Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
c0499392ee70de263575a10070ac55b6.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c0499392ee70de263575a10070ac55b6.dll
Resource
win10v2004-20240226-en
Target
c0499392ee70de263575a10070ac55b6
Size
8.4MB
MD5
c0499392ee70de263575a10070ac55b6
SHA1
1aafa681eac4b6aed9829542e640aa4b3281a37b
SHA256
b45140b19ac62ffa1093df0bc35d68dc86ae80f3186d5fc254a2a5e31eca61a7
SHA512
f66b0f4f602dc32673ab9bce4983b676f9723f0c9bf7acba668451bb5ac67a514a89be20bf205276f1eb587aa24a05c23da257d08970d4e802ed9ab126635626
SSDEEP
98304:zzvwH+rx/UCl+vd5cCZXuxg6ED4sVOba1v6uAt3hRg37tR1p:nC3NUxjE9Q0eh61p
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WideCharToMultiByte
lstrlenW
CreateTimerQueueTimer
InterlockedExchange
CreateThread
ResumeThread
InterlockedExchangeAdd
SuspendThread
ReleaseMutex
WaitForSingleObject
Sleep
GetModuleFileNameA
GetCommandLineA
MapViewOfFile
CreateFileMappingA
GetCurrentProcessId
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetModuleHandleW
MultiByteToWideChar
GetModuleFileNameW
VirtualAlloc
GetVersionExA
VirtualFree
CloseHandle
GetCurrentProcess
UnmapViewOfFile
GetFileSize
GetLastError
CreateFileA
GetSystemDirectoryA
IsBadReadPtr
GetExitCodeThread
OpenThread
GetCurrentThreadId
Module32Next
Module32First
CreateToolhelp32Snapshot
Process32Next
OpenProcess
Process32First
Thread32Next
Thread32First
GetSystemInfo
WriteFile
CreateMutexW
OpenMutexW
CreateFileMappingW
OpenFileMappingW
TerminateThread
DeleteTimerQueueTimer
CreateMutexA
CreateEventA
SetEvent
GetTickCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
OutputDebugStringA
DeviceIoControl
ReadFile
GetEnvironmentVariableA
GetVolumeInformationA
SystemTimeToFileTime
SetLastError
GetComputerNameW
LocalFree
lstrlenA
FreeLibrary
GetWindowsDirectoryA
GetTempPathA
FindFirstFileA
FindClose
GetLogicalDriveStringsA
QueryDosDeviceA
GetProcessTimes
GlobalMemoryStatusEx
GetDiskFreeSpaceExA
SetFilePointer
SearchPathA
SetThreadPriority
IsBadWritePtr
ExitProcess
lstrcmpW
InterlockedDecrement
InitializeCriticalSection
ntohl
ntohs
htons
socket
bind
setsockopt
send
sendto
__WSAFDIsSet
shutdown
getsockname
htonl
recv
ioctlsocket
connect
WSAGetLastError
select
getsockopt
WSAStartup
gethostname
gethostbyname
inet_ntoa
inet_addr
WSACleanup
closesocket
timeGetTime
PathAddBackslashA
PathAppendA
PathIsRelativeA
PathCombineA
PathRemoveFileSpecA
GetProcessMemoryInfo
SHGetSpecialFolderPathA
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Xlen@std@@YAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
memmove
_mbsnbcpy
_mbsnbcat
_mbslwr
_vsnprintf
strncpy
time
_except_handler3
atol
strtok
strrchr
_snprintf
strncat
_wcsicmp
wcslen
wcsrchr
localtime
fclose
fread
fopen
sprintf
ftell
fseek
_strnicmp
swscanf
wcschr
_snwprintf
_purecall
atoi
strstr
sscanf
islower
isdigit
isxdigit
strpbrk
strspn
isspace
strtol
mktime
srand
malloc
free
_mbsnbicmp
wcsncpy
wcscmp
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_CxxThrowException
fgets
strncmp
strlen
memcmp
memcpy
memset
_mbsstr
_mbsrchr
_assert
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABQBD@Z
_mbschr
wcsstr
__dllonexit
_onexit
_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
__CxxFrameHandler
??2@YAPAXI@Z
_ultoa
_stricmp
_memicmp
_strlwr
strchr
strtod
atof
toupper
mbstowcs
setlocale
wcstombs
tolower
_pctype
_isctype
__mb_cur_max
fprintf
vfprintf
rand
EnumDisplayDevicesA
wsprintfA
PeekMessageA
TranslateMessage
DispatchMessageA
IsWindow
SendMessageA
DestroyWindow
CreateWindowExA
SetTimer
KillTimer
ReadEventLogW
OpenEventLogW
GetOldestEventLogRecord
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegQueryValueExW
RegConnectRegistryW
CloseEventLog
CoCreateInstance
CoInitializeSecurity
CoCreateGuid
CoSetProxyBlanket
CoUninitialize
CoInitializeEx
GetErrorInfo
VariantClear
SysAllocString
CreateErrorInfo
SetErrorInfo
VariantChangeType
SysFreeString
VariantInit
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
Netbios
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
CreateObj
DllEntry
DllEntry1
DllEntry2
DllEntry3
DllEntry4
DllEntry5
DllEntry6
DllEntry7
DllEntry8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ