Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
a4fa8154877eabdf0ea5cae628f5cb021164d3c89cc0d1d685cbc164588c705f.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a4fa8154877eabdf0ea5cae628f5cb021164d3c89cc0d1d685cbc164588c705f.dll
Resource
win10v2004-20230831-en
Target
a4fa8154877eabdf0ea5cae628f5cb021164d3c89cc0d1d685cbc164588c705f
Size
12.2MB
MD5
8ccf91ba4d23f35957221741c97627d6
SHA1
054e5f55c9a0b1cdfe3e9fcf512b9288d3c4b8d1
SHA256
a4fa8154877eabdf0ea5cae628f5cb021164d3c89cc0d1d685cbc164588c705f
SHA512
c6de6165b71fb47ab51221f0704204d9f07ff77ef5cc5cd7e573d4aff102327a6a32da4c00ca3eae13f193c62f58b9d01e90210979c8b1f58d22520440162dd6
SSDEEP
196608:IMTiE4b43pzqBm0+8PFDf+NvfPsSRHHyqrN4ONAEFMzi0ASMkDMPevB5:IMTD4kpzqvf6fPxHym+gPMgcM+T
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DwmRenderGesture
RoActivateInstance
RoGetActivationFactory
WindowsIsStringEmpty
WindowsCreateString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDeleteString
GetFileVersionInfoW
GetFileVersionInfoSizeA
VerQueryValueA
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoA
waveOutGetNumDevs
waveOutGetDevCapsW
waveInGetNumDevs
waveInGetDevCapsW
waveInOpen
waveInClose
mixerGetLineInfoA
waveOutReset
waveOutWrite
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutClose
waveOutOpen
timeEndPeriod
timeBeginPeriod
timeGetDevCaps
timeGetTime
timeKillEvent
timeSetEvent
waveInReset
waveInStop
waveInStart
waveInAddBuffer
waveInUnprepareHeader
waveInPrepareHeader
mixerSetControlDetails
waveInGetPosition
waveOutRestart
waveOutPause
mixerGetControlDetailsA
mixerGetLineControlsA
mixerClose
mixerOpen
mixerGetDevCapsA
waveInMessage
waveOutMessage
waveOutGetDevCapsA
mixerGetID
waveInGetDevCapsA
waveOutGetPosition
InternetGetCookieW
InternetSetCookieW
CertFindCertificateInStore
CertVerifySubjectCertificateContext
CertCreateCertificateContext
CertFreeCertificateContext
CryptVerifyMessageSignature
CryptGetMessageCertificates
CertOpenStore
CertEnumCertificatesInStore
CertGetCertificateContextProperty
CertCloseStore
CertDuplicateCertificateContext
SafeArrayDestroy
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetVartype
VariantInit
VariantClear
SysAllocStringLen
SysFreeString
SysAllocString
SafeArrayCreateVector
SysStringByteLen
VariantChangeType
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
UnRegisterTypeLi
OleCreatePropertyFrame
SysAllocStringByteLen
SafeArrayPutElement
SysStringLen
SafeArrayGetLBound
SafeArrayGetUBound
VarBstrCat
ord8
ord1
AlphaBlend
TlsSetValue
GetACP
GetCPInfo
IsDBCSLeadByte
GetCurrentThread
SetThreadAffinityMask
ExpandEnvironmentStringsW
GlobalAlloc
GlobalFree
WideCharToMultiByte
GetLocaleInfoA
GetModuleHandleW
GetFileAttributesA
SetFileAttributesA
OutputDebugStringW
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionEx
DisableThreadLibraryCalls
GetModuleFileNameW
LoadLibraryExW
LoadResource
SizeofResource
GlobalLock
GlobalUnlock
LocalAlloc
LocalFree
MulDiv
lstrcmpiW
FindResourceW
GetTickCount
LCMapStringW
GetLocaleInfoW
CreateProcessA
CreateDirectoryW
CreateFileW
FindClose
MultiByteToWideChar
FindNextFileW
GetFileSizeEx
RemoveDirectoryW
GetSystemDirectoryW
GetSystemWow64DirectoryW
GlobalSize
CreateFileA
GetFileSize
GetTempFileNameW
ReadFile
SetFilePointer
WriteFile
CreateThread
VirtualQuery
FindResourceExW
LockResource
FindResourceExA
MoveFileExW
GetUserDefaultUILanguage
GetUserDefaultLangID
GetUserPreferredUILanguages
GetTempPathW
SetUnhandledExceptionFilter
GetTimeZoneInformation
ReleaseSemaphore
CreateSemaphoreW
ExpandEnvironmentStringsA
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryA
DeleteFileA
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
GetLongPathNameW
GetVolumeInformationW
SetFilePointerEx
DeviceIoControl
CreateMutexA
GetModuleFileNameA
lstrlenW
GetTempPathA
GetTempFileNameA
ReleaseMutex
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
DuplicateHandle
GetExitCodeThread
SetThreadPriority
TerminateThread
CreateWaitableTimerW
SleepEx
QueueUserAPC
OpenThread
GetModuleHandleExW
K32GetProcessImageFileNameW
CompareFileTime
SwitchToThread
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsFree
FormatMessageW
GetStdHandle
GetFileType
GetSystemTimeAsFileTime
SwitchToFiber
DeleteFiber
CreateFiber
ConvertFiberToThread
ConvertThreadToFiber
GetEnvironmentVariableW
GetConsoleMode
ReadConsoleA
ReadConsoleW
SetConsoleMode
GetCurrentThreadId
GetFileAttributesW
DeleteFileW
VerifyVersionInfoW
VerSetConditionMask
GetSystemInfo
WaitForMultipleObjects
WaitForSingleObject
ResetEvent
SetEvent
GetLastError
CreateEventW
VirtualProtect
LoadLibraryExA
CreateEventA
SetWaitableTimer
CancelWaitableTimer
CreateWaitableTimerA
VerifyVersionInfoA
GetDateFormatW
GetTimeFormatW
CompareStringW
GetNumberFormatW
GetCurrencyFormatW
CloseHandle
RaiseException
SystemTimeToFileTime
FreeLibrary
GetSystemDirectoryA
GetSystemTime
GetCurrentProcess
GetProcessTimes
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringA
RaiseFailFastException
GetCurrentProcessId
DebugBreak
LoadLibraryW
LoadLibraryA
GetProcAddress
GetModuleHandleA
TryEnterCriticalSection
TlsGetValue
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
Sleep
GetUserDefaultLCID
EnumSystemLocalesW
VirtualAlloc
VirtualFree
GetProcessMitigationPolicy
HeapAlloc
HeapFree
HeapSize
GetProcessHeap
IsDebuggerPresent
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
GetStringTypeW
WaitForSingleObjectEx
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
RtlUnwind
InterlockedFlushSList
ExitProcess
SetConsoleCtrlHandler
GetDriveTypeW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitThread
FreeLibraryAndExitThread
HeapReAlloc
GetConsoleCP
FlushFileBuffers
SetStdHandle
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
SetEndOfFile
FindFirstFileW
GetProcessAffinityMask
GetUserObjectInformationW
DeleteMenu
GetSystemMenu
GetActiveWindow
IsZoomed
IsIconic
SetWindowPlacement
GetWindowPlacement
FlashWindowEx
ShowWindowAsync
SetCaretPos
ShowCaret
DestroyCaret
CreateCaret
EnumDisplayDevicesW
RegisterClipboardFormatW
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
RemoveMenu
SetMenuInfo
DrawMenuBar
ToAscii
GetKeyboardState
CharLowerW
CharUpperW
CloseWindow
WaitForInputIdle
TrackPopupMenu
DestroyMenu
CreatePopupMenu
CreateMenu
GetMonitorInfoW
CreateIconIndirect
LoadImageW
DestroyIcon
InflateRect
SetRectEmpty
GetCursor
GetWindowTextLengthW
SetWindowTextW
SetWindowTextA
GetPropW
SetPropW
RedrawWindow
AllowSetForegroundWindow
EnableWindow
IsCharAlphaW
GetDlgItemTextW
GetDlgItemTextA
SetDlgItemTextW
SetDlgItemTextA
DialogBoxIndirectParamW
MoveWindow
SendMessageTimeoutW
GetClipboardFormatNameA
RegisterClipboardFormatA
PtInRect
EqualRect
IntersectRect
SetWindowRgn
IsWindow
GetCurrentInputMessageSource
SystemParametersInfoW
LoadIconW
GetWindowThreadProcessId
WindowFromPoint
MapWindowPoints
ScreenToClient
GetProcessWindowStation
GetCursorPos
SetCursor
SetCursorPos
ShowCursor
MessageBoxW
MessageBoxA
GetWindowRect
GetClientRect
EndPaint
BeginPaint
UpdateWindow
GetSubMenu
EnableMenuItem
CheckMenuItem
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetCapture
GetQueueStatus
MapVirtualKeyW
GetPointerFrameTouchInfo
GetPointerFrameInfoHistory
GetPointerInfo
GetKeyState
GetDlgItem
EndDialog
DialogBoxParamW
IsWindowVisible
SetWindowPos
RegisterClassW
AttachThreadInput
SendMessageW
GetMessageTime
LoadStringW
LoadStringA
CopyRect
PostQuitMessage
SendInput
GetKeyboardLayout
ActivateKeyboardLayout
UpdateLayeredWindow
LoadCursorW
GetParent
UnionRect
InvalidateRect
ReleaseDC
GetDC
SetFocus
CharNextW
IsChild
GetClassInfoExW
RegisterClassExW
UnregisterClassW
GetDesktopWindow
GetForegroundWindow
MonitorFromWindow
EnumDisplayDevicesA
ShowWindow
DestroyWindow
CreateWindowExW
SetRect
SetWindowLongW
GetWindowLongW
CallWindowProcW
DefWindowProcW
PostThreadMessageW
GetMessageW
OffsetRect
FillRect
GetSystemMetrics
MsgWaitForMultipleObjects
PeekMessageW
DispatchMessageW
TranslateMessage
GetDoubleClickTime
ClientToScreen
EnumDisplaySettingsW
GetWindow
GetClassNameA
EnumWindows
GetWindowTextW
GetWindowTextA
IsWindowEnabled
PostMessageW
RegisterWindowMessageA
PostMessageA
GetFocus
EndDoc
StartDocW
DPtoLP
ExtTextOutA
SetWorldTransform
GetWorldTransform
GetTextMetricsW
SetTextColor
SetTextCharacterExtra
SelectObject
CreateDIBSection
GetObjectW
GdiFlush
CreateSolidBrush
IntersectClipRect
LineTo
StartPage
SaveDC
SetBkMode
SetPolyFillMode
StretchDIBits
SetTextAlign
BeginPath
EndPath
FillPath
SelectClipPath
StrokePath
ExtCreatePen
MoveToEx
PolyBezierTo
CloseMetaFile
CreateMetaFileW
DeleteMetaFile
GetDeviceCaps
TextOutW
EndPage
RestoreDC
SetWindowExtEx
SetWindowOrgEx
BitBlt
CreateCompatibleBitmap
SetGraphicsMode
SelectClipRgn
GetTextExtentPoint32W
GetTextExtentPoint32A
GetTextColor
GetTextAlign
GetTextCharacterExtra
GetCurrentObject
DeleteObject
DeleteDC
EnumFontFamiliesExW
GetFontData
GetBkMode
GetBkColor
EnumFontFamiliesA
CreateRectRgn
CreatePen
CreateFontIndirectA
GetICMProfileA
SetPixel
CreateFontIndirectW
CreateDCA
CreateBitmap
GetObjectType
CreateRectRgnIndirect
SetViewportOrgEx
LPtoDP
Rectangle
GetClipBox
GetStockObject
CreateCompatibleDC
EnumFontFamiliesW
ExtTextOutW
GdiAlphaBlend
SetStretchBltMode
StretchBlt
SetBkColor
GetStretchBltMode
GetClipRgn
DeregisterEventSource
CryptAcquireContextA
RegOpenKeyA
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
ReportEventW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
RegQueryValueExW
RegSetValueExW
RegSetValueExA
RegQueryValueExA
QueryServiceStatusEx
RegisterEventSourceW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
RegCreateKeyExA
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
ord165
SHGetFolderPathW
SHGetSpecialFolderPathW
SHFileOperationW
SHAppBarMessage
SHGetPathFromIDListW
SHGetFolderPathA
SHGetKnownFolderPath
SHGetDiskFreeSpaceExW
SHGetSettings
SHBrowseForFolderW
SHGetFolderLocation
ShellExecuteW
CoCreateFreeThreadedMarshaler
CoUninitialize
CreateBindCtx
StringFromGUID2
CoTaskMemRealloc
CreateDataAdviseHolder
CoWaitForMultipleHandles
OleRegGetUserType
OleRegGetMiscStatus
OleRegEnumVerbs
ReadClassStm
WriteClassStm
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
PropVariantClear
CreateOleAdviseHolder
OleSaveToStream
OleInitialize
CoSetProxyBlanket
CoRegisterMessageFilter
CoAllowSetForegroundWindow
CoInitializeEx
ReleaseStgMedium
OleUninitialize
OleSetClipboard
OleGetClipboard
OleFlushClipboard
OleIsCurrentClipboard
StrStrIW
StrRStrIW
UrlCanonicalizeW
PathFindFileNameW
ord158
StrNCatW
AssocQueryStringW
HlinkSimpleNavigateToMoniker
CopyStgMedium
RegisterBindStatusCallback
CreateURLMoniker
UiaGetReservedNotSupportedValue
CreateColorTransformW
CloseColorProfile
DeleteColorTransform
TranslateBitmapBits
OpenColorProfileW
WSAEventSelect
WSAGetOverlappedResult
WSAEnumNetworkEvents
WSASend
WSAWaitForMultipleEvents
WSAAddressToStringA
gethostname
getpeername
ntohl
shutdown
getsockopt
getaddrinfo
freeaddrinfo
getnameinfo
WSACreateEvent
WSACloseEvent
setsockopt
sendto
recvfrom
getsockname
connect
__WSAFDIsSet
accept
WSASocketW
WSAIoctl
WSAAsyncSelect
ioctlsocket
WSAGetLastError
WSASetLastError
WSACleanup
WSAStartup
getservbyname
getservbyport
gethostbyname
gethostbyaddr
socket
send
select
recv
ntohs
listen
inet_ntoa
inet_addr
htons
htonl
closesocket
bind
WSARecv
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ