Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
10Static
static
10153b116e6...66.vbs
windows7-x64
100153b116e6...66.vbs
windows10-2004-x64
108624e09793...a0.dll
windows7-x64
18624e09793...a0.dll
windows10-2004-x64
3d42ce863d0...be1.js
windows7-x64
1d42ce863d0...be1.js
windows10-2004-x64
1ed7b525ff2...7.xlsx
windows7-x64
1ed7b525ff2...7.xlsx
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
0153b116e6a412cfd8dbf868de5cae3a8b3303c550eba80a0605ad4acfda6c66.vbs
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0153b116e6a412cfd8dbf868de5cae3a8b3303c550eba80a0605ad4acfda6c66.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
8624e09793361dd3a022021a93a17e3b755c256e0a10928b505257bb04f4d5a0.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
8624e09793361dd3a022021a93a17e3b755c256e0a10928b505257bb04f4d5a0.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
d42ce863d02bc970b632e8f6794d433fe059670f1bcd42aaec99bac868d6ebe1.js
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
d42ce863d02bc970b632e8f6794d433fe059670f1bcd42aaec99bac868d6ebe1.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
ed7b525ff2b5d6c2a63878a1d7594b12025f3d7525898adb3c02cb958df09be7.xlsx
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
ed7b525ff2b5d6c2a63878a1d7594b12025f3d7525898adb3c02cb958df09be7.xlsx
Resource
win10v2004-20231215-en
Target
f03875031911049628277314fa9677e7e8fe82c63ed40bf3ac707cbab061c9fe
Size
1.2MB
MD5
0518ebd7124e09461b4297950d6f9763
SHA1
32bc1f4d5706b850c13a9956708ba5c51f0131cb
SHA256
f03875031911049628277314fa9677e7e8fe82c63ed40bf3ac707cbab061c9fe
SHA512
947aa3ff34ddec88a4dcb100059d7540722c87198dbc6152c4d07e8b343e62ae097e8f9a8ac81283fa5fe16e8a1734a449d1bc76232378ad6866db8c039c0bba
SSDEEP
24576:AVok8SQiba4mgMMRLA9CX81k9KfYhAnAkU8oSKp:AKRQLMimCT9KwhAtdQ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
??4CHString@@QAEABV0@PBG@Z
?SetCHString@CInstance@@QAE_NPBGABVCHString@@@Z
?SetVariant@CInstance@@QAE_NPBGABUtagVARIANT@@@Z
?SetStringArray@CInstance@@QAE_NPBGABUtagSAFEARRAY@@@Z
??0CHString@@QAE@XZ
??1CHString@@QAE@XZ
?GetCHString@CInstance@@QBE_NPBGAAVCHString@@@Z
??0CHString@@QAE@PBG@Z
?GetDWORD@CInstance@@QBE_NPBGAAK@Z
?Getbool@CInstance@@QBE_NPBGAA_N@Z
?FrameworkLoginDLL@CWbemProviderGlue@@SGHPBG@Z
?SetCHString@CInstance@@QAE_NPBG0@Z
?Setbool@CInstance@@QAE_NPBG_N@Z
??0CWbemGlueFactory@@QAE@XZ
??BCHString@@QBEPBGXZ
?Compare@CHString@@QBEHPBG@Z
?CreateNewInstance@Provider@@IAEPAVCInstance@@PAVMethodContext@@@Z
?Commit@CInstance@@QAEJXZ
?Release@CInstance@@QAEJXZ
?ValidatePutInstanceFlags@Provider@@MAEJJ@Z
?ValidateDeletionFlags@Provider@@MAEJJ@Z
?ValidateQueryFlags@Provider@@MAEJJ@Z
?ValidateMethodFlags@Provider@@MAEJJ@Z
?ValidateGetObjFlags@Provider@@MAEJJ@Z
?ValidateEnumerationFlags@Provider@@MAEJJ@Z
?Flush@Provider@@MAEXXZ
?GetObject@Provider@@MAEJPAVCInstance@@JAAVCFrameworkQuery@@@Z
?OnFinalRelease@CThreadBase@@MAEXXZ
??0Provider@@QAE@PBG0@Z
??1Provider@@UAE@XZ
?FrameworkLogoffDLL@CWbemProviderGlue@@SGHPBG@Z
??1CWbemGlueFactory@@QAE@XZ
?GetStringArray@CInstance@@QBE_NPBGAAPAUtagSAFEARRAY@@@Z
?SetDWORD@CInstance@@QAE_NPBGK@Z
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
UuidCreate
EnterCriticalPolicySection
RegisterGPNotification
UnregisterGPNotification
LeaveCriticalPolicySection
DecodePointer
GetSystemTimeAsFileTime
GetCommandLineA
HeapSize
HeapQueryInformation
ExitThread
CreateThread
ExitProcess
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
GetStdHandle
HeapCreate
HeapDestroy
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
GetStringTypeW
LCMapStringW
SetHandleCount
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTimeZoneInformation
WriteConsoleW
SetEnvironmentVariableA
FindResourceExW
VirtualProtect
SearchPathW
GetProfileIntW
GetTempPathW
GetTempFileNameW
GetNumberFormatW
GetWindowsDirectoryW
GetCurrentDirectoryW
lstrcpyW
GetUserDefaultUILanguage
InterlockedExchange
FreeResource
GlobalFindAtomW
GlobalDeleteAtom
GlobalAddAtomW
ResumeThread
SetThreadPriority
GlobalFlags
lstrcmpW
GetFileTime
GetFileSizeEx
GetFileAttributesW
FileTimeToLocalFileTime
GetFileAttributesExW
FileTimeToSystemTime
GlobalGetAtomNameW
CompareStringW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
ReleaseActCtx
EncodePointer
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ActivateActCtx
DeactivateActCtx
CreateFileW
GlobalSize
GlobalLock
GlobalUnlock
FormatMessageW
MulDiv
GetEnvironmentVariableW
GetVersion
GetModuleHandleA
lstrcmpA
lstrlenA
GetTickCount
HeapReAlloc
GetLocaleInfoW
OutputDebugStringW
LoadLibraryExW
InterlockedDecrement
GetModuleFileNameW
lstrcmpiW
GetCurrentThread
RaiseException
WaitForMultipleObjects
InterlockedIncrement
ResetEvent
CreateEventW
GetStartupInfoW
GlobalFree
CreateFileMappingW
GlobalAlloc
DisableThreadLibraryCalls
OpenEventW
SetEvent
CreatePipe
CreateProcessW
GetExitCodeProcess
ReadFile
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
InitializeCriticalSectionAndSpinCount
GetSystemDirectoryW
GetCurrentProcess
LocalFree
LocalAlloc
GetProcessHeap
HeapAlloc
HeapFree
CopyFileW
FindFirstFileW
FindNextFileW
FindClose
DeleteFileW
Sleep
GetModuleHandleW
GetVersionExW
LoadLibraryW
lstrlenW
GetProcAddress
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
GetLocalTime
GetCurrentProcessId
GetCurrentThreadId
DeleteCriticalSection
CloseHandle
FindResourceW
LoadResource
LockResource
SizeofResource
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
ReleaseMutex
WaitForSingleObject
CreateMutexW
OpenMutexW
GetLastError
SetLastError
RtlUnwind
GetFullPathNameW
GetWindowRgn
CopyIcon
RegisterClipboardFormatW
GetUpdateRect
FrameRect
IsClipboardFormatAvailable
SetMenuDefaultItem
CreateMenu
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
WaitMessage
PostThreadMessageW
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
IsMenu
MonitorFromPoint
UpdateLayeredWindow
UnionRect
MapVirtualKeyExW
IsCharLowerW
DestroyCursor
CloseClipboard
SetClipboardData
OpenClipboard
GetKeyNameTextW
LockWindowUpdate
BringWindowToTop
SetCursorPos
SetRect
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CopyAcceleratorTableW
DrawFrameControl
DrawEdge
DrawStateW
GetSystemMenu
LoadMenuW
SetClassLongW
WindowFromPoint
DestroyAcceleratorTable
SetParent
SetWindowRgn
IsZoomed
DrawIconEx
GetNextDlgGroupItem
LoadImageW
GetIconInfo
OffsetRect
MessageBeep
NotifyWinEvent
EnableScrollBar
HideCaret
DrawFocusRect
InvertRect
ReleaseCapture
GetAsyncKeyState
SetCapture
MapVirtualKeyW
IsRectEmpty
CreatePopupMenu
GetMenuDefaultItem
KillTimer
SetTimer
InvalidateRect
DeleteMenu
ShowOwnedPopups
SetCursor
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
CopyImage
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
PostQuitMessage
IsIconic
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
DrawIcon
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
SetForegroundWindow
ShowScrollBar
RedrawWindow
UpdateWindow
GetClientRect
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcW
CallWindowProcW
GetMenu
GetScrollPos
SetScrollPos
DestroyIcon
SetWindowsHookExW
CallNextHookEx
MapDialogRect
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
IntersectRect
InflateRect
CopyRect
GetDesktopWindow
RealChildWindowFromPoint
GetWindowRect
GetClassNameW
PtInRect
GetFocus
SetFocus
SetWindowPos
ShowWindow
MoveWindow
SetWindowLongW
GetDlgCtrlID
IsWindow
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
GetDlgItem
CheckDlgButton
GetWindow
GetWindowTextLengthW
GetWindowTextW
LoadCursorW
GetSysColorBrush
GetWindowThreadProcessId
SendMessageW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
UnhookWindowsHookEx
CharUpperW
GetSystemMetrics
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
CharLowerW
LoadStringW
CharNextW
SubtractRect
GetDoubleClickTime
GetTopWindow
CharUpperBuffW
GetScrollRange
EmptyClipboard
EnumFontFamiliesW
GetTextCharsetInfo
GetBkColor
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
GetTextColor
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
OffsetRgn
GetRgnBox
EnumFontFamiliesExW
GetTextMetricsW
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
CreateSolidBrush
FrameRgn
SelectPalette
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceW
GetStockObject
CreateCompatibleDC
CreateBitmap
CreateDIBitmap
CreateCompatibleBitmap
GetTextExtentPoint32W
DPtoLP
PatBlt
CreateHatchBrush
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateFontIndirectW
LPtoDP
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
CreatePen
GetObjectType
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetPixel
BitBlt
GetWindowExtEx
GetViewportExtEx
GetObjectW
CreateRectRgn
SelectClipRgn
DeleteObject
SetLayout
GetLayout
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetTextColor
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateDCW
CopyMetaFileW
FillRgn
GetDeviceCaps
AlphaBlend
TransparentBlt
GetFileTitleW
SetPrinterDataExW
GetPrinterDataExW
EnumPrinterDataExW
EnumPrinterKeyW
OpenPrinterW
GetPrinterW
AddPrinterDriverW
ClosePrinter
GetPrinterDriverDirectoryW
EnumPrinterDriversW
XcvDataW
SetPrinterDataW
EnumPortsW
GetPrinterDataW
DeletePrinter
EnumPrintersW
DeletePrinterDriverExW
AddPrinterW
DocumentPropertiesW
SetPrinterW
GetUserNameW
RegOpenKeyA
RegQueryValueExA
RegCreateKeyW
LockServiceDatabase
UnlockServiceDatabase
ControlService
OpenSCManagerW
OpenServiceW
CloseServiceHandle
StartServiceW
QueryServiceStatus
GetSecurityDescriptorDacl
GetAclInformation
AddAce
EqualSid
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
AddAccessAllowedAce
GetAce
IsValidSecurityDescriptor
SetSecurityInfo
RegEnumValueW
RegEnumKeyExW
RegQueryInfoKeyW
OpenThreadToken
LookupAccountSidW
RegDeleteKeyW
SetServiceStatus
CreateProcessAsUserW
OpenProcessToken
GetTokenInformation
CopySid
ConvertSidToStringSidW
AllocateAndInitializeSid
GetLengthSid
FreeSid
LookupAccountNameW
SetEntriesInAclW
InitializeAcl
RegSetValueExW
RegDeleteValueW
RegOpenKeyExW
RegCreateKeyExW
RegisterEventSourceW
ReportEventW
DeregisterEventSource
RegOpenKeyW
RegQueryValueExW
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SHGetFileInfoW
SHGetDesktopFolder
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteW
SHBrowseForFolderW
DragFinish
DragQueryFileW
SHAppBarMessage
ImageList_GetIconSize
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathRemoveFileSpecW
PathIsUNCW
DoDragDrop
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
CreateStreamOnHGlobal
CoInitializeEx
CoUninitialize
OleDuplicateData
ReleaseStgMedium
CoSetProxyBlanket
CoInitialize
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
OleCreateMenuDescriptor
CLSIDFromString
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
SysStringLen
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
SysAllocString
LoadRegTypeLi
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SysAllocStringLen
SafeArrayPutElement
SafeArrayCreate
VariantCopy
VariantClear
VarUI4FromStr
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SysFreeString
VariantChangeType
SafeArrayGetElement
SafeArrayDestroy
VariantInit
CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
PlaySoundW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
TPACRegister
TPACUnregister
TPADLLAddPrinter
TPADLLAddPrinterObject
TPADLLDbgMessage
TPADLLDelPrinter
TPADLLEnumPrinters
TPADLLGetVersion
TPADLLLoadTranslationList
TPADLLQueryTimeOutValue
TPADLLRepair
TPADLLRunMain
TPADLLServiceStoped
TPADLLTranslate
TSEventDisconnect
TSEventLogoff
TSEventLogon
TSEventReconnect
TSEventShutdown
TSEventStartup
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ