Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
568459c2c664a3ee70bcebba53aa09ef1d9f3ec99fbca21b4f4306cf0eecb0d4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
568459c2c664a3ee70bcebba53aa09ef1d9f3ec99fbca21b4f4306cf0eecb0d4.exe
Resource
win10v2004-20231215-en
Target
568459c2c664a3ee70bcebba53aa09ef1d9f3ec99fbca21b4f4306cf0eecb0d4
Size
605KB
MD5
572fbc38c186ec78b2d4fca68ef128f7
SHA1
7a70260b05a3a504278d361204e681611dc16a13
SHA256
568459c2c664a3ee70bcebba53aa09ef1d9f3ec99fbca21b4f4306cf0eecb0d4
SHA512
e15e4796e72836be6da126ccf52c3157a4d83ceefd0e2b27b2626c3c081d7093b92efad0375300543836fb282ef249460c9e610b6716116206e3b2b4f262bdf1
SSDEEP
12288:/Luk3GQoWimKBnoCRjv7vhe3scUffBjvrEH7E:V2QoWiXBFj7vhe3scUftrEH7E
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ord2360
ord4543
ord6604
ord6493
ord2141
ord6187
ord6547
ord3537
ord2470
ord4398
ord4992
ord6494
ord3685
ord3488
ord1726
ord677
ord3547
ord4656
ord1682
ord1770
ord2278
ord767
ord3642
ord1714
ord778
ord3286
ord4660
ord1719
ord2283
ord4044
ord3933
ord2901
ord2597
ord6349
ord2593
ord6096
ord2592
ord3167
ord1102
ord3741
ord3158
ord2097
ord6091
ord1354
ord1353
ord3543
ord2106
ord3486
ord636
ord367
ord744
ord524
ord6311
ord4171
ord2069
ord3160
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord4347
ord4996
ord5680
ord5663
ord6018
ord3115
ord4905
ord3670
ord2447
ord6482
ord1098
ord4211
ord794
ord589
ord4043
ord4967
ord613
ord337
ord1144
ord4815
ord5078
ord6666
ord6579
ord4518
ord6659
ord1313
ord3686
ord1314
ord3953
ord815
ord4235
ord611
ord3489
ord4652
ord1665
ord2274
ord3165
ord6353
ord3166
ord6355
ord1254
ord4262
ord693
ord3563
ord3252
ord2209
ord2280
ord4040
ord5497
ord686
ord436
ord791
ord595
ord797
ord4681
ord4910
ord4348
ord2891
ord4071
ord4081
ord4080
ord2764
ord2893
ord2774
ord3140
ord2966
ord4728
ord3112
ord2983
ord2771
ord5650
ord1727
ord1791
ord1792
ord2139
ord5625
ord1442
ord3226
ord6376
ord5404
ord3682
ord6804
ord4174
ord6802
ord1641
ord2368
ord2375
ord2630
ord2612
ord2610
ord2628
ord2640
ord2617
ord2633
ord2638
ord2621
ord2623
ord2625
ord2619
ord2635
ord2615
ord2146
ord1108
ord1357
ord3231
ord2596
ord6172
ord971
ord967
ord969
ord3149
ord4451
ord1723
ord296
ord600
ord811
ord2326
ord788
ord585
ord792
ord587
ord2130
ord965
ord960
ord5683
ord5685
ord6466
ord1728
ord4702
ord5154
ord3743
ord5664
ord4603
ord6800
ord5512
ord2074
ord5602
ord4664
ord1493
ord4345
ord1751
ord1754
ord6411
ord3355
ord3944
ord1298
ord938
ord1250
ord3794
ord374
ord639
ord1938
ord4000
ord5008
ord4527
ord1248
ord1688
ord1088
ord1063
ord2595
ord6577
ord2904
ord4270
ord2490
ord665
ord406
ord4682
ord5653
ord1492
ord6408
ord3353
ord1675
ord1809
ord1810
ord2208
ord5324
ord5167
ord4631
ord5632
ord266
ord290
ord2694
ord5851
ord5979
ord3622
ord6095
ord4541
ord4410
ord2478
ord3637
ord6065
ord6275
ord3183
ord809
ord1769
ord2103
ord1601
ord4510
ord2277
ord1668
ord4654
ord3497
ord333
ord4131
ord3150
ord3515
ord2469
ord4400
ord4266
ord3399
ord814
ord2372
ord1183
ord1383
ord664
ord405
ord5182
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord3577
ord2282
ord4512
ord710
ord462
ord1048
ord5548
ord4658
ord1137
ord935
ord4494
ord4405
ord1599
ord4741
ord4774
ord4265
ord616
ord6741
ord799
ord265
ord2537
ord813
ord286
ord6687
ord285
ord1607
ord5939
ord909
ord2479
ord4519
ord280
ord3220
ord1272
ord6013
ord801
memset
memcpy
_CxxThrowException
_CIsqrt
_CIatan
_CIsin
_configthreadlocale
__CxxFrameHandler3
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_CIcos
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
sprintf
printf
memmove_s
fclose
fprintf
_wfopen
_wtoi64
_recalloc
calloc
free
_resetstkoflw
malloc
memcpy_s
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
_wcsicmp
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
wcstoul
_wtoi
GetSystemDirectoryW
GetDriveTypeW
GetLogicalDriveStringsW
GetVolumeInformationW
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetModuleFileNameW
WideCharToMultiByte
DeleteFileW
SetLastError
GlobalMemoryStatusEx
GetLocaleInfoW
GetCurrentProcess
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
GetVersionExW
lstrlenW
GetSystemInfo
Sleep
GetSystemTimeAsFileTime
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
GetProcessTimes
GetModuleHandleW
GetTickCount
OpenProcess
InitializeCriticalSection
DeleteCriticalSection
GetLastError
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryW
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
GlobalFree
GlobalAlloc
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
CreateThread
SetProcessAffinityMask
GetNativeSystemInfo
GetProcessAffinityMask
lstrcmpW
GetComputerNameW
DrawFocusRect
DrawEdge
DrawStateW
GetWindowDC
UpdateWindow
DestroyIcon
GetIconInfo
GetDesktopWindow
EnumChildWindows
GetClassNameW
DrawIcon
IsIconic
LoadIconW
SetScrollPos
ShowScrollBar
KillTimer
SetTimer
SetMenuItemInfoW
GetMenuItemInfoW
UnionRect
LoadMenuW
GetSubMenu
EnableMenuItem
ModifyMenuW
GetMenuState
GetMenuItemID
GetMenuItemCount
IsWindow
LoadBitmapW
GetWindowRect
OffsetRect
FrameRect
EnumDisplaySettingsW
GetWindowLongW
ClientToScreen
RedrawWindow
GetScrollPos
InflateRect
IsRectEmpty
CopyRect
FillRect
SetRect
GetSystemMetrics
GetParent
ReleaseDC
GetDC
PtInRect
GetClientRect
SendMessageW
InvalidateRect
EnableWindow
GetSysColor
GetMenuBarInfo
SetPixelFormat
CreateFontW
ChoosePixelFormat
GetCurrentObject
FrameRgn
SetDIBColorTable
SetBrushOrgEx
CreatePatternBrush
CreateRoundRectRgn
CreatePen
GetBkMode
GetDIBColorTable
StretchBlt
CreateDIBSection
GetTextColor
DeleteDC
DeleteObject
SelectObject
CreateFontIndirectW
GetBkColor
GetObjectW
CreateSolidBrush
GetStockObject
GetTextExtentPoint32W
BitBlt
CreateCompatibleBitmap
FillRgn
CreateCompatibleDC
AlphaBlend
TransparentBlt
GradientFill
GetTokenInformation
EqualSid
LookupAccountSidW
FreeSid
RegQueryValueExW
RegCloseKey
IsValidSid
LookupAccountNameW
RegEnumValueW
RegQueryInfoKeyW
RegEnumKeyW
GetUserNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
ShellExecuteW
ShellExecuteExW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
InitCommonControlsEx
_TrackMouseEvent
CoInitializeSecurity
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
VariantClear
SysAllocString
SysFreeString
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
GdipSaveImageToFile
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipAddPathPath
GdipDrawPath
GdipFillPath
GdipAddPathArc
GdipAddPathLine
GdipResetPath
GdipCreatePen2
GdipDrawLine
GdipDrawString
GdipDrawRectangle
GdipSetSolidFillColor
GdipFillRectangle
GdipMeasureString
GdipDeleteFont
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFont
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCreateStringFormat
GdipCreatePath
GdipDeleteCachedBitmap
GdipDrawCachedBitmap
GdipCreateCachedBitmap
GdipCreateFromHDC
GdipDrawEllipse
GdipSetPenBrushFill
GdipFillEllipse
GdipDrawPie
GdipFillPie
GdipSetLineColors
GdipSetPenColor
GdipCreateSolidFill
GdipCreateLineBrushI
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrush
GdipSetSmoothingMode
GdipDeletePen
GdipCreatePen1
GdipDeletePath
GdiplusStartup
GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdiplusShutdown
GetIfEntry
GetIfTable
GetAdaptersInfo
midiOutGetNumDevs
waveInGetNumDevs
mixerGetDevCapsW
auxGetDevCapsW
midiInGetDevCapsW
midiOutGetDevCapsW
waveInGetDevCapsW
waveOutGetDevCapsW
mixerGetNumDevs
auxGetNumDevs
midiInGetNumDevs
waveOutGetNumDevs
WTSFreeMemory
WTSQuerySessionInformationW
ord4
ord6
_GoHomePage@8
ord2
glGetString
wglDeleteContext
wglMakeCurrent
wglCreateContext
ord3
ord10
ord12
ord2
ord1
ord1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ