Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
9194ac045e349dba3f1a19d06ce9de9b87752d4fe89cb7fa68cc56f19bad29f3.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
9194ac045e349dba3f1a19d06ce9de9b87752d4fe89cb7fa68cc56f19bad29f3.dll
Resource
win10v2004-20231020-en
Target
9194ac045e349dba3f1a19d06ce9de9b87752d4fe89cb7fa68cc56f19bad29f3
Size
832KB
MD5
7bda310a2012f5b335e925d3a89d0a39
SHA1
f0d921f35b8aecda260639d54354b0d14bbc7cca
SHA256
9194ac045e349dba3f1a19d06ce9de9b87752d4fe89cb7fa68cc56f19bad29f3
SHA512
afc805f28305033f51fe4d9027a19715589ad8f836b52522bafb143aa1e34197e75f00947d56149dd6013dd41a5367c80149ad2346ca15ab85f3bd6f9373fcd7
SSDEEP
12288:Wvlw2BDgLLUvVo+EKN/KBfqpqC0sZv7v7JWmMAwa81egFGuPEoBjvrEH7wI:Wv1BMUvy+EVWqC0wPAJFleghPEarEH75
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
TcpReleaseSenderCache
UdpReleaseSenderCache
MxxGetLinkContext
MxxSetLinkContext
UdpUninit
UdpInit
TcpUninit
TcpInit
TcpGetPendingStat
GetUnfreedVirtualMemoryCount
TcpConnect
MxxSendGroup
UdpGetLinkAddr
TcpCreate
TcpDestroy
MxxForceFreeGPM
MxxAllocateGPMEx
MxxConnectionlessLinkRaiseToGPM
UdpSendTo
TcpGetLinkAddr
UdpDestroy
UdpCreate
TcpSend
TcpListen
UdpAcquireSenderCacheSpecifyLength
TcpAcquireSenderCache
UdpAcquireSenderCache
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
GetProcessHeap
GetFileType
CreateDirectoryW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetTimeZoneInformation
GetOEMCP
GetACP
IsValidCodePage
HeapSize
AreFileApisANSI
SetEndOfFile
SetFilePointerEx
WriteFile
ReadFile
CreateFileW
CloseHandle
GetVersionExW
GetModuleFileNameW
GetLastError
GetSystemInfo
DeleteFileW
GetPrivateProfileStringW
WritePrivateProfileSectionW
GetPrivateProfileSectionW
SetConsoleTextAttribute
GetStdHandle
GetLocalTime
GetConsoleScreenBufferInfo
GetCurrentThreadId
GetCurrentProcess
GetEnvironmentStringsW
GetDiskFreeSpaceExW
WideCharToMultiByte
MultiByteToWideChar
GetFileSize
GetTickCount
InterlockedExchange
GetComputerNameA
GetDriveTypeW
InterlockedIncrement
InterlockedDecrement
InterlockedExchangeAdd
GlobalMemoryStatusEx
WaitForSingleObject
CreateThread
SystemTimeToFileTime
FileTimeToSystemTime
ExitProcess
FreeEnvironmentStringsW
VirtualAlloc
VirtualFree
VirtualProtect
HeapReAlloc
SetStdHandle
WriteConsoleW
LCMapStringW
CompareStringW
GetModuleHandleExW
CreateSemaphoreW
GetStartupInfoW
TerminateProcess
CreateEventW
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
UnregisterWait
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
GetModuleHandleW
DeleteTimerQueueTimer
ChangeTimerQueueTimer
ReadConsoleW
SetEnvironmentVariableA
GetStringTypeW
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
HeapAlloc
GetCommandLineA
SetLastError
GetProcAddress
LoadLibraryExW
LoadLibraryW
DuplicateHandle
SetEvent
ReleaseSemaphore
WaitForSingleObjectEx
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RegisterWaitForSingleObject
OutputDebugStringW
GetCurrentThread
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleHandleA
RaiseException
RtlUnwind
CreateTimerQueue
Sleep
SignalObjectAndWait
SwitchToThread
SetThreadPriority
GetThreadPriority
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetLogicalProcessorInformation
CreateTimerQueueTimer
wsprintfW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
ntohl
ntohs
htons
htonl
WSAGetLastError
GetIfTable
GetAdaptersInfo
NotifyAddrChange
?OutputDebugLogA@@YAXHPADZZ
?OutputDebugLogW_@@YAXHPBD0HPA_WZZ
?allocate_private_udp_link@network_interface@@YAKKKG@Z
?begin_network_services@network_interface@@YAHP6GXW4CLIENT_CALLBACK_TYPE@CPACK@@PAX@ZP6GXW4IOSERVER_MONITOR_CALLBACK_TYPE@CONTROLACK@@1@ZP6GXW4SERVER_CALLBACK_TYPE@S2SPACK@@1@Z@Z
?check_client_service@network_interface@@YAXXZ
?check_slave_DS_connection_status@network_interface@@YA_NXZ
?close_link@network_interface@@YAXK_N@Z
?close_p2p_link@network_interface@@YAXK@Z
?close_slave_DS_link@network_interface@@YAXXZ
?colse_sync_DS_connection@network_interface@@YA_NXZ
?create_tcp_read_disk_ack_packet@packet_helper@@YAPAEIIIIIGII@Z
?create_udp_read_disk_ack_packet@packet_helper@@YAPAEIIIIIGII@Z
?destroy_tcp_read_disk_ack_packet@packet_helper@@YAXPAE@Z
?destroy_udp_read_disk_ack_packet@packet_helper@@YAXPAE@Z
?get_unfreed_virtual_memory_count@network_interface@@YAIXZ
?notify_slave_DS_merge_image@network_interface@@YAXPAVBVersionSynchCompleted@S2SPACK@@@Z
?send_client_data@network_interface@@YAXPAEK@Z
?send_client_p2p_bind@network_interface@@YAXPBVReAskBaseInfor@CPACK@@@Z
?send_report_data@network_interface@@YAXK@Z
?sendcs_admin_canceled@network_interface@@YAXPAVCancelAdministrator@CONTROLACK@@@Z
?sendcs_admin_force_canceled@network_interface@@YAXAAVForceCancelPowerUser@CONTROLACK@@@Z
?sendcs_alldisk_version_information2@network_interface@@YAXPAVReadAllDiskVersionInformation@CONTROLACK@@@Z
?sendcs_alldisk_version_information@network_interface@@YAXPAVReadAllDiskVersionInformation@CONTROLACK@@@Z
?sendcs_cfgsecdup_status_report@network_interface@@YAXAAVreport_config_section_duplicate_status@CONTROLACK@@@Z
?sendcs_client_exception@network_interface@@YAXAAUClientException@CONTROLACK@@@Z
?sendcs_disk_exception@network_interface@@YAXABVDSExceptionInformaion@CONTROLACK@@@Z
?sendcs_disk_synchronous_state@network_interface@@YAXPAVStateSynchDiskData@CONTROLACK@@@Z
?sendcs_export_image_ack@network_interface@@YAXAAVAskExportImage@CONTROLACK@@@Z
?sendcs_idb_server_request@network_interface@@YAXXZ
?sendcs_image_information_report@network_interface@@YAXABVLocalDiskData@CONTROLACK@@@Z
?sendcs_io_information@network_interface@@YAXPAVGetIOInformation@CONTROLACK@@@Z
?sendcs_login@network_interface@@YAXPAVAskLoginControlServer@CONTROLACK@@@Z
?sendcs_merge_completed_notify@network_interface@@YAXAAVMergeCompletedNotify@CONTROLACK@@@Z
?sendcs_poweruser_information@network_interface@@YAXPAVMoreUserPowerInfor@CONTROLACK@@@Z
?sendcs_query_client_session_type@network_interface@@YAXAAVAckQueryClientSessionType@CONTROLACK@@@Z
?sendcs_release_bstyle_image@network_interface@@YAXAAVBStyleImageRelease@CONTROLACK@@@Z
?sendcs_snapshot_merge_status_report@network_interface@@YAXAAVreport_snapshot_points_merge_status@CONTROLACK@@@Z
?senddssynch_disk_version_information_ack@network_interface@@YAXPAVDiskVersionInforAck@S2SPACK@@@Z
?senddssynch_disk_version_information_request@network_interface@@YAXPAVAskGetDiskVersionInfor@S2SPACK@@@Z
?senddssynch_image_view_request@network_interface@@YAXPAVSyncImageViewRequest@S2SPACK@@@Z
?senddssynch_image_view_response@network_interface@@YAXPAVSyncImageViewRequestAck@S2SPACK@@@Z
?senddssynch_node_block_crc_request@network_interface@@YAXPAVImageNodeBlockCRCRequest@S2SPACK@@@Z
?senddssynch_node_block_crc_response@network_interface@@YAXPAVImageNodeBlockCRCRequestAck@S2SPACK@@@Z
?senddssynch_version_data_ack@network_interface@@YAXPAVReadVersionDataAck@S2SPACK@@@Z
?senddssynch_version_data_request@network_interface@@YAXPAVAskReadVersionData@S2SPACK@@@Z
?stop_network_services@network_interface@@YAXXZ
?tcp_get_pending_stat@network_interface@@YA_NJPAI0@Z
?tcp_read_disk_ack_packet_front_size@packet_helper@@YAIXZ
?tcp_send_client_data@network_interface@@YA_NJPADI@Z
?udp_read_disk_ack_packet_front_size@packet_helper@@YAIXZ
?udp_send_client_data@network_interface@@YAXKPADIPBDG@Z
?update_netwrok_adpater_status@network_interface@@YAXXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ