Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.69c376a9100c933836662c3fcfc14e10.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.69c376a9100c933836662c3fcfc14e10.exe
Resource
win10v2004-20231025-en
Target
NEAS.69c376a9100c933836662c3fcfc14e10.exe
Size
457KB
MD5
69c376a9100c933836662c3fcfc14e10
SHA1
423089042b26667e7b0394a0344c272d1b0111aa
SHA256
687cd68f64c27e87485116c175b20565459388e4b1d999a0cf77b4502d54c7c6
SHA512
0be4282db395be832b585d4b2733e17b1da95cd8f5db5fd95d84fda24a4ef458b318057b18230ce32755ca22cd716f0bdcc0de0ed8d2da7aff9ac4c47967de79
SSDEEP
6144:GJ9vNA7VQKBBqhHtkLSPE07BIksore2pXSBWEMpXRUWG:G5AZkE07BIkvre2QM1RY
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
iswspace
iswprint
_atoi64
_stricmp
iswxdigit
_vsnwprintf
_vsnprintf
___mb_cur_max_func
_snwprintf
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
__CxxFrameHandler
time
towupper
towlower
wcscmp
_ltow
_wtoi
mbstowcs
wcstol
qsort
wcscspn
wcstombs
setlocale
free
_wtoi64
wcsstr
printf
wcstoul
atoi
vswprintf
fflush
fwprintf
_wfopen
_fcloseall
malloc
wcsncpy
memmove
wcschr
wcscat
_wcsnicmp
_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
wcscpy
putchar
_wcsicmp
wcslen
swprintf
_iob
fputws
wprintf
realloc
exit
_cexit
_XcptFilter
_exit
sprintf
_c_exit
wsprintfW
DsRoleFreeMemory
NetRemoteTOD
I_NetLogonControl2
NetUserSetInfo
NetApiBufferFree
NetUserGetInfo
DsGetDcNameW
DsRoleGetPrimaryDomainInformation
DsWriteAccountSpnW
DsReplicaSyncAllW
DsReplicaGetInfo2W
DsMakeSpnW
DsReplicaAddW
DsReplicaGetInfoW
DsReplicaFreeInfo
DsIsMangledDnW
DsCrackNamesW
DsFreeNameResultW
DsReplicaSyncW
DsBindWithSpnW
DsListRolesW
DsUnBindW
ord157
ord21
ord29
ord118
ord77
ord69
ord224
ord122
ord191
ord41
ord27
ord147
ord140
ord133
ord26
ord36
ord135
ord18
ord16
ord206
ord79
ord142
ord208
ord13
ord203
ord73
ord14
ord145
ord12
ord167
ord127
RpcStringFreeW
RpcErrorStartEnumeration
RpcErrorGetNextRecord
RpcErrorEndEnumeration
NdrClientCall2
RpcBindingSetAuthInfoExA
RpcBindingSetAuthInfoA
RpcBindingSetAuthInfoExW
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcBindingFree
UuidToStringW
UuidFromStringW
WSACleanup
WSAStartup
inet_addr
WSASetLastError
WSALookupServiceEnd
WSAGetLastError
inet_ntoa
WSALookupServiceNextW
getaddrinfo
freeaddrinfo
getnameinfo
WSALookupServiceBeginW
DnsUpdateTest_W
DnsQuery_W
DnsRecordListFree
DnsQueryConfig
DnsValidateName_W
DnsNameCompare_W
DnsQueryConfigAllocEx
DnsFreeConfigStructure
DnsFlushResolverCacheEntry_W
WNetGetResourceInformationW
WNetCancelConnection2W
WNetAddConnection2W
CompareFileTime
Sleep
lstrlenW
GetComputerNameW
WideCharToMultiByte
LeaveCriticalSection
ResetEvent
SetEvent
EnterCriticalSection
CreateEventW
GetTickCount
WaitForSingleObject
InterlockedDecrement
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
SetThreadUILanguage
GetComputerNameExA
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FileTimeToLocalFileTime
GetConsoleOutputCP
ExpandEnvironmentStringsW
FreeLibrary
GetProcAddress
SetLastError
CompareStringW
LocalReAlloc
LoadLibraryExW
GetCurrentProcessId
GetProcessHeap
HeapFree
FileTimeToSystemTime
GetConsoleScreenBufferInfo
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryW
LocalSize
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedIncrement
SystemTimeToFileTime
TerminateProcess
GetSystemTime
GetComputerNameExW
LocalFree
LocalAlloc
MultiByteToWideChar
RaiseException
FormatMessageW
GetSystemDefaultLangID
CloseHandle
WaitForMultipleObjects
CreateThread
ReadConsoleW
SetConsoleMode
GetLastError
GetConsoleMode
GetStdHandle
IcmpCloseHandle
IcmpCreateFile
GetIpAddrTable
IcmpSendEcho2
SysAllocString
SysFreeString
SafeArrayAccessData
SafeArrayUnaccessData
VariantInit
VariantClear
CoInitializeSecurity
CoSetProxyBlanket
CoQueryProxyBlanket
CoUninitialize
CoInitializeEx
CoCreateInstance
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHPBG@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHABV12@@Z
AllocateAndInitializeSid
OpenEventLogW
GetNumberOfEventLogRecords
ReadEventLogW
ImpersonateLoggedOnUser
LogonUserW
RevertToSelf
GetLengthSid
LookupAccountSidW
EqualSid
CloseEventLog
IsValidSid
GetAce
FreeSid
LsaFreeMemory
LsaClose
LsaEnumerateAccountsWithUserRight
LsaOpenPolicy
RegCloseKey
RegQueryValueExW
RegOpenKeyW
RegConnectRegistryW
LsaQueryTrustedDomainInfoByName
QueryServiceStatus
CloseServiceHandle
OpenServiceW
OpenSCManagerW
LsaQueryInformationPolicy
StartServiceW
ControlService
EnumDependentServicesW
LsaSetSecret
LsaOpenSecret
RegOpenKeyExW
RegEnumKeyExW
ConvertSidToStringSidW
RtlInitUnicodeString
RtlAllocateHeap
RtlFreeHeap
RtlNtStatusToDosError
RtlGetDaclSecurityDescriptor
RtlLengthSid
RtlIpv6AddressToStringA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ