Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
99ba7d9cd70f85a469c0940e6432db63257e820802f0d7b6a26852ce03cb324e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
99ba7d9cd70f85a469c0940e6432db63257e820802f0d7b6a26852ce03cb324e.exe
Resource
win10v2004-20221111-en
Target
99ba7d9cd70f85a469c0940e6432db63257e820802f0d7b6a26852ce03cb324e
Size
612KB
MD5
f052328a16bb5f43a675ea188b4f5556
SHA1
64215f0965548285e1152d99b6041db4c0c1d03c
SHA256
99ba7d9cd70f85a469c0940e6432db63257e820802f0d7b6a26852ce03cb324e
SHA512
147ad018a3f33a8ce546c9a5cf45b4f89f097d3c6dda98b1f999c3a9b7547fd0436597e3010e66e44a05bb1ae6c3f918af5bf0a26d4a2b6aa56872dd2d1a2798
SSDEEP
12288:c7rINOhuoNDJnstxEMstKhBswYcjAORblU+U/nYV+T9pqQthGBjW8uI9q7zcicdG:c0OhthtEBswPjAORblU+U/nYET9pqYez
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GlobalAlloc
LeaveCriticalSection
SetEnvironmentVariableW
GetEnvironmentVariableW
LoadLibraryW
GetProcAddress
FreeResource
GlobalLock
GlobalUnlock
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
InterlockedExchange
WaitForMultipleObjects
GetTempPathW
GetFileSize
InterlockedDecrement
InterlockedIncrement
GetNativeSystemInfo
GetModuleFileNameW
GetCurrentProcess
TerminateProcess
GetVersionExW
LocalFree
GetCommandLineW
TerminateThread
FindClose
FindNextFileW
FindFirstFileW
ReadFile
CloseHandle
CreateFileW
GetLastError
CreateDirectoryW
WideCharToMultiByte
GetSystemInfo
Sleep
lstrlenW
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSection
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
SetLastError
FlushInstructionCache
VirtualProtect
MulDiv
GlobalReAlloc
GlobalFree
RaiseException
GetVersionExA
GetACP
GetLocaleInfoA
GetThreadLocale
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetVersion
DeleteFileW
GetTickCount
EnterCriticalSection
GetMessageW
TranslateMessage
DispatchMessageW
LoadCursorW
RegisterClassExW
GetPropW
IsWindow
DestroyWindow
EndDialog
CreateWindowExW
SetPropW
SetWindowLongW
RemovePropW
GetWindowLongW
GetDesktopWindow
GetWindowRect
MoveWindow
IsWindowVisible
ScreenToClient
InvalidateRect
IsWindowEnabled
DefWindowProcW
GetDC
ReleaseDC
CreateDialogParamW
IsDialogMessageW
SetDlgItemTextW
SetRect
UnregisterClassA
CallNextHookEx
GetClassNameW
SetWindowsHookExW
SetWindowPos
SetLayeredWindowAttributes
SetMenuItemInfoW
GetMenuItemInfoW
IsMenu
LoadIconW
FindWindowExW
EnumChildWindows
EnumThreadWindows
CallWindowProcW
IsRectEmpty
PtInRect
SetRectEmpty
InflateRect
GetFocus
OffsetRect
ClientToScreen
GetCursorPos
DrawTextW
DrawIconEx
GetIconInfo
DestroyIcon
DrawStateW
TrackMouseEvent
EqualRect
GetComboBoxInfo
GetClassLongW
GetWindowTextW
GetMenuItemCount
GetSystemMetrics
GetMenuItemRect
MenuItemFromPoint
GetWindowRgn
SetCursor
SetMenu
GetMenu
GetMenuState
GetSystemMenu
IsZoomed
IsIconic
GetSubMenu
GetWindowInfo
TrackPopupMenu
GetMenuItemID
SetWindowLongA
GetWindowLongA
GetDCEx
GetWindowDC
GetScrollInfo
GetScrollPos
GetScrollRange
SetScrollInfo
SetScrollPos
SetScrollRange
GetScrollBarInfo
EnableScrollBar
GetSysColor
WindowFromDC
SetWindowRgn
ShowScrollBar
GetUpdateRect
ReleaseCapture
SetCapture
GetCapture
UpdateLayeredWindow
SetWindowTextW
PostQuitMessage
SetFocus
EnableWindow
GetDlgItem
SystemParametersInfoW
EndPaint
GetClientRect
BeginPaint
SetTimer
MessageBoxW
KillTimer
GetParent
SendMessageW
UpdateWindow
ShowWindow
SetTextColor
GetObjectW
SelectClipPath
EndPath
BeginPath
SetBkMode
GetTextExtentPoint32W
CreateCompatibleBitmap
GetStockObject
CombineRgn
CreateRectRgn
SetBkColor
PtInRegion
OffsetRgn
SelectClipRgn
ExtTextOutA
ExtTextOutW
GetTextColor
GetTextExtentPointW
CreatePatternBrush
CreateFontIndirectA
SetPixel
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetMapMode
GetClipRgn
GetPixel
CreateDIBSection
DeleteDC
ExtCreateRegion
CreateCompatibleDC
BitBlt
Rectangle
CreatePen
DeleteObject
PatBlt
TextOutW
CreateFontIndirectW
SelectObject
CreateSolidBrush
GetDeviceCaps
CreateRoundRectRgn
CheckTokenMembership
RegEnumKeyExW
GetTokenInformation
CreateWellKnownSid
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
OpenProcessToken
RegQueryValueExW
RegCreateKeyW
SHCreateDirectoryExW
SHFileOperationW
ShellExecuteExW
CommandLineToArgvW
ShellExecuteW
SHGetSpecialFolderPathW
CoUninitialize
CoInitialize
CoCreateGuid
CreateStreamOnHGlobal
PathFileExistsW
PathRemoveFileSpecW
PathFindExtensionW
UrlEscapeW
UrlUnescapeA
PathIsDirectoryW
PathFindFileNameW
PathMatchSpecA
StrStrIA
StrStrA
GdipCreateBitmapFromStream
GdipGetImagePixelFormat
GdiplusStartup
GdipFree
GdipCloneImage
GdipAlloc
GdipDrawImageRectI
GdipDisposeImage
GdipDeleteGraphics
GdipCreateFromHDC
GdiplusShutdown
AlphaBlend
TransparentBlt
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBD@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?push_back@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEX_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
ImageList_GetIconSize
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_Draw
InitCommonControlsEx
DrawDibClose
DrawDibOpen
DrawDibDraw
wcsstr
memcpy_s
wcschr
wcsrchr
_wcslwr_s
strcpy_s
atoi
_wfopen_s
fwrite
free
_beginthread
_vscprintf
vsprintf_s
_purecall
??_V@YAXPAX@Z
tolower
_stricmp
sscanf_s
isalpha
srand
rand
_beginthreadex
_wrename
strpbrk
atof
sprintf_s
swprintf_s
_time64
_localtime64_s
memset
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
malloc
_wcsicmp
memmove_s
?what@exception@std@@UBEPBDXZ
_wtoi
??1exception@std@@UAE@XZ
strstr
??0exception@std@@QAE@XZ
iswspace
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@ABQBD@Z
vswprintf_s
_i64tow_s
_vscwprintf
_itow_s
_atoi64
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler3
memcpy
_CIsqrt
strrchr
fopen
_wfopen
fread
_ftelli64
_fseeki64
ferror
fclose
_CxxThrowException
connect
htons
inet_addr
inet_ntoa
gethostbyname
socket
__WSAFDIsSet
select
WSACleanup
WSAStartup
ioctlsocket
recv
closesocket
htonl
ntohl
send
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE