Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
de0830ba1ef9d36550584934057242c98a3aa065fe9d37c820d9c68d228157e2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
de0830ba1ef9d36550584934057242c98a3aa065fe9d37c820d9c68d228157e2.exe
Resource
win10v2004-20230915-en
Target
de0830ba1ef9d36550584934057242c98a3aa065fe9d37c820d9c68d228157e2
Size
6.0MB
MD5
0eed39e615785105636c8b24e0ae7b5b
SHA1
861e68205270c08b4f6efbcdac9004f65c9404d3
SHA256
de0830ba1ef9d36550584934057242c98a3aa065fe9d37c820d9c68d228157e2
SHA512
b89df66cfa43a41d93d2262c897f5ab799c54a0992ed02d637c0715ed671f45095ee528104d0a6345a92b3b183f1ebe4dca386ad150d4a1777bc7a1f57b52159
SSDEEP
98304:xYTfVI6v9Tw20jCBINtywQ9cklEc1xjr2jpHJKMxdWG+0y+:Ehd0jCBINPQ9ciGvA+
ExtKeyUsageCodeSigning
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
GetSystemInfo
WriteFile
OpenProcess
Sleep
CreateEventA
WaitForSingleObject
SetEvent
ReadFile
GetFileSize
CreateFileA
QueryPerformanceFrequency
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
Module32Next
Module32First
CreateToolhelp32Snapshot
ReadProcessMemory
GetCurrentProcessId
GetCurrentProcess
GetLastError
CloseHandle
GetTickCount
QueryPerformanceCounter
HeapAlloc
FormatMessageA
LocalFree
CreateThread
SetFilePointer
SwitchToThread
GetProcessHeap
HeapFree
DeleteFileA
MoveFileA
GetPrivateProfileStringA
lstrlenA
GlobalFree
GetModuleFileNameA
GetCurrentDirectoryA
FindNextFileA
FindFirstFileA
FindClose
SetFileAttributesA
HeapSize
GetCommandLineW
GetCommandLineA
PeekConsoleInputA
ReadConsoleInputW
GetNumberOfConsoleInputEvents
SetConsoleMode
FreeEnvironmentStringsW
GetCurrentDirectoryW
GetEnvironmentStringsW
GetOEMCP
IsValidCodePage
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetFileSizeEx
ReadConsoleW
GetConsoleMode
GetModuleFileNameW
HeapCompact
UnlockFileEx
LockFileEx
GetTimeZoneInformation
CreateProcessW
FlushFileBuffers
SetFilePointerEx
VirtualQuery
VirtualProtect
VirtualAlloc
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetDriveTypeW
SetStdHandle
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
InterlockedPushEntrySList
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetSystemTime
WriteConsoleW
GetFileAttributesA
OutputDebugStringW
GetConsoleCP
GetConsoleOutputCP
WideCharToMultiByte
IsDBCSLeadByte
SetEndOfFile
GetFullPathNameA
GetVersionExA
SetLastError
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetErrorMode
FreeLibrary
GetProcAddress
LoadLibraryExA
GetEnvironmentVariableA
SetEnvironmentVariableA
SetEnvironmentVariableW
SetCurrentDirectoryA
SetCurrentDirectoryW
CreateDirectoryA
CreateDirectoryW
CreateFileW
DeleteFileW
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetFileAttributesExA
GetFileAttributesExW
GetFileInformationByHandle
GetFileType
GetFullPathNameW
RemoveDirectoryA
RemoveDirectoryW
SetFileAttributesW
SetFileTime
DuplicateHandle
CreatePipe
GetProcessTimes
TerminateProcess
GetExitCodeProcess
CreateProcessA
GetVersion
GetModuleHandleA
MoveFileW
SystemTimeToFileTime
GenerateConsoleCtrlEvent
ResetEvent
SetConsoleCtrlHandler
GetACP
GetLocaleInfoA
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
CreateFileMappingA
ExpandEnvironmentStringsW
GetStdHandle
GlobalAlloc
SetUnhandledExceptionFilter
LoadLibraryA
OutputDebugStringA
GetSystemDirectoryA
GlobalUnlock
GlobalLock
lstrlenW
CompareStringA
ReleaseSemaphore
GetLocaleInfoEx
FindFirstFileExW
GetTempPathW
AreFileApisANSI
GetModuleHandleW
GetFileInformationByHandleEx
GetStringTypeW
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
HeapValidate
IsProcessorFeaturePresent
MultiByteToWideChar
GetClientRect
ClientToScreen
FillRect
SetRect
OffsetRect
PostQuitMessage
SetWindowPos
GetCursorPos
ScreenToClient
FindWindowA
LoadIconA
SystemParametersInfoA
InvalidateRect
ShowCursor
SetCursor
DestroyCursor
LoadImageA
SetCursorPos
ShowWindow
GetCapture
SetCapture
ReleaseDC
GetDC
GetAsyncKeyState
PeekMessageA
ReleaseCapture
ChangeDisplaySettingsA
IsIconic
LoadStringA
MessageBoxA
GetSystemMetrics
GetKeyState
CharPrevExA
CharNextExA
CharNextW
GetClipboardData
CloseClipboard
OpenClipboard
GetKeyboardLayout
GetKeyboardLayoutNameA
DispatchMessageA
TranslateMessage
GetMessageA
LoadCursorA
SetWindowLongA
GetWindowLongA
AdjustWindowRectEx
GetWindowRect
GetMenu
MoveWindow
DestroyWindow
CharPrevA
DefWindowProcA
RegisterClassA
CreateWindowExA
IsWindow
GetTextExtentPoint32W
SelectObject
CreateFontIndirectA
SetTextColor
TextOutW
CreateCompatibleDC
SetBkColor
GetCharABCWidthsFloatW
GetStockObject
DeleteDC
SetBkMode
CreateDIBSection
TextOutA
StretchBlt
DeleteObject
CreateSolidBrush
EnumFontFamiliesExA
GetTextExtentPoint32A
ShellExecuteA
SHGetKnownFolderPath
ShellExecuteW
SHGetSpecialFolderPathA
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemFree
CoInitializeEx
timeEndPeriod
timeGetTime
timeBeginPeriod
timeGetDevCaps
Direct3DCreate8
ImmGetOpenStatus
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCandidateListW
ImmSetCompositionStringW
ImmGetCompositionStringW
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmIsIME
ImmGetIMEFileNameA
ImmNotifyIME
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
DirectInput8Create
gethostbyname
inet_addr
htons
__WSAFDIsSet
closesocket
connect
WSAStartup
WSAGetLastError
socket
send
select
recv
ioctlsocket
WSACleanup
DirectDrawCreate
_AIL_file_type@8
_AIL_decompress_ADPCM@12
_AIL_decompress_ASI@24
_AIL_close_digital_driver@4
_AIL_open_digital_driver@16
_AIL_WAV_info@8
_AIL_set_file_callbacks@16
_AIL_file_read@8
_AIL_mem_free_lock@4
_AIL_open_stream@12
_AIL_auto_update_3D_position@8
_AIL_3D_sample_volume@4
_AIL_3D_sample_status@4
_AIL_set_3D_sample_loop_count@8
_AIL_open_3D_provider@4
_AIL_close_3D_provider@4
_AIL_enumerate_3D_providers@12
_AIL_open_3D_listener@4
_AIL_close_3D_listener@4
_AIL_set_3D_position@16
_AIL_set_3D_velocity@20
_AIL_set_3D_orientation@28
_AIL_startup@0
_AIL_shutdown@0
_AIL_set_redist_directory@4
_AIL_set_3D_sample_volume@8
_AIL_close_stream@4
_AIL_start_stream@4
_AIL_pause_stream@8
_AIL_set_stream_volume_levels@12
_AIL_stream_volume_levels@12
_AIL_set_stream_loop_count@8
_AIL_stream_status@4
_AIL_last_error@0
_AIL_allocate_sample_handle@4
_AIL_release_sample_handle@4
_AIL_init_sample@4
_AIL_set_sample_file@12
_AIL_start_sample@4
_AIL_stop_sample@4
_AIL_resume_sample@4
_AIL_end_sample@4
_AIL_set_sample_volume_pan@12
_AIL_set_sample_loop_count@8
_AIL_sample_status@4
_AIL_sample_volume_pan@12
_AIL_allocate_3D_sample_handle@4
_AIL_release_3D_sample_handle@4
_AIL_start_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_resume_3D_sample@4
_AIL_end_3D_sample@4
_AIL_set_3D_sample_file@8
RegCloseKey
RegConnectRegistryA
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegFlushKey
RegLoadKeyA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueA
RegQueryValueExA
RegSaveKeyA
RegSetValueA
RegSetValueExA
RegOpenKeyA
SysFreeString
VariantClear
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ