Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
SymSCWb.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
SymSCWb.dll
Resource
win10v2004-20221111-en
Target
SymSCWb.dll
Size
273KB
MD5
ffb5c0620c0c9b28d6db45aec197865d
SHA1
0449633896e34cc400c4df79c869e1247932d8bd
SHA256
c569eceeee7fb7e84fcc22ef27aa217323843fb53ee4688cc69a389d1ff572f1
SHA512
06508647c9f249ee092a347ef34def40de38ba68c39fb1df36e7b03889c5d9e1f0bc1ad6eec2d80e96d7bb2a73591cced3972e1f91cf8f7893185ac47b5b619e
SSDEEP
6144:Yrjv2PDEOVoiOVqiTvBTZ3+MLQQoSye2oE58iupGbr:Yrj7GlOs+vf3oQo3SHGbr
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetModuleFileNameA
lstrcatA
InterlockedIncrement
InterlockedDecrement
IsDBCSLeadByte
GetFileAttributesA
LoadLibraryExA
GetProcAddress
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
CloseHandle
TerminateThread
WaitForSingleObject
SetEvent
LockResource
FindResourceExA
lstrcpyA
ProcessIdToSessionId
GetCurrentProcessId
WaitForMultipleObjects
CreateThread
CreateEventA
GetSystemDirectoryA
CreateProcessA
GetPrivateProfileStringA
GetCurrentProcess
LoadLibraryA
LocalFree
lstrcmpA
LocalAlloc
ResumeThread
OpenProcess
lstrcpynA
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
lstrlenA
lstrlenW
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
DeleteCriticalSection
InitializeCriticalSection
IsBadStringPtrA
RaiseException
SetThreadAffinityMask
DefineDosDeviceA
DeviceIoControl
GetVolumeInformationA
GlobalMemoryStatus
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCPInfo
GetOEMCP
LCMapStringW
ExitThread
LCMapStringA
TlsGetValue
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCurrentThreadId
GetLocalTime
SetFilePointer
CreateFileA
WriteFile
OutputDebugStringA
PulseEvent
ResetEvent
GetSystemInfo
GetCurrentThread
GetWindowsDirectoryA
GetTickCount
WaitForMultipleObjectsEx
VirtualFree
VirtualAlloc
TerminateProcess
SetUnhandledExceptionFilter
ReadFile
FlushFileBuffers
GetFileSize
SetEndOfFile
VirtualQuery
RtlUnwind
VirtualProtect
ExitProcess
GetCommandLineA
HeapCreate
IsBadWritePtr
QueryPerformanceCounter
GetSystemTimeAsFileTime
TlsAlloc
wsprintfA
PostQuitMessage
DispatchMessageA
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjectsEx
GetKeyboardType
MessageBoxA
CharNextA
SetSecurityDescriptorDacl
RegOpenKeyA
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
OpenThreadToken
RegEnumValueA
GetCurrentHwProfileA
RegEnumKeyA
InitializeSecurityDescriptor
ShellExecuteExA
SHGetSpecialFolderPathA
StringFromIID
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoUninitialize
CoInitializeEx
CoTaskMemRealloc
LoadRegTypeLi
SysStringLen
VarBstrCmp
SysAllocStringLen
VariantInit
SysFreeString
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VariantClear
VarUI4FromStr
PathRemoveBackslashA
PathAddBackslashA
PathFindExtensionA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiClassGuidsFromNameA
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
WSAStartup
WSACleanup
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ