Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
Binary.aicustact.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Binary.aicustact.dll
Resource
win10v2004-20221111-en
Target
Binary.aicustact.dll
Size
377KB
MD5
af61221c6f4e9ab3ac2440b25d751868
SHA1
094f68ff354ac4c8dbdfe4689cb821f8d25880b8
SHA256
1e587d8593152b2538da7bdcb13880c45d256e84baa7e94c00ec4de08ab018d8
SHA512
c695d101c761812c1805d8ee54b8fed73869d3680372368ec3de90dc25ab1c27aa08f771dc274854ba051e0afeb17827c01b17e2bed33cb87ff0bdc884f6b791
SSDEEP
6144:n4Cl8lNPD2pVtho1xXVFpukDj3q/ntuXNj8ECBB/ELAOChVKgZErpsykgTr:7l86Jo1xXp7Dj3QuXNj8/fyYhVLEiyko
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
ord47
ord17
ord158
ord49
ord171
ord125
ord26
ord74
ord43
ord190
ord113
ord58
ord139
ord221
ord51
ord147
ord20
ord124
ord8
ord48
ord34
ord163
ord121
ord117
ord165
ord205
ord145
ord103
ord116
ord118
ord159
ord32
ord160
ord70
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteW
ShellExecuteExW
SHGetFolderPathW
WSAStartup
WSACleanup
gethostbyname
ntohs
htonl
NetGetDCName
NetApiBufferFree
NetUserGetInfo
NetQueryDisplayInformation
NetLocalGroupGetInfo
NetGroupGetInfo
NetUserModalsGet
ord176
PathIsUNCW
PathFileExistsW
GetTcpTable
WriteFile
LocalFree
LocalAlloc
LoadLibraryW
GetProcAddress
FreeLibrary
RaiseException
FindFirstFileW
DeleteFileW
RemoveDirectoryW
FindNextFileW
ReadFile
SetFilePointer
FindClose
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
GetTempPathW
GetTempFileNameW
MoveFileW
GetSystemDirectoryW
SetEvent
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
Process32NextW
GetCurrentProcess
GetCurrentProcessId
GetExitCodeProcess
WaitForSingleObject
ReadProcessMemory
SizeofResource
LockResource
LoadResource
FindResourceExW
FindResourceW
GetWindowsDirectoryW
GetModuleHandleW
GetSystemTimeAsFileTime
GetTickCount
CloseHandle
GetModuleFileNameW
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
OutputDebugStringW
GetCurrentThreadId
ResetEvent
FlushFileBuffers
MultiByteToWideChar
GetStringTypeW
GlobalFindAtomW
WideCharToMultiByte
GlobalAddAtomW
GlobalDeleteAtom
lstrcpynW
lstrcpyW
MulDiv
InitializeCriticalSectionAndSpinCount
DecodePointer
ExitProcess
lstrlenW
lstrcmpW
DuplicateHandle
GetStdHandle
CreateProcessW
GetLocaleInfoW
lstrcatW
GetDiskFreeSpaceW
OpenMutexW
SetLastError
TerminateProcess
SetEndOfFile
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
EncodePointer
GetCPInfo
TlsFree
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlUnwind
InterlockedFlushSList
GetModuleHandleExW
GetFileType
CreateEventW
TlsAlloc
CreateFileW
lstrcmpiW
GetLastError
IsDebuggerPresent
LCMapStringW
ExpandEnvironmentStringsW
TlsSetValue
Sleep
TlsGetValue
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetFilePointerEx
SetStdHandle
GetConsoleCP
GetConsoleMode
WriteConsoleW
LoadLibraryExW
GetWindowTextW
RedrawWindow
EnumWindows
GetForegroundWindow
SendMessageW
CreateWindowExW
GetWindowThreadProcessId
GetWindowLongW
wsprintfW
BringWindowToTop
GetClassNameW
EnumChildWindows
MessageBoxW
GetDC
IsWindow
GetDesktopWindow
PostMessageW
AbortDoc
EndDoc
EndPage
StartPage
StartDocW
DeleteDC
GetDeviceCaps
PrintDlgW
GetOpenFileNameW
LogonUserW
QueryServiceStatusEx
RegEnumValueW
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
GetTokenInformation
OpenProcessToken
LookupAccountSidW
LookupAccountNameW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
GetSecurityDescriptorDacl
AllocateAndInitializeSid
FreeSid
GetSidSubAuthorityCount
GetSidLengthRequired
InitializeSid
GetSidIdentifierAuthority
GetSidSubAuthority
EnumServicesStatusW
LsaOpenPolicy
LsaNtStatusToWinError
LsaAddAccountRights
LsaClose
ConvertStringSidToSidW
RegQueryInfoKeyW
LookupPrivilegeValueW
OpenServiceW
StartServiceW
ControlService
AdjustTokenPrivileges
ConvertSidToStringSidW
CloseServiceHandle
OpenSCManagerW
QueryServiceStatus
SetServiceObjectSecurity
QueryServiceObjectSecurity
ChangeServiceConfig2W
CLSIDFromString
CoCreateInstance
CoTaskMemFree
CoInitialize
CoUninitialize
VariantClear
SysFreeString
SysAllocString
VariantInit
AI_AuthorSinglePackage
AI_ResolveKnownFolders
AI_SearchOfficeAddins
AddCaspolSecurityPolicy
BrowseForFile
CheckFreeTCPPort
CheckIfUserExists
ChooseTextStyles
CloseApplication
CollectFeaturesWithoutCab
ComputeReplaceProductsList
ConfigureNonAdminServiceStart
ConfigureServFailActions
CreateExeProcess
DeleteEmptyDirectory
DeleteFromComboBox
DeleteFromListBox
DeleteShortcuts
DetectModernWindows
DetectProcess
DetectService
DisableFeatures
DoEvents
DpiContentScale
EnableDebugLog
EnumStartedServices
ExtractComboBoxData
ExtractListBoxData
GetArpIconPath
GetFreeTCPPort
GetLocalizedCredentials
GetPathFreeSpace
InstanceMajorUpgrade
JoinFiles
LaunchApp
LaunchLogFile
LoadShortcutDirs
LogOnAsAService
MixedAllUsersInstallLocation
MsgBox
MsmTrialMessage
PlayAudioFile
PopulateComboBox
PopulateListBox
PrepareUpgrade
PreserveInstallType
PreventInstancesUpgrade
PrintRTF
ProcessFailActions
RemoveCaspolSecurityPolicy
ResolveKnownFolder
ResolveServiceProperties
RestartElevated
RestoreLocation
RunAllExitActions
RunFinishActions
SetLatestVersionPath
StartWinService
StopProcess
StopWinService
TrialMessage
UninstallPreviousVersions
UpdateFeatureStates
UpdateInstallMode
UpdateMsiEditControls
ValidateInstallFolder
ViewReadMe
WarningMessageBox
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ