Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
25a04854b83cfd1e9fbbd144bf170760_dll64_JC.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
25a04854b83cfd1e9fbbd144bf170760_dll64_JC.dll
Resource
win10v2004-20230915-en
Target
25a04854b83cfd1e9fbbd144bf170760_dll64_JC.dll
Size
663KB
MD5
25a04854b83cfd1e9fbbd144bf170760
SHA1
1fc3eb45f12635dbe28d14a35d0f5ec1ad41d768
SHA256
bc6d8534edf34c38e37c408639903ddd8cf0323d2d3c51c23076293b9c652fec
SHA512
af15108fe24f152e945a13e8ae979be960d049abce7eca25fd0a3726a8ea6f8d60ff8d7e0372963d80436cc5bd98422dd2e4d5ee90ee2802c5cfbbeac821f6cb
SSDEEP
12288:k3b6ajVRdPQ4Dwra9PpeYwwXXsHHph0lhSMXl+x6imOXNYdT:k3b6ajVRdPQiwmpcYwwXXsHJh0lhSMXv
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PropVariantCompareEx
PSCreateSimplePropertyChange
PSFormatForDisplay
PropVariantGetElementCount
PropVariantToInt32
InitPropVariantFromPropVariantVectorElem
PropVariantChangeType
VariantToString
PSGetPropertyDescription
PSCreateMemoryPropertyStore
PropVariantToFileTime
PropVariantToUInt64
PropVariantToStringWithDefault
ord423
ord326
ord388
ord324
ord320
ord332
ord386
ord329
ord328
ord321
ord323
DestroyPropertySheetPage
ord344
CreatePropertySheetPageW
PropertySheetW
ord334
SetWindowTheme
RtlVirtualUnwind
VerSetConditionMask
RtlCaptureContext
RtlLookupFunctionEntry
LdrResolveDelayLoadedAPI
AtlThunk_InitData
AtlThunk_FreeData
AtlThunk_AllocateData
AtlThunk_DataToCode
CoTaskMemAlloc
PropVariantClear
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
GetProcAddress
SizeofResource
LoadResource
GetModuleHandleW
LockResource
IsDebuggerPresent
OutputDebugStringW
GetCurrentThreadId
QueueUserAPC
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
GetCurrentProcess
TerminateProcess
TerminateThread
GetCurrentProcessId
FormatMessageA
FindNLSString
FormatMessageW
GetLocaleInfoEx
GetSystemTimeAsFileTime
GetSystemTime
GetLocalTime
LocalAlloc
LocalFree
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SleepEx
SetEvent
WaitForSingleObject
EnterCriticalSection
CreateEventW
SetWaitableTimer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
GetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetLastError
RaiseException
FindResourceW
WideCharToMultiByte
CompareStringEx
CompareStringW
MultiByteToWideChar
BCryptCloseAlgorithmProvider
BCryptGetProperty
BCryptOpenAlgorithmProvider
NCryptEnumAlgorithms
NCryptFreeBuffer
NCryptFreeObject
NCryptOpenStorageProvider
FileTimeToSystemTime
SystemTimeToFileTime
NdrDllCanUnloadNow
CStdStubBuffer_IsIIDSupported
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
NdrDllGetClassObject
CStdStubBuffer_DebugServerRelease
NdrOleAllocate
CStdStubBuffer_QueryInterface
CStdStubBuffer_CountRefs
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
NdrOleFree
CStdStubBuffer_DebugServerQueryInterface
IUnknown_AddRef_Proxy
CStdStubBuffer_Invoke
NdrCStdStubBuffer_Release
CStdStubBuffer_Connect
ObjectStublessClient3
ObjectStublessClient11
ObjectStublessClient15
ObjectStublessClient4
ObjectStublessClient12
ObjectStublessClient7
ObjectStublessClient13
ObjectStublessClient5
ObjectStublessClient8
ObjectStublessClient9
ObjectStublessClient10
ObjectStublessClient16
ObjectStublessClient14
ObjectStublessClient6
DecodePointer
EncodePointer
GetProcessHeap
HeapFree
HeapAlloc
VerifyVersionInfoW
RegOpenKeyExW
RegCloseKey
VariantInit
VariantClear
closesocket
WSAStringToAddressW
WSAGetLastError
WSACleanup
WSAStartup
ioctlsocket
WSARecv
htonl
bind
getsockname
setsockopt
WSASend
listen
ntohs
htons
WSASocketW
WSASetLastError
ntohl
shutdown
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
CancelIoEx
GetAcceptExSockaddrs
AcceptEx
CloseHandle
WaitForMultipleObjects
CreateWaitableTimerW
UrlUnescapeW
InitThread
UnInitProcessPriv
InitProcessPriv
RegisterPVLBehaviorFactory
UnInitThread
?CreateInstance_KeyManager@FTPLib@@YAJAEBU_GUID@@PEAPEAX@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?id@?$numpunct@_W@std@@2V0locale@2@A
?_Winerror_map@std@@YAHH@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
??1facet@locale@std@@MEAA@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
_Mbrtowc
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
?_Xbad_alloc@std@@YAXXZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
_Query_perf_counter
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?toupper@?$ctype@_W@std@@QEBA_W_W@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?fail@ios_base@std@@QEBA_NXZ
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?id@?$ctype@_W@std@@2V0locale@2@A
_Query_perf_frequency
?id@?$numpunct@D@std@@2V0locale@2@A
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_join
_Thrd_id
?_Throw_Cpp_error@std@@YAXH@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
GetKeyboardLayout
LoadStringW
GetSystemMetricsForDpi
AreDpiAwarenessContextsEqual
GetWindowDpiAwarenessContext
GetDpiForWindow
DestroyIcon
ReleaseDC
DrawTextW
GetDC
GetCursorPos
MonitorFromPoint
IsDlgButtonChecked
GetDlgItemTextW
ShowWindow
SetDlgItemInt
GetDlgItemInt
GetWindowLongPtrW
DefWindowProcW
DestroyWindow
CallWindowProcW
PostMessageW
GetWindowTextW
SetFocus
SetDlgItemTextW
GetWindowTextLengthW
SetWindowLongPtrW
SendDlgItemMessageW
EndDialog
DialogBoxParamW
UnregisterClassW
GetClientRect
GetDlgItem
EnableWindow
SetWindowTextW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
GetWindowRect
GetParent
SendMessageW
GetWindow
SetWindowPos
GetWindowLongW
MessageBeep
CreateBindCtx
PropVariantCopy
ord43
ord100
SHCreateItemFromParsingName
Shell_GetCachedImageIndexW
SHAssocEnumHandlers
SHAssocEnumHandlersForProtocolByApplication
ShellExecuteExW
ShellExecuteW
ord63
SHGetFileInfoW
SHCreateItemFromIDList
SHParseDisplayName
SHBindToParent
ord903
ord939
ord765
ord219
PathRemoveFileSpecW
SHAutoComplete
PathFindExtensionW
PathCompactPathW
AssocQueryStringW
PathFindFileNameW
ord158
AssocCreate
StrDupW
PathMatchSpecExW
ord154
ord572
ord516
GetDeviceCaps
SelectObject
__CxxFrameHandler4
memset
_CxxThrowException
__std_type_info_compare
memmove
memcpy
memcmp
memchr
__std_terminate
__current_exception_context
__current_exception
__std_exception_copy
__std_exception_destroy
_purecall
__std_type_info_destroy_list
__C_specific_handler
_invalid_parameter_noinfo_noreturn
_set_errno
_get_errno
_invalid_parameter_noinfo
_errno
abort
terminate
_beginthreadex
_resetstkoflw
_seh_filter_dll
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
__stdio_common_vsnprintf_s
__stdio_common_vswscanf
__stdio_common_vswprintf
free
calloc
_recalloc
_callnewh
malloc
_aligned_free
_aligned_malloc
_ldsign
_dsign
_dclass
_ldclass
_fdclass
_fdsign
GetUserDefaultUILanguage
IsProcessorFeaturePresent
SleepConditionVariableSRW
WakeAllConditionVariable
QueryPerformanceCounter
InitializeSListHead
DelayLoadFailureHook
?CreateInstance_ConditionsDialog@CommonUI@@YAJAEBU_GUID@@PEAPEAX@Z
?CreateInstance_CreateCertWizard@CommonUI@@YAJAEBU_GUID@@PEAPEAX@Z
?CreateInstance_FileExistsDialog@CommonUI@@YAJAEBU_GUID@@PEAPEAX@Z
?CreateInstance_ImportKeyWizard@CommonUI@@YAJAEBU_GUID@@PEAPEAX@Z
?CreateInstance_OAuthAuthorizationDialog@CommonUI@@YAJAEBU_GUID@@PEAPEAX@Z
?CreateInstance_OpenAsDialog@CommonUI@@YAJAEBU_GUID@@PEAPEAX@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ