Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
DataExchangeHost.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
DataExchangeHost.exe
Resource
win10v2004-20230703-en
Target
DataExchangeHost.exe
Size
253KB
MD5
1c684d351cbee157a985f153b7136f9a
SHA1
1c1d7d43df82c51a61ce852d0b226b998b47b3eb
SHA256
55a8e3733ac2e88a2975e16a4e2968b7c81fb113e02f9d14ac9b0566d41e8d23
SHA512
9685a13b4dbb226ae522c22ca59d200cb6ac6236ce4f10a11d64049b9c00ec017efaf4d4688fe6ef2082157fd7c50b03dfb85c5dc9b63e2371b01467d6571785
SSDEEP
3072:YF5uCg6AtQGfR7iz7KeIM6mzI476RQeIDeo/QmoIZae1c20iQqs6tNaaa5aaav/A:YLNIrpy28I4LDeo/P7n0iX0yblDicL4R
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_commode
_fmode
?terminate@@YAXXZ
_lock
_unlock
_onexit
_wcmdln
__C_specific_handler
_initterm
??1type_info@@UEAA@XZ
__dllonexit
__setusermatherr
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
_XcptFilter
_purecall
??_V@YAXPEAX@Z
__CxxFrameHandler3
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
??3@YAXPEAX@Z
free
?what@exception@@UEBAPEBDXZ
??0exception@@QEAA@AEBQEBD@Z
??0bad_cast@@QEAA@PEBD@Z
??0bad_cast@@QEAA@AEBV0@@Z
??1bad_cast@@UEAA@XZ
memmove_s
wcschr
malloc
_callnewh
??0exception@@QEAA@AEBQEBDH@Z
_CxxThrowException
memcpy
memmove
setlocale
__pctype_func
___lc_handle_func
___lc_codepage_func
calloc
___mb_cur_max_func
_errno
_ismbblead
__uncaught_exception
abort
memset
_wcsdup
__crtLCMapStringW
_wsetlocale
memcmp
memcpy_s
_vsnwprintf
_vsnprintf_s
ceilf
GetProcAddress
LoadResource
GetModuleFileNameA
GetModuleHandleExW
GetModuleHandleW
LockResource
FindResourceExW
CreateEventW
ReleaseMutex
InitializeCriticalSectionEx
InitializeCriticalSection
ResetEvent
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
ReleaseSRWLockExclusive
CreateEventExW
DeleteCriticalSection
CreateSemaphoreExW
CreateMutexExW
SetEvent
AcquireSRWLockExclusive
OpenSemaphoreW
WaitForSingleObjectEx
AcquireSRWLockShared
ReleaseSemaphore
ReleaseSRWLockShared
GetProcessHeap
HeapSetInformation
HeapFree
HeapAlloc
SetLastError
RaiseException
UnhandledExceptionFilter
SetErrorMode
SetUnhandledExceptionFilter
GetLastError
GetCurrentThread
OpenThreadToken
GetCurrentThreadId
GetCurrentProcess
OpenProcessToken
GetCurrentProcessId
TerminateProcess
GetProcessId
GetStartupInfoW
SetPriorityClass
FormatMessageW
GetLocaleInfoW
OutputDebugStringW
IsDebuggerPresent
DebugBreak
CloseHandle
DuplicateHandle
GetProcessMitigationPolicy
OpenProcess
SetProcessMitigationPolicy
CreateStreamOnHGlobal
CoGetCallContext
CoReleaseMarshalData
CoMarshalInterThreadInterfaceInStream
CoUnmarshalInterface
CoMarshalInterface
CoEnableCallCancellation
CoGetCallerTID
CoTaskMemFree
CoGetMalloc
CoDisableCallCancellation
CoResumeClassObjects
CoRegisterClassObject
CoRevokeClassObject
CoAddRefServerProcess
CoReleaseServerProcess
CoCreateFreeThreadedMarshaler
CoTaskMemRealloc
CoTaskMemAlloc
CoUninitialize
CoDecrementMTAUsage
CoFreeUnusedLibrariesEx
CoInitializeEx
CoIncrementMTAUsage
CoCreateInstance
CoInitializeSecurity
CoCancelCall
RoOriginateError
GetRestrictedErrorInfo
SetRestrictedErrorInfo
RoTransformError
RoOriginateErrorW
DecodePointer
EncodePointer
RoActivateInstance
RoGetActivationFactory
RoRevokeActivationFactories
RoRegisterActivationFactories
WindowsCreateStringReference
WindowsStringHasEmbeddedNull
WindowsCreateString
WindowsIsStringEmpty
WindowsCompareStringOrdinal
WindowsDeleteString
WindowsGetStringLen
WindowsDuplicateString
WindowsGetStringRawBuffer
Sleep
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
LocalAlloc
LocalFree
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
DuplicateTokenEx
GetSidSubAuthority
GetTokenInformation
EventUnregister
EventRegister
EventWriteTransfer
EventSetInformation
EventActivityIdControl
RoGetAgileReference
RoReportFailedDelegate
RoGetMatchingRestrictedErrorInfo
IsErrorPropagationEnabled
SHTaskPoolQueueTask
SHTaskPoolAllowThreadReuse
RegGetValueW
CompareFileTime
GetUserDefaultUILanguage
DeleteTimerQueueTimer
CreateTimerQueueTimer
WaitForThreadpoolTimerCallbacks
CreateThreadpoolTimer
SetThreadpoolTimer
CloseThreadpoolTimer
PathIsFileSpecW
PathFindFileNameW
QueryFullProcessImageNameW
CreateStreamOverRandomAccessStream
IStream_Read
IStream_Size
IStream_Reset
CheckRemoteDebuggerPresent
GlobalUnlock
GlobalLock
WaitForMultipleObjects
RtlNtStatusToDosError
RtlFreeHeap
NtQueryInformationToken
ZwQueryWnfStateData
RtlAllocateHeap
RtlNtStatusToDosErrorNoTeb
RtlCompareUnicodeString
RtlInitUnicodeString
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
GlobalGetAtomNameW
CapabilityCheck
ClientToScreen
GetPropW
AllowSetForegroundWindow
GetDesktopWindow
GetForegroundWindow
GetWindowLongW
GetParent
DestroyWindow
DefWindowProcW
GetWindowThreadProcessId
SendMessageW
ShowWindow
ScreenToClient
WindowFromPoint
GetWindowLongPtrW
SetForegroundWindow
SetWindowLongPtrW
CreateWindowExW
UnregisterClassW
PostMessageW
SetTimer
GetMessageW
TranslateMessage
DispatchMessageW
GetClassInfoExW
RegisterClassExW
SystemParametersInfoW
GetSystemMetrics
CreateWindowInBand
DWriteCreateFactory
GetClipboardFormatNameW
GetPackageFullName
ord69
ord99
ord11
ord12
DCompositionCreateDevice2
ord1019
SendInput
ord2521
ord2557
GetTopLevelWindow
ord2550
ReleaseCapture
GetWindowDpiAwarenessContext
IsIconic
GetCapture
AttachThreadInput
GetSysColor
GetAsyncKeyState
SetProcessDefaultLayout
SetCapture
ord7
D3D11CreateDevice
ResolveDelayLoadedAPI
DelayLoadFailureHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ