Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
fae94abccf5e5057bc6fdeb84fe3d2f59fe4b5dbe79a9d9aeac222b8ad4ac2cd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fae94abccf5e5057bc6fdeb84fe3d2f59fe4b5dbe79a9d9aeac222b8ad4ac2cd.exe
Resource
win10v2004-20221111-en
Target
fae94abccf5e5057bc6fdeb84fe3d2f59fe4b5dbe79a9d9aeac222b8ad4ac2cd
Size
313KB
MD5
48a73c1b2326155065c3047a154ab526
SHA1
87e69929d9b57f23f69f41336cd5bba895c82272
SHA256
fae94abccf5e5057bc6fdeb84fe3d2f59fe4b5dbe79a9d9aeac222b8ad4ac2cd
SHA512
451584229936c3895ab4fd71118a05dbaab2bda421860f1b96edce53c387eebc4dbe35d1c2f45dd12b32efefbc44b35d6abd140d6245b1b6ba70acc516d902ab
SSDEEP
6144:zLITZqOwLnmfhEzC0L8NU0+kOw2DtJ9ol0GKq2qqDLuiuGM:XITJwLI678GNkOwqn9LGKEqnu/
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InterlockedIncrement
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
CloseHandle
HeapFree
GetProcessHeap
MultiByteToWideChar
WideCharToMultiByte
TlsFree
HeapAlloc
GetLastError
TlsAlloc
CreateEventA
SetEvent
GetTickCount
CreateProcessA
SetUnhandledExceptionFilter
InterlockedExchange
ExitThread
FindResourceExW
FindResourceW
LoadResource
LockResource
CreateWaitableTimerA
SetWaitableTimer
WaitForMultipleObjects
SystemTimeToFileTime
ResumeThread
ResetEvent
OpenEventA
WaitForSingleObject
FormatMessageA
LocalFree
SetEnvironmentVariableA
CompareStringW
SetEndOfFile
WriteConsoleW
SetStdHandle
CreateFileA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SizeofResource
GetFileSize
SetFilePointer
GetModuleHandleW
WriteFile
Sleep
ReadFile
CreateFileW
GetProcAddress
DeleteFileW
GetVolumeInformationW
GetStringTypeW
InterlockedCompareExchange
InitializeCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
HeapDestroy
HeapReAlloc
HeapSize
RtlUnwind
ExitProcess
GetCommandLineA
HeapSetInformation
GetTimeFormatA
GetDateFormatA
LCMapStringW
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
TlsGetValue
TlsSetValue
SetLastError
GetCurrentThreadId
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
GetTimeZoneInformation
LoadLibraryW
HeapCreate
GetACP
GetOEMCP
IsValidCodePage
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CreateThread
?set_proxy_list_idle_grow@server@proxy@af@@QAEXH@Z
??0server@proxy@af@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@II0AAV?$vector@HV?$allocator@H@std@@@4@_N0H0000210@Z
?create_filter@in_direct_filter@proxy@af@@SA?AV?$shared_ptr@Vin_direct_filter@proxy@af@@@boost@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?add_in_filter@server@proxy@af@@QAEXV?$shared_ptr@Vbasic_in_filter@proxy@af@@@boost@@@Z
??0http_client@proxy@af@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I_N0I@Z
?add_header@http_client@proxy@af@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?set_follow_redirect@http_client@proxy@af@@QAEX_N@Z
?set_proxy@http_client@proxy@af@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?upload@http_client@proxy@af@@QAEHABV?$af_string_temp@V?$af_string_impl_win_temp@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_W@@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_W@@_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?download@http_client@proxy@af@@QAEHABV?$af_string_temp@V?$af_string_impl_win_temp@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_W@@V?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@_W@@_N@Z
?is_running@http_client@proxy@af@@QAE_NXZ
?get_error_code@http_client@proxy@af@@QAEHXZ
?result@http_client@proxy@af@@QAEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?get_error_msg@http_client@proxy@af@@QAEPBDXZ
??1http_client@proxy@af@@QAE@XZ
??0logger@proxy@af@@QAE@PBDW4log_level_enum@012@_N@Z
?run@server@proxy@af@@QAEXH@Z
PathBuildRootW
PathFileExistsW
PathAddBackslashW
WSAStartup
WSACleanup
gethostname
GetAdaptersInfo
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
??0filter@proxy@af@@QAE@XZ
??1filter@proxy@af@@UAE@XZ
??_Flogger@proxy@af@@QAEXXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ