Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
38ac77f9ea4cc66ad9a21e64213d5eec47694c7cc036ecf7c773f897cef80fc6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
38ac77f9ea4cc66ad9a21e64213d5eec47694c7cc036ecf7c773f897cef80fc6.exe
Resource
win10v2004-20231222-en
Target
38ac77f9ea4cc66ad9a21e64213d5eec47694c7cc036ecf7c773f897cef80fc6
Size
386KB
MD5
fbda58b566bc7531c194c1ede2b68991
SHA1
d047ebd62472c65911c921068732ceeaca7ca8b7
SHA256
38ac77f9ea4cc66ad9a21e64213d5eec47694c7cc036ecf7c773f897cef80fc6
SHA512
cffd23034b090c6a06998989851f589a8a968c6a3a2bdee802dbed0878df13522fe68850c768983cdb5d42804f7c24023d0671cfab79e5a7de52fbe3eaa2b088
SSDEEP
12288:OStVBBCrgqadU5loWOvuT3ZJuKBjvrEH7Mix:OUoPPoWVT3ZJu8rEH7Mo
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ord5653
ord4682
ord3515
ord6022
ord6604
ord1675
ord4319
ord4262
ord5182
ord744
ord524
ord2069
ord2208
ord2596
ord5008
ord1938
ord1108
ord595
ord3563
ord4910
ord3252
ord3140
ord5650
ord1727
ord1791
ord1792
ord2139
ord5625
ord1442
ord3226
ord6376
ord5404
ord3682
ord6804
ord4174
ord6802
ord1641
ord2368
ord2375
ord2630
ord2612
ord2610
ord2628
ord2640
ord2617
ord2633
ord2638
ord2621
ord4664
ord2625
ord2619
ord2635
ord2615
ord971
ord967
ord969
ord965
ord960
ord5683
ord5685
ord6466
ord1728
ord4702
ord5154
ord3743
ord5664
ord4603
ord6800
ord5512
ord2074
ord5602
ord4658
ord1493
ord4345
ord1751
ord1754
ord6411
ord3355
ord2280
ord4000
ord374
ord4442
ord2479
ord5979
ord1607
ord285
ord3220
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord1492
ord6408
ord3353
ord1809
ord1810
ord5324
ord5167
ord4631
ord5632
ord933
ord452
ord702
ord6817
ord3191
ord2145
ord2676
ord2623
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord2447
ord4347
ord4996
ord5680
ord821
ord1183
ord5663
ord6018
ord2478
ord801
ord265
ord1272
ord266
ord3794
ord2057
ord1937
ord6760
ord2771
ord2983
ord3112
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord3500
ord1064
ord1098
ord4211
ord693
ord639
ord710
ord462
ord794
ord589
ord4043
ord4967
ord286
ord784
ord582
ord1248
ord1250
ord1137
ord2696
ord5852
ord316
ord601
ord6659
ord4490
ord280
ord2537
ord813
ord811
ord2694
ord296
ord600
ord6350
ord398
ord662
ord4405
ord5851
ord799
__CxxFrameHandler3
memset
memcpy
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
fclose
ftell
fwrite
ferror
fprintf
fread
fopen
_errno
fputc
strrchr
rand
free
memcpy_s
printf
malloc
wcscpy_s
_strnicmp
wcsrchr
isalpha
_stricmp
wcsncpy_s
tolower
strstr
wcschr
_wcsicmp
?what@exception@std@@UBEPBDXZ
_purecall
memmove_s
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
swprintf_s
_CxxThrowException
Sleep
CreateEventW
ReadDirectoryChangesW
GetOverlappedResult
QueryPerformanceCounter
GetVolumeInformationW
GetDiskFreeSpaceW
FindFirstFileW
FindClose
FindNextFileW
MultiByteToWideChar
WideCharToMultiByte
GetDriveTypeW
ExpandEnvironmentStringsA
DeleteFileA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetModuleHandleW
GetProcAddress
GetModuleFileNameW
GetCurrentThreadId
DeviceIoControl
CreateMutexW
CreateWaitableTimerW
SetWaitableTimer
ResumeThread
MapViewOfFile
UnmapViewOfFile
OpenProcess
DuplicateHandle
GetCurrentProcess
CreateFileMappingW
GetTickCount
GetLogicalDrives
ConnectNamedPipe
SetLastError
CreateNamedPipeW
SetNamedPipeHandleState
WaitNamedPipeW
DisconnectNamedPipe
GetNamedPipeInfo
FormatMessageW
LocalFree
CreateFileW
GetLastError
WaitForSingleObject
SetEvent
CreateThread
DeleteCriticalSection
RaiseException
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetPrivateProfileStringW
UnhandledExceptionFilter
IsDebuggerPresent
CloseHandle
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedCompareExchange
InterlockedExchange
ResetEvent
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
WriteFile
ReadFile
MsgWaitForMultipleObjects
GetKeyState
PostMessageW
RedrawWindow
KillTimer
SetTimer
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
SendMessageW
AppendMenuW
GetSystemMenu
LoadIconW
EnableWindow
UnregisterDeviceNotification
RegisterDeviceNotificationW
PostThreadMessageW
MessageBoxW
TranslateMessage
LoadStringW
DispatchMessageW
GetMessageW
PeekMessageW
OpenSCManagerW
CloseServiceHandle
CreateServiceW
ControlService
DeleteService
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetServiceStatus
OpenServiceW
SHCreateDirectoryExA
SHGetDesktopFolder
InitCommonControlsEx
PathFileExistsA
ord354
StrFormatByteSizeW
CoUninitialize
CoInitialize
CreateStreamOnHGlobal
VariantInit
VariantClear
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IPB_WI@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?at@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
GetFileInfoByFileNumber
StopScanFile
ScanAll
DeleteItemTree
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ