Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
78b75baa6ae7b22910f145d70e00cfb2654effb5c66d665ead6c9288a8b55aa7.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
78b75baa6ae7b22910f145d70e00cfb2654effb5c66d665ead6c9288a8b55aa7.exe
Resource
win10v2004-20230703-en
Target
78b75baa6ae7b22910f145d70e00cfb2654effb5c66d665ead6c9288a8b55aa7
Size
4.0MB
MD5
23e11ec8a1677f9dae56af3b03afefdf
SHA1
4541319af117d6be216e3a1c9c99126b97e42043
SHA256
78b75baa6ae7b22910f145d70e00cfb2654effb5c66d665ead6c9288a8b55aa7
SHA512
a2f09ae6de1d862606218158de85a0282dcd27d2b8a692342d88e28ba33a71ac601adf9ae5e19e9d76133f2391ca6d2c42858b0e3a412401eef6efd13f69d184
SSDEEP
49152:+QKzU5LMlElQnG6RLUXgoxq6HT6vlonxYhRGdDRvPIWVm56z4RbmqP9/7TGcyBpg:6EMlEl4G6uq6H+8W6+pTRlKVtZUH
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_TrackMouseEvent
InitCommonControlsEx
recv
WSAGetLastError
send
setsockopt
ioctlsocket
select
freeaddrinfo
closesocket
connect
socket
getaddrinfo
getsockopt
getsockname
getpeername
WSASetLastError
bind
__WSAFDIsSet
listen
gethostname
shutdown
gethostbyname
accept
htons
inet_addr
inet_ntoa
WSAStartup
WSACreateEvent
WSAEventSelect
WSACleanup
sendto
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
recvfrom
ntohl
ntohs
Sleep
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
DeleteCriticalSection
SetEvent
CreateMutexW
ReleaseMutex
WaitForSingleObjectEx
CreateFileMappingW
WaitForSingleObject
MapViewOfFile
UnmapViewOfFile
UnhandledExceptionFilter
LoadLibraryW
FreeLibrary
DeviceIoControl
CreateFileW
GetDriveTypeW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileSectionW
GetFileAttributesExA
DeleteFileA
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetExitCodeProcess
DeleteFileW
WideCharToMultiByte
GetLocaleInfoW
GetEnvironmentVariableW
GetSystemDirectoryW
MultiByteToWideChar
GetLocalTime
GetFileAttributesExW
GetTickCount
InterlockedExchangeAdd
MoveFileW
SetFilePointer
WriteFile
FormatMessageW
GetSystemInfo
GlobalMemoryStatusEx
OutputDebugStringW
GetFileAttributesW
FindFirstFileW
RemoveDirectoryW
MoveFileExW
FindNextFileW
FindClose
CopyFileW
VirtualAlloc
VirtualFree
ExpandEnvironmentStringsW
GetLongPathNameW
CreateDirectoryW
GetFileSize
ReadFile
lstrcmpW
SystemTimeToFileTime
GetCurrentDirectoryW
LocalFileTimeToFileTime
SetFileTime
FileTimeToSystemTime
GetTempPathW
SetCurrentDirectoryW
GetVersionExW
SetLastError
OutputDebugStringA
GetACP
RaiseException
DecodePointer
GetSystemTime
FreeResource
PeekNamedPipe
LocalFree
GlobalFree
LoadLibraryA
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
OpenEventW
OpenFileMappingW
GetSystemDefaultLangID
SwitchToThread
InterlockedExchange
SleepEx
FormatMessageA
ExpandEnvironmentStringsA
GetStdHandle
GetFileType
GetFullPathNameW
SetEndOfFile
GetPrivateProfileIntA
GetPrivateProfileStringA
CreateDirectoryA
CreateFileA
FlushFileBuffers
QueryPerformanceCounter
GetSystemTimeAsFileTime
LockFileEx
CreateFileMappingA
UnlockFile
HeapCompact
GetVersionExA
FlushViewOfFile
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
HeapValidate
UnlockFileEx
GetFullPathNameA
LockFile
GetDiskFreeSpaceW
HeapCreate
AreFileApisANSI
TryEnterCriticalSection
FlushInstructionCache
SetThreadContext
GetThreadContext
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetConsoleCP
ReadConsoleW
GetConsoleMode
ExitProcess
SetEnvironmentVariableA
SystemTimeToTzSpecificLocalTime
GetModuleHandleExW
ResumeThread
ExitThread
RtlUnwind
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
LoadLibraryExW
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
CreateThread
SignalObjectAndWait
CreateTimerQueue
InitializeSListHead
GetStartupInfoW
ResetEvent
IsDebuggerPresent
LCMapStringW
CompareStringW
GetCPInfo
QueryPerformanceFrequency
EncodePointer
IsProcessorFeaturePresent
QueueUserWorkItem
GetNativeSystemInfo
GetExitCodeThread
GetCurrentThread
DuplicateHandle
SetFilePointerEx
FindFirstFileExW
GetStringTypeW
InterlockedCompareExchange
HeapReAlloc
VirtualQuery
HeapSize
GetProcAddress
GetModuleHandleW
VirtualProtect
WriteProcessMemory
GetCurrentProcess
GetModuleFileNameW
HeapAlloc
GetProcessHeap
GetCurrentProcessId
GetCurrentThreadId
SetErrorMode
InitializeCriticalSection
HeapFree
EnterCriticalSection
LeaveCriticalSection
CreateEventW
SearchPathW
OpenProcess
HeapDestroy
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedIncrement
GetLastError
OpenMutexW
GetCommandLineW
lstrcpynW
VirtualAllocEx
SetUnhandledExceptionFilter
TerminateProcess
CloseHandle
WaitForMultipleObjects
CreateProcessW
wsprintfW
GetSystemMetrics
GetDC
ReleaseDC
DestroyWindow
DefWindowProcW
GetParent
GetWindow
MapWindowPoints
FillRect
DrawTextW
FindWindowA
EndPaint
GetWindowRect
IsWindowVisible
FindWindowExW
UpdateLayeredWindow
BeginPaint
IsRectEmpty
InvalidateRect
SetWindowPos
SetFocus
ClientToScreen
PostMessageW
SetWindowRgn
GetActiveWindow
GetWindowTextW
GetSystemMenu
GetMenuState
DrawIconEx
GetClassInfoExW
GetClassNameW
GetCursorPos
ScreenToClient
FindWindowW
IsWindowUnicode
SetPropW
GetPropW
RemovePropW
WindowFromPoint
UnionRect
RegisterWindowMessageW
EqualRect
CopyRect
GetClientRect
KillTimer
SetTimer
GetKeyState
GetCapture
ReleaseCapture
SetCapture
IntersectRect
OffsetRect
SetCursor
PtInRect
RegisterClassExW
LoadCursorW
SetWindowLongW
UnhookWindowsHookEx
CreateWindowExW
SetWindowsHookExW
GetClassInfoW
CallNextHookEx
IsWindow
GetWindowLongW
LoadImageW
SendMessageW
PostQuitMessage
SetForegroundWindow
SetRect
UpdateWindow
SystemParametersInfoW
IsZoomed
EnumDisplayDevicesW
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageTimeoutW
CallWindowProcW
ShowWindow
SetTextColor
CreateSolidBrush
GetObjectA
CombineRgn
ExtCreateRegion
GetObjectW
Rectangle
CreateRectRgn
ExcludeClipRect
BitBlt
CreateCompatibleBitmap
CreatePen
GetTextExtentPoint32W
SetBkMode
GetStockObject
DeleteDC
SelectObject
CreateDIBSection
CreateCompatibleDC
DeleteObject
CreateFontIndirectW
GetDeviceCaps
ControlService
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptReleaseContext
CloseServiceHandle
DeleteService
RegCloseKey
OpenServiceW
OpenSCManagerW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueW
LookupPrivilegeNameW
GetTokenInformation
OpenProcessToken
RegEnumKeyExW
SHGetSpecialFolderPathW
ShellExecuteW
SHGetFolderPathA
SHCreateDirectoryExW
SHFileOperationW
CommandLineToArgvW
ShellExecuteExW
CoTaskMemAlloc
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CoUninitialize
CoInitialize
CoCreateInstance
CoCreateGuid
VariantClear
SysStringLen
SysAllocString
SysFreeString
VariantInit
PathFileExistsW
StrStrIW
PathFindFileNameW
PathAddBackslashW
PathIsDirectoryW
SHGetValueW
SHDeleteKeyW
wnsprintfW
PathAppendW
SHSetValueW
SHDeleteValueW
StrStrIA
PathRemoveFileSpecW
Direct3DCreate9
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
InternetSetOptionW
InternetQueryOptionW
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetOpenW
InternetCrackUrlW
InternetReadFile
InternetCloseHandle
HttpQueryInfoW
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpWriteData
WinHttpGetProxyForUrl
WinHttpGetIEProxyConfigForCurrentUser
WinHttpSendRequest
WinHttpQueryDataAvailable
WinHttpSetOption
WinHttpOpenRequest
WinHttpConnect
WinHttpCrackUrl
WinHttpSetTimeouts
WinHttpOpen
WinHttpCloseHandle
WinHttpReadData
WinHttpAddRequestHeaders
IcmpCreateFile
IcmpCloseHandle
IcmpSendEcho
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipMeasureString
GdipDrawString
GdipSetTextRenderingHint
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCreateStringFormat
GdipCreateSolidFill
GdipDeleteBrush
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipCloneImage
GdipDrawImageRectRectI
GdipDrawImageRectI
GdipGraphicsClear
GdipSetWorldTransform
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipRotateMatrix
GdipTranslateMatrix
GdipDeleteMatrix
GdipCreateMatrix
GdipGetImageHeight
GdipGetImageWidth
GdipAlloc
GdipFree
GdiplusShutdown
GdiplusStartup
GdipCloneBitmapAreaI
GdipDisposeImage
AlphaBlend
GetModuleFileNameExW
GetModuleFileNameExA
Netbios
ord145
ord118
ord216
ord142
ord41
ord14
ord147
ord79
ord27
ord26
ord127
ord46
ord301
ord133
ord208
ord167
??4BeaconClient@@QAEAAV0@$$QAV0@@Z
??4BeaconClient@@QAEAAV0@ABV0@@Z
?GetCommParamGetter@BeaconClient@@SAABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@2@@std@@@2@@std@@XZ
?GetCommcomParams@BeaconClient@@SAABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@XZ
?GetConfig@BeaconClient@@SAABUBeaconConfig@@XZ
?InitSDK@BeaconClient@@SAXABUBeaconConfig@@@Z
?PrepareParams@BeaconClient@@SA?AV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@ABV23@_J@Z
?Quit@BeaconClient@@SAXXZ
?Report@BeaconClient@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@3@W4RequestPriority@Beacon@@@Z
?SetCommParamGetter@BeaconClient@@SAXABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@2@@std@@@2@@std@@@Z
?SetCommonParams@BeaconClient@@SAXABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ