Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
taskhostw.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
taskhostw.exe
Resource
win10v2004-20230915-en
Target
taskhostw.exe
Size
110KB
MD5
4887a65fd4f6598af4986cbc1c0e5488
SHA1
0882f3f9947405bb80c2e830adf69af85c9b51c7
SHA256
82472a84bcbb4009add338200f8e853fe4c5eafe2e2c3a2d711b85bf29b72d54
SHA512
7b18f7b7bc90e850e2d97b2985610c812584edcc993bf999e20c8b4a604e8e59d241f28b3c0be5314983799812ba407ba42f0adb7f2c1b5d210848e944636304
SSDEEP
3072:6dC1m5Y8V8Ed5z/B+xFfHzw1TYKOJ6Ev:X1UYX0z5+FfM1TYK
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
free
malloc
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBQEBD@Z
??3@YAXPEAX@Z
__CxxFrameHandler4
memmove
_XcptFilter
memcpy_s
memmove_s
??0exception@@QEAA@AEBV0@@Z
??1type_info@@UEAA@XZ
wcsstr
?what@exception@@UEBAPEBDXZ
_CxxThrowException
__CxxFrameHandler3
memcpy
_purecall
_onexit
calloc
_callnewh
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
_commode
_fmode
_wcmdln
__C_specific_handler
_initterm
__setusermatherr
??1exception@@UEAA@XZ
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
memset
HeapReAlloc
HeapSize
HeapFree
HeapDestroy
GetProcessHeap
HeapAlloc
TraceMessage
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceEnableFlags
GetTraceLoggerHandle
EventRegister
EventSetInformation
Sleep
GetCurrentThreadId
GetStartupInfoW
CreateThread
GetCurrentThread
SetProcessShutdownParameters
GetExitCodeThread
GetCurrentProcess
TerminateProcess
GetThreadPriority
SetThreadPriority
GetCurrentProcessId
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
GetModuleHandleW
LoadStringW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
ApiSetQueryApiSetPresence
InitializeAcl
AddAce
GetAclInformation
GetSecurityDescriptorOwner
SetSecurityDescriptorOwner
IsValidSid
SetSecurityDescriptorGroup
GetSecurityDescriptorDacl
SetSecurityDescriptorDacl
GetSecurityDescriptorSacl
GetSecurityDescriptorControl
MakeAbsoluteSD
InitializeSecurityDescriptor
GetLengthSid
CopySid
GetSidSubAuthority
CreateWellKnownSid
InitializeSid
GetSidLengthRequired
AllocateAndInitializeSid
GetSecurityDescriptorGroup
FreeSid
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeSRWLock
SetEvent
ResetEvent
CreateEventW
WaitForSingleObject
CloseHandle
IsDebuggerPresent
RegGetValueW
ResolveDelayLoadedAPI
DelayLoadFailureHook
LocalFree
DeleteTimerQueueTimer
CreateTimerQueueTimer
EtwTraceMessage
NtSetInformationProcess
RtlUnhandledExceptionFilter
RtlIsMultiSessionSku
DbgPrintEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ