Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
09cd9768aed9db4fbdce555b95b4fd3b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
09cd9768aed9db4fbdce555b95b4fd3b.exe
Resource
win10v2004-20231215-en
Target
09cd9768aed9db4fbdce555b95b4fd3b
Size
46KB
MD5
09cd9768aed9db4fbdce555b95b4fd3b
SHA1
23a0bfd3ffa2bedecaa82071fc3eea0906251d9f
SHA256
122defb87be94ccae5270a0cbf4459a75239b3b49fa18cc86f3b3db6456a9e1d
SHA512
dc67c762a8666dd1e57e8a87a161c3b81cdbac4cf5b6a4466fee400b74ca66e9f9aa7008f9ef8f5787280254b17a544fd7fa09ae27dda5e7d2bae0e413273c7e
SSDEEP
768:8wKvRhfHmnHjdAz5IrHDTjuaBLisKl4qV50e6ORsvHdEAn:8wKbymz5IjCaBLisKldVDFsvH
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetVersionExW
CopyFileW
CreateDirectoryW
CreateEventW
OpenEventW
GetLastError
ResetEvent
FreeLibrary
GetProcAddress
GetSystemDirectoryW
GetTickCount
MultiByteToWideChar
ExpandEnvironmentStringsW
FindClose
FindFirstFileW
GetModuleHandleW
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
WaitForSingleObject
GetExitCodeProcess
TerminateProcess
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
LoadLibraryW
CloseHandle
QueryPerformanceCounter
GetModuleHandleA
ExitProcess
GetSystemTimeAsFileTime
wsprintfW
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegOpenKeyW
RegQueryValueExW
RegDeleteKeyW
ShellExecuteExW
SHGetFolderPathW
CoTaskMemFree
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXID@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?_Nomemory@std@@YAXXZ
WSAEnumNetworkEvents
send
WSAWaitForMultipleEvents
recv
socket
closesocket
WSAEventSelect
htons
WSCEnumProtocols
gethostbyname
WSCInstallProvider
WSCWriteProviderOrder
WSCGetProviderPath
WSCDeinstallProvider
WSACleanup
WSAStartup
WSAEnumNameSpaceProvidersW
WSAGetLastError
connect
ioctlsocket
PathCombineW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
_controlfp
_onexit
__dllonexit
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_amsg_exit
__p___winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
_except_handler3
__security_error_handler
_callnewh
malloc
memset
wcslen
wcsstr
wcscat
wcscpy
wcsrchr
_wcsupr
??_V@YAXPAX@Z
__CxxFrameHandler
swprintf
_wcsicmp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE