Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
06a86dded912e1dcd947ab611bdb4b17.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
06a86dded912e1dcd947ab611bdb4b17.exe
Resource
win10v2004-20231215-en
Target
06a86dded912e1dcd947ab611bdb4b17
Size
996KB
MD5
06a86dded912e1dcd947ab611bdb4b17
SHA1
a5be54f2a769995317eb5926df0b41d93becbb50
SHA256
052c5fa444d08c042a38a1c6dfc04b380760152bbcafac421f2508aeb1d272a9
SHA512
83633aaa632b058f0053d767c138922c0fbf9cd2e7abc4323508704a6db92b1961b6202465c4a77feb100bc76d092e9750ff47b9a7a38e8ea9418c8b347a2e57
SSDEEP
12288:RAHCyQ+FmIVF8WXhFR2xlBnOE5IJxWjzd/mNnPADgwXmUBxcy8ZFijEqCwmT0TPh:MFR8m0BExWj8INd/AijEl0TalXVdg
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WritePrivateProfileStringW
GetLocalTime
GetTempPathW
VirtualProtect
VirtualAlloc
InterlockedCompareExchange
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
LoadLibraryA
IsBadWritePtr
GetFileAttributesExW
GetLogicalDriveStringsW
GetVolumeInformationW
SetEndOfFile
GetSystemTimeAsFileTime
OpenFileMappingW
OutputDebugStringW
TerminateThread
OpenMutexW
ReleaseMutex
WaitForMultipleObjects
CreateEventW
GlobalMemoryStatusEx
DeviceIoControl
GetDriveTypeW
GetLogicalDrives
DeleteFileA
FlushViewOfFile
CreateFileMappingA
CreateFileA
CreateDirectoryA
OutputDebugStringA
HeapCreate
HeapDestroy
HeapSize
GetProcAddress
LoadLibraryW
FileTimeToSystemTime
FileTimeToLocalFileTime
WideCharToMultiByte
GetLastError
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
MultiByteToWideChar
lstrlenA
OpenProcess
FreeResource
CloseHandle
WriteFile
CreateFileW
GetPrivateProfileIntW
Process32NextW
TerminateProcess
Process32FirstW
CreateToolhelp32Snapshot
GetCurrentProcessId
GlobalUnlock
GlobalFree
GlobalLock
GlobalAlloc
ReadFile
FindClose
FormatMessageA
ExpandEnvironmentStringsA
SleepEx
VirtualFree
IsProcessorFeaturePresent
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
InterlockedExchange
FindFirstFileW
Sleep
InitializeCriticalSection
DeleteCriticalSection
RaiseException
InterlockedIncrement
InterlockedDecrement
GetFileSize
GetWindowsDirectoryW
GetTickCount
lstrlenW
EnterCriticalSection
LeaveCriticalSection
lstrcmpiW
FlushInstructionCache
GetCurrentProcess
GetVersionExW
GetCurrentThreadId
SetLastError
GetModuleFileNameW
LoadLibraryExW
GetModuleHandleW
WaitForSingleObject
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
CreateMutexW
CreateProcessW
SetEvent
DeleteFileW
GetCommandLineW
IsBadReadPtr
GetCurrentThread
SetProcessWorkingSetSize
GetProcessWorkingSetSize
lstrcmpW
MulDiv
CreateDirectoryW
GetFileAttributesW
FreeLibrary
GetSystemDirectoryW
LocalFree
ProcessIdToSessionId
GetPrivateProfileStringW
SetFilePointer
OpenEventW
CopyFileW
SetClipboardData
CloseClipboard
GetSystemMetrics
GetClientRect
MoveWindow
GetActiveWindow
IsWindowEnabled
GetForegroundWindow
AttachThreadInput
SetActiveWindow
IsDialogMessageW
TrackPopupMenu
MonitorFromPoint
AppendMenuW
DestroyMenu
CreatePopupMenu
IsMenu
EnableWindow
GetCursorPos
UpdateLayeredWindow
GetNextDlgTabItem
IntersectRect
DrawIconEx
DrawFrameControl
DestroyIcon
SetCursor
OffsetRect
EqualRect
DrawTextW
GetDlgCtrlID
SetRect
PtInRect
LoadIconW
MonitorFromWindow
GetMonitorInfoW
SetForegroundWindow
SetRectEmpty
GetWindowRect
GetWindowLongW
MapWindowPoints
ReplyMessage
GetShellWindow
GetWindowThreadProcessId
wsprintfW
CreateAcceleratorTableW
EnumChildWindows
GetWindow
DestroyAcceleratorTable
GetDesktopWindow
FillRect
ReleaseCapture
SetCapture
RedrawWindow
InvalidateRgn
ScreenToClient
ClientToScreen
GetSysColor
GetClassNameW
RegisterWindowMessageW
DrawEdge
EndPaint
BeginPaint
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
FindWindowExW
InvalidateRect
SetWindowPos
GetClassInfoExW
LoadCursorW
GetParent
CopyRect
GetDlgItem
RegisterClassExW
DefWindowProcW
CreateWindowExW
SetWindowLongW
CharNextW
SendMessageW
UnregisterClassA
ShowWindow
PostQuitMessage
IsWindowVisible
SendMessageTimeoutW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
PostThreadMessageW
MessageBoxW
SetFocus
DestroyWindow
SetTimer
KillTimer
IsChild
CallWindowProcW
RegisterClipboardFormatW
OpenClipboard
EmptyClipboard
IsWindow
PostMessageW
LoadBitmapW
LoadImageW
GetDC
ReleaseDC
InflateRect
SystemParametersInfoW
GetFocus
GetKeyState
SetPixel
CreateRoundRectRgn
CombineRgn
SetViewportOrgEx
GetClipRgn
RoundRect
OffsetRgn
ExtSelectClipRgn
GetViewportOrgEx
CreateRectRgnIndirect
GetTextExtentPoint32W
TextOutW
LineTo
MoveToEx
GetCurrentObject
RectInRegion
SetBkMode
GetTextColor
CreateSolidBrush
GetDeviceCaps
CreateFontIndirectW
SetStretchBltMode
CreateCompatibleBitmap
CreateBitmap
StretchBlt
SetTextColor
GetObjectW
BitBlt
DeleteDC
CreateDIBSection
CreateCompatibleDC
GetStockObject
CreatePen
CreateRectRgn
SetBkColor
ExtTextOutW
Rectangle
SelectClipRgn
SelectObject
RestoreDC
SaveDC
DeleteObject
RegOpenKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityInfo
CreateProcessAsUserW
OpenSCManagerW
OpenServiceW
QueryServiceConfigW
ChangeServiceConfigW
CloseServiceHandle
DuplicateTokenEx
RegCloseKey
GetTokenInformation
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
SHGetFolderPathW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFileInfoW
SHGetFileInfoA
SHGetPathFromIDListA
SHGetSpecialFolderPathW
ord680
ShellExecuteExW
ShellExecuteW
CLSIDFromString
CreateStreamOnHGlobal
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
CoRevokeClassObject
CoGetClassObject
StringFromGUID2
CoRegisterClassObject
OleInitialize
OleUninitialize
OleLockRunning
CLSIDFromProgID
BSTR_UserSize
SysFreeString
VariantInit
VariantClear
VariantCopy
SysAllocString
SysStringLen
VarUI4FromStr
LoadRegTypeLi
LoadTypeLi
RegisterTypeLi
VarBstrCmp
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
OleCreateFontIndirect
DispGetParam
VariantTimeToSystemTime
SystemTimeToVariantTime
BSTR_UserMarshal
BSTR_UserFree
BSTR_UserUnmarshal
NdrStubCall2
NdrStubForwardingFunction
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
NdrCStdStubBuffer2_Release
_stat64
_gmtime64
__sys_nerr
getenv
fflush
sprintf
isdigit
fputs
qsort
fgets
strrchr
strncpy
isxdigit
sscanf
strtoul
__iob_func
_stricmp
_strtoi64
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
??3@YAXPAX@Z
??_V@YAXPAX@Z
??_U@YAPAXI@Z
memcpy_s
memset
_CxxThrowException
_wcsicmp
_vscwprintf
vswprintf_s
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
__CxxFrameHandler3
memmove_s
free
calloc
_recalloc
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
_waccess
memcpy
isspace
isalnum
_beginthreadex
_mbscmp
??2@YAPAXI@Z
malloc
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
wcscpy_s
_wtoi
wcsncpy_s
_mbsicmp
_vscprintf
vsprintf_s
swprintf_s
wcsrchr
realloc
_strlwr_s
_scwprintf
_ultoa_s
wcsnlen
_get_errno
_set_errno
strtol
_strnicmp
wcscat_s
iswspace
wcsstr
towupper
_resetstkoflw
strncmp
_itow_s
wcstol
strcpy_s
wcschr
_CIpow
_wcsnicmp
_wcslwr_s
wcspbrk
_time32
_wcsupr_s
_vswprintf
_ui64tow_s
ceil
swscanf_s
memmove
ferror
fputc
fprintf
atoi
_vsnprintf_s
fread
fseek
fclose
tolower
isalpha
strchr
_time64
_vscprintf_p
_vsprintf_p
_snwprintf
_mbschr
floor
wcsspn
wcscspn
__RTDynamicCast
fwprintf
_wfopen
_mbsstr
printf
wcsncpy
strerror
_errno
memchr
fopen
fwrite
_ftelli64
_fseeki64
exit
strstr
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_except_handler4_common
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
_wcmdln
_strdup
PathMatchSpecA
PathAppendW
PathFileExistsW
PathAddBackslashW
StrToIntA
PathAddBackslashA
PathRemoveFileSpecW
StrToIntW
PathFindExtensionW
PathFileExistsA
_TrackMouseEvent
AlphaBlend
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBD@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??0?$allocator@D@std@@QAE@ABV01@@Z
?max_size@?$allocator@D@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??0?$allocator@D@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
GdipTranslateWorldTransform
GdipResetWorldTransform
GdipSetClipPath
GdipAddPathPieI
GdipAddPathRectangleI
GdipDrawLine
GdipSetPenMode
GdipSetPenEndCap
GdipSetPenStartCap
GdipRotateWorldTransform
GdipSetPenDashStyle
GdipGetFontSize
GdipGetFamily
GdipDrawImageI
GdipGraphicsClear
GdipSetPixelOffsetMode
GdipDrawString
GdipSetInterpolationMode
GdipSetCompositingQuality
GdipGetImageGraphicsContext
GdipAddPathStringI
GdipFillRectangleI
GdipSetTextRenderingHint
GdipCreateBitmapFromScan0
GdipDrawPath
GdipFillRectangle
GdipDrawLinesI
GdipSetStringFormatTrimming
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCreateSolidFill
GdipDeleteFont
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteBrush
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipPrivateAddFontFile
GdipDeletePrivateFontCollection
GdipNewPrivateFontCollection
GdipGetFontCollectionFamilyCount
GdipLoadImageFromFile
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdipDrawImagePointsRectI
GdipDrawImageRectRect
GdipDrawImageRectI
GdipImageRotateFlip
GdipCloneImage
GdipDrawImageRectRectI
GdipCreateFromHDC
GdipSetImageAttributesColorMatrix
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipLoadImageFromStream
GdipDeleteGraphics
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipDeleteFontFamily
GdipFree
GdipSetSmoothingMode
GdipDeletePen
GdipCreatePen1
GdipFillPath
GdipAddPathArcI
GdipClosePathFigure
GdipDeletePath
GdipCreatePath
GdipCloneBrush
GdipCreateFont
GdipCreateFontFromLogfontW
GdipCreateFontFromDC
GdipMeasureString
GdipSetStringFormatLineAlign
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
StackWalk64
SymFunctionTableAccess64
SymGetModuleBase64
SymInitialize
SymCleanup
getpeername
getsockopt
htons
setsockopt
ntohs
getsockname
send
recv
bind
connect
getaddrinfo
WSASetLastError
socket
WSAStartup
gethostname
gethostbyname
WSACreateEvent
WSASetEvent
WSAEventSelect
WSARecv
WSAResetEvent
WSASend
WSAGetOverlappedResult
WSAConnect
WSAGetLastError
WSAEnumNetworkEvents
WSACloseEvent
WSACleanup
freeaddrinfo
__WSAFDIsSet
select
WSASocketW
closesocket
ioctlsocket
GetAdaptersInfo
WTSEnumerateSessionsW
WTSFreeMemory
GetProcessMemoryInfo
GetModuleBaseNameW
EnumProcessModules
EnumProcesses
GetModuleInformation
CoInternetGetSession
URLDownloadToFileW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE