Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
13a4da0d148014bda011bf7464f7dbc06a2898c2bdd2a62d2f100aa54c4d1a04.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
13a4da0d148014bda011bf7464f7dbc06a2898c2bdd2a62d2f100aa54c4d1a04.exe
Resource
win10v2004-20231215-en
Target
13a4da0d148014bda011bf7464f7dbc06a2898c2bdd2a62d2f100aa54c4d1a04
Size
832KB
MD5
5dff40520609c9a3ee244e80b1af2ec6
SHA1
55cedf158b77f13ff49e6f4b318e55bee7314fa5
SHA256
13a4da0d148014bda011bf7464f7dbc06a2898c2bdd2a62d2f100aa54c4d1a04
SHA512
68b7eda4e0fa3829ab00c837d258cb76df0739fb9ecc06c74d0f16682815e0b30ea27c7c01c2d201aafddc983dafcdb781b66974501a6c0f8fb0b91f5400bcdb
SSDEEP
24576:qK61GTdR6nJxoh0lhSMXlF9+RTF7g1Msyys7:qKg4dRQhPeTuMsyys7
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
TranslucentTB.pdb
RegCloseKey
ord380
CreateDispatcherQueueController
DwmGetWindowAttribute
DwmExtendFrameIntoClientArea
CreateRectRgn
CreateRectRgnIndirect
CombineRgn
DeleteObject
CreateSolidBrush
GetProcessHeap
HeapAlloc
HeapFree
HeapSetInformation
RaiseException
GetLastError
SetLastError
TerminateProcess
CreateThread
ExitProcess
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
LCMapStringEx
SetProcessPreferredUILanguages
SetThreadPreferredUILanguages
LocaleNameToLCID
FormatMessageW
CloseHandle
GetProcAddress
LoadLibraryExA
LoadResource
LockResource
LoadLibraryExW
FindResourceExW
FreeLibrary
GetModuleHandleW
CompareStringOrdinal
WideCharToMultiByte
QueryFullProcessImageNameW
VerQueryValueW
GetFileVersionInfoSizeExW
GetFileVersionInfoExW
ReleaseSRWLockExclusive
CreateMutexExW
SetWaitableTimer
CancelWaitableTimer
AcquireSRWLockExclusive
WaitForMultipleObjects
CreateWaitableTimerW
CoCreateFreeThreadedMarshaler
CoGetObjectContext
CoInitializeEx
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoGetApartmentType
CoCreateInstance
IsDebuggerPresent
OutputDebugStringW
ReadDirectoryChangesW
ReplaceFileW
MoveFileExW
VerSetConditionMask
CancelIo
VirtualProtect
VirtualFree
VirtualQuery
VirtualAlloc
CreateFileW
GetSystemInfo
OpenProcess
GetProcessMitigationPolicy
SetProcessMitigationPolicy
FlushInstructionCache
WakeByAddressAll
WaitOnAddress
Sleep
SetProcessValidCallTargets
GetDpiForMonitor
ShellExecuteExW
Shell_NotifyIconGetRect
Shell_NotifyIconW
SHAppBarMessage
SHGetKnownFolderPath
AssocQueryKeyW
GetTopWindow
UnregisterPowerSettingNotification
InSendMessage
GetWindowLongPtrW
EnumDisplayMonitors
SetWindowRgn
SetWindowLongPtrW
GetWindow
MonitorFromPoint
SetUserObjectInformationW
DestroyMenu
TrackPopupMenu
CreatePopupMenu
MonitorFromRect
InsertMenuItemW
GetMenuItemInfoW
GetCursorPos
SetFocus
FillRect
GetAncestor
TrackMouseEvent
ClientToScreen
GetMessageW
CreateWindowExW
DestroyWindow
SystemParametersInfoW
GetSysColor
GetWindowTextW
GetClassNameW
GetPropW
UnhookWindowsHookEx
GetWindowTextLengthW
RegisterClassExW
SetClassLongPtrW
UnregisterClassW
SetLayeredWindowAttributes
GetWindowThreadProcessId
AllowSetForegroundWindow
PostMessageW
FindWindowExW
IsZoomed
GetDpiForWindow
SendMessageW
RegisterPowerSettingNotification
GetDesktopWindow
RegisterWindowMessageW
SetWinEventHook
MessageBoxExW
DefWindowProcW
GetWindowRect
SetWindowPos
MonitorFromWindow
SetWindowTextW
ShowWindow
IsWindow
DispatchMessageW
DestroyIcon
GetMonitorInfoW
PeekMessageW
MsgWaitForMultipleObjectsEx
UnhookWinEvent
TranslateMessage
LoadCursorW
GetClientRect
PostQuitMessage
SetForegroundWindow
BeginPaint
EndPaint
GetForegroundWindow
IsWindowVisible
IsIconic
RegisterApplicationRestart
GetSystemPowerStatus
GetCurrentPackageFamilyName
GetVersion
GetModuleHandleA
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
MultiByteToWideChar
GetFileInformationByHandleEx
CopyFileW
GetTempPathW
SetFileInformationByHandle
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
FindFirstFileW
FindClose
CreateDirectoryW
GetLocaleInfoEx
FormatMessageA
LocalFree
SetSearchPathMode
VerifyVersionInfoW
RtlAnsiStringToUnicodeString
RtlInitAnsiString
RtlFreeUnicodeString
?MessageFromHRESULT@Error@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@J@Z
?ShouldLogInternal@impl@Error@@YA_NW4level_enum@level@spdlog@@@Z
?MessageFromHresultError@Error@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBUhresult_error@winrt@@@Z
?GetLogMessage@impl@Error@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$basic_string_view@_WU?$char_traits@_W@std@@@4@0@Z
?Log@impl@Error@@YAXV?$basic_string_view@_WU?$char_traits@_W@std@@@std@@W4level_enum@level@spdlog@@Usource_location@4@@Z
??$Handle@$04@impl@Error@@YAXV?$basic_string_view@_WU?$char_traits@_W@std@@@std@@0Usource_location@3@@Z
?MessageFromStdErrorCode@Error@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEBVerror_code@3@@Z
??$Handle@$03@impl@Error@@YAXV?$basic_string_view@_WU?$char_traits@_W@std@@@std@@0Usource_location@3@@Z
?GetSink@Log@@SA?AV?$shared_ptr@V?$lazy_file_sink@Vmutex@std@@@@@std@@XZ
?MessageFromErrno@Error@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?Initialize@Log@@SAXAEBV?$optional@Vpath@filesystem@std@@@std@@@Z
?state@?$lazy_file_sink@Vmutex@std@@@@QEAA?AW4lazy_sink_state@@XZ
?HandleCriticalWithErrorInfo@impl@Error@@YAXV?$basic_string_view@_WU?$char_traits@_W@std@@@std@@0Usource_location@4@JPEAUIRestrictedErrorInfo@@@Z
_Query_perf_frequency
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
_Query_perf_counter
?_Winerror_map@std@@YAHH@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
_Thrd_detach
_Wcsxfrm
?id@?$collate@_W@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$ctype@_W@std@@2V0locale@2@A
_Wcscoll
_Cnd_do_broadcast_at_thread_exit
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
??Bid@locale@std@@QEAA_KXZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
_Thrd_join
_Thrd_id
?_Syserror_map@std@@YAPEBDH@Z
?id@?$numpunct@_W@std@@2V0locale@2@A
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Throw_Cpp_error@std@@YAXH@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Mbrtowc
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
_Thrd_yield
__std_atomic_notify_one_direct
__std_atomic_wait_direct
__CxxFrameHandler4
memmove
memcmp
_purecall
__std_terminate
strchr
__C_specific_handler
_CxxThrowException
__current_exception
__std_exception_destroy
__current_exception_context
memcpy
memset
__std_exception_copy
_initterm
_initterm_e
exit
_exit
abort
_c_exit
_register_thread_local_exe_atexit_callback
_initialize_wide_environment
_configure_wide_argv
_invalid_parameter_noinfo
_errno
_set_app_type
_wassert
_invalid_parameter_noinfo_noreturn
_get_wide_winmain_command_line
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_beginthreadex
terminate
malloc
free
_callnewh
_set_new_mode
realloc
calloc
iswspace
fclose
_set_fmode
fread
__p__commode
_wfsopen
__stdio_common_vswprintf
_wfopen_s
fwrite
_fdsign
pow
_dclass
_fdclass
_ldsign
lroundf
_ldclass
__setusermatherr
ceilf
_dsign
_configthreadlocale
GetErrorInfo
SetErrorInfo
SysStringLen
SysFreeString
RoFailFastWithErrorContext
RoTransformError
TrySubmitThreadpoolCallback
RoOriginateLanguageException
RoGetActivationFactory
RoGetAgileReference
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ