Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
9126b69b81bc4e8ebf2d8e6bd6b79186b073fe546bd66ab33f9972549430db1d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9126b69b81bc4e8ebf2d8e6bd6b79186b073fe546bd66ab33f9972549430db1d.exe
Resource
win10v2004-20220812-en
Target
9126b69b81bc4e8ebf2d8e6bd6b79186b073fe546bd66ab33f9972549430db1d
Size
232KB
MD5
d8b9f8cb57b516c67d65b7b98d9eaccf
SHA1
642bb090a3cffed0a8b86fa99ec3b197d5d99582
SHA256
9126b69b81bc4e8ebf2d8e6bd6b79186b073fe546bd66ab33f9972549430db1d
SHA512
78efd232cdfc7831e29079e9ae4b804b7e98e0180d828592dfb2e6d0e9489096a7d7fb79408f92db64432255b8f12da5bbb5c4cd735b0e20c4f81ada536548b5
SSDEEP
6144:P18jpg6QJglGVUrOjPGA4VaXiYJhcOPzVLVBVoQQQFItE:PQdlGORA5cOh
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetCurrentThreadId
RaiseException
LoadLibraryW
ExpandEnvironmentStringsW
FreeLibrary
CopyFileW
GetModuleFileNameW
GetCommandLineW
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
FlushInstructionCache
LoadLibraryA
HeapAlloc
GetCurrentProcess
Process32NextW
Process32FirstW
Module32NextW
CloseHandle
Module32FirstW
CreateToolhelp32Snapshot
EnterCriticalSection
LeaveCriticalSection
SetLastError
GetModuleHandleExW
GetProcAddress
InitializeCriticalSection
InterlockedExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
Sleep
HeapSize
DeleteCriticalSection
GetLastError
GetProcessHeap
HeapFree
InterlockedCompareExchange
FindClose
FindNextFileW
GetFullPathNameW
FindFirstFileW
lstrcpyW
lstrlenW
RemoveDirectoryW
MoveFileExW
DeleteFileW
GetModuleHandleW
VirtualFree
VirtualAlloc
HeapDestroy
HeapReAlloc
IsProcessorFeaturePresent
GetActiveWindow
DialogBoxParamW
SendMessageW
UnregisterClassA
EndDialog
DestroyIcon
LoadIconW
GetWindow
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
GetClientRect
MapWindowPoints
SetWindowPos
GetDlgItem
SetWindowLongW
SHFileOperationW
SHGetFolderPathW
ExtractIconExW
ShellExecuteW
PathAppendW
ImageList_Create
ImageList_ReplaceIcon
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@_W@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
_wfindnext64i32
_findclose
_wcslwr_s
memset
free
_unlock
_wfindfirst64i32
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
swscanf_s
_waccess_s
wcsrchr
wcschr
memmove_s
memcpy_s
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
_wcsicmp
??_V@YAXPAX@Z
_vsnwprintf
??3@YAXPAX@Z
__CxxFrameHandler3
_CxxThrowException
__dllonexit
memcpy
RegOpenKeyExW
RegFlushKey
RegOpenKeyW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ