Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
58bf73e85de55915fd907edce6af1f8950b7683f720d4b0d1f4392c87ded4c0e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
58bf73e85de55915fd907edce6af1f8950b7683f720d4b0d1f4392c87ded4c0e.exe
Resource
win10v2004-20221111-en
Target
58bf73e85de55915fd907edce6af1f8950b7683f720d4b0d1f4392c87ded4c0e
Size
167KB
MD5
095199fe9df79b568db581d513e31068
SHA1
e8cd310bc338e8728c0f55756ae6014a8480e8db
SHA256
58bf73e85de55915fd907edce6af1f8950b7683f720d4b0d1f4392c87ded4c0e
SHA512
e3ee738900293483979d7e98c16aa73254b8f085cd4f6be26a44f3b518ae71fcfdcd1bfefeb8595ffcccf767eaec6fb04ee1554e75e6c365cccc08cfe2a87a97
SSDEEP
3072:9ZUnDIOTePvg1Jwo8bmJ0l0Oeku0bnEoZ5hwkwuOMqc:LUncXV/mXlEbEy7bGMj
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?_Winerror_map@std@@YAPBDH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
memset
_CxxThrowException
__CxxFrameHandler3
memcpy
_except_handler4_common
_controlfp_s
_invoke_watson
__crtSetUnhandledExceptionFilter
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
_commode
_fmode
_wcmdln
_initterm
_initterm_e
_configthreadlocale
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__crtGetShowWindowMode
_XcptFilter
memmove_s
_time64
srand
_waccess
rand
_snwprintf_s
memcpy_s
vswprintf_s
_wtoi
??_V@YAXPAX@Z
malloc
free
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
memmove
sscanf
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
__setusermatherr
_except1
ord1518
ord286
ord4984
ord2431
ord6219
ord4050
ord1140
ord501
ord2347
ord973
ord4879
ord1736
ord1727
ord1731
ord1723
ord1711
ord12132
ord12134
ord13738
ord3224
ord10883
ord6875
ord8846
ord14447
ord11811
ord3790
ord3795
ord11964
ord9020
ord11601
ord11600
ord5557
ord10169
ord10165
ord10167
ord10168
ord10166
ord8092
ord10136
ord3260
ord3263
ord6392
ord6469
ord3839
ord4842
ord3361
ord3362
ord4049
ord10353
ord11271
ord10896
ord8921
ord1108
ord9091
ord2718
ord13612
ord6121
ord12006
ord1110
ord887
ord1386
ord2262
ord2484
ord14237
ord1684
ord8628
ord2204
ord6652
ord2343
ord2336
ord4843
ord12043
ord3223
ord3329
ord3330
ord3898
ord11999
ord2640
ord5838
ord13563
ord13991
ord14094
ord11592
ord6774
ord14455
ord7807
ord14449
ord3013
ord7004
ord462
ord12048
ord9116
ord9299
ord7384
ord8101
ord5314
ord7600
ord7610
ord7609
ord5137
ord5316
ord5160
ord5430
ord9231
ord5664
ord5454
ord5157
ord4451
ord9574
ord5693
ord4459
ord4909
ord4874
ord4772
ord4867
ord4905
ord4932
ord4883
ord14269
ord14275
ord1521
ord1520
ord2367
ord4916
ord4928
ord1042
ord296
ord1687
ord2954
ord12634
ord4621
ord12755
ord8601
ord8594
ord8638
ord12792
ord8242
ord2967
ord285
ord293
ord5824
ord2948
ord2130
ord12094
ord12126
ord8099
ord12114
ord5821
ord3809
ord2163
ord12203
ord3806
ord545
ord11870
ord2847
ord1172
ord6758
ord992
ord6252
ord6253
ord14527
ord14528
ord6251
ord14526
ord7884
ord12402
ord14326
ord11858
ord11857
ord1992
ord7825
ord12818
ord4047
ord4109
ord9279
ord14454
ord4920
ord14448
ord12413
ord12412
ord2444
ord10260
ord5262
ord8206
ord7881
ord4546
ord12736
ord12799
ord10314
ord12122
ord8268
ord1467
ord7542
ord8352
ord503
ord1141
ord5488
ord5491
ord8059
ord4672
ord4692
ord9090
ord10131
ord5667
ord280
ord12219
ord14463
ord12276
ord14516
ord1447
ord2341
ord8658
ord8699
ord9137
ord2173
ord6404
ord6510
ord4184
ord3889
ord4891
ord4895
ord4899
ord3122
ord4887
ord7806
OutputDebugStringW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
CopyFileW
lstrcpyW
WriteProcessMemory
CloseHandle
FindNextFileW
FindClose
VirtualAllocEx
GetProcAddress
GetTempPathW
lstrlenW
MultiByteToWideChar
GetModuleFileNameW
GetVersionExW
ReadProcessMemory
Sleep
VirtualFreeEx
WideCharToMultiByte
OpenProcess
GetTickCount
GetModuleHandleW
CreateDirectoryW
GetCurrentProcess
FindFirstFileW
CreateMutexW
GetCommandLineW
DeleteCriticalSection
DecodePointer
EnterCriticalSection
GetLastError
GetPrivateProfileStringW
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
WritePrivateProfileStringW
DrawIcon
SetCursor
SetTimer
IsIconic
KillTimer
LoadCursorW
PtInRect
FindWindowW
FindWindowExW
SendMessageW
GetWindowThreadProcessId
PostMessageW
GetSystemMetrics
GetWindowRect
GetSubMenu
SetMenuItemBitmaps
SetForegroundWindow
LoadIconW
LoadMenuW
SystemParametersInfoW
GetSysColor
GetCursorPos
IsWindowVisible
GetParent
GetClientRect
EnableWindow
ChangeServiceConfig2W
QueryServiceStatus
RegOpenKeyExW
ControlService
RegCloseKey
DeleteService
RegQueryValueExW
OpenServiceW
CreateServiceW
OpenSCManagerW
CloseServiceHandle
Shell_NotifyIconW
ShellExecuteW
SHGetDesktopFolder
SHGetSpecialFolderPathW
SHBindToParent
InitCommonControlsEx
StrRetToBufW
StrRetToStrW
PathFileExistsW
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
URLDownloadToFileW
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesWrapMode
GdipDrawImageRectRect
GdiplusStartup
GdipDeleteStringFormat
GdipReleaseDC
GdipCreateStringFormat
GdipCreateFromHDC
GdipCreateFontFamilyFromName
GdipDrawString
GdipCreateFont
GdipCreateSolidFill
GdipDeleteFontFamily
GdipSetStringFormatAlign
GdipLoadImageFromFile
GdipDeleteGraphics
GdipDeleteFont
GdipDrawImageRectRectI
GdipDeleteBrush
GdipGetImageWidth
GdipGetImageHeight
GdipCloneImage
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromFile
GdipDisposeImage
GdipAlloc
GdipFree
GdiplusShutdown
GdipDrawImageRect
?SetActive@XXItemBase@@QAEXH@Z
?GetActive@XXItemBase@@QAEHXZ
?SetEnable@XXItemBase@@QAEXH@Z
?GetEnable@XXItemBase@@QAEHXZ
?SetWallpaper@XXShellFunctions@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@K@Z
?GetWallpaper@XXShellFunctions@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?GetRuntimeClass@CXXDialogBase@@UBEPAUCRuntimeClass@@XZ
?SetMinMaxStyle@CXXDialogBase@@QAEXXZ
?MinXXDlg@CXXDialogBase@@QAEXXZ
?OnPaint@CXXDialogBase@@QAEXXZ
?OnLButtonDown@CXXDialogBase@@QAEXIVCPoint@@@Z
?OnLButtonUp@CXXDialogBase@@QAEXIVCPoint@@@Z
?OnTimer@CXXDialogBase@@QAEXI@Z
?WebGet@XXBaseFunctions@@QAEKV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AAV23@H@Z
?Tongji@XXBaseFunctions@@QAEHV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@000@Z
??0XXCheckBox@@QAE@XZ
??1XXCheckBox@@QAE@XZ
?SetText@XXCheckBox@@QAEXPB_W@Z
?SetTextMouseOnColor@XXCheckBox@@QAEXVColor@Gdiplus@@@Z
?SetTextMouseDownColor@XXCheckBox@@QAEXVColor@Gdiplus@@@Z
?SetTextColor@XXCheckBox@@QAEXVColor@Gdiplus@@@Z
?GetImage@XXButton@@QAEPAVImage@Gdiplus@@XZ
?OnMove@CXXDialogBase@@QAEXHH@Z
??0XXImage@@QAE@XZ
??1XXImage@@QAE@XZ
?SetImage@XXImage@@QAEHPB_W@Z
?GetImage@XXImage@@QAEPAVImage@Gdiplus@@XZ
?SetRect@XXItemBase@@QAEXHHHH@Z
?SetCallBack@XXItemBase@@QAEXPAVXXCallbacks@@@Z
??0XXButton@@QAE@XZ
??1XXButton@@QAE@XZ
?SetImage@XXButton@@QAEHPB_WW4XXBT_IMGS@1@W4XXBT_TYPE@1@@Z
?GetThisClass@CXXDialogBase@@SGPAUCRuntimeClass@@XZ
??0CXXDialogBase@@QAE@IPAVCWnd@@@Z
??1CXXDialogBase@@UAE@XZ
?UpdateView@CXXDialogBase@@UAEXXZ
?UpdateViewRect@CXXDialogBase@@UAEXPAUtagRECT@@@Z
?UpdateViewPt@CXXDialogBase@@UAEXAAUtagPOINT@@@Z
?CallBackInvalidate@CXXDialogBase@@UAEXXZ
?DrawSurface@CXXDialogBase@@UAEXPAUHDC__@@HHH@Z
?Set_OPAQUEDlg@CXXDialogBase@@QAEHH@Z
?SetNoMove@CXXDialogBase@@QAEXH@Z
?CloseXXDlg@CXXDialogBase@@QAEXXZ
?AddXXItem@CXXDialogBase@@QAEHPAVXXItemBase@@@Z
?DoDataExchange@CXXDialogBase@@MAEXPAVCDataExchange@@@Z
?GetThisMessageMap@CXXDialogBase@@KGPBUAFX_MSGMAP@@XZ
?OnInitDialog@CXXDialogBase@@UAEHXZ
?OnDestroy@CXXDialogBase@@QAEXXZ
?OnMouseMove@CXXDialogBase@@QAEXIVCPoint@@@Z
?PreTranslateMessage@CXXDialogBase@@UAEHPAUtagMSG@@@Z
?OnRButtonUp@CXXDialogBase@@QAEXIVCPoint@@@Z
??0CHtmlCtrls@@QAE@XZ
??1CHtmlCtrls@@UAE@XZ
?Navigate@CHtmlCtrls@@QAEXPB_WK00PAXK@Z
?CreateFromStatic@CHtmlCtrls@@QAEHIPAVCWnd@@@Z
?SetShow@XXItemBase@@QAEXH@Z
EnumProcesses
GetModuleFileNameExW
DeleteUrlCacheEntryW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ