Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
eb607caf5f03d579544ab1b5ab922a3ad5ab478cf6909bafe7a3367e9e92a56c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
eb607caf5f03d579544ab1b5ab922a3ad5ab478cf6909bafe7a3367e9e92a56c.exe
Resource
win10v2004-20230915-en
Target
eb607caf5f03d579544ab1b5ab922a3ad5ab478cf6909bafe7a3367e9e92a56c
Size
136KB
MD5
f7c152f970ec355c8b26b44f3d6c49e1
SHA1
96f6d894507e8acd9c7202b1470c092523d482be
SHA256
eb607caf5f03d579544ab1b5ab922a3ad5ab478cf6909bafe7a3367e9e92a56c
SHA512
5575ed37390ba400e5ab1223f676d5ef5c158dfd151dc59c7c656decd701c625cf611b14b860b49deb625a5c9f8d4f16d16da524f602d6adf9583e729547a362
SSDEEP
3072:hjV7IF7ZU237piRTTPLHwnO5zhvewqMfNda:1ZI1ZQTDOO55qMf
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
SymCleanup
SymInitialize
SymSetOptions
SymLoadModule
SymGetModuleInfo
InternetCloseHandle
HttpSendRequestA
HttpOpenRequestA
InternetOpenA
InternetConnectA
InternetReadFile
GetModuleFileNameExA
ImageList_Create
InitCommonControlsEx
ImageList_ReplaceIcon
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
GetTickCount
DeleteFileW
CreateFileW
ReadFile
SetFilePointer
CloseHandle
GetTempPathW
CreateDirectoryW
GetVersionExW
GetModuleHandleW
VirtualQueryEx
CreateFileA
ReadProcessMemory
WriteProcessMemory
OpenThread
GetProcAddress
OpenProcess
HeapFree
GetModuleFileNameW
SetCurrentDirectoryW
WriteFile
GetCurrentProcessId
SetEvent
CreateProcessW
HeapAlloc
GetProcessHeap
VirtualProtect
GlobalUnlock
GetPrivateProfileSectionW
InterlockedIncrement
InterlockedDecrement
GlobalAlloc
GlobalFree
GlobalLock
FreeLibrary
GetThreadSelectorEntry
GetFileAttributesW
LoadLibraryW
Sleep
GetCurrentThreadId
QueryPerformanceCounter
GetFileSize
IsWindow
DestroyMenu
TrackPopupMenu
GetWindowThreadProcessId
GetMenuItemCount
CreatePopupMenu
SetWindowTextW
CloseClipboard
GetWindow
SetClipboardData
SetDlgItemTextW
EmptyClipboard
SetWindowPos
OpenClipboard
LoadImageW
RegisterClipboardFormatW
SendMessageW
LoadIconW
GetKeyState
InvalidateRect
GetClientRect
ShowWindow
MapDialogRect
GetWindowRect
MapWindowPoints
SendDlgItemMessageW
SetWindowLongW
GetWindowTextW
CallWindowProcW
GetWindowTextLengthW
GetDlgItem
ClientToScreen
DrawIconEx
EnableWindow
EndDialog
MessageBoxW
DialogBoxParamW
GetStockObject
SetTextColor
DeleteObject
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
SHGetFileInfoW
SHGetDesktopFolder
ord155
SHBindToParent
ShellExecuteW
DoDragDrop
OleUninitialize
OleInitialize
ord10
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??4CTXStringA@@QAEAAV0@PBD@Z
??0CZipBuffers@@QAE@XZ
??1CZipBuffers@@QAE@XZ
?MatchWildcard@FS@Util@@YAHPBD0@Z
??0CTXStringW@@QAE@UtagEN@@PBDH@Z
?Left@CTXStringA@@QBE?AV1@H@Z
?GetBuffer@CTXStringA@@QAEPADXZ
?Utf8FromWSLimit@Convert@Util@@YA?AVCTXStringA@@HPB_WH@Z
??0CTXStringA@@QAE@PBD@Z
??0CTXStringA@@QAE@UtagEN@@PB_WH@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
?SetAt@CTXStringW@@QAEXH_W@Z
??4CTXStringA@@QAEAAV0@ABV0@@Z
??YCTXStringA@@QAEAAV0@D@Z
?GetLogByFilter@TXLog@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVCTXStringW@@K0K@Z
??0CTXStringA@@QAE@PBDH@Z
??0CTXStringA@@QAE@ABV0@@Z
??M@YA_NABVCTXStringA@@0@Z
?FormatV@CTXStringA@@QAEXPBDPAD@Z
??BCTXBSTR@@QBEPA_WXZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?Length@CTXBSTR@@QBEIXZ
??1CTXBSTR@@QAE@XZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??0CTXBSTR@@QAE@ABV0@@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?SetConfigFile@TXI18N@@YAHPB_W0@Z
?Right@CTXStringW@@QBE?AV1@H@Z
?Find@CTXStringW@@QBEHPB_WH@Z
?Trim@CTXStringW@@QAEAAV1@XZ
??4CTXBSTR@@QAEAAV0@ABV0@@Z
?LoadStringW@CTXStringW@@QAEHPAUHINSTANCE__@@I@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z
?GetBuffer@CTXStringA@@QAEPADH@Z
?MakeLower@CTXStringA@@QAEAAV1@XZ
??YCTXStringA@@QAEAAV0@ABV0@@Z
?Format@CTXStringA@@QAAXPBDZZ
?GetLength@CTXStringA@@QBEHXZ
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z
??1CTXStringA@@QAE@XZ
??0CTXStringA@@QAE@XZ
??8@YA_NABVCTXStringW@@0@Z
??0CTXStringW@@QAE@PA_W@Z
??0CTXStringW@@QAE@PB_W@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??BCTXStringA@@QBEPBDXZ
?AnsiToUnicode@Convert@Util@@YA_NAAVCTXStringW@@PBDH@Z
??YCTXStringA@@QAEAAV0@PBD@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
?Format@CTXStringW@@QAAXPB_WZZ
??BCTXStringW@@QBEPB_WXZ
wcslcat
wcslcpy
?Left@CTXStringW@@QBE?AV1@H@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??0CTXStringW@@QAE@ABV0@@Z
??M@YA_NABVCTXStringW@@0@Z
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@XZ
??YCTXStringW@@QAEAAV0@_W@Z
?Empty@CTXStringW@@QAEXXZ
??YCTXStringW@@QAEAAV0@ABV0@@Z
?GetLength@CTXStringW@@QBEHXZ
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?Preallocate@CTXStringW@@QAEXH@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
?AddBuffer@CZipBuffers@@QAE_NPBXIPBD@Z
?Replace@CTXStringW@@QAEH_W0@Z
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?GetZip@CZipBuffers@@QAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm
_wcmdln
exit
_CxxThrowException
_XcptFilter
_exit
_cexit
__wgetmainargs
??3@YAXPAX@Z
_invalid_parameter_noinfo
_snwprintf
??_V@YAXPAX@Z
_gmtime32
??0exception@std@@QAE@ABV01@@Z
_wfopen
??0exception@std@@QAE@XZ
_amsg_exit
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
??1exception@std@@UAE@XZ
fread
?what@exception@std@@UBEPBDXZ
fclose
strrchr
_snprintf
??2@YAPAXI@Z
??0exception@std@@QAE@ABQBD@Z
__wargv
wcsncmp
swscanf
malloc
free
srand
wcsrchr
_purecall
__argc
__p__commode
__p__fmode
__set_app_type
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
_wcsicmp
memmove_s
strchr
_time32
_time64
strncmp
atoi
_initterm_e
memset
__CxxFrameHandler3
memcpy
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE