Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
d0e7767c47ba4f7fc8d9c5c3c780c8e2cf4cb74e5f281829371c6739fef6138f.dll
Resource
win10-20231215-en
Target
14210518522.zip
Size
2.2MB
MD5
6829feda2bacd33e487c38713ce56a9f
SHA1
3c8ea758947f04133d753729298c2931c78b9d80
SHA256
e39504d1154f362f30e2e40e3106a36e85d5095b12759e5babcd7e711be53a34
SHA512
2d68ca63b267507e70eef081fe09e0cc16cfffc648f011f3f13586c1d1cae3c04b98fe2be9a791f31835fdeef171cdb4a7c85084b3295b961dd1531533abad12
SSDEEP
49152:YEY8T78PV+3Qch0+Ay2tKPDpz7jBJXehwQV3LrYyHoiASm2yYnXyo:YdU8N+3RhrA5K7ZiXwi8rYXP
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
QueryPerformanceFrequency
QueryPerformanceCounter
WaitForMultipleObjects
WinExec
GetModuleFileNameA
CreateProcessA
CreateMutexA
GetExitCodeThread
ReadProcessMemory
TerminateProcess
GetCurrentThreadId
HeapFree
GetProcessHeap
HeapAlloc
GetFileAttributesExA
GetCurrentProcessId
FindFirstFileA
FindNextFileA
FindClose
VirtualProtect
SetUnhandledExceptionFilter
GetSystemInfo
VirtualQueryEx
CreatePipe
InterlockedCompareExchange
GetSystemTimeAsFileTime
IsDebuggerPresent
UnhandledExceptionFilter
InterlockedExchange
DecodePointer
EncodePointer
HeapSize
HeapReAlloc
HeapDestroy
SetThreadPriority
SuspendThread
IsProcessorFeaturePresent
SetProcessWorkingSetSize
GetCurrentProcess
ResumeThread
DeviceIoControl
GetLocalTime
GetTickCount
Process32Next
Process32First
CreateToolhelp32Snapshot
DeleteFileA
GetFileSize
ExitProcess
DeleteCriticalSection
InitializeCriticalSection
GetModuleHandleA
LoadLibraryA
GetProcAddress
TerminateThread
OpenProcess
SetFileAttributesA
GetWindowsDirectoryA
CreateThread
ReadFile
CloseHandle
WriteFile
CreateFileA
GetFullPathNameA
Sleep
GetWindowTextA
GetWindowThreadProcessId
GetForegroundWindow
BlockInput
GetWindowTextLengthW
GetWindowTextW
DestroyWindow
RegisterClassExA
DrawTextA
GetClientRect
BeginPaint
SetWindowLongA
SendMessageA
EnumWindows
CreateWindowExA
DefWindowProcA
SetLayeredWindowAttributes
ShowWindow
LoadImageA
UpdateWindow
LoadCursorA
GetWindow
IsWindowVisible
GetTopWindow
EnumDisplayMonitors
GetMonitorInfoA
GetDC
ReleaseDC
GetSystemMetrics
CallNextHookEx
UnhookWindowsHookEx
DispatchMessageA
TranslateMessage
GetMessageA
SetWindowsHookExA
UnregisterClassA
GetClassNameA
wsprintfA
MessageBoxA
FindWindowExA
GetWindowLongA
SetTimer
EndPaint
SetBkColor
StretchBlt
SetBkMode
SetTextColor
GetObjectA
GetStockObject
ExtTextOutA
TextOutA
BitBlt
DeleteDC
GetDIBits
DeleteObject
SelectObject
CreateFontA
CreateCompatibleBitmap
CreateCompatibleDC
CheckTokenMembership
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
FreeSid
SHGetFolderPathA
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Incref@facet@locale@std@@QAEXXZ
?_Xmem@tr1@std@@YAXXZ
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
_Strcoll
?id@?$collate@D@std@@2V0locale@2@A
_Strxfrm
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?_Xbad@tr1@std@@YAXW4error_type@regex_constants@12@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Random_device@tr1@std@@YAIXZ
?id@?$ctype@D@std@@2V0locale@2@A
??0facet@locale@std@@IAE@I@Z
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??1facet@locale@std@@UAE@XZ
?ws@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@@Z
_Stolx
_Stoulx
?_Xinvalid_argument@std@@YAXPBD@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@PBD3@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_BADOFF@std@@3_JB
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
?id@?$codecvt@DDH@std@@2V0locale@2@A
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
PathRemoveFileSpecA
GdipGetImageEncoders
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipGetImageEncodersSize
GdiplusShutdown
GdipSaveImageToFile
connect
inet_addr
socket
WSAStartup
closesocket
WSACloseEvent
recv
send
WSACleanup
htons
GetModuleFileNameExA
EnumProcesses
EnumDeviceDrivers
GetDeviceDriverFileNameA
GetModuleFileNameExW
EnumProcessModules
??0exception@std@@QAE@ABQBD@Z
printf
strncpy
_CxxThrowException
_mkdir
strrchr
strchr
feof
fopen
clock
_stricmp
asctime
_localtime64
_time64
_purecall
_beginthreadex
toupper
strcpy_s
remove
vsprintf_s
strstr
free
malloc
fopen_s
fread
isalnum
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
fclose
memchr
fflush
setvbuf
fsetpos
fgetpos
_fseeki64
memcpy_s
fgetc
ungetc
fwrite
fputc
_unlock_file
_lock_file
sprintf
??2@YAPAXI@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
memmove
??_V@YAXPAX@Z
??3@YAXPAX@Z
_vsnprintf_s
_strdup
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
_except_handler4_common
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_onexit
_lock
__dllonexit
_unlock
__CxxFrameHandler3
memset
memcpy
ldiv
realloc
GetAdaptersInfo
FtpPutFileA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetReadFile
InternetConnectA
FtpCreateDirectoryA
FtpGetFileA
DETECT_ALL_BYPASS
XOR
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ