Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
20080631377fc73a0911d2269312c555.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
20080631377fc73a0911d2269312c555.dll
Resource
win10v2004-20231215-en
Target
20080631377fc73a0911d2269312c555
Size
888KB
MD5
20080631377fc73a0911d2269312c555
SHA1
605b1e954ed352d0d8cc8b9d58c8505f521f5b8c
SHA256
c21602e15e24db7cc778083937ba7c370416fb988d2b579e68c4fc86c36ae066
SHA512
b1958be00542fa230119d2261f75f32129f9569a6c7936714886f98fb148982fc6540d10fbcbe8d47b02d5229cf779e20017c77a3f41bc93cf8d73cc6205358d
SSDEEP
24576:OULFl7HIEMDR8Xjpf/83Sra+IUfqHT1yNbotVnZNbuC72xteRTpKETnnAomK:DNHIEMDR8XjR83yuyNbKlCC6eRTxTnnt
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegEnumValueW
RegDeleteValueW
RegQueryInfoKeyW
RegQueryValueExW
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
CryptHashData
CryptAcquireContextA
CryptCreateHash
WaitForMultipleObjects
GetFileType
GetStdHandle
FreeLibrary
GetProcAddress
LoadLibraryA
PeekNamedPipe
GetDriveTypeW
SetEnvironmentVariableA
CompareStringW
IsValidLocale
EnumSystemLocalesA
ExpandEnvironmentStringsA
ReadFile
GetLocaleInfoA
GetUserDefaultLCID
LoadLibraryW
WriteConsoleW
GetTimeZoneInformation
CreateFileA
GetFullPathNameA
WaitForSingleObject
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
SetHandleCount
HeapDestroy
HeapCreate
GetLocaleInfoW
HeapSize
IsProcessorFeaturePresent
IsValidCodePage
GetOEMCP
GetACP
UnhandledExceptionFilter
LCMapStringW
RtlUnwind
GetCPInfo
SetStdHandle
GetProcessHeap
ExitProcess
GetConsoleMode
GetConsoleCP
FindFirstFileExA
GetDriveTypeA
ExitThread
HeapAlloc
HeapReAlloc
GetCommandLineA
HeapFree
DecodePointer
EncodePointer
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
VerSetConditionMask
VerifyVersionInfoA
SleepEx
GetTickCount
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
Sleep
FormatMessageA
SetLastError
InterlockedCompareExchange
GetCurrentProcessId
CloseHandle
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
GetLastError
GetModuleFileNameW
GetFileAttributesW
GetProcessTimes
GetCurrentProcess
CreateMutexW
GetEnvironmentStringsW
GetEnvironmentVariableA
GetWindowsDirectoryW
GetSystemDirectoryW
OpenProcess
TerminateProcess
SetProcessAffinityMask
CreateFileW
DeviceIoControl
GetProcessAffinityMask
GetFileSize
WriteFile
WideCharToMultiByte
MultiByteToWideChar
MoveFileW
SetFileAttributesW
QueryPerformanceCounter
GetSystemTimeAsFileTime
FileTimeToSystemTime
QueryPerformanceFrequency
CreateEventW
ExpandEnvironmentStringsW
GetCommandLineW
LocalFree
SetUnhandledExceptionFilter
RaiseException
IsDebuggerPresent
GetCurrentThreadId
CreateThread
InterlockedExchangeAdd
SetFilePointer
CreateProcessW
GetModuleHandleA
OutputDebugStringA
ReleaseMutex
MapViewOfFile
UnmapViewOfFile
MoveFileExW
CreateDirectoryW
GetTempPathW
GetCurrentDirectoryW
FindClose
CreateFileMappingW
FileTimeToLocalFileTime
InitializeCriticalSectionAndSpinCount
SetEndOfFile
FlushFileBuffers
GetFileInformationByHandle
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
GetQueuedCompletionStatus
GetModuleHandleW
InterlockedExchange
PostQueuedCompletionStatus
CreateIoCompletionPort
GetNativeSystemInfo
GetVersionExW
SetEvent
MsgWaitForMultipleObjectsEx
DispatchMessageW
CallMsgFilterW
RegisterClassExW
TranslateMessage
CreateWindowExW
WaitMessage
KillTimer
PostMessageW
MessageBoxW
GetQueueStatus
DefWindowProcW
PeekMessageW
DestroyWindow
SetTimer
PostQuitMessage
UnregisterClassW
CoCreateGuid
StringFromGUID2
GetAdaptersInfo
setsockopt
accept
recvfrom
sendto
getaddrinfo
freeaddrinfo
connect
gethostname
ioctlsocket
socket
WSACleanup
WSAStartup
WSASetLastError
__WSAFDIsSet
WSAGetLastError
select
recv
send
WSAIoctl
closesocket
getsockname
ntohs
bind
htons
getsockopt
getpeername
listen
timeBeginPeriod
timeGetTime
timeEndPeriod
ord301
ord33
ord200
ord79
ord35
ord27
ord30
ord26
ord50
ord60
ord143
ord211
ord22
ord41
ord46
ord32
SHFileOperationW
SHGetFolderPathW
CommandLineToArgvW
??0ClientActivity@assist@@QAE@XZ
??0InstallHelper@assist@@QAE@XZ
??1ClientActivity@assist@@QAE@XZ
??1InstallHelper@assist@@QAE@XZ
??4ClientActivity@assist@@QAEAAV01@ABV01@@Z
??4InstallHelper@assist@@QAEAAV01@ABV01@@Z
?AssistInitalize@assist@@YAXXZ
?AssistUninitalize@assist@@YAXXZ
?ClientActivityInitalize@client_activity_helper@assist@@YAXG@Z
?ClientActivityRecordStartConsuming@client_activity_helper@assist@@YAXXZ
?ClientActivitySetUserID@client_activity_helper@assist@@YAXI@Z
?GetInstallType@InstallHelper@assist@@SA?AW4InstallType@@XZ
?GetInstallType@install_helper@assist@@YAHXZ
?HasSwitch@install_helper@assist@@YA_NPBD@Z
?Initalize@ClientActivity@assist@@QAEXXZ
?Initalize@InstallHelper@assist@@QAEXXZ
?Install@InstallHelper@assist@@QAEXXZ
?InstallArgsProcess@install_helper@assist@@YAXGPAH@Z
?InstallHelperInitalize@install_helper@assist@@YAXG@Z
?NonInstallPackageSpecialProcess@install_helper@assist@@YAXXZ
?SendStartStat@ClientActivity@assist@@QAEXXZ
?Uninitalize@ClientActivity@assist@@QAEXXZ
?Uninitalize@InstallHelper@assist@@QAEXXZ
?Uninstall@InstallHelper@assist@@QAEXXZ
?WriteCurrentStartupInfo@install_helper@assist@@YAXXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ