Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2811f39ef6663195903f71d8ee928fb4e1278b4cd634b5a169ed315f6531c686.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
2811f39ef6663195903f71d8ee928fb4e1278b4cd634b5a169ed315f6531c686.dll
Resource
win10v2004-20231020-en
Target
2811f39ef6663195903f71d8ee928fb4e1278b4cd634b5a169ed315f6531c686
Size
447KB
MD5
c1d016a4212c05e9c840be87ef2ff0d0
SHA1
921074f1258722136badff7f5b3c1eeee3c512ec
SHA256
2811f39ef6663195903f71d8ee928fb4e1278b4cd634b5a169ed315f6531c686
SHA512
b211aff265ac7a4d2cf11a1db87c80fd117f1542ca56e39a7bd479d4c97de1e3fcabace51400299adfeaae328d6830ee4ce0b72d3186980e235c3b3ec2ad357f
SSDEEP
12288:PrrLiBeLyMToGoq/JsPj1ekxBjvrEH7uxl6:fLF9/JujM4rEH7uxc
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
curl_easy_perform
curl_easy_init
curl_slist_free_all
curl_easy_cleanup
curl_easy_setopt
curl_slist_append
curl_global_init
ord6
ord4
ord7
lstrcmpA
lstrlenA
GetVersionExA
lstrcmpW
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GlobalFlags
GetModuleHandleA
InterlockedExchange
CompareStringA
HeapFree
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
ExitThread
CreateThread
HeapAlloc
GetCommandLineA
RtlUnwind
RaiseException
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetStdHandle
GetModuleFileNameA
LCMapStringA
LCMapStringW
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
InitializeCriticalSectionAndSpinCount
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetModuleFileNameW
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
FindResourceW
CreateDirectoryW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
lstrlenW
WideCharToMultiByte
GetLastError
Sleep
CloseHandle
OutputDebugStringA
GlobalAlloc
GlobalFree
GetComputerNameW
GetCurrentProcessId
CompareStringW
InterlockedIncrement
SetErrorMode
GetCurrentThreadId
TlsFree
DeleteCriticalSection
GetVolumeInformationW
LoadLibraryW
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetFullPathNameW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
DeleteFileW
MoveFileW
GetProcAddress
GetFileTime
GetFileSizeEx
GetFileAttributesW
SetFileAttributesW
CreateFileW
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileAttributesExW
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
FreeLibrary
InterlockedDecrement
SetLastError
GetModuleHandleW
GetLocaleInfoW
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ClientToScreen
SetWindowTextW
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
GetForegroundWindow
GetDlgItem
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
GetClientRect
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
CopyRect
PtInRect
GetMenu
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetWindowTextW
GetWindowThreadProcessId
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
LoadCursorW
GetSysColor
GetSysColorBrush
UnregisterClassW
SetWindowsHookExW
CallNextHookEx
PostQuitMessage
DestroyMenu
GetTopWindow
DispatchMessageW
SendMessageW
GetKeyState
PeekMessageW
ValidateRect
CharUpperW
GetSystemMetrics
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
UnhookWindowsHookEx
wsprintfW
EnumDisplaySettingsW
ReleaseDC
GetDC
SetMapMode
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
RestoreDC
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
SaveDC
DeleteObject
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
GetFileTitleW
DocumentPropertiesW
ClosePrinter
OpenPrinterW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
SHGetFolderPathW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathFileExistsW
PathStripToRootW
VariantChangeType
VariantClear
VariantInit
GetAdaptersInfo
??0CTQNDPCAnalyApp@@QAE@ABV0@@Z
??0CTQNDPCAnalyApp@@QAE@XZ
??0TQNDAnalyticInitModel@@QAE@XZ
??1TQNDAnalyticInitModel@@QAE@XZ
??4CTQNDPCAnalyApp@@QAEAAV0@ABV0@@Z
??4TQNDAnalyticInitModel@@QAEAAV0@ABV0@@Z
??4analyInitParam@@QAEAAU0@ABU0@@Z
??_7CTQNDPCAnalyApp@@6B@
?InitInstance@CTQNDPCAnalyApp@@UAEHXZ
?clearUserInfo@CTQNDPCAnalyApp@@QAEXXZ
?consumeFunction@CTQNDPCAnalyApp@@QAEXPBD0000@Z
?customFunction@CTQNDPCAnalyApp@@QAEXPBD00_NH0@Z
?errorFunction@CTQNDPCAnalyApp@@QAEXPBD0000@Z
?firstOpenFunction@CTQNDPCAnalyApp@@QAEXXZ
?initFunction@CTQNDPCAnalyApp@@QAEXPBD0PAVTQNDAnalyticInitModel@@_N0@Z
?loginFunction@CTQNDPCAnalyApp@@QAEXPBD0@Z
?registerFunction@CTQNDPCAnalyApp@@QAEXPBD00@Z
?sessionEndFunction@CTQNDPCAnalyApp@@AAEXXZ
?sessionStartFunction@CTQNDPCAnalyApp@@QAEXXZ
?setAnalyInitCallback@CTQNDPCAnalyApp@@QAEXQ6AX_N@Z@Z
?setUserInfo@CTQNDPCAnalyApp@@QAEXPBD0@Z
?shareInstanced@CTQNDPCAnalyApp@@SAPAV1@XZ
?showDebugLog@CTQNDPCAnalyApp@@QAEX_N@Z
?startHeartFunction@CTQNDPCAnalyApp@@QAEXXZ
?stopHeartFunction@CTQNDPCAnalyApp@@QAEXXZ
?unload@CTQNDPCAnalyApp@@QAEXXZ
?uploadBatchEvents@CTQNDPCAnalyApp@@QAEXH@Z
?writeIntoFile@CTQNDPCAnalyApp@@AAEXPBDH@Z
analyClearUserInfoFunction
analyConsumeFunction
analyCustomFunction
analyErrorFunction
analyInitCallbackSetFunction
analyInitFunction
analyLoginFunction
analyRegisterFunction
analySetUserInfoFunction
analyStartHeartFunction
analyStopHeartFunction
analyUnloadFunction
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ