Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
2097e8e113c9f0fcfc0e0540eb3ca246.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2097e8e113c9f0fcfc0e0540eb3ca246.dll
Resource
win10v2004-20231215-en
Target
2097e8e113c9f0fcfc0e0540eb3ca246
Size
1.4MB
MD5
2097e8e113c9f0fcfc0e0540eb3ca246
SHA1
5c48983dd1ef8eafb6d04174d82b7fa8a2f7b7d5
SHA256
27f56ff734f3093102c0d5fd30854e59010610f292e9926258ea102b7857c72e
SHA512
a1a86e51b96bcaa7fcc4fbc0a8e70af42a6f840802e88813f0b3cbc72126ef458661193897ef469c24f76ed1f5fd23e71fdd29785802280c2533f0c97bd5c455
SSDEEP
24576:rcuZPnQ3/ooVKoUFQea1W4kojJSm5d6JGH+6OnN:joVKj2eiW4NnWGeRnN
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_itoa
_stat
_mbsrchr
_mbsnbcat
_mbsnbcpy
toupper
_stricmp
_endthread
??1type_info@@UAE@XZ
printf
clock
pow
memset
memcpy
_chkesp
sscanf
_lseeki64
_read
_close
_open
rand
srand
_beginthread
_CxxThrowException
wcscpy
wcscmp
memmove
wcstombs
_beginthreadex
atoi
isdigit
strncmp
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
?terminate@@YAXXZ
_except_handler3
vsprintf
_ftol
_strcmpi
strstr
wcslen
strchr
_strnicmp
_strlwr
time
atol
swprintf
mbstowcs
sprintf
_purecall
strncpy
_vsnprintf
__CxxFrameHandler
??2@YAPAXI@Z
??3@YAXPAX@Z
LeaveCriticalSection
Sleep
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
WaitForSingleObject
SetEvent
lstrcatA
lstrlenA
MultiByteToWideChar
ReadFile
CreateFileA
FreeLibrary
LoadLibraryA
GetLastError
GetModuleFileNameA
ResetEvent
SystemTimeToFileTime
GetCurrentThreadId
WaitForMultipleObjects
CreateSemaphoreA
ReleaseSemaphore
GetCurrentProcessId
VirtualFree
DisableThreadLibraryCalls
GetProcAddress
SetErrorMode
CreateThread
GetModuleHandleA
WideCharToMultiByte
SetThreadPriority
GetCurrentThread
GetTickCount
SetEnvironmentVariableA
GetVersionExA
OpenMutexA
FindClose
FindFirstFileA
GetVolumeInformationA
WriteFile
GetDriveTypeA
SetFilePointer
ResumeThread
GlobalMemoryStatus
GetFileSize
VirtualProtect
GetFileAttributesA
CloseHandle
DeleteCriticalSection
InterlockedExchange
InitializeCriticalSection
GetEnvironmentVariableA
CreateEventA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
lstrcatW
lstrlenW
CreateMutexA
VirtualAlloc
ReleaseMutex
FindNextFileA
SetCurrentDirectoryA
GetSystemTime
OutputDebugStringA
GetTimeZoneInformation
GetSystemDirectoryA
GetCurrentProcess
DeviceIoControl
MulDiv
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
GetLocalTime
lstrcpyA
GetFileTime
GetProcessAffinityMask
SetProcessAffinityMask
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
SetTimer
GetDlgItem
SetWindowTextA
KillTimer
GetWindowTextA
GetWindowRect
SendMessageA
GetMessageA
SetRect
PostMessageA
GetClientRect
GetDC
GetDCEx
EnumDisplaySettingsA
OffsetRect
IntersectRect
EnableWindow
IsWindow
GetWindowTextLengthA
ScreenToClient
SetWindowPos
SetFocus
LoadImageA
LoadBitmapA
GetSystemMetrics
MessageBoxA
ChangeDisplaySettingsA
GetWindowPlacement
IsIconic
SystemParametersInfoA
GetWindowLongA
PostThreadMessageA
PeekMessageA
GetDesktopWindow
LoadStringW
LoadStringA
wsprintfA
DefWindowProcA
DestroyWindow
ShowWindow
InvalidateRect
MoveWindow
CreateDialogParamA
SetWindowLongA
RegSetValueA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegEnumValueA
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
RegQueryInfoKeyA
RegCreateKeyA
CoInitialize
CoCreateInstance
CLSIDFromString
CreateStreamOnHGlobal
CoTaskMemFree
CoFreeUnusedLibraries
CoUninitialize
StringFromGUID2
CoTaskMemAlloc
OleCreatePropertyFrame
SysStringLen
SysAllocString
SysFreeString
SysAllocStringLen
timeGetTime
timeEndPeriod
timeBeginPeriod
mciSendCommandA
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDH@Z
?is_open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QBE_NXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
?eof@?$char_traits@D@std@@SAHXZ
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@HH@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?_Fpz@std@@3_JB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDH@Z
?is_open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QBE_NXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@JW4seekdir@ios_base@2@@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
CreateCompatibleDC
DeleteObject
ExtEscape
SelectObject
GetDeviceCaps
CreateICA
CreateDIBitmap
Rectangle
CreateCompatibleBitmap
CreateDCA
DeleteDC
BitBlt
DirectDrawCreate
WSASetEvent
WSAResetEvent
WSASocketA
recvfrom
sendto
__WSAFDIsSet
WSAWaitForMultipleEvents
WSARecvFrom
listen
recv
htons
htonl
WSACleanup
WSAStartup
closesocket
select
getsockname
bind
socket
setsockopt
ntohl
ntohs
WSAEnumNetworkEvents
WSAEventSelect
WSACreateEvent
accept
connect
shutdown
WSACloseEvent
send
WSAGetLastError
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ