Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
1f021f34b6d3b02491fc6e027c988742378fa321f43b2d61950aff09558b2152.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1f021f34b6d3b02491fc6e027c988742378fa321f43b2d61950aff09558b2152.dll
Resource
win10v2004-20230220-en
Target
1f021f34b6d3b02491fc6e027c988742378fa321f43b2d61950aff09558b2152
Size
5.4MB
MD5
6976ecbeb2a4270e73e8794a007a6d42
SHA1
f77c04b4940cfc068cd7e5f40cdac167eb3b70da
SHA256
1f021f34b6d3b02491fc6e027c988742378fa321f43b2d61950aff09558b2152
SHA512
d5d535c2e4d6e49bb785a125c52cf9614b9c2951becd1eba39ff026292244642da21cc8b0af7a8cacb570fff97ccf4e77c141e19fd22bb3d948ffa434620bc88
SSDEEP
49152:Vb90imBEWKvTTLJU6TmJLlLBn8ZxQxFjikurJ5JimTo4NII4GAGJpeOsz+rVHmUl:BrfoJLlhbjik09NIIqGJpeOvVHJV
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetProcessImageFileNameW
PathIsRootW
PathRemoveFileSpecW
PathIsNetworkPathW
PathFileExistsW
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
CertAddSerializedElementToStore
CertGetCertificateContextProperty
CertFreeCertificateContext
GetLongPathNameW
GetSystemDirectoryW
GetPrivateProfileStringW
FileTimeToSystemTime
GetTickCount
GetDriveTypeW
GetCurrentProcessId
WritePrivateProfileStringW
GetPrivateProfileSectionW
GetCurrentProcess
IsWow64Process
lstrcmpW
WaitForMultipleObjects
HeapFree
InterlockedDecrement
GetModuleFileNameW
GetProcAddress
GetProcessHeap
GetModuleHandleW
InterlockedIncrement
WriteFile
SetFilePointer
CreateFileW
GetCurrentThreadId
CloseHandle
GetLocalTime
OpenProcess
SetFileAttributesW
HeapAlloc
FreeLibrary
InitializeCriticalSectionAndSpinCount
QueryDosDeviceW
GetLogicalDriveStringsW
VirtualQuery
GetUserDefaultLangID
GetModuleHandleExW
CreateMutexW
WaitForSingleObject
ReleaseMutex
ReadFile
TryEnterCriticalSection
lstrcmpiW
FindResourceW
LoadResource
GetSystemInfo
LockResource
GetWindowsDirectoryW
GetLastError
GetFileAttributesW
FindClose
GetEnvironmentVariableW
FindNextFileW
GetFullPathNameW
FindFirstFileW
Sleep
DeleteFileW
GetVolumePathNameW
GetDiskFreeSpaceW
LoadLibraryW
GlobalFree
GlobalAlloc
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetShortPathNameW
GetFileAttributesExW
LocalFree
GetVersionExW
SearchPathW
TerminateProcess
ExpandEnvironmentStringsW
LocalFileTimeToFileTime
FileTimeToLocalFileTime
SetFileTime
SetEndOfFile
GetFileSize
GetFileTime
CreateDirectoryW
RemoveDirectoryW
GetTempPathW
GetCurrentDirectoryW
SetCurrentDirectoryW
MoveFileExW
CopyFileW
GetTempFileNameW
MoveFileW
GetFileSizeEx
FormatMessageW
DeviceIoControl
InterlockedExchange
SetLastError
GlobalMemoryStatusEx
RaiseException
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
AreFileApisANSI
HeapCreate
InterlockedCompareExchange
OutputDebugStringA
LockFile
GetFullPathNameA
UnlockFileEx
HeapValidate
HeapSize
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
OutputDebugStringW
FlushViewOfFile
CreateFileA
WaitForSingleObjectEx
GetVersionExA
GetComputerNameExW
DeleteFileA
HeapReAlloc
HeapCompact
HeapDestroy
UnlockFile
CreateFileMappingA
LockFileEx
FormatMessageA
FlushFileBuffers
GetStdHandle
GetFileType
LoadLibraryA
OpenMutexW
MapViewOfFile
CreateFileMappingW
GetACP
MultiByteToWideChar
WideCharToMultiByte
UnmapViewOfFile
OpenFileMappingW
LoadLibraryExW
ResumeThread
GetExitCodeProcess
CreateProcessW
lstrcpyW
lstrcatW
lstrlenW
ResetEvent
SetEvent
CreateEventW
OpenEventW
GetVolumeInformationW
InterlockedExchangeAdd
FileTimeToDosDateTime
DosDateTimeToFileTime
GetSystemTime
SystemTimeToFileTime
OpenClipboard
CloseClipboard
GetPriorityClipboardFormat
wsprintfW
MessageBoxW
EmptyClipboard
GetUserObjectInformationW
GetProcessWindowStation
UnregisterClassW
CloseEventLog
RegisterEventSourceW
DeregisterEventSource
LookupPrivilegeValueW
AdjustTokenPrivileges
AllocateAndInitializeSid
SetEntriesInAclW
LookupPrivilegeNameW
SetNamedSecurityInfoW
OpenProcessToken
FreeSid
GetTokenInformation
GetNumberOfEventLogRecords
ClearEventLogW
ReportEventW
RegSetValueExW
OpenEventLogW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
IsValidSid
ConvertSidToStringSidW
GetUserNameW
LookupAccountNameW
SHGetFolderPathW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHEmptyRecycleBinW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
CoTaskMemFree
CLSIDFromString
CoCreateInstance
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_C_str@?$_Yarn@D@std@@QBEPBDXZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?fail@ios_base@std@@QBE_NXZ
?good@ios_base@std@@QBE_NXZ
?rdstate@ios_base@std@@QBEHXZ
??Bios_base@std@@QBE_NXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Getname@_Locinfo@std@@QBEPBDXZ
??0_Locinfo@std@@QAE@HPBD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?global@locale@std@@SA?AV12@ABV12@@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?_Xruntime_error@std@@YAXPBD@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_Xout_of_range@std@@YAXPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getdays@_Locinfo@std@@QBEPBDXZ
?_Getmonths@_Locinfo@std@@QBEPBDXZ
?_W_Getdays@_Locinfo@std@@QBEPBGXZ
?_W_Getmonths@_Locinfo@std@@QBEPBGXZ
??1_Facet_base@std@@UAE@XZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
??0_Facet_base@std@@QAE@XZ
?is@?$ctype@_W@std@@QBE_NF_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?c_str@?$_Yarn@D@std@@QBEPBDXZ
_Wcsxfrm
??_7facet@locale@std@@6B@
?id@?$collate@_W@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?_Xbad_alloc@std@@YAXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
_Wcscoll
??_7_Facet_base@std@@6B@
_Mbrtowc
?_Xlength_error@std@@YAXPBD@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?setf@ios_base@std@@QAEHHH@Z
?setf@ios_base@std@@QAEHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
strchr
wcsstr
wcschr
__std_exception_copy
__std_exception_destroy
_purecall
__std_type_info_name
wcsrchr
strstr
_except_handler4_common
__RTDynamicCast
memchr
__std_type_info_destroy_list
_CxxThrowException
memset
strrchr
memcpy
memmove
__CxxFrameHandler3
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_register_onexit_function
_errno
_execute_onexit_table
_initterm_e
_endthreadex
_exit
abort
_invalid_parameter_noinfo_noreturn
_crt_atexit
_initterm
_beginthreadex
_crt_at_quick_exit
raise
terminate
_cexit
_invalid_parameter_noinfo
calloc
_callnewh
_recalloc
_msize
realloc
malloc
free
_localtime64
_localtime64_s
_mktime64
_time64
fclose
ungetc
setvbuf
fgetpos
ftell
__stdio_common_vsprintf_s
fgetc
fflush
fputc
_fseeki64
_wfopen
fread
__stdio_common_vsprintf
__stdio_common_vswprintf
__stdio_common_vswscanf
fwrite
rewind
_wfopen_s
__stdio_common_vsscanf
fseek
_get_stream_buffer_pointers
fopen
fsetpos
atol
wcstof
wcstoul
_wcstoui64
_wtoi
wcstol
atoi
_wcstol_l
isdigit
strcspn
isalnum
isalpha
strncmp
towupper
wcsncpy
_wcsnicmp
_wcsicmp
_stricmp
strpbrk
toupper
tolower
towlower
rand
qsort
srand
_lock_file
_splitpath_s
_unlock_file
modf
_except1
ceil
_dtest
RCVBusGetModuleCount
RCVBusQueryModule
RCVBusReleaseModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ