Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
gu.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
gu.exe
Resource
win10v2004-20230220-en
Target
gu.exe
Size
1.1MB
MD5
4351154c0ab6a92b6adec0e05d01dc1d
SHA1
c61d8f95d16eb05df69995068f37b0a53cef8ecd
SHA256
e323815d9542852c623c93db5c70c8d5e8fa581d5bf8d6850a70af7c518d71e9
SHA512
47d70b741df94d513a26712ff8f722f1b3c8b1bd2bd39c64fcdf3f9661830455f27ff25b4618ffb524748c918a6af272cfd198d388b8c13204168b578b9e6e9b
SSDEEP
24576:W3sv0VDpJGbXsV6j34SUWcFoPcygd7Z9ShkZdQS4orCxPw1+u/1:90XoZb4SUWv6d7uhkZd/tC68q1
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
nedrealloc
nedcalloc
nedmalloc
nedfree
GetProcAddress
GetPrivateProfileStringA
LoadLibraryA
GetVersionExA
GetCurrentProcessId
LocalFree
Sleep
FindFirstFileA
FindClose
GetLocalTime
FindNextFileA
lstrcpyA
ReleaseSemaphore
OpenSemaphoreA
CreateSemaphoreA
SearchPathA
HeapReAlloc
InterlockedIncrement
SetErrorMode
GetVersion
GetFileSize
WriteFile
ReadFile
GetModuleHandleA
HeapFree
GetProcessHeap
HeapAlloc
TlsFree
GetCurrentThreadId
GetLastError
GetSystemTime
SystemTimeToFileTime
TlsAlloc
TlsGetValue
TlsSetValue
GetEnvironmentVariableA
GetVolumeInformationA
ReleaseMutex
CreateMutexA
InterlockedCompareExchange
InterlockedDecrement
CreateFileA
DeviceIoControl
GetCurrentProcess
CloseHandle
WaitForSingleObject
FormatMessageA
QueryPerformanceCounter
DeleteTimerQueueTimer
CreateTimerQueueTimer
GetComputerNameA
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
LocalAlloc
IsDebuggerPresent
GetSystemTimeAsFileTime
FreeLibrary
GlobalMemoryStatus
GetModuleFileNameA
GetPrivateProfileIntA
GlobalFree
GlobalAlloc
GetTickCount
InterlockedExchange
GetStartupInfoA
TerminateProcess
FileTimeToSystemTime
SetUnhandledExceptionFilter
UnhandledExceptionFilter
PostMessageA
MessageBoxA
SendMessageA
wsprintfA
CharUpperA
PathAppendA
fwrite
fgetc
fopen_s
strlen
_CxxThrowException
__CxxFrameHandler3
_stricmp
_read
_close
_itoa
_open
_tell
_lseek
_write
_unlink
_filelength
_strnicmp
memset
_aligned_free
??9type_info@@QBE_NABV0@@Z
??8type_info@@QBE_NABV0@@Z
_aligned_malloc
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0exception@std@@QAE@ABQBDH@Z
isalpha
toupper
tolower
_mbsrchr
localeconv
strcspn
sprintf_s
memcmp
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_CIsqrt
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
islower
_calloc_crt
___lc_handle_func
___lc_codepage_func
isupper
__pctype_func
__crtLCMapStringA
setlocale
__uncaught_exception
printf
_chsize
_mktime64
atoi
memcpy_s
_locking
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_lseeki64
memmove_s
abort
memchr
__iob_func
_invalid_parameter_noinfo
remove
srand
strncpy
_sleep
strstr
rewind
ceil
_time64
_localtime64
atol
asctime
fprintf
fseek
clock
fgetpos
strchr
strncmp
sscanf
vfprintf
fflush
vprintf
sprintf
exit
fclose
rand
fread
fopen
??2@YAPAXI@Z
strrchr
??3@YAXPAX@Z
_purecall
??_V@YAXPAX@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
_free_locale
_CIlog10
??0bad_cast@std@@QAE@PBD@Z
_decode_pointer
socket
connect
accept
select
htons
bind
listen
inet_addr
gethostbyname
closesocket
WSACleanup
WSAStartup
send
recv
gethostname
WSAGetLastError
GetUserNameA
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
DoGU
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ