Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.8ffcfe3351f51e19b856a2347e19b850.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.8ffcfe3351f51e19b856a2347e19b850.exe
Resource
win10v2004-20231023-en
Target
NEAS.8ffcfe3351f51e19b856a2347e19b850.exe
Size
200KB
MD5
8ffcfe3351f51e19b856a2347e19b850
SHA1
82cb5fcfbd2da2e3a48033f3e7af69dba49fd7b5
SHA256
cc8cc882f11b489c1507f1b722363b17dbc750e884b01bf2db6036ce4775e468
SHA512
004b586f8458be1c73e15f1cafc51daa03bb7ec834647d4c3453045e67ce16c48a72926df4b317c6797cad043d9a1ec128e1862cf1126bc00b8da4769618ae98
SSDEEP
3072:xatc9/tMiq8PFGCcNmroQIvu4QOSLX9DhfmBM:7tMha5qmky5OSLdUBM
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?close@QFile@@UAEXXZ
?readAll@QTextStream@@QAE?AVQString@@XZ
?setCodec@QTextStream@@QAEXPBD@Z
??0QTextStream@@QAE@PAVQIODevice@@@Z
??1QFile@@UAE@XZ
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??0QFile@@QAE@ABVQString@@@Z
?canonicalPath@QDir@@QBE?AVQString@@XZ
?entryList@QDir@@QBE?AVQStringList@@V?$QFlags@W4Filter@QDir@@@@V?$QFlags@W4SortFlag@QDir@@@@@Z
?entryList@QDir@@QBE?AVQStringList@@ABV2@V?$QFlags@W4Filter@QDir@@@@V?$QFlags@W4SortFlag@QDir@@@@@Z
?fromNativeSeparators@QDir@@SA?AVQString@@ABV2@@Z
??4QString@@QAEAAV0@PBD@Z
?number@QString@@SA?AV1@HH@Z
?number@QString@@SA?AV1@KH@Z
?toUInt@QString@@QBEIPA_NH@Z
?toInt@QString@@QBEHPA_NH@Z
?clear@QString@@QAEXXZ
??1QByteArray@@QAE@XZ
??0QString@@QAE@ABVQByteArray@@@Z
?number@QString@@SA?AV1@NDH@Z
?toInt@QVariant@@QBEHPA_N@Z
??0QVariant@@QAE@H@Z
?replace@QString@@QAEAAV1@ABV1@0W4CaseSensitivity@Qt@@@Z
?name@QLocale@@QBE?AVQString@@XZ
?system@QLocale@@SA?AV1@XZ
?compare@QString@@QBEHABV1@W4CaseSensitivity@Qt@@@Z
??0QByteArray@@QAE@ABV0@@Z
?fromUnicode@QTextCodec@@QBE?AVQByteArray@@ABVQString@@@Z
?codecForName@QTextCodec@@SAPAV1@PBD@Z
?length@QString@@QBEHXZ
?toDouble@QString@@QBENPA_N@Z
?toAscii@QString@@QBE?AVQByteArray@@XZ
?toUnicode@QTextCodec@@QBE?AVQString@@ABVQByteArray@@@Z
??1QDebug@@QAE@XZ
??6QDebug@@QAEAAV0@ABVQString@@@Z
??6QDebug@@QAEAAV0@PBD@Z
?qWarning@@YA?AVQDebug@@XZ
??BQByteArray@@QBEPBDXZ
??1QRegExp@@QAE@XZ
?split@QString@@QBE?AVQStringList@@ABVQRegExp@@W4SplitBehavior@1@@Z
??0QRegExp@@QAE@ABVQString@@W4CaseSensitivity@Qt@@W4PatternSyntax@0@@Z
??YQString@@QAEAAV0@PBD@Z
?qCritical@@YA?AVQDebug@@XZ
?number@QString@@SA?AV1@IH@Z
?exists@QFileInfo@@QBE_NXZ
?cleanPath@QDir@@SA?AVQString@@ABV2@@Z
?canonicalFilePath@QFileInfo@@QBE?AVQString@@XZ
??4QString@@QAEAAV0@ABVQByteArray@@@Z
?readAll@QIODevice@@QAE?AVQByteArray@@XZ
??9QString@@QBE_NPBD@Z
?toLower@QString@@QBE?AV1@XZ
?suffix@QFileInfo@@QBE?AVQString@@XZ
?toNativeSeparators@QDir@@SA?AVQString@@ABV2@@Z
?setPath@QDir@@QAEXABVQString@@@Z
?right@QString@@QBE?AV1@H@Z
?startsWith@QString@@QBE_NABV1@W4CaseSensitivity@Qt@@@Z
??1QTextStream@@UAE@XZ
?section@QString@@QBE?AV1@VQChar@@HHV?$QFlags@W4SectionFlag@QString@@@@@Z
??0QChar@@QAE@D@Z
??8QString@@QBE_NPBD@Z
?translate@QCoreApplication@@SA?AVQString@@PBD00W4Encoding@1@@Z
??0QSettings@@QAE@W4Scope@0@ABVQString@@1PAVQObject@@@Z
?setNameFilters@QDir@@QAEXABVQStringList@@@Z
?mkdir@QDir@@QBE_NABVQString@@@Z
?trimmed@QString@@QBE?AV1@XZ
?setValue@QSettings@@QAEXABVQString@@ABVQVariant@@@Z
??0QVariant@@QAE@ABVQString@@@Z
??0QVariant@@QAE@I@Z
?sprintf@QString@@QAAAAV1@PBDZZ
?constData@QByteArray@@QBEPBDXZ
?toUInt@QVariant@@QBEIPA_N@Z
?ref@QBasicAtomicInt@@QAE_NXZ
?shared_null@QListData@@2UData@1@A
?isEmpty@QListData@@QBE_NXZ
?size@QListData@@QBEHXZ
?at@QListData@@QBEPAPAXH@Z
?append@QListData@@QAEPAPAXXZ
?end@QListData@@QBEPAPAXXZ
?detach3@QListData@@QAEPAUData@1@XZ
?begin@QListData@@QBEPAPAXXZ
??0QDir@@QAE@ABV0@@Z
?shared_null@QHashData@@2U1@A
?willGrow@QHashData@@QAE_NXZ
?free_helper@QHashData@@QAEXP6AXPAUNode@1@@Z@Z
??9QBasicAtomicInt@@QBE_NH@Z
??4QDir@@QAEAAV0@ABV0@@Z
?detach_helper2@QHashData@@QAEPAU1@P6AXPAUNode@1@PAX@ZP6AX0@ZHH@Z
?allocateNode@QHashData@@QAEPAXH@Z
?winEventFilter@QCoreApplication@@UAE_NPAUtagMSG@@PAJ@Z
?utf16@QString@@QBEPBGXZ
?connect@QObject@@SA_NPBV1@PBD01W4ConnectionType@Qt@@@Z
?qChecksum@@YAGPBDI@Z
??6QDebug@@QAEAAV0@I@Z
??6QDebug@@QAEAAV0@K@Z
?firstNode@QHashData@@QAEPAUNode@1@XZ
?nextNode@QHashData@@SAPAUNode@1@PAU21@@Z
?hasShrunk@QHashData@@QAEXXZ
??8QString@@QBE_NABV0@@Z
?qHash@@YAIABVQString@@@Z
?freeNode@QHashData@@QAEXPAX@Z
??0QFileInfo@@QAE@ABVQString@@@Z
?absolutePath@QFileInfo@@QBE?AVQString@@XZ
?setFile@QFileInfo@@QAEXABVQString@@@Z
?fileName@QFileInfo@@QBE?AVQString@@XZ
??4QString@@QAEAAV0@ABV0@@Z
??1QFileInfo@@QAE@XZ
??6QTextStream@@QAEAAV0@ABVQString@@@Z
?copy@QFile@@SA_NABVQString@@0@Z
?fromAscii@QString@@SA?AV1@PBDH@Z
??YQString@@QAEAAV0@ABV0@@Z
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ
??0QDir@@QAE@ABVQString@@@Z
?exists@QDir@@QBE_NXZ
?mkpath@QDir@@QBE_NABVQString@@@Z
??1QDir@@QAE@XZ
?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z
?fromWCharArray@QString@@SA?AV1@PBGH@Z
?toLocal8Bit@QString@@QBE?AVQByteArray@@XZ
?free@QString@@CAXPAUData@1@@Z
?detach@QByteArray@@QAEXXZ
?qWinMain@@YAXPAUHINSTANCE__@@0PADHAAHAAV?$QVector@PAD@@@Z
?reallocate@QVectorData@@SAPAU1@PAU1@HHH@Z
?qMemSet@@YAPAXPAXHI@Z
?allocate@QVectorData@@SAPAU1@HH@Z
?qBadAlloc@@YAXXZ
?free@QVectorData@@SAXPAU1@H@Z
?qt_assert@@YAXPBD0H@Z
?qFlagLocation@@YAPBDPBD@Z
??0QString@@QAE@ABV0@@Z
?disconnectNotify@QObject@@MAEXPBD@Z
?connectNotify@QObject@@MAEXPBD@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
??0QObject@@QAE@PAV0@@Z
??1QObject@@UAE@XZ
?staticMetaObject@QObject@@2UQMetaObject@@B
?activate@QMetaObject@@SAXPAVQObject@@PBU1@HPAPAX@Z
?qt_metacall@QObject@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QObject@@UAEPAXPBD@Z
??8QBasicAtomicInt@@QBE_NH@Z
?qFree@@YAXPAX@Z
?deref@QBasicAtomicInt@@QAE_NXZ
?QStringList_join@QtPrivate@@YA?AVQString@@PBVQStringList@@ABV2@@Z
??0QString@@QAE@PBD@Z
??1QString@@QAE@XZ
?arguments@QCoreApplication@@SA?AVQStringList@@XZ
??0QSettings@@QAE@ABVQString@@0PAVQObject@@@Z
?beginGroup@QSettings@@QAEXABVQString@@@Z
??0QVariant@@QAE@_N@Z
?value@QSettings@@QBE?AVQVariant@@ABVQString@@ABV2@@Z
?toBool@QVariant@@QBE_NXZ
??1QVariant@@QAE@XZ
?endGroup@QSettings@@QAEXXZ
??1QSettings@@UAE@XZ
??0QSettings@@QAE@ABVQString@@W4Format@0@PAVQObject@@@Z
??0QVariant@@QAE@PBD@Z
?toString@QVariant@@QBE?AVQString@@XZ
?isEmpty@QString@@QBE_NXZ
?prepend@QString@@QAEAAV1@PBD@Z
?append@QString@@QAEAAV1@PBD@Z
?startDetached@QProcess@@SA_NABVQString@@@Z
??0QString@@QAE@XZ
?exists@QFile@@SA_NABVQString@@@Z
?addLibraryPath@QCoreApplication@@SAXABVQString@@@Z
??0QLibrary@@QAE@ABVQString@@PAVQObject@@@Z
?load@QLibrary@@QAE_NXZ
??1QLibrary@@UAE@XZ
?isLoaded@QLibrary@@QBE_NXZ
?resolve@QLibrary@@QAEPAXPBD@Z
?contains@QString@@QBE?AVQBool@@ABV1@W4CaseSensitivity@Qt@@@Z
?connect@QObject@@QBE_NPBV1@PBD1W4ConnectionType@Qt@@@Z
?exec@QApplication@@SAHXZ
?setQuitOnLastWindowClosed@QApplication@@SAX_N@Z
?qt_metacall@QApplication@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?staticMetaObject@QApplication@@2UQMetaObject@@B
??1QImage@@UAE@XZ
??0QImage@@QAE@XZ
?load@QImage@@QAE_NABVQString@@PBD@Z
?storageLocation@QDesktopServices@@SA?AVQString@@W4StandardLocation@1@@Z
??4QImage@@QAEAAV0@ABV0@@Z
??1QApplication@@UAE@XZ
??0QApplication@@QAE@AAHPAPADH@Z
?event@QApplication@@MAE_NPAVQEvent@@@Z
?notify@QApplication@@UAE_NPAVQObject@@PAVQEvent@@@Z
?compressEvent@QApplication@@MAE_NPAVQEvent@@PAVQObject@@PAVQPostEventList@@@Z
?commitData@QApplication@@UAEXAAVQSessionManager@@@Z
?saveState@QApplication@@UAEXAAVQSessionManager@@@Z
?qt_metacast@QApplication@@UAEPAXPBD@Z
?createProcessingInstruction@QDomDocument@@QAE?AVQDomProcessingInstruction@@ABVQString@@0@Z
??0QDomNode@@QAE@ABV0@@Z
??1QDomProcessingInstruction@@QAE@XZ
?firstChild@QDomNode@@QBE?AV1@XZ
?insertBefore@QDomNode@@QAE?AV1@ABV1@0@Z
??1QDomNode@@QAE@XZ
??1QDomNodeList@@QAE@XZ
?appendChild@QDomNode@@QAE?AV1@ABV1@@Z
?setAttribute@QDomElement@@QAEXABVQString@@0@Z
??1QDomElement@@QAE@XZ
??4QDomElement@@QAEAAV0@ABV0@@Z
??0QDomDocument@@QAE@ABVQString@@@Z
??1QDomDocument@@QAE@XZ
?setContent@QDomDocument@@QAE_NABVQString@@PAV2@PAH2@Z
?toString@QDomDocument@@QBE?AVQString@@H@Z
?at@QDomNodeList@@QBE?AVQDomNode@@H@Z
?count@QDomNodeList@@QBEHXZ
?elementsByTagName@QDomElement@@QBE?AVQDomNodeList@@ABVQString@@@Z
?attribute@QDomElement@@QBE?AVQString@@ABV2@0@Z
?toElement@QDomNode@@QBE?AVQDomElement@@XZ
?namedItem@QDomNode@@QBE?AV1@ABVQString@@@Z
?documentElement@QDomDocument@@QBE?AVQDomElement@@XZ
??0QDomElement@@QAE@ABV0@@Z
??0QDomDocument@@QAE@ABV0@@Z
??1QDomText@@QAE@XZ
?createTextNode@QDomDocument@@QAE?AVQDomText@@ABVQString@@@Z
?isElement@QDomNode@@QBE_NXZ
?isNull@QDomNode@@QBE_NXZ
?text@QDomElement@@QBE?AVQString@@XZ
?createElement@QDomDocument@@QAE?AVQDomElement@@ABVQString@@@Z
GetCommandLineW
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetModuleHandleW
GetSystemTimeAsFileTime
ReleaseMutex
WaitForSingleObject
CreateMutexW
GetLastError
PostMessageW
RegisterWindowMessageW
DefWindowProcW
DestroyWindow
SetWindowLongW
GetWindowLongW
CreateWindowExW
RegisterClassW
GetClassInfoW
FindWindowW
_acmdln
exit
_ismbblead
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__CxxFrameHandler3
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
??3@YAXPAX@Z
strcmp
??2@YAPAXI@Z
getenv
_CxxThrowException
memcpy
srand
_time64
rand
_wassert
_amsg_exit
__getmainargs
_cexit
_exit
__p__fmode
_stricmp
_XcptFilter
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ