Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
WSCHlpr.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
WSCHlpr.dll
Resource
win10v2004-20220812-en
Target
WSCHlpr.dll
Size
133KB
MD5
d32897ef170a12062832b64ced0c2397
SHA1
801f6cc35aeb8fcd83e69e44124e7a451ed520aa
SHA256
7e122975bdf67ac7637fdb38aa4e51003e0510708cf817bf7ff94d7d410f042e
SHA512
1e6b455ac56d2e17c1e7394acddad78aabd03e75f439348bf6be18d184e3907121f59589c3f8a147abc1e2fa47de1f780c10536bdda25c590b1709d25efd7cce
SSDEEP
1536:SXPDykakZ6zWOtJpbg0iiUarmQhId+4ac3NwJLQBBC3X4BRgYWtqfCbLaWlCklwP:23y1bPogIGuaX4BktgCCWltlxzZpUZ
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
LocalFree
CloseHandle
ReadFile
GetFileSize
VirtualQuery
Sleep
GetTickCount
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
lstrlenA
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
GetLastError
RaiseException
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
CreateFileW
InterlockedExchange
SetEndOfFile
ExitProcess
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
RtlUnwind
GetCurrentThreadId
GetCommandLineA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
IsBadWritePtr
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
HeapSize
GetOEMCP
GetCPInfo
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
SetStdHandle
FlushFileBuffers
GetProcessHeap
GetLocalTime
CreateFileA
OutputDebugStringA
GetFileAttributesA
wsprintfA
FindWindowA
PostMessageA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
StartServiceA
QueryServiceStatus
ControlService
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegEnumValueA
RegEnumKeyA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ChangeServiceConfigA
CoCreateInstance
StringFromGUID2
VarBstrCat
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantClear
VariantInit
SysAllocStringLen
SysStringByteLen
SysAllocString
GetFactory
GetObjectCount
Register
Unregister
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ