Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
b02f4d1c1660cd8a53064ff3ef5221749ff2439c80565b76a2b6729043640ec5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b02f4d1c1660cd8a53064ff3ef5221749ff2439c80565b76a2b6729043640ec5.exe
Resource
win10v2004-20220812-en
Target
b02f4d1c1660cd8a53064ff3ef5221749ff2439c80565b76a2b6729043640ec5
Size
3.8MB
MD5
04d239171dd8a5bb8dc47be0d09af53a
SHA1
f7cf95351b9d56d97754dd1d1fa8b8ec0e7a7bdf
SHA256
b02f4d1c1660cd8a53064ff3ef5221749ff2439c80565b76a2b6729043640ec5
SHA512
f1ca7c70e35d527ac4cb32f186aef12c8f9ae57583cbd09af54653fce101efc626698904454fb395b035b234d92ece9e582623b65e5e5c0c252f3ea21ebd8feb
SSDEEP
98304:vgggTkVQzLzyQPs3pL4ycW4q4KTCf1GDBannGx5scwefG8LjLFj:QPicy8qt4QDBanGfPfVLtj
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
TerminateThread
GlobalAlloc
WideCharToMultiByte
MultiByteToWideChar
GetTempPathW
GetModuleFileNameW
GlobalReAlloc
GlobalFree
InterlockedIncrement
InterlockedDecrement
GetTickCount
GetModuleHandleW
GetProcAddress
lstrlenW
DeleteFileW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
WaitForSingleObject
OpenProcess
RemoveDirectoryW
TerminateProcess
GetVersionExW
LocalFree
GetCommandLineW
Sleep
FindResourceExW
CloseHandle
LoadResource
LockResource
SizeofResource
SetFilePointer
ReadFile
GetFileSize
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
FreeResource
GlobalLock
GlobalUnlock
GetCurrentThreadId
MulDiv
RaiseException
EnterCriticalSection
LeaveCriticalSection
FindResourceW
CreateFileW
GetCurrentProcess
LoadCursorW
SetCursor
PtInRect
ReleaseCapture
ReleaseDC
DispatchMessageW
GetCapture
GetMessageW
SetCapture
SendMessageTimeoutW
SetWindowPos
SendMessageW
PostQuitMessage
MessageBoxW
TranslateMessage
UpdateWindow
MoveWindow
IsWindowVisible
GetDC
RegisterClassExW
GetParent
GetPropW
IsWindow
ScreenToClient
OffsetRect
InvalidateRect
PostMessageW
DefWindowProcW
DestroyWindow
CreateWindowExW
SetPropW
SetWindowLongW
RemovePropW
EndDialog
GetWindowLongW
GetDesktopWindow
GetWindowRect
GetClientRect
IsRectEmpty
BeginPaint
EndPaint
SetFocus
GetCursorPos
SetRect
UpdateLayeredWindow
SetRectEmpty
SetTimer
SystemParametersInfoW
KillTimer
GetCursor
EqualRect
IntersectRect
SetWindowRgn
IsZoomed
EnumThreadWindows
EnumChildWindows
DrawTextW
InflateRect
UnregisterClassA
ShowWindow
CreateRectRgn
SelectClipRgn
CreateCompatibleDC
SetBkMode
CreateDIBSection
CreateCompatibleBitmap
BitBlt
CombineRgn
OffsetRgn
DeleteDC
GetObjectA
SetTextColor
RectVisible
RestoreDC
ExtCreateRegion
SaveDC
DeleteObject
PatBlt
SelectObject
CreateFontIndirectW
GetTextExtentPoint32W
GetTokenInformation
RegCloseKey
RegSetValueExW
CheckTokenMembership
OpenProcessToken
CreateWellKnownSid
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
SHGetPathFromIDListW
SHFileOperationW
SHCreateDirectoryExW
CommandLineToArgvW
ShellExecuteW
ShellExecuteExW
SHGetSpecialFolderPathW
SHGetMalloc
SHBrowseForFolderW
CoInitialize
CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal
CoCreateGuid
PathFindFileNameW
PathRemoveFileSpecW
PathFileExistsW
UrlGetPartW
PathIsDirectoryEmptyW
PathIsDirectoryW
PathStripToRootW
GdipMeasureString
GdipDrawString
GdipSetClipRectI
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDrawImageRectI
GdipCloneImage
GdiplusStartup
GdiplusShutdown
GdipCreateBitmapFromStream
GdipGetImagePixelFormat
GdipDrawLineI
GdipDeletePen
GdipFree
GdipCreatePen1
GdipCloneBrush
GdipFillRectangleI
GdipAlloc
GdipCreateSolidFill
GdipDeleteBrush
GdipCreateFromHDC
GdipDeleteGraphics
AlphaBlend
TransparentBlt
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?push_back@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEX_W@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
_TrackMouseEvent
InitCommonControlsEx
DrawDibClose
DrawDibOpen
DrawDibDraw
_wfopen_s
malloc
sscanf_s
_invalid_parameter_noinfo
isalpha
_vscprintf
??0exception@std@@QAE@ABQBD@Z
vsprintf_s
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
tolower
??1exception@std@@UAE@XZ
wcsrchr
atoi
_atoi64
_stricmp
atof
sprintf_s
strpbrk
wcscpy_s
_beginthread
_purecall
_mbscmp
__RTDynamicCast
memset
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
wcsstr
fclose
free
iswspace
fwrite
memmove_s
memcpy_s
_wcsicmp
vswprintf_s
??_V@YAXPAX@Z
_vscwprintf
??2@YAPAXI@Z
??3@YAXPAX@Z
memcpy
fopen
_wfopen
fread
_ftelli64
_fseeki64
ferror
__CxxFrameHandler3
?what@exception@std@@UBEPBDXZ
_CxxThrowException
WSAStartup
ioctlsocket
connect
htons
WSACleanup
inet_ntoa
gethostbyname
socket
ntohl
__WSAFDIsSet
closesocket
select
inet_addr
send
recv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ