Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
b64216fe932fb3dbb9a4d4328f0671ec.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b64216fe932fb3dbb9a4d4328f0671ec.dll
Resource
win10v2004-20220812-en
Target
b64216fe932fb3dbb9a4d4328f0671ec.exe
Size
2.9MB
MD5
b64216fe932fb3dbb9a4d4328f0671ec
SHA1
c37ac956fcfb891f95f323d4ff17a1061f05e53c
SHA256
8de649768f6b70ca5ed23c2adfa2d4caa3dc2d7ef18c43e43d710a9703b1fb0b
SHA512
34c66ad5361b40f13aa6f76990a73de0c4448e9fa4704b8677417c44b71ced67f572a3c34713e55703dfe3d617b2100a3147474a31443b94f54a8b0c3f10fb10
SSDEEP
49152:SUpAvB58NiycafyaC2CJtPp/DhHOw5C2RubhI:7YMnctxJb79OrG
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetIfTable
WinHttpOpenRequest
WinHttpCrackUrl
WinHttpOpen
WinHttpCloseHandle
WinHttpConnect
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpSetStatusCallback
WinHttpSetCredentials
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
CM_Get_DevNode_Status
SetupDiGetDeviceInstanceIdW
PathFileExistsW
PathFindFileNameW
PathRenameExtensionW
PathIsDirectoryW
PathAppendW
PathIsFileSpecW
PathAddExtensionW
PathRemoveExtensionW
PathRemoveFileSpecW
ExitProcess
MoveFileExW
GetFileAttributesExW
TzSpecificLocalTimeToSystemTime
SetFileTime
FileTimeToSystemTime
GetCurrentProcess
GetCurrentThread
GetLastError
CloseHandle
FreeLibrary
GetProcAddress
LocalFree
SetLastError
FormatMessageW
LoadLibraryW
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleFileNameW
GetEnvironmentVariableA
WideCharToMultiByte
LockFileEx
UnlockFileEx
GetFileSize
WriteFile
ReadFile
SetEndOfFile
SetFilePointer
GetSystemTime
SystemTimeToFileTime
CreateFileW
SetFileAttributesW
GetFileAttributesW
DeleteFileW
DecodePointer
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetComputerNameExW
MultiByteToWideChar
GetTempPathW
GetLocalTime
GetModuleHandleExW
GetDateFormatW
CreateThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
ReleaseSemaphore
WaitForSingleObject
GetTickCount
OpenEventW
CreateSemaphoreW
GetTimeZoneInformation
GetVersionExW
OutputDebugStringA
TryEnterCriticalSection
GetCurrentThreadId
SwitchToThread
ResumeThread
GetFileSizeEx
CreateMutexW
ReleaseMutex
OpenMutexW
CreateProcessW
FindClose
FindFirstFileW
FindNextFileW
GlobalFree
WaitForMultipleObjects
CreateEventW
CreateDirectoryW
LocalAlloc
IsDBCSLeadByteEx
FlushFileBuffers
WriteConsoleW
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetModuleFileNameA
GetEnvironmentStringsW
GetFileType
GetDriveTypeW
GetFullPathNameA
GetFullPathNameW
InterlockedFlushSList
InterlockedPushEntrySList
GetTimeFormatW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
LoadLibraryExW
FindNextFileA
FindFirstFileExW
FindFirstFileExA
SetConsoleCtrlHandler
GetConsoleCP
SetStdHandle
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFilePointerEx
ReadConsoleW
RtlUnwindEx
RtlPcToFileHeader
OutputDebugStringW
InitializeSListHead
GetConsoleMode
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetStdHandle
GetACP
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WaitForSingleObjectEx
GetStringTypeW
EncodePointer
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
ResetEvent
MessageBoxW
UnregisterClassW
wsprintfW
OpenThreadToken
RegQueryValueExA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyA
RegDeleteKeyW
SetSecurityInfo
SetNamedSecurityInfoW
GetNamedSecurityInfoW
CreateWellKnownSid
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
SetTokenInformation
SetEntriesInAclW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetUserNameW
FreeSid
AllocateAndInitializeSid
EqualSid
GetTokenInformation
SystemFunction036
OpenProcessToken
SHCreateDirectoryExW
SHGetFolderPathW
ShellExecuteA
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CreateErrorInfo
SetErrorInfo
VariantChangeType
VariantInit
GetErrorInfo
VariantClear
SysAllocStringByteLen
SysStringLen
SysAllocString
SysFreeString
AMTGetCurrentLicenseState
AMTGetLibVersion
AMTGetParentLEIDLicenseStatus
AMTGetProductClearSerialNumber
AMTGetRoyaltyBearingLEIDs
AMTGetSerialExpiryDate
AMTObtainProductLicense
AMTObtainRunningLicenseRecord
AMTPlugPlugRequest
AMTPreObtainProductLicense
AMTPreValidateProductLicense
AMTRecordCodecInvocation
AMTReleaseProductLicense
AMTRetrieveAdobeID
AMTRetrieveInfoForLEID
AMTRetrieveLibraryPath
AMTRetrievePersonGUIDWithAuthSource
AMTValidateProductLicense
GetAsnVersion
asnInst_InstallerProductInfo_constructor
asnInst_getAsnProductInfo
asnInst_getAsnProductInfoInMem
asn_exit
asn_info
asn_init
asn_makePrivate
asn_makePrivateEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ