Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
055093c9ba77580767d5e4b499356b20.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
055093c9ba77580767d5e4b499356b20.dll
Resource
win10v2004-20231215-en
Target
055093c9ba77580767d5e4b499356b20
Size
605KB
MD5
055093c9ba77580767d5e4b499356b20
SHA1
fa9d4697d037f242377137cbe11513b85f41609b
SHA256
166cb8945637c47808810111920c2d1fd72418e1cd1fae398407a02b94128f8a
SHA512
0d49ece4a77c4413769e57c27e04a84ef1405fecb8159be52898ac7b2f57697769bd536973c50dd2afe58c210c31ce1707f3b6c95a009128ca4084caf8f0ed44
SSDEEP
3072:1w3gseqJzibVh9idYxgk8pHO+yF78Zai6St5l7nM:kJzXdWgt8iZgS5lY
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersionExW
LoadLibraryW
GetProcAddress
GetLastError
CreateFileW
GetFileSize
SetFilePointer
WriteFile
ReadFile
CloseHandle
FreeLibrary
InterlockedCompareExchange
InterlockedExchange
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
OutputDebugStringW
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
GetSystemTimeAsFileTime
HeapFree
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
HeapAlloc
InitializeCriticalSectionAndSpinCount
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
ExitProcess
GetModuleHandleExW
HeapSize
GetStdHandle
GetModuleFileNameW
IsValidCodePage
GetACP
GetOEMCP
GetProcessHeap
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapReAlloc
GetTimeZoneInformation
LoadLibraryExW
SetEnvironmentVariableA
RegisterWindowMessageW
SHGetFolderPathW
ord165
CoTaskMemFree
GetSwitchUPAndSetItDown
GetToasterUPAndSetItDown
LockDisable
LockSleep
SetASParam
SetDomains
SetKSParam
SetLSParam
SetMainWnd
SetRedirect
SetSavedDomains
SetkillForeverParamName
SetstartRdrParamName
UnlockDisable
UnlockSleep
WSARecvHookedRedir
WSASendHookedRedir
recvChrHookedRedir
recvFFHookedRedir
sendFFHookedRedir
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ