Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
cc3d5ffea261d6c204fd2db650d543d6e75f089aaf056b8667c09611053378fc.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
cc3d5ffea261d6c204fd2db650d543d6e75f089aaf056b8667c09611053378fc.exe
Resource
win10v2004-20230621-en
Target
cc3d5ffea261d6c204fd2db650d543d6e75f089aaf056b8667c09611053378fc
Size
631KB
MD5
aba846859489bd223a86f2e188348cf1
SHA1
e60428e4ea71b7ac6494dc959c996d3bf82f7965
SHA256
cc3d5ffea261d6c204fd2db650d543d6e75f089aaf056b8667c09611053378fc
SHA512
2097c5085c4bc2ba17c6b3cbe869dcb1b6ed4600f7c6d8aaaa0a85aa9540d67f3250baec0bc2a5f696ebbd3e12a506afc0861fd5179266371ba1a39b180625f4
SSDEEP
12288:SCLAzBd6D/VWasTUUeiYlrp9RZlYf0eQZuooZtUMBvOtdUkU8uF62cP:rL4Bd6DtWasn0lrpG0eQiUMBGtXU8k5y
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
TerminateProcess
TerminateThread
GetLogicalDriveStringsW
WaitForSingleObject
QueryDosDeviceW
GetSystemDirectoryW
SetFilePointer
GetPrivateProfileStringW
SetEndOfFile
CreateFileMappingW
MapViewOfFileEx
CreateProcessW
UnmapViewOfFile
GetCommandLineW
WriteFile
GetLocalTime
OutputDebugStringW
OpenEventW
FormatMessageA
ExpandEnvironmentStringsA
SleepEx
Process32NextW
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
ExpandEnvironmentStringsW
Process32FirstW
CreateToolhelp32Snapshot
DeleteFileW
CreateDirectoryW
GetFileAttributesW
GetTickCount
OpenProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FlushInstructionCache
GetModuleFileNameW
InitializeCriticalSection
LoadLibraryExW
FindResourceW
lstrlenA
LoadResource
SizeofResource
GetModuleHandleW
GetFileSize
lstrlenW
WideCharToMultiByte
GetLastError
CloseHandle
RaiseException
MultiByteToWideChar
GetWindowsDirectoryW
Sleep
LockResource
GetProcAddress
FreeResource
FindResourceExW
LoadLibraryW
InterlockedDecrement
GlobalAlloc
GetPrivateProfileIntW
GlobalLock
FreeLibrary
InterlockedIncrement
ReadFile
SetLastError
GlobalUnlock
CreateFileW
GetCurrentThreadId
GlobalFree
GetVersionExW
lstrcmpiW
GetCurrentProcess
GetSystemTimeAsFileTime
DrawTextW
SetCursor
UnregisterClassA
GetClientRect
PeekMessageW
GetDlgItem
IsWindowVisible
IsWindow
GetMessageW
GetParent
GetWindowThreadProcessId
TranslateMessage
IsDialogMessageW
GetForegroundWindow
DispatchMessageW
SetWindowLongW
AttachThreadInput
GetClassInfoExW
GetWindowRect
ShowWindow
GetDC
SetWindowPos
ReleaseDC
SetForegroundWindow
InflateRect
CreateWindowExW
LoadImageW
DestroyWindow
SendMessageW
SetRect
IsChild
SetTimer
PostThreadMessageW
ReleaseCapture
PtInRect
UpdateLayeredWindow
DestroyIcon
SetCapture
LoadIconW
FindWindowW
GetDlgCtrlID
DrawFrameControl
GetMonitorInfoW
OffsetRect
MonitorFromWindow
IntersectRect
ScreenToClient
KillTimer
DrawIconEx
CallWindowProcW
SetRectEmpty
ClientToScreen
EndPaint
BeginPaint
EqualRect
GetNextDlgTabItem
SetFocus
GetCursorPos
WindowFromPoint
GetSystemMetrics
GetWindowLongW
GetFocus
SetActiveWindow
InvalidateRect
LoadBitmapW
GetActiveWindow
LoadCursorW
DefWindowProcW
GetDesktopWindow
IsWindowEnabled
EnableWindow
RegisterClassExW
MapWindowPoints
GetWindow
SystemParametersInfoW
CopyRect
CharNextW
PostMessageW
MoveWindow
GetStockObject
CreateRectRgn
SetTextColor
GetObjectW
SelectObject
BitBlt
CreatePen
SetBkColor
DeleteObject
CreateBitmap
CreateCompatibleBitmap
CreateFontIndirectW
GetViewportOrgEx
CreateRectRgnIndirect
CombineRgn
ExtSelectClipRgn
Rectangle
CreateRoundRectRgn
GetCurrentObject
OffsetRgn
RoundRect
SetViewportOrgEx
LineTo
RectInRegion
GetTextColor
MoveToEx
SetBkMode
GetTextExtentPoint32W
TextOutW
SelectClipRgn
CreateDIBSection
ExtTextOutW
GetClipRgn
SaveDC
StretchBlt
SetStretchBltMode
RestoreDC
DeleteDC
CreateCompatibleDC
RegOpenKeyW
RegSetValueExW
RegCreateKeyExW
RegEnumKeyExW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegQueryInfoKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
ShellExecuteW
CoTaskMemAlloc
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
VarUI4FromStr
StrToIntW
PathFileExistsW
PathAddBackslashW
StrToIntA
PathRemoveFileSpecW
PathAppendW
_TrackMouseEvent
AlphaBlend
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
GdipCreateBitmapFromStream
GdipDrawImageRectI
GdiplusStartup
GdipDrawImagePointsRectI
GdiplusShutdown
GdipDeletePen
GdipSetPenEndCap
GdipGetFamily
GdipNewPrivateFontCollection
GdipCreateHBITMAPFromBitmap
GdipDeletePrivateFontCollection
GdipPrivateAddFontFile
GdipGetFontCollectionFamilyCount
GdipAlloc
GdipSetPenDashStyle
GdipSetPenStartCap
GdipDeletePath
GdipResetWorldTransform
GdipSetPenMode
GdipCreatePath
GdipRotateWorldTransform
GdipDrawPath
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipSetStringFormatTrimming
GdipTranslateWorldTransform
GdipGetImageHeight
GdipSetInterpolationMode
GdipSetStringFormatFlags
GdipFillRectangle
GdipGetImageGraphicsContext
GdipSetStringFormatLineAlign
GdipFillRectangleI
GdipCreateBitmapFromScan0
GdipCreateFontFromLogfontW
GdipCreatePen1
GdipCloneBrush
GdipDeleteFont
GdipAddPathStringI
GdipDeleteBrush
GdipGetFontSize
GdipAddPathPieI
GdipFillPath
GdipAddPathArcI
GdipDrawString
GdipGraphicsClear
GdipClosePathFigure
GdipAddPathRectangleI
GdipDrawLinesI
GdipDrawImageI
GdipSetClipPath
GdipMeasureString
GdipCreateFont
GdipSetStringFormatAlign
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipDrawImageRectRectI
GdipSetImageAttributesColorMatrix
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetTextRenderingHint
GdipCreateSolidFill
GdipGetImageWidth
GdipDeleteGraphics
GdipImageRotateFlip
GdipLoadImageFromStream
GdipCreateFromHDC
GdipCloneImage
GdipDrawImageRectRect
GdipLoadImageFromFile
GdipDisposeImage
GdipFree
GdipDrawLine
GdipDeleteFontFamily
GdipSetCompositingQuality
labs
__CxxFrameHandler3
_strdup
_stat64
_gmtime64
__sys_nerr
strerror
getenv
fflush
memchr
_errno
sprintf
isdigit
fputs
qsort
fgets
_strtoi64
strrchr
strncpy
isxdigit
strtol
memmove
strstr
strtoul
__iob_func
fwrite
realloc
_stricmp
_controlfp_s
_invoke_watson
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
rand
srand
wcscspn
_time64
_mbschr
floor
ceil
_localtime64_s
wcscat_s
wcscat
__RTDynamicCast
abs
wcsspn
_wtoi
_wcsupr_s
_wcsnicmp
wcschr
_wcslwr_s
wcsrchr
isspace
tolower
strchr
strncmp
isalnum
isalpha
fclose
_vsnprintf_s
fprintf
fseek
fputc
fread
atoi
sscanf
fopen
wcsncat
wcsstr
_wcsicmp
calloc
wcscpy_s
??0exception@std@@QAE@XZ
vsprintf_s
memcpy
?what@exception@std@@UBEPBDXZ
_vscprintf
??1exception@std@@UAE@XZ
_mbsicmp
malloc
setlocale
??0exception@std@@QAE@ABV01@@Z
_purecall
_beginthreadex
??0exception@std@@QAE@ABQBD@Z
strlen
wcscmp
vswprintf_s
free
_CxxThrowException
_recalloc
swprintf_s
_vscwprintf
??2@YAPAXI@Z
_waccess
strcmp
_invalid_parameter_noinfo
_mbscmp
??_V@YAXPAX@Z
wcsncpy_s
memset
memmove_s
memcpy_s
wcslen
??3@YAXPAX@Z
GetModuleFileNameExW
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
htons
bind
ntohs
getsockname
send
recv
WSAGetLastError
closesocket
getsockopt
WSASetLastError
freeaddrinfo
getaddrinfo
__WSAFDIsSet
select
ioctlsocket
connect
WSACleanup
getpeername
setsockopt
WSAStartup
socket
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ