@QEAAIXZ
?DeleteFirstElement@CXmlNode@@QEAAIQEAD@Z
?DeleteNextNode@CXmlNode@@QEAAIQEAD@Z
?DeleteNode@CXmlNode@@QEAAIXZ
?FindNodeSet@CXmlDocument@@QEAAIQEAD@Z
?GetByteData@CXmlNode@@AEAAIQEADPEADAEAH@Z
?GetChildrenNode@CXmlNode@@QEAA?AV1@XZ
?GetFirstElement@CXmlNode@@QEAA?AV1@AEBV1@QEAD@Z
?GetFirstElement@CXmlNode@@QEAA?AV1@QEAD@Z
?GetNextElement@CXmlNode@@QEAA?AV1@QEAD@Z
?GetNodeContent@CXmlNode@@QEAAIPEADAEAH@Z
?GetNodeName@CXmlNode@@QEAAIPEADAEAH@Z
?GetNodeNs@CXmlNode@@QEAAPEAXXZ
?GetNodeNsHref@CXmlNode@@QEAAIPEADAEAH@Z
?GetNodeNsPrefix@CXmlNode@@QEAAIPEADAEAH@Z
?GetNodeProperty@CXmlNode@@QEAAIQEADPEADAEAH@Z
?GetNodeSetElement@CXmlDocument@@QEAA?AVCXmlNode@@H@Z
?GetNodeSetNum@CXmlDocument@@QEAAHXZ
?GetNsMap@CXmlNode@@QEAA?AV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@AEAVCXmlDocument@@@Z
?GetNsMapRe@CXmlNode@@QEAA?AV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@AEAVCXmlDocument@@@Z
?GetRootElement@CXmlDocument@@QEAA?AVCXmlNode@@XZ
?GetSiblingNode@CXmlNode@@QEAA?AV1@XZ
?GetXmlDocPointer@CXmlDocument@@QEAAPEAXXZ
?GetXmlNodePointer@CXmlNode@@AEBAPEAXXZ
?NodeExists@CXmlNode@@QEAAHQEAD@Z
?NodeValid@CXmlNode@@QEBAHXZ
?OpenXmlFile@CXmlDocument@@QEAAIQEAD0@Z
?PropertyExists@CXmlNode@@QEAAHQEAD@Z
?SaveXmlFile@CXmlDocument@@QEAAIQEAD0@Z
?SetCurrent@CXmlNode@@AEAAXPEAX@Z
?SetNodeContent@CXmlNode@@QEAAIQEAD@Z
?SetNodeContent@CXmlNode@@QEAAIQEAXH@Z
?SetNodeName@CXmlNode@@QEAAIQEAD@Z
?SetNodeProperty@CXmlNode@@QEAAIQEAD0@Z
?code_convert@CXmlNode@@AEBAIPEAD00H0H@Z
?g2u@CXmlNode@@AEBAPEADPEAD@Z
?u2g@CXmlNode@@AEBAPEADPEAD@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ