Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
9cfa67eddfdbec9b8a247c4ec93457dd5f8a22ede3e0de43f4865893bbbc89a0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9cfa67eddfdbec9b8a247c4ec93457dd5f8a22ede3e0de43f4865893bbbc89a0.exe
Resource
win10v2004-20221111-en
Target
9cfa67eddfdbec9b8a247c4ec93457dd5f8a22ede3e0de43f4865893bbbc89a0
Size
403KB
MD5
fc5bd78c25b5da4389161bbca880398a
SHA1
0f74c48934ebd52e09e6a6a598e89f28c52f8481
SHA256
9cfa67eddfdbec9b8a247c4ec93457dd5f8a22ede3e0de43f4865893bbbc89a0
SHA512
323eca8d4c82c603b4cccd4df0da67594719fec30d545337578a310c5c3aacec5c2d0e5d9de63a54d2e9450ce8c72431ede03ffa65f14625e2f07749ebf9f9a3
SSDEEP
6144:CIBVcu/H9spNoyn7j7vox4x4a0WAUTsyNBJydHI/09wqDVd3wll/t7ZLw3aDeaDm:ZLcuv9spXMkTHAdHI06X/tN7H5Gb
ExtKeyUsageCodeSigning
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetWindowsDirectoryW
GetCPInfo
VirtualAllocEx
CreateFileW
lstrcatW
LoadLibraryW
GetProcAddress
Thread32Next
SetDefaultCommConfigW
MoveFileWithProgressA
LocalShrink
GlobalDeleteAtom
GetProcessWorkingSetSize
CreateTimerQueue
PulseEvent
FindResourceA
WritePrivateProfileStringA
GlobalWire
LoadLibraryExA
lstrlenW
GetEnvironmentStringsA
GetPrivateProfileSectionW
FreeEnvironmentStringsA
CreateWaitableTimerA
LCMapStringW
WaitForDebugEvent
lstrcpyn
SleepEx
WaitForSingleObjectEx
GetProcessTimes
FindNextFileW
FreeLibraryAndExitThread
GlobalMemoryStatusEx
GetConsoleAliasesLengthA
GetMailslotInfo
SetEnvironmentVariableW
Process32NextW
SetWaitableTimer
SearchPathW
GlobalGetAtomNameW
GetConsoleAliasW
MoveFileA
FindFirstVolumeMountPointW
IsProcessorFeaturePresent
WriteConsoleOutputCharacterA
GetModuleFileNameW
ExpandEnvironmentStringsW
GetProfileSectionW
GetSystemWindowsDirectoryW
GetConsoleWindow
GetSystemTimeAdjustment
VerLanguageNameW
LoadResource
lstrcpynA
ExitThread
GetProfileStringW
EnumResourceTypesW
DeviceIoControl
GetSystemDirectoryW
GetSystemWindowsDirectoryA
FindNextVolumeMountPointA
ReadDirectoryChangesW
FreeConsole
GetCurrentDirectoryW
GetUserDefaultLCID
AddConsoleAliasA
FillConsoleOutputCharacterW
IsBadStringPtrW
OpenMutexA
SetInformationJobObject
GetProcessHeaps
GetCurrentDirectoryA
DeleteTimerQueue
IsSystemResumeAutomatic
ConvertDefaultLocale
EnumResourceLanguagesA
IsBadCodePtr
CreateEventA
WriteFileGather
WaitNamedPipeA
LocalUnlock
IsBadHugeWritePtr
FindFirstVolumeW
GetNumberFormatW
GetConsoleFontSize
GlobalAddAtomA
LocalAlloc
CreateHardLinkW
FormatMessageA
DeleteAtom
ReadConsoleOutputA
TransactNamedPipe
FreeUserPhysicalPages
LocalLock
CopyFileExW
SetConsoleOutputCP
DuplicateHandle
EscapeCommFunction
EnumDateFormatsW
GetVolumePathNameA
GetFullPathNameW
GetStartupInfoA
DefineDosDeviceA
GetDiskFreeSpaceA
LoadIconA
EngPaint
XFORMOBJ_bApplyXform
GetMetaFileW
PolyTextOutW
FillRgn
EnumObjects
FillPath
EngFindResource
GetWindowExtEx
GetBitmapDimensionEx
EngQueryLocalTime
GdiEntry8
EngQueryEMFInfo
GetTextExtentPointA
DeleteEnhMetaFile
OffsetViewportOrgEx
EngUnlockSurface
MirrorRgn
CopyMetaFileW
SelectPalette
PATHOBJ_vEnumStart
cGetTTFFromFOT
AddFontResourceExW
GdiGetSpoolFileHandle
EngLockSurface
RemoveFontResourceExA
GdiAddGlsRecord
EngGetDriverName
GetTextColor
GdiGetLocalBrush
SetTextCharacterExtra
EngEraseSurface
GdiTransparentBlt
CreatePatternBrush
RemoveFontMemResourceEx
GdiGetLocalFont
InvertRgn
GdiFullscreenControl
UpdateICMRegKeyW
MoveToEx
GetDCPenColor
EngDeleteSemaphore
CreateColorSpaceW
XLATEOBJ_iXlate
PlayEnhMetaFile
CreateICW
PolyTextOutA
Rectangle
GetGlyphIndicesA
GdiPlayPrivatePageEMF
GetCharWidth32A
UnloadNetworkFonts
FlattenPath
GetViewportOrgEx
SetMapperFlags
GetTextExtentPoint32A
GdiRealizationInfo
GetEnhMetaFileW
SetICMProfileA
GetLogColorSpaceA
CreateICA
CreateColorSpaceA
SetPolyFillMode
GdiEntry4
SetViewportOrgEx
RoundRect
PatBlt
EngUnicodeToMultiByteN
CreateHatchBrush
FontIsLinked
GdiConvertDC
GetTextCharsetInfo
RemoveFontResourceExW
GetObjectType
FONTOBJ_pQueryGlyphAttrs
SwapBuffers
EngMultiByteToUnicodeN
GdiPrinterThunk
HT_Get8BPPFormatPalette
GetTextFaceW
GetObjectA
EngCreateSemaphore
XLATEOBJ_piVector
StartDocA
SetDIBColorTable
EndFormPage
StrokeAndFillPath
SelectObject
CombineRgn
GdiConvertEnhMetaFile
GdiReleaseLocalDC
_getcwd
_fpclass
_CIlog
_spawnvpe
_spawnlpe
__winitenv
vfprintf
_msize
_copysign
difftime
toupper
_abnormal_termination
_itoa
isalpha
__p__fileinfo
_strset
_fullpath
vprintf
_close
_ismbckata
modf
_endthread
vsprintf
_putw
_wutime
__p__wpgmptr
_snwprintf
memmove
_memicmp
strtol
__lconv_init
_wchmod
_cgets
_futime
_Strftime
__badioinfo
__wgetmainargs
_access
__p__amblksiz
cos
_mbctoupper
__iscsym
_wstrtime
_adj_fdiv_m16i
_wfsopen
_j0
rewind
_fmode
_lfind
raise
fputc
_atoldbl
_getche
_ismbcl2
_wtoi64
_wcslwr
__p__mbctype
vwprintf
_wstat64
_local_unwind2
__p__commode
__unguarded_readlc_active
_ismbbprint
iswprint
labs
_tell
_longjmpex
free
_mbscmp
_exit
_mkdir
_toupper
_read
isgraph
_utime64
rename
__p___argc
_CIlog10
_wfindfirst64
_beep
_y0
_c_exit
getenv
_mbcasemap
_pclose
ferror
_flsbuf
_mbsspnp
_setmode
_strcmpi
_except_handler2
_getmbcp
getc
srand
_mbsrev
_mbctokata
ShellHookProc
SHBindToParent
SHGetFolderPathA
ExtractAssociatedIconA
SHGetInstanceExplorer
ShellExecuteA
SHGetDataFromIDListW
SHCreateDirectoryExW
SHAddToRecentDocs
SHBrowseForFolderA
DoEnvironmentSubstW
SHGetSpecialFolderLocation
SHGetFileInfoW
ExtractIconA
DuplicateIcon
SHGetDataFromIDListA
SHGetDiskFreeSpaceA
FindExecutableW
DragQueryFileAorW
ShellAboutA
SHIsFileAvailableOffline
DragAcceptFiles
ExtractIconW
SHGetIconOverlayIndexA
SHGetDiskFreeSpaceExA
Shell_NotifyIconA
SHGetFileInfoA
ExtractIconEx
SHEmptyRecycleBinA
SHFreeNameMappings
CheckEscapesW
ExtractIconExW
SHFormatDrive
SHQueryRecycleBinA
SHGetPathFromIDListW
SHCreateProcessAsUserW
FindExecutableA
ExtractAssociatedIconExA
DragFinish
SHGetFileInfo
SHLoadInProc
SHGetSettings
SHGetSpecialFolderPathW
ExtractAssociatedIconExW
CommandLineToArgvW
SHBrowseForFolder
SHPathPrepareForWriteW
SHLoadNonloadedIconOverlayIdentifiers
SHGetSpecialFolderPathA
ShellExecuteExA
WOWShellExecute
Shell_NotifyIconW
StrCmpNIW
StrStrIA
StrChrA
StrRChrW
StrChrIA
StrRChrA
StrRStrIW
StrCmpNIA
StrStrIW
StrChrIW
StrChrW
StrStrW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ