Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
a066fe8d60770cc74956c1d2de6800859dcacf88cea5e2a627280b65155cac49.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a066fe8d60770cc74956c1d2de6800859dcacf88cea5e2a627280b65155cac49.exe
Resource
win10v2004-20231215-en
Target
a066fe8d60770cc74956c1d2de6800859dcacf88cea5e2a627280b65155cac49
Size
1.2MB
MD5
8d09175dbe2c6b2ad0ad5c86d56f08ad
SHA1
4a8cf761d7d3cc456082cf1734037d10d1520eef
SHA256
a066fe8d60770cc74956c1d2de6800859dcacf88cea5e2a627280b65155cac49
SHA512
524a236a9e28d9bde9531e4603dc7e53d64546bdb152f787422a861bbd5fe4b4d4903875b380bc2aa2a61fa965b1740ed45da601a0668495c67e892e054b9210
SSDEEP
24576:gQnPGjYqzpVyVWu4Kb+a64KC+tBS5tSktjPL9Q/d4P1u:RwzWVWUKC+YxjPxQ+u
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EnumProcesses
GetProcessImageFileNameW
SetWindowTheme
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ord750
ord4270
ord5980
ord2677
ord2130
ord3577
ord2282
ord4512
ord333
ord4044
ord611
ord3489
ord3286
ord4652
ord1665
ord2274
ord6094
ord3637
ord6547
ord4131
ord2592
ord4410
ord4541
ord6095
ord3622
ord3488
ord6187
ord6096
ord2593
ord6091
ord1353
ord636
ord367
ord2470
ord1608
ord305
ord3221
ord6347
ord6530
ord1064
ord6205
ord2726
ord6660
ord294
ord815
ord2478
ord4405
ord3155
ord2326
ord6531
ord310
ord946
ord2676
ord6164
ord1599
ord5938
ord6659
ord2479
ord4490
ord4518
ord6013
ord3589
ord1707
ord2571
ord5778
ord261
ord6822
ord4774
ord3165
ord4741
ord2360
ord6355
ord4266
ord4262
ord693
ord3563
ord3252
ord4658
ord2280
ord3794
ord2539
ord6813
ord1552
ord5770
ord3187
ord5535
ord663
ord404
ord286
ord1250
ord1254
ord1317
ord1330
ord1316
ord2697
ord306
ord818
ord821
ord938
ord5979
ord4519
ord3422
ord6830
ord265
ord316
ord601
ord820
ord2695
ord1607
ord285
ord3220
ord5632
ord4631
ord5167
ord5324
ord1810
ord1809
ord3353
ord6408
ord1492
ord4664
ord5653
ord4682
ord3515
ord4516
ord814
ord3370
ord6353
ord6416
ord3061
ord6604
ord6806
ord6808
ord6577
ord4527
ord6271
ord1675
ord1533
ord4127
ord2069
ord6065
ord2905
ord744
ord524
ord4543
ord4268
ord2595
ord1063
ord1088
ord1688
ord3486
ord1354
ord2904
ord6579
ord2597
ord5008
ord4000
ord1938
ord1108
ord785
ord595
ord3661
ord4910
ord3278
ord3140
ord5650
ord1727
ord1791
ord1792
ord2139
ord5625
ord1442
ord3226
ord6376
ord5404
ord3682
ord6804
ord4174
ord6802
ord1641
ord2368
ord2375
ord1708
ord791
ord3665
ord3282
ord6183
ord4036
ord3940
ord6666
ord778
ord2630
ord2612
ord2610
ord2628
ord2640
ord2617
ord2633
ord2638
ord2621
ord2623
ord2625
ord2619
ord2635
ord2615
ord971
ord967
ord969
ord965
ord960
ord5683
ord5685
ord6466
ord1728
ord4702
ord5154
ord3743
ord5664
ord4603
ord6800
ord5512
ord2074
ord5602
ord4663
ord1493
ord4345
ord1751
ord1754
ord6411
ord3355
ord1722
ord1786
ord2286
ord686
ord436
ord3543
ord2106
ord2537
ord1183
ord3654
ord4660
ord1719
ord2283
ord3537
ord639
ord374
ord3741
ord811
ord280
ord5851
ord2694
ord799
ord266
ord1248
ord1137
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord4347
ord4996
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord2447
ord2208
ord290
ord6482
ord4211
ord794
ord589
ord4043
ord4967
ord813
ord1779
ord1313
ord6311
ord1678
ord654
ord3528
ord2696
ord2703
ord5852
ord6171
ord2702
ord6514
ord782
ord580
ord1329
ord600
ord296
ord1357
ord801
ord2596
ord5182
ord1272
ord3627
malloc
_stricmp
__CxxFrameHandler3
memcpy
memset
wcscpy_s
free
_CxxThrowException
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_purecall
strpbrk
sscanf
memmove_s
strcspn
_beginthreadex
_endthreadex
_localtime64_s
strncmp
tolower
isxdigit
fgets
fprintf
fprintf_s
_endthread
_beginthread
memmove
isalnum
swprintf_s
fsetpos
fread_s
_wfopen_s
sprintf_s
fseek
ftell
fwrite
?what@exception@std@@UBEPBDXZ
calloc
_recalloc
atol
strchr
strcpy_s
fputs
fclose
strstr
fopen_s
fputc
fgetc
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
strrchr
realloc
_msize
strcat_s
wcsstr
GetFullPathNameW
GetFullPathNameA
HeapReAlloc
CreateFileA
GetFileSize
CreateMutexW
HeapCompact
SetFilePointer
TryEnterCriticalSection
MapViewOfFile
UnmapViewOfFile
GetPrivateProfileStringA
HeapAlloc
SystemTimeToFileTime
QueryPerformanceCounter
HeapFree
WaitForSingleObject
InterlockedCompareExchange
UnlockFile
FlushViewOfFile
LockFile
WaitForSingleObjectEx
OutputDebugStringW
UnlockFileEx
GetPrivateProfileSectionNamesW
FindClose
FindFirstFileW
GetSystemDirectoryA
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
MoveFileExW
Sleep
lstrcpyW
GetProcessHeap
GetSystemTimeAsFileTime
FormatMessageA
WriteFile
GlobalUnlock
GlobalLock
GlobalAlloc
GetFileAttributesW
WideCharToMultiByte
GetFileAttributesA
MoveFileExA
DeleteFileA
MoveFileW
DeleteFileW
lstrlenA
MultiByteToWideChar
lstrlenW
FreeLibrary
GetModuleFileNameW
TerminateProcess
GetTempPathA
OpenProcess
GetTickCount
FormatMessageW
GetPrivateProfileStringW
SetLastError
LoadLibraryW
GetLastError
GetProcAddress
GetModuleHandleW
CloseHandle
SetEndOfFile
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
SetUnhandledExceptionFilter
GetStartupInfoW
AreFileApisANSI
GetSystemTime
LocalFree
GetCurrentProcessId
GetVersionExA
OutputDebugStringA
GetCurrentThreadId
DeleteCriticalSection
GetFileAttributesExW
GetSystemInfo
GetDiskFreeSpaceA
CreateFileMappingW
CreateFileMappingA
LoadLibraryA
GetDiskFreeSpaceW
LockFileEx
HeapSize
GetTempPathW
FlushFileBuffers
CreateFileW
ReadFile
HeapValidate
HeapCreate
HeapDestroy
GetVersionExW
InitializeCriticalSection
GetCommandLineW
EnableWindow
SetForegroundWindow
ShowWindow
LoadIconW
DestroyWindow
GetMenuItemInfoW
SetMenuItemInfoW
SetMenuDefaultItem
SetCursorPos
ShowCursor
PostMessageW
DefWindowProcW
GetCursorPos
FindWindowW
LoadMenuW
GetSubMenu
ModifyMenuW
GetMenuItemID
FillRect
SetRect
InvalidateRect
RedrawWindow
GetDC
FrameRect
keybd_event
GetWindowThreadProcessId
GetForegroundWindow
GetClipboardData
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ClientToScreen
GetSysColor
ReleaseCapture
SetCapture
GetParent
CopyRect
MoveWindow
SetWindowPos
GetWindowRect
GetDlgItem
DrawIcon
GetSystemMetrics
IsIconic
SystemParametersInfoW
GetClientRect
LoadBitmapW
SendMessageW
CreatePen
CreateRoundRectRgn
CreatePatternBrush
SetBrushOrgEx
FrameRgn
CreateSolidBrush
Rectangle
GetTextExtentPoint32W
CreateCompatibleBitmap
GetDIBColorTable
StretchBlt
BitBlt
CreateCompatibleDC
DeleteDC
GetStockObject
FillRgn
SelectObject
CreateFontIndirectW
TransparentBlt
GradientFill
AlphaBlend
RegCreateKeyExA
RegQueryValueExW
RegQueryInfoKeyA
RegQueryValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
RegSetValueExA
RegEnumValueA
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyW
ShellExecuteExW
SHGetSpecialFolderPathA
ShellExecuteW
SHGetSpecialFolderPathW
Shell_NotifyIconW
InitCommonControlsEx
_TrackMouseEvent
PathFileExistsW
SHRegGetPathW
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPB_WHH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPB_WHH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@D@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
GdiplusShutdown
ord1
GetSkinsColor
GetSkinsOption
InitializeSkins
UnitializeLibrary
InitializeLibrary
WindowsPosInitialize
WindowsPosHookWnd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ