Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
a5191663bd67cf25ca0962811fc8700aec1a3889c269ae2242c783b318b68490.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a5191663bd67cf25ca0962811fc8700aec1a3889c269ae2242c783b318b68490.exe
Resource
win10v2004-20230703-en
Target
a5191663bd67cf25ca0962811fc8700aec1a3889c269ae2242c783b318b68490
Size
7.8MB
MD5
c89290c2ecfc594ac07385d81fe5e72c
SHA1
6259fff7f4464836b5c065d80c4cc1872b448fcf
SHA256
a5191663bd67cf25ca0962811fc8700aec1a3889c269ae2242c783b318b68490
SHA512
21b7528b4dd87b9780ca199d2bc62fa8d7bd17edc9af5a36871b9c1b741b7064b96deb1ffa87f351c38e854a211e3db9b2e4c36252636a52c6e5edf12d4b5ca1
SSDEEP
196608:PfgNGIRtcKtTReTRIq7ZwG5eWWi/zio/ibL:uG6cZDwWrX/k
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetModuleFileNameExW
GetModuleFileNameExA
WSAEventSelect
WSAWaitForMultipleEvents
WSACreateEvent
recvfrom
WSAStartup
WSACleanup
sendto
WSAJoinLeaf
inet_addr
bind
htons
WSASocketW
ioctlsocket
setsockopt
send
WSAGetLastError
recv
select
freeaddrinfo
closesocket
connect
socket
getaddrinfo
WSAEnumNetworkEvents
htonl
ntohs
ntohl
inet_ntoa
shutdown
gethostname
WSASetLastError
getsockopt
getsockname
__WSAFDIsSet
accept
gethostbyname
listen
getpeername
ImmDisableIME
UnhandledExceptionFilter
GetModuleHandleW
GetCurrentProcess
DeviceIoControl
GetDiskFreeSpaceExW
GetLogicalDrives
GetDriveTypeW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetExitCodeProcess
OpenProcess
TerminateProcess
DeleteFileW
GetSystemInfo
GlobalMemoryStatusEx
OutputDebugStringW
GetModuleFileNameW
GetCommandLineW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileSectionW
GetFileSize
ReadFile
SetFilePointer
GetFileAttributesExA
DeleteFileA
GetLocaleInfoW
GetEnvironmentVariableW
GetLocalTime
GetFileAttributesExW
GetTickCount
InterlockedExchangeAdd
MoveFileW
GetCurrentThreadId
WriteFile
FormatMessageW
GetVersion
GetFileAttributesW
FindFirstFileW
RemoveDirectoryW
MoveFileExW
FindNextFileW
FindClose
CopyFileW
VirtualAlloc
VirtualFree
ExpandEnvironmentStringsW
GetLongPathNameW
CreateDirectoryW
lstrcmpW
SystemTimeToFileTime
GetCurrentDirectoryW
FileTimeToSystemTime
VirtualProtect
WriteProcessMemory
GetCurrentProcessId
SetErrorMode
InitializeCriticalSection
SearchPathW
WaitForMultipleObjects
SetUnhandledExceptionFilter
VirtualAllocEx
lstrcpynW
GetACP
FreeResource
GetVersionExW
GetWindowsDirectoryW
CreatePipe
SetHandleInformation
PeekNamedPipe
LoadLibraryExW
RaiseException
DecodePointer
SetLastError
lstrcmpiW
ResetEvent
lstrlenW
GetTempFileNameW
GetComputerNameW
SetCurrentDirectoryW
GetTempPathW
IsDBCSLeadByte
GlobalFree
LoadLibraryA
TryEnterCriticalSection
TlsSetValue
GetQueuedCompletionStatus
PostQueuedCompletionStatus
TlsAlloc
TlsGetValue
TlsFree
CreateIoCompletionPort
IsDebuggerPresent
GetSystemDefaultLangID
SwitchToThread
VirtualQuery
IsBadReadPtr
IsBadWritePtr
GetVersionExA
SetEndOfFile
CreateFileA
CreateDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetStdHandle
DuplicateHandle
GetCPInfo
SleepEx
FormatMessageA
GetFileType
ExpandEnvironmentStringsA
GetSystemTime
FindFirstFileExW
SetFilePointerEx
AreFileApisANSI
GetStringTypeW
QueueUserWorkItem
IsProcessorFeaturePresent
EncodePointer
GetCurrentThread
GetExitCodeThread
GetNativeSystemInfo
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
LoadLibraryExA
GetStartupInfoW
CreateTimerQueue
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
UnmapViewOfFile
ReleaseSemaphore
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RtlUnwind
ExitThread
ResumeThread
GetModuleHandleExW
SystemTimeToTzSpecificLocalTime
GetFullPathNameW
GetFullPathNameA
SetEnvironmentVariableA
ExitProcess
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetDateFormatW
GetTimeFormatW
IsValidLocale
GlobalLock
GlobalAlloc
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
SetStdHandle
GetTimeZoneInformation
HeapCreate
GetDiskFreeSpaceW
SetThreadContext
LockFile
UnlockFileEx
HeapValidate
GetTempPathA
GetDiskFreeSpaceA
GetFileAttributesA
FlushViewOfFile
HeapCompact
UnlockFile
MapViewOfFile
CreateFileMappingW
WaitForSingleObjectEx
SetEvent
CreateEventW
DeleteCriticalSection
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
Sleep
InterlockedExchange
InterlockedCompareExchange
CreateProcessW
GetProcessHeap
CreateFileMappingA
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
GetLastError
OpenMutexW
CreateFileW
LocalFree
LocalAlloc
FreeLibrary
GetProcAddress
LoadLibraryW
GetSystemDirectoryW
WideCharToMultiByte
CloseHandle
ReleaseMutex
WaitForSingleObject
CreateMutexW
MultiByteToWideChar
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringA
WriteConsoleW
GetThreadContext
LockFileEx
ReleaseCapture
GetDlgCtrlID
ShowScrollBar
SetCapture
SetTimer
IsWindowVisible
UpdateWindow
EndPaint
PostThreadMessageW
LoadIconW
SetCursor
PtInRect
FlashWindow
LoadImageW
CopyImage
EqualRect
DrawFrameControl
DrawTextW
DrawIconEx
TrackPopupMenu
DrawEdge
MessageBoxW
BeginPaint
GetSystemMenu
SetWindowTextW
GetKeyState
CallWindowProcW
GetWindowTextW
GetWindowTextLengthW
SendMessageTimeoutW
PostQuitMessage
KillTimer
GetQueueStatus
GetActiveWindow
MsgWaitForMultipleObjects
FrameRect
OffsetRect
InflateRect
SetRect
CopyRect
DispatchMessageW
TranslateMessage
GetMessageW
RegisterClassExW
LoadCursorW
GetClassInfoExW
RegisterWindowMessageW
FillRect
CharNextW
UnregisterClassW
LoadStringW
MsgWaitForMultipleObjectsEx
WaitMessage
IsWindow
SetWindowRgn
GetDlgItem
GetParent
GetWindow
SetActiveWindow
EnableWindow
IsWindowEnabled
ShowWindow
InvalidateRect
GetWindowDC
MapWindowPoints
ClientToScreen
GetClientRect
GetWindowRect
SetWindowPos
MoveWindow
SendMessageW
CreateWindowExW
GetWindowLongW
SetWindowLongW
GetDesktopWindow
GetSystemMetrics
EnumDisplayDevicesW
wsprintfW
GetMonitorInfoW
MonitorFromWindow
FindWindowW
DefWindowProcW
GetSysColor
DestroyWindow
ReleaseDC
GetDC
PostMessageW
PeekMessageW
SelectObject
CreateFontIndirectW
GetDeviceCaps
GetTextMetricsW
DeleteObject
StretchBlt
GetCurrentObject
RectInRegion
SaveDC
RestoreDC
GetClipRgn
SelectClipRgn
RoundRect
TextOutW
SetBkMode
GetTextExtentPoint32W
LineTo
MoveToEx
CreateSolidBrush
SetRectRgn
OffsetRgn
Rectangle
ExtSelectClipRgn
CreateRectRgnIndirect
CreatePen
SetTextColor
CreateBitmap
CombineRgn
CreateRectRgn
ExtTextOutW
SetBkColor
CreateDIBSection
GetObjectW
GetStockObject
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
QueryServiceStatusEx
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
OpenProcessToken
GetTokenInformation
LookupPrivilegeNameW
LookupPrivilegeValueW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
RegOpenKeyExA
RegEnumKeyW
RegDeleteValueW
RegQueryInfoKeyW
RegDeleteKeyW
RegCloseKey
CloseServiceHandle
ControlService
OpenServiceW
OpenSCManagerW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExA
AdjustTokenPrivileges
CommandLineToArgvW
SHGetSpecialFolderPathW
SHCreateDirectoryExW
SHFileOperationW
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathA
ShellExecuteExW
CoCreateGuid
CoCreateInstance
CoInitialize
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
CoTaskMemRealloc
SysFreeString
SysAllocString
SysStringLen
OleLoadPicture
VarUI4FromStr
StrStrIA
StrCpyW
StrCmpW
PathAppendW
StrToIntA
PathFindFileNameW
SHDeleteKeyW
SHGetValueW
PathIsDirectoryW
PathAddBackslashW
PathFileExistsW
PathRemoveFileSpecW
StrStrIW
wnsprintfW
UnMapAndLoad
MapAndLoad
Direct3DCreate9
HttpQueryInfoW
InternetCrackUrlW
InternetCanonicalizeUrlW
DeleteUrlCacheEntryW
InternetCreateUrlW
InternetReadFile
InternetSetOptionW
InternetQueryOptionW
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
InternetConnectW
InternetOpenW
InternetCloseHandle
timeSetEvent
timeKillEvent
_TrackMouseEvent
InitCommonControlsEx
GdipCloneImage
GdipCreateBitmapFromStream
GdipAlloc
GdipDisposeImage
GdipLoadImageFromStream
GdipDrawImageI
GdipGetImageWidth
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageRectI
GdipDrawImageRectRectI
GdiplusStartup
GdipGetImageHeight
GdipCreateHBITMAPFromBitmap
GdiplusShutdown
GdipFree
URLDownloadToFileW
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpWriteData
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpCrackUrl
WinHttpConnect
WinHttpOpenRequest
WinHttpSetOption
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpOpen
WinHttpCloseHandle
WinHttpSetTimeouts
IcmpCloseHandle
IcmpCreateFile
GetIpForwardTable
IcmpSendEcho
NetWkstaTransportEnum
NetApiBufferFree
Netbios
ord211
ord60
ord50
ord41
ord22
ord26
ord46
ord32
ord33
ord35
ord79
ord30
ord200
ord301
ord27
ord143
??4BeaconClient@@QAEAAV0@$$QAV0@@Z
??4BeaconClient@@QAEAAV0@ABV0@@Z
?GetCommParamGetter@BeaconClient@@SAABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@2@@std@@@2@@std@@XZ
?GetCommcomParams@BeaconClient@@SAABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@XZ
?GetConfig@BeaconClient@@SAABUBeaconConfig@@XZ
?InitSDK@BeaconClient@@SAXABUBeaconConfig@@@Z
?PrepareParams@BeaconClient@@SA?AV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@ABV23@_J@Z
?Quit@BeaconClient@@SAXXZ
?Report@BeaconClient@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@3@W4RequestPriority@Beacon@@@Z
?SetCommParamGetter@BeaconClient@@SAXABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@2@@std@@@2@@std@@@Z
?SetCommonParams@BeaconClient@@SAXABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z
curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_maprintf
curl_mfprintf
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_multi_wait
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ