Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
44f2b278a7b08954fd830ff9edb6910a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
44f2b278a7b08954fd830ff9edb6910a.exe
Resource
win10v2004-20231215-en
Target
44f2b278a7b08954fd830ff9edb6910a
Size
308KB
MD5
44f2b278a7b08954fd830ff9edb6910a
SHA1
6473c0d86f5aecb227b05c1843b39300a7fe4ae4
SHA256
1144755054c5a414c4c632be380da832d51159742a9f4fc5923d3b5f031b8389
SHA512
d83c406fa94c2004dca553986a49ceabae9f05162d38f06fc25875641f1c567e48e91a2648c189d8f20131eab784afce3ca6ff5ab81bd08aa605eccc773f2d8e
SSDEEP
6144:Ih0qKMVJZKq7ZigEpSemEPSTxRyXxi9UF+4ZKLQAOZ+SBMmxu/q:PqKMViq7ZiLpSemEPS9chxlckxu
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
UuidToStringA
UuidCreateSequential
RpcStringFreeA
Netbios
WriteFile
CopyFileW
DeleteFileW
LoadLibraryW
GetProcAddress
FreeLibrary
LocalFree
lstrlenW
WideCharToMultiByte
GetLastError
lstrlenA
CreateMutexW
GetModuleHandleW
GetCurrentThreadId
GetTempPathW
GetVolumeInformationW
GetLongPathNameW
IsBadReadPtr
GetFileAttributesW
SetFileAttributesW
FindFirstFileW
FindClose
FindNextFileW
RemoveDirectoryW
CreateDirectoryW
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
GetVersionExW
GetSystemInfo
GetSystemDefaultLangID
VirtualQuery
InitializeCriticalSectionAndSpinCount
SetFilePointerEx
RaiseException
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
IsBadWritePtr
GetSystemDirectoryW
CreatePipe
DuplicateHandle
GetCurrentProcess
CreateProcessW
ReadFile
DeviceIoControl
CreateFileA
SetFilePointer
SetEndOfFile
InterlockedCompareExchange
GetPrivateProfileIntA
CreateDirectoryA
InterlockedExchange
GetPrivateProfileStringA
SwitchToThread
MoveFileW
GetLocalTime
GetFileAttributesExW
WaitForSingleObject
GetExitCodeProcess
MoveFileExW
CreateEventW
SetEvent
GetTickCount
UnhandledExceptionFilter
GetModuleFileNameA
HeapSetInformation
DecodePointer
EncodePointer
HeapSize
HeapDestroy
CreateFileW
GetFileSize
CloseHandle
FindResourceExW
LoadResource
FindResourceW
LockResource
SizeofResource
MultiByteToWideChar
Sleep
LeaveCriticalSection
EnterCriticalSection
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFolderPathA
ShellExecuteExW
SHCreateDirectoryExW
SHGetSpecialFolderPathW
CoCreateInstance
CoFreeUnusedLibrariesEx
CoCreateGuid
StringFromGUID2
CoUninitialize
CoInitialize
CoTaskMemFree
SysAllocString
VariantClear
VariantInit
PathAddBackslashW
wnsprintfW
PathFileExistsW
PathFindExtensionW
PathAppendW
PathRemoveFileSpecW
PathFindFileNameA
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?uncaught_exception@std@@YA_NXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_BADOFF@std@@3_JB
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
??1_Container_base12@std@@QAE@XZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
_vscprintf
_CxxThrowException
_mktime64
wcsncmp
_time64
srand
rand
_beginthreadex
strstr
_time32
_purecall
realloc
_vsnwprintf_s
isprint
tolower
isspace
strncmp
vsprintf_s
_controlfp_s
_invoke_watson
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CxxFrameHandler3
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
??3@YAXPAX@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
wcslen
memcpy
wmemcpy_s
memmove
strlen
memcpy_s
memset
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
??_V@YAXPAX@Z
_wcsicmp
wcsnlen
memmove_s
_vscwprintf
vswprintf_s
?what@exception@std@@UBEPBDXZ
free
_recalloc
calloc
_wtol
wcschr
wcscpy_s
atoi
_wtoi
malloc
_waccess
wcsrchr
_wcsupr_s
_wsplitpath_s
swscanf_s
_wfopen_s
fread
fclose
_itoa_s
_snwprintf_s
_snprintf_s
wcsncpy_s
memcmp
wcsncat_s
strchr
isalnum
_stricmp
_wmkdir
_wstat64
_strnset_s
strncpy_s
strnlen
_mbschr
_mbsstr
_mbslwr_s
strtoul
_unlock
recv
sendto
setsockopt
WSAGetLastError
select
inet_addr
getpeername
ioctlsocket
connect
inet_ntoa
WSAStartup
bind
recvfrom
htons
htonl
ntohl
ntohs
accept
listen
send
gethostbyname
socket
__WSAFDIsSet
closesocket
GetIpForwardTable
WinHttpCrackUrl
WinHttpCloseHandle
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpConnect
WinHttpSetOption
WinHttpOpen
inflateEnd
inflateInit2_
crc32
inflate
??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE