Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
7b065db349cd711b59691a6719a7dc8d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7b065db349cd711b59691a6719a7dc8d.exe
Resource
win10v2004-20231222-en
Target
7b065db349cd711b59691a6719a7dc8d
Size
1.6MB
MD5
7b065db349cd711b59691a6719a7dc8d
SHA1
c49697f4767affc921a2ec0495cc13c3cdd86c2b
SHA256
ecb0c5db1ea21b3027a81633fe0b440db3f7c419e51573e63ca25b52dd9af0e5
SHA512
0dded925cb5b55fce07796955503cf23b6c803d8cc7f4f2ead2a477a23bebb6943220d2b3724ffe89cedd5175607f163ce0759c0daeb30c519d25c81197246c7
SSDEEP
24576:Rk7zqBjfUsdgk6RvB7Us9Mlpmux69AsLlJuaZs:Rk7mBjfJdgJPFncu/ua
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\myprj\CacaoClean\Release\CacaoClean.pdb
GetProcessMemoryInfo
EmptyWorkingSet
GetModuleFileNameExW
GetModuleBaseNameW
EnumProcesses
InetIsOffline
GetRgnBox
GetTextColor
GetBkColor
DPtoLP
GetMapMode
CreateRectRgnIndirect
MoveToEx
LineTo
IntersectClipRect
SetMapMode
SelectClipRgn
GetViewportExtEx
PtVisible
RectVisible
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetDIBits
CombineRgn
PatBlt
RoundRect
GetDeviceCaps
StretchBlt
Rectangle
CreatePen
CreateRectRgn
GetStockObject
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
DeleteObject
SelectObject
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetWindowExtEx
InternetOpenUrlW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetCloseHandle
InternetConnectW
InternetOpenW
InternetReadFile
HttpQueryInfoW
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
FindCloseUrlCache
DeleteUrlCacheEntryW
FindNextUrlCacheEntryW
FindFirstUrlCacheEntryW
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetQueryOptionW
timeGetTime
GetAdaptersInfo
IcmpSendEcho
IcmpCreateFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationW
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
lstrcmpA
GetLocaleInfoW
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
GetTickCount
WritePrivateProfileStringW
SetThreadPriority
ResumeThread
SuspendThread
TlsGetValue
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
SetErrorMode
GetStartupInfoW
GetSystemTimeAsFileTime
ExitThread
CreateThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetDriveTypeA
RtlUnwind
HeapReAlloc
Sleep
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
LCMapStringW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
InterlockedDecrement
GetCurrentDirectoryA
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
LCMapStringA
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetThreadLocale
InterlockedIncrement
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
GetVersionExA
GetModuleHandleA
InterlockedExchange
CompareStringA
LoadLibraryA
ReadFile
GlobalFree
GlobalUnlock
GlobalHandle
GlobalReAlloc
MulDiv
SystemTimeToTzSpecificLocalTime
ResetEvent
SetEvent
QueryPerformanceCounter
lstrlenA
RaiseException
DeleteCriticalSection
InitializeCriticalSection
SetLocalTime
GetProcessTimes
GlobalLock
GlobalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
TerminateProcess
SetSystemPowerState
WaitForSingleObject
CreateRemoteThread
GetExitCodeProcess
ReadProcessMemory
HeapFree
HeapAlloc
GetProcessHeap
FreeLibrary
GlobalMemoryStatus
DeviceIoControl
DuplicateHandle
Process32NextW
Module32NextW
Module32FirstW
Process32FirstW
CreateToolhelp32Snapshot
OpenProcess
WinExec
FindClose
WriteFile
SetFilePointer
GetFileSize
GetCurrentProcess
LocalFree
CloseHandle
GetLastError
SetLastError
LoadResource
LockResource
SizeofResource
GetCurrentProcessId
GetFileTime
GetStringTypeW
GetFileSizeEx
TlsAlloc
GetMessageW
IsRectEmpty
InvalidateRgn
UnregisterClassW
PostThreadMessageW
GetNextDlgGroupItem
MapDialogRect
DrawFocusRect
DestroyMenu
CharUpperW
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
EndPaint
BeginPaint
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
ValidateRect
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetMenu
UpdateWindow
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetSysColorBrush
SetLayeredWindowAttributes
SetCapture
ReleaseCapture
CreatePopupMenu
IsWindow
MessageBeep
SetCursorPos
GetAsyncKeyState
OffsetRect
GetDC
DestroyAcceleratorTable
RedrawWindow
SetRect
PtInRect
FillRect
GetFocus
CopyRect
PostQuitMessage
SetCursor
GetCursorPos
DrawIcon
IsIconic
SetWindowRgn
GetSystemMenu
SetForegroundWindow
InflateRect
GetSysColor
DeleteMenu
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
ClientToScreen
GetSubMenu
ScreenToClient
GetParent
ReleaseDC
GetWindowRect
SetWindowPos
GetDesktopWindow
EnumWindows
DestroyIcon
GetWindowThreadProcessId
IsWindowVisible
GetKeyState
ExitWindowsEx
TranslateMessage
GetSystemMetrics
KillTimer
SetTimer
InvalidateRect
GetClientRect
UnhookWindowsHookEx
SetWindowContextHelpId
GetWindowDC
GetFileTitleW
DocumentPropertiesW
OpenPrinterW
ClosePrinter
AdjustTokenPrivileges
LookupAccountNameW
ConvertSidToStringSidW
OpenSCManagerW
CreateServiceW
CloseServiceHandle
OpenProcessToken
LookupPrivilegeValueW
OpenServiceW
StartServiceW
ControlService
DeleteService
EnumServicesStatusW
QueryServiceConfigW
RegCloseKey
RegNotifyChangeKeyValue
RegOpenKeyW
RegEnumKeyW
SHGetSpecialFolderPathW
SHAddToRecentDocs
SHGetSpecialFolderLocation
SHQueryRecycleBinW
SHEmptyRecycleBinW
ord680
InitCommonControlsEx
_TrackMouseEvent
OleUIBusyW
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal
StringFromGUID2
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemAlloc
CoInitialize
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
VariantTimeToSystemTime
SystemTimeToVariantTime
VarUdateFromDate
VariantClear
VariantInit
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
VarDateFromStr
SysFreeString
VarUI4FromStr
RegisterTypeLi
SysStringLen
SysAllocString
LoadTypeLi
UnRegisterTypeLi
SysAllocStringLen
VariantChangeType
OleCreateFontIndirect
VariantCopy
SafeArrayDestroy
gethostbyname
WSAStartup
socket
htons
recv
ntohl
closesocket
WSASetLastError
WSACleanup
connect
GdipDisposeImage
GdipSaveImageToFile
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromHBITMAP
GdipFree
GdipAlloc
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageRectI
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipCloneImage
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
UrlUnescapeW
PathIsUNCW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ