Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
CfgWzRes.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
CfgWzRes.dll
Resource
win10v2004-20220812-en
Target
CfgWzRes.dll
Size
514KB
MD5
7b3abda0eca779f9ff7afa68045574b9
SHA1
9aa7932e10b1f7b88ac089bd643bfe87b0629ea3
SHA256
38d024f7fb6c1101a679df8214e3c9151a662cf26ec1fc75179e40bc30d5f091
SHA512
9fe1ea0b4e353f56a5f9ef8cbfc9443a2a2461d0c8694a4f4ef73971a5cb8a9a4bc6b5388b376a6d869c516f4daa4825a8f681cc3e866096cf96f686d08025a2
SSDEEP
12288:tEDSU1iblRRsKyWBgZd0sIXEQdXzCULH8:GrUL4Zd0sIX5dmULH8
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ord6
ord9
ord13
ord38
ord85
SHGetFolderPathA
SHGetFolderPathW
ImageNtHeader
MapAndLoad
UnMapAndLoad
GetFileAttributesA
SetEndOfFile
GetSystemTimeAsFileTime
QueryPerformanceCounter
ExitProcess
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetCurrentProcessId
SetFilePointer
ReadFile
WriteFile
GetTempPathA
GetCurrentDirectoryA
OpenMutexA
CreateMutexA
GetWindowsDirectoryA
GetLastError
InterlockedIncrement
InterlockedDecrement
LocalAlloc
lstrlenA
FormatMessageA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
GetCurrentThreadId
GetProcAddress
FreeLibrary
LocalFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemInfo
WaitForSingleObject
LoadLibraryExA
lstrcatA
DeleteFileA
SetFileAttributesA
GetUserDefaultLCID
GetModuleHandleA
GetPrivateProfileStringA
lstrlenW
GetModuleFileNameA
LoadLibraryA
GetPrivateProfileIntA
lstrcpyA
RaiseException
GetShortPathNameA
DisableThreadLibraryCalls
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
UnmapViewOfFile
GetFileSize
MapViewOfFile
CloseHandle
CreateFileMappingA
CreateFileA
GetTickCount
WaitForMultipleObjects
CreateProcessA
OutputDebugStringA
CharPrevA
EnumThreadWindows
EnumChildWindows
IsWindow
GetClassNameA
IsWindowEnabled
IsWindowVisible
GetWindowLongA
GetParent
MsgWaitForMultipleObjects
FindWindowA
GetSystemMetrics
LoadStringA
MessageBoxA
PeekMessageA
TranslateMessage
DispatchMessageA
wsprintfA
wvsprintfA
CharLowerBuffA
CharNextA
CoUninitialize
OleRun
CoCreateInstance
CoInitializeEx
CLSIDFromProgID
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CLSIDFromString
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantChangeType
VarUI4FromStr
SysStringLen
SysAllocString
SysFreeString
SafeArrayPutElement
VariantClear
VarBstrCmp
GetErrorInfo
VariantInit
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Nomemory@std@@YAXXZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?ends@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?width@ios_base@std@@QAEHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?setf@ios_base@std@@QAEHHH@Z
??1strstream@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1strstreambuf@std@@UAE@XZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?freeze@strstreambuf@std@@QAEX_N@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Init@strstreambuf@std@@IAEXHPAD0H@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?overflow@strstreambuf@std@@MAEHH@Z
?pbackfail@strstreambuf@std@@MAEHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@strstreambuf@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?seekoff@strstreambuf@std@@MAE?AV?$fpos@H@2@JHH@Z
?seekpos@strstreambuf@std@@MAE?AV?$fpos@H@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
_wcsicmp
??0exception@@QAE@ABV0@@Z
_CxxThrowException
rand
srand
time
_purecall
memcmp
_mbschr
_mbsnbcpy
_mbspbrk
_mbslen
free
_vscwprintf
vswprintf
memcpy
?what@exception@@UBEPBDXZ
memset
_mktime64
_localtime64
strcpy
strlen
_vscprintf
vsprintf
malloc
_mbscmp
wcslen
strcat
_time64
sprintf
strftime
wcscpy
isdigit
??0exception@@QAE@ABQBD@Z
_splitpath
_mbsstr
_mbsnbicmp
_mbsrchr
_except_handler3
_resetstkoflw
realloc
strncpy
atoi
_snprintf
swprintf
wcsrchr
_strtime
_strdate
_vsnprintf
_callnewh
??1type_info@@UAE@XZ
__security_error_handler
__dllonexit
_onexit
?terminate@@YAXXZ
_initterm
_adjust_fdiv
__CppXcptFilter
_strcmpi
_stricmp
__CxxFrameHandler
??_V@YAXPAX@Z
??3@YAXPAX@Z
memmove
??1exception@@UAE@XZ
??0exception@@QAE@XZ
SimonGetClassObject
SimonModuleGetLockCount
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ