Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
e05b5a60976dde4c7a4f3714650f1174.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e05b5a60976dde4c7a4f3714650f1174.dll
Resource
win10v2004-20240226-en
Target
e05b5a60976dde4c7a4f3714650f1174
Size
540KB
MD5
e05b5a60976dde4c7a4f3714650f1174
SHA1
d05d744a947c8e79ac756eb5747b9e3c50cce4de
SHA256
f170657d1304a5c7c05846191b96e7b44fb1377d580cb06ed0955c9b2629ac0f
SHA512
e89c56b0bc8d60a6437f47c9899451b8003cf2fa21dafd1041f6a80d36b0c8d9a3cdae9c43cc897b1ab031f3a059c4eb3c83091f9520489137c3ba818bfb441d
SSDEEP
12288:DYf6CrCzh10WwgBrTE5oOa8szkLGNQ4RFtLFVALltqjIhdXUHuG+h:Uf6CGzD0BgiTafgKQ4RFtLFVoNUOG+h
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord3626
ord2414
ord1641
ord2859
ord3361
ord326
ord2167
ord5232
ord1567
ord2393
ord3797
ord2147
ord1180
ord268
ord1568
ord5268
ord1229
ord1175
ord5651
ord3127
ord3616
ord2917
ord1979
ord2803
ord958
ord6312
ord4177
ord6385
ord5442
ord3318
ord6010
ord5773
ord2601
ord3180
ord3183
ord3176
ord3507
ord3614
ord665
ord350
ord354
ord5208
ord5186
ord6264
ord6141
ord713
ord414
ord6140
ord6662
ord5859
ord940
ord859
ord3984
ord640
ord2405
ord2754
ord5785
ord2860
ord1640
ord323
ord5875
ord3619
ord3402
ord3721
ord795
ord755
ord470
ord3571
ord5787
ord284
ord3089
ord3610
ord656
ord2784
ord465
ord2575
ord4396
ord3574
ord6374
ord6880
ord5631
ord536
ord1572
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord3706
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord4837
ord5714
ord4622
ord3738
ord561
ord815
ord1134
ord1199
ord1247
ord1232
ord2725
ord6467
ord6779
ord6876
ord551
ord6778
ord3790
ord690
ord1988
ord5356
ord5207
ord6059
ord389
ord6869
ord861
ord3178
ord4204
ord1158
ord3010
ord3304
ord3310
ord6021
ord3698
ord765
ord1768
ord6380
ord2688
ord6379
ord4476
ord2135
ord1949
ord4034
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord2107
ord6383
ord5440
ord2841
ord6394
ord5450
ord398
ord5632
ord3439
ord700
ord6883
ord2764
ord341
ord654
ord5645
ord413
ord4168
ord858
ord6302
ord711
ord924
ord356
ord2770
ord2781
ord4058
ord3181
ord4202
ord6877
ord1980
ord668
ord539
ord3811
ord537
ord922
ord5710
ord6282
ord6283
ord4278
ord2763
ord6663
ord1200
ord4189
ord4224
ord5593
ord3438
ord941
ord939
ord397
ord4188
ord912
ord699
ord913
ord3646
ord857
ord2614
ord5594
ord6215
ord324
ord518
ord785
ord1775
ord4853
ord6605
ord4710
ord6197
ord4284
ord6199
ord4234
ord2302
ord641
ord3597
ord4425
ord5280
ord6052
ord2514
ord4998
ord4376
ord5265
ord5861
ord5858
ord860
ord5683
ord4129
ord4277
ord2379
ord6453
ord4275
ord818
ord567
ord3742
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord5199
ord4441
ord1116
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord3798
ord5290
ord5289
ord4353
ord541
ord6143
ord535
ord3337
ord801
ord2818
ord1105
ord823
ord2864
ord2086
ord803
ord543
ord540
ord2915
ord5572
ord800
ord3663
ord3584
ord609
ord825
_adjust_fdiv
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
sqrt
sprintf
strncmp
malloc
free
atof
isalnum
tolower
qsort
strlen
abs
strtoul
_purecall
_except_handler3
strcpy
isdigit
fopen
fseek
ftell
fclose
fread
strtol
_ftol
memmove
memcpy
strstr
strncpy
strcat
memset
_mbsicmp
_mbscmp
atol
atoi
__CxxFrameHandler
_CxxThrowException
_strnicmp
LocalFree
GlobalLock
GlobalUnlock
MulDiv
SizeofResource
GetVersion
GetFileAttributesA
SetFileAttributesA
CreateProcessA
GetExitCodeProcess
RemoveDirectoryA
GetVersionExA
QueryPerformanceFrequency
QueryPerformanceCounter
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
GetFileAttributesExA
GetShortPathNameA
MoveFileA
WideCharToMultiByte
ExpandEnvironmentStringsA
TerminateProcess
GetCurrentDirectoryA
SetCurrentDirectoryA
LoadLibraryA
FreeLibrary
OpenProcess
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
ReadProcessMemory
VirtualFreeEx
GetExitCodeThread
GlobalAlloc
GlobalFree
GetLastError
LockResource
FindResourceA
LoadResource
CreateDirectoryA
GetPrivateProfileIntA
SetFilePointer
WriteFile
ReadFile
HeapFree
GetProcessHeap
HeapAlloc
CreateFileA
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GetCurrentProcessId
OutputDebugStringA
GetCurrentProcess
DuplicateHandle
TerminateThread
MultiByteToWideChar
GetPrivateProfileStringA
lstrcpyA
lstrcatA
GetTickCount
WritePrivateProfileStringA
lstrcmpiA
Sleep
DeleteFileA
ResetEvent
SetEvent
EnterCriticalSection
LeaveCriticalSection
ResumeThread
WaitForSingleObject
lstrlenA
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
GetModuleHandleA
GetModuleFileNameA
CreateEventA
GetProcAddress
LocalAlloc
IsWindowEnabled
GetActiveWindow
SetActiveWindow
LoadMenuA
GetSubMenu
TrackPopupMenu
LoadCursorA
SetCursor
ClientToScreen
GetParent
ScreenToClient
UpdateWindow
PeekMessageA
GetSysColor
OffsetRect
CopyRect
UnionRect
ValidateRect
SendMessageA
IsWindow
wsprintfA
CopyImage
IsRectEmpty
SetClassLongA
GetClassLongA
GetClassInfoA
FindWindowA
RegisterWindowMessageA
GetWindowLongA
GetMonitorInfoA
MonitorFromPoint
LoadIconA
wvsprintfA
InvalidateRect
WindowFromPoint
SetWindowTextA
GetWindowTextA
GetClassNameA
KillTimer
IsWindowVisible
SetParent
GetDesktopWindow
PostMessageA
SetWindowLongA
EnumChildWindows
keybd_event
SetFocus
SetWindowPos
CallWindowProcA
SetWindowRgn
GetWindowRect
PtInRect
GetCursorPos
FindWindowExA
MessageBoxA
EnableWindow
ReleaseDC
GetDC
GetSystemMetrics
SetTimer
GetClientRect
CombineRgn
CreateRectRgn
CreateRoundRectRgn
DeleteObject
GetObjectA
GetTextMetricsA
GetTextExtentPoint32A
StretchBlt
CreateCompatibleDC
CreateFontA
GetDeviceCaps
BitBlt
PatBlt
CreateCompatibleBitmap
EnumFontFamiliesA
CreateBitmap
GetMapMode
GetStockObject
GetOpenFileNameA
GetSidSubAuthorityCount
GetSidIdentifierAuthority
RegGetKeySecurity
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAce
InitializeAcl
AllocateAndInitializeSid
RegQueryInfoKeyA
RegSetKeySecurity
EnumServicesStatusA
RegQueryValueExA
RegOpenKeyA
RegQueryValueA
RegOpenKeyExA
CloseServiceHandle
DeleteService
GetSidSubAuthority
OpenProcessToken
GetTokenInformation
GetLengthSid
CopySid
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
RegSetValueA
RegCreateKeyA
RegSetValueExA
OpenSCManagerA
OpenServiceA
QueryServiceStatus
QueryServiceConfigA
ControlService
RegCloseKey
SHGetSpecialFolderPathA
ord680
SHGetDesktopFolder
ShellExecuteA
_TrackMouseEvent
OleInitialize
CreateStreamOnHGlobal
ord251
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElement
SafeArrayDestroy
SysAllocString
VariantClear
SysAllocStringLen
SysFreeString
URLDownloadToCacheFileA
UuidCreate
RpcStringFreeA
UuidToStringA
FindFirstUrlCacheEntryA
DeleteUrlCacheEntry
InternetCloseHandle
FindNextUrlCacheEntryA
FindCloseUrlCache
InternetOpenA
InternetSetOptionA
InternetConnectA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetGetCookieA
InternetSetCookieA
InternetCrackUrlA
GetAdaptersInfo
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
MakeSureDirectoryPathExists
ord23
ord22
ord20
AccessibleObjectFromWindow
ImmReleaseContext
ImmGetContext
ImmNotifyIME
SHDeleteKeyA
GetModuleFileNameExA
BeforeNavigate2
ConnectBrowser
DocumentComplete
GetUserSetting
HookIEAddressBar
IsReady
IsUserSettingItem
NSIS_Base64Decoding
NSIS_Base64Encoding
NSIS_CheckSetupExist
NSIS_CleanAppDatas
NSIS_CleanOldFiles
NSIS_GetInstalledBHOVersion
NSIS_GetInstalledDRVersion
NSIS_HttpNotify
NSIS_IsPatchStartible
NSIS_ModuleCheck
NSIS_PatchNotify
NSIS_RemoveNotify
NSIS_SetAutoContent
NSIS_SetupAdditionals
NSIS_SetupNotify
NSIS_SetupTryNotify
NSIS_SetupVersionCheck
NSIS_ShowDetailPopup
NSIS_URLEncodedMacAddress
NSIS_URLEncoding
Nad_Test
NavigateBrowser
NavigateComplete2
NavigateDialog
NewWindow2
NewWindow3
OnAddressBar
OnMenuBar
OnToolBar
Quit
SetUserSetting
SetUserSettingItem
SetupRegisterServer
SetupUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ