Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
b9f63e9e1f4647004ec6dbac0009f477b8138d2a062f5b9dda4cc4ce81bf35c6.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
b9f63e9e1f4647004ec6dbac0009f477b8138d2a062f5b9dda4cc4ce81bf35c6.dll
Resource
win10v2004-20230221-en
Target
b9f63e9e1f4647004ec6dbac0009f477b8138d2a062f5b9dda4cc4ce81bf35c6
Size
4.4MB
MD5
c6758ef7debbe4a436bd68ff837cbcdd
SHA1
d2794ef34bc11aaf3825f037da05a52d9ea5ae92
SHA256
b9f63e9e1f4647004ec6dbac0009f477b8138d2a062f5b9dda4cc4ce81bf35c6
SHA512
f08c18740885b8fef97858d7ecc1e813f79b51ed2424a32b61f08009763def40a07199ec7c8377b2e97547885dfa4c474a1b2e43b93143d290aaf1e2f4bad671
SSDEEP
98304:7CV2vmKeu27+/ldhmOAS2iCdotcy2N+9Y/:4xu2wvm1/i/W
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
DeleteFileW
SetFileAttributesW
GetFileSize
SetFilePointer
SetEndOfFile
WriteFile
ReadFile
GetSystemInfo
OpenProcess
QueryDosDeviceW
GetLogicalDriveStringsW
GetDiskFreeSpaceW
GetVolumeInformationW
IsBadReadPtr
IsBadWritePtr
IsBadStringPtrW
GlobalAlloc
GetLocalTime
HeapReAlloc
HeapDestroy
HeapSize
GetPrivateProfileStructW
WritePrivateProfileStructW
WritePrivateProfileStringW
GetPrivateProfileIntW
LoadLibraryA
OutputDebugStringW
GetFullPathNameA
CreateFileA
HeapCompact
QueryPerformanceCounter
InterlockedCompareExchange
GetWindowsDirectoryW
GetProcAddress
LockFile
WaitForSingleObjectEx
UnlockFileEx
GetSystemTimeAsFileTime
GetTempPathW
GetFileAttributesA
HeapCreate
HeapValidate
FlushFileBuffers
LockFileEx
CreateFileMappingA
GetDiskFreeSpaceA
GetVersionExA
GetTempPathA
AreFileApisANSI
DeleteFileA
TerminateThread
CreateThread
LocalAlloc
DeviceIoControl
GetEnvironmentVariableW
GlobalMemoryStatusEx
GetComputerNameW
GetFileSizeEx
EncodePointer
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
IsDebuggerPresent
RemoveDirectoryW
UnlockFile
GetCurrentDirectoryW
CopyFileW
GetSystemDirectoryW
LoadLibraryW
FreeLibrary
SetFileTime
CreateDirectoryW
MoveFileExW
GetTempFileNameW
GetFullPathNameW
ResumeThread
GetSystemTime
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
InitializeCriticalSection
CloseHandle
GetTickCount
InterlockedDecrement
InterlockedIncrement
GlobalFree
Sleep
GetCurrentThreadId
GetCurrentProcess
DeleteCriticalSection
DecodePointer
TryEnterCriticalSection
OpenFileMappingW
CreateFileMappingW
UnmapViewOfFile
MapViewOfFile
ReleaseMutex
CreateMutexW
GetCurrentProcessId
InterlockedExchangeAdd
FormatMessageW
FindNextFileW
FindClose
GetFileAttributesExW
FindFirstFileW
ExpandEnvironmentStringsW
lstrcpyW
lstrcatW
GetFileAttributesW
GetACP
WideCharToMultiByte
LockResource
FreeResource
GlobalUnlock
GlobalLock
lstrlenW
CompareStringW
MulDiv
GetProcessHeap
HeapFree
HeapAlloc
WriteProcessMemory
VirtualProtect
GetVersionExW
SwitchToThread
GetDriveTypeW
ResetEvent
WaitForMultipleObjects
CreateEventW
GetOverlappedResult
CreateFileW
ReadDirectoryChangesW
SetEvent
WaitForSingleObject
SetCurrentDirectoryW
MoveFileW
GetLongPathNameW
LocalFree
lstrcmpiW
InterlockedExchange
MultiByteToWideChar
GetModuleFileNameW
SizeofResource
GetModuleHandleW
LoadLibraryExW
SetUnhandledExceptionFilter
LoadResource
FindResourceW
SetErrorMode
GetCommandLineW
FormatMessageA
OutputDebugStringA
EnterCriticalSection
SetLastError
GetLastError
RaiseException
FlushInstructionCache
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
FlushViewOfFile
GetClassInfoExW
RegisterClassExW
SystemParametersInfoW
GetDesktopWindow
CreateWindowExW
GetClassNameW
SetWindowPos
GetSystemMetrics
FindWindowExW
GetWindowRect
SetDlgItemInt
PtInRect
SetFocus
GetParent
SetForegroundWindow
MsgWaitForMultipleObjects
GetWindowDC
ScreenToClient
SetWindowRgn
GetDlgItemInt
SetCursor
ClientToScreen
GetKeyNameTextW
MapVirtualKeyExW
GetKeyboardLayout
CharLowerBuffW
DrawTextW
SetDlgItemTextW
GetFocus
FindWindowW
DestroyIcon
GetCursorPos
IsRectEmpty
SetMenuItemInfoW
DestroyMenu
LoadMenuW
GetWindowPlacement
GetMenuItemInfoW
DeleteMenu
GetSubMenu
IsZoomed
KillTimer
PostQuitMessage
SetTimer
SetWindowPlacement
IsWindowVisible
ReleaseCapture
DispatchMessageA
IsWindowUnicode
IntersectRect
InflateRect
GetDC
SetCapture
GetMessageA
EqualRect
MapWindowPoints
LoadCursorW
GetClientRect
GetPropW
GetSysColor
SetRect
SetPropW
RemovePropW
GetDlgCtrlID
UpdateWindow
DrawFocusRect
GetCapture
SetRectEmpty
GetWindowTextLengthW
TrackMouseEvent
UpdateLayeredWindow
MessageBoxW
TrackPopupMenuEx
GetAsyncKeyState
GetCursor
WindowFromPoint
GetMenuItemID
IsMenu
MonitorFromPoint
UnionRect
InsertMenuW
GetMenuItemCount
CreatePopupMenu
AppendMenuW
GetUpdateRect
GetMenuStringW
WaitMessage
MonitorFromRect
DrawIconEx
SetClipboardData
RegisterClipboardFormatW
GetClipboardData
CreateMenu
wsprintfW
GetWindowThreadProcessId
GetForegroundWindow
AttachThreadInput
GetLastActivePopup
GetMenuState
LoadBitmapW
ShowWindow
RedrawWindow
EndDialog
GetDlgItem
CheckMenuRadioItem
SetMenuDefaultItem
IsDialogMessageW
LoadStringW
CreateDialogParamW
CreateIconFromResourceEx
CreateIconFromResource
CopyRect
DispatchMessageW
DefWindowProcW
PeekMessageW
TranslateMessage
CharNextW
GetMessageW
DestroyWindow
SendMessageTimeoutW
EnumWindows
EnableWindow
IsWindowEnabled
GetWindow
CallWindowProcW
InvalidateRect
GetWindowLongW
SetClassLongW
BeginPaint
FillRect
RegisterWindowMessageW
EndPaint
MoveWindow
GetMonitorInfoW
MonitorFromWindow
ReleaseDC
GetWindowTextW
BringWindowToTop
PostThreadMessageW
OffsetRect
SetWindowLongW
DialogBoxParamW
UnregisterClassW
IsWindow
LoadIconW
PostMessageW
RegisterHotKey
UnregisterHotKey
OpenClipboard
GetActiveWindow
EmptyClipboard
CloseClipboard
GetKeyState
SendMessageW
IsIconic
SetWindowTextW
GetTextExtentPoint32W
PatBlt
EndDoc
StartDocW
CreateDCW
GetDeviceCaps
StartPage
EndPage
SetWorldTransform
GetWorldTransform
SetGraphicsMode
SelectClipRgn
LineTo
MoveToEx
ExtCreatePen
CreatePen
GetTextExtentPointW
CreateFontIndirectW
CreateDIBSection
CreatePatternBrush
SetBitmapBits
GetBitmapBits
EnumFontFamiliesExW
SetDIBColorTable
SetDCBrushColor
SetROP2
SetDCPenColor
SetArcDirection
SetBrushOrgEx
Polyline
FillRgn
CreateBitmap
GetStockObject
SaveDC
RestoreDC
StretchBlt
SetBkColor
ExtTextOutW
SetTextColor
SetBkMode
CreatePolygonRgn
CreateRectRgn
SetViewportOrgEx
DeleteObject
CreateCompatibleBitmap
CreateSolidBrush
BitBlt
DeleteDC
SelectObject
CreateCompatibleDC
StretchDIBits
SetStretchBltMode
GetObjectW
ChooseColorW
GetSaveFileNameW
GetOpenFileNameW
PageSetupDlgW
RegDeleteValueW
RegEnumValueW
GetUserNameW
RegOpenCurrentUser
RegQueryValueExW
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
SHGetDesktopFolder
DragFinish
DragQueryFileW
DragAcceptFiles
SHGetSettings
CommandLineToArgvW
ord644
SHGetSpecialFolderLocation
ord645
ord2
SHFileOperationW
SHChangeNotify
SHGetFolderPathW
SHGetSpecialFolderPathW
SHGetFileInfoW
ShellExecuteExW
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW
Shell_NotifyIconW
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
DoDragDrop
RevokeDragDrop
RegisterDragDrop
ReleaseStgMedium
OleDuplicateData
CreateStreamOnHGlobal
CoCreateInstance
SysFreeString
VarUI4FromStr
SysAllocString
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?uncaught_exception@std@@YA_NXZ
?_BADOFF@std@@3_JB
??1_Container_base12@std@@QAE@XZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
_Nan
_Inf
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEGXZ
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAN@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??_D?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?underflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?pbackfail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGG@Z
?overflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGG@Z
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?exceptions@ios_base@std@@QAEXH@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
StrToIntW
SHDeleteKeyW
StrCmpIW
PathFindFileNameW
StrRetToBufW
ImageList_Create
ImageList_GetIconSize
_TrackMouseEvent
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_Draw
ImageList_SetImageCount
ImageList_Remove
ImageList_Destroy
ImageList_GetImageInfo
ImageList_Replace
InitCommonControlsEx
AlphaBlend
_mktime64
floor
ceil
_libm_sse2_sqrt_precise
_libm_sse2_sin_precise
_libm_sse2_pow_precise
_libm_sse2_log_precise
_libm_sse2_log10_precise
_libm_sse2_exp_precise
_libm_sse2_cos_precise
_libm_sse2_atan_precise
__RTDynamicCast
isalnum
wcstoul
swscanf_s
_splitpath_s
_stricmp
_strdup
__clean_type_info_names_internal
_except_handler4_common
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
__CxxFrameHandler3
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
_CxxThrowException
memset
memcpy
_snprintf
vfprintf
_vswprintf
printf
exit
__iob_func
fseek
ftell
fread
_wcsdup
strtok
atoi
sscanf
strpbrk
sprintf_s
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
realloc
_endthreadex
_msize
_localtime64_s
qsort
strncmp
_wcsicmp
strtol
_wassert
_nextafter
wcsrchr
_wtof
_wcsupr
_localtime64
_except1
_wcsnicmp
calloc
_vswprintf_c_l
memchr
strchr
fclose
fflush
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
towupper
towlower
wcschr
_errno
_vsnwprintf
_time64
srand
rand
ldiv
wcstok
_wtoi
wcscpy_s
wcscat_s
_resetstkoflw
wcsncmp
_beginthreadex
?terminate@@YAXXZ
memcpy_s
wcsstr
malloc
wcsncpy_s
memmove_s
sprintf
_recalloc
swprintf_s
wcsncpy
??2@YAPAXI@Z
_purecall
??_V@YAXPAX@Z
free
memmove
??3@YAXPAX@Z
CryptBinaryToStringW
waveInClose
mciSendCommandW
waveOutPrepareHeader
waveOutGetNumDevs
waveInGetDevCapsA
waveOutUnprepareHeader
waveOutGetDevCapsA
waveInGetNumDevs
waveOutSetVolume
waveOutReset
waveOutRestart
waveOutGetVolume
waveOutPause
waveOutWrite
waveOutClose
mixerGetLineControlsW
mixerOpen
waveInStart
waveInUnprepareHeader
mixerGetControlDetailsW
waveInReset
waveInAddBuffer
waveInOpen
mixerGetLineInfoA
mixerClose
waveInPrepareHeader
mixerGetLineInfoW
mixerGetDevCapsW
mixerGetControlDetailsA
mixerSetControlDetails
waveOutOpen
GdipSetStringFormatLineAlign
GdipGetImagePalette
GdipSetTextRenderingHint
GdipGetImageGraphicsContext
GdipGetFontCollectionFamilyCount
GdipSetStringFormatAlign
GdipGraphicsClear
GdipDisposeImageAttributes
GdipRotateWorldTransform
GdipResetWorldTransform
GdipCreateImageAttributes
GdipGetImagePaletteSize
GdipTranslateWorldTransform
GdipGetFontHeight
GdipSetInterpolationMode
GdipFillRectangleI
GdipCloneFontFamily
GdipImageRotateFlip
GdipCreateStringFormat
GdipSetPixelOffsetMode
GdipDeleteStringFormat
GdipCreateFromHWND
GdipNewInstalledFontCollection
GdipSetStringFormatFlags
GdipGetGenericFontFamilySansSerif
GdipSetStringFormatTrimming
GdipDeletePen
GdipSetPenColor
GdipDrawLineI
GdipCreatePen1
GdipGetDC
GdipReleaseDC
GdipCreateHBITMAPFromBitmap
GdipDrawImagePointRectI
GdipCreateFontFromLogfontW
GdipDrawRectangleI
GdipSetClipRectI
GdipSetCompositingMode
GdipLoadImageFromFile
GdipGetPropertyItem
GdipGetFamilyName
GdipGetPropertyItemSize
GdipBitmapLockBits
GdipSetPropertyItem
GdipAddPathLineI
GdipAddPathArcI
GdipDeletePath
GdipFillPath
GdipCreatePath
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusShutdown
GdipCreateBitmapFromStream
GdiplusStartup
GdipDrawImageI
GdipGetRegionHRgn
GdipScaleWorldTransform
GdipCreateMatrix
GdipGetClip
GdipGetMatrixElements
GdipSaveGraphics
GdipGetClipBoundsI
GdipDeleteRegion
GdipTransformPointsI
GdipGetWorldTransform
GdipCreateRegion
GdipDeleteMatrix
GdipRestoreGraphics
GdipMeasureString
GdipDrawImageRectRectI
GdipSetImageAttributesColorMatrix
GdipGetFontCollectionFamilyList
GdipGetImageRawFormat
GdipSaveImageToFile
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImageWidth
GdipCloneImage
GdipCreateFromHDC
GdipCreateFontFamilyFromName
GdipDrawString
GdipCreateFont
GdipDisposeImage
GdipAlloc
GdipCreateSolidFill
GdipDeleteFontFamily
GdipDeleteGraphics
GdipDeleteFont
GdipGetImagePixelFormat
GdipGetImageHeight
GdipCloneBitmapAreaI
GdipCloneBrush
GdipFree
GdipDeleteBrush
GdipCreateBitmapFromResource
GdipSetSmoothingMode
GdipSetImageAttributesColorKeys
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectRect
GdipBitmapUnlockBits
ImmAssociateContext
ImmGetVirtualKey
CreateImageFileMgr
ImageExplorerMain
ImageLoaderMain
ImageUpdateMain
ImageViewerMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ