Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
3198fa63daf5dc185ec58881e98a8039256d2cbd5ec668dae120b0e400e02205.dll
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
3198fa63daf5dc185ec58881e98a8039256d2cbd5ec668dae120b0e400e02205.dll
Resource
win10v2004-20231023-en
Target
3198fa63daf5dc185ec58881e98a8039256d2cbd5ec668dae120b0e400e02205
Size
1.5MB
MD5
99e6c096757c6a29d7a47913ee618b1c
SHA1
7efa238bb47cb44de10d4302ef43069a51f1123e
SHA256
3198fa63daf5dc185ec58881e98a8039256d2cbd5ec668dae120b0e400e02205
SHA512
80cdabb3f2c29b2053aab0f6f670a00583e0078a498f137ebb4a7b220f81fe179b9044544f8b80596da374b97439016347d9cd8243ef4a9a07a627bd97fbe77f
SSDEEP
49152:kL72VJtK0O5SqlnTKqupQ+6XUA830YkEV08TmYyG:ksXO5HcqupQ+6XUP0Yk0yG
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
socket
gethostbyname
WSAGetLastError
WSACleanup
htons
ioctlsocket
connect
closesocket
WSAStartup
recv
select
send
setsockopt
shutdown
__WSAFDIsSet
UN_ParseUrl
UN_CreateMuatbleUrlRequest
UN_GetUNUrlManager
UNAllocUtf8String
UNFreeUtf8String
?CreateTask@Async@UtilUN@@YA_NPAPAUIAsyncTask@12@ABV?$function@$$A6AXXZ@std@@@Z
UN_WorkThread_Dispatch
UN_MainThread_Dispatch
IsDebuggerPresent
DisableThreadLibraryCalls
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
MapViewOfFile
CreateFileMappingW
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
WideCharToMultiByte
FreeLibrary
SystemTimeToFileTime
GetProcessHeap
GetCurrentProcessId
GetFileSize
LockFileEx
LocalFree
CreateFileMappingA
GetProcAddress
UnlockFile
HeapDestroy
HeapCompact
HeapAlloc
LoadLibraryW
GetSystemInfo
CloseHandle
HeapReAlloc
DeleteFileW
DeleteFileA
GetVersionExA
WaitForSingleObjectEx
LoadLibraryA
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetLastError
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
Sleep
MultiByteToWideChar
HeapSize
HeapValidate
UnmapViewOfFile
GetVersionExW
GetFileAttributesW
CreateFileW
WaitForSingleObject
CreateMutexW
GetTempPathW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
InterlockedCompareExchange
WriteFile
GetFullPathNameW
HeapFree
HeapCreate
ReadFile
AreFileApisANSI
GetCurrentThreadId
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
LockResource
RaiseException
InitializeCriticalSectionAndSpinCount
LoadResource
SizeofResource
GetModuleFileNameW
FindResourceW
FindResourceExW
CreateDirectoryW
CreateMutexA
CreateDirectoryA
DeviceIoControl
GetSystemDirectoryW
InterlockedExchange
SwitchToThread
FindClose
GetPrivateProfileIntA
GetPrivateProfileStringA
FindFirstFileW
CopyFileW
SetEvent
SleepEx
CreateEventW
GetPrivateProfileStringW
WritePrivateProfileStringW
MoveFileW
GetStdHandle
GetFileType
GetModuleHandleA
GlobalMemoryStatus
FlushConsoleInputBuffer
InitializeSListHead
GetUserObjectInformationW
GetProcessWindowStation
MessageBoxA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
DeregisterEventSource
RegisterEventSourceA
ReportEventA
SHGetSpecialFolderPathW
SHGetFolderPathA
SHGetFolderPathW
CoCreateGuid
CoUninitialize
CoInitialize
SysFreeString
_Thrd_detach
_Cnd_broadcast
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Cnd_timedwait
?_Throw_Cpp_error@std@@YAXH@Z
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAHH@Z
?_Winerror_message@std@@YAKKPADK@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
_Stat
_File_size
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
_Thrd_join
_Thrd_id
_Mtx_current_owns
?_Throw_C_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Cnd_signal
_Cnd_wait
_Cnd_destroy
_Cnd_init
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_BADOFF@std@@3_JB
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
_Xtime_get_ticks
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Xbad_function_call@std@@YAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
_Thrd_start
_Query_perf_counter
_Query_perf_frequency
_Thrd_hardware_concurrency
_Mtx_init
_Mtx_destroy
PathAppendW
Netbios
wcschr
memchr
_purecall
wcsstr
strchr
strstr
_except_handler4_common
__std_type_info_destroy_list
wcsrchr
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memmove
__CxxFrameHandler3
memcpy
__std_terminate
memset
strrchr
_crt_atexit
signal
_cexit
_configure_narrow_argv
_execute_onexit_table
_seh_filter_dll
_initterm
_initterm_e
raise
_errno
_endthreadex
_beginthreadex
_invalid_parameter_noinfo
terminate
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_register_onexit_function
_exit
_initialize_onexit_table
isspace
isupper
isxdigit
_strnicmp
isdigit
strncmp
strcmp
_strnset_s
_stricmp
strncpy_s
tolower
isprint
strncpy
isalnum
wmemcpy_s
strcpy_s
strcspn
wcsnlen
__acrt_iob_func
__stdio_common_vsscanf
__stdio_common_vsnprintf_s
fclose
__stdio_common_vswscanf
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf_s
__stdio_common_vsprintf
_wfopen
feof
ferror
fgets
_fileno
fopen
fread
fseek
ftell
_setmode
_get_stream_buffer_pointers
__stdio_common_vswprintf_s
__stdio_common_vswprintf
ungetc
setvbuf
fwrite
fputs
_fseeki64
fsetpos
fputc
fgetpos
fgetc
fflush
__stdio_common_vfprintf
_lock_file
_wsplitpath_s
_wmkdir
_unlock_file
_wstat64
_msize
realloc
malloc
free
_callnewh
_gmtime64
_time64
_localtime64_s
strtoll
strtod
strtoul
strtoull
atoi
_wtoi64
_dtest
_dsign
_libm_sse2_pow_precise
_except1
localeconv
getenv
qsort
_getch
??4BeaconClient@@QAEAAV0@$$QAV0@@Z
??4BeaconClient@@QAEAAV0@ABV0@@Z
?FlushReportData@BeaconClient@@SAXI@Z
?GetA3@BeaconClient@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?InitSDK@BeaconClient@@SAXABUBeaconConfig@@@Z
?IsInitSdkFinish@BeaconClient@@SA_NXZ
?PrepareParams@BeaconClient@@KA?AV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@ABV23@_J@Z
?Report@BeaconClient@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@3@W4RequestPriority@Beacon@@@Z
?UninitSDK@BeaconClient@@SAXXZ
?WaitSDKThreadInitFinished@BeaconClient@@SAXI@Z
?common_param_getters@BeaconClient@@SAABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@2@@std@@@2@@std@@XZ
?common_params@BeaconClient@@SAABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@XZ
?config@BeaconClient@@SAABUBeaconConfig@@XZ
?set_common_param_getters@BeaconClient@@SAXABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@2@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$function@$$A6A?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ@2@@std@@@2@@std@@@Z
?set_common_params@BeaconClient@@SAXABV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ