Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
28639f65f91c87e4997684a7601ec57a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
28639f65f91c87e4997684a7601ec57a.exe
Resource
win10v2004-20231215-en
Target
28639f65f91c87e4997684a7601ec57a
Size
7.9MB
MD5
28639f65f91c87e4997684a7601ec57a
SHA1
cbf4396a7553567e75a50620a641a4451d035f5e
SHA256
8fb211dae1e0c1faa820b50695c39b7f6b6e48fca93155d7841dbc0f82b75323
SHA512
701cca6d542463a83375b333018d539cb189dcf9c71f2ec5f7da58a24cf5eadf8f71832c05224811b263c06879a4c7c561d5928e25abb8682f8d41a2f0043179
SSDEEP
98304:xfmE8TGowIqNIqlzYRo4cNFuxLtkBSNQdw2A17nfJxe4qPJTtk72z4iqh5hR7aRW:xmT70li6krgRUcH3Qx2U9AyDyc
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
wcsncat_s
malloc
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
_ultow_s
wcscpy_s
wcscat_s
memcmp
wprintf_s
memset
memmove_s
calloc
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_controlfp_s
_invoke_watson
_onexit
_lock
__dllonexit
_unlock
_except_handler4_common
_crt_debugger_hook
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_resetstkoflw
_write
_read
_lseek
_close
_wremove
_errno
_wcsrev
memcpy
isprint
_wsplitpath_s
_wfullpath
div
towlower
_ftime64_s
_endthreadex
_beginthreadex
_beginthread
_localtime64_s
swscanf_s
vswprintf_s
wprintf
_snprintf_s
_wtoi
_wtof
qsort
_set_invalid_parameter_handler
strncpy_s
_HUGE
localeconv
_vsnwprintf_s
_wcstoui64
_ui64tow_s
wcstoul
wcstol
wcstod
_ltow_s
_get_errno
_set_errno
_wcsnicmp
_wcsicmp
wcstok_s
wcsstr
wcsrchr
wcspbrk
wcsncmp
wcschr
realloc
memmove
_wsopen_s
wcsncpy_s
free
_recalloc
memcpy_s
sprintf_s
swprintf_s
_CxxThrowException
__CxxFrameHandler3
_invalid_parameter_noinfo_noreturn
?_Xfunc@tr1@std@@YAXXZ
ord68
ord56
ord31
ord32
ord10
ord11
ord58
ord43
ord44
ord30
ord27
ord28
ord37
ord60
ord42
ord64
ord48
ord15
ord49
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
RegisterEventSourceW
ReportEventW
UnregisterTraceGuids
RegOverridePredefKey
ConvertSidToStringSidW
IsValidSid
GetLengthSid
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
RegGetValueW
EventWrite
EventUnregister
EventRegister
RegOpenKeyExA
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
RegSetValueExW
RegQueryValueExW
RegEnumKeyExW
RegCloseKey
RegEnumValueW
RegNotifyChangeKeyValue
RegOpenKeyExW
RegQueryInfoKeyW
TraceEvent
OpenProcessToken
GetTokenInformation
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
DeregisterEventSource
ord21
ord22
ord23
ord10
ord11
ord13
ord14
ord20
CreateCompatibleBitmap
CreateCompatibleDC
CreateRectRgn
DeleteDC
DeleteObject
EnumFontFamiliesExW
GetClipBox
GetClipRgn
TranslateCharsetInfo
SelectClipRgn
SelectObject
SetLayout
GetLayout
LPtoDP
SetViewportOrgEx
CreateFontIndirectW
GetDeviceCaps
GetStockObject
SetBkMode
BitBlt
GetTextMetricsW
GetObjectW
SetBkColor
CopyMetaFileW
CreateFontW
GetCurrentObject
RestoreDC
SaveDC
StretchBlt
CreateDIBSection
SetDIBColorTable
ExtTextOutW
CreateBitmap
CreatePatternBrush
GetTextColor
IntersectClipRect
SetBrushOrgEx
CreateDIBitmap
SetPixel
SetTextColor
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
ImmReleaseContext
ImmGetOpenStatus
ImmNotifyIME
ImmGetContext
Wow64RevertWow64FsRedirection
IsWow64Process
GlobalLock
GlobalUnlock
WaitForMultipleObjects
lstrcmpiW
CreateSemaphoreW
MoveFileW
SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
GetFileInformationByHandleEx
OpenFileById
GetTimeFormatW
GetStringTypeW
GetLocaleInfoW
GetNumberFormatW
GetCurrencyFormatW
ConvertDefaultLocale
EnumSystemLocalesW
K32EnumProcesses
K32GetProcessImageFileNameW
SetUnhandledExceptionFilter
ExitProcess
LoadLibraryA
GetDateFormatW
GetDriveTypeW
GetVolumeInformationW
GetVolumeNameForVolumeMountPointW
DeviceIoControl
DisassociateCurrentThreadFromCallback
SubmitThreadpoolWork
StartThreadpoolIo
CancelThreadpoolIo
WritePrivateProfileStringW
ReadDirectoryChangesW
GetCurrentDirectoryW
CompareFileTime
FileTimeToLocalFileTime
GetDiskFreeSpaceExW
LocalFileTimeToFileTime
SetFileTime
ReleaseSemaphore
CreateFileMappingW
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
LoadResource
LockResource
SizeofResource
GlobalMemoryStatus
FindResourceW
OpenFileMappingW
GetSystemTimeAsFileTime
GetFileTime
FileTimeToDosDateTime
GlobalAlloc
RegisterApplicationRestart
GetCurrentThread
GlobalSize
GlobalFree
AddAtomW
GetProcessHeap
HeapSetInformation
VirtualProtect
WerRegisterMemoryBlock
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoW
EncodePointer
UnhandledExceptionFilter
DecodePointer
IsProcessorFeaturePresent
InterlockedPushEntrySList
VirtualFree
VirtualAlloc
InterlockedPopEntrySList
InitializeCriticalSectionEx
FlsAlloc
FlsGetValue
FlsFree
Wow64DisableWow64FsRedirection
CloseThreadpoolIo
CreateThreadpoolIo
CloseThreadpoolTimer
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolWork
CreateThreadpoolWork
GetVersionExA
GetSystemTime
GlobalMemoryStatusEx
OpenProcess
CreateProcessW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentProcessId
CreateMutexW
WaitForSingleObject
GetModuleHandleExW
CloseHandle
GetFileAttributesW
OutputDebugStringA
RaiseException
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetVersion
GetVersionExW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryW
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
GetTickCount
CreateDirectoryW
RemoveDirectoryW
GetTempFileNameW
Beep
lstrlenW
WideCharToMultiByte
FormatMessageA
SetEvent
ResetEvent
CreateEventW
OpenEventW
GetCurrentProcess
FlushInstructionCache
LocalFree
TerminateProcess
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileW
FindNextChangeNotification
FindNextFileW
CreateFileW
GetFileSize
GetShortPathNameW
SetFileAttributesW
Sleep
GetSystemInfo
GetSystemDirectoryW
GetWindowsDirectoryW
FormatMessageW
CopyFileW
VirtualQuery
FreeLibrary
SetDllDirectoryW
LocalAlloc
FindAtomW
SetProcessDEPPolicy
LoadLibraryExW
lstrlenA
CompareStringW
MultiByteToWideChar
LCMapStringW
GetUserDefaultLCID
GetCommandLineW
DeleteFileW
FindFirstFileExW
FlushFileBuffers
GetFileInformationByHandle
GetFinalPathNameByHandleW
GetLongPathNameW
ReadFile
SetEndOfFile
SetFilePointer
WriteFile
GetTempPathW
DebugBreak
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
HeapAlloc
HeapFree
InitializeCriticalSection
TryEnterCriticalSection
ReleaseMutex
GradientFill
AlphaBlend
CoCreateInstance
CoInitializeSecurity
ReleaseStgMedium
OleDuplicateData
DoDragDrop
WriteClassStg
StgCreateDocfile
OleSetClipboard
CreateStreamOnHGlobal
OleGetClipboard
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoCreateGuid
ProgIDFromCLSID
CoSetProxyBlanket
StgOpenStorageOnILockBytes
PropVariantClear
CreateBindCtx
CoTaskMemAlloc
IsAccelerator
OleLockRunning
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
StringFromGUID2
CoCreateFreeThreadedMarshaler
CoDisconnectObject
CoRevokeClassObject
CoRegisterClassObject
CoInitializeEx
CoUninitialize
CLSIDFromString
CoTaskMemFree
StringFromIID
CLSIDFromProgID
IIDFromString
VariantCopy
SafeArrayPtrOfIndex
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayDestroy
SafeArrayCopyData
SafeArrayCreate
SysReAllocStringLen
SysAllocStringLen
VariantChangeType
UnRegisterTypeLibForUser
RegisterTypeLibForUser
CreateErrorInfo
VarDateFromStr
VariantTimeToSystemTime
GetErrorInfo
SetErrorInfo
LoadTypeLibEx
VariantChangeTypeEx
VariantCopyInd
SafeArrayGetVartype
VariantClear
SafeArrayCreateVector
SysFreeString
SysStringLen
VariantInit
RegisterTypeLi
UnRegisterTypeLi
SysAllocString
LoadTypeLi
LoadRegTypeLi
?DumpBinary@@YGXPAUIGrooveByteInputStream@@@Z
?DumpBinary@@YGXXZ
?DumpCommand@@YGXPAUIGrooveUICommand2@@@Z
?DumpCommandContainer@@YGXPAUIGrooveUICommandContainer3@@@Z
?DumpDisseminatedDesign@@YGXXZ
?DumpDynamicsDocument@@YGXPAVGCoDynamics@@@Z
?DumpElement@@YGXPAUIGrooveElement@@@Z
?DumpElement@@YGXXZ
?DumpElementToFile@@YGXPAUIGrooveElement@@@Z
?DumpElementToFile@@YGXXZ
?DumpFileSystemRecords@@YGXXZ
?DumpFileSystemSchema@@YGXXZ
?DumpRAFPropertyList@@YGXXZ
?DumpRecord3@@YGXPAUIGrooveRecord3@@@Z
?DumpRecord3@@YGXXZ
?DumpRecord3ToString@@YGXAAVGCStackStrBase@@@Z
?DumpRecord3ToString@@YGXPAUIGrooveRecord3@@AAVGCStackStrBase@@@Z
?DumpRecord@@YGXPAUIGrooveRecord@@@Z
?DumpRecord@@YGXXZ
?DumpSandboxedDesign@@YGXXZ
?DumpSiteCatalog@@YGXXZ
?DumpSiteCatalogToolEntry@@YGXXZ
?DumpSystemRecords@@YGXXZ
?DumpTable@@YGXPAUIGrooveTable@@@Z
?DumpTable@@YGXXZ
?DumpUserDataRecords@@YGXXZ
?DumpUserDataSchema@@YGXXZ
?DumpWSSHostCache@@YGXXZ
?DumpWSSSiteCache@@YGXXZ
?FormatDateTime@@YGXXZ
?g_pDumpTable@@3PAUIGrooveTable@@A
SPWChainCoCreateInstance
SPWChainGetGlobalInterfacePtrAddress
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ