Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
4322f186987c2ed51dd3ae0539427bc20d206c55a8f4c32a924f082a8185e7dd.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4322f186987c2ed51dd3ae0539427bc20d206c55a8f4c32a924f082a8185e7dd.exe
Resource
win10v2004-20230703-en
Target
4322f186987c2ed51dd3ae0539427bc20d206c55a8f4c32a924f082a8185e7dd
Size
1.3MB
MD5
9df8bdf81b6a29cf8edc8216f7eebb52
SHA1
b74b109462a7b90db1e2fc9b3c30f19920e67cfd
SHA256
4322f186987c2ed51dd3ae0539427bc20d206c55a8f4c32a924f082a8185e7dd
SHA512
7395a0182fd1718d1c45f1530cb228ad75cea2c9e5edb5ff6754f89c4a7a3a4b501423391b1d7ee357668b561629be35f0631a20e9db39f7ae02600725d1b544
SSDEEP
24576:sBTI9ze55e4/g56zNgzcLHSthDTb5wsi6Pq9OZb+gLx:M8k64/nsMHStxb509OZ6gV
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateUiOptions
GetRecordObj
WSAGetLastError
inet_addr
WSACleanup
WSAStartup
htons
send
closesocket
socket
inet_ntoa
gethostbyname
accept
recv
bind
listen
connect
CreateEncryptObject
StrToHex
BRCrc32
HexToStr
PathIsNetworkPathW
PathAppendW
PathIsDirectoryW
StrStrIW
PathFileExistsW
PathFindFileNameW
CreateEnumRemoteFolder
GetObjectSys
GetObjectLog
WNetGetUniversalNameW
GetBrLogMgr
DestroyEnvironmentBlock
CreateEnvironmentBlock
GetProcAddress
GetModuleFileNameW
CreateFileW
SetUnhandledExceptionFilter
GetCurrentThreadId
WaitForSingleObject
GetVersionExW
OpenProcess
Process32FirstW
Process32NextW
HeapAlloc
TerminateProcess
GetLastError
GetProcessHeap
Sleep
HeapFree
CreateToolhelp32Snapshot
CreateMutexW
GetFileAttributesW
LocalAlloc
MultiByteToWideChar
LocalFree
SetFileAttributesW
GetTickCount
SetFileTime
WriteFile
GetFileSizeEx
DeleteFileW
ReadFile
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
lstrcpyW
EnterCriticalSection
CreateEventW
LeaveCriticalSection
GetModuleHandleW
SetFilePointer
GetFileTime
FlushFileBuffers
GetDriveTypeW
WinExec
OutputDebugStringW
OutputDebugStringA
CreateDirectoryA
CreateDirectoryW
ReadDirectoryChangesW
GetModuleFileNameA
CreateIoCompletionPort
RemoveDirectoryW
GetFileAttributesExW
GetFileInformationByHandle
GetCurrentThread
GetQueuedCompletionStatus
MoveFileExW
PostQueuedCompletionStatus
SetEvent
GetVolumeInformationW
CreateThread
MoveFileW
GetPrivateProfileIntW
WideCharToMultiByte
LoadLibraryW
GetCurrentProcess
GetDiskFreeSpaceExW
SystemTimeToFileTime
GetFileSize
UnlockFile
LoadLibraryA
LockFile
HeapValidate
HeapCompact
CreateFileMappingA
WaitForSingleObjectEx
GetTempPathA
GetSystemTime
CreateFileMappingW
AreFileApisANSI
TryEnterCriticalSection
UnlockFileEx
DeleteFileA
MapViewOfFile
GetDiskFreeSpaceA
GetSystemTimeAsFileTime
UnmapViewOfFile
FormatMessageA
SetEndOfFile
GetTempPathW
GetSystemInfo
HeapSize
GetFullPathNameW
QueryPerformanceCounter
GetFullPathNameA
LockFileEx
FormatMessageW
GetDiskFreeSpaceW
GetVersionExA
HeapDestroy
HeapReAlloc
CreateFileA
InterlockedCompareExchange
GetFileAttributesA
HeapCreate
GetPrivateProfileStringA
IsBadReadPtr
IsBadWritePtr
lstrlenW
GetWindowsDirectoryW
GetSystemDirectoryW
SetFilePointerEx
CreateProcessW
CreatePipe
PeekNamedPipe
GetStartupInfoW
SetLastError
WriteConsoleW
WriteConsoleA
CloseHandle
FreeLibrary
GetCurrentProcessId
InterlockedExchange
UnhandledExceptionFilter
IsDebuggerPresent
RaiseException
CopyFileA
FindFirstFileW
FindClose
FindNextFileW
GetExitCodeProcess
DeviceIoControl
PostThreadMessageW
PostMessageW
LoadIconW
DispatchMessageW
KillTimer
TranslateAcceleratorW
SendMessageW
DefWindowProcW
CharUpperW
GetMessageW
LoadCursorW
EndPaint
UpdateWindow
TranslateMessage
PostQuitMessage
LoadAcceleratorsW
DestroyWindow
LoadStringW
CreateWindowExW
BeginPaint
wsprintfW
ShowWindow
RegisterClassExW
FindWindowW
UnregisterClassA
SetTimer
RegEnumKeyW
RegQueryInfoKeyW
RegFlushKey
RegOpenKeyW
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegSetValueExA
BuildExplicitAccessWithNameW
SetThreadToken
OpenThreadToken
RegQueryValueExA
RegOpenKeyExW
RegDeleteValueA
RegOpenKeyA
RegCloseKey
LookupAccountNameW
CreateProcessAsUserW
DuplicateTokenEx
GetLengthSid
SetSecurityDescriptorDacl
SetEntriesInAclW
GetNamedSecurityInfoW
GetTokenInformation
AddAccessAllowedAce
InitializeSecurityDescriptor
InitializeAcl
OpenProcessToken
FreeSid
EqualSid
AdjustTokenPrivileges
SetNamedSecurityInfoW
LookupPrivilegeValueW
AllocateAndInitializeSid
GetSecurityDescriptorLength
GetAclInformation
GetAce
SetFileSecurityW
SHGetFolderPathW
SHGetFolderPathA
CoInitialize
CoInitializeSecurity
CoCreateInstance
CoUninitialize
SysFreeString
SysAllocString
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEAB_WI@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEPADXZ
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
strncpy
_vsnwprintf
_vsnprintf
toupper
_vscprintf
_vscwprintf
vsprintf
srand
strtol
calloc
strftime
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__CxxFrameHandler3
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
_invoke_watson
_controlfp_s
_strnicmp
_itoa
_fileno
fputc
ferror
_fsopen
_get_osfhandle
_vsnprintf_s
strcat_s
isspace
strchr
isalnum
tolower
isalpha
_CxxThrowException
memcpy
wcscmp
swprintf_s
_wcsicmp
_invalid_parameter_noinfo
wcsstr
??2@YAPAXI@Z
memset
wcslen
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??3@YAXPAX@Z
wcscat_s
??0exception@std@@QAE@ABQBD@Z
wcscpy_s
??0exception@std@@QAE@ABV01@@Z
strcat
wcscat
wcsrchr
wcscpy
wcschr
strncpy_s
_beginthread
sprintf
strrchr
strncat_s
_wcsnicmp
malloc
printf
vswprintf_s
wcstombs
memcpy_s
_purecall
strlen
??_V@YAXPAX@Z
_beginthreadex
memmove_s
iswalpha
_localtime64
sprintf_s
fwprintf
_wfopen_s
fprintf
fclose
fopen_s
vsprintf_s
_time64
fseek
ftell
fread
fwrite
memcmp
_vswprintf
atoi
strcmp
fprintf_s
strstr
fgets
wcsncpy
_mktime64
mbstowcs
memmove
strncmp
realloc
_endthreadex
free
_localtime64_s
_msize
strcpy_s
rand
WTSFreeMemory
WTSEnumerateSessionsW
WTSQueryUserToken
WTSQuerySessionInformationW
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
WinHttpOpenRequest
WinHttpCrackUrl
WinHttpReadData
WinHttpAddRequestHeaders
WinHttpSetTimeouts
WinHttpCloseHandle
WinHttpSendRequest
WinHttpQueryDataAvailable
WinHttpOpen
WinHttpConnect
WinHttpReceiveResponse
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ