Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
ScanWia.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
ScanWia.exe
Resource
win10v2004-20231023-en
Target
ScanWia.exe
Size
269KB
MD5
7e347158b8ffdf8daccfde7d6b129843
SHA1
e088a374164219394607749ca409ae656bdbb213
SHA256
8e38b6480cee6c2adf89cdf6da0fc80a7b3dc12385e8385c2bd2f976a7edc32f
SHA512
9dc4203b4a2fe7d014f681f3366e37203477a11b6cc3d98ea494bb97b61d92f11a0bff14d79c6bf8ce049c149936ee934ab78062e8beb5baaf021186acb46fac
SSDEEP
3072:qxPYwWyAlcYYYceBBYu8YJ6YYk2X6Uzi34Y4YaHpdIt3F4i+YYD+UG464i9YYYO9:dyomuMa4iJA2ZETe
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
InterlockedIncrement
GetLastError
FreeLibrary
CompareStringA
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
ExitProcess
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
LoadLibraryA
InterlockedExchange
SetLastError
Sleep
GetCommandLineW
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
GetCurrentProcessId
IsWindow
ShowWindow
SetForegroundWindow
MessageBoxA
CoCreateInstance
VariantChangeType
VariantClear
VariantInit
SetErrorInfo
CreateErrorInfo
SysAllocString
SysFreeString
GetErrorInfo
?TranslateScrollAccelerator@CFrameWindow@AWL@@MAE_NABUtagMSG@@@Z
?IsWindow@CWindow@AWL@@QBE_NXZ
?CenterWindow@CWindow@AWL@@QAEXPAV12@@Z
?Handle@CWindow@AWL@@QBEPAUHWND__@@XZ
??1CFrameWindow@AWL@@UAE@XZ
??0CFrameWindow@AWL@@QAE@XZ
?OnCmdMsg@CFrameWindow@AWL@@UAE_NAAUCCmdMsgParams@2@PAVCCmdTarget@2@PAUCCmdHandlerInfo@2@@Z
?DefWindowProcW@CWindow@AWL@@UAEJIIJ@Z
?PreCreateWindow@CFrameWindow@AWL@@UAEXAAUtagCREATESTRUCTW@@@Z
?CreateSelf@CWindow@AWL@@UAEXPAV12@ABVCRect@FObj@@@Z
?SendCloseMessage@CWindow@AWL@@UAEXXZ
?DestroyWindow@CWindow@AWL@@UAEXXZ
?OnIdleUpdate@CFrameWindow@AWL@@UAEXXZ
?SaveLayout@CFrameWindow@AWL@@UAE?AVCUnicodeString@FObj@@XZ
?RestoreLayout@CFrameWindow@AWL@@UAE_NAAVCUnicodeString@FObj@@@Z
?OnScroll@CFrameWindow@AWL@@UAE_NIIIH_N@Z
?GetScrollController@CWindow@AWL@@UAEPAV12@W4TScrollDirection@2@@Z
?GetScrollType@CWindow@AWL@@UAEHW4TScrollDirection@2@@Z
?IsScrollingEnabled@CFrameWindow@AWL@@MAE_NW4TScrollDirection@2@@Z
?GetWheelScrollLines@CWindow@AWL@@UAEHXZ
?GetHelpTopic@CFrameWindow@AWL@@UAE?AVCUnicodeString@FObj@@XZ
?PreTranslateMessage@CFrameWindow@AWL@@MAE_NAAUtagMSG@@@Z
?FilterMessage@CWindow@AWL@@UAE_NAAUtagMSG@@@Z
?IsDialogMessageW@CWindow@AWL@@UAE_NAAUtagMSG@@@Z
?Activate@CWindow@AWL@@UAEXXZ
?OnActivateChild@CFrameWindow@AWL@@MAEXPAUHWND__@@0@Z
?PrepareDC@CFrameWindow@AWL@@MAEXPAUHDC__@@@Z
?FindAccelName@CFrameWindow@AWL@@UAE?AVCUnicodeString@FObj@@I@Z
?AwlSetAppTitle@AWL@@YAXABVCUnicodeString@FObj@@@Z
?GetApp@AWL@@YAPAVCWinApp@1@XZ
?DoMessageLoop@CMessageLoop@AWL@@UAEXXZ
?IsMenuMessageLoop@CMessageLoop@AWL@@UBE_NXZ
?OnQuit@CWinApp@AWL@@UAEXH@Z
?Continue@CMessageLoop@AWL@@UAE_NXZ
?OnIdle@CMessageLoop@AWL@@UAE_NJ@Z
?IsIdleMessage@CMessageLoop@AWL@@UAE_NAAUtagMSG@@@Z
?PreTranslateMessage@CWinApp@AWL@@UAE_NAAUtagMSG@@@Z
?Run@CWinApp@AWL@@MAEXXZ
?PostProcessMessage@CWinApp@AWL@@UAEXPAUHWND__@@IIJAAJ@Z
?PreProcessMessage@CWinApp@AWL@@UAE_NPAUHWND__@@IIJAAJ@Z
?WindowProcExceptionHandler@CWinApp@AWL@@UAEXPAVCException@FObj@@PAUHWND__@@IIJ@Z
?OnEndSession@CWinApp@AWL@@UAEXXZ
?DispatchThreadMsg@CCmdTarget@AWL@@MAE_NAAUtagMSG@@@Z
?OnCmdMsg@CCmdTarget@AWL@@UAE_NAAUCCmdMsgParams@2@PAV12@PAUCCmdHandlerInfo@2@@Z
??0CWinApp@AWL@@QAE@XZ
??1CWinApp@AWL@@UAE@XZ
?ExitInstance@CWinApp@AWL@@MAEXXZ
?GetThisMessageMap@CWinApp@AWL@@KAPBUCMessageMap@2@XZ
?CreateEx@CWindow@AWL@@QAEXKABVCUnicodeString@FObj@@0KHHHHPAUHWND__@@PAUHMENU__@@PAX@Z
?AwlGetAppTitle@AWL@@YA?AVCUnicodeString@FObj@@XZ
?RegisterWindowClass@AWL@@YA?AVCUnicodeString@FObj@@IPAUHICON__@@PAUHBRUSH__@@00@Z
?DeleteMenu@CMenu@AWL@@QAEXI_N@Z
?GetMenuItemCount@CMenu@AWL@@QBEHXZ
?GetSystemMenu@CWindow@AWL@@QBEPAVCMenu@2@_N@Z
?OnSysCommand@CFrameWindow@AWL@@IAEXIJ@Z
?GetThisMessageMap@CFrameWindow@AWL@@KAPBUCMessageMap@2@XZ
?GetAwlLibraryRevision@AWL@@YAHXZ
?AwlOleInit@AWL@@YAXXZ
?AwlOleExit@AWL@@YAXXZ
?AwlMain@AWL@@YAHPB_W0@Z
?OnPrintAbort@CFrameWindow@AWL@@EAEXPAUHDC__@@H@Z
?DoSimpleScroll@CFrameWindow@AWL@@EAE_NXZ
?GetVerticalPageSize@CFrameWindow@AWL@@MAEHH@Z
?GetHorizontalPageSize@CFrameWindow@AWL@@MAEHH@Z
?OnFirstShowWindow@CFrameWindow@AWL@@MAEXXZ
?LoadTipText@CFrameWindow@AWL@@MAE?AVCUnicodeString@FObj@@I@Z
?SaveActiveChild@CFrameWindow@AWL@@MAEXPAUHWND__@@@Z
?DoRecalcLayout@CFrameWindow@AWL@@MAE?AVCRect@FObj@@XZ
?CanClose@CFrameWindow@AWL@@MAE_N_N@Z
?DoDataExchange@CFrameWindow@AWL@@MAEXPAVCDataExchange@2@@Z
?DoModal@CFrameWindow@AWL@@UAEHXZ
?EndModalLoop@CFrameWindow@AWL@@UAEXH@Z
?OnTrayIconCallback@CFrameWindow@AWL@@UAE_NII@Z
?RemoveDockedPane@CFrameWindow@AWL@@UAEXPAVCWindow@2@@Z
?InsertDockedPane@CFrameWindow@AWL@@UAEXHPAVCWindow@2@W4TDock@2@K@Z
?GetRoutingChild@CFrameWindow@AWL@@UAEPAVCWindow@2@XZ
?CreateFrame@CFrameWindow@AWL@@UAEXPAVCWindow@2@ABVCRect@FObj@@KKI@Z
?CreateFromResource@CFrameWindow@AWL@@UAEXPB_WABVCUnicodeString@FObj@@PAVCWindow@2@ABVCRect@4@KK@Z
?DoScrollBy@CWindow@AWL@@EAEHVCSize@FObj@@ABUtagSCROLLINFO@@1_N@Z
?OnScrollBy@CWindow@AWL@@EAEHVCSize@FObj@@_N@Z
?PostNcDestroy@CWindow@AWL@@MAEXXZ
?OnChildNotify@CWindow@AWL@@MAE_NIIJAAJ@Z
?OnWndMsg@CWindow@AWL@@MAE_NIIJAAJ@Z
?WindowProc@CWindow@AWL@@MAEJIIJ@Z
?PostScroll@CFrameWindow@AWL@@MAEXXZ
?DoScroll@CWindow@AWL@@MAEXVCSize@FObj@@@Z
?OnNotify@CWindow@AWL@@MAE_NIJAAJ@Z
?OnCommand@CWindow@AWL@@MAE_NIJ@Z
?OnDetach@CFrameWindow@AWL@@MAEXXZ
?OnAttach@CFrameWindow@AWL@@MAEXXZ
?FailValidate@CFrameWindow@AWL@@UAEXABVCUnicodeString@FObj@@@Z
?ValidateData@CFrameWindow@AWL@@UAE_NXZ
?SaveData@CFrameWindow@AWL@@UAE_NXZ
?LoadData@CFrameWindow@AWL@@UAEXXZ
?GetMinSize@CFrameWindow@AWL@@UBE?AVCSize@FObj@@XZ
?GetStatusText@CFrameWindow@AWL@@UAE?AVCUnicodeString@FObj@@XZ
?BeginStaticPart@FObj@@YAXXZ
?GetErrorFlag@FObj@@YA_NXZ
?EndStaticPart@FObj@@YAXXZ
?GetModuleFileNameW@FileSystem@FObj@@YA?AVCUnicodeString@2@PAUHINSTANCE__@@@Z
?AddResourceModule@FObj@@YAXPAUHINSTANCE__@@@Z
?RemoveResourceModule@FObj@@YAXPAUHINSTANCE__@@@Z
?ThrowCOMException@FObj@@YAXJPAUIErrorInfo@@@Z
?GetFineObjectsVersion@FObj@@YAHXZ
?doAlloc@FObj@@YAPAXI@Z
?doFree@FObj@@YAXPAX@Z
??6FObj@@YAAAVCTextStream@0@AAV10@ABVCUnicodeString@0@@Z
??1CIniFile@FObj@@QAE@XZ
??1CUnicodeString@FObj@@QAE@XZ
?GetString@CIniFile@FObj@@QBE?AVCUnicodeString@2@ABV32@00@Z
??0CUnicodeString@FObj@@QAE@PB_W@Z
??0CUnicodeString@FObj@@QAE@XZ
?Value@CUnicodeString@FObj@@QBE_NAAHH@Z
??0CUnicodeString@FObj@@QAE@ABV01@@Z
??0CUnicodeString@FObj@@AAE@PAVCUnicodeStringBody@1@@Z
?concatStr@CUnicodeString@FObj@@CAPAVCUnicodeStringBody@2@PB_WH0H@Z
?Ptr@CUnicodeString@FObj@@QBEPB_WXZ
?Length@CUnicodeString@FObj@@QBEHXZ
?safeStr@CUnicodeString@FObj@@CAPB_WPB_W@Z
?safeStrLen@CUnicodeString@FObj@@CAHPB_W@Z
?Value@CUnicodeString@FObj@@QBE_NAA_N@Z
?GenerateCheck@FObj@@YAXAAVCError@1@PB_W11@Z
?HasKey@CIniFile@FObj@@QBE_NABVCUnicodeString@2@0@Z
?UnicodeStr@FObj@@YA?AVCUnicodeString@1@HH@Z
??BCUnicodeString@FObj@@QBEPB_WXZ
??4CUnicodeString@FObj@@QAEAAV01@PB_W@Z
?AccessFile@FileSystem@FObj@@YA_NABVCUnicodeString@2@I@Z
?MergePath@FileSystem@FObj@@YA?AVCUnicodeString@2@ABV32@0@Z
?GetSpecialFolder@FileSystem@FObj@@YA?AVCUnicodeString@2@W4TSpecialFolder@12@_N@Z
??0CIniFile@FObj@@QAE@ABVCUnicodeString@1@@Z
?Merge@FileSystem@FObj@@YA?AVCUnicodeString@2@ABV32@0@Z
?Mid@CUnicodeString@FObj@@QBE?AV12@HH@Z
?CharPos@CUnicodeString@FObj@@QBEH_WH@Z
?GenerateInternalError@FObj@@YA_NW4TInternalErrorType@1@PB_W11JK@Z
?IsEmpty@CUnicodeString@FObj@@QBE_NXZ
?UnicodeStr@FObj@@YA?AVCUnicodeString@1@JH@Z
??0CError@FObj@@QAE@PB_WH@Z
??1CError@FObj@@QAE@XZ
?GetCriticalSection@CCriticalSection@FObj@@QAEPAU_RTL_CRITICAL_SECTION@@XZ
??6CTextStream@FObj@@QAEAAV01@PB_W@Z
?GetDrivePath@FileSystem@FObj@@YA?AVCUnicodeString@2@ABV32@@Z
?Flush@CTextStream@FObj@@QAEXXZ
??1CTextStream@FObj@@QAE@XZ
?CompareNoCase@CUnicodeString@FObj@@QBEHPB_W@Z
?ReleaseBuffer@CUnicodeString@FObj@@QAEXXZ
?GetBuffer@CUnicodeString@FObj@@QAEPA_WH@Z
?MakeDir@FileSystem@FObj@@YAXABVCUnicodeString@2@@Z
?AccessDir@FileSystem@FObj@@YA_NABVCUnicodeString@2@@Z
??4CUnicodeString@FObj@@QAEAAV01@ABV01@@Z
?IsWindows2000@FObj@@YA_NXZ
?GetEXEDir@FileSystem@FObj@@YA?AVCUnicodeString@2@XZ
?UnicodeFormat@CTime@FObj@@QBE?AVCUnicodeString@2@PB_W@Z
?GetTickCount@CTime@FObj@@SA?AV12@XZ
??1CString@FObj@@QAE@XZ
?CreateUnicodeString@CString@FObj@@QBE?AVCUnicodeString@2@I@Z
??0CString@FObj@@QAE@PBD@Z
??YCUnicodeString@FObj@@QAEAAV01@PB_W@Z
?Delete@CException@FObj@@QAEXXZ
??0CTextStream@FObj@@QAE@PAVCBaseFile@1@W4TFormat@01@@Z
?SeekToEnd@CBaseFile@FObj@@QAEXXZ
?Open@CFile@FObj@@QAEXABVCUnicodeString@2@I@Z
?Empty@CUnicodeString@FObj@@QAEXXZ
?Merge@FileSystem@FObj@@YA?AVCUnicodeString@2@ABV32@000@Z
?Split@FileSystem@FObj@@YAXABVCUnicodeString@2@AAV32@111@Z
??1CFile@FObj@@UAE@XZ
??0CFile@FObj@@QAE@XZ
?IsWindowsXP@FObj@@YA_NXZ
?IsWindowsServer2003@FObj@@YA_NXZ
?IsWindowsVista@FObj@@YA_NXZ
?Format@FObj@@YA?AVCUnicodeString@1@PB_WZZ
?UnicodeStr@FObj@@YA?AVCUnicodeString@1@KH@Z
??0CSize@FObj@@QAE@HH@Z
??0CSize@FObj@@QAE@UtagSIZE@@@Z
?UnicodeStr@CMessage@FObj@@QBE?AVCUnicodeString@2@XZ
?make@rational@FObj@@CA?AV12@_J0@Z
?Width@CRect@FObj@@QBEHXZ
?Height@CRect@FObj@@QBEHXZ
?UnionRect@CRect@FObj@@QAE_NABUtagRECT@@0@Z
??0CRect@FObj@@QAE@UtagPOINT@@UtagSIZE@@@Z
??0CPoint@FObj@@QAE@HH@Z
??0CRect@FObj@@QAE@XZ
??0rational@FObj@@QAE@H@Z
??0CMessage@FObj@@QAE@PB_WH@Z
??1CMessage@FObj@@QAE@XZ
??1CMessageHandlerSwitcher@FObj@@QAE@XZ
?IsSwitch@FObj@@YA_NPB_W0AAPB_WH@Z
?ParseCommandLine@FObj@@YAXAAV?$CArray@VCUnicodeString@FObj@@VCurrentMemoryManager@2@@1@PB_W@Z
??0CMessageHandlerSwitcher@FObj@@QAE@PAVCMessageHandler@1@_N1@Z
?SetCurrentLanguageCode@FObj@@YAXH@Z
?FindLanguageIndex@FObj@@YAHH@Z
??0CCriticalSection@FObj@@QAE@XZ
??1CCriticalSection@FObj@@QAE@XZ
?Warning@FObj@@YAXPBVCException@1@@Z
?AddResourcePrefix@FObj@@YAXPB_W0@Z
?LoadModule@FObj@@YAPAUHINSTANCE__@@PB_W@Z
?Merge@FileSystem@FObj@@YA?AVCUnicodeString@2@ABV32@00@Z
?ShowWarning@CMessageHandler@FObj@@UAEXPBVCException@2@@Z
?ShowMessageWithIcon@CMessageBoxHandler@FObj@@UAEHPAUHWND__@@PB_W1I1@Z
??0CMessageBoxHandler@FObj@@QAE@XZ
??1CMessageBoxHandler@FObj@@UAE@XZ
?GetDefaultReturnValue@CMessageHandler@FObj@@SAHI@Z
?ShowMessage@CMessageBoxHandler@FObj@@UAEHPAUHWND__@@PB_W1I@Z
?UnicodeStr@FObj@@YA?AVCUnicodeString@1@_N@Z
??$DuplicateObject@VIObject@FObj@@@FObj@@YA?AV?$CPtr@VIObject@FObj@@@0@PBVIObject@0@@Z
?MakePermanent@TempFile@FObj@@YAXABVCUnicodeString@2@0@Z
?NewInDir@TempFile@FObj@@YA?AVCUnicodeString@2@ABV32@PB_W@Z
?Read@CArchive@FObj@@QAEXPAXH@Z
??1CArchive@FObj@@UAE@XZ
?Detach@?$CMemoryFileEx@VCurrentMemoryManager@FObj@@@FObj@@QAEPAEXZ
??5FObj@@YAAAVCArchive@0@AAV10@AAVCUnicodeString@0@@Z
??0CArchive@FObj@@QAE@PAVCBaseFile@1@W4TDirection@01@H@Z
?HashKey@CUnicodeString@FObj@@QBEHXZ
?Compare@CUnicodeString@FObj@@QBEHPB_W@Z
?Write@CArchive@FObj@@QAEXPBXH@Z
?WriteObject@CArchive@FObj@@QAEXPBVIObject@2@@Z
?ERR_BAD_ARCHIVE@FObj@@3VCError@1@A
?UnicodeName@CArchive@FObj@@QBE?AVCUnicodeString@2@XZ
?ReadObject@CArchive@FObj@@QAE?AV?$CPtr@VIObject@FObj@@@2@XZ
??6FObj@@YAAAVCArchive@0@AAV10@ABVCUnicodeString@0@@Z
?IsLoading@CArchive@FObj@@QBE_NXZ
?UpperPrimeNumber@FObj@@YAHH@Z
?GenerateCheckHRESULT@FObj@@YAXJ@Z
?ThrowMemoryException@FObj@@YAXXZ
?GetMessageW@CError@FObj@@QAEAAVCMessage@2@XZ
??YCUnicodeString@FObj@@QAEAAV01@ABV01@@Z
?UnicodeStr@FObj@@YA?AVCUnicodeString@1@EH@Z
??0CRect@FObj@@QAE@HHHH@Z
?DoCreateObject@FObj@@YA?AV?$CPtr@VIObject@FObj@@@1@ABVCUnicodeString@1@@Z
?RemoveIgnoreErrors@FileSystem@FObj@@YA_NABVCUnicodeString@2@@Z
?MessageBoxW@FObj@@YAHAAVCMessage@1@H@Z
?MessageBoxW@FObj@@YAHPB_WH@Z
?GetBuffer@CUnicodeString@FObj@@QAEPA_WXZ
??0rational@FObj@@QAE@HH@Z
?GenerateCheckLastError@FObj@@YAXK@Z
?terminate@@YAXXZ
__security_error_handler
_controlfp
__CxxFrameHandler
memmove
__dllonexit
??1type_info@@UAE@XZ
_except_handler3
_purecall
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_amsg_exit
_wcmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
__RTDynamicCast
_onexit
?UnregisterClassDispatcher@IConnectionServerPrivate@FineNet@@SAXABVCUnicodeString@FObj@@@Z
?OnException@CFineNetServer@FineNet@@UAEXPBVCException@FObj@@ABVCUnicodeString@4@@Z
?OnServerShutDown@CFineNetServer@FineNet@@UAEXXZ
?OnServerStartUp@CFineNetServer@FineNet@@UAEXXZ
?OnConnectionCreated@CFineNetServer@FineNet@@UAEXPAUIConnectionServer@2@@Z
?OnThreadUninitialize@CFineNetServer@FineNet@@UAEXXZ
?OnThreadInitialize@CFineNetServer@FineNet@@UAEXXZ
??0CFineNetServer@FineNet@@QAE@XZ
??1CFineNetServer@FineNet@@UAE@XZ
?StopServer@CFineNetServer@FineNet@@QAEXXZ
?IsStarted@CFineNetServer@FineNet@@QBE_NXZ
?StartServer@CFineNetServer@FineNet@@QAEX_NW4TSecurityLevel@2@@Z
?ServerOptions@CFineNetServer@FineNet@@QAEPAUIServerOptions@2@XZ
?AddProtocol@CFineNetServer@FineNet@@QAEXABUCConnectionProtocol@2@@Z
?RegisterClassDispatcher@IConnectionServerPrivate@FineNet@@SAXABVCUnicodeString@FObj@@PAUICallDispatcher@2@@Z
__FineObjUsed
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ