Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
0e96ed6c1a76fd9e50d31afb204caa5c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0e96ed6c1a76fd9e50d31afb204caa5c.dll
Resource
win10v2004-20231215-en
Target
0e96ed6c1a76fd9e50d31afb204caa5c
Size
474KB
MD5
0e96ed6c1a76fd9e50d31afb204caa5c
SHA1
261bfb701bbf8247b59e33c98a070024345ba444
SHA256
63028479ad6e6be46db9c86cb1478992d06c3cadf404cbfe91ffcf006398674a
SHA512
7ea308f0e1949d61dc8c30367c00cde4c896d9bee224cacc2eaabd1b911399c3dc3fcc91f55ffde8c9473cb2748f5340ed6a13c7f652ea48888a13e8a4a591b1
SSDEEP
12288:ewryiq/Iv36OWix8Asvaww/XDnDiBBAUcKUQyd3Qdk/LiR3gxTJ:ewryiq/Iv36OWix8Asvaww/XDnDYBAUe
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_SLConvertUTF16ToUTF8@16
_SLConvertACPToUnicode@16
_SLConvertUTF8ToUTF16@16
_TrackMouseEvent
ResetEvent
GetProcessHeap
HeapFree
QueryPerformanceCounter
SetEvent
CloseHandle
CreateEventA
LocalFree
FormatMessageW
GetModuleHandleW
GetProcAddress
Sleep
GetCurrentThreadId
GetLastError
WaitForSingleObjectEx
OpenEventA
GetCurrentProcessId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
EnterCriticalSection
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
CreateEventW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
IsWindow
SetWindowPos
IsWindowVisible
ShowWindow
EnableWindow
SetWindowTextW
SetFocus
PtInRect
SendMessageW
UpdateLayeredWindow
KillTimer
SetTimer
GetWindowRect
GetCursorPos
GetClientRect
_CreateSingletonStaticData@16
_GetSingletonStaticData@12
_SLGetStringFromAtom@8
_SLGetAtomFromString@8
_CalculateSequenceHash@12
_IsSingletonStaticDataStorageAvailable@0
_ServiceProviderGetServiceObject@12
_PDPageGetReadOnlyContent@8
_PDTCharIteratorCopy@8
_PDTCharIteratorAtEndPage@8
_PDTCharIteratorAtBeginPage@8
_PDTCharIteratorDereference@8
_PDTCharIteratorEqual@12
_PDTCharIteratorLess@12
_PDTCharIteratorAdvance@8
_PDTCharIteratorDecrement@4
_PDTCharIteratorIncrement@4
_PDTCharIteratorAcquire@4
_PDTCharIteratorGetBlockEnd@8
_PDTCharIteratorGetBlockBegin@8
_PDTCharIteratorGetQuad@8
_PDDocAcquirePage@12
_PDDocGetNumPages@8
_PDTCharIteratorRelease@4
_PDPageGetNumTextBlocks@8
_PDPageRelease@4
_PDEContentRelease@4
?_Syserror_map@std@@YAPBDH@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?_BADOFF@std@@3_JB
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?_Xruntime_error@std@@YAXPBD@Z
??Bid@locale@std@@QAEIXZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?exceptions@ios_base@std@@QAEXH@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??0_Locinfo@std@@QAE@HPBD@Z
??1_Locinfo@std@@QAE@XZ
?tolower@?$ctype@_W@std@@QBE_W_W@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Xout_of_range@std@@YAXPBD@Z
?narrow@?$ctype@_W@std@@QBED_WD@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?id@?$ctype@_W@std@@2V0locale@2@A
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
memset
__std_exception_destroy
__std_type_info_destroy_list
_CxxThrowException
memmove
__std_type_info_name
memcpy
__RTDynamicCast
__std_type_info_compare
__std_terminate
_purecall
__std_exception_copy
__CxxFrameHandler3
_except_handler4_common
free
malloc
_callnewh
_initterm_e
strerror
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
terminate
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_exit
_wcsnicmp
wcsncpy_s
wcsnlen
strnlen
strncpy_s
_itow_s
wcstol
__stdio_common_vsnprintf_s
_libm_sse2_pow_precise
_libm_sse2_log_precise
CreateServiceObject
ReflectServiceObjectInfo
RegisterResources
ServiceObjectModuleInitialize
ServiceObjectModuleOnCleanup
ServiceObjectModuleOnFree
_CreateServiceObject@8
_ReflectServiceObjectInfo@8
_RegisterResources@4
_ServiceObjectModuleInitialize@0
_ServiceObjectModuleOnCleanup@0
_ServiceObjectModuleOnFree@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ