Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
a028403da95918581482a94f86a3ed1d92f53755a1558e3908cdab74a44b709a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a028403da95918581482a94f86a3ed1d92f53755a1558e3908cdab74a44b709a.exe
Resource
win10v2004-20220812-en
Target
a028403da95918581482a94f86a3ed1d92f53755a1558e3908cdab74a44b709a
Size
757KB
MD5
00d148b6f4a84462e3fb6c7f3349cc8c
SHA1
8860c97bd2726f4446dfd04f6f35e9aa07f034dc
SHA256
a028403da95918581482a94f86a3ed1d92f53755a1558e3908cdab74a44b709a
SHA512
9956bd7e403790708d07db1e474e8d5e37995108f1e490ed7fc3bbf9c6ab182b06af7fe95eccea5be8a88190b5a3647dc0677fe7317f4b6fcbdb82e2db1f0a08
SSDEEP
12288:CFhsnMOlGRxuYHTR9qNpNTEjAfos+4fDPwr83DqpNxyxIWTH2psLColv:CL9LL9qNpNTtAsl4r8zQTyxTTHksLCQv
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ImmDisableIME
UuidCreate
InternetQueryOptionW
WideCharToMultiByte
lstrcmpA
CreateFileW
ReadFile
LocalAlloc
WriteFile
RemoveDirectoryW
SystemTimeToFileTime
LocalFree
SetFileTime
lstrcpynW
SetFilePointer
GetTickCount
GetVersionExW
SetEndOfFile
FileTimeToLocalFileTime
FileTimeToSystemTime
CopyFileW
DeleteFileW
FindFirstFileW
FindClose
FindNextFileW
GetTempPathW
GetFileAttributesW
GetTempFileNameW
SetFileAttributesW
EnterCriticalSection
GetExitCodeProcess
SetUnhandledExceptionFilter
GetCurrentProcessId
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
OpenMutexW
CreateMutexW
ReleaseMutex
GlobalLock
GlobalUnlock
lstrcmpW
GetCurrentProcess
FlushInstructionCache
MulDiv
GlobalAlloc
SetLastError
ResetEvent
SetFilePointerEx
GetFileSize
GetExitCodeThread
ResumeThread
SuspendThread
GetFileSizeEx
FlushFileBuffers
LoadLibraryA
GetVersionExA
GetProcAddress
SleepEx
TerminateThread
CreateEventA
WaitForMultipleObjects
CreateMutexA
MoveFileExW
GetFileType
PeekNamedPipe
GetStdHandle
ExpandEnvironmentStringsA
FormatMessageA
TerminateProcess
GetStartupInfoW
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
InterlockedCompareExchange
HeapSize
HeapReAlloc
HeapAlloc
HeapDestroy
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateFileA
LocalFileTimeToFileTime
GetFileTime
DosDateTimeToFileTime
CreateProcessW
LeaveCriticalSection
GetCurrentThreadId
Sleep
CreateThread
FreeLibrary
LoadResource
FindResourceW
GetCommandLineW
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
GetProcessHeap
HeapFree
lstrcmpiW
lstrlenW
SetEvent
WaitForSingleObject
GetModuleFileNameW
OpenEventW
RaiseException
CreateEventW
GetLastError
InterlockedIncrement
InitializeCriticalSection
lstrlenA
InterlockedDecrement
DeleteCriticalSection
MultiByteToWideChar
CloseHandle
GetModuleHandleW
FindResourceExW
SizeofResource
LoadLibraryExW
LockResource
DuplicateHandle
CreateAcceleratorTableW
CreateWindowExW
GetMessageW
RegisterClassExW
LoadCursorW
GetSysColor
GetClassInfoExW
GetClientRect
DestroyWindow
RegisterWindowMessageW
GetWindowRect
ReleaseDC
MoveWindow
GetParent
SetFocus
DefWindowProcW
IsChild
SetCapture
UnregisterClassA
FillRect
GetWindow
PostThreadMessageW
MsgWaitForMultipleObjects
PeekMessageW
GetDC
GetDesktopWindow
GetDlgItem
ClientToScreen
GetFocus
DestroyAcceleratorTable
RedrawWindow
GetWindowTextLengthW
GetClassNameW
GetWindowTextW
SetWindowTextW
CallWindowProcW
PostMessageW
InvalidateRgn
GetForegroundWindow
ReleaseCapture
ShowWindow
EndPaint
BeginPaint
SetWindowLongW
ScreenToClient
LoadStringW
SetWindowPos
SetTimer
GetSystemMetrics
LoadImageW
TranslateMessage
CharUpperW
DispatchMessageW
CharNextW
FindWindowW
MessageBoxW
GetActiveWindow
wsprintfW
KillTimer
GetWindowLongW
CreateDialogParamW
IsWindow
SendMessageW
InvalidateRect
DrawTextW
SetROP2
SetBkMode
BitBlt
GetObjectW
SelectObject
CreateCompatibleDC
CreateFontIndirectW
DeleteObject
DeleteDC
CreateCompatibleBitmap
GetStockObject
GetDeviceCaps
CreateSolidBrush
RegCloseKey
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegDeleteValueW
ShellExecuteExW
SHCreateDirectoryExW
ord92
OleInitialize
OleUninitialize
OleLockRunning
CreateStreamOnHGlobal
CoGetClassObject
CLSIDFromProgID
OleRun
CLSIDFromString
CoRegisterClassObject
CoTaskMemRealloc
CoUninitialize
CoTaskMemAlloc
CoInitialize
CoRevokeClassObject
CoTaskMemFree
StringFromGUID2
CoCreateInstance
VariantTimeToSystemTime
VarUdateFromDate
SystemTimeToVariantTime
VarDateFromStr
SysStringByteLen
VariantClear
SysAllocStringByteLen
VariantInit
DispCallFunc
OleCreateFontIndirect
LoadRegTypeLi
SysAllocStringLen
RegisterTypeLi
VarUI4FromStr
LoadTypeLi
UnRegisterTypeLi
SysFreeString
SysStringLen
SysAllocString
PathCanonicalizeW
PathMatchSpecW
PathFileExistsW
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
__iob_func
_open
_close
_read
_fileno
_stricmp
_strnicmp
_strdup
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_CxxThrowException
_wmkdir
iswspace
_wfopen_s
wcspbrk
qsort
fabs
ftell
fprintf
atof
ferror
_vsnprintf_s
srand
rand
_stat64
isalpha
isalnum
strerror
__sys_nerr
_lseeki64
_fstat64
getenv
fflush
_gmtime64
strtol
strcat
sprintf
fputc
isdigit
isspace
fseek
memchr
fputs
_strtoi64
strncmp
strcmp
fopen
fgets
memmove
strrchr
sscanf
strcpy
__CxxFrameHandler3
??3@YAXPAX@Z
_purecall
wcscpy_s
free
??_V@YAXPAX@Z
_beginthreadex
wcscat_s
wcslen
wcsncpy_s
_wfopen
fclose
??2@YAPAXI@Z
wcsrchr
memcmp
wcscmp
memcpy_s
memmove_s
_recalloc
memset
calloc
malloc
wcsstr
_wcsupr_s
_invalid_parameter_noinfo
_wsplitpath
floor
strchr
exit
_vsnwprintf_s
_errno
strlen
swprintf_s
_vscwprintf
??0exception@std@@QAE@ABQBD@Z
vswprintf_s
??1exception@std@@UAE@XZ
_wtoi
wprintf
_wcsicmp
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_wcslwr_s
_localtime64_s
?what@exception@std@@UBEPBDXZ
memcpy
_time64
_wcsnicmp
wcsftime
ceil
_wcslwr
_ultow
wcscat
sprintf_s
wcsncpy
wcsspn
wcscspn
wcschr
realloc
tolower
strncpy
atoi
strtoul
fread
strstr
isxdigit
fwrite
CryptMsgClose
CertCloseStore
CertFindCertificateInStore
CryptMsgGetParam
CryptQueryObject
CertGetNameStringW
CertFreeCertificateContext
CryptDecodeObject
WinVerifyTrust
gethostbyname
WSASetLastError
select
__WSAFDIsSet
sendto
recvfrom
listen
accept
getsockopt
htons
ntohs
getsockname
setsockopt
bind
socket
recv
send
WSAGetLastError
closesocket
WSACleanup
WSAStartup
ioctlsocket
connect
curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_maprintf
curl_mfprintf
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ