Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
OpenConsole.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
OpenConsole.exe
Resource
win10v2004-20220901-en
Target
OpenConsole.exe
Size
1.1MB
MD5
658fd7e7131b5a2a8190fbfad56e9c67
SHA1
df8f20590e2853163fb7831d1aea44a41e81d53c
SHA256
bae417643072ff864b514687bc6cbdb4a4633bc50b69031ebdcbd5011d544344
SHA512
a9f00b09051e79dfca8269aed4bd0a7aa11bd8ef69b31f4c129f3c942316989e09fb490516f1268b1b52efd75a25077f892d2ff32f5d86e846ba3c5dfc571070
SSDEEP
24576:s9Bc8Y8R0FHSbJiUmZaLhu+J24dMC+FM/dIVlEzCzbQM:s/cGCHEiUmwbJ24uMGlEmvV
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
FreeLibrary
GetModuleHandleW
LoadStringW
GetModuleFileNameW
GetProcAddress
GetModuleFileNameA
LoadLibraryExW
LoadResource
GetModuleHandleExW
FindResourceExW
LockResource
WaitForSingleObject
DeleteCriticalSection
ReleaseMutex
ReleaseSemaphore
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
AcquireSRWLockShared
WaitForSingleObjectEx
OpenSemaphoreW
ResetEvent
ReleaseSRWLockShared
CreateEventW
ReleaseSRWLockExclusive
CreateMutexExW
AcquireSRWLockExclusive
CreateEventExW
SetEvent
CreateSemaphoreExW
EnterCriticalSection
HeapAlloc
HeapFree
GetProcessHeap
UnhandledExceptionFilter
GetLastError
SetLastError
SetUnhandledExceptionFilter
GetCurrentProcessId
ExitProcess
CreateThread
GetCurrentThreadId
TerminateProcess
DeleteProcThreadAttributeList
GetStartupInfoW
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
CreateProcessW
GetCurrentProcess
SetProcessShutdownParameters
ExitThread
OpenProcessToken
GetProcessTimes
GetACP
IsValidCodePage
GetUserDefaultLocaleName
FormatMessageA
GetLocaleInfoEx
GetOEMCP
FormatMessageW
GetCPInfo
OutputDebugStringA
OutputDebugStringW
IsDebuggerPresent
DebugBreak
CloseHandle
DuplicateHandle
RoOriginateError
RoOriginateErrorW
RegCloseKey
RegEnumValueW
RegGetValueW
RegQueryValueExW
RegOpenCurrentUser
RegOpenKeyExW
EventWriteTransfer
EventRegister
EventActivityIdControl
EventSetInformation
EventUnregister
GetEnvironmentVariableW
GetStdHandle
GetCommandLineW
SearchPathW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
CoInitializeEx
CoRegisterClassObject
CoUninitialize
CoReleaseServerProcess
CoResumeClassObjects
CoTaskMemFree
IIDFromString
CoAddRefServerProcess
CoCreateInstance
CoRevokeClassObject
EncodePointer
DecodePointer
RoRevokeActivationFactories
RoRegisterActivationFactories
WindowsCreateString
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsIsStringEmpty
WindowsStringHasEmbeddedNull
WakeByAddressAll
SignalObjectAndWait
WaitOnAddress
InitOnceExecuteOnce
Sleep
NtQueryVolumeInformationFile
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
??1_Locinfo@std@@QEAA@XZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??0facet@locale@std@@IEAA@_K@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
_Query_perf_counter
??1facet@locale@std@@MEAA@XZ
_Query_perf_frequency
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?id@?$numpunct@_W@std@@2V0locale@2@A
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?setf@ios_base@std@@QEAAHH@Z
?setf@ios_base@std@@QEAAHHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?_Incref@facet@locale@std@@UEAAXXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@N@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
_Mbrtowc
?_Xbad_alloc@std@@YAXXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?width@ios_base@std@@QEAA_J_J@Z
?uncaught_exceptions@std@@YAHXZ
?good@ios_base@std@@QEBA_NXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?id@?$ctype@_W@std@@2V0locale@2@A
??Bid@locale@std@@QEAA_KXZ
?widen@?$ctype@_W@std@@QEBA_WD@Z
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
__CxxFrameHandler4
memmove
_CxxThrowException
memset
memcpy
__C_specific_handler
__current_exception_context
__current_exception
memcmp
wcschr
_purecall
__std_terminate
__std_exception_copy
__std_exception_destroy
free
malloc
calloc
_set_new_mode
_aligned_free
_aligned_malloc
_callnewh
_invalid_parameter_noinfo
_cexit
_crt_atexit
_register_thread_local_exe_atexit_callback
_c_exit
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
terminate
_invalid_parameter_noinfo_noreturn
_errno
_register_onexit_function
_initialize_onexit_table
_seh_filter_exe
_configure_wide_argv
_set_app_type
__stdio_common_vsnprintf_s
__stdio_common_vswprintf
__stdio_common_vswprintf_s
_set_fmode
__p__commode
__stdio_common_vsprintf_s
iswspace
iswdigit
wcscpy_s
_wcsnicmp
_wcsicmp
strcpy_s
towupper
towlower
expf
_ldclass
__setusermatherr
log10
_dclass
_fdsign
pow
_dsign
_ldsign
lroundf
roundf
powf
_fdclass
sinf
cosf
atan2f
lround
wcstol
wcstoul
_itoa_s
_time64
___lc_codepage_func
_configthreadlocale
CreateThreadpoolWait
CloseThreadpoolWait
CloseThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolWaitCallbacks
SetThreadpoolWait
CreateThreadpoolTimer
UiaHostProviderFromHwnd
UiaReturnRawElementProvider
SysAllocString
SysFreeString
VariantInit
SysStringLen
VariantClear
SafeArrayCreateVector
SafeArrayPutElement
SafeArrayDestroy
SetProcessDpiAwareness
GetDpiForMonitor
GetMonitorInfoW
SystemParametersInfoW
GetSystemMetrics
LoadLibraryW
SetThreadDescription
PathFindFileNameW
PathIsSameRootW
PathFileExistsW
GlobalLock
GlobalSize
GlobalUnlock
GlobalFree
GlobalAlloc
LocalFree
MulDiv
GetWindowsDirectoryW
GetSystemTimeAsFileTime
GetSystemDirectoryW
UiaGetReservedNotSupportedValue
UiaRaiseAutomationEvent
UiaGetReservedMixedAttributeValue
PropVariantToUInt32
PropVariantToBoolean
PropVariantToInt16
SHCreateItemFromParsingName
PathCchRemoveExtension
RegCreateKeyW
RegOpenKeyW
IsProcessorFeaturePresent
OpenProcess
VerSetConditionMask
VerifyVersionInfoW
K32GetModuleFileNameExW
QueryFullProcessImageNameW
CreatePipe
CompareStringOrdinal
MultiByteToWideChar
GetStringTypeW
WideCharToMultiByte
CommandLineToArgvW
FindNextFileW
FindFirstFileExW
FindClose
WriteFile
GetFileSize
CreateFileW
ReadFile
CreateActCtxW
RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry
QueryPerformanceCounter
InitializeSListHead
SendMessageTimeoutW
LoadMenuW
SetWindowsHookExW
GetMessageW
DispatchMessageW
UnhookWindowsHookEx
PostMessageW
TrackPopupMenuEx
IsIconic
MapWindowPoints
GetClientRect
RegisterClipboardFormatW
GetSystemMenu
SetClipboardData
SetMenuItemInfoW
EnableMenuItem
IsWindow
ClientToScreen
VkKeyScanW
KillTimer
SetTimer
ShowWindowAsync
MapVirtualKeyW
ToUnicodeEx
SetWindowTextW
SendMessageW
SendNotifyMessageW
EndPaint
AppendMenuW
EmptyClipboard
SetWindowLongW
AdjustWindowRectEx
GetCursorPos
GetKeyboardState
GetKeyState
OffsetRect
GetCaretBlinkTime
CloseClipboard
GetClipboardData
ScreenToClient
IsRectEmpty
SendDlgItemMessageW
GetWindowLongW
GetDC
ReleaseDC
IsWindowVisible
InvertRect
ScrollWindowEx
ScrollDC
FillRect
GetAncestor
SetCapture
GetForegroundWindow
GetWindowThreadProcessId
GetDoubleClickTime
GetDpiForWindow
IsZoomed
GetWindowInfo
SetLayeredWindowAttributes
GetWindowRect
SetScrollInfo
EnableScrollBar
SetWindowPos
MonitorFromWindow
MonitorFromRect
ShowWindow
CheckRadioButton
ReleaseCapture
NotifyWinEvent
DestroyWindow
RegisterClassExW
CreateWindowExW
SetWindowLongPtrW
SetActiveWindow
LoadCursorW
DialogBoxParamW
GetWindowLongPtrW
EndDialog
IsDlgButtonChecked
DefWindowProcW
GetDlgItemTextW
OpenClipboard
DestroyIcon
LoadIconW
BeginPaint
LoadImageW
SetDlgItemTextW
SetBkColor
CreateFontIndirectA
AddFontMemResourceEx
GetCharWidth32W
CreateCompatibleDC
SetGraphicsMode
CreateSolidBrush
PatBlt
GetTextFaceW
DeleteObject
ModifyWorldTransform
ExtTextOutW
GdiFlush
SetWorldTransform
SetTextColor
SetDCBrushColor
SelectObject
GetTextMetricsW
BitBlt
CreateCompatibleBitmap
GetGlyphIndicesW
RemoveFontMemResourceEx
GetOutlineTextMetricsW
DeleteDC
GetCharABCWidthsW
GetTextExtentPoint32W
CreateFontIndirectW
GetStockObject
TranslateCharsetInfo
DragQueryFileW
ExtractIconExW
ord102
PlaySoundW
ScriptStringFree
ScriptIsComplex
ScriptStringOut
ScriptStringAnalyse
_Aligned_get_default_resource
DWriteCreateFactory
D3D11CreateDevice
D3DCompile
D3DReflect
D3DCompileFromFile
CreateDXGIFactory1
ord1
DeviceIoControl
QueryUnbiasedInterruptTime
AreFileApisANSI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ