Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.05dd8b00b42e2e63f502b2b953434040_JC.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.05dd8b00b42e2e63f502b2b953434040_JC.exe
Resource
win10v2004-20231023-en
Target
NEAS.05dd8b00b42e2e63f502b2b953434040_JC.exe
Size
442KB
MD5
05dd8b00b42e2e63f502b2b953434040
SHA1
66fab497f9b753b1ee54fc248cdb0fcb1d783efc
SHA256
f24e9ed9f67981ee2e61d15b8edcf4442801936dd751c5b9b8d0e1653e854314
SHA512
306a95caa6f433be4e0685378b0fa0aad9fb677fece0631292a5e6f7e70357cfa895d379a9ceda489b867f65048106b794ef0b280969865205cf18fb0ce47117
SSDEEP
6144:HxRf1v1hWv2eoll95q2d4x9Xgv4opX5yZBlGtTBj2CagPhjpywAHh:HxRf1v15i2d/lbeBlGtTJ1aAjG
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
InterlockedIncrement
GetTempPathW
lstrcpyW
GetShortPathNameW
RemoveDirectoryW
ReadFile
CreateFileW
DeviceIoControl
CreateEventW
SetEvent
TlsSetValue
IsBadWritePtr
IsBadReadPtr
CancelWaitableTimer
WaitForMultipleObjects
ResetEvent
GetTempFileNameW
SetWaitableTimer
CreateWaitableTimerW
SystemTimeToFileTime
GetDiskFreeSpaceExW
SetFileTime
SetEndOfFile
SetFilePointer
WriteFile
FindClose
FindNextFileW
SetFileAttributesW
GetFileAttributesW
FindFirstFileW
GetFileSize
CreateDirectoryW
GetSystemTime
LocalFree
WritePrivateProfileStringW
GetPrivateProfileStructW
TerminateProcess
OpenProcess
lstrcmpA
lstrcmpiA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcessId
GetPrivateProfileSectionNamesW
GlobalMemoryStatusEx
GetSystemInfo
GetWindowsDirectoryW
GetLocalTime
GetTickCount
GetCurrentProcess
DeleteFileW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetExitCodeProcess
GetLongPathNameW
GetVersionExW
SuspendThread
TerminateThread
lstrcpyA
VirtualAlloc
VirtualFree
GetStartupInfoA
GetModuleHandleA
SetErrorMode
CreateMutexW
GetLastError
CreateThread
InterlockedDecrement
lstrcpynA
GetModuleFileNameW
lstrcpynW
lstrcatW
lstrlenA
MultiByteToWideChar
MoveFileExW
CopyFileW
FreeLibrary
WaitForSingleObject
lstrlenW
WideCharToMultiByte
LoadLibraryW
GetProcAddress
Sleep
CreateProcessW
CloseHandle
LocalAlloc
GetDesktopWindow
ShowWindow
wsprintfA
PostQuitMessage
EndPaint
CreateDialogParamW
KillTimer
SetWindowPos
CreateWindowExW
GetMessageW
PostMessageW
FindWindowW
BeginPaint
DefWindowProcW
RegisterClassExW
LoadCursorW
UnregisterClassW
MessageBoxW
TranslateMessage
DispatchMessageW
FindWindowExW
IsWindow
SetTimer
wsprintfW
CharNextW
CharLowerW
LoadImageW
IsWindowEnabled
SetDlgItemTextW
EnableWindow
GetWindowTextW
SetWindowTextW
GetSystemMetrics
LoadIconW
GetWindowRect
ScreenToClient
MoveWindow
PostThreadMessageW
GetDlgItem
PeekMessageW
DestroyWindow
SendMessageW
GetClientRect
RemovePropW
CheckDlgButton
SetPropW
GetPropW
EndDialog
DialogBoxParamW
LoadStringW
CreateFontIndirectW
GetObjectW
RegDeleteKeyW
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegUnLoadKeyW
RegCloseKey
RegSaveKeyW
RegOpenKeyExW
RegLoadKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegQueryValueExW
RegEnumKeyExW
RegDeleteValueW
ord680
ShellExecuteW
SHGetSpecialFolderPathW
ShellExecuteExW
CoUninitialize
CoInitialize
OleUninitialize
OleInitialize
CoCreateInstance
OleCreate
CoTaskMemFree
StringFromCLSID
SysAllocString
VariantClear
SysFreeString
PathIsRootW
PathCombineW
PathRemoveFileSpecW
PathRemoveExtensionW
StrStrIW
PathGetDriveNumberW
PathFindFileNameW
SHDeleteValueW
SHSetValueW
SHGetValueW
PathAppendW
PathFileExistsW
SHGetValueA
StrStrW
StrToIntW
SHDeleteKeyW
HttpSendRequestExW
InternetGetConnectedState
HttpEndRequestW
HttpAddRequestHeadersW
HttpSendRequestW
InternetCloseHandle
HttpOpenRequestW
GetUrlCacheEntryInfoW
CreateUrlCacheEntryW
CommitUrlCacheEntryW
HttpQueryInfoW
FtpGetFileSize
InternetSetOptionA
InternetSetStatusCallbackW
InternetReadFileExA
InternetReadFile
FtpOpenFileW
InternetWriteFile
InternetGetLastResponseInfoW
FtpCommandW
InternetQueryOptionW
InternetSetOptionW
InternetCrackUrlW
InternetOpenW
InternetConnectW
ObtainUserAgentString
InitCommonControlsEx
ord39
ord47
ord42
??0Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?_Refcnt@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEAAEPBG@Z
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??1Init@ios_base@std@@QAE@XZ
sprintf
_beginthreadex
_strnicmp
fgets
rewind
_wcsnicmp
wcscmp
_wfopen
_filelength
atof
_purecall
_onexit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_stricmp
isalnum
memcmp
fseek
ftell
fread
fgetws
wcscpy
fclose
fwrite
wcschr
wcsstr
wcsncat
_itow
_wtoi
wcscat
_waccess
strncpy
strncmp
??2@YAPAXI@Z
__p___argc
__p___argv
atoi
exit
wcsrchr
_snwprintf
wcsncpy
__CxxFrameHandler
_wcsicmp
wcslen
isprint
isspace
tolower
_ui64tow
time
_wtol
_ftol
_wtoi64
fprintf
_vsnprintf
_vsnwprintf
swprintf
free
malloc
vswprintf
iswdigit
_snprintf
memmove
_except_handler3
_strlwr
strncat
swscanf
wcsncmp
_ltow
fwprintf
memcpy
iswspace
memset
realloc
__dllonexit
SetupIterateCabinetW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
WinVerifyTrust
CryptCATAdminAcquireContext
CryptCATAdminEnumCatalogFromHash
CryptCATAdminReleaseCatalogContext
CryptCATAdminReleaseContext
CryptCATAdminCalcHashFromFileHandle
GetModuleBaseNameW
EnumProcesses
EnumProcessModules
Netbios
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE