Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
affcab7aa8586d0d713d17aa2bdddabb9f23c6745e8d65782e8bcb8a6103c0f4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
affcab7aa8586d0d713d17aa2bdddabb9f23c6745e8d65782e8bcb8a6103c0f4.exe
Resource
win10v2004-20220812-en
Target
affcab7aa8586d0d713d17aa2bdddabb9f23c6745e8d65782e8bcb8a6103c0f4
Size
3.2MB
MD5
6da8c3bb6560ba7446b997229014eda5
SHA1
99547800d00267cd2056890093c3457a47027de5
SHA256
affcab7aa8586d0d713d17aa2bdddabb9f23c6745e8d65782e8bcb8a6103c0f4
SHA512
3f970f50ce7f4517cc491afd1052f76281ba3c731256211fcfeea45242c6efa3557f1d70cee23a03f5e66c9745a33a40efeb82d37b74f4442ee24ba0802ae9b5
SSDEEP
49152:T+mEwc/vIj22g+J/O96URZES+NEjkfTdUxKgxE2Ja1KFS7sFbGZrL+Q0c4NEQPr0:i2c/q2R+EEURxIl710CxEDtVFu
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
CredUIPromptForCredentialsW
WTSQueryUserToken
WTSFreeMemory
WTSEnumerateSessionsW
GetModuleFileNameExW
GetProcessMemoryInfo
LoadUserProfileW
DestroyEnvironmentBlock
UnloadUserProfile
CreateEnvironmentBlock
socket
gethostbyname
__WSAFDIsSet
select
accept
listen
recvfrom
connect
sendto
gethostname
ioctlsocket
shutdown
getsockname
send
htons
ntohs
recv
closesocket
WSACleanup
WSAStartup
WSAIoctl
WSAGetLastError
WSASetLastError
setsockopt
getsockopt
bind
lstrcpyW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetExitCodeProcess
ReadProcessMemory
UnregisterWaitEx
RegisterWaitForSingleObject
GetFileAttributesW
SetFileAttributesW
MultiByteToWideChar
WideCharToMultiByte
RaiseException
GetCurrentThreadId
FindClose
FindFirstFileW
FindNextFileW
GetVersionExW
GetModuleHandleA
GetProcAddress
FormatMessageA
FormatMessageW
ReadFile
TerminateProcess
CreateNamedPipeA
CallNamedPipeA
FreeConsole
GetModuleHandleW
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemInfo
GetVersionExA
FreeLibrary
OpenEventA
WaitForMultipleObjects
SetWaitableTimer
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LocalAlloc
SystemTimeToFileTime
CreateDirectoryW
DeleteFileW
FindFirstFileA
FindNextFileA
GetFileAttributesA
GetFileAttributesExW
GetFileTime
RemoveDirectoryW
MoveFileW
GetProcessTimes
UnregisterWait
GetOverlappedResult
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ReleaseMutex
CreateMutexW
LoadLibraryW
GetModuleFileNameA
CreateMutexA
GetCurrentThread
SetLastError
SleepEx
TerminateThread
GetExitCodeThread
PeekNamedPipe
LoadLibraryA
ExpandEnvironmentStringsA
RtlVirtualUnwind
GlobalMemoryStatus
LCMapStringA
GetUserDefaultLCID
GetStringTypeExA
MoveFileExA
CreateThread
Sleep
CreateEventW
GetLastError
SetEnvironmentVariableA
CreateSemaphoreA
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcess
OpenProcess
ProcessIdToSessionId
CreateProcessW
GetCurrentProcessId
CreatePipe
SetFilePointer
GetConsoleScreenBufferInfo
FlushConsoleInputBuffer
WriteConsoleW
ReadConsoleW
LocalFree
ReleaseSemaphore
DuplicateHandle
CreateEventA
WaitForSingleObject
SetEvent
GetProcessHeap
HeapFree
HeapAlloc
CloseHandle
GetCommandLineW
GetFileType
GetStdHandle
ResetEvent
CreateNamedPipeW
DisconnectNamedPipe
ConnectNamedPipe
WriteFile
FlushFileBuffers
CreateWaitableTimerA
CreateFileW
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
SetConsoleCtrlHandler
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
GetDesktopWindow
LoadStringA
SHGetFolderPathW
CommandLineToArgvW
CoCreateInstance
SysFreeString
SysStringLen
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerExW
OpenServiceW
OpenSCManagerW
DeleteService
CryptReleaseContext
CreateServiceW
CloseServiceHandle
ChangeServiceConfig2W
ChangeServiceConfigW
CreateProcessAsUserW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
ConvertStringSidToSidW
ConvertSidToStringSidW
GetTokenInformation
ImpersonateLoggedOnUser
RevertToSelf
LogonUserW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pubsync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?pubimbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
_Cnd_broadcast
_Cnd_wait
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
??Bid@locale@std@@QEAA_KXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?toupper@?$ctype@D@std@@QEBADD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
_Cnd_destroy_in_situ
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
?_BADOFF@std@@3_JB
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_N@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?_Xbad_function_call@std@@YAXXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PEAV32@@Z
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Winerror_map@std@@YAHH@Z
?_Winerror_message@std@@YAKKPEADK@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?classic@locale@std@@SAAEBV12@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?id@?$numpunct@D@std@@2V0locale@2@A
_Xtime_get_ticks
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
_Cnd_init_in_situ
memcmp
__vcrt_InitializeCriticalSectionEx
wcsstr
strstr
strrchr
strchr
__C_specific_handler
__std_type_info_compare
memchr
__std_exception_destroy
__std_exception_copy
memset
_purecall
__std_terminate
memcpy
memmove
_CxxThrowException
__CxxFrameHandler3
signal
strerror
_configure_narrow_argv
terminate
_initialize_narrow_environment
_beginthreadex
_set_app_type
_seh_filter_exe
_initialize_onexit_table
_get_initial_narrow_environment
_register_onexit_function
_register_thread_local_exe_atexit_callback
_crt_atexit
_c_exit
_exit
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_errno
_initterm
_initterm_e
_beginthread
_endthread
exit
_cexit
__p___argv
__sys_nerr
__p___argc
raise
_stricmp
_strnicmp
isalnum
tolower
strncpy
strcmp
strncmp
isalpha
_strdup
isxdigit
isupper
islower
isdigit
isprint
toupper
strpbrk
wcscpy_s
isspace
ispunct
fgets
_getcwd
_read
_close
_wfopen
_open
feof
__acrt_iob_func
__stdio_common_vswprintf_s
__stdio_common_vswprintf
_lseek
_fileno
_setmode
fputs
__stdio_common_vsscanf
__stdio_common_vfprintf
ftell
clearerr
putc
fseek
ferror
fopen_s
__stdio_common_vsprintf
__stdio_common_vsprintf_s
fread
fopen
_get_stream_buffer_pointers
fclose
fflush
_set_fmode
_open_osfhandle
fgetc
fgetpos
fputc
fsetpos
_fseeki64
ungetc
__p__commode
setvbuf
fwrite
__stdio_common_vsnprintf_s
_lock_file
remove
_fstat64i32
_wstat64i32
_stat64i32
_chmod
_unlock_file
_umask
clock
_localtime64
_ftime64
_mkgmtime64
_mktime64
strftime
_gmtime64
_time64
strtol
_i64tow_s
strtoll
strtoul
atoi
free
realloc
calloc
_set_new_mode
_callnewh
malloc
__setusermatherr
_fdopen
localeconv
_configthreadlocale
qsort
rand
getenv
_getch
CertFreeCertificateChain
CertGetCertificateChain
CertAddCertificateContextToStore
CertFreeCertificateContext
CertCreateCertificateContext
CertCloseStore
CertOpenStore
CertVerifyCertificateChainPolicy
WNetCancelConnection2W
WNetAddConnection2W
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ