Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
16ef9ea14134852aa94c070b950be0e8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
16ef9ea14134852aa94c070b950be0e8.exe
Resource
win10v2004-20231215-en
Target
16ef9ea14134852aa94c070b950be0e8
Size
244KB
MD5
16ef9ea14134852aa94c070b950be0e8
SHA1
b94964181a901c17d49f2f7fe5c767537fe2f975
SHA256
5fcb4060ce7a786dcb70c0e4335c701a08360d7497126c80e60c6bf2e82732b1
SHA512
2539e30534c3ab502a557fc14cff511cf535390d6bd8647e6ca24028d80ff44447690782196e81e5833cf6099370587c36eb405ca704e063acfe8d7d9ca8b7ce
SSDEEP
6144:LzpLKY0bvIZNCCBTBqeggutOUrqwqMfu7ta:Lf0bQyCBTsegewqMWJa
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
SymLoadModule
SymGetModuleInfoW
SymInitialize
SymSetOptions
SymCleanup
InternetOpenUrlA
InternetOpenA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
HttpOpenRequestA
InternetReadFile
GetModuleFileNameExA
GetModuleFileNameExW
ImageList_ReplaceIcon
InitCommonControlsEx
ImageList_Create
??1TiXmlDocument@@UAE@XZ
?Print@TiXmlDocument@@UBEXPAU_iobuf@@H@Z
?Parse@TiXmlDocument@@UAEPBDPBDPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?ToDocument@TiXmlDocument@@UAEPAV1@XZ
?ToDocument@TiXmlDocument@@UBEPBV1@XZ
?ToElement@TiXmlNode@@UAEPAVTiXmlElement@@XZ
?ToElement@TiXmlNode@@UBEPBVTiXmlElement@@XZ
?ToComment@TiXmlNode@@UBEPBVTiXmlComment@@XZ
?ToUnknown@TiXmlNode@@UAEPAVTiXmlUnknown@@XZ
?ToUnknown@TiXmlNode@@UBEPBVTiXmlUnknown@@XZ
??0TiXmlDocument@@QAE@XZ
?ToText@TiXmlNode@@UAEPAVTiXmlText@@XZ
?ToText@TiXmlNode@@UBEPBVTiXmlText@@XZ
?RootElement@TiXmlDocument@@QAEPAVTiXmlElement@@XZ
?ToDeclaration@TiXmlNode@@UAEPAVTiXmlDeclaration@@XZ
?FirstChildElement@TiXmlNode@@QAEPAVTiXmlElement@@XZ
?ToDeclaration@TiXmlNode@@UBEPBVTiXmlDeclaration@@XZ
?Clone@TiXmlDocument@@MBEPAVTiXmlNode@@XZ
?Accept@TiXmlDocument@@UBE_NPAVTiXmlVisitor@@@Z
?Value@TiXmlNode@@QBEPBDXZ
?NextSiblingElement@TiXmlNode@@QAEPAVTiXmlElement@@XZ
?GetText@TiXmlElement@@QBEPBDXZ
?Attribute@TiXmlElement@@QBEPBDPBD@Z
?LoadFile@TiXmlDocument@@QAE_NPB_WW4TiXmlEncoding@@@Z
?ToComment@TiXmlNode@@UAEPAVTiXmlComment@@XZ
GetVersionExA
HeapSize
InterlockedExchange
GetACP
HeapDestroy
GetThreadLocale
InterlockedCompareExchange
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLocaleInfoA
HeapReAlloc
InitializeCriticalSection
VirtualQuery
MoveFileW
SetFileAttributesW
GetSystemTimeAsFileTime
GetCurrentProcess
GetProcessTimes
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
GetCommandLineW
MultiByteToWideChar
GetCurrentThreadId
GetCurrentProcessId
GetFileAttributesW
GetThreadSelectorEntry
CreateDirectoryW
GetModuleHandleW
HeapAlloc
GetProcessHeap
VirtualProtect
CloseHandle
HeapFree
GetTickCount
SetCurrentDirectoryW
OpenProcess
lstrlenW
lstrcatW
DeleteFileW
CopyFileW
LoadLibraryW
FindFirstFileW
VirtualQueryEx
GetExitCodeProcess
FindNextFileW
CreateFileA
TerminateProcess
FindClose
SetEvent
lstrcpyW
WaitForSingleObject
CreateProcessW
SizeofResource
LockResource
LoadResource
FreeLibrary
OpenThread
FindResourceExW
ReadProcessMemory
WriteProcessMemory
FindResourceW
CreateThread
GlobalAlloc
GlobalLock
GlobalUnlock
GetLastError
GlobalFree
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
FileTimeToSystemTime
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
CreateEventW
ResumeThread
FreeResource
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
Sleep
CreateFileW
WriteFile
DeleteCriticalSection
RaiseException
GetVersionExW
ReadFile
SetFilePointer
GetProcAddress
GetFileSize
GetModuleFileNameW
GetPrivateProfileSectionW
GetSystemDefaultLCID
GetPrivateProfileIntW
GetTempPathW
WritePrivateProfileStringW
UnregisterClassA
LoadIconW
SendMessageW
SetWindowTextW
SetWindowPos
LoadImageW
ShowWindow
GetClientRect
GetDlgItem
DrawIconEx
EndDialog
GetDesktopWindow
PostMessageW
KillTimer
ClientToScreen
SetWindowLongW
MapWindowPoints
GetWindowRect
MapDialogRect
InvalidateRect
CallWindowProcW
RegisterClipboardFormatW
OpenClipboard
SendDlgItemMessageW
EmptyClipboard
EnableWindow
CreateWindowExW
RegisterClassExW
GetClassInfoExW
DefWindowProcW
DestroyWindow
IsWindow
DestroyMenu
TrackPopupMenu
GetWindowThreadProcessId
GetMenuItemCount
CreatePopupMenu
ReleaseDC
GetDC
GetKeyState
MessageBoxW
SetDlgItemTextW
GetWindow
DialogBoxParamW
GetWindowTextW
SetTimer
CloseClipboard
GetWindowTextLengthW
SetClipboardData
DeleteObject
SetTextColor
GetStockObject
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExW
SHGetDesktopFolder
ord155
ShellExecuteW
SHGetFileInfoW
SHGetSpecialFolderPathW
SHBindToParent
OleUninitialize
DoDragDrop
OleInitialize
CreateStreamOnHGlobal
SysFreeString
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysAllocString
GdipCloneImage
GdipImageSelectActiveFrame
GdipGetImageHeight
GdipDrawImageRectI
GdipDeleteGraphics
GdipDisposeImage
GdipCreateFromHDC
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdiplusStartup
GdiplusShutdown
GdipFree
GdipAlloc
GdipGetImageWidth
GdipLoadImageFromStreamICM
GdipImageGetFrameDimensionsCount
PathFileExistsW
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
strrchr
strchr
strncmp
wcsstr
towlower
_beginthreadex
wcscat
wcscpy
fprintf
fclose
fwrite
ftell
fseek
_wfopen
strtoul
strcmp
_wcsicmp
memcmp
iswspace
wcsncmp
__wargv
__argc
vsprintf_s
free
_vscprintf
vswprintf_s
_mbscmp
_vscwprintf
wcschr
_wcslwr_s
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
wcsrchr
atoi
isspace
_gmtime32
wcscpy_s
wcscat_s
fread
iswdigit
iswalpha
__CxxFrameHandler3
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
memset
wcscmp
??0exception@std@@QAE@ABV01@@Z
??_V@YAXPAX@Z
??0exception@std@@QAE@ABQBD@Z
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_CxxThrowException
_adjust_fdiv
??2@YAPAXI@Z
_mbslwr_s
_mbsstr
_snprintf
strlen
_time32
??0exception@std@@QAE@XZ
memcpy
_snwprintf
_invalid_parameter_noinfo
malloc
swscanf
srand
wcslen
memcpy_s
_purecall
memmove_s
??3@YAXPAX@Z
iswalnum
_time64
_wtoi
wcsncpy
memmove
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
WTSFreeMemory
WTSQuerySessionInformationW
CertGetNameStringW
WinVerifyTrust
WTHelperGetProvCertFromChain
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE