Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
c58c7198bae22111658a3f3bf8a0a8e244887e9d9e5e4ca6bb1555aa3fe9d340.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c58c7198bae22111658a3f3bf8a0a8e244887e9d9e5e4ca6bb1555aa3fe9d340.exe
Resource
win10v2004-20221111-en
Target
c58c7198bae22111658a3f3bf8a0a8e244887e9d9e5e4ca6bb1555aa3fe9d340
Size
416KB
MD5
9fdf91d10404023d5fc7c7b7580fc339
SHA1
ae4345104ef318feaa795c396986e0d42c2c8d65
SHA256
c58c7198bae22111658a3f3bf8a0a8e244887e9d9e5e4ca6bb1555aa3fe9d340
SHA512
2e5b433003ad4bc7438281d0ec876be2a2a8dabaf0fbfd80fbbd5c18f6bd37fb750a62f7d2ac21b8d41a9a68c4ad2411b664dca808a0342943a4dd126a18d014
SSDEEP
6144:P6MMXUsbmG0XKZmSwzOzxUiXXPU++6b26jFNuo2PtUTLwfYdRVu8tw+B82FV:W/mfK0NzYbXM++6b26Ryo1dRVld
ExtKeyUsageCodeSigning
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetWindowsDirectoryW
GetCPInfo
VirtualAllocEx
LoadLibraryW
CreateFileW
GetProcAddress
lstrcatW
Thread32Next
SetDefaultCommConfigW
MoveFileWithProgressA
LocalShrink
GlobalDeleteAtom
GetProcessWorkingSetSize
CreateTimerQueue
PulseEvent
FindResourceA
WritePrivateProfileStringA
GlobalWire
LoadLibraryExA
lstrlenW
GetEnvironmentStringsA
GetPrivateProfileSectionW
FreeEnvironmentStringsA
CreateWaitableTimerA
LCMapStringW
WaitForDebugEvent
lstrcpyn
SleepEx
WaitForSingleObjectEx
GetProcessTimes
FindNextFileW
FreeLibraryAndExitThread
GlobalMemoryStatusEx
GetConsoleAliasesLengthA
GetMailslotInfo
SetEnvironmentVariableW
Process32NextW
SetWaitableTimer
SearchPathW
GlobalGetAtomNameW
GetConsoleAliasW
MoveFileA
FindFirstVolumeMountPointW
IsProcessorFeaturePresent
WriteConsoleOutputCharacterA
GetModuleFileNameW
ExpandEnvironmentStringsW
GetProfileSectionW
GetSystemWindowsDirectoryW
GetConsoleWindow
GetSystemTimeAdjustment
VerLanguageNameW
LoadResource
lstrcpynA
ExitThread
GetProfileStringW
EnumResourceTypesW
DeviceIoControl
GetSystemDirectoryW
GetSystemWindowsDirectoryA
FindNextVolumeMountPointA
ReadDirectoryChangesW
FreeConsole
GetCurrentDirectoryW
GetUserDefaultLCID
AddConsoleAliasA
FillConsoleOutputCharacterW
IsBadStringPtrW
OpenMutexA
SetInformationJobObject
GetProcessHeaps
GetCurrentDirectoryA
DeleteTimerQueue
IsSystemResumeAutomatic
ConvertDefaultLocale
EnumResourceLanguagesA
IsBadCodePtr
CreateEventA
WriteFileGather
WaitNamedPipeA
LocalUnlock
IsBadHugeWritePtr
FindFirstVolumeW
GetNumberFormatW
GetConsoleFontSize
GlobalAddAtomA
LocalAlloc
CreateHardLinkW
FormatMessageA
DeleteAtom
ReadConsoleOutputA
TransactNamedPipe
FreeUserPhysicalPages
LocalLock
CopyFileExW
SetConsoleOutputCP
DuplicateHandle
EscapeCommFunction
EnumDateFormatsW
GetVolumePathNameA
GetFullPathNameW
GetStartupInfoA
DefineDosDeviceA
GetDiskFreeSpaceA
LoadIconA
CloseWindowStation
GetKeyboardLayout
GetClipCursor
UpdateLayeredWindow
SendInput
DispatchMessageA
GetTitleBarInfo
EqualRect
ChangeMenuW
GetWindowModuleFileNameA
ChangeDisplaySettingsA
DrawMenuBar
wsprintfW
CreateIconIndirect
MenuItemFromPoint
SetMessageQueue
GetTabbedTextExtentA
PackDDElParam
SetRectEmpty
IsChild
SetClassLongA
GetGuiResources
GetClipboardViewer
TabbedTextOutW
MsgWaitForMultipleObjects
GetClassWord
GetClassInfoA
ActivateKeyboardLayout
SetMenuDefaultItem
MapVirtualKeyA
LockWindowUpdate
GetAltTabInfoA
IsDlgButtonChecked
GetDlgCtrlID
DdeQueryStringW
DdeReconnect
UnionRect
DdeAddData
DragDetect
ToUnicodeEx
EnumDisplaySettingsExA
EnumDisplayDevicesW
EnumDesktopsA
UnregisterDeviceNotification
OemToCharBuffA
LoadKeyboardLayoutW
OpenDesktopA
DestroyIcon
FillRect
FlashWindow
DdeDisconnect
CreateDialogIndirectParamA
GetKeyNameTextW
keybd_event
GetClipboardOwner
SetScrollPos
CloseWindow
UnregisterClassA
EmptyClipboard
SendMessageA
GetLastActivePopup
DrawTextExW
UpdateWindow
DialogBoxParamA
VkKeyScanA
UnhookWindowsHookEx
GetMessageTime
CharPrevW
GetMenuItemInfoA
DefWindowProcW
CharLowerBuffW
LoadMenuA
SendNotifyMessageW
ValidateRgn
InsertMenuItemW
SetWindowsHookA
LoadCursorA
GetUserObjectSecurity
GetSysColorBrush
GetDialogBaseUnits
GetCursor
FindWindowExW
GetIconInfo
SetPropW
IsMenu
CreateIcon
IsCharAlphaNumericA
MsgWaitForMultipleObjectsEx
SetThreadDesktop
MessageBoxExA
EnumClipboardFormats
GetUpdateRect
ChildWindowFromPoint
ShowCursor
EngPaint
XFORMOBJ_bApplyXform
GetMetaFileW
PolyTextOutW
FillRgn
EnumObjects
FillPath
EngFindResource
GetWindowExtEx
GetBitmapDimensionEx
EngQueryLocalTime
GdiEntry8
EngQueryEMFInfo
GetTextExtentPointA
DeleteEnhMetaFile
OffsetViewportOrgEx
EngUnlockSurface
MirrorRgn
CopyMetaFileW
SelectPalette
PATHOBJ_vEnumStart
cGetTTFFromFOT
AddFontResourceExW
GdiGetSpoolFileHandle
EngLockSurface
RemoveFontResourceExA
GdiAddGlsRecord
EngGetDriverName
GetTextColor
GdiGetLocalBrush
SetTextCharacterExtra
EngEraseSurface
GdiTransparentBlt
CreatePatternBrush
RemoveFontMemResourceEx
GdiGetLocalFont
InvertRgn
GdiFullscreenControl
UpdateICMRegKeyW
MoveToEx
GetDCPenColor
EngDeleteSemaphore
CreateColorSpaceW
XLATEOBJ_iXlate
PlayEnhMetaFile
CreateICW
PolyTextOutA
Rectangle
GetGlyphIndicesA
GdiPlayPrivatePageEMF
GetCharWidth32A
UnloadNetworkFonts
FlattenPath
GetViewportOrgEx
SetMapperFlags
GetTextExtentPoint32A
GdiRealizationInfo
GetEnhMetaFileW
SetICMProfileA
GetLogColorSpaceA
CreateICA
CreateColorSpaceA
SetPolyFillMode
GdiEntry4
SetViewportOrgEx
RoundRect
PatBlt
EngUnicodeToMultiByteN
CreateHatchBrush
FontIsLinked
GdiConvertDC
GetTextCharsetInfo
RemoveFontResourceExW
GetObjectType
FONTOBJ_pQueryGlyphAttrs
SwapBuffers
EngMultiByteToUnicodeN
GdiPrinterThunk
HT_Get8BPPFormatPalette
GetTextFaceW
GetObjectA
EngCreateSemaphore
XLATEOBJ_piVector
StartDocA
SetDIBColorTable
EndFormPage
StrokeAndFillPath
SelectObject
CombineRgn
GdiConvertEnhMetaFile
GdiReleaseLocalDC
_getcwd
_fpclass
_CIlog
_spawnvpe
_spawnlpe
__winitenv
vfprintf
_msize
_copysign
difftime
toupper
_abnormal_termination
_itoa
isalpha
__p__fileinfo
_strset
_fullpath
vprintf
_close
_ismbckata
modf
_endthread
vsprintf
_putw
_wutime
__p__wpgmptr
_snwprintf
memmove
_memicmp
strtol
__lconv_init
_wchmod
_cgets
_futime
_Strftime
__badioinfo
__wgetmainargs
_access
__p__amblksiz
cos
_mbctoupper
__iscsym
_wstrtime
_adj_fdiv_m16i
_wfsopen
_j0
rewind
_fmode
_lfind
raise
fputc
_atoldbl
_getche
_ismbcl2
_wtoi64
_wcslwr
__p__mbctype
vwprintf
_wstat64
_local_unwind2
__p__commode
__unguarded_readlc_active
_ismbbprint
iswprint
labs
_tell
_longjmpex
free
_mbscmp
_exit
_mkdir
_toupper
_read
isgraph
_utime64
rename
__p___argc
_CIlog10
_wfindfirst64
_beep
_y0
_c_exit
getenv
_mbcasemap
_pclose
ferror
_flsbuf
_mbsspnp
_setmode
_strcmpi
_except_handler2
_getmbcp
getc
srand
_mbsrev
_mbctokata
ShellHookProc
SHBindToParent
SHGetFolderPathA
ExtractAssociatedIconA
SHGetInstanceExplorer
ShellExecuteA
SHGetDataFromIDListW
SHCreateDirectoryExW
SHAddToRecentDocs
SHBrowseForFolderA
DoEnvironmentSubstW
SHGetSpecialFolderLocation
SHGetFileInfoW
ExtractIconA
DuplicateIcon
SHGetDataFromIDListA
SHGetDiskFreeSpaceA
FindExecutableW
DragQueryFileAorW
ShellAboutA
SHIsFileAvailableOffline
DragAcceptFiles
ExtractIconW
SHGetIconOverlayIndexA
SHGetDiskFreeSpaceExA
Shell_NotifyIconA
SHGetFileInfoA
ExtractIconEx
SHEmptyRecycleBinA
SHFreeNameMappings
CheckEscapesW
ExtractIconExW
SHFormatDrive
SHQueryRecycleBinA
SHGetPathFromIDListW
SHCreateProcessAsUserW
FindExecutableA
ExtractAssociatedIconExA
DragFinish
SHGetFileInfo
SHLoadInProc
SHGetSettings
SHGetSpecialFolderPathW
ExtractAssociatedIconExW
CommandLineToArgvW
SHBrowseForFolder
SHPathPrepareForWriteW
SHLoadNonloadedIconOverlayIdentifiers
SHGetSpecialFolderPathA
ShellExecuteExA
WOWShellExecute
Shell_NotifyIconW
HMETAFILE_UserUnmarshal
HWND_UserFree
CoRegisterSurrogate
HWND_UserSize
HBRUSH_UserSize
StgOpenPropStg
HMETAFILEPICT_UserUnmarshal
CoUninitialize
MkParseDisplayName
CLSIDFromProgIDEx
CoGetCallContext
HMETAFILEPICT_UserMarshal
OleBuildVersion
HMETAFILEPICT_UserSize
StgCreateDocfile
DllDebugObjectRPCHook
CoGetObjectContext
HENHMETAFILE_UserMarshal
StgConvertVariantToProperty
STGMEDIUM_UserMarshal
OleDestroyMenuDescriptor
HBRUSH_UserFree
HICON_UserSize
OleGetIconOfClass
CoGetClassVersion
CoGetApartmentID
GetHGlobalFromStream
OleIsRunning
WdtpInterfacePointer_UserUnmarshal
CoRevertToSelf
OleRegEnumFormatEtc
CreateStdProgressIndicator
HGLOBAL_UserMarshal
CoFreeUnusedLibraries
CoRevokeMallocSpy
HMENU_UserFree
ReadFmtUserTypeStg
CoGetTreatAsClass
OleConvertOLESTREAMToIStorageEx
HMENU_UserSize
CreateFileMoniker
OleFlushClipboard
OleDuplicateData
OleRegEnumVerbs
OleGetIconOfFile
CoRegisterClassObject
CoInitializeWOW
WriteOleStg
HWND_UserUnmarshal
GetHGlobalFromILockBytes
HMETAFILEPICT_UserFree
OleNoteObjectVisible
OleSaveToStream
StgCreatePropStg
OleCreateMenuDescriptor
WriteClassStg
HACCEL_UserUnmarshal
MonikerRelativePathTo
CoGetInstanceFromFile
CoAllowSetForegroundWindow
OleSetContainedObject
CoRegisterPSClsid
CoCreateInstanceEx
HBITMAP_UserMarshal
HMENU_UserMarshal
OleQueryCreateFromData
OleDraw
CoRevokeClassObject
WdtpInterfacePointer_UserFree
WdtpInterfacePointer_UserMarshal
CLSIDFromString
MonikerCommonPrefixWith
IsEqualGUID
CreatePointerMoniker
CoInitialize
WriteFmtUserTypeStg
OleCreateEmbeddingHelper
CoTaskMemRealloc
CoSetCancelObject
CLIPFORMAT_UserSize
IsAccelerator
StgSetTimes
HDC_UserSize
CoGetStandardMarshal
SNB_UserSize
StrCmpNIW
StrStrIA
StrChrA
StrRChrW
StrChrIA
StrRChrA
StrRStrIW
StrCmpNIA
StrStrIW
StrChrIW
StrChrW
StrStrW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ