Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
SNDSrvc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
SNDSrvc.exe
Resource
win10v2004-20221111-en
Target
SNDSrvc.exe
Size
209KB
MD5
d09cfa6d5866acbdd75aa3888225dfba
SHA1
8a6f65b5e5da1d26e62c8f17e4c6e61fd59ba824
SHA256
f8bd52359074dba380579f1efad4b0df161a7b61fc7ffab6c1e590578a5a4b58
SHA512
a8b066b027b676835b12658e883fa1829490077db2c8db6a37d26b2f6ccf5a5d630938bfe43d3d3cbb8ed1c35586137a0ce3e478d5f71b8c9305a22079d87299
SSDEEP
6144:ApUpTwM+oqNgGS5f6bWJbJNB+t2Fp6LOvsVz:ApUpTwMvqNy5fWsbkt2Fp6lt
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ntohl
WSAStartup
WSACleanup
inet_addr
closesocket
sendto
WSASocketA
htonl
inet_ntoa
GetAdaptersInfo
GetIfEntry
GetIpForwardTable
GetIpNetTable
SendARP
GetNetworkParams
NotifyRouteChange
NotifyAddrChange
GetIpAddrTable
IsDBCSLeadByte
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GetModuleFileNameA
GetProcAddress
lstrcpynA
GetSystemTimeAsFileTime
SetWaitableTimer
CloseHandle
DeviceIoControl
CreateFileA
CreateEventA
CreateWaitableTimerA
CancelWaitableTimer
SetProcessWorkingSetSize
GetCurrentProcess
Sleep
OutputDebugStringA
GetCurrentThread
lstrcpyA
lstrcatA
GetCurrentThreadId
lstrcpyW
lstrcmpiA
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
SetFilePointer
WriteFile
ReadFile
GetFileAttributesA
SetEndOfFile
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
FormatMessageA
lstrlenA
LocalAlloc
InterlockedDecrement
InterlockedIncrement
GetLastError
SetConsoleCursorPosition
FillConsoleOutputCharacterA
SetStdHandle
LoadLibraryA
GetConsoleScreenBufferInfo
QueryPerformanceCounter
GetStartupInfoA
ExitProcess
GetCommandLineA
GetShortPathNameA
SetLastError
lstrcmpA
GlobalAlloc
GlobalFree
GetSystemInfo
AllocConsole
GetConsoleMode
SetConsoleCtrlHandler
FreeConsole
GetNumberOfConsoleInputEvents
ReadConsoleInputA
GetConsoleTitleA
SetConsoleTitleA
TerminateThread
ResumeThread
SetConsoleActiveScreenBuffer
CreateConsoleScreenBuffer
SetConsoleMode
SetConsoleWindowInfo
GetStdHandle
SetConsoleTextAttribute
SetConsoleScreenBufferSize
LocalFree
EnterCriticalSection
LeaveCriticalSection
ReleaseMutex
SetEvent
ResetEvent
CreateMutexA
OpenMutexA
GetTickCount
WaitForMultipleObjectsEx
WaitForSingleObject
GetCurrentProcessId
SetErrorMode
FillConsoleOutputAttribute
WriteConsoleA
SetWindowLongA
DefWindowProcA
MsgWaitForMultipleObjects
DestroyWindow
wsprintfA
CharNextA
PeekMessageA
DispatchMessageA
TranslateMessage
GetClassInfoExA
RegisterClassExA
CreateWindowExA
LoadStringA
GetMessageA
PostThreadMessageA
UnregisterClassA
PostMessageA
PostQuitMessage
MsgWaitForMultipleObjectsEx
GetWindowLongA
OpenProcessToken
GetTokenInformation
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
AllocateAndInitializeSid
InitializeAcl
AddAccessAllowedAce
FreeSid
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenServiceA
DeleteService
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegisterEventSourceA
GetUserNameA
InitializeSecurityDescriptor
IsValidSid
GetLengthSid
CopySid
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
SetSecurityDescriptorDacl
RegOpenKeyA
DeregisterEventSource
ReportEventA
LookupAccountNameA
OpenThreadToken
CoRevokeClassObject
CoDisconnectObject
CoSetProxyBlanket
CoInitializeEx
CoRegisterClassObject
CoResumeClassObjects
StringFromGUID2
CoInitializeSecurity
CoSuspendClassObjects
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
OleRun
SysStringLen
VariantInit
VariantClear
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SafeArrayGetUBound
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocStringLen
SysFreeString
SysAllocString
VarUI4FromStr
SafeArrayCreate
SafeArrayPutElement
PathFindExtensionA
SHDeleteEmptyKeyA
SHDeleteKeyA
StrTrimA
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Nomemory@std@@YAXXZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?_Xran@_String_base@std@@QBEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?sync_with_stdio@ios_base@std@@SA_N_N@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
strcpy
_mbsnbcat
wcsncpy
_callnewh
_endthreadex
fclose
_iob
_fdopen
_open_osfhandle
_vsnprintf
_beginthreadex
_snprintf
_splitpath
sscanf
wcslen
??1type_info@@UAE@XZ
__security_error_handler
__dllonexit
_onexit
?terminate@@YAXXZ
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
sprintf
_mbsicmp
memmove
realloc
??_V@YAXPAX@Z
_except_handler3
_resetstkoflw
free
malloc
strlen
memcpy
memset
memcmp
??0exception@@QAE@ABV0@@Z
_CxxThrowException
??0exception@@QAE@XZ
??1exception@@UAE@XZ
??3@YAXPAX@Z
__CxxFrameHandler
_purecall
_stricmp
strcat
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ