Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
aaf020b408983e12a913e873f412297d8ec22f0a423f22c6f6d48e1c7a47613d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aaf020b408983e12a913e873f412297d8ec22f0a423f22c6f6d48e1c7a47613d.exe
Resource
win10v2004-20221111-en
Target
aaf020b408983e12a913e873f412297d8ec22f0a423f22c6f6d48e1c7a47613d
Size
417KB
MD5
92556088921db53d8d024ce885a7d6e5
SHA1
71995ac49b0ea785dea03ad427bf3ea316b4f16f
SHA256
aaf020b408983e12a913e873f412297d8ec22f0a423f22c6f6d48e1c7a47613d
SHA512
7289aec5e3744fca81182c56bbcd3ee6f64a1cebde7f89781d1e3ce7503165069cb73e992f8fbc56f5c6655dedfcb6665d28385a7f86106a6b33c1c5988b6f26
SSDEEP
6144:JSR3f/xxrrwSBigBanI0k2bYw/MK+raJ3x76b6pW4E4pSlJKiLxZaSe2a:kR3XxBwYHaI0VYwEt0x72Ebdoyim
ExtKeyUsageCodeSigning
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetWindowsDirectoryW
GetCPInfo
VirtualAllocEx
CreateFileW
lstrcatW
LoadLibraryW
GetProcAddress
OpenEventA
FoldStringA
SetCalendarInfoA
GlobalMemoryStatus
GetConsoleAliasesLengthW
WideCharToMultiByte
TlsFree
FindClose
FindVolumeClose
EnumDateFormatsExW
SetThreadContext
GetWriteWatch
HeapUnlock
SetConsoleScreenBufferSize
SetCurrentDirectoryA
EnumCalendarInfoA
GetPrivateProfileStringA
LockFileEx
FindNextVolumeW
FindCloseChangeNotification
lstrlenW
SetNamedPipeHandleState
ConvertDefaultLocale
SetErrorMode
FindFirstFileW
LockFile
CreateProcessW
WritePrivateProfileStringA
SuspendThread
GetFileSize
LoadModule
SetProcessPriorityBoost
GetCurrencyFormatW
InterlockedIncrement
GetLogicalDriveStringsW
FreeEnvironmentStringsA
GetConsoleAliasExesLengthW
GetAtomNameA
GetNumberOfConsoleInputEvents
GetCurrencyFormatA
ResetWriteWatch
TlsAlloc
BuildCommDCBAndTimeoutsA
DeleteAtom
CancelWaitableTimer
SetVolumeMountPointW
PeekNamedPipe
AllocateUserPhysicalPages
GetVolumeInformationW
LocalLock
GetProfileIntW
CreateNamedPipeA
IsProcessorFeaturePresent
UpdateResourceW
GetProcessWorkingSetSize
GenerateConsoleCtrlEvent
MoveFileA
BuildCommDCBA
GetSystemTime
FreeEnvironmentStringsW
GetShortPathNameA
CreateThread
GetComputerNameExA
CreateMailslotW
LocalSize
RtlFillMemory
DnsHostnameToComputerNameA
GetPrivateProfileIntA
ReadConsoleInputA
GetThreadContext
GetWindowsDirectoryA
ReadFileScatter
HeapSize
CreateJobObjectW
HeapDestroy
lstrlenA
OutputDebugStringA
GetFileAttributesW
GlobalFree
SetCommTimeouts
CreateHardLinkA
WriteProfileStringA
QueueUserAPC
CreateDirectoryW
GetQueuedCompletionStatus
SetConsoleOutputCP
FindFirstVolumeW
Heap32ListFirst
EnumResourceNamesA
GetConsoleAliasExesLengthA
WriteFile
SetThreadExecutionState
ReadDirectoryChangesW
FileTimeToLocalFileTime
EnumSystemCodePagesW
ChangeTimerQueueTimer
CloseWindowStation
GetKeyboardLayout
GetClipCursor
UpdateLayeredWindow
SendInput
DispatchMessageA
GetTitleBarInfo
EqualRect
ChangeMenuW
GetWindowModuleFileNameA
ChangeDisplaySettingsA
DrawMenuBar
wsprintfW
CreateIconIndirect
MenuItemFromPoint
SetMessageQueue
GetTabbedTextExtentA
PackDDElParam
SetRectEmpty
IsChild
SetClassLongA
GetGuiResources
GetClipboardViewer
TabbedTextOutW
MsgWaitForMultipleObjects
GetClassWord
GetClassInfoA
ActivateKeyboardLayout
SetMenuDefaultItem
MapVirtualKeyA
LockWindowUpdate
GetAltTabInfoA
IsDlgButtonChecked
GetDlgCtrlID
DdeQueryStringW
DdeReconnect
UnionRect
DdeAddData
DragDetect
ToUnicodeEx
EnumDisplaySettingsExA
EnumDisplayDevicesW
EnumDesktopsA
UnregisterDeviceNotification
OemToCharBuffA
LoadKeyboardLayoutW
OpenDesktopA
DestroyIcon
FillRect
FlashWindow
DdeDisconnect
CreateDialogIndirectParamA
GetKeyNameTextW
keybd_event
GetClipboardOwner
SetScrollPos
CloseWindow
UnregisterClassA
EmptyClipboard
SendMessageA
GetLastActivePopup
DrawTextExW
UpdateWindow
DialogBoxParamA
VkKeyScanA
UnhookWindowsHookEx
GetMessageTime
CharPrevW
GetMenuItemInfoA
DefWindowProcW
CharLowerBuffW
LoadMenuA
SendNotifyMessageW
ValidateRgn
InsertMenuItemW
SetWindowsHookA
LoadCursorA
GetUserObjectSecurity
GetSysColorBrush
GetDialogBaseUnits
GetCursor
FindWindowExW
GetIconInfo
SetPropW
IsMenu
CreateIcon
IsCharAlphaNumericA
MsgWaitForMultipleObjectsEx
SetThreadDesktop
MessageBoxExA
EnumClipboardFormats
GetUpdateRect
ChildWindowFromPoint
ShowCursor
EngPaint
XFORMOBJ_bApplyXform
GetMetaFileW
PolyTextOutW
FillRgn
EnumObjects
FillPath
EngFindResource
GetWindowExtEx
GetBitmapDimensionEx
EngQueryLocalTime
GdiEntry8
EngQueryEMFInfo
GetTextExtentPointA
DeleteEnhMetaFile
OffsetViewportOrgEx
EngUnlockSurface
MirrorRgn
CopyMetaFileW
SelectPalette
PATHOBJ_vEnumStart
cGetTTFFromFOT
AddFontResourceExW
GdiGetSpoolFileHandle
EngLockSurface
RemoveFontResourceExA
GdiAddGlsRecord
EngGetDriverName
GetTextColor
GdiGetLocalBrush
SetTextCharacterExtra
EngEraseSurface
GdiTransparentBlt
CreatePatternBrush
RemoveFontMemResourceEx
GdiGetLocalFont
InvertRgn
GdiFullscreenControl
UpdateICMRegKeyW
MoveToEx
GetDCPenColor
EngDeleteSemaphore
CreateColorSpaceW
XLATEOBJ_iXlate
PlayEnhMetaFile
CreateICW
PolyTextOutA
Rectangle
GetGlyphIndicesA
GdiPlayPrivatePageEMF
GetCharWidth32A
UnloadNetworkFonts
FlattenPath
GetViewportOrgEx
SetMapperFlags
GetTextExtentPoint32A
GdiRealizationInfo
GetEnhMetaFileW
SetICMProfileA
GetLogColorSpaceA
CreateICA
CreateColorSpaceA
SetPolyFillMode
GdiEntry4
SetViewportOrgEx
RoundRect
PatBlt
EngUnicodeToMultiByteN
CreateHatchBrush
FontIsLinked
GdiConvertDC
GetTextCharsetInfo
RemoveFontResourceExW
GetObjectType
FONTOBJ_pQueryGlyphAttrs
SwapBuffers
EngMultiByteToUnicodeN
GdiPrinterThunk
HT_Get8BPPFormatPalette
GetTextFaceW
GetObjectA
EngCreateSemaphore
XLATEOBJ_piVector
StartDocA
SetDIBColorTable
EndFormPage
StrokeAndFillPath
SelectObject
CombineRgn
GdiConvertEnhMetaFile
GdiReleaseLocalDC
_getcwd
_fpclass
_CIlog
_spawnvpe
_spawnlpe
__winitenv
vfprintf
_msize
_copysign
difftime
toupper
_abnormal_termination
_itoa
isalpha
__p__fileinfo
_strset
_fullpath
vprintf
_close
_ismbckata
modf
_endthread
vsprintf
_putw
_wutime
__p__wpgmptr
_snwprintf
memmove
_memicmp
strtol
__lconv_init
_wchmod
_cgets
_futime
_Strftime
__badioinfo
__wgetmainargs
_access
__p__amblksiz
cos
_mbctoupper
__iscsym
_wstrtime
_adj_fdiv_m16i
_wfsopen
_j0
rewind
_fmode
_lfind
raise
fputc
_atoldbl
_getche
_ismbcl2
_wtoi64
_wcslwr
__p__mbctype
vwprintf
_wstat64
_local_unwind2
__p__commode
__unguarded_readlc_active
_ismbbprint
iswprint
labs
_tell
_longjmpex
free
_mbscmp
_exit
_mkdir
_toupper
_read
isgraph
_utime64
rename
__p___argc
_CIlog10
_wfindfirst64
_beep
_y0
_c_exit
getenv
_mbcasemap
_pclose
ferror
_flsbuf
_mbsspnp
_setmode
_strcmpi
_except_handler2
_getmbcp
getc
srand
_mbsrev
_mbctokata
RegOpenKeyExW
SHGetSpecialFolderPathA
SHGetFileInfoA
SHGetInstanceExplorer
ExtractIconEx
SHPathPrepareForWriteW
SHGetMalloc
SHGetSpecialFolderPathW
SHFileOperationA
SHLoadInProc
SHGetDataFromIDListW
SHGetDiskFreeSpaceA
ExtractAssociatedIconW
ExtractAssociatedIconA
DragAcceptFiles
SHGetFileInfoW
SHGetFileInfo
CheckEscapesW
DragQueryPoint
SHFreeNameMappings
Shell_NotifyIconW
SHAppBarMessage
SHCreateProcessAsUserW
SHGetIconOverlayIndexW
DragFinish
ExtractIconExW
SHGetFolderPathW
ExtractIconA
ShellHookProc
SHFileOperation
SHGetDiskFreeSpaceExW
FindExecutableA
SHBrowseForFolderA
SHGetFolderLocation
ExtractIconExA
DragQueryFile
SHIsFileAvailableOffline
SHGetPathFromIDListA
DuplicateIcon
ExtractAssociatedIconExW
DragQueryFileA
SHGetDataFromIDListA
FindExecutableW
SHFormatDrive
SHGetSpecialFolderLocation
ExtractIconW
WOWShellExecute
SHQueryRecycleBinW
SHBindToParent
SHAddToRecentDocs
SHBrowseForFolderW
SHGetPathFromIDList
HMETAFILE_UserUnmarshal
HWND_UserFree
CoRegisterSurrogate
HWND_UserSize
HBRUSH_UserSize
StgOpenPropStg
HMETAFILEPICT_UserUnmarshal
CoUninitialize
MkParseDisplayName
CLSIDFromProgIDEx
CoGetCallContext
HMETAFILEPICT_UserMarshal
OleBuildVersion
HMETAFILEPICT_UserSize
StgCreateDocfile
DllDebugObjectRPCHook
CoGetObjectContext
HENHMETAFILE_UserMarshal
StgConvertVariantToProperty
STGMEDIUM_UserMarshal
OleDestroyMenuDescriptor
HBRUSH_UserFree
HICON_UserSize
OleGetIconOfClass
CoGetClassVersion
CoGetApartmentID
GetHGlobalFromStream
OleIsRunning
WdtpInterfacePointer_UserUnmarshal
CoRevertToSelf
OleRegEnumFormatEtc
CreateStdProgressIndicator
HGLOBAL_UserMarshal
CoFreeUnusedLibraries
CoRevokeMallocSpy
HMENU_UserFree
ReadFmtUserTypeStg
CoGetTreatAsClass
OleConvertOLESTREAMToIStorageEx
HMENU_UserSize
CreateFileMoniker
OleFlushClipboard
OleDuplicateData
OleRegEnumVerbs
OleGetIconOfFile
CoRegisterClassObject
CoInitializeWOW
WriteOleStg
HWND_UserUnmarshal
GetHGlobalFromILockBytes
HMETAFILEPICT_UserFree
OleNoteObjectVisible
OleSaveToStream
StgCreatePropStg
OleCreateMenuDescriptor
WriteClassStg
HACCEL_UserUnmarshal
MonikerRelativePathTo
CoGetInstanceFromFile
CoAllowSetForegroundWindow
OleSetContainedObject
CoRegisterPSClsid
CoCreateInstanceEx
HBITMAP_UserMarshal
HMENU_UserMarshal
OleQueryCreateFromData
OleDraw
CoRevokeClassObject
WdtpInterfacePointer_UserFree
WdtpInterfacePointer_UserMarshal
CLSIDFromString
MonikerCommonPrefixWith
IsEqualGUID
CreatePointerMoniker
CoInitialize
WriteFmtUserTypeStg
OleCreateEmbeddingHelper
CoTaskMemRealloc
CoSetCancelObject
CLIPFORMAT_UserSize
IsAccelerator
StgSetTimes
HDC_UserSize
CoGetStandardMarshal
SNB_UserSize
StrRChrW
StrStrA
StrChrIW
StrCmpNIA
StrStrIW
StrCmpNW
StrRStrIW
StrRStrIA
StrChrIA
StrChrW
StrStrW
StrRChrA
StrRChrIW
StrCmpNA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ