Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
a.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a.exe
Resource
win10v2004-20230703-en
Target
a.exe
Size
3.3MB
MD5
8cb24d8792fde81631c6bd518da98d17
SHA1
2be679fa67690303fccaf8327dd35485e11a0101
SHA256
db64ee30d9a2a15af6fd300d442e8e87dfc451236e6dbcb58cd84ca0ec40ea42
SHA512
d3aad2e030a38102482625995f1e87bf18fd36521b6f012acbbbaf9725f8f306a61711bffb114a232ac7ea117ebc1678b9a25a4330af3167cb0e41f8fc4944ff
SSDEEP
49152:qP710vezrj4dJYFYUyuyGKmtHqYe/g7AS09jxKESJXLnzN:U710vSrcdWLZBeY7lsjxKESJX
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
StrCmpNA
ord2
ord3
ord1
ord11
ord4
GetCurrentThread
GetVersion
GetFileAttributesW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
OutputDebugStringA
LoadLibraryW
GetLastError
SetLastError
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
InterlockedExchange
CreateNamedPipeA
ConnectNamedPipe
DisconnectNamedPipe
GetOverlappedResult
GetWindowsDirectoryA
SetCurrentDirectoryA
CopyFileA
GetFileAttributesA
GetTempFileNameA
FindFirstFileA
CreateFileA
GetTempPathA
GetSystemDirectoryW
TerminateProcess
GetModuleFileNameA
IsValidCodePage
GetCPInfo
GetCurrentProcessId
GetEnvironmentVariableA
GetACP
GetCurrentProcess
LoadLibraryA
GetCurrentThreadId
GetVersionExA
FindNextFileW
RemoveDirectoryW
CreateDirectoryW
MultiByteToWideChar
WideCharToMultiByte
MoveFileW
FlushFileBuffers
WriteFile
ReadFile
CreateFileW
SetFilePointer
SetEndOfFile
GetFileInformationByHandle
GetDriveTypeW
FindFirstFileW
GetFullPathNameW
FindClose
DeleteFileW
Sleep
SwitchToThread
CreateThread
CreateSemaphoreA
TlsAlloc
InitializeCriticalSection
ReleaseSemaphore
WaitForSingleObject
LocalFree
LeaveCriticalSection
TlsSetValue
LocalAlloc
TlsGetValue
EnterCriticalSection
TlsFree
CloseHandle
DeleteCriticalSection
GetLocalTime
GetSystemTimeAsFileTime
GetUserDefaultLCID
GetProcAddress
FreeLibrary
FormatMessageA
SetNamedPipeHandleState
GetTimeZoneInformation
ExpandEnvironmentStringsA
CreateEventA
SetEvent
FindCloseChangeNotification
WaitForMultipleObjects
lstrcatA
GetSystemDirectoryA
lstrlenA
FindNextChangeNotification
ResetEvent
FindFirstChangeNotificationW
WaitNamedPipeA
PeekNamedPipe
NetShareGetInfo
IsNetworkAlive
sqlite3_bind_parameter_count
sqlite3_finalize
sqlite3_reset
sqlite3_busy_handler
sqlite3_column_bytes
sqlite3_bind_int
sqlite3_changes
sqlite3_get_autocommit
sqlite3_last_insert_rowid
sqlite3_bind_int64
sqlite3_bind_double
sqlite3_column_text
sqlite3_bind_text
sqlite3_bind_blob
sqlite3_bind_null
sqlite3_step
sqlite3_column_int
sqlite3_column_blob
sqlite3_column_int64
sqlite3_column_double
sqlite3_free
sqlite3_result_error
sqlite3_value_int
sqlite3_value_type
sqlite3_result_value
sqlite3_prepare_v2
sqlite3_open_v2
sqlite3_create_function
sqlite3_errmsg
sqlite3_errcode
sqlite3_close
sqlite3_exec
sqlite3_column_type
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?length@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?find_first_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDU_Size_type_nosscl@01@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?width@ios_base@std@@QAEHH@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?eof@?$char_traits@D@std@@SAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBEHXZ
?length@?$char_traits@D@std@@SAIPBD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
_cexit
_exit
_XcptFilter
_ismbblead
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?terminate@@YAXXZ
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
_errno
strtod
isspace
toupper
isalpha
tolower
memmove
memchr
sscanf
realloc
malloc
_strdup
calloc
__getmainargs
swscanf_s
_vsnwprintf_s
iswalpha
_wcslwr_s
memcmp
wcslen
free
printf
wcsrchr
_amsg_exit
_except_handler4_common
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_wcsicmp
wcscat_s
memmove_s
??0exception@std@@QAE@ABQBD@Z
??_V@YAXPAX@Z
??2@YAPAXI@Z
_set_invalid_parameter_handler
vwprintf_s
_purecall
strchr
strncpy
strcmp
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBDH@Z
__RTDynamicCast
??1exception@std@@UAE@XZ
??3@YAXPAX@Z
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
__CxxFrameHandler3
strlen
memcpy
memset
_unlock
_strlwr
pow
wcscpy
fclose
_localtime64
_gmtime64
rename
_getcwd
_fdopen
_open_osfhandle
?_open@@YAHPBDHH@Z
remove
_telli64
_lseeki64
_write
_read
_close
exit
fputs
fputc
fflush
strftime
sprintf
__iob_func
abort
qsort
bsearch
getenv
atoi
_stricmp
isalnum
_vsprintf_p
_mktime64
strtol
_time64
WSAGetLastError
WSASocketA
WSAStartup
WSACreateEvent
WSAEventSelect
WSACleanup
WSAIoctl
HttpQueryInfoA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
HttpAddRequestHeadersA
HttpSendRequestA
InternetReadFile
InternetSetOptionA
HttpSendRequestExA
HttpEndRequestA
InternetWriteFile
InternetCloseHandle
InternetOpenA
WNetGetResourceInformationW
WNetAddConnection2W
WNetCancelConnection2W
CryptUnprotectData
CryptProtectData
DdePostAdvise
DdeConnect
DdeNameService
DdeCreateStringHandleA
DdeClientTransaction
DdeDisconnect
DdeInitializeA
DdeGetLastError
DdeCreateDataHandle
DdeGetData
DdeFreeDataHandle
GetPropW
DestroyMenu
CallWindowProcA
GetSystemMetrics
RegisterClassW
InsertMenuW
DispatchMessageA
CreateWindowExW
PostMessageA
CreatePopupMenu
LoadStringW
GetCursorPos
DefWindowProcA
TranslateMessage
InsertMenuItemW
SetPropW
SetForegroundWindow
LoadImageW
TrackPopupMenu
PostQuitMessage
GetMessageA
DestroyWindow
PostMessageW
FindWindowW
DdeQueryStringA
DdeFreeStringHandle
DdeUninitialize
OpenThreadToken
GetTokenInformation
RegQueryValueExA
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyW
RegCloseKey
OpenProcessToken
RegOpenKeyExA
ConvertSidToStringSidA
ConvertStringSecurityDescriptorToSecurityDescriptorA
SHFileOperationA
ShellExecuteA
ShellExecuteExA
SHGetPathFromIDListW
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
Shell_NotifyIconW
CoTaskMemFree
CoCreateInstance
SafeArrayUnaccessData
SysFreeString
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayDestroy
SysAllocString
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ