Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
3bd68ca7c0edeb5230eafae4d19a553a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3bd68ca7c0edeb5230eafae4d19a553a.exe
Resource
win10v2004-20231215-en
Target
3bd68ca7c0edeb5230eafae4d19a553a
Size
19.1MB
MD5
3bd68ca7c0edeb5230eafae4d19a553a
SHA1
f2c9572f7cfdf61b118962d5dfd7dc01ea5be8e9
SHA256
af484d392b2e757f398394f9fdc88b0ded2c3ab12a0b568b25112f9004f162cb
SHA512
9d926e961302691b1da59ee79d527570fd09e0ac4a30d59ffefc8ce9ae575337162977f8084d33c9aaa6c08fb58af65b677a0ecda122f3b48cc33af3dfab4302
SSDEEP
393216:vj5VTVEPGxubjeaDDmyxQEmGPQskTH8IQnOjrs+CjVtYxX++Bm7Q:1ubrHFxQdGPzKHWOegZB2Q
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetWindowsDirectoryW
SetFileAttributesW
lstrlenA
GetComputerNameA
GetDiskFreeSpaceExW
FlushInstructionCache
FreeLibrary
FreeResource
GetCurrentThreadId
RaiseException
ExpandEnvironmentStringsW
CreateProcessW
lstrcmpiW
TerminateThread
Sleep
GetDriveTypeW
OutputDebugStringW
GetPrivateProfileIntW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
MapViewOfFileEx
LoadLibraryExW
InterlockedIncrement
InterlockedDecrement
CreateThread
SetThreadPriority
GetCommandLineW
WriteFile
UnmapViewOfFile
InitializeCriticalSectionAndSpinCount
FormatMessageA
ExpandEnvironmentStringsA
SleepEx
DeviceIoControl
GlobalMemoryStatusEx
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetFullPathNameA
GetDriveTypeA
GetCurrentDirectoryA
WriteConsoleW
MapViewOfFile
WriteConsoleA
lstrcpyW
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
QueryPerformanceCounter
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
HeapCreate
GetModuleFileNameA
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetStartupInfoA
SetHandleCount
LCMapStringW
LCMapStringA
GetCPInfo
RtlUnwind
GetStartupInfoW
ExitProcess
VirtualQuery
GetModuleHandleA
VirtualProtect
ExitThread
GetFileType
SetStdHandle
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
LoadLibraryA
GetThreadLocale
GetLocaleInfoA
GetACP
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
InterlockedExchange
lstrcatW
CreateEventW
CreateSemaphoreW
ResetEvent
ReleaseSemaphore
GetVolumeInformationW
InitializeCriticalSection
SetEvent
WaitForSingleObject
VirtualAlloc
VirtualFree
WaitForMultipleObjects
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetStdHandle
GetUserDefaultLangID
FileTimeToLocalFileTime
GetLocalTime
SetFilePointer
GetSystemTimeAsFileTime
FileTimeToSystemTime
SetEndOfFile
FlushFileBuffers
GetTickCount
GetTempFileNameW
CopyFileW
GetTempPathW
QueryDosDeviceW
GetLogicalDriveStringsW
MoveFileW
MoveFileExW
SetLastError
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateFileA
CreateFileMappingW
InterlockedCompareExchange
GetSystemInfo
GetCurrentProcess
LocalFree
LocalAlloc
LoadLibraryW
OpenProcess
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
FindResourceW
CloseHandle
ReadFile
GetFileSize
CreateFileW
GetVersionExW
GetSystemDirectoryW
GetProcAddress
GetModuleHandleW
RemoveDirectoryW
FindClose
FindNextFileW
DeleteFileW
FindFirstFileW
GetLastError
CreateDirectoryW
GetFileAttributesW
GetModuleFileNameW
FindResourceExW
LoadResource
LockResource
SizeofResource
GetConsoleOutputCP
FindFirstFileA
CharUpperW
EnumDisplayDevicesA
EnumDisplaySettingsW
EnumDisplayDevicesW
GetSystemMetrics
CharNextW
LoadStringW
GetDesktopWindow
GetWindowTextW
UnregisterClassA
CharLowerW
PtInRect
DestroyWindow
GetKeyState
WindowFromPoint
IsWindow
DefWindowProcW
GetScrollPos
GetWindowRect
SetCursor
RegisterClassExW
GetFocus
UpdateLayeredWindow
LoadCursorW
LoadIconW
IsChild
GetParent
DestroyIcon
SetRectEmpty
IsDialogMessageW
IsWindowEnabled
SendMessageW
SetWindowLongW
RegisterWindowMessageW
EndPaint
PostThreadMessageW
BeginPaint
ShowWindow
LoadImageW
GetActiveWindow
EqualRect
GetClassInfoExW
GetDC
EnableWindow
DrawTextW
MapWindowPoints
SetRect
SetWindowPos
GetClientRect
IsWindowVisible
CallWindowProcW
InvalidateRect
GetWindowThreadProcessId
PostMessageW
GetDlgItem
GetForegroundWindow
SetFocus
ReleaseDC
SystemParametersInfoW
InflateRect
AttachThreadInput
MoveWindow
SetCapture
OffsetRect
SetForegroundWindow
GetNextDlgTabItem
GetDlgCtrlID
GetWindow
FindWindowW
SetActiveWindow
ReleaseCapture
CopyRect
PeekMessageW
DrawIconEx
GetMessageW
CreateWindowExW
MonitorFromWindow
TranslateMessage
GetMonitorInfoW
DispatchMessageW
GetWindowLongW
GetWindowTextLengthW
GetCursorPos
ScreenToClient
KillTimer
LoadBitmapW
ClientToScreen
SetTimer
IntersectRect
SetWindowTextW
GetTextMetricsW
ExtSelectClipRgn
CreateBitmap
RoundRect
CreateCompatibleBitmap
Rectangle
CreateDIBSection
DeleteObject
CombineRgn
GetClipRgn
CreateRectRgn
GetObjectW
StretchBlt
GetTextColor
RestoreDC
BitBlt
SaveDC
OffsetRgn
DeleteDC
LineTo
ExtTextOutW
MoveToEx
SetBkColor
CreatePen
SelectObject
CreateCompatibleDC
SelectClipRgn
SetBkMode
CreateFontIndirectW
RectInRegion
GetStockObject
CreateRectRgnIndirect
GetTextExtentPoint32W
SetTextColor
TextOutW
CreateRoundRectRgn
GetViewportOrgEx
SetStretchBltMode
GetCurrentObject
SetViewportOrgEx
GetNamedSecurityInfoW
StartServiceW
QueryServiceStatus
DeleteService
ChangeServiceConfig2W
ChangeServiceConfigW
OpenServiceW
CloseServiceHandle
CreateServiceW
OpenSCManagerW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
CreateProcessAsUserW
SetNamedSecurityInfoW
SetEntriesInAclW
BuildExplicitAccessWithNameW
DeleteAce
GetAce
SetTokenInformation
DuplicateTokenEx
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegOpenKeyW
RegQueryValueExW
RegCloseKey
ControlService
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFolderPathW
ShellExecuteW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
SHFileOperationW
SHGetSpecialFolderLocation
CoInitializeSecurity
CoSetProxyBlanket
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
CoInitializeEx
CoCreateGuid
CreateStreamOnHGlobal
VarUI4FromStr
SysStringLen
VariantCopy
VariantClear
SysAllocString
SysFreeString
SafeArrayLock
VariantInit
SafeArrayUnlock
StrToIntW
StrToIntA
PathRemoveFileSpecW
PathFindFileNameW
PathAddBackslashW
PathAppendW
PathFileExistsW
PathRemoveExtensionW
_TrackMouseEvent
InitCommonControlsEx
AlphaBlend
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
WTSFreeMemory
WTSEnumerateSessionsW
GetProcessImageFileNameW
GetModuleFileNameExW
GdipDrawImagePointsRectI
GdipGetFontSize
GdipGetFamily
GdipDrawImageRectI
GdipDrawImageI
GdipSetPixelOffsetMode
GdipSetPenMode
GdipAddPathArcI
GdipCreateHBITMAPFromBitmap
GdipSetCompositingQuality
GdipFillPath
GdipSetPenEndCap
GdipSetPenStartCap
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImageGraphicsContext
GdipFillRectangle
GdipGraphicsClear
GdipCreateFontFromLogfontW
GdipCreatePath
GdipDrawLinesI
GdipDeleteFontFamily
GdipDrawImageRectRectI
GdipSetStringFormatTrimming
GdipDeletePen
GdipCreateSolidFill
GdipDrawImageRectRect
GdipCreatePen1
GdipPrivateAddFontFile
GdipDeletePrivateFontCollection
GdipCloneBrush
GdipNewPrivateFontCollection
GdipImageRotateFlip
GdipLoadImageFromStream
GdipRotateWorldTransform
GdipAddPathPieI
GdipSetStringFormatAlign
GdipTranslateWorldTransform
GdipCloneFontFamily
GdipSetStringFormatFlags
GdipGetFontCollectionFamilyList
GdipMeasureString
GdipResetWorldTransform
GdipDeleteStringFormat
GdiplusShutdown
GdipGetFontCollectionFamilyCount
GdipDrawString
GdiplusStartup
GdipAddPathRectangleI
GdipCreateStringFormat
GdipSetSmoothingMode
GdipGetImageHeight
GdipGetImageWidth
GdipSetTextRenderingHint
GdipFillRectangleI
GdipCloneImage
GdipDeleteGraphics
GdipLoadImageFromFile
GdipCreateFromHDC
GdipDisposeImage
GdipSetImageAttributesColorMatrix
GdipClosePathFigure
GdipSetClipPath
GdipDeleteFont
GdipDisposeImageAttributes
GdipAlloc
GdipCreateImageAttributes
GdipFree
GdipCreateFont
GdipDeletePath
GdipDrawLine
GdipSetPenDashStyle
GdipAddPathStringI
GdipDrawRectangleI
GdipSetStringFormatLineAlign
GdipDrawPath
GdipDeleteBrush
GdipSetInterpolationMode
GetAdaptersInfo
??0?$_CallBack@VKSimpleDirectInfoc@@@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@QAE@ABU012@@Z
??0?$_CallBack@VKSimpleDirectInfoc@@@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@QAE@XZ
??0?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@QAE@XZ
??0?$kxThreadBase@VLocker@kbase@@@kbase@@QAE@XZ
??0ReportHelper@business_publish@@AAE@XZ
??1?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@UAE@XZ
??1?$kxThreadBase@VLocker@kbase@@@kbase@@UAE@XZ
??1ReportHelper@business_publish@@UAE@XZ
??4?$_CallBack@VKSimpleDirectInfoc@@@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@QAEAAU012@ABU012@@Z
??_7?$_CallBack@VKSimpleDirectInfoc@@@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@6B@
??_7?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@6B@
??_7?$kxThreadBase@VLocker@kbase@@@kbase@@6B@
??_7ReportHelper@business_publish@@6B?$_CallBack@VKSimpleDirectInfoc@@@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@@
??_7ReportHelper@business_publish@@6B?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@@
?AddItem@ReportHelper@business_publish@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV?$vector@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@V?$allocator@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@4@@Z
?AddItem@ReportHelper@business_publish@@QAEHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HAAV?$vector@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@V?$allocator@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@4@@Z
?AfterThreadFun@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@MAEXH@Z
?AfterThreadFun@?$kxThreadBase@VLocker@kbase@@@kbase@@MAEXH@Z
?BeginThreadFun@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@MAEXXZ
?BeginThreadFun@?$kxThreadBase@VLocker@kbase@@@kbase@@MAEXXZ
?GetHandle@?$kxThreadBase@VLocker@kbase@@@kbase@@QBEPAXXZ
?GetInstance@ReportHelper@business_publish@@SAPAV12@XZ
?Init@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@QAEXPAU?$_CallBack@VKSimpleDirectInfoc@@@12@K@Z
?Initialzie@ReportHelper@business_publish@@QAE_NW4ReportType@2@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?Insert@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@QAE_NABVKSimpleDirectInfoc@@@Z
?IsRunning@?$kxThreadBase@VLocker@kbase@@@kbase@@QAE_NXZ
?KCreateThread@?$kxThreadBase@VLocker@kbase@@@kbase@@SAPAXHP6GKPAX@Z0PAK0II@Z
?Kill@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@UAEHXZ
?Kill@?$kxThreadBase@VLocker@kbase@@@kbase@@UAEHXZ
?QueueThreadCallback@ReportHelper@business_publish@@MAEHKAAVKSimpleDirectInfoc@@@Z
?Report@ReportHelper@business_publish@@QAE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$vector@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@V?$allocator@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@4@PBV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@4@@Z
?ReportDirect@ReportHelper@business_publish@@QAE_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$vector@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@V?$allocator@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@4@PBV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@4@@Z
?SetPriority@?$kxThreadBase@VLocker@kbase@@@kbase@@QAEHH@Z
?SetTimeOut@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@QAEXK@Z
?Start@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@QAEHXZ
?StartThread@?$kxThreadBase@VLocker@kbase@@@kbase@@IAEHPAX@Z
?Thread@?$kxThreadBase@VLocker@kbase@@@kbase@@AAEIPAX@Z
?Uninitialize@ReportHelper@business_publish@@QAEXXZ
?WaitKill@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@UAEHK@Z
?WaitKill@?$kxThreadBase@VLocker@kbase@@@kbase@@UAEHK@Z
?size@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@QAEIXZ
?threadFun@?$kxThreadBase@VLocker@kbase@@@kbase@@CGIPAX@Z
?threadFunImpl@?$kxQueueThreadRun@VKSimpleDirectInfoc@@$03VLocker@kbase@@@kbase@@MAEHKPAX@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ