Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
3a723e93a9af9286ceb204b61184f4b27e10e49fe5b9c6248fe33a03705e97bc.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3a723e93a9af9286ceb204b61184f4b27e10e49fe5b9c6248fe33a03705e97bc.dll
Resource
win10v2004-20240412-en
Target
3a723e93a9af9286ceb204b61184f4b27e10e49fe5b9c6248fe33a03705e97bc
Size
36KB
MD5
95b26f6aa5f1c709a52ec762d372adce
SHA1
1cd041ad3ce70b87270d7186ad31879408c27818
SHA256
3a723e93a9af9286ceb204b61184f4b27e10e49fe5b9c6248fe33a03705e97bc
SHA512
be34d7d7923b5cbeb27fe89bbc40092583df4f337c536a0cdb2acac894c35ad65cbe2e713b9001851adc31128b6b51728f5b3834916f6469e2e758375f7a59c0
SSDEEP
768:GssjtO5dY4GmkVDdTQQqbddc8aTZuRp//pp/EEw9IdY8pcwJb4B4BzaQ9wgbZ0zN:Gd1UJMI5ZWLUnTG
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
@System@initialization$qqrv
@System@Finalization$qqrv
@System@@IntfCast$qqrr45System@%DelphiInterface$t17System@IInterface%x45System@%DelphiInterface$t17System@IInterface%rx5_GUID
@System@@IntfCopy$qqrr45System@%DelphiInterface$t17System@IInterface%x45System@%DelphiInterface$t17System@IInterface%
@System@@IntfClear$qqrr45System@%DelphiInterface$t17System@IInterface%
@System@UnregisterModule$qqrp17System@TLibModule
@System@RegisterModule$qqrp17System@TLibModule
@System@@FinalizeArray$qqrpvt1ui
@System@@UStrEqual$qqrv
@System@@UStrFromWStr$qqrr20System@UnicodeStringx17System@WideString
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrArrayClr$qqrpvi
@System@@UStrClr$qqrpv
@System@@RunError$qqruc
@System@@PackageUnload$qqrxp23System@PackageInfoTablep17System@TLibModule
@System@@PackageLoad$qqrxp23System@PackageInfoTablep17System@TLibModule
@System@@RaiseExcept$qqrv
@System@@HandleAutoException$qqrv
@System@@HandleFinally$qqrv
@System@@BeforeDestruction$qqrxp14System@TObjectzc
@System@@AfterConstruction$qqrxp14System@TObject
@System@@ClassDestroy$qqrxp14System@TObject
@System@@ClassCreate$qqrpvzc
@System@TObject@Dispatch$qqrpv
@System@TObject@AfterConstruction$qqrv
@System@TObject@DefaultHandler$qqrpv
@System@TObject@ToString$qqrv
@System@TObject@GetHashCode$qqrv
@System@TObject@Equals$qqrp14System@TObject
@System@TObject@Free$qqrv
@System@TObject@$bctr$qqrv
@System@TObject@FreeInstance$qqrv
@System@TObject@NewInstance$qqrv
@$xp$17System@IInterface
@$xp$20System@WeakAttribute
@$xp$14System@TObject
@$xp$7HRESULT
@$xp$17System@OleVariant
@$xp$13System@string
@$xp$7Pointer
@$xp$7Boolean
@System@Internal@Excutils@initialization$qqrv
@System@Internal@Excutils@Finalization$qqrv
@System@Sysutils@initialization$qqrv
@System@Sysutils@Finalization$qqrv
@System@Sysutils@TOSVersion@$bcctr$qqrv
@System@Sysutils@TEncoding@$bcdtr$qqrv
@System@Sysutils@TLanguages@$bcdtr$qqrv
@System@Sysutils@Exception@$bcdtr$qqrv
@System@Sysutils@Exception@$bcctr$qqrv
@System@Sysutils@Exception@$bctr$qqrp20System@TResStringRecpx14System@TVarRecxi
@System@Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxi
@System@Sysutils@IsEqualGUID$qqrrx5_GUIDt1
@System@Sysutils@TOSVersion@$bcdtr$qqrv
@System@Sysutils@TEncoding@$bcctr$qqrv
@System@Sysutils@Exception@
@System@Sysutils@TLanguages@$bcctr$qqrv
@System@Varutils@initialization$qqrv
@System@Varutils@Finalization$qqrv
@System@Variants@initialization$qqrv
@System@Variants@Finalization$qqrv
@System@Variants@Null$qqrv
@System@Variants@@VarAddRef$qqrr8TVarData
@System@Variants@@VarFromDisp$qqrr8TVarDatax36System@%DelphiInterface$t9IDispatch%
@System@Variants@@VarCopy$qqrr8TVarDatarx8TVarData
@System@Variants@@VarClr$qqrr8TVarData
@System@Ansistrings@initialization$qqrv
@System@Ansistrings@Finalization$qqrv
@System@Math@initialization$qqrv
@System@Math@Finalization$qqrv
@System@Timespan@TTimeSpan@$bcctr$qqrv
@System@Timespan@TTimeSpan@$bcdtr$qqrv
@System@Syncobjs@initialization$qqrv
@System@Syncobjs@Finalization$qqrv
@System@Generics@Defaults@TIStringComparer@$bcdtr$qqrv
@System@Generics@Defaults@TStringComparer@$bcdtr$qqrv
@System@Generics@Defaults@TIStringComparer@$bcctr$qqrv
@System@Generics@Defaults@TStringComparer@$bcctr$qqrv
@System@Rtti@initialization$qqrv
@System@Rtti@Finalization$qqrv
@System@Typinfo@initialization$qqrv
@System@Typinfo@Finalization$qqrv
@System@Classes@initialization$qqrv
@System@Classes@Finalization$qqrv
@System@Classes@TObserverMapping@$bcdtr$qqrv
@System@Classes@TLoginCredentialService@$bcdtr$qqrv
@System@Classes@TLoginCredentialService@$bcctr$qqrv
@System@Classes@TBinaryWriter@$bcdtr$qqrv
@System@Classes@TComponent@Invoke$qqsirx5_GUIDiuspvt5t5t5
@System@Classes@TComponent@GetIDsOfNames$qqsrx5_GUIDpviit2
@System@Classes@TComponent@GetTypeInfo$qqsiipv
@System@Classes@TComponent@GetTypeInfoCount$qqsri
@System@Classes@TComponent@_Release$qqsv
@System@Classes@TComponent@_AddRef$qqsv
@System@Classes@TComponent@QueryInterface$qqsrx5_GUIDpv
@System@Classes@TComponent@UpdateRegistry$qqrox20System@UnicodeStringt2
@System@Classes@TComponent@ObserverAdded$qqrxix52System@%DelphiInterface$t24System@Classes@IObserver%
@System@Classes@TComponent@CanObserve$qqrxi
@System@Classes@TComponent@UpdateAction$qqrp27System@Classes@TBasicAction
@System@Classes@TComponent@GetObservers$qqrv
@System@Classes@TComponent@SetName$qqrx20System@UnicodeString
@System@Classes@TComponent@$bcctr$qqrv
@System@Classes@TComponent@ValidateRename$qqrp25System@Classes@TComponentx20System@UnicodeStringt2
@System@Classes@TComponent@WriteState$qqrp22System@Classes@TWriter
@System@Classes@TComponent@ReadState$qqrp22System@Classes@TReader
@System@Classes@TComponent@DefineProperties$qqrp21System@Classes@TFiler
@System@Classes@TComponent@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation
@System@Classes@TComponent@RemoveFreeNotification$qqrp25System@Classes@TComponent
@System@Classes@TComponent@FreeNotification$qqrp25System@Classes@TComponent
@System@Classes@TComponent@BeforeDestruction$qqrv
@System@Classes@TThread@$bcdtr$qqrv
@System@Classes@TThread@$bcctr$qqrv
@System@Classes@TPersistent@AssignTo$qqrp26System@Classes@TPersistent
@System@Classes@TPersistent@Assign$qqrp26System@Classes@TPersistent
@System@Classes@TBinaryWriter@$bcctr$qqrv
@$xp$25System@Classes@TComponent
@System@Classes@TComponent@$bcdtr$qqrv
@System@Classes@TObserverMapping@$bcctr$qqrv
@$xp$25System@Classes@TOperation
@System@Dateutils@TTimeZone@$bcdtr$qqrv
@System@Dateutils@TTimeZone@$bcctr$qqrv
@System@Win@Comobj@initialization$qqrv
@System@Win@Comobj@Finalization$qqrv
@System@Win@Comobj@TComServerObject@$bcctr$qqrv
@System@Win@Comobj@HandleSafeCallException$qqrp14System@TObjectpvrx5_GUIDx17System@WideStringt4
@System@Win@Comobj@TComServerObject@$bcdtr$qqrv
@System@Ioutils@initialization$qqrv
@System@Ioutils@Finalization$qqrv
@System@Ioutils@TPath@$bcctr$qqrv
@System@Ioutils@TPath@$bcdtr$qqrv
@System@Win@Registry@TRegistry@$bcctr$qqrv
@System@Win@Registry@TRegistry@$bcdtr$qqrv
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
GetVersionExW
FreeLibrary
@Data@Sqltimst@initialization$qqrv
@Data@Sqltimst@Finalization$qqrv
@Data@Fmtbcd@initialization$qqrv
@Data@Fmtbcd@Finalization$qqrv
@Data@Db@initialization$qqrv
@Data@Db@Finalization$qqrv
@Data@Db@TCustomConnection@GetDataSetCount$qqrv
@Data@Db@TCustomConnection@GetDataSet$qqri
@Data@Db@TCustomConnection@UnRegisterClient$qqrp14System@TObject
@Data@Db@TCustomConnection@RegisterClient$qqrp14System@TObjectynpqqrp14System@TObjecto$v
@Data@Db@TCustomConnection@SetConnected$qqro
@Data@Db@TCustomConnection@Loaded$qqrv
@Data@Db@TCustomConnection@$bdtr$qqrv
@Datasnap@Dsintf@initialization$qqrv
@Datasnap@Dsintf@Finalization$qqrv
@$xp$25Datasnap@Midas@IAppServer
@Datasnap@Dbclient@TCustomRemoteServer@SetAppServer$qqrrx14System@Variant
@Datasnap@Dbclient@TCustomRemoteServer@GetAppServer$qqrv
@Datasnap@Dbclient@TCustomRemoteServer@GetProviderNames$qqrynpqqrx20System@UnicodeString$v
@Datasnap@Dbclient@TCustomRemoteServer@GetServerList$qqrv
@Datasnap@Dbclient@TCustomRemoteServer@$bctr$qqrp25System@Classes@TComponent
@$xp$37Datasnap@Dbclient@TCustomRemoteServer
@Datasnap@Dbclient@TCustomRemoteServer@
@Data@Dbxclassregistry@initialization$qqrv
@Data@Dbxclassregistry@Finalization$qqrv
@Data@Dsutil@StrListToVarArray$qqrx20System@UnicodeStringr17System@OleVariant
@Data@Dbxcommon@initialization$qqrv
@Data@Dbxcommon@Finalization$qqrv
@Data@Dbxcommon@TDBXConnectionFactory@$bcdtr$qqrv
@Data@Dbxcommon@TDBXConnectionFactory@$bcctr$qqrv
@$xp$26Data@Dbxcommon@TDBXCommand
@Data@Dbxjsonreflect@TJSONConverters@$bcdtr$qqrv
@Data@Dbxjsonreflect@TJSONConverters@$bcctr$qqrv
@Data@Sqlexpr@TSQLConnection@RemoveConnectNotification$qqrp14System@TObject
@Data@Sqlexpr@TSQLConnection@AddConnectNotification$qqrp14System@TObjectynpqqrp14System@TObjecto$v
@$xp$27Data@Sqlexpr@TSQLConnection
@Data@Dbxclientresstrs@_SMissingServerSettings
@$xp$40Datasnap@Dsconnect@TDSProviderConnection
@Datasnap@Dsconnect@Finalization$qqrv
@Datasnap@Dsconnect@TDSProviderConnection@
@Datasnap@Dsconnect@TDSProviderConnection@$bctr$qqrp25System@Classes@TComponent
@Datasnap@Dsconnect@TDSProviderConnection@$bdtr$qqrv
@Datasnap@Dsconnect@TDSProviderConnection@AS_ApplyUpdates$qqsx17System@WideStringx17System@OleVariantirir17System@OleVariantt5
@Datasnap@Dsconnect@TDSProviderConnection@AS_DataRequest$qqsx17System@WideStringx17System@OleVariantr17System@OleVariant
@Datasnap@Dsconnect@TDSProviderConnection@AS_Execute$qqsx17System@WideStringt1r17System@OleVariantt3
@Datasnap@Dsconnect@TDSProviderConnection@AS_GetParams$qqsx17System@WideStringr17System@OleVariantt2
@Datasnap@Dsconnect@TDSProviderConnection@AS_GetProviderNames$qqsr17System@OleVariant
@Datasnap@Dsconnect@TDSProviderConnection@AS_GetRecords$qqsx17System@WideStringiriit1r17System@OleVariantt6t6
@Datasnap@Dsconnect@TDSProviderConnection@AS_RowRequest$qqsx17System@WideStringx17System@OleVariantir17System@OleVariantt4
@Datasnap@Dsconnect@TDSProviderConnection@ConnectChange$qqrp14System@TObjecto
@Datasnap@Dsconnect@TDSProviderConnection@DoConnect$qqrv
@Datasnap@Dsconnect@TDSProviderConnection@DoDisconnect$qqrv
@Datasnap@Dsconnect@TDSProviderConnection@FreeCommands$qqrv
@Datasnap@Dsconnect@TDSProviderConnection@GetCommandObject$qqrx20System@UnicodeString
@Datasnap@Dsconnect@TDSProviderConnection@GetConnected$qqrv
@Datasnap@Dsconnect@TDSProviderConnection@GetDBXConnection$qqrv
@Datasnap@Dsconnect@TDSProviderConnection@GetServer$qqrv
@Datasnap@Dsconnect@TDSProviderConnection@InterfaceSupportsErrorInfo$qqsrx5_GUID
@Datasnap@Dsconnect@TDSProviderConnection@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation
@Datasnap@Dsconnect@TDSProviderConnection@SafeCallException$qqrp14System@TObjectpv
@Datasnap@Dsconnect@TDSProviderConnection@SetConnected$qqro
@Datasnap@Dsconnect@TDSProviderConnection@SetSQLConnection$qqrxp27Data@Sqlexpr@TSQLConnection
@Datasnap@Dsconnect@TDSProviderConnection@SetServerClassName$qqrx20System@UnicodeString
@Datasnap@Dsconnect@initialization$qqrv
@Datasnapproviderclient@@GetPackageInfoTable$qqrv
@Datasnapproviderclient@@PackageLoad$qqrv
@Datasnapproviderclient@@PackageUnload$qqrv
@Datasnapproviderclient@initialization$qqrv
@GetPackageInfoTable
Finalize
Initialize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ