Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
356f7122e58f5eb665148270ce6f30b63216c5d662f266b26b033b42bf6b9448.exe
Resource
win10v2004-20230220-en
Target
356f7122e58f5eb665148270ce6f30b63216c5d662f266b26b033b42bf6b9448(1).7z
Size
94KB
MD5
dc028c49ec206f273dfb81d62856b337
SHA1
30567f7e279ce526fdf523f510b7ee664382eedb
SHA256
da34ef002aeaa6eac57e27fca2abf88c5641c17974b7f5ea2b858d731838cb20
SHA512
5c95537feedd5fac9f45eb721bb51faf7b8f9af0cef0c77b00db313fac1f73b66e36011be10e9178237d0471727c2d244bc1062b3ed864a102b4ebb9e37fb4ce
SSDEEP
1536:IkWogzKHGq8mRNaffO24EzRx+AFneXmO2BLVgGazfMdaf1HOd70FipMOcY6g0Kq0:IkWoiKHzpoJzaiLLVsMdytFi1z30M
ExtKeyUsageCodeSigning
ExtKeyUsageOCSPSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RegisterWaitForSingleObject
InterlockedCompareExchange
InitializeCriticalSection
DeleteCriticalSection
ExitProcess
EnterCriticalSection
LeaveCriticalSection
lstrcpyW
GetFileAttributesW
OpenEventW
FatalAppExitW
GetPrivateProfileStringW
MoveFileW
CreateToolhelp32Snapshot
Process32FirstW
FindNextFileW
Process32NextW
WritePrivateProfileStringW
GetLocalTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileTime
CreateDirectoryW
GetPrivateProfileSectionNamesW
GetCurrentThreadId
RaiseException
RemoveDirectoryW
UnregisterWait
TerminateProcess
GetSystemDirectoryW
LocalAlloc
GetNativeSystemInfo
MultiByteToWideChar
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetVersionExA
HeapDestroy
HeapAlloc
lstrlenA
GetCurrentProcessId
OutputDebugStringW
WideCharToMultiByte
SetProcessWorkingSetSize
SetFileAttributesW
FindClose
FindFirstFileW
VirtualProtect
GetThreadLocale
GetLocaleInfoA
GetACP
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
SetConsoleCtrlHandler
MoveFileExW
DeleteFileW
GetTickCount
ResetEvent
SetEvent
WaitForMultipleObjects
CreateEventW
GetLastError
LocalFree
QueryPerformanceFrequency
QueryPerformanceCounter
lstrcmpiW
GetCommandLineW
TerminateThread
SuspendThread
CreateThread
InterlockedExchange
Sleep
SizeofResource
QueryDosDeviceW
GetLogicalDriveStringsW
LoadLibraryW
FindResourceW
FreeLibrary
GetCurrentProcess
GetModuleFileNameW
GetVersionExW
OpenProcess
GetModuleHandleW
GetProcAddress
lstrlenW
GetPrivateProfileIntW
FindResourceExW
WaitForSingleObject
CreateProcessW
LoadResource
LockResource
CreateFileW
ReadFile
CloseHandle
GetFileSize
SetWindowPos
wsprintfW
GetClientRect
GetDesktopWindow
GetMessageW
TranslateMessage
DispatchMessageW
PostMessageW
PeekMessageW
PostThreadMessageW
GetProcessWindowStation
GetThreadDesktop
OpenWindowStationW
SetProcessWindowStation
DestroyWindow
PostQuitMessage
DefWindowProcW
CreateWindowExW
OpenDesktopW
SetWindowLongW
CloseDesktop
UnregisterClassA
SetThreadDesktop
CloseWindowStation
GetDC
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteObject
DeleteDC
CreateDIBSection
LookupPrivilegeValueW
OpenProcessToken
ControlService
StartServiceW
SetServiceStatus
QueryServiceStatus
DeleteService
ChangeServiceConfig2W
ChangeServiceConfigW
OpenServiceW
CloseServiceHandle
CreateServiceW
StartServiceCtrlDispatcherW
OpenSCManagerW
RegEnumKeyExW
RegisterServiceCtrlHandlerExW
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CreateProcessAsUserW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyW
SetTokenInformation
DuplicateTokenEx
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
AdjustTokenPrivileges
ShellExecuteW
CommandLineToArgvW
CoGetMalloc
StringFromIID
_controlfp_s
_invoke_watson
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__winitenv
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
?terminate@@YAXXZ
_vsnprintf_s
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
fwprintf
fflush
_localtime64_s
wcsftime
_purecall
vsprintf_s
fwrite
sprintf
setlocale
fclose
_wfopen
_swprintf
_wcsdup
wcschr
_wcslwr_s
swscanf_s
_wrename
wcscpy_s
_wtoi
calloc
wcstol
_recalloc
getchar
wcscat
_snwprintf
wcscpy
_vscprintf
_wcstoi64
memcpy
_waccess
wcscmp
iswspace
_beginthreadex
_time64
_wcsicmp
??0exception@std@@QAE@ABQBD@Z
memset
_wcsnicmp
memmove_s
wcsrchr
memcpy_s
strlen
memcmp
wcsstr
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
vswprintf_s
??2@YAPAXI@Z
_vswprintf
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
??_V@YAXPAX@Z
??_U@YAPAXI@Z
??1exception@std@@UAE@XZ
wcsncpy_s
wcslen
??3@YAXPAX@Z
malloc
free
__CxxFrameHandler3
_CxxThrowException
sprintf_s
strpbrk
_stricmp
_vscwprintf
_local_unwind4
PathFindFileNameW
PathRemoveFileSpecW
SHDeleteValueW
PathFileExistsW
PathAppendW
PathAddBackslashW
PathRemoveBackslashW
SHRegSetUSValueW
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??_D?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?str@?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?allocate@?$allocator@D@std@@QAEPADI@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?length@?$char_traits@D@std@@SAIPBD@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
WTSFreeMemory
WTSEnumerateSessionsW
WTSWaitSystemEvent
GdipDrawImageRectI
GdipCreateFromHDC
GdipDeleteGraphics
GdipReleaseDC
GdipGetImageWidth
GdipFree
GdipCloneImage
GdipLoadImageFromFile
GdipAlloc
GdipSetSmoothingMode
GdiplusShutdown
GdiplusStartup
GdipDisposeImage
GdipGetImageHeight
gethostbyname
WSAStartup
socket
closesocket
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
ImmDisableIME
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ