Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
34f907de24632f52b4dc3f19f67dbf670bf1cd9e0191c598594a64921f615fb3.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
34f907de24632f52b4dc3f19f67dbf670bf1cd9e0191c598594a64921f615fb3.exe
Resource
win10v2004-20230621-en
Target
34f907de24632f52b4dc3f19f67dbf670bf1cd9e0191c598594a64921f615fb3
Size
3.5MB
MD5
f1abbd019a770a31f1b033c70fad633b
SHA1
9cbecabf001b1aca3493a2996f7b58d4633950f9
SHA256
34f907de24632f52b4dc3f19f67dbf670bf1cd9e0191c598594a64921f615fb3
SHA512
35e90d05c7cc8a109c127ee4916785c5565405861cabbd9829b43e8b770e304e2d4433938305c2aa8b1b4f194673f8818547b8b0c64b6fb8dc3928b53b7427aa
SSDEEP
49152:kELFrMdlF6Nerr3dmakcsYPtUQaEFN5+8jOP27NrAFTPbsSZtqwXYw5HUiwZz4W5:FMvv3tmjc3SQNFN5rr7Nr0UViM
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WaitForSingleObject
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CreateThread
DecodePointer
IsBadReadPtr
LoadLibraryA
lstrlenW
GetNativeSystemInfo
SetLastError
GetProcessHeap
HeapFree
Sleep
HeapSize
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
HeapAlloc
VirtualProtect
VirtualFree
VirtualAlloc
GetProcAddress
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
GetSystemDirectoryW
LocalAlloc
LocalFree
OpenProcess
GetCurrentProcessId
GetLogicalDriveStringsW
GetModuleHandleW
QueryDosDeviceW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
WriteFile
CreateEventW
GetFileSize
ReadFile
GetModuleFileNameW
HeapReAlloc
CreateFileW
lstrcpyW
LoadLibraryW
DeleteFileW
GetPrivateProfileIntW
WideCharToMultiByte
GetVersionExW
GetDiskFreeSpaceExW
lstrcmpW
WinExec
GetTempPathW
LockResource
MultiByteToWideChar
FindResourceW
LoadLibraryExW
lstrcmpiW
SizeofResource
LoadResource
InterlockedDecrement
CloseHandle
InterlockedIncrement
WriteConsoleW
SetEndOfFile
FlushFileBuffers
GetTimeZoneInformation
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
GetStringTypeW
GetConsoleCP
ReadConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
SetConsoleCtrlHandler
GetDriveTypeW
SetFilePointerEx
FreeLibraryAndExitThread
ExitThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
ResetEvent
WaitForSingleObjectEx
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
GetACP
GetTickCount
GetCurrentDirectoryW
FreeResource
ExitProcess
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
MulDiv
GetFileType
SetFilePointer
SetFileTime
DuplicateHandle
SystemTimeToFileTime
DosDateTimeToFileTime
CreateDirectoryW
GetLocalTime
GetLongPathNameW
GetFileAttributesW
GetTempFileNameW
CopyFileW
GetExitCodeProcess
FindClose
SetFileAttributesW
GetFileAttributesExW
FindFirstFileW
FindNextFileW
MoveFileExW
RemoveDirectoryW
ReadProcessMemory
CreateProcessW
FileTimeToSystemTime
ReleaseMutex
CreateMutexW
GetVolumeInformationW
GetWindowsDirectoryW
DeviceIoControl
OutputDebugStringA
SetPriorityClass
VerSetConditionMask
SetErrorMode
SystemTimeToTzSpecificLocalTime
GetVersion
VirtualAllocEx
VirtualFreeEx
WriteProcessMemory
lstrcpynW
GetFileAttributesExA
SleepEx
GetModuleHandleA
GetSystemDirectoryA
QueryPerformanceFrequency
VerifyVersionInfoA
ExpandEnvironmentStringsA
WaitForMultipleObjects
GetStdHandle
PeekNamedPipe
FormatMessageA
GetSystemTime
FlushConsoleInputBuffer
GlobalMemoryStatus
RtlUnwind
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
GetFullPathNameW
FindFirstFileExW
AreFileApisANSI
InflateRect
OffsetRect
LoadCursorW
GetMessageW
TranslateMessage
DispatchMessageW
DestroyWindow
UpdateLayeredWindow
SetFocus
GetFocus
GetKeyState
SetCapture
ReleaseCapture
KillTimer
GetDC
ReleaseDC
BeginPaint
EndPaint
GetUpdateRect
GetClientRect
GetCursorPos
ScreenToClient
MapWindowPoints
IsRectEmpty
PtInRect
GetParent
GetWindow
wsprintfW
DefWindowProcW
CallWindowProcW
RegisterClassW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
EnableWindow
GetSystemMetrics
SetPropW
GetPropW
MonitorFromWindow
GetMonitorInfoW
IsIconic
IsZoomed
SetWindowRgn
IntersectRect
CharPrevW
DrawTextW
SetCursor
SetRect
CreateCaret
HideCaret
SetCaretPos
GetCaretPos
ClientToScreen
GetSysColor
GetDoubleClickTime
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
CreateAcceleratorTableW
InvalidateRgn
GetDesktopWindow
GetClassNameW
GetWindowThreadProcessId
FindWindowExW
GetShellWindow
SystemParametersInfoW
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxA
ShowWindow
SetWindowPos
PostQuitMessage
PostMessageW
SendMessageW
GetWindowLongW
SetWindowLongW
LoadIconW
LoadStringW
IsWindow
SetForegroundWindow
FindWindowW
CharNextW
MoveWindow
GetForegroundWindow
GetWindowRect
InvalidateRect
FillRect
SetTimer
ShowCaret
CryptGetProvParam
CryptSignHashA
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
RegCloseKey
RegCreateKeyExW
RevertToSelf
ImpersonateLoggedOnUser
OpenProcessToken
GetTokenInformation
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
LookupAccountSidW
DuplicateTokenEx
RegEnumKeyW
RegOpenKeyW
DeregisterEventSource
RegisterEventSourceA
ReportEventA
CryptAcquireContextA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegEnumValueA
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
CryptEnumProvidersA
ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteExW
SHGetFolderPathW
SHGetSpecialFolderPathW
SHGetFileInfoW
ord155
SHGetFolderLocation
SHGetDesktopFolder
SHGetDataFromIDListW
SHAppBarMessage
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize
CoUninitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
SysAllocString
SysFreeString
VariantClear
VarUI4FromStr
VariantInit
GdipCreateFromHDC
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushI
GdipSetTextRenderingHint
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipDrawString
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipLoadImageFromStream
GdipLoadImageFromStreamICM
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipDrawImageRectRectI
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusShutdown
GdiplusStartup
GdipDrawImageRectI
StrCpyW
PathFileExistsW
PathAppendW
PathFindFileNameW
GetProcessImageFileNameW
EnumProcessModules
GetModuleFileNameExW
CertGetCertificateContextProperty
CertFindCertificateInStore
CryptQueryObject
CertCloseStore
CryptMsgGetParam
CertGetNameStringW
CertFreeCertificateContext
CryptMsgClose
CertOpenStore
CertEnumCertificatesInStore
CertDuplicateCertificateContext
AlphaBlend
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
InternetOpenW
InternetOpenUrlW
InternetCloseHandle
InternetSetOptionW
InternetReadFile
HttpQueryInfoW
URLDownloadToFileW
_TrackMouseEvent
ord17
bind
getservbyname
gethostbyname
htonl
shutdown
getaddrinfo
WSACleanup
freeaddrinfo
gethostname
ioctlsocket
WSAStartup
accept
WSAGetLastError
socket
__WSAFDIsSet
select
WSASetLastError
recv
send
closesocket
connect
getpeername
getsockname
getsockopt
htons
ntohs
setsockopt
WSAIoctl
sendto
recvfrom
listen
ord60
ord41
ord211
ord46
ord217
ord143
ord22
ord26
ord27
ord32
ord33
ord35
ord79
ord30
ord200
ord301
ord50
BitBlt
CreateCompatibleDC
CreateFontIndirectW
CreatePen
DeleteDC
DeleteObject
GetStockObject
Rectangle
RestoreDC
SaveDC
SelectObject
GetTextMetricsW
CreateDIBSection
GetObjectW
SetWindowOrgEx
CreateRoundRectRgn
CombineRgn
CreatePenIndirect
CreateRectRgnIndirect
CreateSolidBrush
GetCharABCWidthsW
GetClipBox
GetTextExtentPoint32W
LineTo
RoundRect
SelectClipRgn
ExtSelectClipRgn
SetBkColor
SetBkMode
StretchBlt
SetStretchBltMode
SetTextColor
MoveToEx
TextOutW
GetDeviceCaps
GetObjectA
GetDIBits
CreateBitmap
CreateDCW
CreateCompatibleBitmap
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ