Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
62ee160f6640ae1a39df6301b11ff3a172ad77b748ffb375bc919b095129fff4.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
62ee160f6640ae1a39df6301b11ff3a172ad77b748ffb375bc919b095129fff4.dll
Resource
win10v2004-20240221-en
Target
62ee160f6640ae1a39df6301b11ff3a172ad77b748ffb375bc919b095129fff4
Size
279KB
MD5
bc871b2129cffbaaa166721e7722b95f
SHA1
8ef198b1826c1b1b702c2a9fbc43aa5c1b31b4dd
SHA256
62ee160f6640ae1a39df6301b11ff3a172ad77b748ffb375bc919b095129fff4
SHA512
341b0ce104be9bb951a5786c66ea18b6b157ded709723bbda35a8a278da3ab40e8e44e4c536a5131e2ef434a9dc33cbe30b95cc562e3c76ef60b9ca9b189388c
SSDEEP
6144:kmfZCMJL+KGYSouPU4OuZ2h8OtEFBF0cWqbRj:kmBRF+skcvucMWqbRj
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
d:\winapps\mh\trunk\Build\MalwareScan\Release\MalwareScan.pdb
ord3020
ord3013
ord3406
ord6657
ord3811
ord1579
ord1581
ord6698
ord6692
ord400
ord3534
ord2953
ord2955
ord5943
ord6813
ord403
ord2326
ord3729
ord2084
ord6523
ord5894
ord2484
ord1041
ord758
ord554
ord1298
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord2447
ord4347
ord3017
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord1166
ord4211
ord794
ord589
ord4043
ord310
ord6164
ord1603
ord5979
ord2954
ord4519
ord291
ord2315
ord399
ord6079
ord6359
ord4465
ord6732
ord3589
ord287
ord1219
ord1276
ord1542
ord608
ord324
ord453
ord2145
ord3191
ord702
ord452
ord4351
ord4309
ord5767
ord2458
ord6811
ord1243
ord951
ord2525
ord2699
ord553
ord757
ord6513
ord6169
ord6822
ord5778
ord3630
ord3810
ord4996
ord2694
ord5851
ord296
ord5869
ord5933
ord6528
ord6529
ord2523
ord3188
ord3018
ord4322
ord2501
ord2490
ord665
ord406
ord1250
ord1254
ord3868
ord2696
ord5852
ord316
ord601
ord5941
ord2676
ord935
ord938
ord5938
ord5939
ord6659
ord2478
ord2479
ord4490
ord1607
ord285
ord3220
ord1599
ord799
ord280
ord1552
ord814
ord5770
ord3187
ord5535
ord663
ord404
ord2537
ord782
ord580
ord6170
ord1248
ord286
ord811
ord266
ord265
ord813
ord909
ord600
ord4494
ord4518
ord1088
ord802
ord322
ord1137
ord1076
ord1145
ord1271
ord1273
ord1152
ord391
ord605
ord1274
ord321
ord1241
ord1239
ord1264
ord1180
ord1233
ord801
memset
_CxxThrowException
memcpy
_stricmp
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
__CxxFrameHandler3
_localtime64_s
_mktime64
memmove
__RTDynamicCast
_wchdir
_wgetcwd
memcpy_s
_wsplitpath
_time64
strpbrk
sprintf_s
sscanf
rand
srand
_purecall
malloc
calloc
_recalloc
wcstol
_wcsnicmp
_wtol
printf
strtoul
free
memmove_s
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
wcscpy_s
wcschr
wcsncpy_s
_wcsicmp
strstr
strncpy_s
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
GetProcAddress
lstrlenA
GetLastError
lstrlenW
WideCharToMultiByte
SetFilePointer
GetFileAttributesW
CreateDirectoryW
CreateFileMappingW
MapViewOfFile
GetModuleHandleW
GetTickCount
SetFileAttributesW
GetDriveTypeW
SetVolumeLabelW
GetDiskFreeSpaceW
LocalFree
LocalAlloc
InterlockedExchange
InterlockedCompareExchange
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetVersion
TerminateProcess
GetCurrentProcess
IsWow64Process
CloseHandle
OpenProcess
RemoveDirectoryW
MoveFileExW
Sleep
MultiByteToWideChar
FindClose
FindFirstFileW
FreeLibrary
LoadLibraryW
GetModuleFileNameW
GetPrivateProfileStringW
ExpandEnvironmentStringsW
UnmapViewOfFile
OemToCharBuffA
CharToOemBuffA
LoadStringW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyW
RegCloseKey
RegEnumValueW
RegQueryValueExW
RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
SHGetSpecialFolderPathW
SHFileOperationW
SHDeleteValueW
SHDeleteKeyW
PathMatchSpecW
PathFindFileNameW
PathFileExistsW
PathRemoveFileSpecW
CoCreateInstance
CoTaskMemFree
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CLSIDFromProgID
VariantClear
SysFreeString
VariantInit
SysAllocString
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
EnumProcesses
EnumProcessModules
GetModuleFileNameExW
inflate
inflateInit2_
inflateEnd
deflateInit2_
deflate
deflateEnd
get_crc_table
uncompress
crc32
CreateObject
GUMHClear
GUMHClearItem
GUMHClose
GUMHCreateObject
GUMHGetItemType
GUMHGetObjectPath
GUMHRestore
GUMHScan
GUMHSetCallback
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ