Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
391d7df82c817e0e3192be7b2bb966bb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
391d7df82c817e0e3192be7b2bb966bb.exe
Resource
win10v2004-20231222-en
Target
391d7df82c817e0e3192be7b2bb966bb
Size
2.5MB
MD5
391d7df82c817e0e3192be7b2bb966bb
SHA1
ddf42bab34b5f434dc6c1a8dc042f7e5ebb4342a
SHA256
501322b5cb6da8b72fea1f6bf283443b61b7f7d2d25ad19032cef20a89886fae
SHA512
fac9aeb8746803f2481c3ca02d6da73b7ac23fc3f0a373e7ad885f32469aa0bd41caefdaed9ca5810b46e52daf9780cd458af108f6b3da37d2a10794939ed372
SSDEEP
49152:IMhKOfVeFdwUixHxYTucU0qhSJIcPxq7NuTtZ5veyyqY5pI:IMhKoV8dxixRYT7U0qSGGq7NWh
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LocalAlloc
OpenProcess
SetFileAttributesW
WriteConsoleW
SetEndOfFile
GetFileAttributesExW
GetCurrentDirectoryW
FlushFileBuffers
SetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
ReadConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetConsoleCP
GetTimeZoneInformation
MultiByteToWideChar
GetLastError
FileTimeToSystemTime
GlobalAlloc
DeleteFileW
WaitForSingleObject
FindClose
GetTempPathW
RemoveDirectoryW
WriteFile
FindNextFileW
FindFirstFileW
ReadFile
QueryPerformanceCounter
Process32FirstW
QueryPerformanceFrequency
Process32NextW
GetPrivateProfileStringW
CreateToolhelp32Snapshot
GetVersionExW
GetEnvironmentVariableW
SetUnhandledExceptionFilter
FreeLibrary
CreateProcessW
GetCurrentProcessId
GetProcAddress
GetLocalTime
GlobalFree
CloseHandle
GetStringTypeW
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
SetConsoleCtrlHandler
GetDriveTypeW
SetFilePointerEx
FreeLibraryAndExitThread
ExitThread
GetACP
GetModuleHandleExW
ExitProcess
GetFullPathNameW
FindFirstFileExW
TerminateThread
GetExitCodeThread
InterlockedIncrement
LeaveCriticalSection
InterlockedDecrement
EnterCriticalSection
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
CreateThread
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
HeapFree
SizeofResource
Sleep
LoadLibraryExW
lstrcpyW
FindResourceW
LoadResource
LockResource
GetLongPathNameW
ReleaseMutex
CreateMutexW
CreateDirectoryW
GlobalUnlock
GetTickCount
lstrcmpiW
SystemTimeToTzSpecificLocalTime
WideCharToMultiByte
CopyFileW
GetModuleHandleW
VerSetConditionMask
GetFileSize
MoveFileExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
EncodePointer
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SetPriorityClass
OutputDebugStringA
DeviceIoControl
GetVolumeInformationW
GetSystemDirectoryW
lstrlenW
GlobalMemoryStatus
FlushConsoleInputBuffer
SystemTimeToFileTime
GetSystemTime
FormatMessageA
SetLastError
PeekNamedPipe
GetStdHandle
GetFileType
WaitForMultipleObjects
ExpandEnvironmentStringsA
VerifyVersionInfoA
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
SleepEx
GetFileAttributesExA
InitializeCriticalSection
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
LocalFree
LoadLibraryW
GetCurrentThreadId
CreateFileW
SetErrorMode
GetModuleFileNameW
GetPrivateProfileIntW
GetCurrentProcess
WritePrivateProfileStringW
GlobalLock
PostQuitMessage
SetWindowLongW
CharNextW
wsprintfW
MessageBoxA
GetUserObjectInformationW
GetProcessWindowStation
GetWindowRect
PostMessageW
DefWindowProcW
DestroyWindow
SetWindowPos
GetMonitorInfoW
CreateWindowExW
RegisterClassExW
ShowWindow
MoveWindow
LoadCursorW
GetWindowLongW
DeleteDC
SelectObject
CreateDIBSection
CreateCompatibleDC
DeleteObject
GetTokenInformation
CryptSignHashA
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
RegQueryInfoKeyW
RegDeleteKeyW
RegEnumKeyExW
RegDeleteValueW
RevertToSelf
ImpersonateLoggedOnUser
SetSecurityDescriptorDacl
RegEnumKeyW
RegCreateKeyExW
OpenProcessToken
InitializeSecurityDescriptor
DuplicateTokenEx
LookupAccountSidW
RegOpenKeyW
CryptSetHashParam
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
DeregisterEventSource
RegisterEventSourceA
ReportEventA
CryptAcquireContextA
CryptReleaseContext
CryptDestroyKey
CryptEnumProvidersA
SHGetFolderPathW
SHGetSpecialFolderPathW
ShellExecuteW
CoTaskMemRealloc
OleInitialize
CoTaskMemAlloc
OleUninitialize
CreateStreamOnHGlobal
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromString
VarUI4FromStr
??8CDuiString@DuiLib@@QBE_NPB_W@Z
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?MessageLoop@CPaintManagerUI@DuiLib@@SAXXZ
?Term@CPaintManagerUI@DuiLib@@SAXXZ
??0WindowImplBase@DuiLib@@QAE@XZ
??1WindowImplBase@DuiLib@@UAE@XZ
??0CDuiString@DuiLib@@QAE@PB_WH@Z
??0CDuiString@DuiLib@@QAE@XZ
??1CDuiString@DuiLib@@QAE@XZ
??BCDuiString@DuiLib@@QBEPB_WXZ
?SetValue@CProgressUI@DuiLib@@QAEXH@Z
?GetHWND@CWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?SendMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
?OnFinalMessage@WindowImplBase@DuiLib@@UAEXPAUHWND__@@@Z
?Notify@WindowImplBase@DuiLib@@UAEXAAUtagTNotifyUI@2@@Z
?ResponseDefaultKeyEvent@WindowImplBase@DuiLib@@MAEJI@Z
?GetClassStyle@WindowImplBase@DuiLib@@UBEIXZ
?GetZIPFileName@WindowImplBase@DuiLib@@UBE?AVCDuiString@2@XZ
?CreateControl@WindowImplBase@DuiLib@@UAEPAVCControlUI@2@PB_W@Z
?MessageHandler@WindowImplBase@DuiLib@@UAEJIIJAA_N@Z
?OnClose@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnDestroy@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcPaint@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcHitTest@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseWheel@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseHover@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnChar@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSysCommand@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnCreate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKillFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSetFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonUp@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseMove@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?HandleMessage@WindowImplBase@DuiLib@@UAEJIIJ@Z
?GetStyle@WindowImplBase@DuiLib@@UAEJXZ
?messageMap@CNotifyPump@DuiLib@@1UDUI_MSGMAP@2@B
GdipGetImageHeight
GdipCloneImage
GdipCreateBitmapFromStream
GdipAlloc
GdipCreateBitmapFromStreamICM
GdipDisposeImage
GdipFree
GdipCreateFromHDC
GdipDeleteGraphics
GdipGetImageWidth
GdipDrawImageRectRectI
NetApiBufferFree
NetWkstaGetInfo
PathFileExistsW
send
gethostbyname
htonl
shutdown
gethostname
ioctlsocket
sendto
recvfrom
listen
accept
freeaddrinfo
getaddrinfo
WSACleanup
WSAStartup
WSAIoctl
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
WSAGetLastError
socket
__WSAFDIsSet
select
WSASetLastError
recv
connect
bind
closesocket
getservbyname
ord79
ord22
ord35
ord30
ord200
ord301
ord41
ord50
ord60
ord143
ord217
ord46
ord33
ord32
ord27
ord26
ord211
CertGetCertificateContextProperty
CertFreeCertificateContext
CertDuplicateCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
GetAdaptersInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ